@lobu/gateway 2.8.0

package/dist/orchestration/scheduled-wakeup.js

@@ -0,0 +1,500 @@
+"use strict";
+/**
+ * Scheduled Wake-Up Service
+ *
+ * Allows workers (Claude) to schedule future tasks that will wake them up.
+ * Uses Redis for storage and BullMQ for delayed job processing.
+ * Supports one-time delays (delayMinutes) and recurring schedules (cron expressions).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScheduledWakeupService = void 0;
+exports.setScheduledWakeupService = setScheduledWakeupService;
+exports.getScheduledWakeupService = getScheduledWakeupService;
+const node_crypto_1 = require("node:crypto");
+const core_1 = require("@lobu/core");
+const cron_parser_1 = require("cron-parser");
+const logger = (0, core_1.createLogger)("scheduled-wakeup");
+// ============================================================================
+// Constants
+// ============================================================================
+const QUEUE_NAME = "scheduled_wakeups";
+const REDIS_KEY_PREFIX = "schedule:wakeup:";
+const REDIS_INDEX_PREFIX = "schedule:deployment:";
+const REDIS_AGENT_INDEX_PREFIX = "schedule:agent:";
+// Limits
+const MAX_PENDING_PER_DEPLOYMENT = 10;
+const MAX_DELAY_MINUTES = 1440; // 24 hours
+const SCHEDULE_TTL_SECONDS = 60 * 60 * 24 * 8; // 8 days (for recurring schedules)
+// Cron-specific limits
+const MIN_CRON_INTERVAL_MINUTES = 5; // Minimum 5 minutes between triggers
+const MAX_ITERATIONS = 100; // Maximum iterations for recurring
+const DEFAULT_RECURRING_ITERATIONS = 10; // Default max iterations for recurring
+const MAX_FIRST_TRIGGER_DAYS = 7; // First trigger must be within 7 days
+// ============================================================================
+// Module-level singleton reference
+// ============================================================================
+let scheduledWakeupServiceInstance;
+/**
+ * Set the global ScheduledWakeupService instance
+ * Called by CoreServices after initialization
+ */
+function setScheduledWakeupService(service) {
+    scheduledWakeupServiceInstance = service;
+    logger.debug("ScheduledWakeupService instance set");
+}
+/**
+ * Get the global ScheduledWakeupService instance (if available)
+ * Used by BaseDeploymentManager for cleanup
+ */
+function getScheduledWakeupService() {
+    return scheduledWakeupServiceInstance;
+}
+// ============================================================================
+// Service
+// ============================================================================
+class ScheduledWakeupService {
+    constructor(queue) {
+        this.isInitialized = false;
+        this.queue = queue;
+    }
+    /**
+     * Initialize the service - creates queue and starts worker
+     */
+    async start() {
+        await this.queue.createQueue(QUEUE_NAME);
+        // Register worker to process delayed jobs
+        await this.queue.work(QUEUE_NAME, async (job) => {
+            await this.processScheduledJob(job);
+        });
+        this.isInitialized = true;
+        logger.debug("Scheduled wakeup service started");
+    }
+    /**
+     * Schedule a future wakeup (one-time or recurring)
+     */
+    async schedule(params) {
+        if (!this.isInitialized) {
+            throw new Error("Scheduled wakeup service not initialized");
+        }
+        // Validate: must have either delayMinutes OR cron, not both
+        if (params.delayMinutes && params.cron) {
+            throw new Error("Cannot specify both delayMinutes and cron - use one or the other");
+        }
+        if (!params.delayMinutes && !params.cron) {
+            throw new Error("Must specify either delayMinutes or cron");
+        }
+        const isRecurring = !!params.cron;
+        let triggerAt;
+        let delayMs;
+        if (params.cron) {
+            // Validate and parse cron expression
+            const cronValidation = this.validateCron(params.cron);
+            if (!cronValidation.valid) {
+                throw new Error(cronValidation.error);
+            }
+            triggerAt = cronValidation.firstTrigger;
+            delayMs = triggerAt.getTime() - Date.now();
+        }
+        else {
+            // Validate delay
+            if (params.delayMinutes < 1 ||
+                params.delayMinutes > MAX_DELAY_MINUTES) {
+                throw new Error(`Delay must be between 1 and ${MAX_DELAY_MINUTES} minutes`);
+            }
+            triggerAt = new Date(Date.now() + params.delayMinutes * 60 * 1000);
+            delayMs = params.delayMinutes * 60 * 1000;
+        }
+        // Validate maxIterations (unlimited skips the cap)
+        const maxIterations = params.unlimited
+            ? Number.MAX_SAFE_INTEGER
+            : params.maxIterations
+                ? Math.min(Math.max(1, params.maxIterations), MAX_ITERATIONS)
+                : isRecurring
+                    ? DEFAULT_RECURRING_ITERATIONS
+                    : 1;
+        // Check pending count limit
+        const pending = await this.listPending(params.deploymentName);
+        if (pending.length >= MAX_PENDING_PER_DEPLOYMENT) {
+            throw new Error(`Maximum of ${MAX_PENDING_PER_DEPLOYMENT} pending schedules per deployment`);
+        }
+        const redis = this.queue.getRedisClient();
+        const scheduleId = (0, node_crypto_1.randomUUID)();
+        const now = new Date();
+        const schedule = {
+            id: scheduleId,
+            deploymentName: params.deploymentName,
+            conversationId: params.conversationId,
+            channelId: params.channelId,
+            userId: params.userId,
+            agentId: params.agentId,
+            teamId: params.teamId,
+            platform: params.platform,
+            task: params.task,
+            context: params.context,
+            scheduledAt: now.toISOString(),
+            triggerAt: triggerAt.toISOString(),
+            status: "pending",
+            // Recurring fields
+            cron: params.cron,
+            iteration: 1,
+            maxIterations,
+            isRecurring,
+            unlimited: params.unlimited,
+            source: params.source,
+        };
+        // Store in Redis with TTL
+        const redisKey = `${REDIS_KEY_PREFIX}${scheduleId}`;
+        await redis.setex(redisKey, SCHEDULE_TTL_SECONDS, JSON.stringify(schedule));
+        // Add to deployment index
+        const deploymentIndexKey = `${REDIS_INDEX_PREFIX}${params.deploymentName}`;
+        await redis.sadd(deploymentIndexKey, scheduleId);
+        await redis.expire(deploymentIndexKey, SCHEDULE_TTL_SECONDS);
+        // Add to agent index (for settings UI)
+        const agentIndexKey = `${REDIS_AGENT_INDEX_PREFIX}${params.agentId}`;
+        await redis.sadd(agentIndexKey, scheduleId);
+        await redis.expire(agentIndexKey, SCHEDULE_TTL_SECONDS);
+        // Create delayed job in BullMQ
+        const jobPayload = {
+            scheduleId,
+            deploymentName: params.deploymentName,
+            conversationId: params.conversationId,
+            channelId: params.channelId,
+            userId: params.userId,
+            agentId: params.agentId,
+            teamId: params.teamId,
+            platform: params.platform,
+        };
+        await this.queue.send(QUEUE_NAME, jobPayload, {
+            delayMs,
+            singletonKey: `schedule-${scheduleId}`,
+        });
+        logger.info({
+            scheduleId,
+            deploymentName: params.deploymentName,
+            triggerAt: triggerAt.toISOString(),
+            isRecurring,
+            cron: params.cron,
+            maxIterations,
+        }, "Scheduled wakeup created");
+        return schedule;
+    }
+    /**
+     * Schedule from an external service (no worker context needed).
+     * Synthesizes deployment/conversation context from agentId.
+     */
+    async scheduleExternal(params) {
+        return this.schedule({
+            deploymentName: `external-${params.agentId.slice(0, 8)}`,
+            conversationId: params.agentId,
+            channelId: params.agentId,
+            userId: "system",
+            agentId: params.agentId,
+            teamId: "external",
+            platform: "api",
+            task: params.task,
+            context: params.context,
+            cron: params.cron,
+            delayMinutes: params.delayMinutes,
+            maxIterations: params.maxIterations,
+            unlimited: !!params.cron, // cron schedules from external are unlimited by default
+            source: params.source,
+        });
+    }
+    /**
+     * Validate a cron expression and return first trigger time
+     */
+    validateCron(cronExpr) {
+        try {
+            const interval = cron_parser_1.CronExpressionParser.parse(cronExpr);
+            // Get next two occurrences to check interval
+            const first = interval.next().toDate();
+            const second = interval.next().toDate();
+            // Check minimum interval
+            const intervalMs = second.getTime() - first.getTime();
+            const intervalMinutes = intervalMs / (60 * 1000);
+            if (intervalMinutes < MIN_CRON_INTERVAL_MINUTES) {
+                return {
+                    valid: false,
+                    error: `Cron interval must be at least ${MIN_CRON_INTERVAL_MINUTES} minutes (got ${intervalMinutes.toFixed(1)} minutes)`,
+                };
+            }
+            // Check first trigger is not too far in the future
+            const daysUntilFirst = (first.getTime() - Date.now()) / (24 * 60 * 60 * 1000);
+            if (daysUntilFirst > MAX_FIRST_TRIGGER_DAYS) {
+                return {
+                    valid: false,
+                    error: `First trigger must be within ${MAX_FIRST_TRIGGER_DAYS} days (got ${daysUntilFirst.toFixed(1)} days)`,
+                };
+            }
+            return { valid: true, firstTrigger: first };
+        }
+        catch (error) {
+            return {
+                valid: false,
+                error: `Invalid cron expression: ${error instanceof Error ? error.message : String(error)}`,
+            };
+        }
+    }
+    /**
+     * Cancel a scheduled wakeup
+     */
+    async cancel(scheduleId, deploymentName) {
+        const redis = this.queue.getRedisClient();
+        const redisKey = `${REDIS_KEY_PREFIX}${scheduleId}`;
+        // Get current schedule
+        const data = await redis.get(redisKey);
+        if (!data) {
+            return false;
+        }
+        const schedule = JSON.parse(data);
+        // Verify ownership
+        if (schedule.deploymentName !== deploymentName) {
+            throw new Error("Schedule does not belong to this deployment");
+        }
+        // Update status to cancelled
+        schedule.status = "cancelled";
+        await redis.setex(redisKey, 60 * 60, JSON.stringify(schedule)); // Keep for 1 hour for auditing
+        // Remove from indices
+        const deploymentIndexKey = `${REDIS_INDEX_PREFIX}${deploymentName}`;
+        await redis.srem(deploymentIndexKey, scheduleId);
+        const agentIndexKey = `${REDIS_AGENT_INDEX_PREFIX}${schedule.agentId}`;
+        await redis.srem(agentIndexKey, scheduleId);
+        logger.info({ scheduleId, deploymentName }, "Scheduled wakeup cancelled");
+        return true;
+    }
+    /**
+     * List pending schedules for a deployment
+     */
+    async listPending(deploymentName) {
+        const redis = this.queue.getRedisClient();
+        const deploymentIndexKey = `${REDIS_INDEX_PREFIX}${deploymentName}`;
+        const scheduleIds = await redis.smembers(deploymentIndexKey);
+        const schedules = [];
+        for (const scheduleId of scheduleIds) {
+            try {
+                const redisKey = `${REDIS_KEY_PREFIX}${scheduleId}`;
+                const data = await redis.get(redisKey);
+                if (data) {
+                    const schedule = JSON.parse(data);
+                    if (schedule.status === "pending") {
+                        schedules.push(schedule);
+                    }
+                }
+            }
+            catch (error) {
+                logger.warn({ scheduleId, deploymentName, error }, "Failed to fetch schedule entry, skipping");
+            }
+        }
+        // Sort by trigger time
+        schedules.sort((a, b) => new Date(a.triggerAt).getTime() - new Date(b.triggerAt).getTime());
+        return schedules;
+    }
+    /**
+     * List pending schedules for an agent (used by settings UI)
+     */
+    async listPendingForAgent(agentId) {
+        const redis = this.queue.getRedisClient();
+        const agentIndexKey = `${REDIS_AGENT_INDEX_PREFIX}${agentId}`;
+        const scheduleIds = await redis.smembers(agentIndexKey);
+        const schedules = [];
+        for (const scheduleId of scheduleIds) {
+            try {
+                const redisKey = `${REDIS_KEY_PREFIX}${scheduleId}`;
+                const data = await redis.get(redisKey);
+                if (data) {
+                    const schedule = JSON.parse(data);
+                    if (schedule.status === "pending") {
+                        schedules.push(schedule);
+                    }
+                }
+            }
+            catch (error) {
+                logger.warn({ scheduleId, agentId, error }, "Failed to fetch schedule entry, skipping");
+            }
+        }
+        // Sort by trigger time
+        schedules.sort((a, b) => new Date(a.triggerAt).getTime() - new Date(b.triggerAt).getTime());
+        return schedules;
+    }
+    /**
+     * Cancel a schedule by ID (for settings UI - verifies agent ownership)
+     */
+    async cancelByAgent(scheduleId, agentId) {
+        const redis = this.queue.getRedisClient();
+        const redisKey = `${REDIS_KEY_PREFIX}${scheduleId}`;
+        // Get current schedule
+        const data = await redis.get(redisKey);
+        if (!data) {
+            return false;
+        }
+        const schedule = JSON.parse(data);
+        // Verify agent ownership
+        if (schedule.agentId !== agentId) {
+            throw new Error("Schedule does not belong to this agent");
+        }
+        // Update status to cancelled
+        schedule.status = "cancelled";
+        await redis.setex(redisKey, 60 * 60, JSON.stringify(schedule));
+        // Remove from indices
+        const deploymentIndexKey = `${REDIS_INDEX_PREFIX}${schedule.deploymentName}`;
+        await redis.srem(deploymentIndexKey, scheduleId);
+        const agentIndexKey = `${REDIS_AGENT_INDEX_PREFIX}${agentId}`;
+        await redis.srem(agentIndexKey, scheduleId);
+        logger.info({ scheduleId, agentId }, "Scheduled wakeup cancelled by agent");
+        return true;
+    }
+    /**
+     * Clean up schedules when a deployment is deleted
+     */
+    async cleanupForDeployment(deploymentName) {
+        const redis = this.queue.getRedisClient();
+        const deploymentIndexKey = `${REDIS_INDEX_PREFIX}${deploymentName}`;
+        const scheduleIds = await redis.smembers(deploymentIndexKey);
+        for (const scheduleId of scheduleIds) {
+            const redisKey = `${REDIS_KEY_PREFIX}${scheduleId}`;
+            const data = await redis.get(redisKey);
+            if (data) {
+                const schedule = JSON.parse(data);
+                // Remove from agent index
+                const agentIndexKey = `${REDIS_AGENT_INDEX_PREFIX}${schedule.agentId}`;
+                await redis.srem(agentIndexKey, scheduleId);
+            }
+            await redis.del(redisKey);
+        }
+        await redis.del(deploymentIndexKey);
+        if (scheduleIds.length > 0) {
+            logger.info({ deploymentName, count: scheduleIds.length }, "Cleaned up schedules for deployment");
+        }
+    }
+    /**
+     * Process a scheduled job when it triggers
+     */
+    async processScheduledJob(job) {
+        const { scheduleId, deploymentName } = job.data;
+        const redis = this.queue.getRedisClient();
+        const redisKey = `${REDIS_KEY_PREFIX}${scheduleId}`;
+        // Get schedule data
+        const data = await redis.get(redisKey);
+        if (!data) {
+            logger.warn({ scheduleId }, "Schedule not found - may have expired or been deleted");
+            return;
+        }
+        const schedule = JSON.parse(data);
+        // Check if cancelled
+        if (schedule.status === "cancelled") {
+            logger.info({ scheduleId }, "Schedule was cancelled - skipping");
+            return;
+        }
+        // Build the message to inject into the thread
+        const contextStr = schedule.context
+            ? `\n\nContext: ${JSON.stringify(schedule.context, null, 2)}`
+            : "";
+        // Include iteration info for recurring schedules
+        const iterationInfo = schedule.isRecurring
+            ? ` (iteration ${schedule.iteration} of ${schedule.maxIterations})`
+            : "";
+        const cronInfo = schedule.cron ? `\nSchedule: ${schedule.cron}` : "";
+        const messageText = `[System] Scheduled reminder from yourself${iterationInfo}:
+
+Task: ${schedule.task}${contextStr}
+
+---${cronInfo}
+Originally scheduled at: ${schedule.scheduledAt}
+Schedule ID: ${schedule.id}`;
+        // Enqueue to the main messages queue (same as platform messages)
+        await this.queue.send("messages", {
+            userId: schedule.userId,
+            conversationId: schedule.conversationId,
+            messageId: `scheduled-${scheduleId}-${schedule.iteration}`,
+            channelId: schedule.channelId,
+            teamId: schedule.teamId,
+            agentId: schedule.agentId,
+            botId: "system",
+            platform: schedule.platform,
+            messageText,
+            platformMetadata: {
+                isScheduledWakeup: true,
+                scheduleId,
+                iteration: schedule.iteration,
+                maxIterations: schedule.maxIterations,
+                isRecurring: schedule.isRecurring,
+            },
+            agentOptions: {},
+        }, {
+            priority: 5, // Medium priority
+        });
+        logger.info({
+            scheduleId,
+            deploymentName,
+            conversationId: schedule.conversationId,
+            iteration: schedule.iteration,
+            maxIterations: schedule.maxIterations,
+            isRecurring: schedule.isRecurring,
+        }, "Scheduled wakeup triggered - message enqueued");
+        // Handle recurring: schedule next iteration or complete
+        const hasIterationsLeft = schedule.unlimited || schedule.iteration < schedule.maxIterations;
+        if (schedule.isRecurring && hasIterationsLeft && schedule.cron) {
+            try {
+                // Calculate next trigger from cron
+                const interval = cron_parser_1.CronExpressionParser.parse(schedule.cron);
+                const nextTrigger = interval.next().toDate();
+                const delayMs = nextTrigger.getTime() - Date.now();
+                const nextIteration = schedule.iteration + 1;
+                // Persist iteration increment BEFORE enqueuing the next job.
+                // This prevents duplicate processing if the process crashes
+                // between enqueue and persist.
+                schedule.iteration = nextIteration;
+                schedule.triggerAt = nextTrigger.toISOString();
+                await redis.setex(redisKey, SCHEDULE_TTL_SECONDS, JSON.stringify(schedule));
+                // Create next delayed job
+                const jobPayload = {
+                    scheduleId,
+                    deploymentName: schedule.deploymentName,
+                    conversationId: schedule.conversationId,
+                    channelId: schedule.channelId,
+                    userId: schedule.userId,
+                    agentId: schedule.agentId,
+                    teamId: schedule.teamId,
+                    platform: schedule.platform,
+                };
+                await this.queue.send(QUEUE_NAME, jobPayload, {
+                    delayMs,
+                    singletonKey: `schedule-${scheduleId}-${nextIteration}`,
+                });
+                logger.info({
+                    scheduleId,
+                    nextIteration: schedule.iteration,
+                    nextTrigger: nextTrigger.toISOString(),
+                }, "Scheduled next recurring iteration");
+            }
+            catch (error) {
+                logger.error({ scheduleId, error }, "Failed to schedule next recurring iteration");
+                // Mark as triggered (completed with error) and clean up
+                schedule.status = "triggered";
+                await redis.setex(redisKey, 60 * 60, JSON.stringify(schedule));
+                const deploymentIndexKey = `${REDIS_INDEX_PREFIX}${deploymentName}`;
+                await redis.srem(deploymentIndexKey, scheduleId);
+                const agentIndexKey = `${REDIS_AGENT_INDEX_PREFIX}${schedule.agentId}`;
+                await redis.srem(agentIndexKey, scheduleId);
+            }
+        }
+        else {
+            // One-time schedule or max iterations reached - mark as triggered and clean up
+            schedule.status = "triggered";
+            await redis.setex(redisKey, 60 * 60, JSON.stringify(schedule)); // Keep for 1 hour
+            // Remove from indices
+            const deploymentIndexKey = `${REDIS_INDEX_PREFIX}${deploymentName}`;
+            await redis.srem(deploymentIndexKey, scheduleId);
+            const agentIndexKey = `${REDIS_AGENT_INDEX_PREFIX}${schedule.agentId}`;
+            await redis.srem(agentIndexKey, scheduleId);
+            if (schedule.isRecurring) {
+                logger.info({
+                    scheduleId,
+                    completedIterations: schedule.iteration,
+                }, "Recurring schedule completed all iterations");
+            }
+        }
+    }
+}
+exports.ScheduledWakeupService = ScheduledWakeupService;
+//# sourceMappingURL=scheduled-wakeup.js.map

package/dist/orchestration/scheduled-wakeup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduled-wakeup.js","sourceRoot":"","sources":["../../src/orchestration/scheduled-wakeup.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA8FH,8DAKC;AAMD,8DAIC;AA3GD,6CAAyC;AACzC,qCAA0C;AAC1C,6CAAmD;AAGnD,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,kBAAkB,CAAC,CAAC;AA0DhD,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAClD,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAEnD,SAAS;AACT,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,WAAW;AAC3C,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,mCAAmC;AAClF,uBAAuB;AACvB,MAAM,yBAAyB,GAAG,CAAC,CAAC,CAAC,qCAAqC;AAC1E,MAAM,cAAc,GAAG,GAAG,CAAC,CAAC,mCAAmC;AAC/D,MAAM,4BAA4B,GAAG,EAAE,CAAC,CAAC,uCAAuC;AAChF,MAAM,sBAAsB,GAAG,CAAC,CAAC,CAAC,sCAAsC;AAExE,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,IAAI,8BAAkE,CAAC;AAEvE;;;GAGG;AACH,SAAgB,yBAAyB,CACvC,OAA+B;IAE/B,8BAA8B,GAAG,OAAO,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB;IAGvC,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAa,sBAAsB;IAIjC,YAAY,KAAoB;QAFxB,kBAAa,GAAG,KAAK,CAAC;QAG5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEzC,0CAA0C;QAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACnB,UAAU,EACV,KAAK,EAAE,GAAkC,EAAE,EAAE;YAC3C,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,MAAsB;QACnC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,4DAA4D;QAC5D,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,IAAI,SAAe,CAAC;QACpB,IAAI,OAAe,CAAC;QAEpB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,qCAAqC;YACrC,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;YACD,SAAS,GAAG,cAAc,CAAC,YAAa,CAAC;YACzC,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,iBAAiB;YACjB,IACE,MAAM,CAAC,YAAa,GAAG,CAAC;gBACxB,MAAM,CAAC,YAAa,GAAG,iBAAiB,EACxC,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,+BAA+B,iBAAiB,UAAU,CAC3D,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,YAAa,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACpE,OAAO,GAAG,MAAM,CAAC,YAAa,GAAG,EAAE,GAAG,IAAI,CAAC;QAC7C,CAAC;QAED,mDAAmD;QACnD,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS;YACpC,CAAC,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,MAAM,CAAC,aAAa;gBACpB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC;gBAC7D,CAAC,CAAC,WAAW;oBACX,CAAC,CAAC,4BAA4B;oBAC9B,CAAC,CAAC,CAAC,CAAC;QAEV,4BAA4B;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,IAAI,0BAA0B,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,cAAc,0BAA0B,mCAAmC,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAA,wBAAU,GAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,QAAQ,GAAoB;YAChC,EAAE,EAAE,UAAU;YACd,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;YAC9B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,MAAM,EAAE,SAAS;YACjB,mBAAmB;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,CAAC;YACZ,aAAa;YACb,WAAW;YACX,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;QAEF,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;QACpD,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE5E,0BAA0B;QAC1B,MAAM,kBAAkB,GAAG,GAAG,kBAAkB,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3E,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC;QAE7D,uCAAuC;QACvC,MAAM,aAAa,GAAG,GAAG,wBAAwB,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACrE,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QAExD,+BAA+B;QAC/B,MAAM,UAAU,GAAwB;YACtC,UAAU;YACV,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE;YAC5C,OAAO;YACP,YAAY,EAAE,YAAY,UAAU,EAAE;SACvC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CACT;YACE,UAAU;YACV,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,WAAW;YACX,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,aAAa;SACd,EACD,0BAA0B,CAC3B,CAAC;QAEF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAQtB;QACC,OAAO,IAAI,CAAC,QAAQ,CAAC;YACnB,cAAc,EAAE,YAAY,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACxD,cAAc,EAAE,MAAM,CAAC,OAAO;YAC9B,SAAS,EAAE,MAAM,CAAC,OAAO;YACzB,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,wDAAwD;YAClF,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,QAAgB;QAKnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kCAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAEtD,6CAA6C;YAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YAExC,yBAAyB;YACzB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,eAAe,GAAG,UAAU,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;YACjD,IAAI,eAAe,GAAG,yBAAyB,EAAE,CAAC;gBAChD,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,kCAAkC,yBAAyB,iBAAiB,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;iBACzH,CAAC;YACJ,CAAC;YAED,mDAAmD;YACnD,MAAM,cAAc,GAClB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACzD,IAAI,cAAc,GAAG,sBAAsB,EAAE,CAAC;gBAC5C,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,gCAAgC,sBAAsB,cAAc,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;iBAC7G,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,cAAsB;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;QAEpD,uBAAuB;QACvB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnD,mBAAmB;QACnB,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,6BAA6B;QAC7B,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC;QAC9B,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,+BAA+B;QAE/F,sBAAsB;QACtB,MAAM,kBAAkB,GAAG,GAAG,kBAAkB,GAAG,cAAc,EAAE,CAAC;QACpE,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;QAEjD,MAAM,aAAa,GAAG,GAAG,wBAAwB,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvE,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAE5C,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,cAAsB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,kBAAkB,GAAG,GAAG,kBAAkB,GAAG,cAAc,EAAE,CAAC;QAEpE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAsB,EAAE,CAAC;QAExC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,QAAQ,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAClC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,EACrC,0CAA0C,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,SAAS,CAAC,IAAI,CACZ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CACpE,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,aAAa,GAAG,GAAG,wBAAwB,GAAG,OAAO,EAAE,CAAC;QAE9D,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACxD,MAAM,SAAS,GAAsB,EAAE,CAAC;QAExC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,QAAQ,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAClC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,EAC9B,0CAA0C,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,SAAS,CAAC,IAAI,CACZ,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CACpE,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,OAAe;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;QAEpD,uBAAuB;QACvB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnD,yBAAyB;QACzB,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,6BAA6B;QAC7B,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC;QAC9B,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE/D,sBAAsB;QACtB,MAAM,kBAAkB,GAAG,GAAG,kBAAkB,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC7E,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;QAEjD,MAAM,aAAa,GAAG,GAAG,wBAAwB,GAAG,OAAO,EAAE,CAAC;QAC9D,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAE5C,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,qCAAqC,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,cAAsB;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,kBAAkB,GAAG,GAAG,kBAAkB,GAAG,cAAc,EAAE,CAAC;QAEpE,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAE7D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnD,0BAA0B;gBAC1B,MAAM,aAAa,GAAG,GAAG,wBAAwB,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvE,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAEpC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACT,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,EAC7C,qCAAqC,CACtC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB,CAC/B,GAAkC;QAElC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEhD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,gBAAgB,GAAG,UAAU,EAAE,CAAC;QAEpD,oBAAoB;QACpB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,EACd,uDAAuD,CACxD,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnD,qBAAqB;QACrB,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,mCAAmC,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,8CAA8C;QAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO;YACjC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;QAEP,iDAAiD;QACjD,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW;YACxC,CAAC,CAAC,eAAe,QAAQ,CAAC,SAAS,OAAO,QAAQ,CAAC,aAAa,GAAG;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAErE,MAAM,WAAW,GAAG,4CAA4C,aAAa;;QAEzE,QAAQ,CAAC,IAAI,GAAG,UAAU;;KAE7B,QAAQ;2BACc,QAAQ,CAAC,WAAW;eAChC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAEzB,iEAAiE;QACjE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACnB,UAAU,EACV;YACE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,SAAS,EAAE,aAAa,UAAU,IAAI,QAAQ,CAAC,SAAS,EAAE;YAC1D,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,WAAW;YACX,gBAAgB,EAAE;gBAChB,iBAAiB,EAAE,IAAI;gBACvB,UAAU;gBACV,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC;YACD,YAAY,EAAE,EAAE;SACjB,EACD;YACE,QAAQ,EAAE,CAAC,EAAE,kBAAkB;SAChC,CACF,CAAC;QAEF,MAAM,CAAC,IAAI,CACT;YACE,UAAU;YACV,cAAc;YACd,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC,EACD,+CAA+C,CAChD,CAAC;QAEF,wDAAwD;QACxD,MAAM,iBAAiB,GACrB,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC;QACpE,IAAI,QAAQ,CAAC,WAAW,IAAI,iBAAiB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC;gBACH,mCAAmC;gBACnC,MAAM,QAAQ,GAAG,kCAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC3D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAEnD,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;gBAE7C,6DAA6D;gBAC7D,4DAA4D;gBAC5D,+BAA+B;gBAC/B,QAAQ,CAAC,SAAS,GAAG,aAAa,CAAC;gBACnC,QAAQ,CAAC,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;gBAC/C,MAAM,KAAK,CAAC,KAAK,CACf,QAAQ,EACR,oBAAoB,EACpB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CACzB,CAAC;gBAEF,0BAA0B;gBAC1B,MAAM,UAAU,GAAwB;oBACtC,UAAU;oBACV,cAAc,EAAE,QAAQ,CAAC,cAAc;oBACvC,cAAc,EAAE,QAAQ,CAAC,cAAc;oBACvC,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;iBAC5B,CAAC;gBAEF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE;oBAC5C,OAAO;oBACP,YAAY,EAAE,YAAY,UAAU,IAAI,aAAa,EAAE;iBACxD,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CACT;oBACE,UAAU;oBACV,aAAa,EAAE,QAAQ,CAAC,SAAS;oBACjC,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;iBACvC,EACD,oCAAoC,CACrC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,EAAE,UAAU,EAAE,KAAK,EAAE,EACrB,6CAA6C,CAC9C,CAAC;gBACF,wDAAwD;gBACxD,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC;gBAC9B,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAE/D,MAAM,kBAAkB,GAAG,GAAG,kBAAkB,GAAG,cAAc,EAAE,CAAC;gBACpE,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;gBACjD,MAAM,aAAa,GAAG,GAAG,wBAAwB,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvE,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,+EAA+E;YAC/E,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC;YAC9B,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB;YAElF,sBAAsB;YACtB,MAAM,kBAAkB,GAAG,GAAG,kBAAkB,GAAG,cAAc,EAAE,CAAC;YACpE,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YAEjD,MAAM,aAAa,GAAG,GAAG,wBAAwB,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvE,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YAE5C,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CACT;oBACE,UAAU;oBACV,mBAAmB,EAAE,QAAQ,CAAC,SAAS;iBACxC,EACD,6CAA6C,CAC9C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAtkBD,wDAskBC"}

package/dist/permissions/approval-policy.d.ts

@@ -0,0 +1,28 @@
+/**
+ * MCP Tool Approval Policy
+ *
+ * Uses MCP protocol tool annotations to determine whether a tool call
+ * requires explicit user approval (grant) before execution.
+ *
+ * Per the MCP spec, the default assumption is destructiveHint=true,
+ * so tools without annotations require approval (conservative default).
+ */
+export interface McpToolAnnotations {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+    idempotentHint?: boolean;
+    openWorldHint?: boolean;
+}
+/**
+ * Determine if a tool call requires user approval based on its annotations.
+ *
+ * Returns false (no approval needed) when:
+ *   - readOnlyHint is explicitly true
+ *   - destructiveHint is explicitly false
+ *
+ * Returns true (approval required) otherwise, including when:
+ *   - No annotations provided (conservative default)
+ *   - destructiveHint is true (default per MCP spec)
+ */
+export declare function requiresToolApproval(annotations?: McpToolAnnotations): boolean;
+//# sourceMappingURL=approval-policy.d.ts.map

package/dist/permissions/approval-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-policy.d.ts","sourceRoot":"","sources":["../../src/permissions/approval-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,CAAC,EAAE,kBAAkB,GAC/B,OAAO,CAKT"}

package/dist/permissions/approval-policy.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * MCP Tool Approval Policy
+ *
+ * Uses MCP protocol tool annotations to determine whether a tool call
+ * requires explicit user approval (grant) before execution.
+ *
+ * Per the MCP spec, the default assumption is destructiveHint=true,
+ * so tools without annotations require approval (conservative default).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requiresToolApproval = requiresToolApproval;
+/**
+ * Determine if a tool call requires user approval based on its annotations.
+ *
+ * Returns false (no approval needed) when:
+ *   - readOnlyHint is explicitly true
+ *   - destructiveHint is explicitly false
+ *
+ * Returns true (approval required) otherwise, including when:
+ *   - No annotations provided (conservative default)
+ *   - destructiveHint is true (default per MCP spec)
+ */
+function requiresToolApproval(annotations) {
+    if (!annotations)
+        return true;
+    if (annotations.readOnlyHint === true)
+        return false;
+    if (annotations.destructiveHint === false)
+        return false;
+    return true;
+}
+//# sourceMappingURL=approval-policy.js.map

package/dist/permissions/approval-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../src/permissions/approval-policy.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAoBH,oDAOC;AAlBD;;;;;;;;;;GAUG;AACH,SAAgB,oBAAoB,CAClC,WAAgC;IAEhC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,WAAW,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,WAAW,CAAC,eAAe,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/permissions/grant-store.d.ts

@@ -0,0 +1,52 @@
+export interface Grant {
+    pattern: string;
+    expiresAt: number | null;
+    grantedAt: number;
+    denied?: boolean;
+}
+/**
+ * Unified grant store for URL-pattern permissions.
+ *
+ * Patterns can be:
+ *   - Domain: "api.openai.com", "*.npmjs.org"
+ *   - MCP tool: "/mcp/gmail/tools/send_email"
+ *   - MCP wildcard: "/mcp/gmail/tools/*"
+ *
+ * Grants are stored in Redis with TTL matching expiresAt for automatic cleanup.
+ */
+export declare class GrantStore {
+    private readonly redis;
+    constructor(redis: any);
+    /**
+     * Grant access to a pattern for an agent.
+     * If expiresAt is null, the grant never expires (no Redis TTL).
+     * If denied is true, the grant explicitly denies access.
+     */
+    grant(agentId: string, pattern: string, expiresAt: number | null, denied?: boolean): Promise<void>;
+    /**
+     * Parse a raw Redis value into its stored object.
+     * Returns null if the value is missing or malformed.
+     */
+    private parseValue;
+    /**
+     * Check if an agent has a grant for a pattern.
+     * Checks exact match first, then wildcard parents.
+     * Returns false if the grant has `denied: true`.
+     */
+    hasGrant(agentId: string, pattern: string): Promise<boolean>;
+    /**
+     * Check if a pattern is explicitly denied for an agent.
+     */
+    isDenied(agentId: string, pattern: string): Promise<boolean>;
+    /**
+     * List all active grants for an agent.
+     * Uses Redis SCAN to find matching keys.
+     */
+    listGrants(agentId: string): Promise<Grant[]>;
+    /**
+     * Revoke a grant for an agent.
+     */
+    revoke(agentId: string, pattern: string): Promise<void>;
+    private buildKey;
+}
+//# sourceMappingURL=grant-store.d.ts.map

package/dist/permissions/grant-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-store.d.ts","sourceRoot":"","sources":["../../src/permissions/grant-store.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,KAAK;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAID;;;;;;;;;GASG;AACH,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,GAAG;IAEvC;;;;OAIG;IACG,KAAK,CACT,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;OAGG;IACH,OAAO,CAAC,UAAU;IAWlB;;;;OAIG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAsDlE;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAelE;;;OAGG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IA4CnD;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7D,OAAO,CAAC,QAAQ;CAGjB"}