@mastra/factory 0.0.0-fix-thread-subscription-multi-instance-redis-streams-20260730204150

package/dist/integrations/workos/integration.js

@@ -0,0 +1,91 @@
+import { WorkOSAdminPortal } from "@mastra/auth-workos";
+import { registerApiRoute } from "@mastra/core/server";
+//#region src/integrations/workos/integration.ts
+const UNKNOWN_LOCATION = "unknown";
+function loose(c) {
+	return c;
+}
+function flattenMetadata(metadata) {
+	const flat = {};
+	for (const [key, value] of Object.entries(metadata)) {
+		if (value === void 0 || value === null) continue;
+		if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+			flat[key] = value;
+			continue;
+		}
+		try {
+			flat[key] = JSON.stringify(value);
+		} catch {}
+	}
+	return flat;
+}
+function toWorkOSEvent(event) {
+	return {
+		action: event.action,
+		occurredAt: event.occurredAt,
+		actor: {
+			type: event.actorType === "agent" ? "agent" : "user",
+			id: event.actorId
+		},
+		targets: event.targets.map((target) => ({
+			type: target.type,
+			id: target.id,
+			...target.name !== void 0 ? { name: target.name } : {}
+		})),
+		context: {
+			location: event.context.location ?? UNKNOWN_LOCATION,
+			...event.context.userAgent !== void 0 ? { userAgent: event.context.userAgent } : {}
+		},
+		metadata: flattenMetadata(event.metadata)
+	};
+}
+/** Optional WorkOS mirror and Admin Portal route, independent of the auth adapter. */
+var WorkOSAuditIntegration = class {
+	id = "workos";
+	#client;
+	#returnUrl;
+	constructor({ client, returnUrl }) {
+		this.#client = client;
+		this.#returnUrl = returnUrl;
+	}
+	async audit({ event }) {
+		try {
+			await this.#client.auditLogs.createEvent(event.orgId, toWorkOSEvent(event));
+		} catch (err) {
+			console.warn("[Audit] Failed to forward audit event to WorkOS", {
+				action: event.action,
+				error: err instanceof Error ? err.message : String(err)
+			});
+		}
+	}
+	routes(ctx) {
+		const { auth } = ctx;
+		return [registerApiRoute("/web/audit/portal-link", {
+			method: "GET",
+			handler: async (cc) => {
+				const c = loose(cc);
+				await auth.ensureUser(c);
+				const tenant = auth.tenant(c);
+				if (!tenant) return c.json({ error: "unauthorized" }, 401);
+				if (!tenant.orgId) return c.json({
+					error: "organization_required",
+					message: "The audit trail requires a WorkOS organization."
+				}, 403);
+				try {
+					const url = await new WorkOSAdminPortal(this.#client, { returnUrl: this.#returnUrl }).getPortalLink(tenant.orgId, "audit_logs");
+					return c.json({ url });
+				} catch (err) {
+					console.warn("[Audit] Failed to generate WorkOS Admin Portal link", { error: err instanceof Error ? err.message : String(err) });
+					return c.json({ error: "portal_link_failed" }, 502);
+				}
+			}
+		})];
+	}
+	diagnostics() {
+		return { configured: true };
+	}
+};
+//#endregion
+export { WorkOSAuditIntegration, toWorkOSEvent };
+
+//# sourceMappingURL=integration.js.map

package/dist/integrations/workos/integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.js","names":["#client","#returnUrl"],"sources":["../../../src/integrations/workos/integration.ts"],"sourcesContent":["import { WorkOSAdminPortal } from '@mastra/auth-workos';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport type { AuditEventRow } from '../../storage/domains/audit/base.js';\nimport type { FactoryIntegration, IntegrationContext } from '../base.js';\n\ntype WorkOSClient = ConstructorParameters<typeof WorkOSAdminPortal>[0];\n\nconst UNKNOWN_LOCATION = 'unknown';\n\nfunction loose(c: unknown): Context {\n  return c as Context;\n}\n\nfunction flattenMetadata(metadata: Record<string, unknown>): Record<string, string | number | boolean> {\n  const flat: Record<string, string | number | boolean> = {};\n  for (const [key, value] of Object.entries(metadata)) {\n    if (value === undefined || value === null) continue;\n    if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {\n      flat[key] = value;\n      continue;\n    }\n    try {\n      flat[key] = JSON.stringify(value);\n    } catch {\n      // Drop unserializable metadata rather than the event.\n    }\n  }\n  return flat;\n}\n\nexport function toWorkOSEvent(event: AuditEventRow): {\n  action: string;\n  occurredAt: Date;\n  actor: { type: string; id: string };\n  targets: Array<{ type: string; id: string; name?: string }>;\n  context: { location: string; userAgent?: string };\n  metadata: Record<string, string | number | boolean>;\n} {\n  return {\n    action: event.action,\n    occurredAt: event.occurredAt,\n    actor: { type: event.actorType === 'agent' ? 'agent' : 'user', id: event.actorId },\n    targets: event.targets.map(target => ({\n      type: target.type,\n      id: target.id,\n      ...(target.name !== undefined ? { name: target.name } : {}),\n    })),\n    context: {\n      location: event.context.location ?? UNKNOWN_LOCATION,\n      ...(event.context.userAgent !== undefined ? { userAgent: event.context.userAgent } : {}),\n    },\n    metadata: flattenMetadata(event.metadata),\n  };\n}\n\n/** Optional WorkOS mirror and Admin Portal route, independent of the auth adapter. */\nexport class WorkOSAuditIntegration implements FactoryIntegration {\n  readonly id = 'workos';\n  readonly #client: WorkOSClient;\n  readonly #returnUrl: string;\n\n  constructor({ client, returnUrl }: { client: WorkOSClient; returnUrl: string }) {\n    this.#client = client;\n    this.#returnUrl = returnUrl;\n  }\n\n  async audit({ event }: { event: AuditEventRow }): Promise<void> {\n    try {\n      await this.#client.auditLogs.createEvent(event.orgId, toWorkOSEvent(event));\n    } catch (err) {\n      console.warn('[Audit] Failed to forward audit event to WorkOS', {\n        action: event.action,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n\n  routes(ctx: IntegrationContext): ApiRoute[] {\n    const { auth } = ctx;\n    return [\n      registerApiRoute('/web/audit/portal-link', {\n        method: 'GET',\n        handler: async cc => {\n          const c = loose(cc);\n          await auth.ensureUser(c);\n          const tenant = auth.tenant(c);\n          if (!tenant) return c.json({ error: 'unauthorized' }, 401);\n          if (!tenant.orgId) {\n            return c.json(\n              { error: 'organization_required', message: 'The audit trail requires a WorkOS organization.' },\n              403,\n            );\n          }\n\n          try {\n            const portal = new WorkOSAdminPortal(this.#client, { returnUrl: this.#returnUrl });\n            const url = await portal.getPortalLink(tenant.orgId, 'audit_logs');\n            return c.json({ url });\n          } catch (err) {\n            console.warn('[Audit] Failed to generate WorkOS Admin Portal link', {\n              error: err instanceof Error ? err.message : String(err),\n            });\n            return c.json({ error: 'portal_link_failed' }, 502);\n          }\n        },\n      }),\n    ];\n  }\n\n  diagnostics(): Record<string, unknown> {\n    return { configured: true };\n  }\n}\n"],"mappings":";;;AAUA,MAAM,mBAAmB;AAEzB,SAAS,MAAM,GAAqB;CAClC,OAAO;AACT;AAEA,SAAS,gBAAgB,UAA8E;CACrG,MAAM,OAAkD,CAAC;CACzD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,GAAG;EACnD,IAAI,UAAU,KAAA,KAAa,UAAU,MAAM;EAC3C,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW;GACxF,KAAK,OAAO;GACZ;EACF;EACA,IAAI;GACF,KAAK,OAAO,KAAK,UAAU,KAAK;EAClC,QAAQ,CAER;CACF;CACA,OAAO;AACT;AAEA,SAAgB,cAAc,OAO5B;CACA,OAAO;EACL,QAAQ,MAAM;EACd,YAAY,MAAM;EAClB,OAAO;GAAE,MAAM,MAAM,cAAc,UAAU,UAAU;GAAQ,IAAI,MAAM;EAAQ;EACjF,SAAS,MAAM,QAAQ,KAAI,YAAW;GACpC,MAAM,OAAO;GACb,IAAI,OAAO;GACX,GAAI,OAAO,SAAS,KAAA,IAAY,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;EAC3D,EAAE;EACF,SAAS;GACP,UAAU,MAAM,QAAQ,YAAY;GACpC,GAAI,MAAM,QAAQ,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,QAAQ,UAAU,IAAI,CAAC;EACxF;EACA,UAAU,gBAAgB,MAAM,QAAQ;CAC1C;AACF;;AAGA,IAAa,yBAAb,MAAkE;CAChE,KAAc;CACd;CACA;CAEA,YAAY,EAAE,QAAQ,aAA0D;EAC9E,KAAKA,UAAU;EACf,KAAKC,aAAa;CACpB;CAEA,MAAM,MAAM,EAAE,SAAkD;EAC9D,IAAI;GACF,MAAM,KAAKD,QAAQ,UAAU,YAAY,MAAM,OAAO,cAAc,KAAK,CAAC;EAC5E,SAAS,KAAK;GACZ,QAAQ,KAAK,mDAAmD;IAC9D,QAAQ,MAAM;IACd,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;EACH;CACF;CAEA,OAAO,KAAqC;EAC1C,MAAM,EAAE,SAAS;EACjB,OAAO,CACL,iBAAiB,0BAA0B;GACzC,QAAQ;GACR,SAAS,OAAM,OAAM;IACnB,MAAM,IAAI,MAAM,EAAE;IAClB,MAAM,KAAK,WAAW,CAAC;IACvB,MAAM,SAAS,KAAK,OAAO,CAAC;IAC5B,IAAI,CAAC,QAAQ,OAAO,EAAE,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzD,IAAI,CAAC,OAAO,OACV,OAAO,EAAE,KACP;KAAE,OAAO;KAAyB,SAAS;IAAkD,GAC7F,GACF;IAGF,IAAI;KAEF,MAAM,MAAM,MAAM,IADC,kBAAkB,KAAKA,SAAS,EAAE,WAAW,KAAKC,WAAW,CACzD,CAAC,CAAC,cAAc,OAAO,OAAO,YAAY;KACjE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;IACvB,SAAS,KAAK;KACZ,QAAQ,KAAK,uDAAuD,EAClE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EACxD,CAAC;KACD,OAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IACpD;GACF;EACF,CAAC,CACH;CACF;CAEA,cAAuC;EACrC,OAAO,EAAE,YAAY,KAAK;CAC5B;AACF"}

package/dist/routes/config.d.ts

@@ -0,0 +1,235 @@
+import type { AuthStorage } from '@mastra/code-sdk/auth/storage';
+import type { ModePack, ProviderAccess } from '@mastra/code-sdk/onboarding/packs';
+import type { ApiRoute } from '@mastra/core/server';
+import type { CredentialRecord, LoginSessionKind, ModelCredentialsStorage } from '../storage/domains/credentials/base.js';
+import type { CustomProvidersStorage } from '../storage/domains/custom-providers/base.js';
+import type { MemorySettingsStorage } from '../storage/domains/memory-settings/base.js';
+import type { ModelPacksStorage } from '../storage/domains/model-packs/base.js';
+import { Route } from './route.js';
+import type { RouteDependencies } from './route.js';
+/**
+ * Server-side configuration routes for the web app.
+ *
+ * The browser has no access to the credential store or the model catalog, so
+ * the web settings panel asks the server — which owns both — to list providers
+ * and manage API keys. This mirrors the TUI's `/api-keys` command, exposing the
+ * same `AuthStorage`-backed key management over HTTP.
+ *
+ * Keys are never returned to the client; only their presence and source.
+ */
+/**
+ * Where a provider's active credential comes from, as seen by the caller.
+ * Local mode reports `oauth`/`stored` (server-global `auth.json`); tenant mode
+ * reports the scoped variants (`oauth-user`/`stored-user`/`stored-org`).
+ */
+export type ProviderCredentialSource = 'oauth' | 'stored' | 'env' | 'none' | 'oauth-user' | 'stored-user' | 'stored-org';
+/** A model provider with the current source of its credentials. */
+export interface ProviderInfo {
+    provider: string;
+    /** Env var the provider's key is read from, if any. */
+    envVar?: string;
+    /** Where the active credential comes from. */
+    source: ProviderCredentialSource;
+    /**
+     * Tenant mode: whether an org-wide API key exists for this provider, even
+     * when the caller's personal credential shadows it. Lets the UI tell
+     * "shared with the org" apart from "only works for me".
+     */
+    orgKey?: boolean;
+    /** Web OAuth sign-in capability, when the provider supports it. */
+    oauth?: {
+        supported: true;
+        modes: LoginSessionKind[];
+    };
+}
+/** Minimal session surface a pack activation touches. */
+interface PackSession {
+    mode: {
+        get: () => string;
+    };
+    model: {
+        switch: (args: {
+            modelId: string;
+        }) => Promise<void>;
+    };
+    subagents: {
+        model: {
+            set: (args: {
+                modelId: string;
+                agentType: string;
+            }) => Promise<void>;
+        };
+    };
+    thread: {
+        getId: () => string | null;
+        setSetting: (args: {
+            key: string;
+            value: unknown;
+        }) => Promise<void>;
+        list: () => Promise<Array<{
+            id: string;
+            metadata?: Record<string, unknown>;
+        }>>;
+    };
+}
+/** One observational-memory role's read/switch surface. */
+interface OMRole {
+    modelId: () => string | undefined;
+    threshold: () => number | undefined;
+    switchModel: (args: {
+        modelId: string;
+    }) => Promise<void>;
+}
+/**
+ * Session-state fields the OM config routes write. The index signatures mirror
+ * `MastraCodeState` so the concrete `Session.state.set(Partial<MastraCodeState>)`
+ * stays assignable to this minimal surface (contravariant parameter check).
+ */
+interface OMStateWrites {
+    [key: string]: unknown;
+    [key: `subagentModelId_${string}`]: string | undefined;
+    observationThreshold?: number;
+    reflectionThreshold?: number;
+    observeAttachments?: 'auto' | boolean;
+}
+/** Minimal session surface the OM config routes touch. */
+export interface OMSession extends PackSession {
+    state: {
+        get: () => Record<string, unknown> | undefined;
+        set: (updates: OMStateWrites) => Promise<void> | void;
+    };
+    om: {
+        observer: OMRole;
+        reflector: OMRole;
+    };
+}
+/** Minimal controller surface this module needs (model catalog + modes + sessions). */
+interface ModelCatalog {
+    listAvailableModels: () => Promise<Array<{
+        id?: string;
+        modelName?: string;
+        provider: string;
+        hasApiKey: boolean;
+        apiKeyEnvVar?: string;
+    }>>;
+    listModes?: () => Array<{
+        id: string;
+        defaultModelId?: string;
+    }>;
+    getSessionByResource?: (resourceId: string, scope?: string) => Promise<OMSession | undefined>;
+}
+/**
+ * Build a deduplicated, sorted list of providers from the model catalog,
+ * annotated with where each provider's credential currently comes from.
+ * Mirrors the TUI's `/api-keys` provider list.
+ *
+ * When `tenantCredentials` is given (deployed mode), sources reflect the
+ * *caller's* tenant rows with user > org precedence and the server-global
+ * `authStorage` is ignored; otherwise the local `auth.json` view is reported.
+ */
+export declare function listProviders({ controller, authStorage, tenantCredentials, }: {
+    controller: ModelCatalog;
+    authStorage?: AuthStorage;
+    tenantCredentials?: CredentialRecord[];
+}): Promise<ProviderInfo[]>;
+/** A user-defined OpenAI-compatible provider, with key presence (never the key). */
+export interface CustomProviderInfo {
+    id: string;
+    name: string;
+    url: string;
+    hasApiKey: boolean;
+    models: string[];
+}
+/** A model pack as surfaced to the web client, with an `active` flag. */
+export interface ModelPackInfo extends ModePack {
+    custom: boolean;
+    active: boolean;
+}
+/**
+ * Compute which providers the user can reach, mirroring the TUI's
+ * `/models-pack` access derivation: OAuth/api-key from the credential store for
+ * the named providers, plus any other provider that has a usable key.
+ */
+export declare function buildProviderAccess({ controller, authStorage, tenantCredentials, }: {
+    controller: ModelCatalog;
+    authStorage?: AuthStorage;
+    tenantCredentials?: CredentialRecord[];
+}): Promise<ProviderAccess>;
+/**
+ * Where a request's custom model packs live. Same posture as memory settings
+ * and custom providers: the `model-packs` factory storage domain, scoped per
+ * org in deployed mode and to a sentinel `local` org in no-auth mode — never
+ * settings.json.
+ */
+export interface PackContext {
+    storage: ModelPacksStorage;
+    orgId: string;
+    userId: string;
+}
+/**
+ * List available model packs (built-in, gated by provider access, plus saved
+ * custom packs from the request's pack context). Drops the synthetic
+ * "New Custom" placeholder — the web client has its own create flow. `active`
+ * is set from the given session's thread when a resourceId is supplied.
+ */
+export declare function listModelPacks({ controller, authStorage, tenantCredentials, packContext, activePackId, }: {
+    controller: ModelCatalog;
+    authStorage?: AuthStorage;
+    tenantCredentials?: CredentialRecord[];
+    packContext: PackContext;
+    activePackId?: string | null;
+}): Promise<ModelPackInfo[]>;
+/** Read the current OM config from a session. */
+export interface OMConfigInfo {
+    observerModelId: string;
+    reflectorModelId: string;
+    observationThreshold: number;
+    reflectionThreshold: number;
+    observeAttachments: 'auto' | boolean;
+}
+export interface ProviderOMDefaultsResponse {
+    ok: true;
+    config: OMConfigInfo;
+}
+export declare function readOMConfig(session: OMSession): OMConfigInfo;
+/** Dependencies injected into {@link ConfigRoutes}. */
+export interface ConfigRoutesDeps extends RouteDependencies {
+    controller: ModelCatalog;
+    authStorage?: AuthStorage;
+    /** Tenant credential domain handle; absent in local (no-DB) mode. */
+    modelCredentials?: ModelCredentialsStorage;
+    /** Tenant model-packs domain handle; absent in local (no-DB) mode. */
+    modelPacks?: ModelPacksStorage;
+    /** Tenant memory-settings domain handle; absent in local (no-DB) mode. */
+    memorySettings?: MemorySettingsStorage;
+    /** Custom-providers domain handle; absent when the app database is missing. */
+    customProviders?: CustomProvidersStorage;
+    /** Notifies the host after tenant credentials change so caches can be dropped. */
+    onCredentialsChanged?: (tenant: {
+        orgId: string;
+        userId?: string;
+    }) => void;
+    /** Notifies the host after custom providers change so model-router caches can be dropped. */
+    onCustomProvidersChanged?: (tenant: {
+        orgId: string;
+    }) => void;
+}
+/**
+ * The web config routes as Mastra `apiRoutes`:
+ *   - `GET    /web/config/providers`              — list providers + key source
+ *   - `PUT    /web/config/providers/:provider/key` — set/update a provider's API key
+ *   - `DELETE /web/config/providers/:provider/key` — remove a stored API key
+ *   - `GET    /web/config/models`                  — list available models (credentialed providers)
+ *   - `GET    /web/config/custom-providers`        — list custom OpenAI-compatible providers
+ *   - `POST   /web/config/custom-providers`        — create/update a custom provider
+ *   - `DELETE /web/config/custom-providers/:id`    — remove a custom provider
+ *   - `GET    /web/config/om`                      — read OM models/thresholds/observe-attachments
+ *   - `PUT    /web/config/om/:role/model`          — switch observer/reflector model
+ *   - `PUT    /web/config/om/thresholds`           — set observation/reflection thresholds
+ *   - `PUT    /web/config/om/observe-attachments`  — set observe-attachments (auto/on/off)
+ */
+export declare class ConfigRoutes extends Route<ConfigRoutesDeps> {
+    routes(): ApiRoute[];
+}
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/routes/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAuB,MAAM,mCAAmC,CAAC;AAGvG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAIpD,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAwB,sBAAsB,EAAE,MAAM,6CAA6C,CAAC;AAChH,OAAO,KAAK,EAIV,qBAAqB,EACtB,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAmB,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAQjG,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,KAAK,EAAa,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAO/D;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAChC,OAAO,GACP,QAAQ,GACR,KAAK,GACL,MAAM,GACN,YAAY,GACZ,aAAa,GACb,YAAY,CAAC;AAEjB,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,MAAM,EAAE,wBAAwB,CAAC;IACjC;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,mEAAmE;IACnE,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,KAAK,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;CACxD;AAED,yDAAyD;AACzD,UAAU,WAAW;IACnB,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,MAAM,CAAA;KAAE,CAAC;IAC5B,KAAK,EAAE;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAChE,SAAS,EAAE;QAAE,KAAK,EAAE;YAAE,GAAG,EAAE,CAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;IAC/F,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;QAC3B,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAC,CAAC;KAChF,CAAC;CACH;AAED,2DAA2D;AAC3D,UAAU,MAAM;IACd,OAAO,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED;;;;GAIG;AACH,UAAU,aAAa;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,CAAC,GAAG,EAAE,mBAAmB,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAAC;IACvD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACvC;AAED,0DAA0D;AAC1D,MAAM,WAAW,SAAU,SAAQ,WAAW;IAC5C,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QAC/C,GAAG,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;KACvD,CAAC;IACF,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED,uFAAuF;AACvF,UAAU,YAAY;IACpB,mBAAmB,EAAE,MAAM,OAAO,CAChC,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CACxG,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,oBAAoB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;CAC/F;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,EAClC,UAAU,EACV,WAAW,EACX,iBAAiB,GAClB,EAAE;IACD,UAAU,EAAE,YAAY,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA0C1B;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAmFD,yEAAyE;AACzE,MAAM,WAAW,aAAc,SAAQ,QAAQ;IAC7C,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,UAAU,EACV,WAAW,EACX,iBAAiB,GAClB,EAAE;IACD,UAAU,EAAE,YAAY,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC,GAAG,OAAO,CAAC,cAAc,CAAC,CAqC1B;AAMD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAyCD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,EACnC,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,YAAY,GACb,EAAE;IACD,UAAU,EAAE,YAAY,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACvC,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAa3B;AA8DD,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,GAAG,YAAY,CAU7D;AAmGD,uDAAuD;AACvD,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,UAAU,EAAE,YAAY,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,sEAAsE;IACtE,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,0EAA0E;IAC1E,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,+EAA+E;IAC/E,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC5E,6FAA6F;IAC7F,wBAAwB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAChE;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,YAAa,SAAQ,KAAK,CAAC,gBAAgB,CAAC;IACvD,MAAM,IAAI,QAAQ,EAAE;CAsnBrB"}