@framers/agentos-ext-gmail-source 0.2.0 → 0.4.0

package/dist/mime.js

@@ -0,0 +1,377 @@
+/**
+ * @fileoverview Bounded reading of one Gmail `threads.get` response in the `full` format. The MIME tree of every
+ * message, excluded messages included, is checked against byte, depth and part bounds before any body is decoded. One
+ * representation is selected per `multipart/alternative`; base64url bodies, RFC 2047 encoded words and declared charsets
+ * are decoded strictly; HTML becomes inert text through the AgentOS `HtmlLoader`. An attachment keeps only its name,
+ * media type and size: its bytes are dropped while the tree is read, whether Gmail returned them inline or behind an
+ * attachment id. Nothing here fetches, logs or puts provider text into an error.
+ * @module agentos-ext-gmail-source/mime
+ */
+import { HtmlLoader } from '@framers/agentos/cognition/memory';
+import { SourceSyncFault } from '@framers/agentos-ext-account-sources';
+/**
+ * A mapper's fixed refusal; its message is `gmail_mapping_<reason>` and never carries mail text. `configuration` is
+ * thrown for invalid bounds or options. `map` catches every other reason and answers it as a skipped thread, or counts
+ * it against the one message it concerns.
+ */
+export class GmailMappingFault extends Error {
+    reason;
+    /** @param reason `configuration`, or the skip reason the refusal stands for. */
+    constructor(reason) {
+        super(`gmail_mapping_${reason}`);
+        this.reason = reason;
+        this.name = 'GmailMappingFault';
+    }
+}
+// An invalid provider shape is a fixed failure, never an empty success.
+const fail = () => { throw new SourceSyncFault('invalid_response'); };
+const integer = (n) => typeof n === 'number' && Number.isSafeInteger(n) && n >= 0;
+/** Whether a value is an accepted Gmail message or thread id: 1 to 64 hexadecimal characters. */
+export const gmailId = (value) => typeof value === 'string' && /^[a-fA-F0-9]{1,64}$/.test(value);
+// Accepted label ids: system labels in upper case and user labels as Label_ and digits.
+const labelId = (value) => typeof value === 'string'
+    && /^(?:[A-Z][A-Z0-9_]{0,63}|Label_[0-9]{1,64})$/.test(value);
+/** Throws `SourceSyncFault('cancelled')` once the signal is aborted. */
+export function mappingActive(signal) {
+    if (signal?.aborted)
+        throw new SourceSyncFault('cancelled');
+}
+/**
+ * Validates and freezes a mapper's bounds.
+ *
+ * @throws {GmailMappingFault} `configuration` when a bound is not a positive safe integer or exceeds its ceiling, or
+ * when the message or thread character cap exceeds the input cap.
+ */
+export function mappingBounds(input) {
+    const ceilings = {
+        maxResponseBytes: 2_097_152, maxDecodedBytes: 2_097_152,
+        maxMimeDepth: 20, maxMimeParts: 1000, maxMessages: 100,
+        maxMessageCharacters: 20_000, maxThreadCharacters: 200_000,
+        maxMetadataCharacters: 200_000, maxInputCharacters: 2_097_152,
+        maxLineCharacters: 65_536, maximumCacheMs: 86_400_000,
+    };
+    for (const key of Object.keys(ceilings)) {
+        if (!integer(input[key]) || input[key] < 1 || input[key] > ceilings[key])
+            throw new GmailMappingFault('configuration');
+    }
+    if (input.maxMessageCharacters > input.maxInputCharacters || input.maxThreadCharacters > input.maxInputCharacters) {
+        throw new GmailMappingFault('configuration');
+    }
+    return Object.freeze({ ...input });
+}
+// Shape readers. A wrong type is an invalid response; every string read is charged to the recognized-input budget.
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return fail();
+    return value;
+}
+function string(value, budget) {
+    if (typeof value !== 'string')
+        return fail();
+    if (value.length > budget.bounds.maxInputCharacters)
+        throw new GmailMappingFault('response_too_large');
+    budget.rawBytes += Buffer.byteLength(value, 'utf8');
+    if (budget.rawBytes > budget.bounds.maxResponseBytes)
+        throw new GmailMappingFault('response_too_large');
+    return value;
+}
+function array(value, maximum) {
+    if (!Array.isArray(value))
+        return fail();
+    if (value.length > maximum)
+        throw new GmailMappingFault('structure_limit');
+    return value;
+}
+// Reads one part and its children. `withinAttachment` marks the subtree of an attachment, such as an attached message.
+function parsePart(value, budget, depth, signal, withinAttachment = false) {
+    mappingActive(signal);
+    if (depth > budget.bounds.maxMimeDepth || ++budget.parts > budget.bounds.maxMimeParts) {
+        throw new GmailMappingFault('structure_limit');
+    }
+    const raw = object(value);
+    const mimeType = string(raw.mimeType ?? 'application/octet-stream', budget).toLowerCase();
+    if (!/^[a-z0-9!#$&^_.+-]{1,64}\/[a-z0-9!#$&^_.+-]{1,64}$/.test(mimeType))
+        return fail();
+    const filename = string(raw.filename ?? '', budget);
+    const headers = array(raw.headers ?? [], budget.bounds.maxMimeParts).map((value) => {
+        const h = object(value);
+        return { name: string(h.name, budget), value: string(h.value, budget) };
+    });
+    const body = object(raw.body ?? {});
+    const size = body.size ?? 0;
+    if (!integer(size))
+        return fail();
+    const data = string(body.data ?? '', budget);
+    const attachmentId = body.attachmentId === undefined ? '' : string(body.attachmentId, budget);
+    const disposition = headers.filter((h) => h.name.toLowerCase() === 'content-disposition');
+    if (disposition.length > 1)
+        return fail();
+    const attachment = filename !== '' || attachmentId !== ''
+        || /^\s*attachment(?:\s*;|\s*$)/i.test(disposition[0]?.value ?? '') || mimeType === 'message/rfc822';
+    const children = array(raw.parts ?? [], budget.bounds.maxMimeParts);
+    if (children.length > 0 && !mimeType.startsWith('multipart/') && mimeType !== 'message/rfc822')
+        return fail();
+    // Only a text body outside every attachment keeps its encoded data. Attachment bytes, which Gmail returns inline in
+    // `data` whenever a part has no attachment id, and every other part's bytes are dropped here, before any decoding.
+    const readable = !attachment && !withinAttachment && (mimeType === 'text/plain' || mimeType === 'text/html');
+    return { mimeType, filename, headers, size, data: readable ? data : '', external: attachmentId !== '', attachment,
+        parts: children.map((child) => parsePart(child, budget, depth + 1, signal, withinAttachment || attachment)) };
+}
+/**
+ * Validate the whole structure before decoding any selected message. Copies only the fields this package reads: ids,
+ * internal dates, labels and each payload's MIME tree. Every message's tree, excluded messages included, counts against
+ * the byte, depth and part bounds. `raw`, `snippet` and unknown fields are never read.
+ *
+ * @param value The parsed `threads.get` response.
+ * @param sourceId The thread id the caller asked for; any other id is an invalid response.
+ * @param budget The call's running counts.
+ * @param signal Checked before each part.
+ * @throws {SourceSyncFault} `invalid_response` for an invalid shape, id, history value, date, label, media type or a
+ * repeated message id; `cancelled` once the signal is aborted.
+ * @throws {GmailMappingFault} `response_too_large` or `structure_limit` when a bound is exceeded.
+ */
+export function parseMimeThread(value, sourceId, budget, signal) {
+    mappingActive(signal);
+    const raw = object(value);
+    const id = string(raw.id, budget);
+    const historyId = string(raw.historyId, budget);
+    if (!gmailId(id) || id !== sourceId || !/^[0-9]{1,128}$/.test(historyId))
+        return fail();
+    const seen = new Set();
+    const messages = array(raw.messages ?? [], budget.bounds.maxMimeParts).map((value) => {
+        const m = object(value);
+        const messageId = string(m.id, budget);
+        const parentId = string(m.threadId, budget);
+        const timestamp = string(m.internalDate, budget);
+        if (!gmailId(messageId) || seen.has(messageId) || parentId !== id || !/^[0-9]{1,16}$/.test(timestamp))
+            return fail();
+        const receivedAt = Number(timestamp);
+        if (!integer(receivedAt))
+            return fail();
+        seen.add(messageId);
+        const labels = array(m.labelIds ?? [], budget.bounds.maxMimeParts).map((value) => {
+            const label = string(value, budget);
+            if (!labelId(label))
+                return fail();
+            return label;
+        });
+        return { id: messageId, receivedAt, labels: [...new Set(labels)].sort(), payload: parsePart(m.payload, budget, 1, signal) };
+    });
+    return { id, historyId, messages };
+}
+// Charges decoded bytes to the call's budget.
+function charge(bytes, budget) {
+    budget.decodedBytes += bytes.byteLength;
+    if (budget.decodedBytes > budget.bounds.maxDecodedBytes)
+        throw new GmailMappingFault('response_too_large');
+    return bytes;
+}
+// Strict base64 or base64url: the alphabet and padding are checked and the size is charged before decoding, and the
+// bytes must encode back to the same text, so a noncanonical final character is refused.
+function base64(value, url, budget) {
+    const alphabet = url ? /^[A-Za-z0-9_-]*={0,2}$/ : /^[A-Za-z0-9+/]*={0,2}$/;
+    if (!alphabet.test(value))
+        throw new GmailMappingFault('invalid_encoding');
+    const bare = value.replace(/=+$/, '');
+    const padding = value.length - bare.length;
+    if (bare.length % 4 === 1 || (padding > 0 && (value.length % 4 !== 0 || padding !== (4 - bare.length % 4) % 4))) {
+        throw new GmailMappingFault('invalid_encoding');
+    }
+    const bytesNeeded = Math.floor(bare.length * 6 / 8);
+    if (budget.decodedBytes + bytesNeeded > budget.bounds.maxDecodedBytes)
+        throw new GmailMappingFault('response_too_large');
+    const bytes = Buffer.from(bare, url ? 'base64url' : 'base64');
+    if (bytes.toString(url ? 'base64url' : 'base64').replace(/=+$/, '') !== bare)
+        throw new GmailMappingFault('invalid_encoding');
+    return charge(bytes, budget);
+}
+// A fatal decoder: an unknown charset and invalid bytes are separate fixed reasons, and nothing is replaced.
+function decode(bytes, charset) {
+    let decoder;
+    try {
+        decoder = new TextDecoder(charset, { fatal: true });
+    }
+    catch {
+        throw new GmailMappingFault('unsupported_charset');
+    }
+    try {
+        return decoder.decode(bytes);
+    }
+    catch {
+        throw new GmailMappingFault('invalid_encoding');
+    }
+}
+/**
+ * Decoding is followed by sanitation even when the input looked like ASCII. Decodes the RFC 2047 encoded words (B and
+ * Q) of one header value with a fatal decoder for each declared charset; whitespace between adjacent encoded words is
+ * dropped, as RFC 2047 requires.
+ *
+ * @throws {GmailMappingFault} `invalid_encoding` for a malformed or overlong word, invalid bytes or a value that still
+ * holds an encoded-word opener after decoding; `unsupported_charset` for a charset the runtime does not decode;
+ * `response_too_large` above the character or decoded-byte bound.
+ */
+export function decodeMimeWords(input, budget) {
+    if (input.length > budget.bounds.maxInputCharacters)
+        throw new GmailMappingFault('response_too_large');
+    const pattern = /=\?([^?\s]{1,40})\?([bq])\?([^?\r\n]*)\?=/gi;
+    let result = '';
+    let end = 0;
+    let previousWord = false;
+    for (const match of input.matchAll(pattern)) {
+        const start = match.index;
+        const between = input.slice(end, start);
+        if (match[0].length > 75)
+            throw new GmailMappingFault('invalid_encoding');
+        if (!(previousWord && /^[ \t\r\n]*$/.test(between)))
+            result += between;
+        let bytes;
+        if (match[2].toLowerCase() === 'b')
+            bytes = base64(match[3], false, budget);
+        else {
+            const encoded = match[3];
+            const values = [];
+            for (let i = 0; i < encoded.length; i++) {
+                const character = encoded[i];
+                if (character === '=') {
+                    const hex = encoded.slice(i + 1, i + 3);
+                    if (!/^[0-9a-f]{2}$/i.test(hex))
+                        throw new GmailMappingFault('invalid_encoding');
+                    values.push(Number.parseInt(hex, 16));
+                    i += 2;
+                }
+                else {
+                    const point = character.charCodeAt(0);
+                    if (point < 33 || point > 126 || character === '?')
+                        throw new GmailMappingFault('invalid_encoding');
+                    values.push(character === '_' ? 32 : point);
+                }
+            }
+            bytes = charge(Uint8Array.from(values), budget);
+        }
+        result += decode(bytes, match[1]);
+        end = start + match[0].length;
+        previousWord = true;
+        if (result.length > budget.bounds.maxInputCharacters)
+            throw new GmailMappingFault('response_too_large');
+    }
+    result += input.slice(end);
+    if (result.includes('=?') || result.length > budget.bounds.maxInputCharacters)
+        throw new GmailMappingFault('invalid_encoding');
+    return result;
+}
+/** A part's Subject, Date, From, To and Cc, decoded; Bcc and every other header are never decoded or returned. */
+export function decodedHeaders(part, budget) {
+    return part.headers.filter((h) => ['subject', 'date', 'from', 'to', 'cc'].includes(h.name.toLowerCase()))
+        .map((h) => ({ name: h.name, value: decodeMimeWords(h.value, budget) }));
+}
+// A text part's one declared charset, UTF-8 when none is declared; a repeated or malformed parameter refuses the part.
+function charset(part) {
+    const values = part.headers.filter((h) => h.name.toLowerCase() === 'content-type');
+    if (values.length > 1)
+        throw new GmailMappingFault('invalid_encoding');
+    const header = values[0]?.value ?? part.mimeType;
+    const parameters = [...header.matchAll(/;\s*charset\s*=\s*(?:"([^"\r\n]*)"|([^;\s]+))/gi)];
+    const mentions = header.match(/\bcharset\s*=/gi)?.length ?? 0;
+    if (parameters.length !== mentions || parameters.length > 1)
+        throw new GmailMappingFault('invalid_encoding');
+    const value = (parameters[0]?.[1] ?? parameters[0]?.[2] ?? 'utf-8').trim();
+    if (!/^[a-z0-9._:-]{1,40}$/i.test(value))
+        throw new GmailMappingFault('unsupported_charset');
+    return value;
+}
+// The best body a subtree offers: plain text 2, HTML 1, nothing readable 0.
+function rank(part) {
+    if (part.attachment)
+        return 0;
+    if (part.mimeType === 'text/plain')
+        return 2;
+    if (part.mimeType === 'text/html')
+        return 1;
+    return part.parts.reduce((best, child) => Math.max(best, rank(child)), 0);
+}
+// Lists attachment parts in MIME order without descending into them.
+function attachments(part, output) {
+    if (part.attachment) {
+        output.push({ filename: part.filename || 'attachment', mediaType: part.mimeType, size: part.size });
+        return;
+    }
+    for (const child of part.parts)
+        attachments(child, output);
+}
+/**
+ * Select before decoding, and never interpret Content-Transfer-Encoding a second time: Gmail's `data` already holds the
+ * part's bytes. Lists the message's attachments and builds its body text. Within `multipart/alternative` the branch
+ * with eligible plain text wins over HTML; other multipart containers join their text children in MIME order. HTML
+ * becomes inert text through `HtmlLoader` given an in-memory Buffer. Other media types are counted, not read.
+ *
+ * @throws {GmailMappingFault} `invalid_encoding`, `unsupported_charset` or `response_too_large` for the message.
+ * @throws {SourceSyncFault} `cancelled` once the signal is aborted.
+ */
+export async function mimeBody(root, budget, signal) {
+    const listed = [];
+    attachments(root, listed);
+    let unsupportedParts = 0;
+    const text = async (part) => {
+        mappingActive(signal);
+        if (part.attachment)
+            return '';
+        if (part.mimeType === 'multipart/alternative') {
+            let chosen;
+            let best = 0;
+            for (const child of part.parts) {
+                const score = rank(child);
+                if (score > best) {
+                    chosen = child;
+                    best = score;
+                }
+            }
+            if (!chosen) {
+                unsupportedParts++;
+                return '';
+            }
+            return text(chosen);
+        }
+        if (part.mimeType.startsWith('multipart/')) {
+            const chunks = [];
+            let characters = 0;
+            for (const child of part.parts) {
+                const value = await text(child);
+                mappingActive(signal);
+                if (!value)
+                    continue;
+                characters += value.length + (chunks.length ? 2 : 0);
+                if (characters > budget.bounds.maxInputCharacters)
+                    throw new GmailMappingFault('response_too_large');
+                chunks.push(value);
+            }
+            return chunks.join('\n\n');
+        }
+        if (!['text/plain', 'text/html'].includes(part.mimeType)) {
+            unsupportedParts++;
+            return '';
+        }
+        const bytes = base64(part.data, true, budget);
+        if (bytes.byteLength !== part.size)
+            throw new GmailMappingFault('invalid_encoding');
+        const decoded = decode(bytes, charset(part));
+        if (decoded.length > budget.bounds.maxInputCharacters)
+            throw new GmailMappingFault('response_too_large');
+        if (part.mimeType === 'text/plain')
+            return decoded;
+        let content;
+        try {
+            content = (await new HtmlLoader().load(Buffer.from(decoded, 'utf8'))).content;
+        }
+        catch {
+            throw new GmailMappingFault('invalid_encoding');
+        }
+        mappingActive(signal);
+        if (content.length > budget.bounds.maxInputCharacters)
+            throw new GmailMappingFault('response_too_large');
+        return content;
+    };
+    const body = await text(root);
+    mappingActive(signal);
+    return { text: body, attachments: listed, unsupportedParts };
+}
+//# sourceMappingURL=mime.js.map

package/dist/mime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mime.js","sourceRoot":"","sources":["../src/mime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,eAAe,EAA6B,MAAM,sCAAsC,CAAC;AA+BlG;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAErB;IADrB,gFAAgF;IAChF,YAAqB,MAA8C;QACjE,KAAK,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;QADd,WAAM,GAAN,MAAM,CAAwC;QAC/B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IACpE,CAAC;CACF;AAkDD,wEAAwE;AACxE,MAAM,IAAI,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxG,iGAAiG;AACjG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3H,wFAAwF;AACxF,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ;OACzE,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChE,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,MAAoB;IAChD,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;AAC9D,CAAC;AACD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,QAAQ,GAAuB;QACnC,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS;QACvD,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG;QACtD,oBAAoB,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO;QAC1D,qBAAqB,EAAE,OAAO,EAAE,kBAAkB,EAAE,SAAS;QAC7D,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU;KACtD,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAiC,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB,GAAG,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAClH,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AACrC,CAAC;AACD,mHAAmH;AACnH,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC/E,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,EAAE,MAAkB;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,EAAE,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB;QAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IACvG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB;QAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IACxG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,OAAe;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AACD,uHAAuH;AACvH,SAAS,SAAS,CAChB,KAAc,EAAE,MAAkB,EAAE,KAAa,EAAE,MAAoB,EAAE,gBAAgB,GAAG,KAAK;IAEjG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACtF,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,0BAA0B,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1F,IAAI,CAAC,oDAAoD,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACxF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE;QACnG,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9F,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,qBAAqB,CAAC,CAAC;IAC1F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,QAAQ,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE;WACpD,8BAA8B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,KAAK,gBAAgB,CAAC;IACvG,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,QAAQ,KAAK,gBAAgB;QAAE,OAAO,IAAI,EAAE,CAAC;IAC9G,oHAAoH;IACpH,mHAAmH;IACnH,MAAM,QAAQ,GAAG,CAAC,UAAU,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,WAAW,CAAC,CAAC;IAC7G,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,KAAK,EAAE,EAAE,UAAU;QAC/G,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,EAAE,gBAAgB,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC;AAClH,CAAC;AACD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,QAAgB,EAAE,MAAkB,EAAE,MAAoB;IACxG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9G,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACxF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAe,EAAE;QAChG,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7G,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACrH,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;IAC9H,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AACD,8CAA8C;AAC9C,SAAS,MAAM,CAAC,KAAiB,EAAE,MAAkB;IACnD,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC;IACxC,IAAI,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IAC3G,OAAO,KAAK,CAAC;AACf,CAAC;AACD,oHAAoH;AACpH,yFAAyF;AACzF,SAAS,MAAM,CAAC,KAAa,EAAE,GAAY,EAAE,MAAkB;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,wBAAwB,CAAC;IAC3E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAClF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,YAAY,GAAG,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IACzH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAC9H,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC/B,CAAC;AACD,6GAA6G;AAC7G,SAAS,MAAM,CAAC,KAAiB,EAAE,OAAe;IAChD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAC5D,MAAM,CAAC;QAAC,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IAAC,CAAC;IAC7D,IAAI,CAAC;QAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IACrC,MAAM,CAAC;QAAC,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAAC,CAAC;AAC5D,CAAC;AACD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,MAAkB;IAC/D,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB;QAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,6CAA6C,CAAC;IAC9D,IAAI,MAAM,GAAG,EAAE,CAAC;IAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IAAC,IAAI,YAAY,GAAG,KAAK,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAM,CAAC;QAAC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,YAAY,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC;QACvE,IAAI,KAAiB,CAAC;QACtB,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,GAAG;YAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;aACzE,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YAAC,MAAM,MAAM,GAAa,EAAE,CAAC;YACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;gBAC9B,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;oBACtB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACxC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;oBACjF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;oBAAC,CAAC,IAAI,CAAC,CAAC;gBAChD,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACtC,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,GAAG,IAAI,SAAS,KAAK,GAAG;wBAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;oBACpG,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YACD,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAAC,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAAC,YAAY,GAAG,IAAI,CAAC;QACvF,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB;YAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB;QAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAC/H,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,kHAAkH;AAClH,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,MAAkB;IAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;SACtG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AACD,uHAAuH;AACvH,SAAS,OAAO,CAAC,IAAc;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC;IACjD,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC;AACf,CAAC;AACD,4EAA4E;AAC5E,SAAS,IAAI,CAAC,IAAc;IAC1B,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW;QAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AACD,qEAAqE;AACrE,SAAS,WAAW,CAAC,IAAc,EAAE,MAAwB;IAC3D,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpG,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK;QAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AACD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc,EAAE,MAAkB,EAAE,MAAoB;IACrF,MAAM,MAAM,GAAqB,EAAE,CAAC;IAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,KAAK,EAAE,IAAc,EAAmB,EAAE;QACrD,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;YAC9C,IAAI,MAA4B,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;oBAAC,MAAM,GAAG,KAAK,CAAC;oBAAC,IAAI,GAAG,KAAK,CAAC;gBAAC,CAAC;YAAC,CAAC;YAClH,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,gBAAgB,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;YAAC,IAAI,UAAU,GAAG,CAAC,CAAC;YAChD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBACvD,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,UAAU,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB;oBAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;gBACrG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,gBAAgB,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB;YAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACzG,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY;YAAE,OAAO,OAAO,CAAC;QACnD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YAAC,OAAO,GAAG,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAAC,CAAC;QACtF,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;QAAC,CAAC;QAC1D,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB;YAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACzG,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AAC/D,CAAC"}

package/dist/retry.d.ts

@@ -0,0 +1,44 @@
+import { SourceSyncFault, type SourceQuotaMethod, type SourceSyncFailureCode } from '@framers/agentos-ext-account-sources';
+/**
+ * What one Gmail API answer calls for: `ok` for a success; `refresh` for a 401, which earns one fresh access token and
+ * one repeat of the same call; `gone` for a canonical thread read's 404; `retry` for a rate limit or a server failure,
+ * with the scope its wait applies to and whether it is the provider's daily limit; `fault` for a fixed failure.
+ */
+export type GmailHttpDisposition = {
+    readonly kind: 'ok' | 'refresh' | 'gone';
+} | {
+    readonly kind: 'retry';
+    readonly code: 'rate_limited' | 'provider_unavailable';
+    readonly scope: 'project' | 'mailbox';
+    readonly daily: boolean;
+} | {
+    readonly kind: 'fault';
+    readonly code: SourceSyncFailureCode;
+};
+/**
+ * Classifies one Gmail API answer by its status and, for a 403, the exact reason tokens of at most 32 error entries.
+ * A 429 or 5xx is retried whether or not its body parses. A 403 `domainPolicy` wins over any other reason, then
+ * `insufficientPermissions`, `dailyLimitExceeded` (the whole project, daily), `rateLimitExceeded` (the whole project)
+ * and `userRateLimitExceeded` (the mailbox). A 404 is `gone` for a thread read and `history_expired` for a history
+ * page. Any other answer, an unknown reason included, is the fixed `invalid_response`, never an inferred grant loss.
+ * Only exact reason tokens influence policy. Provider text never leaves this function.
+ *
+ * @param status The HTTP status.
+ * @param body The answer's parsed JSON, or null when it did not parse.
+ * @param method The kind of call that was answered.
+ */
+export declare function classifyGmailHttp(status: number, body: unknown, method: SourceQuotaMethod): GmailHttpDisposition;
+/**
+ * Translates a failure of an OAuth grant operation into a fixed account-source fault. A missing grant or Google's
+ * `invalid_grant` is `grant_rejected` and `invalid_scope` or a scope check is `insufficient_scope`, the two that start
+ * the coordinator's fenced grant-loss lifecycle; a 429 is `rate_limited`; a 5xx, `server_error` or
+ * `temporarily_unavailable` is `provider_unavailable`; a transport failure or deadline is `network`. A refused client
+ * (`invalid_client`, `unauthorized_client`) needs an operator's configuration fix and, like every other failure, is
+ * `invalid_response`: never a revoked mailbox. A `SourceSyncFault` is returned unchanged.
+ *
+ * Call inside withGrant so that its fixed-fault boundary preserves this distinction.
+ *
+ * @param error What the grant operation threw.
+ */
+export declare function gmailOAuthFault(error: unknown): SourceSyncFault;
+//# sourceMappingURL=retry.d.ts.map

package/dist/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,qBAAqB,EACpE,MAAM,sCAAsC,CAAC;AAG9C;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,CAAA;CAAE,GAC5C;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,sBAAsB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAClJ;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAMrE;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,GAAG,oBAAoB,CA0BhH;AACD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAiB/D"}

package/dist/retry.js

@@ -0,0 +1,102 @@
+/**
+ * @fileoverview Fixed classification of Gmail API answers and OAuth refresh failures. Only an HTTP status and exact,
+ * allow-listed reason tokens decide a disposition; provider text, error bodies and causes never reach a result or an
+ * error. The durable account-source coordinator owns retry episodes, backoff and grant-loss handling.
+ * @module agentos-ext-gmail-source/retry
+ */
+import { OAuthGrantRefused } from '@framers/agentos/auth';
+import { SourceSyncFault, } from '@framers/agentos-ext-account-sources';
+import { GmailOAuthFault } from './types.js';
+// A plain object, or null for anything else.
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value : null;
+}
+/**
+ * Classifies one Gmail API answer by its status and, for a 403, the exact reason tokens of at most 32 error entries.
+ * A 429 or 5xx is retried whether or not its body parses. A 403 `domainPolicy` wins over any other reason, then
+ * `insufficientPermissions`, `dailyLimitExceeded` (the whole project, daily), `rateLimitExceeded` (the whole project)
+ * and `userRateLimitExceeded` (the mailbox). A 404 is `gone` for a thread read and `history_expired` for a history
+ * page. Any other answer, an unknown reason included, is the fixed `invalid_response`, never an inferred grant loss.
+ * Only exact reason tokens influence policy. Provider text never leaves this function.
+ *
+ * @param status The HTTP status.
+ * @param body The answer's parsed JSON, or null when it did not parse.
+ * @param method The kind of call that was answered.
+ */
+export function classifyGmailHttp(status, body, method) {
+    if (status === 200)
+        return { kind: 'ok' };
+    if (status === 401)
+        return { kind: 'refresh' };
+    if (status === 404 && method === 'read')
+        return { kind: 'gone' };
+    if (status === 404 && method === 'changes')
+        return { kind: 'fault', code: 'history_expired' };
+    const retry = (code, scope, daily = false) => ({ kind: 'retry', code, scope, daily });
+    if (status === 429)
+        return retry('rate_limited', 'mailbox');
+    if (status >= 500 && status <= 599)
+        return retry('provider_unavailable', 'mailbox');
+    if (status === 403) {
+        const entries = record(record(body)?.error)?.errors;
+        const reasons = new Set();
+        if (Array.isArray(entries) && entries.length <= 32) {
+            for (const entry of entries) {
+                const reason = record(entry)?.reason;
+                if (typeof reason === 'string' && ['domainPolicy', 'insufficientPermissions', 'dailyLimitExceeded',
+                    'rateLimitExceeded', 'userRateLimitExceeded'].includes(reason))
+                    reasons.add(reason);
+            }
+        }
+        if (reasons.has('domainPolicy'))
+            return { kind: 'fault', code: 'domain_policy' };
+        if (reasons.has('insufficientPermissions'))
+            return { kind: 'fault', code: 'insufficient_scope' };
+        if (reasons.has('dailyLimitExceeded'))
+            return retry('rate_limited', 'project', true);
+        if (reasons.has('rateLimitExceeded'))
+            return retry('rate_limited', 'project');
+        if (reasons.has('userRateLimitExceeded'))
+            return retry('rate_limited', 'mailbox');
+    }
+    return { kind: 'fault', code: 'invalid_response' };
+}
+/**
+ * Translates a failure of an OAuth grant operation into a fixed account-source fault. A missing grant or Google's
+ * `invalid_grant` is `grant_rejected` and `invalid_scope` or a scope check is `insufficient_scope`, the two that start
+ * the coordinator's fenced grant-loss lifecycle; a 429 is `rate_limited`; a 5xx, `server_error` or
+ * `temporarily_unavailable` is `provider_unavailable`; a transport failure or deadline is `network`. A refused client
+ * (`invalid_client`, `unauthorized_client`) needs an operator's configuration fix and, like every other failure, is
+ * `invalid_response`: never a revoked mailbox. A `SourceSyncFault` is returned unchanged.
+ *
+ * Call inside withGrant so that its fixed-fault boundary preserves this distinction.
+ *
+ * @param error What the grant operation threw.
+ */
+export function gmailOAuthFault(error) {
+    if (error instanceof SourceSyncFault)
+        return error;
+    if (error instanceof GmailOAuthFault) {
+        if (error.reason === 'scope')
+            return new SourceSyncFault('insufficient_scope');
+        if (error.reason === 'network' || error.reason === 'timeout')
+            return new SourceSyncFault('network');
+        if (error.reason === 'cancelled')
+            return new SourceSyncFault('cancelled');
+        return new SourceSyncFault('invalid_response');
+    }
+    if (error instanceof OAuthGrantRefused) {
+        if (error.reason === 'missing' || error.providerError === 'invalid_grant')
+            return new SourceSyncFault('grant_rejected');
+        if (error.providerError === 'invalid_scope')
+            return new SourceSyncFault('insufficient_scope');
+        if (error.status === 429)
+            return new SourceSyncFault('rate_limited');
+        if ((error.status !== undefined && error.status >= 500) || ['server_error', 'temporarily_unavailable'].includes(error.providerError ?? '')) {
+            return new SourceSyncFault('provider_unavailable');
+        }
+    }
+    return new SourceSyncFault('invalid_response');
+}
+//# sourceMappingURL=retry.js.map

package/dist/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,eAAe,GAChB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAW7C,6CAA6C;AAC7C,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AACD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,IAAa,EAAE,MAAyB;IACxF,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC9F,MAAM,KAAK,GAAG,CAAC,IAA6C,EAAE,KAA4B,EAAE,KAAK,GAAG,KAAK,EAAwB,EAAE,CACjI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IACpF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBACrC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,yBAAyB,EAAE,oBAAoB;oBAChG,mBAAmB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACjF,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;QACjG,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAAE,OAAO,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACrF,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAAE,OAAO,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAAE,OAAO,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACrD,CAAC;AACD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,YAAY,eAAe;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QACpG,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1E,OAAO,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,eAAe;YAAE,OAAO,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;QACxH,IAAI,KAAK,CAAC,aAAa,KAAK,eAAe;YAAE,OAAO,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3I,OAAO,IAAI,eAAe,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;AACjD,CAAC"}

package/manifest.json

@@ -2,7 +2,7 @@
   "$schema": "https://agentos.sh/schemas/extension-manifest-v1.json",
   "id": "com.framers.productivity.gmail-source",
   "name": "Gmail Source",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Read-only OAuth and bounded personal Gmail source helpers",
   "author": {
     "name": "Frame",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@framers/agentos-ext-gmail-source",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Read-only OAuth and bounded personal Gmail source helpers",
   "type": "module",
   "sideEffects": false,
@@ -52,7 +52,7 @@
     "typescript": "5.4.5",
     "vitest": "^3.2.7",
     "@framers/agentos": "^0.13.134",
-    "@framers/agentos-ext-account-sources": "^0.7.0"
+    "@framers/agentos-ext-account-sources": "^0.7.1"
   },
   "scripts": {
     "build": "tsc",