@evalops/maestro 0.10.8 → 0.10.11

package/dist/server/handlers/chat.js

@@ -20,41 +20,48 @@
  * - Session persistence with auto-initialization
  * - Approval mode configuration via headers
  */
+import { isAssistantMessage } from "../../agent/type-guards.js";
 import { runUserPromptWithRecovery } from "../../agent/user-prompt-runtime.js";
 import { dispatchAgentNotification } from "../../hooks/notification-hooks.js";
 import { createSessionHookService } from "../../hooks/session-integration.js";
 import { withMcpPostKeepMessages } from "../../mcp/prompt-recovery.js";
 import { createAutomaticMemoryConsolidationCoordinator, getMemoryConsolidationSystemPrompt, } from "../../memory/auto-consolidation.js";
 import { createAutomaticMemoryExtractionCoordinator } from "../../memory/auto-extraction.js";
-import { createLogger } from "../../utils/logger.js";
-const logger = createLogger("web:chat");
-function getComposerTextContent(content) {
-    if (typeof content === "string")
-        return content;
-    if (!Array.isArray(content))
-        return "";
-    return content
-        .filter((block) => block.type === "text")
-        .map((block) => block.text)
-        .join("");
-}
+import { recordComplianceAssistantAction, recordComplianceToolAction, } from "../../services/compliance/recorder.js";
+import { recordIntelligentRouterChatMetric, selectIntelligentRouterModel, } from "../../services/intelligent-router/recorder.js";
+import { recordAssistantUsageMetric } from "../../services/usage-analytics/recorder.js";
+import { evaluateModelPolicy } from "../../services/workspace-config/policy.js";
 import { toSessionModelMetadata } from "../../session/manager.js";
 import { createRuntimeSessionSummaryUpdater } from "../../session/runtime-summary-updater.js";
 import { recordSseSkip } from "../../telemetry.js";
+import { createLogger } from "../../utils/logger.js";
 import { normalizeApprovalMode, resolveApprovalModeForRequest, } from "../approval-mode-store.js";
 import { WebActionApprovalService } from "../approval-service.js";
 import { publishArtifactUpdate } from "../artifacts-live-reload.js";
 import { getAuthSubject } from "../authz.js";
 import { getAgentCircuitBreaker } from "../circuit-breaker.js";
 import { clientToolService } from "../client-tools-service.js";
+import { isHostedSessionManager } from "../hosted-session-manager.js";
+import { getWorkspaceConfigContext } from "../request-context.js";
 import { serverRequestManager } from "../server-request-manager.js";
 import { getRequestHeader, respondWithApiError, sendJson, } from "../server-utils.js";
 import { startSessionWithPolicy } from "../session-initialization.js";
-import { createSessionManagerForRequest } from "../session-scope.js";
+import { createWebSessionManagerForRequest } from "../session-scope.js";
 import { convertComposerMessagesToApp } from "../session-serialization.js";
 import { SseSession, sendSSE, sendSessionUpdate } from "../sse-session.js";
 import { ServerRequestToolRetryService } from "../tool-retry-service.js";
 import { ChatRequestSchema, parseAndValidateJson, } from "../validation.js";
+const logger = createLogger("web:chat");
+function getComposerTextContent(content) {
+    if (typeof content === "string")
+        return content;
+    if (!Array.isArray(content))
+        return "";
+    return content
+        .filter((block) => block.type === "text")
+        .map((block) => block.text)
+        .join("");
+}
 /**
  * Handle an incoming chat request.
  *
@@ -178,19 +185,69 @@ export async function handleChat(req, res, context) {
         }
         // ===== Phase 3: Session and Agent Setup =====
         // Create session manager (false = don't auto-initialize from disk)
-        const sessionManager = createSessionManagerForRequest(req, false);
+        const sessionManager = createWebSessionManagerForRequest(req, false);
         const subject = getAuthSubject(req);
         // Resume existing session if sessionId provided
         let existingSessionLoaded = false;
         if (chatReq.sessionId) {
-            const sessionFile = sessionManager.getSessionFileById(chatReq.sessionId);
-            if (sessionFile) {
-                sessionManager.setSessionFile(sessionFile);
-                existingSessionLoaded = true;
+            if (isHostedSessionManager(sessionManager)) {
+                existingSessionLoaded = await sessionManager.resumeSession(chatReq.sessionId);
             }
+            else {
+                const sessionFile = sessionManager.getSessionFileById(chatReq.sessionId);
+                if (sessionFile) {
+                    sessionManager.setSessionFile(sessionFile);
+                    existingSessionLoaded = true;
+                }
+            }
+        }
+        // Resolve model from registry through the intelligent router. With no history,
+        // this preserves the caller's requested model; with enough data or overrides,
+        // it can select a better-scoring model and expose explicit fallbacks.
+        const routingSelection = selectIntelligentRouterModel({
+            req,
+            requestedModel: chatReq.model,
+            body: chatReq,
+        });
+        let registeredModel;
+        let lastModelError;
+        let selectedModelError;
+        let selectedModelPolicyViolation = null;
+        for (const [index, modelInput] of routingSelection.modelInputs.entries()) {
+            try {
+                const candidateModel = await getRegisteredModel(modelInput);
+                const violation = evaluateModelPolicy(getWorkspaceConfigContext()?.config, {
+                    provider: candidateModel.provider,
+                    modelId: candidateModel.id,
+                });
+                if (violation) {
+                    if (index === 0) {
+                        selectedModelPolicyViolation = violation;
+                    }
+                    continue;
+                }
+                registeredModel = candidateModel;
+                break;
+            }
+            catch (error) {
+                lastModelError = error;
+                if (index === 0) {
+                    selectedModelError = error;
+                }
+            }
+        }
+        if (!registeredModel && selectedModelPolicyViolation) {
+            sendJson(res, 403, {
+                error: selectedModelPolicyViolation.message,
+                code: selectedModelPolicyViolation.code,
+                workspaceId: selectedModelPolicyViolation.workspaceId,
+            }, cors, req);
+            return;
+        }
+        if (!registeredModel) {
+            throw selectedModelError ?? lastModelError;
         }
-        // Resolve model from registry
-        const registeredModel = await getRegisteredModel(chatReq.model);
+        const routeStartedAt = Date.now();
         // Parse approval mode from request header (allows per-request override)
         const headerApproval = normalizeApprovalMode(getRequestHeader(req, "x-composer-approval-mode", "x-maestro-approval-mode") ?? undefined);
         const effectiveApproval = resolveApprovalModeForRequest({
@@ -256,11 +313,11 @@ export async function handleChat(req, res, context) {
         // Subscribe to agent events and forward them to the SSE stream
         // Pre-load enterprise context for session tracking
         const { enterpriseContext } = await import("../../enterprise/context.js");
-        const initializeSessionIfNeeded = () => {
+        const initializeSessionIfNeeded = async () => {
             if (existingSessionLoaded || sessionManager.isInitialized()) {
                 return null;
             }
-            const initializationError = startSessionWithPolicy({
+            const initializationError = await startSessionWithPolicy({
                 agent,
                 enterpriseContext,
                 logger,
@@ -278,7 +335,7 @@ export async function handleChat(req, res, context) {
             existingSessionLoaded = true;
             return null;
         };
-        const initializationError = initializeSessionIfNeeded();
+        const initializationError = await initializeSessionIfNeeded();
         if (initializationError) {
             sendSSE(sseSession, {
                 type: "error",
@@ -434,6 +491,12 @@ export async function handleChat(req, res, context) {
                 storeToolArgs(event.toolCallId, event.args);
             }
             if (event.type === "tool_execution_end") {
+                recordComplianceToolAction({
+                    req,
+                    event,
+                    sessionId: sessionManager.getSessionId(),
+                    subject,
+                });
                 if (event.toolName === "artifacts" && !event.isError) {
                     const sessionId = sessionManager.getSessionId();
                     const args = toolArgsByCallId.get(event.toolCallId) ?? {};
@@ -453,24 +516,27 @@ export async function handleChat(req, res, context) {
             // Handle message completion - persist to session
             if (event.type === "message_end") {
                 sessionManager.saveMessage(event.message);
-                if (event.message.role === "assistant") {
-                    automaticMemoryExtraction.schedule(sessionManager.getSessionFile());
-                }
-                let initializationError = null;
-                // Auto-initialize session on first user message
-                if (sessionManager.shouldInitializeSession(agent.state.messages)) {
-                    initializationError = startSessionWithPolicy({
-                        agent,
-                        enterpriseContext,
-                        logger,
-                        modelId: registeredModel.id,
-                        onSessionReady: (sessionId) => {
-                            sendSessionUpdate(sseSession, sessionId);
-                            sseSession.setContext({ sessionId });
-                        },
-                        sessionManager,
+                if (isAssistantMessage(event.message)) {
+                    recordAssistantUsageMetric({
+                        req,
+                        message: event.message,
+                        sessionId: sessionManager.getSessionId(),
                         subject,
                     });
+                    recordIntelligentRouterChatMetric({
+                        taskType: routingSelection.taskType,
+                        provider: registeredModel.provider,
+                        model: registeredModel.id,
+                        startedAt: routeStartedAt,
+                        message: event.message,
+                    });
+                    recordComplianceAssistantAction({
+                        req,
+                        message: event.message,
+                        sessionId: sessionManager.getSessionId(),
+                        subject,
+                    });
+                    automaticMemoryExtraction.schedule(sessionManager.getSessionFile());
                 }
                 // Update session snapshot on every event
                 sessionManager.updateSnapshot(agent.state, toSessionModelMetadata(registeredModel));
@@ -482,13 +548,6 @@ export async function handleChat(req, res, context) {
                     sessionHookService,
                     logger,
                 });
-                if (initializationError) {
-                    sendSSE(sseSession, {
-                        type: "error",
-                        message: `[Policy] ${initializationError}`,
-                    });
-                    sseSession.end();
-                }
                 return;
             }
             // Update session snapshot on every event

package/dist/server/handlers/chat.js.map

@@ -1 +1 @@
-{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../../src/server/handlers/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAQH,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACN,6CAA6C,EAC7C,kCAAkC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,0CAA0C,EAAE,MAAM,iCAAiC,CAAC;AAE7F,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC,SAAS,sBAAsB,CAAC,OAAmC;IAClE,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,OAAO;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;SACxC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAID,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EACN,qBAAqB,EACrB,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAEN,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAEN,iBAAiB,EACjB,oBAAoB,GACpB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,uCAAuC;IACvC,MAAM,EACL,WAAW,EACX,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,WAAW,EAAE,IAAI,GACjB,GAAG,OAAO,CAAC;IAEZ,+CAA+C;IAC/C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,IAAI,CAAC;QACJ,0CAA0C;QAC1C,MAAM,OAAO,GAAG,CAAC,MAAM,oBAAoB,CAC1C,GAAG,EACH,iBAAiB,CACjB,CAAwB,CAAC;QAE1B,iDAAiD;QACjD,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvD,CAAC,CAAE,OAAO,CAAC,QAA8B;YACzC,CAAC,CAAC,EAAE,CAAC;QACN,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,oDAAoD;QACpD,MAAM,aAAa,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACrD,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAChD,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,CAAC,GAAG,EAAE;YACpD,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;YAC7C,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YAEzC,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,OAAO;oBACN,iBAAiB,EAAE,SAA0C;oBAC7D,eAAe,EAAE,IAAqB;iBACtC,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAsB,EAAE,CAAC;YAC1C,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAChD,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,GACT,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtE,MAAM,QAAQ,GACb,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;gBAClE,MAAM,QAAQ,GACb,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;oBAChC,CAAC,CAAC,IAAI,CAAC,QAAQ;oBACf,CAAC,CAAC,0BAA0B,CAAC;gBAC/B,MAAM,IAAI,GACT,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC1D,CAAC,CAAC,IAAI,CAAC,IAAI;oBACX,CAAC,CAAC,CAAC,CAAC;gBACN,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,MAAM,aAAa,GAClB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;oBACrC,CAAC,CAAC,IAAI,CAAC,aAAa;oBACpB,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,OAAO,GACZ,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAE7D,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;oBAAE,SAAS;gBAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,wFAAwF;oBACxF,SAAS;gBACV,CAAC;gBAED,6EAA6E;gBAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;gBAEnD,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;oBAClC,OAAO;wBACN,iBAAiB,EAAE,SAAS;wBAC5B,eAAe,EAAE,yBAAyB,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,wBAAwB,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK;qBAC/J,CAAC;gBACH,CAAC;gBAED,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;oBAClC,OAAO;wBACN,iBAAiB,EAAE,SAAS;wBAC5B,eAAe,EAAE,wCAAwC,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK;qBACtG,CAAC;gBACH,CAAC;gBAED,WAAW,CAAC,IAAI,CAAC;oBAChB,EAAE;oBACF,IAAI;oBACJ,QAAQ;oBACR,QAAQ;oBACR,IAAI,EAAE,IAAI,IAAI,KAAK;oBACnB,OAAO;oBACP,aAAa;oBACb,OAAO;iBACP,CAAC,CAAC;YACJ,CAAC;YAED,OAAO;gBACN,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBAC/D,eAAe,EAAE,IAAI;aACrB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,eAAe,EAAE,CAAC;YACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1D,OAAO;QACR,CAAC;QAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACzE,OAAO;QACR,CAAC;QAED,iDAAiD;QACjD,sDAAsD;QACtD,IAAI,UAAU,EAAE,CAAC;YAChB,QAAQ,GAAG,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAC5C,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,+CAA+C;QAC/C,mEAAmE;QACnE,MAAM,cAAc,GAAG,8BAA8B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAEpC,gDAAgD;QAChD,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzE,IAAI,WAAW,EAAE,CAAC;gBACjB,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAC3C,qBAAqB,GAAG,IAAI,CAAC;YAC9B,CAAC;QACF,CAAC;QAED,8BAA8B;QAC9B,MAAM,eAAe,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEhE,wEAAwE;QACxE,MAAM,cAAc,GAAG,qBAAqB,CAC3C,gBAAgB,CACf,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,IAAI,SAAS,CACd,CAAC;QAEF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;YACvD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO;YACP,kBAAkB,EAAE,cAAc;YAClC,mBAAmB;SACnB,CAAC,CAAC;QAEH,mDAAmD;QACnD,MAAM,iBAAiB,GACtB,gBAAgB,CACf,GAAG,EACH,yBAAyB,EACzB,wBAAwB,CACxB,KAAK,GAAG,CAAC;QAEX,MAAM,YAAY,GAAG,gBAAgB,CACpC,GAAG,EACH,mBAAmB,EACnB,kBAAkB,CAClB,EAAE,WAAW,EAAE,CAAC;QACjB,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,SAAS,CAAC;QAC3E,MAAM,sBAAsB,GAAG,IAAI,wBAAwB,CAC1D,iBAAiB,EACjB,iBAAiB,CACjB,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,6BAA6B,CACzD,QAAQ,EACR,iBAAiB,CACjB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,WAAW,CAC9B,eAAe,EACf,OAAO,CAAC,aAAa,IAAI,KAAK,EAC9B,iBAAiB,EACjB;YACC,eAAe,EAAE,sBAAsB;YACvC,gBAAgB;YAChB,GAAG,CAAC,iBAAiB;gBACpB,CAAC,CAAC;oBACA,iBAAiB,EAAE,IAAI;oBACvB,iBAAiB,EAChB,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,CAAC;oBAChD,kBAAkB,EAAE,YAAY,KAAK,QAAQ;oBAC7C,qBAAqB,EAAE,YAAY,KAAK,WAAW;oBACnD,qBAAqB,EAAE,YAAY,KAAK,WAAW;iBACnD;gBACF,CAAC,CAAC,EAAE,CAAC;SACN,CACD,CAAC;QAEF,4EAA4E;QAC5E,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,4BAA4B,CACnD,eAAe,EACf,eAAe,CACf,CAAC;QACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;QAED,wCAAwC;QACxC,sCAAsC;QACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;YACxB,GAAG,IAAI;SACP,CAAC,CAAC;QAEH,+DAA+D;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,GAAG,eAAe,CAAC,QAAQ,IAAI,eAAe,CAAC,EAAE,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,UAAU,CAChC,GAAG,EACH,CAAC,OAAO,EAAE,EAAE;YACX,qEAAqE;YACrE,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;gBAC5C,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS;gBACrC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ;gBACnC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS;gBACrC,SAAS,EACR,OAAO,CAAC,SAAS,YAAY,KAAK;oBACjC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO;oBAC3B,CAAC,CAAC,OAAO,CAAC,SAAS;aACrB,CAAC,CAAC;QACJ,CAAC,EACD,EAAE,SAAS,EAAE,QAAQ,EAAE,CACvB,CAAC;QACF,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,4CAA4C;QAEzE,gDAAgD;QAChD,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,gDAAgD;QAChD,+DAA+D;QAC/D,mDAAmD;QACnD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAE1E,MAAM,yBAAyB,GAAG,GAAkB,EAAE;YACrD,IAAI,qBAAqB,IAAI,cAAc,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACb,CAAC;YACD,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;gBAClD,KAAK;gBACL,iBAAiB;gBACjB,MAAM;gBACN,OAAO,EAAE,eAAe,CAAC,EAAE;gBAC3B,cAAc,EAAE,CAAC,SAAS,EAAE,EAAE;oBAC7B,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;oBACzC,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;gBACtC,CAAC;gBACD,cAAc;gBACd,OAAO;aACP,CAAC,CAAC;YACH,IAAI,mBAAmB,EAAE,CAAC;gBACzB,OAAO,mBAAmB,CAAC;YAC5B,CAAC;YACD,qBAAqB,GAAG,IAAI,CAAC;YAC7B,OAAO,IAAI,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;QACxD,IAAI,mBAAmB,EAAE,CAAC;YACzB,OAAO,CAAC,UAAU,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,YAAY,mBAAmB,EAAE;aAC1C,CAAC,CAAC;YACH,UAAU,CAAC,GAAG,EAAE,CAAC;YACjB,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC5B,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,OAAO;QACR,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmC,CAAC;QACpE,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,IAAa,EAAE,EAAE;YAC3D,gBAAgB,CAAC,GAAG,CACnB,UAAU,EACV,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBACxD,CAAC,CAAE,IAAgC;gBACnC,CAAC,CAAC,EAAE,CAA4B,CACjC,CAAC;QACH,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,gBAAgB,CACjC,GAAG,EACH,wBAAwB,EACxB,uBAAuB,CACvB,CAAC;QACF,MAAM,UAAU,GAAG,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,MAAM,CAAC;QAC7D,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC;YAC7D,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzD,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,mBAAmB,GAAG,CAAC,cAG5B,EAKC,EAAE;YACH,MAAM,qBAAqB,GAAG,cAAc,CAAC,OAAO,CAAC;YACrD,MAAM,YAAY,GAAG,cAAc,CAAC,YAAY,CAAC;YACjD,IACC,CAAC,qBAAqB;gBACtB,OAAO,YAAY,KAAK,QAAQ;gBAChC,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAC5C,CAAC;gBACF,OAAO,EAAE,CAAC;YACX,CAAC;YACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,EAAE,CAAC;YACX,CAAC;YACD,MAAM,aAAa,GAAG,KAKrB,CAAC;YACF,IAAI,aAAa,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACvC,OAAO,EAAE,CAAC;YACX,CAAC;YACD,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;YAC1C,MAAM,YAAY,GACjB,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtE,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;oBACrE,IAAI,IAAI,GAAG,qBAAqB,EAAE,CAAC;wBAClC,OAAO;4BACN,UAAU,EAAE,aAAa,CAAC,EAAE;4BAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;4BAChC,qBAAqB,EAAE,IAAI;yBAC3B,CAAC;oBACH,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO;wBACN,UAAU,EAAE,aAAa,CAAC,EAAE;wBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;wBAChC,qBAAqB,EAAE,IAAI;qBAC3B,CAAC;gBACH,CAAC;YACF,CAAC;YACD,OAAO;gBACN,UAAU,EAAE,aAAa,CAAC,EAAE;gBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;gBAChC,YAAY;aACZ,CAAC;QACH,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,CAAC,KAAiB,EAAc,EAAE;YACxD,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAC;YACd,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,qBAAqB,CAAC;YACnD,MAAM,SAAS,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;YACxD,OAAO,SAAS,CAAC,OAAO,CAAC;YAEzB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,OAAO,SAAuB,CAAC;YAChC,CAAC;YAED,IACC,cAAc,CAAC,IAAI,KAAK,YAAY;gBACpC,cAAc,CAAC,IAAI,KAAK,gBAAgB,EACvC,CAAC;gBACF,MAAM,EAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAG/C,CAAC;gBAEF,SAAS,CAAC,qBAAqB,GAAG,uBAAuB,CAAC;gBAC1D,OAAO,SAAuB,CAAC;YAChC,CAAC;YAED,IACC,cAAc,CAAC,IAAI,KAAK,gBAAgB;gBACxC,cAAc,CAAC,IAAI,KAAK,gBAAgB;gBACxC,cAAc,CAAC,IAAI,KAAK,cAAc,EACrC,CAAC;gBACF,MAAM,EAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAG/C,CAAC;gBACF,MAAM,YAAY,GACjB,cAAc,CAAC,IAAI,KAAK,cAAc;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;gBAExC,SAAS,CAAC,qBAAqB,GAAG;oBACjC,GAAG,uBAAuB;oBAC1B,GAAG,YAAY;iBACf,CAAC;gBACF,OAAO,SAAuB,CAAC;YAChC,CAAC;YAED,SAAS,CAAC,qBAAqB,GAAG,cAAc,CAAC;YACjD,OAAO,SAAuB,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,oBAAoB,GACzB,kCAAkC,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,4BAA4B,GACjC,6CAA6C,CAAC;YAC7C,WAAW,EAAE,KAAK,IAAI,EAAE,CACvB,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAwB,EAAE;gBAC3D,YAAY,EAAE,kCAAkC,EAAE;aAClD,CAAC;YACH,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK;SACjC,CAAC,CAAC;QACJ,MAAM,yBAAyB,GAC9B,0CAA0C,CAAC;YAC1C,WAAW,EAAE,KAAK,IAAI,EAAE,CACvB,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAwB,CAAC;YAC5D,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK;YACjC,WAAW,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,QAAQ,EAAE;YAC1D,cAAc;SACd,CAAC,CAAC;QACJ,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;YACnD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,+BAA+B,GAAG,oBAAoB,CAAC,SAAS,CACrE,CAAC,KAAK,EAAE,EAAE;YACT,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;YAC5C,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;gBACrE,OAAO;YACR,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC9C,OAAO;YACR,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,UAAU,EAAE;oBACnB,IAAI,EAAE,qBAAqB;oBAC3B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;oBAChC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;oBAChC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;iBACxB,CAAC,CAAC;gBACH,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxD,OAAO;YACR,CAAC;YACD,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CACD,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,KAAiB,EAAE,EAAE;YACzD,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE5B,0BAA0B;YAC1B,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;YAE3C,6EAA6E;YAC7E,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC3C,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC1C,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACzC,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACtD,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,EAAE,CAAC;oBAChD,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;oBAC1D,MAAM,QAAQ,GACb,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC1D,MAAM,OAAO,GACZ,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;oBACxD,IACC,SAAS;wBACT,QAAQ;wBACR,CAAC,OAAO,KAAK,QAAQ;4BACpB,OAAO,KAAK,QAAQ;4BACpB,OAAO,KAAK,SAAS;4BACrB,OAAO,KAAK,QAAQ,CAAC,EACrB,CAAC;wBACF,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBAC5C,CAAC;gBACF,CAAC;gBACD,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;YAED,iDAAiD;YACjD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAClC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACxC,yBAAyB,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,IAAI,mBAAmB,GAAkB,IAAI,CAAC;gBAE9C,gDAAgD;gBAChD,IAAI,cAAc,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClE,mBAAmB,GAAG,sBAAsB,CAAC;wBAC5C,KAAK;wBACL,iBAAiB;wBACjB,MAAM;wBACN,OAAO,EAAE,eAAe,CAAC,EAAE;wBAC3B,cAAc,EAAE,CAAC,SAAS,EAAE,EAAE;4BAC7B,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;4BACzC,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;wBACtC,CAAC;wBACD,cAAc;wBACd,OAAO;qBACP,CAAC,CAAC;gBACJ,CAAC;gBAED,yCAAyC;gBACzC,cAAc,CAAC,cAAc,CAC5B,KAAK,CAAC,KAAK,EACX,sBAAsB,CAAC,eAAe,CAAC,CACvC,CAAC;gBACF,yBAAyB,CACxB,KAAK,EACL;oBACC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;oBAClB,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;oBACxC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;iBAC9B,EACD;oBACC,kBAAkB;oBAClB,MAAM;iBACN,CACD,CAAC;gBAEF,IAAI,mBAAmB,EAAE,CAAC;oBACzB,OAAO,CAAC,UAAU,EAAE;wBACnB,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,YAAY,mBAAmB,EAAE;qBAC1C,CAAC,CAAC;oBACH,UAAU,CAAC,GAAG,EAAE,CAAC;gBAClB,CAAC;gBACD,OAAO;YACR,CAAC;YAED,yCAAyC;YACzC,cAAc,CAAC,cAAc,CAC5B,KAAK,CAAC,KAAK,EACX,sBAAsB,CAAC,eAAe,CAAC,CACvC,CAAC;YACF,yBAAyB,CACxB,KAAK,EACL;gBACC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;gBACxC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;aAC9B,EACD;gBACC,kBAAkB;gBAClB,MAAM;aACN,CACD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,iDAAiD;QACjD,kDAAkD;QAClD,MAAM,qBAAqB,GAAG,GAAG,EAAE;YAClC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACvC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAEvC;;;WAGG;QACH,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE;YACzC,IAAI,SAAS,EAAE,CAAC;gBACf,OAAO;YACR,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;YAEjB,4CAA4C;YAC5C,UAAU,CAAC,aAAa,EAAE,CAAC;YAC3B,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;YACxC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;YACxC,WAAW,EAAE,CAAC;YACd,+BAA+B,EAAE,CAAC;YAElC,MAAM,yBAAyB,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,4BAA4B,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;YAE7B,oDAAoD;YACpD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBACxB,IAAI,OAAO,EAAE,CAAC;oBACb,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC1B,CAAC;gBACD,UAAU,CAAC,GAAG,EAAE,CAAC;YAClB,CAAC;YAED,wDAAwD;YACxD,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;QACF,CAAC,CAAC;QAEF,uCAAuC;QACvC,IAAI,CAAC;YACJ,4DAA4D;YAC5D,oDAAoD;YACpD,MAAM,OAAO,GAAG,sBAAsB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAEjE,0CAA0C;YAC1C,MAAM,yBAAyB,CAAC;gBAC/B,KAAK;gBACL,cAAc;gBACd,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;gBAC/C,eAAe,EAAE,iBAAiB,EAAE,GAAG,CACtC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CACnC;gBACD,OAAO,EAAE,GAAG,EAAE,CACb,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;gBAClE,mBAAmB,EAAE,uBAAuB,EAAE;aAC9C,CAAC,CAAC;YAEH,qDAAqD;YACrD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBACxB,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,mCAAmC;YACnC,MAAM,CAAC,KAAK,CACX,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAC1C,EAAE,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE,EAAE,EAAE,CAC9C,CAAC;YACF,OAAO,CAAC,UAAU,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aACjE,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,gCAAgC;YAChC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,gEAAgE;QAChE,MAAM,CAAC,KAAK,CACX,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACV,8BAA8B;QAC9B,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC5B,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;AACF,CAAC","sourcesContent":["/**\n * Chat Handler - Main WebSocket/SSE Endpoint for Agent Conversations\n *\n * This module implements the primary chat endpoint for the web server.\n * It handles incoming chat requests, manages agent execution, and streams\n * responses back to clients via Server-Sent Events (SSE).\n *\n * Request flow:\n * 1. Parse and validate incoming JSON request\n * 2. Acquire SSE connection slot (rate limited)\n * 3. Create or resume session based on sessionId\n * 4. Initialize agent with model and approval settings\n * 5. Hydrate conversation history from request\n * 6. Stream agent events to client via SSE\n * 7. Persist session state on completion\n *\n * Key features:\n * - Circuit breaker protection for agent calls\n * - Graceful handling of client disconnects\n * - Session persistence with auto-initialization\n * - Approval mode configuration via headers\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { ComposerChatRequest, ComposerMessage } from \"@evalops/contracts\";\nimport type {\n\tAttachment as AgentAttachment,\n\tAgentEvent,\n} from \"../../agent/types.js\";\nimport { runUserPromptWithRecovery } from \"../../agent/user-prompt-runtime.js\";\nimport { dispatchAgentNotification } from \"../../hooks/notification-hooks.js\";\nimport { createSessionHookService } from \"../../hooks/session-integration.js\";\nimport { withMcpPostKeepMessages } from \"../../mcp/prompt-recovery.js\";\nimport {\n\tcreateAutomaticMemoryConsolidationCoordinator,\n\tgetMemoryConsolidationSystemPrompt,\n} from \"../../memory/auto-consolidation.js\";\nimport { createAutomaticMemoryExtractionCoordinator } from \"../../memory/auto-extraction.js\";\nimport type { RegisteredModel } from \"../../models/registry.js\";\nimport { createLogger } from \"../../utils/logger.js\";\n\nconst logger = createLogger(\"web:chat\");\n\nfunction getComposerTextContent(content: ComposerMessage[\"content\"]): string {\n\tif (typeof content === \"string\") return content;\n\tif (!Array.isArray(content)) return \"\";\n\treturn content\n\t\t.filter((block) => block.type === \"text\")\n\t\t.map((block) => block.text)\n\t\t.join(\"\");\n}\n\n// SessionManager type import for annotations, value import for instantiation\nimport type { SessionManager } from \"../../session/manager.js\";\nimport { toSessionModelMetadata } from \"../../session/manager.js\";\nimport { createRuntimeSessionSummaryUpdater } from \"../../session/runtime-summary-updater.js\";\nimport { recordSseSkip } from \"../../telemetry.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\tnormalizeApprovalMode,\n\tresolveApprovalModeForRequest,\n} from \"../approval-mode-store.js\";\nimport { WebActionApprovalService } from \"../approval-service.js\";\nimport { publishArtifactUpdate } from \"../artifacts-live-reload.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport { getAgentCircuitBreaker } from \"../circuit-breaker.js\";\nimport { clientToolService } from \"../client-tools-service.js\";\nimport { serverRequestManager } from \"../server-request-manager.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\trespondWithApiError,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { startSessionWithPolicy } from \"../session-initialization.js\";\nimport { createSessionManagerForRequest } from \"../session-scope.js\";\nimport { convertComposerMessagesToApp } from \"../session-serialization.js\";\nimport { SseSession, sendSSE, sendSessionUpdate } from \"../sse-session.js\";\nimport { ServerRequestToolRetryService } from \"../tool-retry-service.js\";\nimport {\n\ttype ChatRequestInput,\n\tChatRequestSchema,\n\tparseAndValidateJson,\n} from \"../validation.js\";\n\n/**\n * Handle an incoming chat request.\n *\n * This is the main entry point for chat interactions. It:\n * 1. Validates the request format\n * 2. Sets up SSE streaming\n * 3. Runs the agent with the user's message\n * 4. Streams events back to the client\n * 5. Persists the session state\n *\n * @param req - The incoming HTTP request\n * @param res - The HTTP response (will be converted to SSE stream)\n * @param context - Server context with agent factory and configuration\n */\nexport async function handleChat(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\t// Destructure context for cleaner code\n\tconst {\n\t\tcreateAgent,\n\t\tcreateBackgroundAgent,\n\t\tgetRegisteredModel,\n\t\tdefaultApprovalMode,\n\t\tacquireSse,\n\t\treleaseSse,\n\t\tcorsHeaders: cors,\n\t} = context;\n\n\t// Track SSE lease for cleanup in finally block\n\tlet sseLease: symbol | null = null;\n\n\ttry {\n\t\t// ===== Phase 1: Request Validation =====\n\t\tconst chatReq = (await parseAndValidateJson<ChatRequestInput>(\n\t\t\treq,\n\t\t\tChatRequestSchema,\n\t\t)) as ComposerChatRequest;\n\n\t\t// Validate message array exists and is non-empty\n\t\tconst incomingMessages = Array.isArray(chatReq.messages)\n\t\t\t? (chatReq.messages as ComposerMessage[])\n\t\t\t: [];\n\t\tif (incomingMessages.length === 0) {\n\t\t\tsendJson(res, 400, { error: \"No messages supplied\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// The last message must be the user's current input\n\t\tconst latestMessage = incomingMessages[incomingMessages.length - 1];\n\t\tif (!latestMessage || latestMessage.role !== \"user\") {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t400,\n\t\t\t\t{ error: \"Last message must be a user message\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst { attachmentsToSend, attachmentError } = (() => {\n\t\t\tconst MAX_ATTACHMENT_BYTES = 8 * 1024 * 1024;\n\t\t\tconst MAX_TOTAL_BYTES = 20 * 1024 * 1024;\n\n\t\t\tconst raw = latestMessage.attachments;\n\t\t\tif (!Array.isArray(raw) || raw.length === 0) {\n\t\t\t\treturn {\n\t\t\t\t\tattachmentsToSend: undefined as AgentAttachment[] | undefined,\n\t\t\t\t\tattachmentError: null as string | null,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst attachments: AgentAttachment[] = [];\n\t\t\tlet totalBytes = 0;\n\n\t\t\tfor (const item of raw) {\n\t\t\t\tif (!item || typeof item !== \"object\") continue;\n\t\t\t\tconst id = typeof item.id === \"string\" ? item.id : \"\";\n\t\t\t\tconst type =\n\t\t\t\t\titem.type === \"image\" || item.type === \"document\" ? item.type : null;\n\t\t\t\tconst fileName =\n\t\t\t\t\ttypeof item.fileName === \"string\" ? item.fileName : \"attachment\";\n\t\t\t\tconst mimeType =\n\t\t\t\t\ttypeof item.mimeType === \"string\"\n\t\t\t\t\t\t? item.mimeType\n\t\t\t\t\t\t: \"application/octet-stream\";\n\t\t\t\tconst size =\n\t\t\t\t\ttypeof item.size === \"number\" && Number.isFinite(item.size)\n\t\t\t\t\t\t? item.size\n\t\t\t\t\t\t: 0;\n\t\t\t\tconst content = typeof item.content === \"string\" ? item.content : \"\";\n\t\t\t\tconst extractedText =\n\t\t\t\t\ttypeof item.extractedText === \"string\"\n\t\t\t\t\t\t? item.extractedText\n\t\t\t\t\t\t: undefined;\n\t\t\t\tconst preview =\n\t\t\t\t\ttypeof item.preview === \"string\" ? item.preview : undefined;\n\n\t\t\t\tif (!id || !type) continue;\n\t\t\t\tif (!content) {\n\t\t\t\t\t// Content omitted (e.g., session fetch); keep metadata for UI but do not send to model.\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\n\t\t\t\t// Base64 -> bytes (approx). Prefer validating against actual content length.\n\t\t\t\tconst approxBytes = Math.floor((content.length * 3) / 4);\n\t\t\t\tconst bytes = approxBytes > 0 ? approxBytes : size;\n\n\t\t\t\tif (bytes > MAX_ATTACHMENT_BYTES) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tattachmentsToSend: undefined,\n\t\t\t\t\t\tattachmentError: `Attachment too large: ${fileName} (${Math.ceil(bytes / 1024 / 1024)}MB). Max per file is ${Math.ceil(MAX_ATTACHMENT_BYTES / 1024 / 1024)}MB.`,\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\ttotalBytes += bytes;\n\t\t\t\tif (totalBytes > MAX_TOTAL_BYTES) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tattachmentsToSend: undefined,\n\t\t\t\t\t\tattachmentError: `Attachments too large: total exceeds ${Math.ceil(MAX_TOTAL_BYTES / 1024 / 1024)}MB.`,\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\tattachments.push({\n\t\t\t\t\tid,\n\t\t\t\t\ttype,\n\t\t\t\t\tfileName,\n\t\t\t\t\tmimeType,\n\t\t\t\t\tsize: size || bytes,\n\t\t\t\t\tcontent,\n\t\t\t\t\textractedText,\n\t\t\t\t\tpreview,\n\t\t\t\t});\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\tattachmentsToSend: attachments.length ? attachments : undefined,\n\t\t\t\tattachmentError: null,\n\t\t\t};\n\t\t})();\n\n\t\tif (attachmentError) {\n\t\t\tsendJson(res, 413, { error: attachmentError }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst userInput = getComposerTextContent(latestMessage.content).trim();\n\t\tif (!userInput && !attachmentsToSend) {\n\t\t\tsendJson(res, 400, { error: \"User message cannot be empty\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// ===== Phase 2: SSE Connection Management =====\n\t\t// Acquire a lease to limit concurrent SSE connections\n\t\tif (acquireSse) {\n\t\t\tsseLease = acquireSse();\n\t\t\tif (!sseLease) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t429,\n\t\t\t\t\t{ error: \"Too many active SSE connections\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\t// ===== Phase 3: Session and Agent Setup =====\n\t\t// Create session manager (false = don't auto-initialize from disk)\n\t\tconst sessionManager = createSessionManagerForRequest(req, false);\n\t\tconst subject = getAuthSubject(req);\n\n\t\t// Resume existing session if sessionId provided\n\t\tlet existingSessionLoaded = false;\n\t\tif (chatReq.sessionId) {\n\t\t\tconst sessionFile = sessionManager.getSessionFileById(chatReq.sessionId);\n\t\t\tif (sessionFile) {\n\t\t\t\tsessionManager.setSessionFile(sessionFile);\n\t\t\t\texistingSessionLoaded = true;\n\t\t\t}\n\t\t}\n\n\t\t// Resolve model from registry\n\t\tconst registeredModel = await getRegisteredModel(chatReq.model);\n\n\t\t// Parse approval mode from request header (allows per-request override)\n\t\tconst headerApproval = normalizeApprovalMode(\n\t\t\tgetRequestHeader(\n\t\t\t\treq,\n\t\t\t\t\"x-composer-approval-mode\",\n\t\t\t\t\"x-maestro-approval-mode\",\n\t\t\t) ?? undefined,\n\t\t);\n\n\t\tconst effectiveApproval = resolveApprovalModeForRequest({\n\t\t\tsessionId: chatReq.sessionId,\n\t\t\tsubject,\n\t\t\theaderApprovalMode: headerApproval,\n\t\t\tdefaultApprovalMode,\n\t\t});\n\n\t\t// Create the agent with the resolved configuration\n\t\tconst clientToolsHeader =\n\t\t\tgetRequestHeader(\n\t\t\t\treq,\n\t\t\t\t\"x-composer-client-tools\",\n\t\t\t\t\"x-maestro-client-tools\",\n\t\t\t) === \"1\";\n\n\t\tconst clientHeader = getRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-client\",\n\t\t\t\"x-maestro-client\",\n\t\t)?.toLowerCase();\n\t\tconst sessionIdProvider = () => sessionManager.getSessionId() ?? undefined;\n\t\tconst requestApprovalService = new WebActionApprovalService(\n\t\t\teffectiveApproval,\n\t\t\tsessionIdProvider,\n\t\t);\n\t\tconst toolRetryService = new ServerRequestToolRetryService(\n\t\t\t\"prompt\",\n\t\t\tsessionIdProvider,\n\t\t);\n\n\t\tconst agent = await createAgent(\n\t\t\tregisteredModel,\n\t\t\tchatReq.thinkingLevel || \"off\",\n\t\t\teffectiveApproval,\n\t\t\t{\n\t\t\t\tapprovalService: requestApprovalService,\n\t\t\t\ttoolRetryService,\n\t\t\t\t...(clientToolsHeader\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tenableClientTools: true,\n\t\t\t\t\t\t\tclientToolService:\n\t\t\t\t\t\t\t\tclientToolService.forSession(sessionIdProvider),\n\t\t\t\t\t\t\tincludeVscodeTools: clientHeader === \"vscode\",\n\t\t\t\t\t\t\tincludeJetBrainsTools: clientHeader === \"jetbrains\",\n\t\t\t\t\t\t\tincludeConductorTools: clientHeader === \"conductor\",\n\t\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t},\n\t\t);\n\n\t\t// Hydrate conversation history (all messages except the current user input)\n\t\tconst historyMessages = incomingMessages.slice(0, -1);\n\t\tconst hydratedHistory = convertComposerMessagesToApp(\n\t\t\thistoryMessages,\n\t\t\tregisteredModel,\n\t\t);\n\t\tif (hydratedHistory.length > 0) {\n\t\t\tagent.replaceMessages(hydratedHistory);\n\t\t} else {\n\t\t\tagent.clearMessages();\n\t\t}\n\n\t\t// ===== Phase 4: SSE Stream Setup =====\n\t\t// Initialize the SSE response headers\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\t\"Cache-Control\": \"no-cache\",\n\t\t\tConnection: \"keep-alive\",\n\t\t\t...cors,\n\t\t});\n\n\t\t// Create SSE session with telemetry callback for skip tracking\n\t\tconst requestId = Math.random().toString(36).slice(2);\n\t\tconst modelKey = `${registeredModel.provider}/${registeredModel.id}`;\n\t\tconst sseSession = new SseSession(\n\t\t\tres,\n\t\t\t(metrics) => {\n\t\t\t\t// Record telemetry when SSE writes are skipped (client disconnected)\n\t\t\t\trecordSseSkip(metrics.sent, metrics.skipped, {\n\t\t\t\t\trequestId: metrics.context?.requestId,\n\t\t\t\t\tmodelKey: metrics.context?.modelKey,\n\t\t\t\t\tsessionId: metrics.context?.sessionId,\n\t\t\t\t\tlastError:\n\t\t\t\t\t\tmetrics.lastError instanceof Error\n\t\t\t\t\t\t\t? metrics.lastError.message\n\t\t\t\t\t\t\t: metrics.lastError,\n\t\t\t\t});\n\t\t\t},\n\t\t\t{ requestId, modelKey },\n\t\t);\n\t\tsseSession.startHeartbeat(); // Keep connection alive during idle periods\n\n\t\t// Track cleanup state to prevent double-cleanup\n\t\tlet cleanedUp = false;\n\n\t\t// ===== Phase 5: Agent Event Subscription =====\n\t\t// Subscribe to agent events and forward them to the SSE stream\n\t\t// Pre-load enterprise context for session tracking\n\t\tconst { enterpriseContext } = await import(\"../../enterprise/context.js\");\n\n\t\tconst initializeSessionIfNeeded = (): string | null => {\n\t\t\tif (existingSessionLoaded || sessionManager.isInitialized()) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tconst initializationError = startSessionWithPolicy({\n\t\t\t\tagent,\n\t\t\t\tenterpriseContext,\n\t\t\t\tlogger,\n\t\t\t\tmodelId: registeredModel.id,\n\t\t\t\tonSessionReady: (sessionId) => {\n\t\t\t\t\tsendSessionUpdate(sseSession, sessionId);\n\t\t\t\t\tsseSession.setContext({ sessionId });\n\t\t\t\t},\n\t\t\t\tsessionManager,\n\t\t\t\tsubject,\n\t\t\t});\n\t\t\tif (initializationError) {\n\t\t\t\treturn initializationError;\n\t\t\t}\n\t\t\texistingSessionLoaded = true;\n\t\t\treturn null;\n\t\t};\n\n\t\tconst initializationError = initializeSessionIfNeeded();\n\t\tif (initializationError) {\n\t\t\tsendSSE(sseSession, {\n\t\t\t\ttype: \"error\",\n\t\t\t\tmessage: `[Policy] ${initializationError}`,\n\t\t\t});\n\t\t\tsseSession.end();\n\t\t\tif (sseLease && releaseSse) {\n\t\t\t\treleaseSse(sseLease);\n\t\t\t\tsseLease = null;\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\tconst toolArgsByCallId = new Map<string, Record<string, unknown>>();\n\t\tconst storeToolArgs = (toolCallId: string, args: unknown) => {\n\t\t\ttoolArgsByCallId.set(\n\t\t\t\ttoolCallId,\n\t\t\t\t(args && typeof args === \"object\" && !Array.isArray(args)\n\t\t\t\t\t? (args as Record<string, unknown>)\n\t\t\t\t\t: {}) as Record<string, unknown>,\n\t\t\t);\n\t\t};\n\t\tconst slimValue = getRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-slim-events\",\n\t\t\t\"x-maestro-slim-events\",\n\t\t);\n\t\tconst slimEvents = slimValue === \"1\" || slimValue === \"true\";\n\t\tconst slimToolCallArgsLimit = (() => {\n\t\t\tconst raw = process.env.MAESTRO_SLIM_TOOLCALL_ARGS_MAX_BYTES;\n\t\t\tif (!raw) return 4096;\n\t\t\tconst parsed = Number(raw);\n\t\t\tif (!Number.isFinite(parsed) || parsed <= 0) return 4096;\n\t\t\treturn Math.min(parsed, 1024 * 1024);\n\t\t})();\n\t\tconst extractToolCallInfo = (assistantEvent: {\n\t\t\tcontentIndex?: number;\n\t\t\tpartial?: { content?: unknown[] };\n\t\t}): {\n\t\t\ttoolCallId?: string;\n\t\t\ttoolCallName?: string;\n\t\t\ttoolCallArgs?: Record<string, unknown>;\n\t\t\ttoolCallArgsTruncated?: boolean;\n\t\t} => {\n\t\t\tconst assistantMessageEvent = assistantEvent.partial;\n\t\t\tconst contentIndex = assistantEvent.contentIndex;\n\t\t\tif (\n\t\t\t\t!assistantMessageEvent ||\n\t\t\t\ttypeof contentIndex !== \"number\" ||\n\t\t\t\t!Array.isArray(assistantMessageEvent.content)\n\t\t\t) {\n\t\t\t\treturn {};\n\t\t\t}\n\t\t\tconst block = assistantMessageEvent.content[contentIndex];\n\t\t\tif (!block || typeof block !== \"object\") {\n\t\t\t\treturn {};\n\t\t\t}\n\t\t\tconst maybeToolCall = block as {\n\t\t\t\ttype?: string;\n\t\t\t\tid?: string;\n\t\t\t\tname?: string;\n\t\t\t\targuments?: Record<string, unknown>;\n\t\t\t};\n\t\t\tif (maybeToolCall.type !== \"toolCall\") {\n\t\t\t\treturn {};\n\t\t\t}\n\t\t\tconst maybeArgs = maybeToolCall.arguments;\n\t\t\tconst toolCallArgs =\n\t\t\t\tmaybeArgs && typeof maybeArgs === \"object\" && !Array.isArray(maybeArgs)\n\t\t\t\t\t? maybeArgs\n\t\t\t\t\t: undefined;\n\t\t\tif (toolCallArgs) {\n\t\t\t\ttry {\n\t\t\t\t\tconst size = Buffer.byteLength(JSON.stringify(toolCallArgs), \"utf8\");\n\t\t\t\t\tif (size > slimToolCallArgsLimit) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\ttoolCallId: maybeToolCall.id,\n\t\t\t\t\t\t\ttoolCallName: maybeToolCall.name,\n\t\t\t\t\t\t\ttoolCallArgsTruncated: true,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\treturn {\n\t\t\t\t\t\ttoolCallId: maybeToolCall.id,\n\t\t\t\t\t\ttoolCallName: maybeToolCall.name,\n\t\t\t\t\t\ttoolCallArgsTruncated: true,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn {\n\t\t\t\ttoolCallId: maybeToolCall.id,\n\t\t\t\ttoolCallName: maybeToolCall.name,\n\t\t\t\ttoolCallArgs,\n\t\t\t};\n\t\t};\n\t\tconst maybeSlimEvent = (event: AgentEvent): AgentEvent => {\n\t\t\tif (!slimEvents || event.type !== \"message_update\") {\n\t\t\t\treturn event;\n\t\t\t}\n\n\t\t\tconst assistantEvent = event.assistantMessageEvent;\n\t\t\tconst slimEvent: Record<string, unknown> = { ...event };\n\t\t\tdelete slimEvent.message;\n\n\t\t\tif (!assistantEvent) {\n\t\t\t\treturn slimEvent as AgentEvent;\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\tassistantEvent.type === \"text_delta\" ||\n\t\t\t\tassistantEvent.type === \"thinking_delta\"\n\t\t\t) {\n\t\t\t\tconst { partial, ...assistantWithoutPartial } = assistantEvent as {\n\t\t\t\t\tpartial?: unknown;\n\t\t\t\t\t[key: string]: unknown;\n\t\t\t\t};\n\n\t\t\t\tslimEvent.assistantMessageEvent = assistantWithoutPartial;\n\t\t\t\treturn slimEvent as AgentEvent;\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\tassistantEvent.type === \"toolcall_start\" ||\n\t\t\t\tassistantEvent.type === \"toolcall_delta\" ||\n\t\t\t\tassistantEvent.type === \"toolcall_end\"\n\t\t\t) {\n\t\t\t\tconst { partial, ...assistantWithoutPartial } = assistantEvent as {\n\t\t\t\t\tpartial?: unknown;\n\t\t\t\t\t[key: string]: unknown;\n\t\t\t\t};\n\t\t\t\tconst toolCallInfo =\n\t\t\t\t\tassistantEvent.type === \"toolcall_end\"\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: extractToolCallInfo(assistantEvent);\n\n\t\t\t\tslimEvent.assistantMessageEvent = {\n\t\t\t\t\t...assistantWithoutPartial,\n\t\t\t\t\t...toolCallInfo,\n\t\t\t\t};\n\t\t\t\treturn slimEvent as AgentEvent;\n\t\t\t}\n\n\t\t\tslimEvent.assistantMessageEvent = assistantEvent;\n\t\t\treturn slimEvent as AgentEvent;\n\t\t};\n\t\tconst updateSessionSummary =\n\t\t\tcreateRuntimeSessionSummaryUpdater(sessionManager);\n\t\tconst automaticMemoryConsolidation =\n\t\t\tcreateAutomaticMemoryConsolidationCoordinator({\n\t\t\t\tcreateAgent: async () =>\n\t\t\t\t\tcreateBackgroundAgent(agent.state.model as RegisteredModel, {\n\t\t\t\t\t\tsystemPrompt: getMemoryConsolidationSystemPrompt(),\n\t\t\t\t\t}),\n\t\t\t\tgetModel: () => agent.state.model,\n\t\t\t});\n\t\tconst automaticMemoryExtraction =\n\t\t\tcreateAutomaticMemoryExtractionCoordinator({\n\t\t\t\tcreateAgent: async () =>\n\t\t\t\t\tcreateBackgroundAgent(agent.state.model as RegisteredModel),\n\t\t\t\tgetModel: () => agent.state.model,\n\t\t\t\tonProcessed: () => automaticMemoryConsolidation.schedule(),\n\t\t\t\tsessionManager,\n\t\t\t});\n\t\tconst sessionHookService = createSessionHookService({\n\t\t\tcwd: process.cwd(),\n\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t});\n\t\tconst unsubscribeMcpElicitationBridge = serverRequestManager.subscribe(\n\t\t\t(event) => {\n\t\t\t\tconst activeSessionId = sessionIdProvider();\n\t\t\t\tif (!activeSessionId || event.request.sessionId !== activeSessionId) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (event.request.kind !== \"mcp_elicitation\") {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (event.type === \"registered\") {\n\t\t\t\t\tsendSSE(sseSession, {\n\t\t\t\t\t\ttype: \"client_tool_request\",\n\t\t\t\t\t\ttoolCallId: event.request.callId,\n\t\t\t\t\t\ttoolName: event.request.toolName,\n\t\t\t\t\t\targs: event.request.args,\n\t\t\t\t\t});\n\t\t\t\t\tstoreToolArgs(event.request.callId, event.request.args);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\ttoolArgsByCallId.delete(event.request.callId);\n\t\t\t},\n\t\t);\n\n\t\tconst unsubscribe = agent.subscribe((event: AgentEvent) => {\n\t\t\tupdateSessionSummary(event);\n\n\t\t\t// Forward event to client\n\t\t\tsendSSE(sseSession, maybeSlimEvent(event));\n\n\t\t\t// Track tool args for later event correlation (used by artifact live reload)\n\t\t\tif (event.type === \"tool_execution_start\") {\n\t\t\t\tstoreToolArgs(event.toolCallId, event.args);\n\t\t\t}\n\t\t\tif (event.type === \"client_tool_request\") {\n\t\t\t\tstoreToolArgs(event.toolCallId, event.args);\n\t\t\t}\n\t\t\tif (event.type === \"tool_execution_end\") {\n\t\t\t\tif (event.toolName === \"artifacts\" && !event.isError) {\n\t\t\t\t\tconst sessionId = sessionManager.getSessionId();\n\t\t\t\t\tconst args = toolArgsByCallId.get(event.toolCallId) ?? {};\n\t\t\t\t\tconst filename =\n\t\t\t\t\t\ttypeof args.filename === \"string\" ? args.filename : null;\n\t\t\t\t\tconst command =\n\t\t\t\t\t\ttypeof args.command === \"string\" ? args.command : null;\n\t\t\t\t\tif (\n\t\t\t\t\t\tsessionId &&\n\t\t\t\t\t\tfilename &&\n\t\t\t\t\t\t(command === \"create\" ||\n\t\t\t\t\t\t\tcommand === \"update\" ||\n\t\t\t\t\t\t\tcommand === \"rewrite\" ||\n\t\t\t\t\t\t\tcommand === \"delete\")\n\t\t\t\t\t) {\n\t\t\t\t\t\tpublishArtifactUpdate(sessionId, filename);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\ttoolArgsByCallId.delete(event.toolCallId);\n\t\t\t}\n\n\t\t\t// Handle message completion - persist to session\n\t\t\tif (event.type === \"message_end\") {\n\t\t\t\tsessionManager.saveMessage(event.message);\n\t\t\t\tif (event.message.role === \"assistant\") {\n\t\t\t\t\tautomaticMemoryExtraction.schedule(sessionManager.getSessionFile());\n\t\t\t\t}\n\t\t\t\tlet initializationError: string | null = null;\n\n\t\t\t\t// Auto-initialize session on first user message\n\t\t\t\tif (sessionManager.shouldInitializeSession(agent.state.messages)) {\n\t\t\t\t\tinitializationError = startSessionWithPolicy({\n\t\t\t\t\t\tagent,\n\t\t\t\t\t\tenterpriseContext,\n\t\t\t\t\t\tlogger,\n\t\t\t\t\t\tmodelId: registeredModel.id,\n\t\t\t\t\t\tonSessionReady: (sessionId) => {\n\t\t\t\t\t\t\tsendSessionUpdate(sseSession, sessionId);\n\t\t\t\t\t\t\tsseSession.setContext({ sessionId });\n\t\t\t\t\t\t},\n\t\t\t\t\t\tsessionManager,\n\t\t\t\t\t\tsubject,\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\t// Update session snapshot on every event\n\t\t\t\tsessionManager.updateSnapshot(\n\t\t\t\t\tagent.state,\n\t\t\t\t\ttoSessionModelMetadata(registeredModel),\n\t\t\t\t);\n\t\t\t\tdispatchAgentNotification(\n\t\t\t\t\tevent,\n\t\t\t\t\t{\n\t\t\t\t\t\tcwd: process.cwd(),\n\t\t\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\t\t\tmessages: agent.state.messages,\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\tsessionHookService,\n\t\t\t\t\t\tlogger,\n\t\t\t\t\t},\n\t\t\t\t);\n\n\t\t\t\tif (initializationError) {\n\t\t\t\t\tsendSSE(sseSession, {\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tmessage: `[Policy] ${initializationError}`,\n\t\t\t\t\t});\n\t\t\t\t\tsseSession.end();\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Update session snapshot on every event\n\t\t\tsessionManager.updateSnapshot(\n\t\t\t\tagent.state,\n\t\t\t\ttoSessionModelMetadata(registeredModel),\n\t\t\t);\n\t\t\tdispatchAgentNotification(\n\t\t\t\tevent,\n\t\t\t\t{\n\t\t\t\t\tcwd: process.cwd(),\n\t\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\t\tmessages: agent.state.messages,\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tsessionHookService,\n\t\t\t\t\tlogger,\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\n\t\t// ===== Phase 6: Connection Close Handling =====\n\t\t// Abort agent and cleanup when client disconnects\n\t\tconst handleConnectionClose = () => {\n\t\t\tagent.abort();\n\t\t\tvoid cleanup(true);\n\t\t};\n\n\t\treq.on(\"close\", handleConnectionClose);\n\t\tres.on(\"close\", handleConnectionClose);\n\n\t\t/**\n\t\t * Cleanup resources after request completion or abort.\n\t\t * Idempotent - safe to call multiple times.\n\t\t */\n\t\tconst cleanup = async (aborted = false) => {\n\t\t\tif (cleanedUp) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcleanedUp = true;\n\n\t\t\t// Stop keepalive and remove event listeners\n\t\t\tsseSession.stopHeartbeat();\n\t\t\treq.off(\"close\", handleConnectionClose);\n\t\t\tres.off(\"close\", handleConnectionClose);\n\t\t\tunsubscribe();\n\t\t\tunsubscribeMcpElicitationBridge();\n\n\t\t\tawait automaticMemoryExtraction.flush();\n\t\t\tawait automaticMemoryConsolidation.flush();\n\t\t\tawait sessionManager.flush();\n\n\t\t\t// Send final SSE events if connection is still open\n\t\t\tif (!res.writableEnded) {\n\t\t\t\tif (aborted) {\n\t\t\t\t\tsseSession.sendAborted();\n\t\t\t\t}\n\t\t\t\tsseSession.end();\n\t\t\t}\n\n\t\t\t// Log if we had to skip writes due to client disconnect\n\t\t\tconst metrics = sseSession.getMetrics();\n\t\t\tif (metrics.skipped > 0) {\n\t\t\t\tconsole.debug(\"SSE writes skipped after disconnect\", metrics);\n\t\t\t}\n\t\t};\n\n\t\t// ===== Phase 7: Agent Execution =====\n\t\ttry {\n\t\t\t// Use circuit breaker to protect against cascading failures\n\t\t\t// If the provider is having issues, we'll fail fast\n\t\t\tconst breaker = getAgentCircuitBreaker(registeredModel.provider);\n\n\t\t\t// Execute the agent with the user's input\n\t\t\tawait runUserPromptWithRecovery({\n\t\t\t\tagent,\n\t\t\t\tsessionManager,\n\t\t\t\tcwd: process.cwd(),\n\t\t\t\tprompt: userInput,\n\t\t\t\tattachmentCount: attachmentsToSend?.length ?? 0,\n\t\t\t\tattachmentNames: attachmentsToSend?.map(\n\t\t\t\t\t(attachment) => attachment.fileName,\n\t\t\t\t),\n\t\t\t\texecute: () =>\n\t\t\t\t\tbreaker.execute(() => agent.prompt(userInput, attachmentsToSend)),\n\t\t\t\tgetPostKeepMessages: withMcpPostKeepMessages(),\n\t\t\t});\n\n\t\t\t// Send completion signal if connection is still open\n\t\t\tif (!res.writableEnded) {\n\t\t\t\tsseSession.sendDone();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\t// Log and forward errors to client\n\t\t\tlogger.error(\n\t\t\t\t\"Agent prompt error\",\n\t\t\t\terror instanceof Error ? error : undefined,\n\t\t\t\t{ sessionId: sessionManager.getSessionId?.() },\n\t\t\t);\n\t\t\tsendSSE(sseSession, {\n\t\t\t\ttype: \"error\",\n\t\t\t\tmessage: error instanceof Error ? error.message : \"Unknown error\",\n\t\t\t});\n\t\t} finally {\n\t\t\t// Always cleanup, even on error\n\t\t\tawait cleanup(false);\n\t\t}\n\t} catch (error) {\n\t\t// Handle errors during setup (before SSE stream is established)\n\t\tlogger.error(\n\t\t\t\"Chat handler error\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t} finally {\n\t\t// Release SSE connection slot\n\t\tif (sseLease && releaseSse) {\n\t\t\treleaseSse(sseLease);\n\t\t}\n\t}\n}\n"]}
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../../src/server/handlers/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAKhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACN,6CAA6C,EAC7C,kCAAkC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,0CAA0C,EAAE,MAAM,iCAAiC,CAAC;AAE7F,OAAO,EACN,+BAA+B,EAC/B,0BAA0B,GAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACN,iCAAiC,EACjC,4BAA4B,GAC5B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAChF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,kCAAkC,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EACN,qBAAqB,EACrB,6BAA6B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAEN,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAEN,iBAAiB,EACjB,oBAAoB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC,SAAS,sBAAsB,CAAC,OAAmC;IAClE,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,OAAO;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;SACxC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,GAAoB,EACpB,GAAmB,EACnB,OAAyB;IAEzB,uCAAuC;IACvC,MAAM,EACL,WAAW,EACX,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,WAAW,EAAE,IAAI,GACjB,GAAG,OAAO,CAAC;IAEZ,+CAA+C;IAC/C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,IAAI,CAAC;QACJ,0CAA0C;QAC1C,MAAM,OAAO,GAAG,CAAC,MAAM,oBAAoB,CAC1C,GAAG,EACH,iBAAiB,CACjB,CAAwB,CAAC;QAE1B,iDAAiD;QACjD,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvD,CAAC,CAAE,OAAO,CAAC,QAA8B;YACzC,CAAC,CAAC,EAAE,CAAC;QACN,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QAED,oDAAoD;QACpD,MAAM,aAAa,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACrD,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAChD,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,GAAG,CAAC,GAAG,EAAE;YACpD,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;YAC7C,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YAEzC,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,OAAO;oBACN,iBAAiB,EAAE,SAA0C;oBAC7D,eAAe,EAAE,IAAqB;iBACtC,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAsB,EAAE,CAAC;YAC1C,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAChD,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,GACT,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtE,MAAM,QAAQ,GACb,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;gBAClE,MAAM,QAAQ,GACb,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;oBAChC,CAAC,CAAC,IAAI,CAAC,QAAQ;oBACf,CAAC,CAAC,0BAA0B,CAAC;gBAC/B,MAAM,IAAI,GACT,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC1D,CAAC,CAAC,IAAI,CAAC,IAAI;oBACX,CAAC,CAAC,CAAC,CAAC;gBACN,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,MAAM,aAAa,GAClB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;oBACrC,CAAC,CAAC,IAAI,CAAC,aAAa;oBACpB,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,OAAO,GACZ,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAE7D,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;oBAAE,SAAS;gBAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,wFAAwF;oBACxF,SAAS;gBACV,CAAC;gBAED,6EAA6E;gBAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;gBAEnD,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;oBAClC,OAAO;wBACN,iBAAiB,EAAE,SAAS;wBAC5B,eAAe,EAAE,yBAAyB,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,wBAAwB,IAAI,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK;qBAC/J,CAAC;gBACH,CAAC;gBAED,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;oBAClC,OAAO;wBACN,iBAAiB,EAAE,SAAS;wBAC5B,eAAe,EAAE,wCAAwC,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK;qBACtG,CAAC;gBACH,CAAC;gBAED,WAAW,CAAC,IAAI,CAAC;oBAChB,EAAE;oBACF,IAAI;oBACJ,QAAQ;oBACR,QAAQ;oBACR,IAAI,EAAE,IAAI,IAAI,KAAK;oBACnB,OAAO;oBACP,aAAa;oBACb,OAAO;iBACP,CAAC,CAAC;YACJ,CAAC;YAED,OAAO;gBACN,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBAC/D,eAAe,EAAE,IAAI;aACrB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,eAAe,EAAE,CAAC;YACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1D,OAAO;QACR,CAAC;QAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACzE,OAAO;QACR,CAAC;QAED,iDAAiD;QACjD,sDAAsD;QACtD,IAAI,UAAU,EAAE,CAAC;YAChB,QAAQ,GAAG,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAC5C,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;QACF,CAAC;QAED,+CAA+C;QAC/C,mEAAmE;QACnE,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAEpC,gDAAgD;QAChD,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,IAAI,sBAAsB,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC5C,qBAAqB,GAAG,MAAM,cAAc,CAAC,aAAa,CACzD,OAAO,CAAC,SAAS,CACjB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CACpD,OAAO,CAAC,SAAS,CACjB,CAAC;gBACF,IAAI,WAAW,EAAE,CAAC;oBACjB,cAAc,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;oBAC3C,qBAAqB,GAAG,IAAI,CAAC;gBAC9B,CAAC;YACF,CAAC;QACF,CAAC;QAED,+EAA+E;QAC/E,8EAA8E;QAC9E,sEAAsE;QACtE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;YACrD,GAAG;YACH,cAAc,EAAE,OAAO,CAAC,KAAK;YAC7B,IAAI,EAAE,OAAO;SACb,CAAC,CAAC;QACH,IAAI,eAA4C,CAAC;QACjD,IAAI,cAAuB,CAAC;QAC5B,IAAI,kBAA2B,CAAC;QAChC,IAAI,4BAA4B,GAErB,IAAI,CAAC;QAChB,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,gBAAgB,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1E,IAAI,CAAC;gBACJ,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,mBAAmB,CACpC,yBAAyB,EAAE,EAAE,MAAM,EACnC;oBACC,QAAQ,EAAE,cAAc,CAAC,QAAQ;oBACjC,OAAO,EAAE,cAAc,CAAC,EAAE;iBAC1B,CACD,CAAC;gBACF,IAAI,SAAS,EAAE,CAAC;oBACf,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;wBACjB,4BAA4B,GAAG,SAAS,CAAC;oBAC1C,CAAC;oBACD,SAAS;gBACV,CAAC;gBACD,eAAe,GAAG,cAAc,CAAC;gBACjC,MAAM;YACP,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,cAAc,GAAG,KAAK,CAAC;gBACvB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBACjB,kBAAkB,GAAG,KAAK,CAAC;gBAC5B,CAAC;YACF,CAAC;QACF,CAAC;QACD,IAAI,CAAC,eAAe,IAAI,4BAA4B,EAAE,CAAC;YACtD,QAAQ,CACP,GAAG,EACH,GAAG,EACH;gBACC,KAAK,EAAE,4BAA4B,CAAC,OAAO;gBAC3C,IAAI,EAAE,4BAA4B,CAAC,IAAI;gBACvC,WAAW,EAAE,4BAA4B,CAAC,WAAW;aACrD,EACD,IAAI,EACJ,GAAG,CACH,CAAC;YACF,OAAO;QACR,CAAC;QACD,IAAI,CAAC,eAAe,EAAE,CAAC;YACtB,MAAM,kBAAkB,IAAI,cAAc,CAAC;QAC5C,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAElC,wEAAwE;QACxE,MAAM,cAAc,GAAG,qBAAqB,CAC3C,gBAAgB,CACf,GAAG,EACH,0BAA0B,EAC1B,yBAAyB,CACzB,IAAI,SAAS,CACd,CAAC;QAEF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;YACvD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO;YACP,kBAAkB,EAAE,cAAc;YAClC,mBAAmB;SACnB,CAAC,CAAC;QAEH,mDAAmD;QACnD,MAAM,iBAAiB,GACtB,gBAAgB,CACf,GAAG,EACH,yBAAyB,EACzB,wBAAwB,CACxB,KAAK,GAAG,CAAC;QAEX,MAAM,YAAY,GAAG,gBAAgB,CACpC,GAAG,EACH,mBAAmB,EACnB,kBAAkB,CAClB,EAAE,WAAW,EAAE,CAAC;QACjB,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,SAAS,CAAC;QAC3E,MAAM,sBAAsB,GAAG,IAAI,wBAAwB,CAC1D,iBAAiB,EACjB,iBAAiB,CACjB,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,6BAA6B,CACzD,QAAQ,EACR,iBAAiB,CACjB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,WAAW,CAC9B,eAAe,EACf,OAAO,CAAC,aAAa,IAAI,KAAK,EAC9B,iBAAiB,EACjB;YACC,eAAe,EAAE,sBAAsB;YACvC,gBAAgB;YAChB,GAAG,CAAC,iBAAiB;gBACpB,CAAC,CAAC;oBACA,iBAAiB,EAAE,IAAI;oBACvB,iBAAiB,EAChB,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,CAAC;oBAChD,kBAAkB,EAAE,YAAY,KAAK,QAAQ;oBAC7C,qBAAqB,EAAE,YAAY,KAAK,WAAW;oBACnD,qBAAqB,EAAE,YAAY,KAAK,WAAW;iBACnD;gBACF,CAAC,CAAC,EAAE,CAAC;SACN,CACD,CAAC;QAEF,4EAA4E;QAC5E,MAAM,eAAe,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,4BAA4B,CACnD,eAAe,EACf,eAAe,CACf,CAAC;QACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;QAED,wCAAwC;QACxC,sCAAsC;QACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YAClB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;YACxB,GAAG,IAAI;SACP,CAAC,CAAC;QAEH,+DAA+D;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,GAAG,eAAe,CAAC,QAAQ,IAAI,eAAe,CAAC,EAAE,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,UAAU,CAChC,GAAG,EACH,CAAC,OAAO,EAAE,EAAE;YACX,qEAAqE;YACrE,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;gBAC5C,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS;gBACrC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ;gBACnC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS;gBACrC,SAAS,EACR,OAAO,CAAC,SAAS,YAAY,KAAK;oBACjC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO;oBAC3B,CAAC,CAAC,OAAO,CAAC,SAAS;aACrB,CAAC,CAAC;QACJ,CAAC,EACD,EAAE,SAAS,EAAE,QAAQ,EAAE,CACvB,CAAC;QACF,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,4CAA4C;QAEzE,gDAAgD;QAChD,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,gDAAgD;QAChD,+DAA+D;QAC/D,mDAAmD;QACnD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAE1E,MAAM,yBAAyB,GAAG,KAAK,IAA4B,EAAE;YACpE,IAAI,qBAAqB,IAAI,cAAc,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACb,CAAC;YACD,MAAM,mBAAmB,GAAG,MAAM,sBAAsB,CAAC;gBACxD,KAAK;gBACL,iBAAiB;gBACjB,MAAM;gBACN,OAAO,EAAE,eAAe,CAAC,EAAE;gBAC3B,cAAc,EAAE,CAAC,SAAS,EAAE,EAAE;oBAC7B,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;oBACzC,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;gBACtC,CAAC;gBACD,cAAc;gBACd,OAAO;aACP,CAAC,CAAC;YACH,IAAI,mBAAmB,EAAE,CAAC;gBACzB,OAAO,mBAAmB,CAAC;YAC5B,CAAC;YACD,qBAAqB,GAAG,IAAI,CAAC;YAC7B,OAAO,IAAI,CAAC;QACb,CAAC,CAAC;QAEF,MAAM,mBAAmB,GAAG,MAAM,yBAAyB,EAAE,CAAC;QAC9D,IAAI,mBAAmB,EAAE,CAAC;YACzB,OAAO,CAAC,UAAU,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,YAAY,mBAAmB,EAAE;aAC1C,CAAC,CAAC;YACH,UAAU,CAAC,GAAG,EAAE,CAAC;YACjB,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAC5B,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,OAAO;QACR,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmC,CAAC;QACpE,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,IAAa,EAAE,EAAE;YAC3D,gBAAgB,CAAC,GAAG,CACnB,UAAU,EACV,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBACxD,CAAC,CAAE,IAAgC;gBACnC,CAAC,CAAC,EAAE,CAA4B,CACjC,CAAC;QACH,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,gBAAgB,CACjC,GAAG,EACH,wBAAwB,EACxB,uBAAuB,CACvB,CAAC;QACF,MAAM,UAAU,GAAG,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,MAAM,CAAC;QAC7D,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC;YAC7D,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzD,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,mBAAmB,GAAG,CAAC,cAG5B,EAKC,EAAE;YACH,MAAM,qBAAqB,GAAG,cAAc,CAAC,OAAO,CAAC;YACrD,MAAM,YAAY,GAAG,cAAc,CAAC,YAAY,CAAC;YACjD,IACC,CAAC,qBAAqB;gBACtB,OAAO,YAAY,KAAK,QAAQ;gBAChC,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAC5C,CAAC;gBACF,OAAO,EAAE,CAAC;YACX,CAAC;YACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,EAAE,CAAC;YACX,CAAC;YACD,MAAM,aAAa,GAAG,KAKrB,CAAC;YACF,IAAI,aAAa,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACvC,OAAO,EAAE,CAAC;YACX,CAAC;YACD,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;YAC1C,MAAM,YAAY,GACjB,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtE,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;oBACrE,IAAI,IAAI,GAAG,qBAAqB,EAAE,CAAC;wBAClC,OAAO;4BACN,UAAU,EAAE,aAAa,CAAC,EAAE;4BAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;4BAChC,qBAAqB,EAAE,IAAI;yBAC3B,CAAC;oBACH,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO;wBACN,UAAU,EAAE,aAAa,CAAC,EAAE;wBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;wBAChC,qBAAqB,EAAE,IAAI;qBAC3B,CAAC;gBACH,CAAC;YACF,CAAC;YACD,OAAO;gBACN,UAAU,EAAE,aAAa,CAAC,EAAE;gBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;gBAChC,YAAY;aACZ,CAAC;QACH,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,CAAC,KAAiB,EAAc,EAAE;YACxD,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAC;YACd,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,qBAAqB,CAAC;YACnD,MAAM,SAAS,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;YACxD,OAAO,SAAS,CAAC,OAAO,CAAC;YAEzB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,OAAO,SAAuB,CAAC;YAChC,CAAC;YAED,IACC,cAAc,CAAC,IAAI,KAAK,YAAY;gBACpC,cAAc,CAAC,IAAI,KAAK,gBAAgB,EACvC,CAAC;gBACF,MAAM,EAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAG/C,CAAC;gBAEF,SAAS,CAAC,qBAAqB,GAAG,uBAAuB,CAAC;gBAC1D,OAAO,SAAuB,CAAC;YAChC,CAAC;YAED,IACC,cAAc,CAAC,IAAI,KAAK,gBAAgB;gBACxC,cAAc,CAAC,IAAI,KAAK,gBAAgB;gBACxC,cAAc,CAAC,IAAI,KAAK,cAAc,EACrC,CAAC;gBACF,MAAM,EAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,GAAG,cAG/C,CAAC;gBACF,MAAM,YAAY,GACjB,cAAc,CAAC,IAAI,KAAK,cAAc;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;gBAExC,SAAS,CAAC,qBAAqB,GAAG;oBACjC,GAAG,uBAAuB;oBAC1B,GAAG,YAAY;iBACf,CAAC;gBACF,OAAO,SAAuB,CAAC;YAChC,CAAC;YAED,SAAS,CAAC,qBAAqB,GAAG,cAAc,CAAC;YACjD,OAAO,SAAuB,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,oBAAoB,GACzB,kCAAkC,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,4BAA4B,GACjC,6CAA6C,CAAC;YAC7C,WAAW,EAAE,KAAK,IAAI,EAAE,CACvB,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAwB,EAAE;gBAC3D,YAAY,EAAE,kCAAkC,EAAE;aAClD,CAAC;YACH,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK;SACjC,CAAC,CAAC;QACJ,MAAM,yBAAyB,GAC9B,0CAA0C,CAAC;YAC1C,WAAW,EAAE,KAAK,IAAI,EAAE,CACvB,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAwB,CAAC;YAC5D,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK;YACjC,WAAW,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,QAAQ,EAAE;YAC1D,cAAc;SACd,CAAC,CAAC;QACJ,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;YACnD,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,+BAA+B,GAAG,oBAAoB,CAAC,SAAS,CACrE,CAAC,KAAK,EAAE,EAAE;YACT,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;YAC5C,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;gBACrE,OAAO;YACR,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC9C,OAAO;YACR,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,UAAU,EAAE;oBACnB,IAAI,EAAE,qBAAqB;oBAC3B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;oBAChC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;oBAChC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;iBACxB,CAAC,CAAC;gBACH,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxD,OAAO;YACR,CAAC;YACD,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CACD,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,KAAiB,EAAE,EAAE;YACzD,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAE5B,0BAA0B;YAC1B,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;YAE3C,6EAA6E;YAC7E,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC3C,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC1C,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACzC,0BAA0B,CAAC;oBAC1B,GAAG;oBACH,KAAK;oBACL,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;oBACxC,OAAO;iBACP,CAAC,CAAC;gBACH,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACtD,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,EAAE,CAAC;oBAChD,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;oBAC1D,MAAM,QAAQ,GACb,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC1D,MAAM,OAAO,GACZ,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;oBACxD,IACC,SAAS;wBACT,QAAQ;wBACR,CAAC,OAAO,KAAK,QAAQ;4BACpB,OAAO,KAAK,QAAQ;4BACpB,OAAO,KAAK,SAAS;4BACrB,OAAO,KAAK,QAAQ,CAAC,EACrB,CAAC;wBACF,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBAC5C,CAAC;gBACF,CAAC;gBACD,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;YAED,iDAAiD;YACjD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAClC,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC1C,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvC,0BAA0B,CAAC;wBAC1B,GAAG;wBACH,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;wBACxC,OAAO;qBACP,CAAC,CAAC;oBACH,iCAAiC,CAAC;wBACjC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;wBACnC,QAAQ,EAAE,eAAe,CAAC,QAAQ;wBAClC,KAAK,EAAE,eAAe,CAAC,EAAE;wBACzB,SAAS,EAAE,cAAc;wBACzB,OAAO,EAAE,KAAK,CAAC,OAAO;qBACtB,CAAC,CAAC;oBACH,+BAA+B,CAAC;wBAC/B,GAAG;wBACH,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;wBACxC,OAAO;qBACP,CAAC,CAAC;oBACH,yBAAyB,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,yCAAyC;gBACzC,cAAc,CAAC,cAAc,CAC5B,KAAK,CAAC,KAAK,EACX,sBAAsB,CAAC,eAAe,CAAC,CACvC,CAAC;gBACF,yBAAyB,CACxB,KAAK,EACL;oBACC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;oBAClB,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;oBACxC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;iBAC9B,EACD;oBACC,kBAAkB;oBAClB,MAAM;iBACN,CACD,CAAC;gBAEF,OAAO;YACR,CAAC;YAED,yCAAyC;YACzC,cAAc,CAAC,cAAc,CAC5B,KAAK,CAAC,KAAK,EACX,sBAAsB,CAAC,eAAe,CAAC,CACvC,CAAC;YACF,yBAAyB,CACxB,KAAK,EACL;gBACC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE;gBACxC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;aAC9B,EACD;gBACC,kBAAkB;gBAClB,MAAM;aACN,CACD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,iDAAiD;QACjD,kDAAkD;QAClD,MAAM,qBAAqB,GAAG,GAAG,EAAE;YAClC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACvC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAEvC;;;WAGG;QACH,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE;YACzC,IAAI,SAAS,EAAE,CAAC;gBACf,OAAO;YACR,CAAC;YACD,SAAS,GAAG,IAAI,CAAC;YAEjB,4CAA4C;YAC5C,UAAU,CAAC,aAAa,EAAE,CAAC;YAC3B,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;YACxC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;YACxC,WAAW,EAAE,CAAC;YACd,+BAA+B,EAAE,CAAC;YAElC,MAAM,yBAAyB,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,4BAA4B,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;YAE7B,oDAAoD;YACpD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBACxB,IAAI,OAAO,EAAE,CAAC;oBACb,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC1B,CAAC;gBACD,UAAU,CAAC,GAAG,EAAE,CAAC;YAClB,CAAC;YAED,wDAAwD;YACxD,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;QACF,CAAC,CAAC;QAEF,uCAAuC;QACvC,IAAI,CAAC;YACJ,4DAA4D;YAC5D,oDAAoD;YACpD,MAAM,OAAO,GAAG,sBAAsB,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAEjE,0CAA0C;YAC1C,MAAM,yBAAyB,CAAC;gBAC/B,KAAK;gBACL,cAAc;gBACd,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;gBAC/C,eAAe,EAAE,iBAAiB,EAAE,GAAG,CACtC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CACnC;gBACD,OAAO,EAAE,GAAG,EAAE,CACb,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;gBAClE,mBAAmB,EAAE,uBAAuB,EAAE;aAC9C,CAAC,CAAC;YAEH,qDAAqD;YACrD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBACxB,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,mCAAmC;YACnC,MAAM,CAAC,KAAK,CACX,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAC1C,EAAE,SAAS,EAAE,cAAc,CAAC,YAAY,EAAE,EAAE,EAAE,CAC9C,CAAC;YACF,OAAO,CAAC,UAAU,EAAE;gBACnB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aACjE,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,gCAAgC;YAChC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,gEAAgE;QAChE,MAAM,CAAC,KAAK,CACX,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC;QACF,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACV,8BAA8B;QAC9B,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC5B,UAAU,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;AACF,CAAC","sourcesContent":["/**\n * Chat Handler - Main WebSocket/SSE Endpoint for Agent Conversations\n *\n * This module implements the primary chat endpoint for the web server.\n * It handles incoming chat requests, manages agent execution, and streams\n * responses back to clients via Server-Sent Events (SSE).\n *\n * Request flow:\n * 1. Parse and validate incoming JSON request\n * 2. Acquire SSE connection slot (rate limited)\n * 3. Create or resume session based on sessionId\n * 4. Initialize agent with model and approval settings\n * 5. Hydrate conversation history from request\n * 6. Stream agent events to client via SSE\n * 7. Persist session state on completion\n *\n * Key features:\n * - Circuit breaker protection for agent calls\n * - Graceful handling of client disconnects\n * - Session persistence with auto-initialization\n * - Approval mode configuration via headers\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport type { ComposerChatRequest, ComposerMessage } from \"@evalops/contracts\";\nimport { isAssistantMessage } from \"../../agent/type-guards.js\";\nimport type {\n\tAttachment as AgentAttachment,\n\tAgentEvent,\n} from \"../../agent/types.js\";\nimport { runUserPromptWithRecovery } from \"../../agent/user-prompt-runtime.js\";\nimport { dispatchAgentNotification } from \"../../hooks/notification-hooks.js\";\nimport { createSessionHookService } from \"../../hooks/session-integration.js\";\nimport { withMcpPostKeepMessages } from \"../../mcp/prompt-recovery.js\";\nimport {\n\tcreateAutomaticMemoryConsolidationCoordinator,\n\tgetMemoryConsolidationSystemPrompt,\n} from \"../../memory/auto-consolidation.js\";\nimport { createAutomaticMemoryExtractionCoordinator } from \"../../memory/auto-extraction.js\";\nimport type { RegisteredModel } from \"../../models/registry.js\";\nimport {\n\trecordComplianceAssistantAction,\n\trecordComplianceToolAction,\n} from \"../../services/compliance/recorder.js\";\nimport {\n\trecordIntelligentRouterChatMetric,\n\tselectIntelligentRouterModel,\n} from \"../../services/intelligent-router/recorder.js\";\nimport { recordAssistantUsageMetric } from \"../../services/usage-analytics/recorder.js\";\nimport { evaluateModelPolicy } from \"../../services/workspace-config/policy.js\";\nimport { toSessionModelMetadata } from \"../../session/manager.js\";\nimport { createRuntimeSessionSummaryUpdater } from \"../../session/runtime-summary-updater.js\";\nimport { recordSseSkip } from \"../../telemetry.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport type { WebServerContext } from \"../app-context.js\";\nimport {\n\tnormalizeApprovalMode,\n\tresolveApprovalModeForRequest,\n} from \"../approval-mode-store.js\";\nimport { WebActionApprovalService } from \"../approval-service.js\";\nimport { publishArtifactUpdate } from \"../artifacts-live-reload.js\";\nimport { getAuthSubject } from \"../authz.js\";\nimport { getAgentCircuitBreaker } from \"../circuit-breaker.js\";\nimport { clientToolService } from \"../client-tools-service.js\";\nimport { isHostedSessionManager } from \"../hosted-session-manager.js\";\nimport { getWorkspaceConfigContext } from \"../request-context.js\";\nimport { serverRequestManager } from \"../server-request-manager.js\";\nimport {\n\tApiError,\n\tgetRequestHeader,\n\trespondWithApiError,\n\tsendJson,\n} from \"../server-utils.js\";\nimport { startSessionWithPolicy } from \"../session-initialization.js\";\nimport { createWebSessionManagerForRequest } from \"../session-scope.js\";\nimport { convertComposerMessagesToApp } from \"../session-serialization.js\";\nimport { SseSession, sendSSE, sendSessionUpdate } from \"../sse-session.js\";\nimport { ServerRequestToolRetryService } from \"../tool-retry-service.js\";\nimport {\n\ttype ChatRequestInput,\n\tChatRequestSchema,\n\tparseAndValidateJson,\n} from \"../validation.js\";\n\nconst logger = createLogger(\"web:chat\");\n\nfunction getComposerTextContent(content: ComposerMessage[\"content\"]): string {\n\tif (typeof content === \"string\") return content;\n\tif (!Array.isArray(content)) return \"\";\n\treturn content\n\t\t.filter((block) => block.type === \"text\")\n\t\t.map((block) => block.text)\n\t\t.join(\"\");\n}\n\n/**\n * Handle an incoming chat request.\n *\n * This is the main entry point for chat interactions. It:\n * 1. Validates the request format\n * 2. Sets up SSE streaming\n * 3. Runs the agent with the user's message\n * 4. Streams events back to the client\n * 5. Persists the session state\n *\n * @param req - The incoming HTTP request\n * @param res - The HTTP response (will be converted to SSE stream)\n * @param context - Server context with agent factory and configuration\n */\nexport async function handleChat(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcontext: WebServerContext,\n) {\n\t// Destructure context for cleaner code\n\tconst {\n\t\tcreateAgent,\n\t\tcreateBackgroundAgent,\n\t\tgetRegisteredModel,\n\t\tdefaultApprovalMode,\n\t\tacquireSse,\n\t\treleaseSse,\n\t\tcorsHeaders: cors,\n\t} = context;\n\n\t// Track SSE lease for cleanup in finally block\n\tlet sseLease: symbol | null = null;\n\n\ttry {\n\t\t// ===== Phase 1: Request Validation =====\n\t\tconst chatReq = (await parseAndValidateJson<ChatRequestInput>(\n\t\t\treq,\n\t\t\tChatRequestSchema,\n\t\t)) as ComposerChatRequest;\n\n\t\t// Validate message array exists and is non-empty\n\t\tconst incomingMessages = Array.isArray(chatReq.messages)\n\t\t\t? (chatReq.messages as ComposerMessage[])\n\t\t\t: [];\n\t\tif (incomingMessages.length === 0) {\n\t\t\tsendJson(res, 400, { error: \"No messages supplied\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// The last message must be the user's current input\n\t\tconst latestMessage = incomingMessages[incomingMessages.length - 1];\n\t\tif (!latestMessage || latestMessage.role !== \"user\") {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t400,\n\t\t\t\t{ error: \"Last message must be a user message\" },\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst { attachmentsToSend, attachmentError } = (() => {\n\t\t\tconst MAX_ATTACHMENT_BYTES = 8 * 1024 * 1024;\n\t\t\tconst MAX_TOTAL_BYTES = 20 * 1024 * 1024;\n\n\t\t\tconst raw = latestMessage.attachments;\n\t\t\tif (!Array.isArray(raw) || raw.length === 0) {\n\t\t\t\treturn {\n\t\t\t\t\tattachmentsToSend: undefined as AgentAttachment[] | undefined,\n\t\t\t\t\tattachmentError: null as string | null,\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst attachments: AgentAttachment[] = [];\n\t\t\tlet totalBytes = 0;\n\n\t\t\tfor (const item of raw) {\n\t\t\t\tif (!item || typeof item !== \"object\") continue;\n\t\t\t\tconst id = typeof item.id === \"string\" ? item.id : \"\";\n\t\t\t\tconst type =\n\t\t\t\t\titem.type === \"image\" || item.type === \"document\" ? item.type : null;\n\t\t\t\tconst fileName =\n\t\t\t\t\ttypeof item.fileName === \"string\" ? item.fileName : \"attachment\";\n\t\t\t\tconst mimeType =\n\t\t\t\t\ttypeof item.mimeType === \"string\"\n\t\t\t\t\t\t? item.mimeType\n\t\t\t\t\t\t: \"application/octet-stream\";\n\t\t\t\tconst size =\n\t\t\t\t\ttypeof item.size === \"number\" && Number.isFinite(item.size)\n\t\t\t\t\t\t? item.size\n\t\t\t\t\t\t: 0;\n\t\t\t\tconst content = typeof item.content === \"string\" ? item.content : \"\";\n\t\t\t\tconst extractedText =\n\t\t\t\t\ttypeof item.extractedText === \"string\"\n\t\t\t\t\t\t? item.extractedText\n\t\t\t\t\t\t: undefined;\n\t\t\t\tconst preview =\n\t\t\t\t\ttypeof item.preview === \"string\" ? item.preview : undefined;\n\n\t\t\t\tif (!id || !type) continue;\n\t\t\t\tif (!content) {\n\t\t\t\t\t// Content omitted (e.g., session fetch); keep metadata for UI but do not send to model.\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\n\t\t\t\t// Base64 -> bytes (approx). Prefer validating against actual content length.\n\t\t\t\tconst approxBytes = Math.floor((content.length * 3) / 4);\n\t\t\t\tconst bytes = approxBytes > 0 ? approxBytes : size;\n\n\t\t\t\tif (bytes > MAX_ATTACHMENT_BYTES) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tattachmentsToSend: undefined,\n\t\t\t\t\t\tattachmentError: `Attachment too large: ${fileName} (${Math.ceil(bytes / 1024 / 1024)}MB). Max per file is ${Math.ceil(MAX_ATTACHMENT_BYTES / 1024 / 1024)}MB.`,\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\ttotalBytes += bytes;\n\t\t\t\tif (totalBytes > MAX_TOTAL_BYTES) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tattachmentsToSend: undefined,\n\t\t\t\t\t\tattachmentError: `Attachments too large: total exceeds ${Math.ceil(MAX_TOTAL_BYTES / 1024 / 1024)}MB.`,\n\t\t\t\t\t};\n\t\t\t\t}\n\n\t\t\t\tattachments.push({\n\t\t\t\t\tid,\n\t\t\t\t\ttype,\n\t\t\t\t\tfileName,\n\t\t\t\t\tmimeType,\n\t\t\t\t\tsize: size || bytes,\n\t\t\t\t\tcontent,\n\t\t\t\t\textractedText,\n\t\t\t\t\tpreview,\n\t\t\t\t});\n\t\t\t}\n\n\t\t\treturn {\n\t\t\t\tattachmentsToSend: attachments.length ? attachments : undefined,\n\t\t\t\tattachmentError: null,\n\t\t\t};\n\t\t})();\n\n\t\tif (attachmentError) {\n\t\t\tsendJson(res, 413, { error: attachmentError }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tconst userInput = getComposerTextContent(latestMessage.content).trim();\n\t\tif (!userInput && !attachmentsToSend) {\n\t\t\tsendJson(res, 400, { error: \"User message cannot be empty\" }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\t// ===== Phase 2: SSE Connection Management =====\n\t\t// Acquire a lease to limit concurrent SSE connections\n\t\tif (acquireSse) {\n\t\t\tsseLease = acquireSse();\n\t\t\tif (!sseLease) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t429,\n\t\t\t\t\t{ error: \"Too many active SSE connections\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\n\t\t// ===== Phase 3: Session and Agent Setup =====\n\t\t// Create session manager (false = don't auto-initialize from disk)\n\t\tconst sessionManager = createWebSessionManagerForRequest(req, false);\n\t\tconst subject = getAuthSubject(req);\n\n\t\t// Resume existing session if sessionId provided\n\t\tlet existingSessionLoaded = false;\n\t\tif (chatReq.sessionId) {\n\t\t\tif (isHostedSessionManager(sessionManager)) {\n\t\t\t\texistingSessionLoaded = await sessionManager.resumeSession(\n\t\t\t\t\tchatReq.sessionId,\n\t\t\t\t);\n\t\t\t} else {\n\t\t\t\tconst sessionFile = sessionManager.getSessionFileById(\n\t\t\t\t\tchatReq.sessionId,\n\t\t\t\t);\n\t\t\t\tif (sessionFile) {\n\t\t\t\t\tsessionManager.setSessionFile(sessionFile);\n\t\t\t\t\texistingSessionLoaded = true;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\t// Resolve model from registry through the intelligent router. With no history,\n\t\t// this preserves the caller's requested model; with enough data or overrides,\n\t\t// it can select a better-scoring model and expose explicit fallbacks.\n\t\tconst routingSelection = selectIntelligentRouterModel({\n\t\t\treq,\n\t\t\trequestedModel: chatReq.model,\n\t\t\tbody: chatReq,\n\t\t});\n\t\tlet registeredModel: RegisteredModel | undefined;\n\t\tlet lastModelError: unknown;\n\t\tlet selectedModelError: unknown;\n\t\tlet selectedModelPolicyViolation: ReturnType<\n\t\t\ttypeof evaluateModelPolicy\n\t\t> | null = null;\n\t\tfor (const [index, modelInput] of routingSelection.modelInputs.entries()) {\n\t\t\ttry {\n\t\t\t\tconst candidateModel = await getRegisteredModel(modelInput);\n\t\t\t\tconst violation = evaluateModelPolicy(\n\t\t\t\t\tgetWorkspaceConfigContext()?.config,\n\t\t\t\t\t{\n\t\t\t\t\t\tprovider: candidateModel.provider,\n\t\t\t\t\t\tmodelId: candidateModel.id,\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t\tif (violation) {\n\t\t\t\t\tif (index === 0) {\n\t\t\t\t\t\tselectedModelPolicyViolation = violation;\n\t\t\t\t\t}\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tregisteredModel = candidateModel;\n\t\t\t\tbreak;\n\t\t\t} catch (error) {\n\t\t\t\tlastModelError = error;\n\t\t\t\tif (index === 0) {\n\t\t\t\t\tselectedModelError = error;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tif (!registeredModel && selectedModelPolicyViolation) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{\n\t\t\t\t\terror: selectedModelPolicyViolation.message,\n\t\t\t\t\tcode: selectedModelPolicyViolation.code,\n\t\t\t\t\tworkspaceId: selectedModelPolicyViolation.workspaceId,\n\t\t\t\t},\n\t\t\t\tcors,\n\t\t\t\treq,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\t\tif (!registeredModel) {\n\t\t\tthrow selectedModelError ?? lastModelError;\n\t\t}\n\t\tconst routeStartedAt = Date.now();\n\n\t\t// Parse approval mode from request header (allows per-request override)\n\t\tconst headerApproval = normalizeApprovalMode(\n\t\t\tgetRequestHeader(\n\t\t\t\treq,\n\t\t\t\t\"x-composer-approval-mode\",\n\t\t\t\t\"x-maestro-approval-mode\",\n\t\t\t) ?? undefined,\n\t\t);\n\n\t\tconst effectiveApproval = resolveApprovalModeForRequest({\n\t\t\tsessionId: chatReq.sessionId,\n\t\t\tsubject,\n\t\t\theaderApprovalMode: headerApproval,\n\t\t\tdefaultApprovalMode,\n\t\t});\n\n\t\t// Create the agent with the resolved configuration\n\t\tconst clientToolsHeader =\n\t\t\tgetRequestHeader(\n\t\t\t\treq,\n\t\t\t\t\"x-composer-client-tools\",\n\t\t\t\t\"x-maestro-client-tools\",\n\t\t\t) === \"1\";\n\n\t\tconst clientHeader = getRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-client\",\n\t\t\t\"x-maestro-client\",\n\t\t)?.toLowerCase();\n\t\tconst sessionIdProvider = () => sessionManager.getSessionId() ?? undefined;\n\t\tconst requestApprovalService = new WebActionApprovalService(\n\t\t\teffectiveApproval,\n\t\t\tsessionIdProvider,\n\t\t);\n\t\tconst toolRetryService = new ServerRequestToolRetryService(\n\t\t\t\"prompt\",\n\t\t\tsessionIdProvider,\n\t\t);\n\n\t\tconst agent = await createAgent(\n\t\t\tregisteredModel,\n\t\t\tchatReq.thinkingLevel || \"off\",\n\t\t\teffectiveApproval,\n\t\t\t{\n\t\t\t\tapprovalService: requestApprovalService,\n\t\t\t\ttoolRetryService,\n\t\t\t\t...(clientToolsHeader\n\t\t\t\t\t? {\n\t\t\t\t\t\t\tenableClientTools: true,\n\t\t\t\t\t\t\tclientToolService:\n\t\t\t\t\t\t\t\tclientToolService.forSession(sessionIdProvider),\n\t\t\t\t\t\t\tincludeVscodeTools: clientHeader === \"vscode\",\n\t\t\t\t\t\t\tincludeJetBrainsTools: clientHeader === \"jetbrains\",\n\t\t\t\t\t\t\tincludeConductorTools: clientHeader === \"conductor\",\n\t\t\t\t\t\t}\n\t\t\t\t\t: {}),\n\t\t\t},\n\t\t);\n\n\t\t// Hydrate conversation history (all messages except the current user input)\n\t\tconst historyMessages = incomingMessages.slice(0, -1);\n\t\tconst hydratedHistory = convertComposerMessagesToApp(\n\t\t\thistoryMessages,\n\t\t\tregisteredModel,\n\t\t);\n\t\tif (hydratedHistory.length > 0) {\n\t\t\tagent.replaceMessages(hydratedHistory);\n\t\t} else {\n\t\t\tagent.clearMessages();\n\t\t}\n\n\t\t// ===== Phase 4: SSE Stream Setup =====\n\t\t// Initialize the SSE response headers\n\t\tres.writeHead(200, {\n\t\t\t\"Content-Type\": \"text/event-stream\",\n\t\t\t\"Cache-Control\": \"no-cache\",\n\t\t\tConnection: \"keep-alive\",\n\t\t\t...cors,\n\t\t});\n\n\t\t// Create SSE session with telemetry callback for skip tracking\n\t\tconst requestId = Math.random().toString(36).slice(2);\n\t\tconst modelKey = `${registeredModel.provider}/${registeredModel.id}`;\n\t\tconst sseSession = new SseSession(\n\t\t\tres,\n\t\t\t(metrics) => {\n\t\t\t\t// Record telemetry when SSE writes are skipped (client disconnected)\n\t\t\t\trecordSseSkip(metrics.sent, metrics.skipped, {\n\t\t\t\t\trequestId: metrics.context?.requestId,\n\t\t\t\t\tmodelKey: metrics.context?.modelKey,\n\t\t\t\t\tsessionId: metrics.context?.sessionId,\n\t\t\t\t\tlastError:\n\t\t\t\t\t\tmetrics.lastError instanceof Error\n\t\t\t\t\t\t\t? metrics.lastError.message\n\t\t\t\t\t\t\t: metrics.lastError,\n\t\t\t\t});\n\t\t\t},\n\t\t\t{ requestId, modelKey },\n\t\t);\n\t\tsseSession.startHeartbeat(); // Keep connection alive during idle periods\n\n\t\t// Track cleanup state to prevent double-cleanup\n\t\tlet cleanedUp = false;\n\n\t\t// ===== Phase 5: Agent Event Subscription =====\n\t\t// Subscribe to agent events and forward them to the SSE stream\n\t\t// Pre-load enterprise context for session tracking\n\t\tconst { enterpriseContext } = await import(\"../../enterprise/context.js\");\n\n\t\tconst initializeSessionIfNeeded = async (): Promise<string | null> => {\n\t\t\tif (existingSessionLoaded || sessionManager.isInitialized()) {\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\tconst initializationError = await startSessionWithPolicy({\n\t\t\t\tagent,\n\t\t\t\tenterpriseContext,\n\t\t\t\tlogger,\n\t\t\t\tmodelId: registeredModel.id,\n\t\t\t\tonSessionReady: (sessionId) => {\n\t\t\t\t\tsendSessionUpdate(sseSession, sessionId);\n\t\t\t\t\tsseSession.setContext({ sessionId });\n\t\t\t\t},\n\t\t\t\tsessionManager,\n\t\t\t\tsubject,\n\t\t\t});\n\t\t\tif (initializationError) {\n\t\t\t\treturn initializationError;\n\t\t\t}\n\t\t\texistingSessionLoaded = true;\n\t\t\treturn null;\n\t\t};\n\n\t\tconst initializationError = await initializeSessionIfNeeded();\n\t\tif (initializationError) {\n\t\t\tsendSSE(sseSession, {\n\t\t\t\ttype: \"error\",\n\t\t\t\tmessage: `[Policy] ${initializationError}`,\n\t\t\t});\n\t\t\tsseSession.end();\n\t\t\tif (sseLease && releaseSse) {\n\t\t\t\treleaseSse(sseLease);\n\t\t\t\tsseLease = null;\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\tconst toolArgsByCallId = new Map<string, Record<string, unknown>>();\n\t\tconst storeToolArgs = (toolCallId: string, args: unknown) => {\n\t\t\ttoolArgsByCallId.set(\n\t\t\t\ttoolCallId,\n\t\t\t\t(args && typeof args === \"object\" && !Array.isArray(args)\n\t\t\t\t\t? (args as Record<string, unknown>)\n\t\t\t\t\t: {}) as Record<string, unknown>,\n\t\t\t);\n\t\t};\n\t\tconst slimValue = getRequestHeader(\n\t\t\treq,\n\t\t\t\"x-composer-slim-events\",\n\t\t\t\"x-maestro-slim-events\",\n\t\t);\n\t\tconst slimEvents = slimValue === \"1\" || slimValue === \"true\";\n\t\tconst slimToolCallArgsLimit = (() => {\n\t\t\tconst raw = process.env.MAESTRO_SLIM_TOOLCALL_ARGS_MAX_BYTES;\n\t\t\tif (!raw) return 4096;\n\t\t\tconst parsed = Number(raw);\n\t\t\tif (!Number.isFinite(parsed) || parsed <= 0) return 4096;\n\t\t\treturn Math.min(parsed, 1024 * 1024);\n\t\t})();\n\t\tconst extractToolCallInfo = (assistantEvent: {\n\t\t\tcontentIndex?: number;\n\t\t\tpartial?: { content?: unknown[] };\n\t\t}): {\n\t\t\ttoolCallId?: string;\n\t\t\ttoolCallName?: string;\n\t\t\ttoolCallArgs?: Record<string, unknown>;\n\t\t\ttoolCallArgsTruncated?: boolean;\n\t\t} => {\n\t\t\tconst assistantMessageEvent = assistantEvent.partial;\n\t\t\tconst contentIndex = assistantEvent.contentIndex;\n\t\t\tif (\n\t\t\t\t!assistantMessageEvent ||\n\t\t\t\ttypeof contentIndex !== \"number\" ||\n\t\t\t\t!Array.isArray(assistantMessageEvent.content)\n\t\t\t) {\n\t\t\t\treturn {};\n\t\t\t}\n\t\t\tconst block = assistantMessageEvent.content[contentIndex];\n\t\t\tif (!block || typeof block !== \"object\") {\n\t\t\t\treturn {};\n\t\t\t}\n\t\t\tconst maybeToolCall = block as {\n\t\t\t\ttype?: string;\n\t\t\t\tid?: string;\n\t\t\t\tname?: string;\n\t\t\t\targuments?: Record<string, unknown>;\n\t\t\t};\n\t\t\tif (maybeToolCall.type !== \"toolCall\") {\n\t\t\t\treturn {};\n\t\t\t}\n\t\t\tconst maybeArgs = maybeToolCall.arguments;\n\t\t\tconst toolCallArgs =\n\t\t\t\tmaybeArgs && typeof maybeArgs === \"object\" && !Array.isArray(maybeArgs)\n\t\t\t\t\t? maybeArgs\n\t\t\t\t\t: undefined;\n\t\t\tif (toolCallArgs) {\n\t\t\t\ttry {\n\t\t\t\t\tconst size = Buffer.byteLength(JSON.stringify(toolCallArgs), \"utf8\");\n\t\t\t\t\tif (size > slimToolCallArgsLimit) {\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\ttoolCallId: maybeToolCall.id,\n\t\t\t\t\t\t\ttoolCallName: maybeToolCall.name,\n\t\t\t\t\t\t\ttoolCallArgsTruncated: true,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\treturn {\n\t\t\t\t\t\ttoolCallId: maybeToolCall.id,\n\t\t\t\t\t\ttoolCallName: maybeToolCall.name,\n\t\t\t\t\t\ttoolCallArgsTruncated: true,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn {\n\t\t\t\ttoolCallId: maybeToolCall.id,\n\t\t\t\ttoolCallName: maybeToolCall.name,\n\t\t\t\ttoolCallArgs,\n\t\t\t};\n\t\t};\n\t\tconst maybeSlimEvent = (event: AgentEvent): AgentEvent => {\n\t\t\tif (!slimEvents || event.type !== \"message_update\") {\n\t\t\t\treturn event;\n\t\t\t}\n\n\t\t\tconst assistantEvent = event.assistantMessageEvent;\n\t\t\tconst slimEvent: Record<string, unknown> = { ...event };\n\t\t\tdelete slimEvent.message;\n\n\t\t\tif (!assistantEvent) {\n\t\t\t\treturn slimEvent as AgentEvent;\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\tassistantEvent.type === \"text_delta\" ||\n\t\t\t\tassistantEvent.type === \"thinking_delta\"\n\t\t\t) {\n\t\t\t\tconst { partial, ...assistantWithoutPartial } = assistantEvent as {\n\t\t\t\t\tpartial?: unknown;\n\t\t\t\t\t[key: string]: unknown;\n\t\t\t\t};\n\n\t\t\t\tslimEvent.assistantMessageEvent = assistantWithoutPartial;\n\t\t\t\treturn slimEvent as AgentEvent;\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\tassistantEvent.type === \"toolcall_start\" ||\n\t\t\t\tassistantEvent.type === \"toolcall_delta\" ||\n\t\t\t\tassistantEvent.type === \"toolcall_end\"\n\t\t\t) {\n\t\t\t\tconst { partial, ...assistantWithoutPartial } = assistantEvent as {\n\t\t\t\t\tpartial?: unknown;\n\t\t\t\t\t[key: string]: unknown;\n\t\t\t\t};\n\t\t\t\tconst toolCallInfo =\n\t\t\t\t\tassistantEvent.type === \"toolcall_end\"\n\t\t\t\t\t\t? {}\n\t\t\t\t\t\t: extractToolCallInfo(assistantEvent);\n\n\t\t\t\tslimEvent.assistantMessageEvent = {\n\t\t\t\t\t...assistantWithoutPartial,\n\t\t\t\t\t...toolCallInfo,\n\t\t\t\t};\n\t\t\t\treturn slimEvent as AgentEvent;\n\t\t\t}\n\n\t\t\tslimEvent.assistantMessageEvent = assistantEvent;\n\t\t\treturn slimEvent as AgentEvent;\n\t\t};\n\t\tconst updateSessionSummary =\n\t\t\tcreateRuntimeSessionSummaryUpdater(sessionManager);\n\t\tconst automaticMemoryConsolidation =\n\t\t\tcreateAutomaticMemoryConsolidationCoordinator({\n\t\t\t\tcreateAgent: async () =>\n\t\t\t\t\tcreateBackgroundAgent(agent.state.model as RegisteredModel, {\n\t\t\t\t\t\tsystemPrompt: getMemoryConsolidationSystemPrompt(),\n\t\t\t\t\t}),\n\t\t\t\tgetModel: () => agent.state.model,\n\t\t\t});\n\t\tconst automaticMemoryExtraction =\n\t\t\tcreateAutomaticMemoryExtractionCoordinator({\n\t\t\t\tcreateAgent: async () =>\n\t\t\t\t\tcreateBackgroundAgent(agent.state.model as RegisteredModel),\n\t\t\t\tgetModel: () => agent.state.model,\n\t\t\t\tonProcessed: () => automaticMemoryConsolidation.schedule(),\n\t\t\t\tsessionManager,\n\t\t\t});\n\t\tconst sessionHookService = createSessionHookService({\n\t\t\tcwd: process.cwd(),\n\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t});\n\t\tconst unsubscribeMcpElicitationBridge = serverRequestManager.subscribe(\n\t\t\t(event) => {\n\t\t\t\tconst activeSessionId = sessionIdProvider();\n\t\t\t\tif (!activeSessionId || event.request.sessionId !== activeSessionId) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (event.request.kind !== \"mcp_elicitation\") {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (event.type === \"registered\") {\n\t\t\t\t\tsendSSE(sseSession, {\n\t\t\t\t\t\ttype: \"client_tool_request\",\n\t\t\t\t\t\ttoolCallId: event.request.callId,\n\t\t\t\t\t\ttoolName: event.request.toolName,\n\t\t\t\t\t\targs: event.request.args,\n\t\t\t\t\t});\n\t\t\t\t\tstoreToolArgs(event.request.callId, event.request.args);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\ttoolArgsByCallId.delete(event.request.callId);\n\t\t\t},\n\t\t);\n\n\t\tconst unsubscribe = agent.subscribe((event: AgentEvent) => {\n\t\t\tupdateSessionSummary(event);\n\n\t\t\t// Forward event to client\n\t\t\tsendSSE(sseSession, maybeSlimEvent(event));\n\n\t\t\t// Track tool args for later event correlation (used by artifact live reload)\n\t\t\tif (event.type === \"tool_execution_start\") {\n\t\t\t\tstoreToolArgs(event.toolCallId, event.args);\n\t\t\t}\n\t\t\tif (event.type === \"client_tool_request\") {\n\t\t\t\tstoreToolArgs(event.toolCallId, event.args);\n\t\t\t}\n\t\t\tif (event.type === \"tool_execution_end\") {\n\t\t\t\trecordComplianceToolAction({\n\t\t\t\t\treq,\n\t\t\t\t\tevent,\n\t\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\t\tsubject,\n\t\t\t\t});\n\t\t\t\tif (event.toolName === \"artifacts\" && !event.isError) {\n\t\t\t\t\tconst sessionId = sessionManager.getSessionId();\n\t\t\t\t\tconst args = toolArgsByCallId.get(event.toolCallId) ?? {};\n\t\t\t\t\tconst filename =\n\t\t\t\t\t\ttypeof args.filename === \"string\" ? args.filename : null;\n\t\t\t\t\tconst command =\n\t\t\t\t\t\ttypeof args.command === \"string\" ? args.command : null;\n\t\t\t\t\tif (\n\t\t\t\t\t\tsessionId &&\n\t\t\t\t\t\tfilename &&\n\t\t\t\t\t\t(command === \"create\" ||\n\t\t\t\t\t\t\tcommand === \"update\" ||\n\t\t\t\t\t\t\tcommand === \"rewrite\" ||\n\t\t\t\t\t\t\tcommand === \"delete\")\n\t\t\t\t\t) {\n\t\t\t\t\t\tpublishArtifactUpdate(sessionId, filename);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\ttoolArgsByCallId.delete(event.toolCallId);\n\t\t\t}\n\n\t\t\t// Handle message completion - persist to session\n\t\t\tif (event.type === \"message_end\") {\n\t\t\t\tsessionManager.saveMessage(event.message);\n\t\t\t\tif (isAssistantMessage(event.message)) {\n\t\t\t\t\trecordAssistantUsageMetric({\n\t\t\t\t\t\treq,\n\t\t\t\t\t\tmessage: event.message,\n\t\t\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\t\t\tsubject,\n\t\t\t\t\t});\n\t\t\t\t\trecordIntelligentRouterChatMetric({\n\t\t\t\t\t\ttaskType: routingSelection.taskType,\n\t\t\t\t\t\tprovider: registeredModel.provider,\n\t\t\t\t\t\tmodel: registeredModel.id,\n\t\t\t\t\t\tstartedAt: routeStartedAt,\n\t\t\t\t\t\tmessage: event.message,\n\t\t\t\t\t});\n\t\t\t\t\trecordComplianceAssistantAction({\n\t\t\t\t\t\treq,\n\t\t\t\t\t\tmessage: event.message,\n\t\t\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\t\t\tsubject,\n\t\t\t\t\t});\n\t\t\t\t\tautomaticMemoryExtraction.schedule(sessionManager.getSessionFile());\n\t\t\t\t}\n\t\t\t\t// Update session snapshot on every event\n\t\t\t\tsessionManager.updateSnapshot(\n\t\t\t\t\tagent.state,\n\t\t\t\t\ttoSessionModelMetadata(registeredModel),\n\t\t\t\t);\n\t\t\t\tdispatchAgentNotification(\n\t\t\t\t\tevent,\n\t\t\t\t\t{\n\t\t\t\t\t\tcwd: process.cwd(),\n\t\t\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\t\t\tmessages: agent.state.messages,\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\tsessionHookService,\n\t\t\t\t\t\tlogger,\n\t\t\t\t\t},\n\t\t\t\t);\n\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Update session snapshot on every event\n\t\t\tsessionManager.updateSnapshot(\n\t\t\t\tagent.state,\n\t\t\t\ttoSessionModelMetadata(registeredModel),\n\t\t\t);\n\t\t\tdispatchAgentNotification(\n\t\t\t\tevent,\n\t\t\t\t{\n\t\t\t\t\tcwd: process.cwd(),\n\t\t\t\t\tsessionId: sessionManager.getSessionId(),\n\t\t\t\t\tmessages: agent.state.messages,\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tsessionHookService,\n\t\t\t\t\tlogger,\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\n\t\t// ===== Phase 6: Connection Close Handling =====\n\t\t// Abort agent and cleanup when client disconnects\n\t\tconst handleConnectionClose = () => {\n\t\t\tagent.abort();\n\t\t\tvoid cleanup(true);\n\t\t};\n\n\t\treq.on(\"close\", handleConnectionClose);\n\t\tres.on(\"close\", handleConnectionClose);\n\n\t\t/**\n\t\t * Cleanup resources after request completion or abort.\n\t\t * Idempotent - safe to call multiple times.\n\t\t */\n\t\tconst cleanup = async (aborted = false) => {\n\t\t\tif (cleanedUp) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcleanedUp = true;\n\n\t\t\t// Stop keepalive and remove event listeners\n\t\t\tsseSession.stopHeartbeat();\n\t\t\treq.off(\"close\", handleConnectionClose);\n\t\t\tres.off(\"close\", handleConnectionClose);\n\t\t\tunsubscribe();\n\t\t\tunsubscribeMcpElicitationBridge();\n\n\t\t\tawait automaticMemoryExtraction.flush();\n\t\t\tawait automaticMemoryConsolidation.flush();\n\t\t\tawait sessionManager.flush();\n\n\t\t\t// Send final SSE events if connection is still open\n\t\t\tif (!res.writableEnded) {\n\t\t\t\tif (aborted) {\n\t\t\t\t\tsseSession.sendAborted();\n\t\t\t\t}\n\t\t\t\tsseSession.end();\n\t\t\t}\n\n\t\t\t// Log if we had to skip writes due to client disconnect\n\t\t\tconst metrics = sseSession.getMetrics();\n\t\t\tif (metrics.skipped > 0) {\n\t\t\t\tconsole.debug(\"SSE writes skipped after disconnect\", metrics);\n\t\t\t}\n\t\t};\n\n\t\t// ===== Phase 7: Agent Execution =====\n\t\ttry {\n\t\t\t// Use circuit breaker to protect against cascading failures\n\t\t\t// If the provider is having issues, we'll fail fast\n\t\t\tconst breaker = getAgentCircuitBreaker(registeredModel.provider);\n\n\t\t\t// Execute the agent with the user's input\n\t\t\tawait runUserPromptWithRecovery({\n\t\t\t\tagent,\n\t\t\t\tsessionManager,\n\t\t\t\tcwd: process.cwd(),\n\t\t\t\tprompt: userInput,\n\t\t\t\tattachmentCount: attachmentsToSend?.length ?? 0,\n\t\t\t\tattachmentNames: attachmentsToSend?.map(\n\t\t\t\t\t(attachment) => attachment.fileName,\n\t\t\t\t),\n\t\t\t\texecute: () =>\n\t\t\t\t\tbreaker.execute(() => agent.prompt(userInput, attachmentsToSend)),\n\t\t\t\tgetPostKeepMessages: withMcpPostKeepMessages(),\n\t\t\t});\n\n\t\t\t// Send completion signal if connection is still open\n\t\t\tif (!res.writableEnded) {\n\t\t\t\tsseSession.sendDone();\n\t\t\t}\n\t\t} catch (error) {\n\t\t\t// Log and forward errors to client\n\t\t\tlogger.error(\n\t\t\t\t\"Agent prompt error\",\n\t\t\t\terror instanceof Error ? error : undefined,\n\t\t\t\t{ sessionId: sessionManager.getSessionId?.() },\n\t\t\t);\n\t\t\tsendSSE(sseSession, {\n\t\t\t\ttype: \"error\",\n\t\t\t\tmessage: error instanceof Error ? error.message : \"Unknown error\",\n\t\t\t});\n\t\t} finally {\n\t\t\t// Always cleanup, even on error\n\t\t\tawait cleanup(false);\n\t\t}\n\t} catch (error) {\n\t\t// Handle errors during setup (before SSE stream is established)\n\t\tlogger.error(\n\t\t\t\"Chat handler error\",\n\t\t\terror instanceof Error ? error : undefined,\n\t\t);\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t} finally {\n\t\t// Release SSE connection slot\n\t\tif (sseLease && releaseSse) {\n\t\t\treleaseSse(sseLease);\n\t\t}\n\t}\n}\n"]}

package/dist/server/handlers/compliance.d.ts

@@ -0,0 +1,3 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export declare function handleCompliance(req: IncomingMessage, res: ServerResponse, cors: Record<string, string>, params?: Record<string, string>): Promise<void>;
+//# sourceMappingURL=compliance.d.ts.map

package/dist/server/handlers/compliance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/compliance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAiCjE,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACjC,OAAO,CAAC,IAAI,CAAC,CA0Df"}

package/dist/server/handlers/compliance.js

@@ -0,0 +1,53 @@
+import { ComplianceValidationError, getComplianceService, normalizeComplianceEvidenceQuery, parseComplianceFrameworks, } from "../../services/compliance/index.js";
+import { readJsonBody, respondWithApiError, sendJson, } from "../server-utils.js";
+function optionalSearchParam(params, ...names) {
+    for (const name of names) {
+        const value = params.get(name)?.trim();
+        if (value)
+            return value;
+    }
+    return undefined;
+}
+function frameworksFromQuery(params) {
+    const raw = optionalSearchParam(params, "frameworks", "framework");
+    return raw ? parseComplianceFrameworks(raw) : undefined;
+}
+export async function handleCompliance(req, res, cors, params = {}) {
+    try {
+        const url = new URL(req.url || "/api/compliance", `http://${req.headers.host || "localhost"}`);
+        const service = getComplianceService();
+        if (req.method === "POST") {
+            const body = await readJsonBody(req, 2_000_000);
+            const report = await service.generateReport(body);
+            sendJson(res, 200, { report }, cors, req);
+            return;
+        }
+        if (req.method === "GET" && params.controlId) {
+            const result = await service.getEvidenceForControl(decodeURIComponent(params.controlId), normalizeComplianceEvidenceQuery({
+                workspaceId: optionalSearchParam(url.searchParams, "workspace_id", "workspaceId"),
+                from: optionalSearchParam(url.searchParams, "from"),
+                to: optionalSearchParam(url.searchParams, "to"),
+            }));
+            if (!result) {
+                sendJson(res, 404, { error: "Compliance control not found." }, cors, req);
+                return;
+            }
+            sendJson(res, 200, result, cors, req);
+            return;
+        }
+        if (req.method === "GET") {
+            const controls = service.listControls(frameworksFromQuery(url.searchParams));
+            sendJson(res, 200, { controls }, cors, req);
+            return;
+        }
+        sendJson(res, 405, { error: "Method not allowed" }, cors, req);
+    }
+    catch (error) {
+        if (error instanceof ComplianceValidationError) {
+            sendJson(res, 400, { error: error.message }, cors, req);
+            return;
+        }
+        respondWithApiError(res, error, 500, cors, req);
+    }
+}
+//# sourceMappingURL=compliance.js.map

package/dist/server/handlers/compliance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.js","sourceRoot":"","sources":["../../../src/server/handlers/compliance.ts"],"names":[],"mappings":"AACA,OAAO,EAGN,yBAAyB,EACzB,oBAAoB,EACpB,gCAAgC,EAChC,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACN,YAAY,EACZ,mBAAmB,EACnB,QAAQ,GACR,MAAM,oBAAoB,CAAC;AAE5B,SAAS,mBAAmB,CAC3B,MAAuB,EACvB,GAAG,KAAe;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAC3B,MAAuB;IAEvB,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IACnE,OAAO,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAoB,EACpB,GAAmB,EACnB,IAA4B,EAC5B,SAAiC,EAAE;IAEnC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAClB,GAAG,CAAC,GAAG,IAAI,iBAAiB,EAC5B,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAC3C,CAAC;QACF,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;QAEvC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,YAAY,CAA0B,GAAG,EAAE,SAAS,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAClD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1C,OAAO;QACR,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CACjD,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,EACpC,gCAAgC,CAAC;gBAChC,WAAW,EAAE,mBAAmB,CAC/B,GAAG,CAAC,YAAY,EAChB,cAAc,EACd,aAAa,CACb;gBACD,IAAI,EAAE,mBAAmB,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC;gBACnD,EAAE,EAAE,mBAAmB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC;aAC/C,CAAC,CACF,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAC1C,IAAI,EACJ,GAAG,CACH,CAAC;gBACF,OAAO;YACR,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO;QACR,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CACpC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CACrC,CAAC;YACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5C,OAAO;QACR,CAAC;QAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;YAChD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACxD,OAAO;QACR,CAAC;QACD,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;AACF,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport {\n\ttype ComplianceFramework,\n\ttype ComplianceReportRequest,\n\tComplianceValidationError,\n\tgetComplianceService,\n\tnormalizeComplianceEvidenceQuery,\n\tparseComplianceFrameworks,\n} from \"../../services/compliance/index.js\";\nimport {\n\treadJsonBody,\n\trespondWithApiError,\n\tsendJson,\n} from \"../server-utils.js\";\n\nfunction optionalSearchParam(\n\tparams: URLSearchParams,\n\t...names: string[]\n): string | undefined {\n\tfor (const name of names) {\n\t\tconst value = params.get(name)?.trim();\n\t\tif (value) return value;\n\t}\n\treturn undefined;\n}\n\nfunction frameworksFromQuery(\n\tparams: URLSearchParams,\n): ComplianceFramework[] | undefined {\n\tconst raw = optionalSearchParam(params, \"frameworks\", \"framework\");\n\treturn raw ? parseComplianceFrameworks(raw) : undefined;\n}\n\nexport async function handleCompliance(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcors: Record<string, string>,\n\tparams: Record<string, string> = {},\n): Promise<void> {\n\ttry {\n\t\tconst url = new URL(\n\t\t\treq.url || \"/api/compliance\",\n\t\t\t`http://${req.headers.host || \"localhost\"}`,\n\t\t);\n\t\tconst service = getComplianceService();\n\n\t\tif (req.method === \"POST\") {\n\t\t\tconst body = await readJsonBody<ComplianceReportRequest>(req, 2_000_000);\n\t\t\tconst report = await service.generateReport(body);\n\t\t\tsendJson(res, 200, { report }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (req.method === \"GET\" && params.controlId) {\n\t\t\tconst result = await service.getEvidenceForControl(\n\t\t\t\tdecodeURIComponent(params.controlId),\n\t\t\t\tnormalizeComplianceEvidenceQuery({\n\t\t\t\t\tworkspaceId: optionalSearchParam(\n\t\t\t\t\t\turl.searchParams,\n\t\t\t\t\t\t\"workspace_id\",\n\t\t\t\t\t\t\"workspaceId\",\n\t\t\t\t\t),\n\t\t\t\t\tfrom: optionalSearchParam(url.searchParams, \"from\"),\n\t\t\t\t\tto: optionalSearchParam(url.searchParams, \"to\"),\n\t\t\t\t}),\n\t\t\t);\n\t\t\tif (!result) {\n\t\t\t\tsendJson(\n\t\t\t\t\tres,\n\t\t\t\t\t404,\n\t\t\t\t\t{ error: \"Compliance control not found.\" },\n\t\t\t\t\tcors,\n\t\t\t\t\treq,\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tsendJson(res, 200, result, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tif (req.method === \"GET\") {\n\t\t\tconst controls = service.listControls(\n\t\t\t\tframeworksFromQuery(url.searchParams),\n\t\t\t);\n\t\t\tsendJson(res, 200, { controls }, cors, req);\n\t\t\treturn;\n\t\t}\n\n\t\tsendJson(res, 405, { error: \"Method not allowed\" }, cors, req);\n\t} catch (error) {\n\t\tif (error instanceof ComplianceValidationError) {\n\t\t\tsendJson(res, 400, { error: error.message }, cors, req);\n\t\t\treturn;\n\t\t}\n\t\trespondWithApiError(res, error, 500, cors, req);\n\t}\n}\n"]}

package/dist/server/handlers/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAuDjE,wBAAsB,aAAa,CAClC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAgGnC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAuDjE,wBAAsB,aAAa,CAClC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAqFnC"}

package/dist/server/handlers/context.js

@@ -1,6 +1,6 @@
 import { getAuthSubject, requireApiAuth } from "../authz.js";
 import { respondWithApiError, sendJson } from "../server-utils.js";
-import { createSessionManagerForRequest } from "../session-scope.js";
+import { createWebSessionManagerForRequest } from "../session-scope.js";
 import { redactPii } from "../utils/redact.js";
 import { checkSessionRateLimitAsync } from "../utils/session-rate-limit.js";
 import { approximateTokensFromJson, } from "../utils/token-estimator.js";
@@ -63,15 +63,10 @@ export async function handleContext(req, res, corsHeaders) {
             sendJson(res, 429, { error: "Too many context requests" }, corsHeaders);
             return;
         }
-        const sessionManager = createSessionManagerForRequest(req, false);
-        const sessionFile = sessionManager.getSessionFileById(sessionId);
-        if (!sessionFile) {
-            sendJson(res, 404, { error: `Session not found: ${sessionId}` }, corsHeaders);
-            return;
-        }
+        const sessionManager = createWebSessionManagerForRequest(req, false);
         const session = await sessionManager.loadSession(sessionId);
         if (!session) {
-            sendJson(res, 404, { error: "Session file exists but could not be loaded" }, corsHeaders);
+            sendJson(res, 404, { error: `Session not found: ${sessionId}` }, corsHeaders);
             return;
         }
         // Verify session ownership to prevent IDOR attacks

package/dist/server/handlers/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/server/handlers/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EACN,yBAAyB,GAEzB,MAAM,6BAA6B,CAAC;AAErC,SAAS,eAAe,CAAC,SAAiB;IACzC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,sBAAsB,CAC9B,OAAgC,EAChC,OAAe;IAEf,6BAA6B;IAC7B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC;IACpC,CAAC;IAED,uCAAuC;IACvC,oEAAoE;IACpE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,OAAO,CAAC;IACzE,OAAO,CAAC,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,GAAoB,EACpB,GAAmB,EACnB,WAAmC;IAEnC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,WAAW,CAAC,CAAC;QACjE,OAAO;IACR,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO;IAE3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,cAAc,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAEpD,IAAI,CAAC;QACJ,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAClD,WAAW,CACX,CAAC;YACF,OAAO;QACR,CAAC;QAED,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,WAAW,CAAC,CAAC;YACxE,OAAO;QACR,CAAC;QACD,MAAM,cAAc,GAAG,8BAA8B,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,sBAAsB,SAAS,EAAE,EAAE,EAC5C,WAAW,CACX,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,6CAA6C,EAAE,EACxD,WAAW,CACX,CAAC;YACF,OAAO;QACR,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,WAAW,CACX,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CACjC,CAAC,GAAwC,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK;YACL,aAAa,EAAE,yBAAyB,CAAC,GAAG,CAAC;YAC7C,OAAO,EACN,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAC9B,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACtC,CAAC,CAAC,EAAE;SACN,CAAC,CACF,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAC/B,CAAC,GAAW,EAAE,IAA+B,EAAE,EAAE,CAChD,GAAG,GAAG,IAAI,CAAC,aAAa,EACzB,CAAC,CACD,CAAC;QAEF,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,SAAS;YACT,KAAK;YACL,WAAW;YACX,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;SACrC,EACD,WAAW,CACX,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;AACF,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { getAuthSubject, requireApiAuth } from \"../authz.js\";\nimport { respondWithApiError, sendJson } from \"../server-utils.js\";\nimport { createSessionManagerForRequest } from \"../session-scope.js\";\nimport { redactPii } from \"../utils/redact.js\";\nimport { checkSessionRateLimitAsync } from \"../utils/session-rate-limit.js\";\nimport {\n\tapproximateTokensFromJson,\n\tapproximateTokensFromText,\n} from \"../utils/token-estimator.js\";\n\nfunction assertSessionId(sessionId: string): void {\n\tif (!/^[A-Za-z0-9._-]+$/.test(sessionId)) {\n\t\tthrow new Error(\"Invalid sessionId format\");\n\t}\n}\n\n/**\n * Check if a user has access to a session.\n *\n * In multi-user deployments, sessions should only be accessible by their owner.\n * This function verifies ownership by checking if the session belongs to the\n * authenticated user's scope.\n *\n * Session ownership is determined by:\n * 1. If session has an explicit 'owner' field, it must match the subject\n * 2. If session has a 'subject' field (API-created sessions), it must match\n * 3. Otherwise, access is denied for API requests in strict mode (prevents IDOR)\n *\n * Note: Current sessions don't store owner info, so this defaults to denying\n * access in strict mode. Set MAESTRO_STRICT_SESSION_ACCESS=false for backwards\n * compatibility in single-user deployments.\n */\nfunction verifySessionOwnership(\n\tsession: Record<string, unknown>,\n\tsubject: string,\n): boolean {\n\t// Check explicit owner field\n\tif (typeof session.owner === \"string\" && session.owner) {\n\t\treturn session.owner === subject;\n\t}\n\n\t// Check subject field (for API-created sessions)\n\tif (typeof session.subject === \"string\" && session.subject) {\n\t\treturn session.subject === subject;\n\t}\n\n\t// For sessions without ownership info:\n\t// In strict mode (multi-user), deny access to prevent IDOR attacks.\n\t// Sessions created via CLI don't have ownership info, but API access\n\t// should be restricted in hosted environments.\n\tconst strictMode = process.env.MAESTRO_STRICT_SESSION_ACCESS !== \"false\";\n\treturn !strictMode;\n}\n\nexport async function handleContext(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcorsHeaders: Record<string, string>,\n) {\n\tif (req.method !== \"GET\") {\n\t\tsendJson(res, 405, { error: \"Method not allowed\" }, corsHeaders);\n\t\treturn;\n\t}\n\tif (!(await requireApiAuth(req, res, corsHeaders))) return;\n\n\tconst url = new URL(req.url || \"/api/context\", `http://${req.headers.host}`);\n\tconst sessionId = url.searchParams.get(\"sessionId\");\n\n\ttry {\n\t\tif (!sessionId) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t400,\n\t\t\t\t{ error: \"sessionId query parameter is required\" },\n\t\t\t\tcorsHeaders,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tassertSessionId(sessionId);\n\t\tconst subject = getAuthSubject(req);\n\t\tconst sessionKey = `${subject}:${sessionId}`;\n\t\tconst rate = await checkSessionRateLimitAsync(sessionKey);\n\t\tif (!rate.allowed) {\n\t\t\tsendJson(res, 429, { error: \"Too many context requests\" }, corsHeaders);\n\t\t\treturn;\n\t\t}\n\t\tconst sessionManager = createSessionManagerForRequest(req, false);\n\t\tconst sessionFile = sessionManager.getSessionFileById(sessionId);\n\t\tif (!sessionFile) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t404,\n\t\t\t\t{ error: `Session not found: ${sessionId}` },\n\t\t\t\tcorsHeaders,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t404,\n\t\t\t\t{ error: \"Session file exists but could not be loaded\" },\n\t\t\t\tcorsHeaders,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent IDOR attacks\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcorsHeaders,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst items = session.messages.map(\n\t\t\t(msg: { role: string; content?: unknown }, index: number) => ({\n\t\t\t\ttype: msg.role,\n\t\t\t\tindex,\n\t\t\t\ttokenEstimate: approximateTokensFromJson(msg),\n\t\t\t\tsnippet:\n\t\t\t\t\ttypeof msg.content === \"string\"\n\t\t\t\t\t\t? redactPii(msg.content).slice(0, 160)\n\t\t\t\t\t\t: \"\",\n\t\t\t}),\n\t\t);\n\n\t\tconst totalTokens = items.reduce(\n\t\t\t(sum: number, item: { tokenEstimate: number }) =>\n\t\t\t\tsum + item.tokenEstimate,\n\t\t\t0,\n\t\t);\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\t{\n\t\t\t\tsessionId,\n\t\t\t\titems,\n\t\t\t\ttotalTokens,\n\t\t\t\tmessageCount: session.messages.length,\n\t\t\t},\n\t\t\tcorsHeaders,\n\t\t);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, corsHeaders, req);\n\t}\n}\n"]}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/server/handlers/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,iCAAiC,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EACN,yBAAyB,GAEzB,MAAM,6BAA6B,CAAC;AAErC,SAAS,eAAe,CAAC,SAAiB;IACzC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,sBAAsB,CAC9B,OAAgC,EAChC,OAAe;IAEf,6BAA6B;IAC7B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC;IACpC,CAAC;IAED,uCAAuC;IACvC,oEAAoE;IACpE,qEAAqE;IACrE,+CAA+C;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,OAAO,CAAC;IACzE,OAAO,CAAC,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,GAAoB,EACpB,GAAmB,EACnB,WAAmC;IAEnC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,WAAW,CAAC,CAAC;QACjE,OAAO;IACR,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO;IAE3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,cAAc,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAEpD,IAAI,CAAC;QACJ,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAClD,WAAW,CACX,CAAC;YACF,OAAO;QACR,CAAC;QAED,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,WAAW,CAAC,CAAC;YACxE,OAAO;QACR,CAAC;QACD,MAAM,cAAc,GAAG,iCAAiC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,sBAAsB,SAAS,EAAE,EAAE,EAC5C,WAAW,CACX,CAAC;YACF,OAAO;QACR,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,QAAQ,CACP,GAAG,EACH,GAAG,EACH,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAC3D,WAAW,CACX,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CACjC,CAAC,GAAwC,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC;YAC7D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK;YACL,aAAa,EAAE,yBAAyB,CAAC,GAAG,CAAC;YAC7C,OAAO,EACN,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAC9B,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACtC,CAAC,CAAC,EAAE;SACN,CAAC,CACF,CAAC;QAEF,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAC/B,CAAC,GAAW,EAAE,IAA+B,EAAE,EAAE,CAChD,GAAG,GAAG,IAAI,CAAC,aAAa,EACzB,CAAC,CACD,CAAC;QAEF,QAAQ,CACP,GAAG,EACH,GAAG,EACH;YACC,SAAS;YACT,KAAK;YACL,WAAW;YACX,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;SACrC,EACD,WAAW,CACX,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;AACF,CAAC","sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { getAuthSubject, requireApiAuth } from \"../authz.js\";\nimport { respondWithApiError, sendJson } from \"../server-utils.js\";\nimport { createWebSessionManagerForRequest } from \"../session-scope.js\";\nimport { redactPii } from \"../utils/redact.js\";\nimport { checkSessionRateLimitAsync } from \"../utils/session-rate-limit.js\";\nimport {\n\tapproximateTokensFromJson,\n\tapproximateTokensFromText,\n} from \"../utils/token-estimator.js\";\n\nfunction assertSessionId(sessionId: string): void {\n\tif (!/^[A-Za-z0-9._-]+$/.test(sessionId)) {\n\t\tthrow new Error(\"Invalid sessionId format\");\n\t}\n}\n\n/**\n * Check if a user has access to a session.\n *\n * In multi-user deployments, sessions should only be accessible by their owner.\n * This function verifies ownership by checking if the session belongs to the\n * authenticated user's scope.\n *\n * Session ownership is determined by:\n * 1. If session has an explicit 'owner' field, it must match the subject\n * 2. If session has a 'subject' field (API-created sessions), it must match\n * 3. Otherwise, access is denied for API requests in strict mode (prevents IDOR)\n *\n * Note: Current sessions don't store owner info, so this defaults to denying\n * access in strict mode. Set MAESTRO_STRICT_SESSION_ACCESS=false for backwards\n * compatibility in single-user deployments.\n */\nfunction verifySessionOwnership(\n\tsession: Record<string, unknown>,\n\tsubject: string,\n): boolean {\n\t// Check explicit owner field\n\tif (typeof session.owner === \"string\" && session.owner) {\n\t\treturn session.owner === subject;\n\t}\n\n\t// Check subject field (for API-created sessions)\n\tif (typeof session.subject === \"string\" && session.subject) {\n\t\treturn session.subject === subject;\n\t}\n\n\t// For sessions without ownership info:\n\t// In strict mode (multi-user), deny access to prevent IDOR attacks.\n\t// Sessions created via CLI don't have ownership info, but API access\n\t// should be restricted in hosted environments.\n\tconst strictMode = process.env.MAESTRO_STRICT_SESSION_ACCESS !== \"false\";\n\treturn !strictMode;\n}\n\nexport async function handleContext(\n\treq: IncomingMessage,\n\tres: ServerResponse,\n\tcorsHeaders: Record<string, string>,\n) {\n\tif (req.method !== \"GET\") {\n\t\tsendJson(res, 405, { error: \"Method not allowed\" }, corsHeaders);\n\t\treturn;\n\t}\n\tif (!(await requireApiAuth(req, res, corsHeaders))) return;\n\n\tconst url = new URL(req.url || \"/api/context\", `http://${req.headers.host}`);\n\tconst sessionId = url.searchParams.get(\"sessionId\");\n\n\ttry {\n\t\tif (!sessionId) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t400,\n\t\t\t\t{ error: \"sessionId query parameter is required\" },\n\t\t\t\tcorsHeaders,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tassertSessionId(sessionId);\n\t\tconst subject = getAuthSubject(req);\n\t\tconst sessionKey = `${subject}:${sessionId}`;\n\t\tconst rate = await checkSessionRateLimitAsync(sessionKey);\n\t\tif (!rate.allowed) {\n\t\t\tsendJson(res, 429, { error: \"Too many context requests\" }, corsHeaders);\n\t\t\treturn;\n\t\t}\n\t\tconst sessionManager = createWebSessionManagerForRequest(req, false);\n\t\tconst session = await sessionManager.loadSession(sessionId);\n\t\tif (!session) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t404,\n\t\t\t\t{ error: `Session not found: ${sessionId}` },\n\t\t\t\tcorsHeaders,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\t// Verify session ownership to prevent IDOR attacks\n\t\tif (!verifySessionOwnership(session, subject)) {\n\t\t\tsendJson(\n\t\t\t\tres,\n\t\t\t\t403,\n\t\t\t\t{ error: \"Access denied: session belongs to another user\" },\n\t\t\t\tcorsHeaders,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\n\t\tconst items = session.messages.map(\n\t\t\t(msg: { role: string; content?: unknown }, index: number) => ({\n\t\t\t\ttype: msg.role,\n\t\t\t\tindex,\n\t\t\t\ttokenEstimate: approximateTokensFromJson(msg),\n\t\t\t\tsnippet:\n\t\t\t\t\ttypeof msg.content === \"string\"\n\t\t\t\t\t\t? redactPii(msg.content).slice(0, 160)\n\t\t\t\t\t\t: \"\",\n\t\t\t}),\n\t\t);\n\n\t\tconst totalTokens = items.reduce(\n\t\t\t(sum: number, item: { tokenEstimate: number }) =>\n\t\t\t\tsum + item.tokenEstimate,\n\t\t\t0,\n\t\t);\n\n\t\tsendJson(\n\t\t\tres,\n\t\t\t200,\n\t\t\t{\n\t\t\t\tsessionId,\n\t\t\t\titems,\n\t\t\t\ttotalTokens,\n\t\t\t\tmessageCount: session.messages.length,\n\t\t\t},\n\t\t\tcorsHeaders,\n\t\t);\n\t} catch (error) {\n\t\trespondWithApiError(res, error, 500, corsHeaders, req);\n\t}\n}\n"]}