@generacy-ai/orchestrator 0.0.0-preview-20260304013206

package/dist/auth/jwt.js

@@ -0,0 +1,74 @@
+/**
+ * Create JWT payload from GitHub user
+ */
+export function createJWTPayloadFromGitHubUser(user, scopes = ['workflows:read', 'queue:read', 'agents:read']) {
+    return {
+        sub: `github:${user.id}`,
+        name: user.name || user.login,
+        email: user.email,
+        provider: 'github',
+        scopes,
+    };
+}
+/**
+ * Sign a JWT token using Fastify JWT plugin
+ */
+export async function signToken(server, payload) {
+    return server.jwt.sign(payload);
+}
+/**
+ * Verify and decode a JWT token
+ */
+export async function verifyToken(request) {
+    try {
+        await request.jwtVerify();
+        return request.user;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Create auth context from JWT payload
+ */
+export function createAuthContextFromJWT(payload) {
+    return {
+        userId: payload.sub,
+        method: 'jwt',
+        scopes: payload.scopes,
+    };
+}
+/**
+ * Extract bearer token from authorization header
+ */
+export function extractBearerToken(authHeader) {
+    if (!authHeader) {
+        return null;
+    }
+    const parts = authHeader.split(' ');
+    if (parts.length !== 2 || parts[0]?.toLowerCase() !== 'bearer') {
+        return null;
+    }
+    return parts[1] ?? null;
+}
+/**
+ * Decode JWT payload without verification (for debugging)
+ */
+export function decodeTokenPayload(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            return null;
+        }
+        const payload = parts[1];
+        if (!payload) {
+            return null;
+        }
+        const decoded = Buffer.from(payload, 'base64url').toString('utf-8');
+        return JSON.parse(decoded);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=jwt.js.map

package/dist/auth/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":"AAWA;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,IAAgB,EAChB,SAAqB,CAAC,gBAAgB,EAAE,YAAY,EAAE,aAAa,CAAC;IAEpE,OAAO;QACL,GAAG,EAAE,UAAU,IAAI,CAAC,EAAE,EAAE;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,QAAQ;QAClB,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAuB,EACvB,OAAwC;IAExC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,IAAkB,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAmB;IAC1D,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,GAAG;QACnB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA8B;IAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/auth/middleware.d.ts

@@ -0,0 +1,43 @@
+import type { FastifyRequest, FastifyReply } from 'fastify';
+import type { AuthContext, ApiScope } from '../types/index.js';
+import { type ApiKeyStore } from './api-key.js';
+/**
+ * Augment FastifyRequest to include auth context
+ */
+declare module 'fastify' {
+    interface FastifyRequest {
+        auth: AuthContext;
+    }
+}
+/**
+ * Authentication middleware options
+ */
+export interface AuthMiddlewareOptions {
+    /** API key store for validating API keys */
+    apiKeyStore: ApiKeyStore;
+    /** Whether authentication is enabled */
+    enabled?: boolean;
+    /** Routes to skip authentication */
+    skipRoutes?: string[];
+}
+/**
+ * Create authentication middleware
+ */
+export declare function createAuthMiddleware(options: AuthMiddlewareOptions): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * Create scope-checking hook
+ */
+export declare function requireScopes(...requiredScopes: ApiScope[]): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * Create admin-only scope check
+ */
+export declare function requireAdmin(): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * Create read scope check for a resource
+ */
+export declare function requireRead(resource: 'workflows' | 'queue' | 'agents'): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * Create write scope check for a resource
+ */
+export declare function requireWrite(resource: 'workflows' | 'queue'): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/auth/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAGtB;;GAEG;AACH,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,cAAc;QACtB,IAAI,EAAE,WAAW,CAAC;KACnB;CACF;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,4CAA4C;IAC5C,WAAW,EAAE,WAAW,CAAC;IACzB,wCAAwC;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,IAI/D,SAAS,cAAc,EACvB,OAAO,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,CAmEjB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,GAAG,cAAc,EAAE,QAAQ,EAAE,IAEvD,SAAS,cAAc,EACvB,OAAO,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,CAkBjB;AAED;;GAEG;AACH,wBAAgB,YAAY,cAzBf,cAAc,SAChB,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,CAyBjB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,GAAG,QAAQ,aAhCzD,cAAc,SAChB,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,CAgCjB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,aAvC/C,cAAc,SAChB,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,CAuCjB"}

package/dist/auth/middleware.js

@@ -0,0 +1,101 @@
+import { ErrorTypes, createProblemDetails } from '../types/index.js';
+import { API_KEY_HEADER, validateApiKey, createAuthContextFromApiKey, hasAnyScope, } from './api-key.js';
+import { extractBearerToken, verifyToken, createAuthContextFromJWT } from './jwt.js';
+/**
+ * Create authentication middleware
+ */
+export function createAuthMiddleware(options) {
+    const { apiKeyStore, enabled = true, skipRoutes = [] } = options;
+    return async function authMiddleware(request, reply) {
+        // Check if auth is disabled
+        if (!enabled) {
+            request.auth = {
+                userId: 'anonymous',
+                method: 'api-key',
+                scopes: ['admin'],
+            };
+            return;
+        }
+        // Check if route should skip auth
+        const routePath = request.routeOptions?.url ?? request.url;
+        if (skipRoutes.some((route) => routePath.startsWith(route))) {
+            request.auth = {
+                userId: 'anonymous',
+                method: 'api-key',
+                scopes: [],
+            };
+            return;
+        }
+        // Try API key authentication first
+        const apiKey = request.headers[API_KEY_HEADER];
+        if (typeof apiKey === 'string' && apiKey.length > 0) {
+            const result = await validateApiKey(apiKey, apiKeyStore);
+            if (result.valid && result.credential) {
+                request.auth = createAuthContextFromApiKey(result.credential);
+                return;
+            }
+            // Invalid API key
+            return reply.status(401).send(createProblemDetails(ErrorTypes.UNAUTHORIZED, 'Invalid API Key', 401, {
+                detail: result.error,
+                traceId: request.correlationId,
+            }));
+        }
+        // Try JWT authentication
+        const authHeader = request.headers.authorization;
+        const token = extractBearerToken(authHeader);
+        if (token) {
+            const payload = await verifyToken(request);
+            if (payload) {
+                request.auth = createAuthContextFromJWT(payload);
+                return;
+            }
+            // Invalid JWT
+            return reply.status(401).send(createProblemDetails(ErrorTypes.UNAUTHORIZED, 'Invalid Token', 401, {
+                detail: 'The provided JWT token is invalid or expired',
+                traceId: request.correlationId,
+            }));
+        }
+        // No authentication provided
+        return reply.status(401).send(createProblemDetails(ErrorTypes.UNAUTHORIZED, 'Authentication Required', 401, {
+            detail: 'Provide an API key via X-API-Key header or a JWT via Authorization header',
+            traceId: request.correlationId,
+        }));
+    };
+}
+/**
+ * Create scope-checking hook
+ */
+export function requireScopes(...requiredScopes) {
+    return async function scopeCheck(request, reply) {
+        if (!request.auth) {
+            return reply.status(401).send(createProblemDetails(ErrorTypes.UNAUTHORIZED, 'Authentication Required', 401, {
+                traceId: request.correlationId,
+            }));
+        }
+        if (!hasAnyScope(request.auth, requiredScopes)) {
+            return reply.status(403).send(createProblemDetails(ErrorTypes.FORBIDDEN, 'Insufficient Permissions', 403, {
+                detail: `Required scopes: ${requiredScopes.join(' or ')}`,
+                traceId: request.correlationId,
+            }));
+        }
+    };
+}
+/**
+ * Create admin-only scope check
+ */
+export function requireAdmin() {
+    return requireScopes('admin');
+}
+/**
+ * Create read scope check for a resource
+ */
+export function requireRead(resource) {
+    return requireScopes(`${resource}:read`, 'admin');
+}
+/**
+ * Create write scope check for a resource
+ */
+export function requireWrite(resource) {
+    return requireScopes(`${resource}:write`, 'admin');
+}
+//# sourceMappingURL=middleware.js.map

package/dist/auth/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EACL,cAAc,EACd,cAAc,EACd,2BAA2B,EAC3B,WAAW,GAEZ,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAuBrF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,EAAE,UAAU,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAEjE,OAAO,KAAK,UAAU,cAAc,CAClC,OAAuB,EACvB,KAAmB;QAEnB,4BAA4B;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,GAAG;gBACb,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,CAAC,OAAO,CAAC;aAClB,CAAC;YACF,OAAO;QACT,CAAC;QAED,kCAAkC;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,IAAI,GAAG;gBACb,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,EAAE;aACX,CAAC;YACF,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,GAAG,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,kBAAkB;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3B,oBAAoB,CAAC,UAAU,CAAC,YAAY,EAAE,iBAAiB,EAAE,GAAG,EAAE;gBACpE,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,aAAa;aAC/B,CAAC,CACH,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAgC,CAAC,CAAC;QACnE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,cAAc;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3B,oBAAoB,CAAC,UAAU,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE;gBAClE,MAAM,EAAE,8CAA8C;gBACtD,OAAO,EAAE,OAAO,CAAC,aAAa;aAC/B,CAAC,CACH,CAAC;QACJ,CAAC;QAED,6BAA6B;QAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3B,oBAAoB,CAAC,UAAU,CAAC,YAAY,EAAE,yBAAyB,EAAE,GAAG,EAAE;YAC5E,MAAM,EAAE,2EAA2E;YACnF,OAAO,EAAE,OAAO,CAAC,aAAa;SAC/B,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAG,cAA0B;IACzD,OAAO,KAAK,UAAU,UAAU,CAC9B,OAAuB,EACvB,KAAmB;QAEnB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3B,oBAAoB,CAAC,UAAU,CAAC,YAAY,EAAE,yBAAyB,EAAE,GAAG,EAAE;gBAC5E,OAAO,EAAE,OAAO,CAAC,aAAa;aAC/B,CAAC,CACH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3B,oBAAoB,CAAC,UAAU,CAAC,SAAS,EAAE,0BAA0B,EAAE,GAAG,EAAE;gBAC1E,MAAM,EAAE,oBAAoB,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBACzD,OAAO,EAAE,OAAO,CAAC,aAAa;aAC/B,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAA0C;IACpE,OAAO,aAAa,CAAC,GAAG,QAAQ,OAAmB,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,QAA+B;IAC1D,OAAO,aAAa,CAAC,GAAG,QAAQ,QAAoB,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC"}

package/dist/config/index.d.ts

@@ -0,0 +1,3 @@
+export { LogLevelSchema, type LogLevel, ServerConfigSchema, type ServerConfig, RedisConfigSchema, type RedisConfig, GitHubOAuthConfigSchema, type GitHubOAuthConfig, JWTConfigSchema, type JWTConfig, AuthConfigSchema, type AuthConfig, RateLimitConfigSchema, type RateLimitConfig, CorsConfigSchema, type CorsConfig, LoggingConfigSchema, type LoggingConfig, RepositoryConfigSchema, type RepositoryConfig, MonitorConfigSchema, type MonitorConfig, PrMonitorConfigSchema, type PrMonitorConfig, EpicMonitorConfigSchema, type EpicMonitorConfig, DispatchConfigSchema, type DispatchConfig, WorkerConfigSchema, type WorkerConfig, OrchestratorConfigSchema, type OrchestratorConfig, validateConfig, } from './schema.js';
+export { loadConfig, createTestConfig, type LoadConfigOptions } from './loader.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,cAAc,EACd,KAAK,QAAQ,EACb,kBAAkB,EAClB,KAAK,YAAY,EACjB,iBAAiB,EACjB,KAAK,WAAW,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,eAAe,EACf,KAAK,SAAS,EACd,gBAAgB,EAChB,KAAK,UAAU,EACf,qBAAqB,EACrB,KAAK,eAAe,EACpB,gBAAgB,EAChB,KAAK,UAAU,EACf,mBAAmB,EACnB,KAAK,aAAa,EAClB,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,KAAK,aAAa,EAClB,qBAAqB,EACrB,KAAK,eAAe,EACpB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,oBAAoB,EACpB,KAAK,cAAc,EACnB,kBAAkB,EAClB,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/config/index.js

@@ -0,0 +1,5 @@
+export { 
+// Schema types
+LogLevelSchema, ServerConfigSchema, RedisConfigSchema, GitHubOAuthConfigSchema, JWTConfigSchema, AuthConfigSchema, RateLimitConfigSchema, CorsConfigSchema, LoggingConfigSchema, RepositoryConfigSchema, MonitorConfigSchema, PrMonitorConfigSchema, EpicMonitorConfigSchema, DispatchConfigSchema, WorkerConfigSchema, OrchestratorConfigSchema, validateConfig, } from './schema.js';
+export { loadConfig, createTestConfig } from './loader.js';
+//# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO;AACL,eAAe;AACf,cAAc,EAEd,kBAAkB,EAElB,iBAAiB,EAEjB,uBAAuB,EAEvB,eAAe,EAEf,gBAAgB,EAEhB,qBAAqB,EAErB,gBAAgB,EAEhB,mBAAmB,EAEnB,sBAAsB,EAEtB,mBAAmB,EAEnB,qBAAqB,EAErB,uBAAuB,EAEvB,oBAAoB,EAEpB,kBAAkB,EAElB,wBAAwB,EAExB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAA0B,MAAM,aAAa,CAAC"}

package/dist/config/loader.d.ts

@@ -0,0 +1,21 @@
+import { type OrchestratorConfig } from './schema.js';
+export interface LoadConfigOptions {
+    /** Path to configuration file (optional, will search defaults if not provided) */
+    configFile?: string;
+    /** Whether to load from environment variables (default: true) */
+    loadEnv?: boolean;
+}
+/**
+ * Load configuration from file and environment variables
+ *
+ * Priority (highest to lowest):
+ * 1. Environment variables
+ * 2. Configuration file (specified or found)
+ * 3. Default values
+ */
+export declare function loadConfig(options?: LoadConfigOptions): OrchestratorConfig;
+/**
+ * Create a minimal config for testing
+ */
+export declare function createTestConfig(overrides?: Partial<OrchestratorConfig>): OrchestratorConfig;
+//# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,kBAAkB,EAAkB,MAAM,aAAa,CAAC;AA2QtE,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,kBAAkB,CA8B9E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAC1C,kBAAkB,CA8BpB"}

package/dist/config/loader.js

@@ -0,0 +1,295 @@
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import { validateConfig } from './schema.js';
+/**
+ * Environment variable prefix for configuration
+ */
+const ENV_PREFIX = 'ORCHESTRATOR_';
+/**
+ * Default configuration file paths to search
+ */
+const DEFAULT_CONFIG_PATHS = [
+    './orchestrator.yaml',
+    './orchestrator.yml',
+    './config/orchestrator.yaml',
+    './config/orchestrator.yml',
+];
+/**
+ * Load configuration from environment variables
+ */
+function loadFromEnv() {
+    const config = {
+        server: {},
+        redis: {},
+        auth: {
+            jwt: {},
+            github: {},
+        },
+        rateLimit: {},
+        cors: {},
+        logging: {},
+        repositories: undefined,
+    };
+    // Server config
+    if (process.env[`${ENV_PREFIX}PORT`]) {
+        config.server.port = parseInt(process.env[`${ENV_PREFIX}PORT`], 10);
+    }
+    if (process.env[`${ENV_PREFIX}HOST`]) {
+        config.server.host = process.env[`${ENV_PREFIX}HOST`];
+    }
+    // Redis config (REDIS_URL takes precedence, falls back to ORCHESTRATOR_REDIS_URL)
+    const redisUrl = process.env['REDIS_URL'] ?? process.env[`${ENV_PREFIX}REDIS_URL`];
+    if (redisUrl) {
+        config.redis.url = redisUrl;
+    }
+    // Auth config
+    if (process.env[`${ENV_PREFIX}AUTH_ENABLED`]) {
+        config.auth.enabled =
+            process.env[`${ENV_PREFIX}AUTH_ENABLED`] === 'true';
+    }
+    if (process.env[`${ENV_PREFIX}JWT_SECRET`]) {
+        config.auth.jwt.secret =
+            process.env[`${ENV_PREFIX}JWT_SECRET`];
+    }
+    if (process.env[`${ENV_PREFIX}JWT_EXPIRES_IN`]) {
+        config.auth.jwt.expiresIn =
+            process.env[`${ENV_PREFIX}JWT_EXPIRES_IN`];
+    }
+    if (process.env['GITHUB_CLIENT_ID']) {
+        config.auth.github.clientId =
+            process.env['GITHUB_CLIENT_ID'];
+    }
+    if (process.env['GITHUB_CLIENT_SECRET']) {
+        config.auth.github.clientSecret =
+            process.env['GITHUB_CLIENT_SECRET'];
+    }
+    if (process.env[`${ENV_PREFIX}GITHUB_CALLBACK_URL`]) {
+        config.auth.github.callbackUrl =
+            process.env[`${ENV_PREFIX}GITHUB_CALLBACK_URL`];
+    }
+    // Rate limit config
+    if (process.env[`${ENV_PREFIX}RATE_LIMIT_ENABLED`]) {
+        config.rateLimit.enabled =
+            process.env[`${ENV_PREFIX}RATE_LIMIT_ENABLED`] === 'true';
+    }
+    if (process.env[`${ENV_PREFIX}RATE_LIMIT_MAX`]) {
+        config.rateLimit.max = parseInt(process.env[`${ENV_PREFIX}RATE_LIMIT_MAX`], 10);
+    }
+    if (process.env[`${ENV_PREFIX}RATE_LIMIT_WINDOW`]) {
+        config.rateLimit.timeWindow =
+            process.env[`${ENV_PREFIX}RATE_LIMIT_WINDOW`];
+    }
+    // Logging config (LOG_LEVEL takes precedence, falls back to ORCHESTRATOR_LOG_LEVEL)
+    const logLevel = process.env['LOG_LEVEL'] ?? process.env[`${ENV_PREFIX}LOG_LEVEL`];
+    if (logLevel) {
+        config.logging.level = logLevel;
+    }
+    if (process.env[`${ENV_PREFIX}LOG_PRETTY`]) {
+        config.logging.pretty =
+            process.env[`${ENV_PREFIX}LOG_PRETTY`] === 'true';
+    }
+    // Repositories config (MONITORED_REPOS takes precedence, falls back to ORCHESTRATOR_REPOSITORIES)
+    const reposStr = process.env['MONITORED_REPOS'] ?? process.env[`${ENV_PREFIX}REPOSITORIES`];
+    if (reposStr) {
+        const repos = reposStr.split(',').map(r => {
+            const [owner, repo] = r.trim().split('/');
+            return { owner, repo };
+        }).filter(r => r.owner && r.repo);
+        config.repositories = repos;
+    }
+    // Monitor config (POLL_INTERVAL_MS takes precedence, falls back to ORCHESTRATOR_POLL_INTERVAL_MS)
+    const pollIntervalMs = process.env['POLL_INTERVAL_MS'] ?? process.env[`${ENV_PREFIX}POLL_INTERVAL_MS`];
+    if (pollIntervalMs) {
+        if (!config.monitor) {
+            config.monitor = {};
+        }
+        config.monitor.pollIntervalMs = parseInt(pollIntervalMs, 10);
+    }
+    // Webhook secret (WEBHOOK_SECRET takes precedence, falls back to ORCHESTRATOR_WEBHOOK_SECRET)
+    const webhookSecret = process.env['WEBHOOK_SECRET'] ?? process.env[`${ENV_PREFIX}WEBHOOK_SECRET`];
+    if (webhookSecret) {
+        if (!config.monitor) {
+            config.monitor = {};
+        }
+        config.monitor.webhookSecret = webhookSecret;
+    }
+    // Cluster GitHub username for assignee-based issue filtering
+    const clusterGithubUsername = process.env['CLUSTER_GITHUB_USERNAME'];
+    if (clusterGithubUsername) {
+        if (!config.monitor) {
+            config.monitor = {};
+        }
+        config.monitor.clusterGithubUsername = clusterGithubUsername;
+    }
+    // PR Monitor config
+    if (process.env['PR_MONITOR_ENABLED']) {
+        if (!config.prMonitor) {
+            config.prMonitor = {};
+        }
+        config.prMonitor.enabled =
+            process.env['PR_MONITOR_ENABLED'] === 'true';
+    }
+    if (process.env['PR_MONITOR_POLL_INTERVAL_MS']) {
+        if (!config.prMonitor) {
+            config.prMonitor = {};
+        }
+        config.prMonitor.pollIntervalMs = parseInt(process.env['PR_MONITOR_POLL_INTERVAL_MS'], 10);
+    }
+    if (process.env['PR_MONITOR_WEBHOOK_SECRET']) {
+        if (!config.prMonitor) {
+            config.prMonitor = {};
+        }
+        config.prMonitor.webhookSecret =
+            process.env['PR_MONITOR_WEBHOOK_SECRET'];
+    }
+    if (process.env['PR_MONITOR_ADAPTIVE_POLLING']) {
+        if (!config.prMonitor) {
+            config.prMonitor = {};
+        }
+        config.prMonitor.adaptivePolling =
+            process.env['PR_MONITOR_ADAPTIVE_POLLING'] === 'true';
+    }
+    if (process.env['PR_MONITOR_MAX_CONCURRENT_POLLS']) {
+        if (!config.prMonitor) {
+            config.prMonitor = {};
+        }
+        config.prMonitor.maxConcurrentPolls = parseInt(process.env['PR_MONITOR_MAX_CONCURRENT_POLLS'], 10);
+    }
+    return config;
+}
+/**
+ * Load configuration from a YAML file
+ */
+function loadFromFile(filePath) {
+    const absolutePath = resolve(filePath);
+    if (!existsSync(absolutePath)) {
+        throw new Error(`Configuration file not found: ${absolutePath}`);
+    }
+    const content = readFileSync(absolutePath, 'utf-8');
+    const parsed = parseYaml(content);
+    // Return the orchestrator section if present, otherwise the whole config
+    return parsed.orchestrator || parsed;
+}
+/**
+ * Find the first existing config file from default paths
+ */
+function findConfigFile() {
+    for (const configPath of DEFAULT_CONFIG_PATHS) {
+        if (existsSync(resolve(configPath))) {
+            return configPath;
+        }
+    }
+    return null;
+}
+/**
+ * Deep merge two objects (env overrides file)
+ */
+function deepMerge(target, source) {
+    const result = { ...target };
+    for (const key of Object.keys(source)) {
+        const sourceValue = source[key];
+        const targetValue = result[key];
+        if (sourceValue === undefined || sourceValue === null || sourceValue === '') {
+            continue;
+        }
+        if (typeof sourceValue === 'object' &&
+            !Array.isArray(sourceValue) &&
+            typeof targetValue === 'object' &&
+            !Array.isArray(targetValue)) {
+            result[key] = deepMerge(targetValue, sourceValue);
+        }
+        else {
+            result[key] = sourceValue;
+        }
+    }
+    return result;
+}
+/**
+ * Remove empty nested objects
+ */
+function removeEmpty(obj) {
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            const cleaned = removeEmpty(value);
+            if (Object.keys(cleaned).length > 0) {
+                result[key] = cleaned;
+            }
+        }
+        else if (value !== undefined && value !== null && value !== '') {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/**
+ * Load configuration from file and environment variables
+ *
+ * Priority (highest to lowest):
+ * 1. Environment variables
+ * 2. Configuration file (specified or found)
+ * 3. Default values
+ */
+export function loadConfig(options = {}) {
+    const { configFile, loadEnv = true } = options;
+    let fileConfig = {};
+    // Load from file if specified or found
+    const configPath = configFile || findConfigFile();
+    if (configPath) {
+        try {
+            fileConfig = loadFromFile(configPath);
+        }
+        catch (error) {
+            if (configFile) {
+                // If explicitly specified, throw the error
+                throw error;
+            }
+            // Otherwise, continue without file config
+        }
+    }
+    // Load from environment
+    let envConfig = {};
+    if (loadEnv) {
+        envConfig = removeEmpty(loadFromEnv());
+    }
+    // Merge configs (env overrides file)
+    const mergedConfig = deepMerge(fileConfig, envConfig);
+    // Validate and return
+    return validateConfig(mergedConfig);
+}
+/**
+ * Create a minimal config for testing
+ */
+export function createTestConfig(overrides = {}) {
+    return validateConfig({
+        server: {
+            port: 0, // Random port
+            host: '127.0.0.1',
+        },
+        redis: {
+            url: 'redis://localhost:6379',
+        },
+        auth: {
+            enabled: false,
+            providers: [],
+            jwt: {
+                secret: 'test-secret-at-least-32-characters-long',
+                expiresIn: '1h',
+            },
+        },
+        rateLimit: {
+            enabled: false,
+        },
+        cors: {
+            origin: true,
+            credentials: true,
+        },
+        logging: {
+            level: 'error',
+            pretty: false,
+        },
+        ...overrides,
+    });
+}
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAA2B,cAAc,EAAE,MAAM,aAAa,CAAC;AAEtE;;GAEG;AACH,MAAM,UAAU,GAAG,eAAe,CAAC;AAEnC;;GAEG;AACH,MAAM,oBAAoB,GAAG;IAC3B,qBAAqB;IACrB,oBAAoB;IACpB,4BAA4B;IAC5B,2BAA2B;CAC5B,CAAC;AAEF;;GAEG;AACH,SAAS,WAAW;IAClB,MAAM,MAAM,GAA4B;QACtC,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,EAAE;QACT,IAAI,EAAE;YACJ,GAAG,EAAE,EAAE;YACP,MAAM,EAAE,EAAE;SACX;QACD,SAAS,EAAE,EAAE;QACb,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,SAAS;KACxB,CAAC;IAEF,gBAAgB;IAChB,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,MAAkC,CAAC,IAAI,GAAG,QAAQ,CACxD,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,MAAM,CAAE,EACjC,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,MAAkC,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,MAAM,CAAC,CAAC;IACrF,CAAC;IAED,kFAAkF;IAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,WAAW,CAAC,CAAC;IACnF,IAAI,QAAQ,EAAE,CAAC;QACZ,MAAM,CAAC,KAAiC,CAAC,GAAG,GAAG,QAAQ,CAAC;IAC3D,CAAC;IAED,cAAc;IACd,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,cAAc,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAgC,CAAC,OAAO;YAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,cAAc,CAAC,KAAK,MAAM,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,YAAY,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,IAAgC,CAAC,GAA+B,CAAC,MAAM;YAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,gBAAgB,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAgC,CAAC,GAA+B,CAAC,SAAS;YACjF,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAgC,CAAC,MAAkC,CAAC,QAAQ;YACnF,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAgC,CAAC,MAAkC,CAAC,YAAY;YACvF,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,qBAAqB,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAgC,CAAC,MAAkC,CAAC,WAAW;YACtF,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;IACpD,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,oBAAoB,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,SAAqC,CAAC,OAAO;YACnD,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,oBAAoB,CAAC,KAAK,MAAM,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,gBAAgB,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,SAAqC,CAAC,GAAG,GAAG,QAAQ,CAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,gBAAgB,CAAE,EAC3C,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,mBAAmB,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,SAAqC,CAAC,UAAU;YACtD,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,mBAAmB,CAAC,CAAC;IAClD,CAAC;IAED,oFAAoF;IACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,WAAW,CAAC,CAAC;IACnF,IAAI,QAAQ,EAAE,CAAC;QACZ,MAAM,CAAC,OAAmC,CAAC,KAAK,GAAG,QAAQ,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,OAAmC,CAAC,MAAM;YAChD,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,YAAY,CAAC,KAAK,MAAM,CAAC;IACtD,CAAC;IAED,kGAAkG;IAClG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,cAAc,CAAC,CAAC;IAC5F,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACxC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,kGAAkG;IAClG,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,kBAAkB,CAAC,CAAC;IACvG,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;QACtB,CAAC;QACA,MAAM,CAAC,OAAmC,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,8FAA8F;IAC9F,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,gBAAgB,CAAC,CAAC;IAClG,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;QACtB,CAAC;QACA,MAAM,CAAC,OAAmC,CAAC,aAAa,GAAG,aAAa,CAAC;IAC5E,CAAC;IAED,6DAA6D;IAC7D,MAAM,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,qBAAqB,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;QACtB,CAAC;QACA,MAAM,CAAC,OAAmC,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;IAC5F,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QACxB,CAAC;QACA,MAAM,CAAC,SAAqC,CAAC,OAAO;YACnD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QACxB,CAAC;QACA,MAAM,CAAC,SAAqC,CAAC,cAAc,GAAG,QAAQ,CACrE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAE,EAC3C,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QACxB,CAAC;QACA,MAAM,CAAC,SAAqC,CAAC,aAAa;YACzD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QACxB,CAAC;QACA,MAAM,CAAC,SAAqC,CAAC,eAAe;YAC3D,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,KAAK,MAAM,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QACxB,CAAC;QACA,MAAM,CAAC,SAAqC,CAAC,kBAAkB,GAAG,QAAQ,CACzE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAE,EAC/C,EAAE,CACH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAA4B,CAAC;IAE7D,yEAAyE;IACzE,OAAQ,MAAM,CAAC,YAAwC,IAAI,MAAM,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,SAAS,cAAc;IACrB,KAAK,MAAM,UAAU,IAAI,oBAAoB,EAAE,CAAC;QAC9C,IAAI,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAChB,MAA+B,EAC/B,MAA+B;IAE/B,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YAC5E,SAAS;QACX,CAAC;QAED,IACE,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC3B,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAC3B,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CACrB,WAAsC,EACtC,WAAsC,CACvC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,GAA4B;IAC/C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAgC,CAAC,CAAC;YAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACxD,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAE/C,IAAI,UAAU,GAA4B,EAAE,CAAC;IAE7C,uCAAuC;IACvC,MAAM,UAAU,GAAG,UAAU,IAAI,cAAc,EAAE,CAAC;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,EAAE,CAAC;gBACf,2CAA2C;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,SAAS,GAA4B,EAAE,CAAC;IAC5C,IAAI,OAAO,EAAE,CAAC;QACZ,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,qCAAqC;IACrC,MAAM,YAAY,GAAG,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAEtD,sBAAsB;IACtB,OAAO,cAAc,CAAC,YAAY,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAAyC,EAAE;IAE3C,OAAO,cAAc,CAAC;QACpB,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,EAAE,cAAc;YACvB,IAAI,EAAE,WAAW;SAClB;QACD,KAAK,EAAE;YACL,GAAG,EAAE,wBAAwB;SAC9B;QACD,IAAI,EAAE;YACJ,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,EAAE;YACb,GAAG,EAAE;gBACH,MAAM,EAAE,yCAAyC;gBACjD,SAAS,EAAE,IAAI;aAChB;SACF;QACD,SAAS,EAAE;YACT,OAAO,EAAE,KAAK;SACf;QACD,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;SAClB;QACD,OAAO,EAAE;YACP,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,KAAK;SACd;QACD,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC"}