@mastra/factory 0.2.2-alpha.1 → 0.2.2-alpha.3

package/dist/routes/skills.js

@@ -1,181 +1,168 @@
-// src/routes/skills.ts
+import { Route } from "./route.js";
+import { SkillInvocationError, resolveSkillInvocation } from "../skills/service.js";
 import { registerApiRoute } from "@mastra/core/server";
-
-// src/skills/service.ts
-import { formatSkillActivation } from "@mastra/core/workspace";
-var SkillInvocationError = class extends Error {
-  code;
-  constructor(code, message) {
-    super(message);
-    this.name = "SkillInvocationError";
-    this.code = code;
-  }
-};
-function escapeSkillBoundary(value) {
-  return value.replaceAll("</skill>", "&lt;/skill&gt;");
-}
-async function resolveSkillInvocation(controller, input) {
-  const session = await controller.getSessionByResource(input.resourceId, input.scope);
-  if (!session) throw new SkillInvocationError("session_not_found", "Agent controller session not found.");
-  const skills = session.getWorkspace().skills;
-  await skills?.maybeRefresh();
-  const skill = await skills?.get(input.name);
-  if (!skill || skill["user-invocable"] === false) {
-    throw new SkillInvocationError("skill_not_found", `Skill not found: ${input.name}.`);
-  }
-  const args = input.arguments?.trim();
-  const content = `${formatSkillActivation(skill)}${args ? `
-
-ARGUMENTS: ${args}` : ""}`.trim();
-  return {
-    session,
-    skillName: skill.name,
-    message: `<skill name="${skill.name}">
-${escapeSkillBoundary(content)}
-</skill>`
-  };
-}
-
-// src/routes/route.ts
-var Route = class {
-  deps;
-  constructor(deps) {
-    this.deps = deps;
-  }
-};
-
-// src/routes/skills.ts
-var MAX_RESOURCE_ID_LENGTH = 512;
-var MAX_SCOPE_LENGTH = 2048;
-var MAX_ARGUMENTS_LENGTH = 16384;
-var SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+//#region src/routes/skills.ts
+const MAX_RESOURCE_ID_LENGTH = 512;
+const MAX_SCOPE_LENGTH = 2048;
+const MAX_ARGUMENTS_LENGTH = 16384;
+const SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function loose(context) {
-  return context;
+	return context;
 }
 function parseBody(value) {
-  if (!value || typeof value !== "object") return void 0;
-  const input = value;
-  if (typeof input.resourceId !== "string" || input.resourceId.length === 0) return void 0;
-  if (input.resourceId.length > MAX_RESOURCE_ID_LENGTH) return void 0;
-  if (input.projectRepositoryId !== void 0 && (typeof input.projectRepositoryId !== "string" || !UUID_RE.test(input.projectRepositoryId))) {
-    return void 0;
-  }
-  if (input.scope !== void 0 && (typeof input.scope !== "string" || input.scope.length > MAX_SCOPE_LENGTH)) {
-    return void 0;
-  }
-  if (typeof input.name !== "string" || input.name.length > 64 || !SKILL_NAME_RE.test(input.name)) return void 0;
-  if (input.arguments !== void 0) {
-    if (typeof input.arguments !== "string" || input.arguments.length > MAX_ARGUMENTS_LENGTH) return void 0;
-  }
-  return {
-    resourceId: input.resourceId,
-    ...input.projectRepositoryId ? { projectRepositoryId: input.projectRepositoryId } : {},
-    ...input.scope ? { scope: input.scope } : {},
-    name: input.name,
-    ...input.arguments !== void 0 ? { arguments: input.arguments } : {}
-  };
+	if (!value || typeof value !== "object") return void 0;
+	const input = value;
+	if (typeof input.resourceId !== "string" || input.resourceId.length === 0) return void 0;
+	if (input.resourceId.length > MAX_RESOURCE_ID_LENGTH) return void 0;
+	if (input.projectRepositoryId !== void 0 && (typeof input.projectRepositoryId !== "string" || !UUID_RE.test(input.projectRepositoryId))) return;
+	if (input.scope !== void 0 && (typeof input.scope !== "string" || input.scope.length > MAX_SCOPE_LENGTH)) return;
+	if (typeof input.name !== "string" || input.name.length > 64 || !SKILL_NAME_RE.test(input.name)) return void 0;
+	if (input.arguments !== void 0) {
+		if (typeof input.arguments !== "string" || input.arguments.length > MAX_ARGUMENTS_LENGTH) return void 0;
+	}
+	return {
+		resourceId: input.resourceId,
+		...input.projectRepositoryId ? { projectRepositoryId: input.projectRepositoryId } : {},
+		...input.scope ? { scope: input.scope } : {},
+		name: input.name,
+		...input.arguments !== void 0 ? { arguments: input.arguments } : {}
+	};
 }
 var SkillRoutes = class extends Route {
-  async #authorizeSessionAddress(context, address) {
-    const { auth, sourceControlStorage: storage, ensureSourceControlReady } = this.deps;
-    if (!auth.enabled()) return { allowed: true };
-    await auth.ensureUser(context);
-    const tenant = auth.tenant(context);
-    if (!tenant) {
-      return { allowed: false, status: 401, code: "unauthorized", message: "Authentication required." };
-    }
-    if (address.resourceId === tenant.userId) return { allowed: true };
-    if (!UUID_RE.test(address.resourceId) || !address.projectRepositoryId || !UUID_RE.test(address.projectRepositoryId)) {
-      return { allowed: false, status: 400, code: "invalid_request", message: "Invalid skill invocation request." };
-    }
-    if (!tenant.orgId || !address.scope) {
-      return { allowed: false, status: 403, code: "session_forbidden", message: "Session access denied." };
-    }
-    if (!storage) {
-      return { allowed: false, status: 403, code: "session_forbidden", message: "Session access denied." };
-    }
-    if (ensureSourceControlReady) {
-      try {
-        await ensureSourceControlReady();
-      } catch {
-        return { allowed: false, status: 403, code: "session_forbidden", message: "Session access denied." };
-      }
-    }
-    const projectRepository = await storage.projectRepositories.get({
-      orgId: tenant.orgId,
-      id: address.projectRepositoryId
-    });
-    if (!projectRepository) {
-      return { allowed: false, status: 403, code: "session_forbidden", message: "Session access denied." };
-    }
-    const connection = await storage.connections.get({ orgId: tenant.orgId, id: projectRepository.connectionId });
-    if (!connection || connection.factoryProjectId !== address.resourceId) {
-      return { allowed: false, status: 403, code: "session_forbidden", message: "Session access denied." };
-    }
-    const worktree = await storage.worktrees.findByPath({
-      projectRepositoryId: address.projectRepositoryId,
-      userId: tenant.userId,
-      worktreePath: address.scope
-    });
-    return worktree ? { allowed: true } : { allowed: false, status: 403, code: "session_forbidden", message: "Session access denied." };
-  }
-  routes() {
-    const { controllerId, controller, authorizeSessionAddress: customAuthorize } = this.deps;
-    const authorize = customAuthorize ?? ((context, address) => this.#authorizeSessionAddress(context, address));
-    const handleSkillRequest = async (context, dispatch) => {
-      const c = loose(context);
-      if (c.req.param("controllerId") !== controllerId) {
-        return c.json({ error: "controller_not_found", message: "Agent controller not found." }, 404);
-      }
-      let rawBody;
-      try {
-        rawBody = await c.req.json();
-      } catch {
-        return c.json({ error: "invalid_request", message: "Invalid JSON body." }, 400);
-      }
-      const body = parseBody(rawBody);
-      if (!body) {
-        return c.json({ error: "invalid_request", message: "Invalid skill invocation request." }, 400);
-      }
-      const authorization = await authorize(c, {
-        resourceId: body.resourceId,
-        projectRepositoryId: body.projectRepositoryId,
-        scope: body.scope
-      });
-      if (!authorization.allowed) {
-        return c.json({ error: authorization.code, message: authorization.message }, authorization.status ?? 403);
-      }
-      try {
-        const resolved = await resolveSkillInvocation(controller, body);
-        if (dispatch) {
-          void resolved.session.sendMessage({ content: resolved.message }).catch((error) => {
-            console.error("Workspace skill dispatch failed after acceptance", error);
-          });
-        }
-        return c.json({ ok: true, skill: resolved.skillName, message: resolved.message });
-      } catch (error) {
-        if (error instanceof SkillInvocationError) {
-          return c.json({ error: error.code, message: error.message }, 404);
-        }
-        throw error;
-      }
-    };
-    return [
-      registerApiRoute("/web/agent-controller/:controllerId/skills/prepare", {
-        method: "POST",
-        requiresAuth: false,
-        handler: (context) => handleSkillRequest(context, false)
-      }),
-      registerApiRoute("/web/agent-controller/:controllerId/skills/invoke", {
-        method: "POST",
-        requiresAuth: false,
-        handler: (context) => handleSkillRequest(context, true)
-      })
-    ];
-  }
-};
-export {
-  SkillRoutes
+	async #authorizeSessionAddress(context, address) {
+		const { auth, sourceControlStorage: storage, ensureSourceControlReady } = this.deps;
+		if (!auth.enabled()) return { allowed: true };
+		await auth.ensureUser(context);
+		const tenant = auth.tenant(context);
+		if (!tenant) return {
+			allowed: false,
+			status: 401,
+			code: "unauthorized",
+			message: "Authentication required."
+		};
+		if (address.resourceId === tenant.userId) return { allowed: true };
+		if (!UUID_RE.test(address.resourceId) || !address.projectRepositoryId || !UUID_RE.test(address.projectRepositoryId)) return {
+			allowed: false,
+			status: 400,
+			code: "invalid_request",
+			message: "Invalid skill invocation request."
+		};
+		if (!tenant.orgId || !address.scope) return {
+			allowed: false,
+			status: 403,
+			code: "session_forbidden",
+			message: "Session access denied."
+		};
+		if (!storage) return {
+			allowed: false,
+			status: 403,
+			code: "session_forbidden",
+			message: "Session access denied."
+		};
+		if (ensureSourceControlReady) try {
+			await ensureSourceControlReady();
+		} catch {
+			return {
+				allowed: false,
+				status: 403,
+				code: "session_forbidden",
+				message: "Session access denied."
+			};
+		}
+		const projectRepository = await storage.projectRepositories.get({
+			orgId: tenant.orgId,
+			id: address.projectRepositoryId
+		});
+		if (!projectRepository) return {
+			allowed: false,
+			status: 403,
+			code: "session_forbidden",
+			message: "Session access denied."
+		};
+		const connection = await storage.connections.get({
+			orgId: tenant.orgId,
+			id: projectRepository.connectionId
+		});
+		if (!connection || connection.factoryProjectId !== address.resourceId) return {
+			allowed: false,
+			status: 403,
+			code: "session_forbidden",
+			message: "Session access denied."
+		};
+		return await storage.worktrees.findByPath({
+			projectRepositoryId: address.projectRepositoryId,
+			userId: tenant.userId,
+			worktreePath: address.scope
+		}) ? { allowed: true } : {
+			allowed: false,
+			status: 403,
+			code: "session_forbidden",
+			message: "Session access denied."
+		};
+	}
+	routes() {
+		const { controllerId, controller, authorizeSessionAddress: customAuthorize } = this.deps;
+		const authorize = customAuthorize ?? ((context, address) => this.#authorizeSessionAddress(context, address));
+		const handleSkillRequest = async (context, dispatch) => {
+			const c = loose(context);
+			if (c.req.param("controllerId") !== controllerId) return c.json({
+				error: "controller_not_found",
+				message: "Agent controller not found."
+			}, 404);
+			let rawBody;
+			try {
+				rawBody = await c.req.json();
+			} catch {
+				return c.json({
+					error: "invalid_request",
+					message: "Invalid JSON body."
+				}, 400);
+			}
+			const body = parseBody(rawBody);
+			if (!body) return c.json({
+				error: "invalid_request",
+				message: "Invalid skill invocation request."
+			}, 400);
+			const authorization = await authorize(c, {
+				resourceId: body.resourceId,
+				projectRepositoryId: body.projectRepositoryId,
+				scope: body.scope
+			});
+			if (!authorization.allowed) return c.json({
+				error: authorization.code,
+				message: authorization.message
+			}, authorization.status ?? 403);
+			try {
+				const resolved = await resolveSkillInvocation(controller, body);
+				if (dispatch) resolved.session.sendMessage({ content: resolved.message }).catch((error) => {
+					console.error("Workspace skill dispatch failed after acceptance", error);
+				});
+				return c.json({
+					ok: true,
+					skill: resolved.skillName,
+					message: resolved.message
+				});
+			} catch (error) {
+				if (error instanceof SkillInvocationError) return c.json({
+					error: error.code,
+					message: error.message
+				}, 404);
+				throw error;
+			}
+		};
+		return [registerApiRoute("/web/agent-controller/:controllerId/skills/prepare", {
+			method: "POST",
+			requiresAuth: false,
+			handler: (context) => handleSkillRequest(context, false)
+		}), registerApiRoute("/web/agent-controller/:controllerId/skills/invoke", {
+			method: "POST",
+			requiresAuth: false,
+			handler: (context) => handleSkillRequest(context, true)
+		})];
+	}
 };
+//#endregion
+export { SkillRoutes };
+
 //# sourceMappingURL=skills.js.map

package/dist/routes/skills.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/routes/skills.ts","../../src/skills/service.ts","../../src/routes/route.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { resolveSkillInvocation, SkillInvocationError } from '../skills/service.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst MAX_RESOURCE_ID_LENGTH = 512;\nconst MAX_SCOPE_LENGTH = 2048;\nconst MAX_ARGUMENTS_LENGTH = 16_384;\nconst SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\ninterface SkillInvocationBody {\n  resourceId: string;\n  projectRepositoryId?: string;\n  scope?: string;\n  name: string;\n  arguments?: string;\n}\n\ninterface SessionAuthorizationResult {\n  allowed: boolean;\n  status?: 400 | 401 | 403;\n  code?: 'invalid_request' | 'unauthorized' | 'session_forbidden';\n  message?: string;\n}\n\nexport interface SkillRoutesDeps extends RouteDependencies {\n  controllerId: string;\n  controller: Pick<AgentController<MastraCodeState>, 'getSessionByResource'>;\n  sourceControlStorage?: SourceControlStorageHandle;\n  ensureSourceControlReady?: () => Promise<void>;\n  authorizeSessionAddress?: (\n    context: Context,\n    address: { resourceId: string; projectRepositoryId?: string; scope?: string },\n  ) => Promise<SessionAuthorizationResult>;\n}\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nfunction parseBody(value: unknown): SkillInvocationBody | undefined {\n  if (!value || typeof value !== 'object') return undefined;\n  const input = value as Record<string, unknown>;\n  if (typeof input.resourceId !== 'string' || input.resourceId.length === 0) return undefined;\n  if (input.resourceId.length > MAX_RESOURCE_ID_LENGTH) return undefined;\n  if (\n    input.projectRepositoryId !== undefined &&\n    (typeof input.projectRepositoryId !== 'string' || !UUID_RE.test(input.projectRepositoryId))\n  ) {\n    return undefined;\n  }\n  if (input.scope !== undefined && (typeof input.scope !== 'string' || input.scope.length > MAX_SCOPE_LENGTH)) {\n    return undefined;\n  }\n  if (typeof input.name !== 'string' || input.name.length > 64 || !SKILL_NAME_RE.test(input.name)) return undefined;\n  if (input.arguments !== undefined) {\n    if (typeof input.arguments !== 'string' || input.arguments.length > MAX_ARGUMENTS_LENGTH) return undefined;\n  }\n  return {\n    resourceId: input.resourceId,\n    ...(input.projectRepositoryId ? { projectRepositoryId: input.projectRepositoryId } : {}),\n    ...(input.scope ? { scope: input.scope } : {}),\n    name: input.name,\n    ...(input.arguments !== undefined ? { arguments: input.arguments } : {}),\n  };\n}\n\nexport class SkillRoutes extends Route<SkillRoutesDeps> {\n  async #authorizeSessionAddress(\n    context: Context,\n    address: { resourceId: string; projectRepositoryId?: string; scope?: string },\n  ): Promise<SessionAuthorizationResult> {\n    const { auth, sourceControlStorage: storage, ensureSourceControlReady } = this.deps;\n    if (!auth.enabled()) return { allowed: true };\n\n    await auth.ensureUser(context);\n    const tenant = auth.tenant(context);\n    if (!tenant) {\n      return { allowed: false, status: 401, code: 'unauthorized', message: 'Authentication required.' };\n    }\n\n    // Personal sessions are keyed by the authenticated WorkOS user id. Their\n    // scope is a client-managed local/user-session worktree and needs no app DB.\n    if (address.resourceId === tenant.userId) return { allowed: true };\n\n    // Factory sessions are keyed by factoryProjectId and explicitly identify the\n    // linked repository whose user-owned worktree supplies the session scope.\n    if (\n      !UUID_RE.test(address.resourceId) ||\n      !address.projectRepositoryId ||\n      !UUID_RE.test(address.projectRepositoryId)\n    ) {\n      return { allowed: false, status: 400, code: 'invalid_request', message: 'Invalid skill invocation request.' };\n    }\n    if (!tenant.orgId || !address.scope) {\n      return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n    }\n    if (!storage) {\n      return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n    }\n    if (ensureSourceControlReady) {\n      try {\n        await ensureSourceControlReady();\n      } catch {\n        return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n      }\n    }\n    const projectRepository = await storage.projectRepositories.get({\n      orgId: tenant.orgId,\n      id: address.projectRepositoryId,\n    });\n    if (!projectRepository) {\n      return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n    }\n    const connection = await storage.connections.get({ orgId: tenant.orgId, id: projectRepository.connectionId });\n    if (!connection || connection.factoryProjectId !== address.resourceId) {\n      return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n    }\n    const worktree = await storage.worktrees.findByPath({\n      projectRepositoryId: address.projectRepositoryId,\n      userId: tenant.userId,\n      worktreePath: address.scope,\n    });\n    return worktree\n      ? { allowed: true }\n      : { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n  }\n\n  routes(): ApiRoute[] {\n    const { controllerId, controller, authorizeSessionAddress: customAuthorize } = this.deps;\n    const authorize =\n      customAuthorize ??\n      ((context: Context, address: { resourceId: string; projectRepositoryId?: string; scope?: string }) =>\n        this.#authorizeSessionAddress(context, address));\n    const handleSkillRequest = async (context: unknown, dispatch: boolean) => {\n      const c = loose(context);\n      if (c.req.param('controllerId') !== controllerId) {\n        return c.json({ error: 'controller_not_found', message: 'Agent controller not found.' }, 404);\n      }\n\n      let rawBody: unknown;\n      try {\n        rawBody = await c.req.json();\n      } catch {\n        return c.json({ error: 'invalid_request', message: 'Invalid JSON body.' }, 400);\n      }\n      const body = parseBody(rawBody);\n      if (!body) {\n        return c.json({ error: 'invalid_request', message: 'Invalid skill invocation request.' }, 400);\n      }\n\n      const authorization = await authorize(c, {\n        resourceId: body.resourceId,\n        projectRepositoryId: body.projectRepositoryId,\n        scope: body.scope,\n      });\n      if (!authorization.allowed) {\n        return c.json({ error: authorization.code, message: authorization.message }, authorization.status ?? 403);\n      }\n\n      try {\n        const resolved = await resolveSkillInvocation(controller, body);\n        if (dispatch) {\n          void resolved.session.sendMessage({ content: resolved.message }).catch((error: unknown) => {\n            console.error('Workspace skill dispatch failed after acceptance', error);\n          });\n        }\n        return c.json({ ok: true, skill: resolved.skillName, message: resolved.message });\n      } catch (error) {\n        if (error instanceof SkillInvocationError) {\n          return c.json({ error: error.code, message: error.message }, 404);\n        }\n        throw error;\n      }\n    };\n\n    return [\n      registerApiRoute('/web/agent-controller/:controllerId/skills/prepare', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: context => handleSkillRequest(context, false),\n      }),\n      registerApiRoute('/web/agent-controller/:controllerId/skills/invoke', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: context => handleSkillRequest(context, true),\n      }),\n    ];\n  }\n}\n","import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { SendAgentSignalResult } from '@mastra/core/agent';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\nimport { formatSkillActivation } from '@mastra/core/workspace';\nimport type { Workspace } from '@mastra/core/workspace';\n\nexport interface SkillInvocationInput {\n  resourceId: string;\n  scope?: string;\n  name: string;\n  arguments?: string;\n}\n\nexport interface SkillSession {\n  getWorkspace(): Workspace;\n  sendMessage(input: { content: string }): Promise<unknown>;\n  sendNotificationSignal(\n    input: {\n      source: string;\n      kind: string;\n      summary: string;\n      priority?: 'low' | 'medium' | 'high' | 'urgent';\n      payload?: unknown;\n      dedupeKey?: string;\n      sourceId?: string;\n    },\n    options?: {\n      ifActive?: { behavior?: 'deliver' | 'persist' };\n      ifIdle?: { behavior?: 'persist' | 'wake' };\n      requestContext?: RequestContext;\n    },\n  ): Promise<Pick<SendAgentSignalResult, 'persisted' | 'accepted'>>;\n}\n\nexport class SkillInvocationError extends Error {\n  readonly code: 'session_not_found' | 'skill_not_found';\n\n  constructor(code: SkillInvocationError['code'], message: string) {\n    super(message);\n    this.name = 'SkillInvocationError';\n    this.code = code;\n  }\n}\n\nfunction escapeSkillBoundary(value: string): string {\n  return value.replaceAll('</skill>', '&lt;/skill&gt;');\n}\n\nexport async function resolveSkillInvocation(\n  controller: Pick<AgentController<MastraCodeState>, 'getSessionByResource'>,\n  input: SkillInvocationInput,\n): Promise<{ session: SkillSession; skillName: string; message: string }> {\n  const session = (await controller.getSessionByResource(input.resourceId, input.scope)) as SkillSession | undefined;\n  if (!session) throw new SkillInvocationError('session_not_found', 'Agent controller session not found.');\n\n  const skills = session.getWorkspace().skills;\n  await skills?.maybeRefresh();\n  const skill = await skills?.get(input.name);\n  if (!skill || skill['user-invocable'] === false) {\n    throw new SkillInvocationError('skill_not_found', `Skill not found: ${input.name}.`);\n  }\n\n  const args = input.arguments?.trim();\n  const content = `${formatSkillActivation(skill)}${args ? `\\n\\nARGUMENTS: ${args}` : ''}`.trim();\n  return {\n    session,\n    skillName: skill.name,\n    message: `<skill name=\"${skill.name}\">\\n${escapeSkillBoundary(content)}\\n</skill>`,\n  };\n}\n\nexport async function dispatchSkillInvocation(\n  controller: Pick<AgentController<MastraCodeState>, 'getSessionByResource'>,\n  input: SkillInvocationInput,\n): Promise<{ skillName: string; message: string }> {\n  const resolved = await resolveSkillInvocation(controller, input);\n  await resolved.session.sendMessage({ content: resolved.message });\n  return { skillName: resolved.skillName, message: resolved.message };\n}\n","/**\n * Base class for factory route modules.\n *\n * Route modules build Mastra `apiRoutes` from injected dependencies instead of\n * reaching into host globals. The host server (e.g. `mastracode/web`) supplies\n * the auth seam and storage domain handles at construction time, so the routes\n * stay portable and testable with fakes.\n */\n\nimport type { ApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\n/**\n * The auth surface factory routes need, implemented by the host server.\n *\n * Local (no-auth) deployments implement this with a stub where `enabled()`\n * returns `false` and `tenant()` returns `undefined` — routes then take their\n * single-user local paths.\n */\nexport interface RouteAuth {\n  /** Whether an auth provider is active (tenant mode). */\n  enabled(): boolean;\n  /**\n   * Resolve (and cache) the signed-in user for the request, if any. Must be\n   * called before `tenant()` so the request context is populated.\n   */\n  ensureUser(c: Context): Promise<unknown>;\n  /** Tenant identity for the request, when signed in. */\n  tenant(c: Context): { orgId?: string; userId: string } | undefined;\n  /** Fail-closed check that the caller administers the given organization. */\n  isOrganizationAdmin(c: Context, organizationId: string): Promise<boolean>;\n}\n\n/** Dependencies shared by every factory route module. */\nexport interface RouteDependencies {\n  auth: RouteAuth;\n}\n\n/**\n * A route module: constructed once at boot with its dependencies, then asked\n * for the `ApiRoute[]` it serves.\n */\nexport abstract class Route<TDeps extends RouteDependencies = RouteDependencies> {\n  protected readonly deps: TDeps;\n\n  constructor(deps: TDeps) {\n    this.deps = deps;\n  }\n\n  /** Build the Mastra `apiRoutes` served by this module. */\n  abstract routes(): ApiRoute[];\n}\n"],"mappings":";AAGA,SAAS,wBAAwB;;;ACCjC,SAAS,6BAA6B;AA+B/B,IAAM,uBAAN,cAAmC,MAAM;AAAA,EACrC;AAAA,EAET,YAAY,MAAoC,SAAiB;AAC/D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAEA,SAAS,oBAAoB,OAAuB;AAClD,SAAO,MAAM,WAAW,YAAY,gBAAgB;AACtD;AAEA,eAAsB,uBACpB,YACA,OACwE;AACxE,QAAM,UAAW,MAAM,WAAW,qBAAqB,MAAM,YAAY,MAAM,KAAK;AACpF,MAAI,CAAC,QAAS,OAAM,IAAI,qBAAqB,qBAAqB,qCAAqC;AAEvG,QAAM,SAAS,QAAQ,aAAa,EAAE;AACtC,QAAM,QAAQ,aAAa;AAC3B,QAAM,QAAQ,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC1C,MAAI,CAAC,SAAS,MAAM,gBAAgB,MAAM,OAAO;AAC/C,UAAM,IAAI,qBAAqB,mBAAmB,oBAAoB,MAAM,IAAI,GAAG;AAAA,EACrF;AAEA,QAAM,OAAO,MAAM,WAAW,KAAK;AACnC,QAAM,UAAU,GAAG,sBAAsB,KAAK,CAAC,GAAG,OAAO;AAAA;AAAA,aAAkB,IAAI,KAAK,EAAE,GAAG,KAAK;AAC9F,SAAO;AAAA,IACL;AAAA,IACA,WAAW,MAAM;AAAA,IACjB,SAAS,gBAAgB,MAAM,IAAI;AAAA,EAAO,oBAAoB,OAAO,CAAC;AAAA;AAAA,EACxE;AACF;;;AC5BO,IAAe,QAAf,MAA0E;AAAA,EAC5D;AAAA,EAEnB,YAAY,MAAa;AACvB,SAAK,OAAO;AAAA,EACd;AAIF;;;AFxCA,IAAM,yBAAyB;AAC/B,IAAM,mBAAmB;AACzB,IAAM,uBAAuB;AAC7B,IAAM,gBAAgB;AACtB,IAAM,UAAU;AA4BhB,SAAS,MAAM,SAA2B;AACxC,SAAO;AACT;AAEA,SAAS,UAAU,OAAiD;AAClE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,QAAQ;AACd,MAAI,OAAO,MAAM,eAAe,YAAY,MAAM,WAAW,WAAW,EAAG,QAAO;AAClF,MAAI,MAAM,WAAW,SAAS,uBAAwB,QAAO;AAC7D,MACE,MAAM,wBAAwB,WAC7B,OAAO,MAAM,wBAAwB,YAAY,CAAC,QAAQ,KAAK,MAAM,mBAAmB,IACzF;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,UAAU,WAAc,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,SAAS,mBAAmB;AAC3G,WAAO;AAAA,EACT;AACA,MAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,MAAM,CAAC,cAAc,KAAK,MAAM,IAAI,EAAG,QAAO;AACxG,MAAI,MAAM,cAAc,QAAW;AACjC,QAAI,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,SAAS,qBAAsB,QAAO;AAAA,EACnG;AACA,SAAO;AAAA,IACL,YAAY,MAAM;AAAA,IAClB,GAAI,MAAM,sBAAsB,EAAE,qBAAqB,MAAM,oBAAoB,IAAI,CAAC;AAAA,IACtF,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,IAC5C,MAAM,MAAM;AAAA,IACZ,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,EACxE;AACF;AAEO,IAAM,cAAN,cAA0B,MAAuB;AAAA,EACtD,MAAM,yBACJ,SACA,SACqC;AACrC,UAAM,EAAE,MAAM,sBAAsB,SAAS,yBAAyB,IAAI,KAAK;AAC/E,QAAI,CAAC,KAAK,QAAQ,EAAG,QAAO,EAAE,SAAS,KAAK;AAE5C,UAAM,KAAK,WAAW,OAAO;AAC7B,UAAM,SAAS,KAAK,OAAO,OAAO;AAClC,QAAI,CAAC,QAAQ;AACX,aAAO,EAAE,SAAS,OAAO,QAAQ,KAAK,MAAM,gBAAgB,SAAS,2BAA2B;AAAA,IAClG;AAIA,QAAI,QAAQ,eAAe,OAAO,OAAQ,QAAO,EAAE,SAAS,KAAK;AAIjE,QACE,CAAC,QAAQ,KAAK,QAAQ,UAAU,KAChC,CAAC,QAAQ,uBACT,CAAC,QAAQ,KAAK,QAAQ,mBAAmB,GACzC;AACA,aAAO,EAAE,SAAS,OAAO,QAAQ,KAAK,MAAM,mBAAmB,SAAS,oCAAoC;AAAA,IAC9G;AACA,QAAI,CAAC,OAAO,SAAS,CAAC,QAAQ,OAAO;AACnC,aAAO,EAAE,SAAS,OAAO,QAAQ,KAAK,MAAM,qBAAqB,SAAS,yBAAyB;AAAA,IACrG;AACA,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,SAAS,OAAO,QAAQ,KAAK,MAAM,qBAAqB,SAAS,yBAAyB;AAAA,IACrG;AACA,QAAI,0BAA0B;AAC5B,UAAI;AACF,cAAM,yBAAyB;AAAA,MACjC,QAAQ;AACN,eAAO,EAAE,SAAS,OAAO,QAAQ,KAAK,MAAM,qBAAqB,SAAS,yBAAyB;AAAA,MACrG;AAAA,IACF;AACA,UAAM,oBAAoB,MAAM,QAAQ,oBAAoB,IAAI;AAAA,MAC9D,OAAO,OAAO;AAAA,MACd,IAAI,QAAQ;AAAA,IACd,CAAC;AACD,QAAI,CAAC,mBAAmB;AACtB,aAAO,EAAE,SAAS,OAAO,QAAQ,KAAK,MAAM,qBAAqB,SAAS,yBAAyB;AAAA,IACrG;AACA,UAAM,aAAa,MAAM,QAAQ,YAAY,IAAI,EAAE,OAAO,OAAO,OAAO,IAAI,kBAAkB,aAAa,CAAC;AAC5G,QAAI,CAAC,cAAc,WAAW,qBAAqB,QAAQ,YAAY;AACrE,aAAO,EAAE,SAAS,OAAO,QAAQ,KAAK,MAAM,qBAAqB,SAAS,yBAAyB;AAAA,IACrG;AACA,UAAM,WAAW,MAAM,QAAQ,UAAU,WAAW;AAAA,MAClD,qBAAqB,QAAQ;AAAA,MAC7B,QAAQ,OAAO;AAAA,MACf,cAAc,QAAQ;AAAA,IACxB,CAAC;AACD,WAAO,WACH,EAAE,SAAS,KAAK,IAChB,EAAE,SAAS,OAAO,QAAQ,KAAK,MAAM,qBAAqB,SAAS,yBAAyB;AAAA,EAClG;AAAA,EAEA,SAAqB;AACnB,UAAM,EAAE,cAAc,YAAY,yBAAyB,gBAAgB,IAAI,KAAK;AACpF,UAAM,YACJ,oBACC,CAAC,SAAkB,YAClB,KAAK,yBAAyB,SAAS,OAAO;AAClD,UAAM,qBAAqB,OAAO,SAAkB,aAAsB;AACxE,YAAM,IAAI,MAAM,OAAO;AACvB,UAAI,EAAE,IAAI,MAAM,cAAc,MAAM,cAAc;AAChD,eAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,SAAS,8BAA8B,GAAG,GAAG;AAAA,MAC9F;AAEA,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,EAAE,IAAI,KAAK;AAAA,MAC7B,QAAQ;AACN,eAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,SAAS,qBAAqB,GAAG,GAAG;AAAA,MAChF;AACA,YAAM,OAAO,UAAU,OAAO;AAC9B,UAAI,CAAC,MAAM;AACT,eAAO,EAAE,KAAK,EAAE,OAAO,mBAAmB,SAAS,oCAAoC,GAAG,GAAG;AAAA,MAC/F;AAEA,YAAM,gBAAgB,MAAM,UAAU,GAAG;AAAA,QACvC,YAAY,KAAK;AAAA,QACjB,qBAAqB,KAAK;AAAA,QAC1B,OAAO,KAAK;AAAA,MACd,CAAC;AACD,UAAI,CAAC,cAAc,SAAS;AAC1B,eAAO,EAAE,KAAK,EAAE,OAAO,cAAc,MAAM,SAAS,cAAc,QAAQ,GAAG,cAAc,UAAU,GAAG;AAAA,MAC1G;AAEA,UAAI;AACF,cAAM,WAAW,MAAM,uBAAuB,YAAY,IAAI;AAC9D,YAAI,UAAU;AACZ,eAAK,SAAS,QAAQ,YAAY,EAAE,SAAS,SAAS,QAAQ,CAAC,EAAE,MAAM,CAAC,UAAmB;AACzF,oBAAQ,MAAM,oDAAoD,KAAK;AAAA,UACzE,CAAC;AAAA,QACH;AACA,eAAO,EAAE,KAAK,EAAE,IAAI,MAAM,OAAO,SAAS,WAAW,SAAS,SAAS,QAAQ,CAAC;AAAA,MAClF,SAAS,OAAO;AACd,YAAI,iBAAiB,sBAAsB;AACzC,iBAAO,EAAE,KAAK,EAAE,OAAO,MAAM,MAAM,SAAS,MAAM,QAAQ,GAAG,GAAG;AAAA,QAClE;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,WAAO;AAAA,MACL,iBAAiB,sDAAsD;AAAA,QACrE,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,SAAS,aAAW,mBAAmB,SAAS,KAAK;AAAA,MACvD,CAAC;AAAA,MACD,iBAAiB,qDAAqD;AAAA,QACpE,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,SAAS,aAAW,mBAAmB,SAAS,IAAI;AAAA,MACtD,CAAC;AAAA,IACH;AAAA,EACF;AACF;","names":[]}
+{"version":3,"file":"skills.js","names":["#authorizeSessionAddress"],"sources":["../../src/routes/skills.ts"],"sourcesContent":["import type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController } from '@mastra/core/agent-controller';\nimport type { ApiRoute } from '@mastra/core/server';\nimport { registerApiRoute } from '@mastra/core/server';\nimport type { Context } from 'hono';\n\nimport { resolveSkillInvocation, SkillInvocationError } from '../skills/service.js';\nimport type { SourceControlStorageHandle } from '../storage/domains/source-control/base.js';\nimport type { RouteDependencies } from './route.js';\nimport { Route } from './route.js';\n\nconst MAX_RESOURCE_ID_LENGTH = 512;\nconst MAX_SCOPE_LENGTH = 2048;\nconst MAX_ARGUMENTS_LENGTH = 16_384;\nconst SKILL_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;\nconst UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;\n\ninterface SkillInvocationBody {\n  resourceId: string;\n  projectRepositoryId?: string;\n  scope?: string;\n  name: string;\n  arguments?: string;\n}\n\ninterface SessionAuthorizationResult {\n  allowed: boolean;\n  status?: 400 | 401 | 403;\n  code?: 'invalid_request' | 'unauthorized' | 'session_forbidden';\n  message?: string;\n}\n\nexport interface SkillRoutesDeps extends RouteDependencies {\n  controllerId: string;\n  controller: Pick<AgentController<MastraCodeState>, 'getSessionByResource'>;\n  sourceControlStorage?: SourceControlStorageHandle;\n  ensureSourceControlReady?: () => Promise<void>;\n  authorizeSessionAddress?: (\n    context: Context,\n    address: { resourceId: string; projectRepositoryId?: string; scope?: string },\n  ) => Promise<SessionAuthorizationResult>;\n}\n\nfunction loose(context: unknown): Context {\n  return context as Context;\n}\n\nfunction parseBody(value: unknown): SkillInvocationBody | undefined {\n  if (!value || typeof value !== 'object') return undefined;\n  const input = value as Record<string, unknown>;\n  if (typeof input.resourceId !== 'string' || input.resourceId.length === 0) return undefined;\n  if (input.resourceId.length > MAX_RESOURCE_ID_LENGTH) return undefined;\n  if (\n    input.projectRepositoryId !== undefined &&\n    (typeof input.projectRepositoryId !== 'string' || !UUID_RE.test(input.projectRepositoryId))\n  ) {\n    return undefined;\n  }\n  if (input.scope !== undefined && (typeof input.scope !== 'string' || input.scope.length > MAX_SCOPE_LENGTH)) {\n    return undefined;\n  }\n  if (typeof input.name !== 'string' || input.name.length > 64 || !SKILL_NAME_RE.test(input.name)) return undefined;\n  if (input.arguments !== undefined) {\n    if (typeof input.arguments !== 'string' || input.arguments.length > MAX_ARGUMENTS_LENGTH) return undefined;\n  }\n  return {\n    resourceId: input.resourceId,\n    ...(input.projectRepositoryId ? { projectRepositoryId: input.projectRepositoryId } : {}),\n    ...(input.scope ? { scope: input.scope } : {}),\n    name: input.name,\n    ...(input.arguments !== undefined ? { arguments: input.arguments } : {}),\n  };\n}\n\nexport class SkillRoutes extends Route<SkillRoutesDeps> {\n  async #authorizeSessionAddress(\n    context: Context,\n    address: { resourceId: string; projectRepositoryId?: string; scope?: string },\n  ): Promise<SessionAuthorizationResult> {\n    const { auth, sourceControlStorage: storage, ensureSourceControlReady } = this.deps;\n    if (!auth.enabled()) return { allowed: true };\n\n    await auth.ensureUser(context);\n    const tenant = auth.tenant(context);\n    if (!tenant) {\n      return { allowed: false, status: 401, code: 'unauthorized', message: 'Authentication required.' };\n    }\n\n    // Personal sessions are keyed by the authenticated WorkOS user id. Their\n    // scope is a client-managed local/user-session worktree and needs no app DB.\n    if (address.resourceId === tenant.userId) return { allowed: true };\n\n    // Factory sessions are keyed by factoryProjectId and explicitly identify the\n    // linked repository whose user-owned worktree supplies the session scope.\n    if (\n      !UUID_RE.test(address.resourceId) ||\n      !address.projectRepositoryId ||\n      !UUID_RE.test(address.projectRepositoryId)\n    ) {\n      return { allowed: false, status: 400, code: 'invalid_request', message: 'Invalid skill invocation request.' };\n    }\n    if (!tenant.orgId || !address.scope) {\n      return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n    }\n    if (!storage) {\n      return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n    }\n    if (ensureSourceControlReady) {\n      try {\n        await ensureSourceControlReady();\n      } catch {\n        return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n      }\n    }\n    const projectRepository = await storage.projectRepositories.get({\n      orgId: tenant.orgId,\n      id: address.projectRepositoryId,\n    });\n    if (!projectRepository) {\n      return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n    }\n    const connection = await storage.connections.get({ orgId: tenant.orgId, id: projectRepository.connectionId });\n    if (!connection || connection.factoryProjectId !== address.resourceId) {\n      return { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n    }\n    const worktree = await storage.worktrees.findByPath({\n      projectRepositoryId: address.projectRepositoryId,\n      userId: tenant.userId,\n      worktreePath: address.scope,\n    });\n    return worktree\n      ? { allowed: true }\n      : { allowed: false, status: 403, code: 'session_forbidden', message: 'Session access denied.' };\n  }\n\n  routes(): ApiRoute[] {\n    const { controllerId, controller, authorizeSessionAddress: customAuthorize } = this.deps;\n    const authorize =\n      customAuthorize ??\n      ((context: Context, address: { resourceId: string; projectRepositoryId?: string; scope?: string }) =>\n        this.#authorizeSessionAddress(context, address));\n    const handleSkillRequest = async (context: unknown, dispatch: boolean) => {\n      const c = loose(context);\n      if (c.req.param('controllerId') !== controllerId) {\n        return c.json({ error: 'controller_not_found', message: 'Agent controller not found.' }, 404);\n      }\n\n      let rawBody: unknown;\n      try {\n        rawBody = await c.req.json();\n      } catch {\n        return c.json({ error: 'invalid_request', message: 'Invalid JSON body.' }, 400);\n      }\n      const body = parseBody(rawBody);\n      if (!body) {\n        return c.json({ error: 'invalid_request', message: 'Invalid skill invocation request.' }, 400);\n      }\n\n      const authorization = await authorize(c, {\n        resourceId: body.resourceId,\n        projectRepositoryId: body.projectRepositoryId,\n        scope: body.scope,\n      });\n      if (!authorization.allowed) {\n        return c.json({ error: authorization.code, message: authorization.message }, authorization.status ?? 403);\n      }\n\n      try {\n        const resolved = await resolveSkillInvocation(controller, body);\n        if (dispatch) {\n          void resolved.session.sendMessage({ content: resolved.message }).catch((error: unknown) => {\n            console.error('Workspace skill dispatch failed after acceptance', error);\n          });\n        }\n        return c.json({ ok: true, skill: resolved.skillName, message: resolved.message });\n      } catch (error) {\n        if (error instanceof SkillInvocationError) {\n          return c.json({ error: error.code, message: error.message }, 404);\n        }\n        throw error;\n      }\n    };\n\n    return [\n      registerApiRoute('/web/agent-controller/:controllerId/skills/prepare', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: context => handleSkillRequest(context, false),\n      }),\n      registerApiRoute('/web/agent-controller/:controllerId/skills/invoke', {\n        method: 'POST',\n        requiresAuth: false,\n        handler: context => handleSkillRequest(context, true),\n      }),\n    ];\n  }\n}\n"],"mappings":";;;;AAWA,MAAM,yBAAyB;AAC/B,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAC7B,MAAM,gBAAgB;AACtB,MAAM,UAAU;AA4BhB,SAAS,MAAM,SAA2B;CACxC,OAAO;AACT;AAEA,SAAS,UAAU,OAAiD;CAClE,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO,KAAA;CAChD,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,eAAe,YAAY,MAAM,WAAW,WAAW,GAAG,OAAO,KAAA;CAClF,IAAI,MAAM,WAAW,SAAS,wBAAwB,OAAO,KAAA;CAC7D,IACE,MAAM,wBAAwB,KAAA,MAC7B,OAAO,MAAM,wBAAwB,YAAY,CAAC,QAAQ,KAAK,MAAM,mBAAmB,IAEzF;CAEF,IAAI,MAAM,UAAU,KAAA,MAAc,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,SAAS,mBACxF;CAEF,IAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,MAAM,CAAC,cAAc,KAAK,MAAM,IAAI,GAAG,OAAO,KAAA;CACxG,IAAI,MAAM,cAAc,KAAA,GAClB;MAAA,OAAO,MAAM,cAAc,YAAY,MAAM,UAAU,SAAS,sBAAsB,OAAO,KAAA;CAAA;CAEnG,OAAO;EACL,YAAY,MAAM;EAClB,GAAI,MAAM,sBAAsB,EAAE,qBAAqB,MAAM,oBAAoB,IAAI,CAAC;EACtF,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;EAC5C,MAAM,MAAM;EACZ,GAAI,MAAM,cAAc,KAAA,IAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;CACxE;AACF;AAEA,IAAa,cAAb,cAAiC,MAAuB;CACtD,MAAMA,yBACJ,SACA,SACqC;EACrC,MAAM,EAAE,MAAM,sBAAsB,SAAS,6BAA6B,KAAK;EAC/E,IAAI,CAAC,KAAK,QAAQ,GAAG,OAAO,EAAE,SAAS,KAAK;EAE5C,MAAM,KAAK,WAAW,OAAO;EAC7B,MAAM,SAAS,KAAK,OAAO,OAAO;EAClC,IAAI,CAAC,QACH,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAgB,SAAS;EAA2B;EAKlG,IAAI,QAAQ,eAAe,OAAO,QAAQ,OAAO,EAAE,SAAS,KAAK;EAIjE,IACE,CAAC,QAAQ,KAAK,QAAQ,UAAU,KAChC,CAAC,QAAQ,uBACT,CAAC,QAAQ,KAAK,QAAQ,mBAAmB,GAEzC,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAmB,SAAS;EAAoC;EAE9G,IAAI,CAAC,OAAO,SAAS,CAAC,QAAQ,OAC5B,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAqB,SAAS;EAAyB;EAErG,IAAI,CAAC,SACH,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAqB,SAAS;EAAyB;EAErG,IAAI,0BACF,IAAI;GACF,MAAM,yBAAyB;EACjC,QAAQ;GACN,OAAO;IAAE,SAAS;IAAO,QAAQ;IAAK,MAAM;IAAqB,SAAS;GAAyB;EACrG;EAEF,MAAM,oBAAoB,MAAM,QAAQ,oBAAoB,IAAI;GAC9D,OAAO,OAAO;GACd,IAAI,QAAQ;EACd,CAAC;EACD,IAAI,CAAC,mBACH,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAqB,SAAS;EAAyB;EAErG,MAAM,aAAa,MAAM,QAAQ,YAAY,IAAI;GAAE,OAAO,OAAO;GAAO,IAAI,kBAAkB;EAAa,CAAC;EAC5G,IAAI,CAAC,cAAc,WAAW,qBAAqB,QAAQ,YACzD,OAAO;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAqB,SAAS;EAAyB;EAOrG,OAAO,MALgB,QAAQ,UAAU,WAAW;GAClD,qBAAqB,QAAQ;GAC7B,QAAQ,OAAO;GACf,cAAc,QAAQ;EACxB,CAAC,IAEG,EAAE,SAAS,KAAK,IAChB;GAAE,SAAS;GAAO,QAAQ;GAAK,MAAM;GAAqB,SAAS;EAAyB;CAClG;CAEA,SAAqB;EACnB,MAAM,EAAE,cAAc,YAAY,yBAAyB,oBAAoB,KAAK;EACpF,MAAM,YACJ,qBACE,SAAkB,YAClB,KAAKA,yBAAyB,SAAS,OAAO;EAClD,MAAM,qBAAqB,OAAO,SAAkB,aAAsB;GACxE,MAAM,IAAI,MAAM,OAAO;GACvB,IAAI,EAAE,IAAI,MAAM,cAAc,MAAM,cAClC,OAAO,EAAE,KAAK;IAAE,OAAO;IAAwB,SAAS;GAA8B,GAAG,GAAG;GAG9F,IAAI;GACJ,IAAI;IACF,UAAU,MAAM,EAAE,IAAI,KAAK;GAC7B,QAAQ;IACN,OAAO,EAAE,KAAK;KAAE,OAAO;KAAmB,SAAS;IAAqB,GAAG,GAAG;GAChF;GACA,MAAM,OAAO,UAAU,OAAO;GAC9B,IAAI,CAAC,MACH,OAAO,EAAE,KAAK;IAAE,OAAO;IAAmB,SAAS;GAAoC,GAAG,GAAG;GAG/F,MAAM,gBAAgB,MAAM,UAAU,GAAG;IACvC,YAAY,KAAK;IACjB,qBAAqB,KAAK;IAC1B,OAAO,KAAK;GACd,CAAC;GACD,IAAI,CAAC,cAAc,SACjB,OAAO,EAAE,KAAK;IAAE,OAAO,cAAc;IAAM,SAAS,cAAc;GAAQ,GAAG,cAAc,UAAU,GAAG;GAG1G,IAAI;IACF,MAAM,WAAW,MAAM,uBAAuB,YAAY,IAAI;IAC9D,IAAI,UACF,SAAc,QAAQ,YAAY,EAAE,SAAS,SAAS,QAAQ,CAAC,CAAC,CAAC,OAAO,UAAmB;KACzF,QAAQ,MAAM,oDAAoD,KAAK;IACzE,CAAC;IAEH,OAAO,EAAE,KAAK;KAAE,IAAI;KAAM,OAAO,SAAS;KAAW,SAAS,SAAS;IAAQ,CAAC;GAClF,SAAS,OAAO;IACd,IAAI,iBAAiB,sBACnB,OAAO,EAAE,KAAK;KAAE,OAAO,MAAM;KAAM,SAAS,MAAM;IAAQ,GAAG,GAAG;IAElE,MAAM;GACR;EACF;EAEA,OAAO,CACL,iBAAiB,sDAAsD;GACrE,QAAQ;GACR,cAAc;GACd,UAAS,YAAW,mBAAmB,SAAS,KAAK;EACvD,CAAC,GACD,iBAAiB,qDAAqD;GACpE,QAAQ;GACR,cAAc;GACd,UAAS,YAAW,mBAAmB,SAAS,IAAI;EACtD,CAAC,CACH;CACF;AACF"}