@nocobase/app-plugin-agents 0.0.0-stage → 0.1.0-beta.10

package/dist/server/core/brief/brief.js

@@ -0,0 +1,216 @@
+/**
+ * The brief an agent runs with: four fixed layers, joined in order into the run's system prompt
+ * (`RunPayload.prompt.system`; see `joinBrief`).
+ *
+ * 1. `system`: the platform's rules, the same for every agent: how to talk to the platform (the application's CLI),
+ *    what never to touch, how to finish; the workspace layout; the environment check every working directory gets
+ *    before work starts; and the index of the agent's skills.
+ * 2. `task`: what this run is for, written by the domain the run works on (why it was given the subject, say).
+ * 3. `context`: a summary of the subject as it is now, written by that domain.
+ * 4. `agent`: the agent's own instructions, prefixed with a fixed note that they are preferences and never override
+ *    the layers before them.
+ *
+ * The system layer holds two placeholders the runner fills with what only it knows: its notes on the working
+ * directories (`{{runner.workspaceNotes}}`: absolute paths, the skills folder) and the initialization prompts of the
+ * directories it prepared fresh for this run (`{{runner.workspaceInit}}`).
+ *
+ * The subject's domain adds its own lines to the rules (`BriefGuidance`): how the agent reports progress and which
+ * moves it may make. Without them, the agent reports in its last message.
+ *
+ * An online agent (`dialect: 'tools'`) gets another system layer (`onlineSystemLayer`): it reaches the platform through
+ * the application's CLI in a sandboxed shell (its `bash` tool), has no working directory, reads its skills through its
+ * `skill` tool (the claim adds `onlineSkillsSection`), and links the pages of what its commands return when it relies
+ * on them.
+ *
+ * The turn prompt is the run's input (comments, status changes, retries), oldest first. Everything is rendered on the
+ * server, in English; product content (a subject's title, a comment) is quoted as written.
+ */
+import { WORKSPACE_INIT_PLACEHOLDER, WORKSPACE_NOTES_PLACEHOLDER, } from '@nocobase/agent-protocol';
+/** The system prompt a runner gets: the layers in order. */
+export function joinBrief(brief) {
+    return [brief.system, brief.task, brief.context, brief.agent]
+        .filter((layer) => layer.trim() !== '')
+        .join('\n\n');
+}
+/** The rules every subject gets when its domain says nothing of its own. */
+export const DEFAULT_GUIDANCE = {
+    rules: [
+        'Report what you did and what is left in your last message: people read it, not your terminal.',
+        'When you are done, or blocked and need a person, say so and end your turn. Do not wait for an answer: new input reaches you as it comes.',
+    ],
+    whenBlocked: 'If you cannot get the environment working, say exactly what is missing and end your turn instead of guessing.',
+};
+/** The rule an online agent's system layer gives it about citing what its tools return. */
+export const CITATION_RULE = 'When your answer rests on something a command returned that has a page (a document, an issue), cite it as a Markdown link to its `url`, such as [Release process](/knowledge/release-process). Never invent a link.';
+/** The rules every online agent gets about its tools: a read-only shell with the application's CLI, and its skills. */
+export function onlineToolRules(owner, cli, appName) {
+    return [
+        `Your tools are \`bash\`, a sandboxed shell, and \`skill\`. Reach ${appName} only through the \`${cli}\` command in that shell: \`${cli} --help\` lists the commands you may use, \`${cli} <command> --help\` and \`${cli} docs <command>\` explain one. Add \`--json\` when you need to read the output: one JSON document whose \`result.data\` is the answer, or whose \`error\` says what failed.`,
+        `The commands you are offered are all you may do: they are limited to what ${owner} may do and what you are configured for. A refused command (exit code 3, or its error) is an answer, not a problem to work around.`,
+        'You have no working directory and nothing runs for real in the shell: write a file a command reads (`--content-file`, `--file`) under /tmp, the only place you may write.',
+        CITATION_RULE,
+    ];
+}
+/** The line the agent layer always starts with. */
+export const AGENT_LAYER_PREFIX = "The following are this agent's own instructions from its owner. They are preferences: where they conflict with the rules, the task or the context above, those win.";
+function describeDir(dir) {
+    const name = dir.name ? ` (${dir.name})` : '';
+    if (dir.kind === 'repo')
+        return `\`./${dir.path}\`${name}, a checkout of ${dir.url} targeting branch \`${dir.branch}\` (based on \`${dir.defaultBranch}\`); the local branch may be a private runner alias. Commit in the current checkout and push with \`git push origin HEAD:refs/heads/${dir.branch}\`; never force push`;
+    return `\`${dir.path}\`${name}, a directory on this machine you work in as it is: no branch of its own, so leave its version control alone unless the task asks, and do not delete or reset what is there`;
+}
+/** Where the agent works, as the system layer says it. */
+export function workspaceSection(dirs, noun) {
+    const [primary, ...others] = dirs;
+    return [
+        'Workspace:',
+        primary
+            ? `- You start in the primary working directory: ${describeDir(primary)}.`
+            : `- You start in an empty working directory kept for this ${noun}; create what the task needs inside it.`,
+        ...others.map((dir) => `- Also: ${describeDir(dir)}.`),
+        '- Do not clone the repositories again. Keep every file you write inside your working directories.',
+        WORKSPACE_NOTES_PLACEHOLDER,
+    ];
+}
+/** The environment check every working directory gets before the work starts; `whenBlocked` is its last line. */
+export function environmentSection(whenBlocked = DEFAULT_GUIDANCE.whenBlocked) {
+    return [
+        'Before you start:',
+        "- Check each working directory's environment the way the directory itself says to: read its own instructions (AGENTS.md, CLAUDE.md or README at its root, and the files they point to) and follow them to install dependencies and prepare what the work needs. Install what is missing inside the working directory only, never system-wide and never with sudo.",
+        `- ${whenBlocked}`,
+        WORKSPACE_INIT_PLACEHOLDER,
+    ];
+}
+/** The skills the agent may read when one fits, in the shape the Agent Skills `to-prompt` output has. */
+export function skillsSection(skills) {
+    if (skills.length === 0)
+        return [];
+    return [
+        "Skills: instructions for particular kinds of work, each a directory with a SKILL.md. Read a skill's SKILL.md (in the skills folder the workspace notes name) when its description matches what you are doing, and follow it.",
+        '<available_skills>',
+        ...skills.flatMap((skill) => [
+            '<skill>',
+            `<name>${skill.slug}</name>`,
+            `<description>${skill.description.replace(/\s+/gu, ' ').trim()}</description>`,
+            '</skill>',
+        ]),
+        '</available_skills>',
+    ];
+}
+/**
+ * The skills an online agent may read, through its `skill` tool and its shell: by name and description only, with what
+ * cannot be done with them.
+ */
+export function onlineSkillsSection(skills) {
+    if (skills.length === 0)
+        return [];
+    return [
+        "Skills: instructions for particular kinds of work. When a skill's description matches what you are doing, call the `skill` tool with its name to read its SKILL.md and see its files, then follow it; read its other files with `cat /skills/<name>/<path>` in the `bash` tool. A skill's scripts cannot be executed here: read them to learn what they do, and do it with your tools. Binary files are listed but cannot be read.",
+        '<available_skills>',
+        ...skills.flatMap((skill) => [
+            '<skill>',
+            `<name>${skill.slug}</name>`,
+            `<description>${skill.description.replace(/\s+/gu, ' ').trim()}</description>`,
+            '</skill>',
+        ]),
+        '</available_skills>',
+    ];
+}
+export function systemLayer(input) {
+    const { noun, key } = input.subject;
+    const { cli, appName } = input;
+    const guidance = input.guidance ?? DEFAULT_GUIDANCE;
+    return [
+        `You are ${input.agentName}, an agent working on ${noun} ${key} for a team that uses ${appName}.`,
+        '',
+        'Rules:',
+        `- Talk to ${appName} only through the \`${cli}\` command line. Run \`${cli} --help\` to see the commands you may use, and \`${cli} <command> --help\` for one command. Add \`--json\` when you need to read the output: one JSON document whose \`result.data\` is the answer, or whose \`error\` says what failed.`,
+        '- The commands you are offered are all you may do: they are limited to what the person who asked you may do. A refused command (exit code 3) is not a problem to work around.',
+        `- Never read, print or copy the run's credentials file of \`${cli}\` or any other credential file, and never pass credentials on the command line.`,
+        `- Write anything longer than one line into a file inside your working directory and pass it with \`--content-file <path>\` (or \`--file <path>\` for JSON input) instead of quoting it in the command.`,
+        '- Stay inside your working directories: writes anywhere else are refused. The runner also refuses some shell commands; a refused or declined call is not the end of the task, so do the same with an allowed command or your file tools and carry on.',
+        ...guidance.rules.map((rule) => `- ${rule}`),
+        '',
+        ...workspaceSection(input.dirs ?? [], noun),
+        '',
+        ...environmentSection(guidance.whenBlocked ?? DEFAULT_GUIDANCE.whenBlocked),
+        ...(input.skills && input.skills.length > 0
+            ? ['', ...skillsSection(input.skills)]
+            : []),
+    ].join('\n');
+}
+/** The system layer of an online agent's run on a subject: its tools instead of a command line, no workspace. */
+export function onlineSystemLayer(input) {
+    const { noun, key } = input.subject;
+    const guidance = input.guidance ?? DEFAULT_GUIDANCE;
+    return [
+        `You are ${input.agentName}, an agent working on ${noun} ${key} for a team that uses ${input.appName}.`,
+        '',
+        'Rules:',
+        ...onlineToolRules('the person who asked you', input.cli, input.appName).map((rule) => `- ${rule}`),
+        ...guidance.rules.map((rule) => `- ${rule}`),
+        ...(input.skills && input.skills.length > 0
+            ? ['', ...onlineSkillsSection(input.skills)]
+            : []),
+    ].join('\n');
+}
+export function agentLayer(instructions) {
+    const text = instructions?.trim() ?? '';
+    return text ? `${AGENT_LAYER_PREFIX}\n\n${text}` : '';
+}
+export function renderBrief(input) {
+    return {
+        system: input.dialect === 'tools' ? onlineSystemLayer(input) : systemLayer(input),
+        task: input.task.trim(),
+        context: input.context.trim(),
+        agent: agentLayer(input.instructions),
+    };
+}
+/** What a person reading a brief sees where the runner adds what only it knows. */
+export function annotatePlaceholders(prompt) {
+    return prompt
+        .split(WORKSPACE_NOTES_PLACEHOLDER)
+        .join('[The runner adds the absolute paths of the working directories and the skills folder here.]')
+        .split(WORKSPACE_INIT_PLACEHOLDER)
+        .join('[The runner adds the initialization prompts of the working directories it prepared fresh for this run here, if any.]');
+}
+const INPUT_TITLES = {
+    comment: 'Comment',
+    statusChange: 'Status change',
+    retry: 'Retry',
+    planDecided: 'Plan decided',
+    signal: 'Signal',
+    custom: 'Input',
+};
+/** The first message of a run as the model reads it: the brief's turn, then each input. */
+export function firstTurn(turn, inputs) {
+    return [turn.trim(), ...inputs.map(renderInput)]
+        .filter((part) => part !== '')
+        .join('\n\n');
+}
+/** One input as the agent reads it. */
+export function renderInput(input) {
+    const who = input.actor.kind === 'user'
+        ? input.actor.name
+        : `${input.actor.name} (${input.actor.kind})`;
+    return `### ${INPUT_TITLES[input.type]} from ${who} at ${input.at}\n\n${input.text.trim()}`;
+}
+/** The turn prompt: what happened since the agent last looked, oldest first. */
+export function renderTurnPrompt(inputs, options) {
+    const { noun, key } = options.subject;
+    if (inputs.length === 0)
+        return `Continue the work on ${noun} ${key}. Read the context first (\`${options.cli ?? 'cli'} run context\`).`;
+    return [
+        `New input for ${noun} ${key}, oldest first. Each id is listed so you can tell them apart.`,
+        '',
+        ...inputs.flatMap((input) => [
+            renderInput(input),
+            `(input ${input.id})`,
+            '',
+        ]),
+        'Act on all of it, then end your turn.',
+    ]
+        .join('\n')
+        .trim();
+}
+//# sourceMappingURL=brief.js.map

package/dist/server/core/brief/brief.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brief.js","sourceRoot":"","sources":["../../../../server/core/brief/brief.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAG5B,MAAM,0BAA0B,CAAC;AAUlC,4DAA4D;AAC5D,MAAM,UAAU,SAAS,CAAC,KAAY;IACpC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;SAC1D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;SACtC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAiBD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAkB;IAC7C,KAAK,EAAE;QACL,+FAA+F;QAC/F,0IAA0I;KAC3I;IACD,WAAW,EACT,+GAA+G;CAClH,CAAC;AAwBF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GACxB,qNAAqN,CAAC;AAExN,uHAAuH;AACvH,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,GAAW,EACX,OAAe;IAEf,OAAO;QACL,oEAAoE,OAAO,uBAAuB,GAAG,+BAA+B,GAAG,+CAA+C,GAAG,6BAA6B,GAAG,6KAA6K;QACtY,6EAA6E,KAAK,oIAAoI;QACtN,2KAA2K;QAC3K,aAAa;KACd,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAC7B,qKAAqK,CAAC;AAExK,SAAS,WAAW,CAAC,GAAiB;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QACrB,OAAO,OAAO,GAAG,CAAC,IAAI,KAAK,IAAI,mBAAmB,GAAG,CAAC,GAAG,uBAAuB,GAAG,CAAC,MAAM,kBAAkB,GAAG,CAAC,aAAa,uIAAuI,GAAG,CAAC,MAAM,sBAAsB,CAAC;IACvS,OAAO,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,6KAA6K,CAAC;AAC7M,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAC9B,IAA6B,EAC7B,IAAY;IAEZ,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC;IAClC,OAAO;QACL,YAAY;QACZ,OAAO;YACL,CAAC,CAAC,iDAAiD,WAAW,CAAC,OAAO,CAAC,GAAG;YAC1E,CAAC,CAAC,2DAA2D,IAAI,yCAAyC;QAC5G,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;QACtD,mGAAmG;QACnG,2BAA2B;KAC5B,CAAC;AACJ,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,kBAAkB,CAChC,cAAsB,gBAAgB,CAAC,WAAY;IAEnD,OAAO;QACL,mBAAmB;QACnB,mWAAmW;QACnW,KAAK,WAAW,EAAE;QAClB,0BAA0B;KAC3B,CAAC;AACJ,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,aAAa,CAAC,MAA6B;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,8NAA8N;QAC9N,oBAAoB;QACpB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,SAAS;YACT,SAAS,KAAK,CAAC,IAAI,SAAS;YAC5B,gBAAgB,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,gBAAgB;YAC9E,UAAU;SACX,CAAC;QACF,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA6B;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO;QACL,oaAAoa;QACpa,oBAAoB;QACpB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,SAAS;YACT,SAAS,KAAK,CAAC,IAAI,SAAS;YAC5B,gBAAgB,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,gBAAgB;YAC9E,UAAU;SACX,CAAC;QACF,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAGC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACpC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACpD,OAAO;QACL,WAAW,KAAK,CAAC,SAAS,yBAAyB,IAAI,IAAI,GAAG,yBAAyB,OAAO,GAAG;QACjG,EAAE;QACF,QAAQ;QACR,aAAa,OAAO,uBAAuB,GAAG,0BAA0B,GAAG,oDAAoD,GAAG,mLAAmL;QACrT,+KAA+K;QAC/K,+DAA+D,GAAG,kFAAkF;QACpJ,wMAAwM;QACxM,uPAAuP;QACvP,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,EAAE;QACF,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC;QAC3C,EAAE;QACF,GAAG,kBAAkB,CAAC,QAAQ,CAAC,WAAW,IAAI,gBAAgB,CAAC,WAAW,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAC/B,KAGC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACpD,OAAO;QACL,WAAW,KAAK,CAAC,SAAS,yBAAyB,IAAI,IAAI,GAAG,yBAAyB,KAAK,CAAC,OAAO,GAAG;QACvG,EAAE;QACF,QAAQ;QACR,GAAG,eAAe,CAChB,0BAA0B,EAC1B,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,OAAO,CACd,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACzC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAA2B;IACpD,MAAM,IAAI,GAAG,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,kBAAkB,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,OAAO;QACL,MAAM,EACJ,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC;QAC3E,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QAC7B,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO,MAAM;SACV,KAAK,CAAC,2BAA2B,CAAC;SAClC,IAAI,CACH,6FAA6F,CAC9F;SACA,KAAK,CAAC,0BAA0B,CAAC;SACjC,IAAI,CACH,sHAAsH,CACvH,CAAC;AACN,CAAC;AAED,MAAM,YAAY,GAA+C;IAC/D,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,eAAe;IAC7B,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,cAAc;IAC3B,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,OAAO;CAChB,CAAC;AAEF,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAA2B;IACjE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,MAAM,GAAG,GACP,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;QACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;QAClB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;IAClD,OAAO,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9F,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAC9B,MAA2B,EAC3B,OAIC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrB,OAAO,wBAAwB,IAAI,IAAI,GAAG,+BAA+B,OAAO,CAAC,GAAG,IAAI,KAAK,kBAAkB,CAAC;IAClH,OAAO;QACL,iBAAiB,IAAI,IAAI,GAAG,+DAA+D;QAC3F,EAAE;QACF,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,WAAW,CAAC,KAAK,CAAC;YAClB,UAAU,KAAK,CAAC,EAAE,GAAG;YACrB,EAAE;SACH,CAAC;QACF,uCAAuC;KACxC;SACE,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/server/core/brief/index.d.ts

@@ -0,0 +1,2 @@
+export { AGENT_LAYER_PREFIX, agentLayer, annotatePlaceholders, onlineSkillsSection, onlineSystemLayer, onlineToolRules, CITATION_RULE, DEFAULT_GUIDANCE, environmentSection, firstTurn, joinBrief, renderBrief, renderInput, renderTurnPrompt, skillsSection, systemLayer, workspaceSection, type Brief, type BriefGuidance, type BriefInput, type BriefSkill, } from './brief.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/core/brief/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/core/brief/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,KAAK,KAAK,EACV,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,UAAU,GAChB,MAAM,YAAY,CAAC"}

package/dist/server/core/brief/index.js

@@ -0,0 +1,2 @@
+export { AGENT_LAYER_PREFIX, agentLayer, annotatePlaceholders, onlineSkillsSection, onlineSystemLayer, onlineToolRules, CITATION_RULE, DEFAULT_GUIDANCE, environmentSection, firstTurn, joinBrief, renderBrief, renderInput, renderTurnPrompt, skillsSection, systemLayer, workspaceSection, } from './brief.js';
+//# sourceMappingURL=index.js.map

package/dist/server/core/brief/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/core/brief/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,gBAAgB,GAKjB,MAAM,YAAY,CAAC"}

package/dist/server/core/callers/index.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Who calls the application's API from outside its pages — a person on the CLI (a session or an API key) or an
+ * agent's run (its run token) — and the business actions each holds now. The application that assembles the plugin
+ * sets the gate (`CallerGate.set`); the command manifest offers a caller only the commands whose action it holds, and
+ * the application bounds a run's requests by the same answer.
+ *
+ * A run's effective actions come from the host gate and its running identity's permissions; a person holds their
+ * own, kept to the scope of the API key they call with. Without a gate, a caller holds only the plugin's own
+ * universal actions: `AGENTS_VIEW_ACTION`, and `RUN_SELF_ACTION` for a run.
+ *
+ * A consultation's run (`Run.parentRunId`, an agent another one asked a question) only reads: of what its gate allows,
+ * it keeps the reading actions (`isReadingAction`) and those the gate marks as safe for it (`ActionGate.consultable`,
+ * such as proposing a plan the person confirms).
+ */
+import type { KeyScope } from '@nocobase/authorization/core';
+import type { Agent } from '../../../shared/agents.js';
+import type { RunTokenIdentity } from '../runs/index.js';
+export type CallerKind = 'run' | 'user';
+/** Held by every run: the routes about the run itself (`run self`, `run context`, naming its conversation). */
+export declare const RUN_SELF_ACTION = "agents.runs/self";
+/** Held by every caller: seeing which agents one may give work to (`agent list`). */
+export declare const AGENTS_VIEW_ACTION = "agents.agents/view";
+/** Who calls. */
+export interface CallerIdentity {
+    readonly kind: CallerKind;
+    /** The person whose permissions bound the caller: the caller, or for a run the person who woke the agent. */
+    readonly userId: string;
+    readonly displayName: string;
+    /** For a run. */
+    readonly run?: RunTokenIdentity;
+    readonly agent?: Agent;
+    /**
+     * The scope of the API key a person called with, when it has one (or the key is a service account's). The gate
+     * must narrow what it allows by it; a run never carries one.
+     */
+    readonly keyScope?: KeyScope;
+}
+export interface ActionGate {
+    /** The business actions `identity` may perform now. */
+    allowed(identity: CallerIdentity): Promise<ReadonlySet<string>>;
+    /**
+     * Whether a consultation's run, which only reads, keeps an action that is not a reading one (`isReadingAction`):
+     * proposing something the person confirms, say. None when absent.
+     */
+    consultable?(action: string): boolean;
+}
+/** Whether an action only reads: its verb is `view`, `read` or `read-…` (`pm.issues/view`, `rel.apps/read-logs`). */
+export declare function isReadingAction(action: string): boolean;
+/** Whether the caller is a consultation's run, which only reads. */
+export declare function isConsultation(identity: CallerIdentity): boolean;
+export interface CallerGate {
+    /** Sets who may do what; returns what removes it. */
+    set(gate: ActionGate): () => void;
+    /** The business actions `identity` holds now: the gate's, and the plugin's universal ones. */
+    allowed(identity: CallerIdentity): Promise<ReadonlySet<string>>;
+    /**
+     * What `identity` could do were it not a consultation kept to reading: the reach of a plan a consulted agent proposes,
+     * which the person confirms. The same as `allowed` for every other caller.
+     */
+    reach(identity: CallerIdentity): Promise<ReadonlySet<string>>;
+}
+export declare function createCallerGate(): CallerGate;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/core/callers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/core/callers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;AAExC,+GAA+G;AAC/G,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAElD,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,iBAAiB;AACjB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iBAAiB;IACjB,QAAQ,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,OAAO,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE;;;OAGG;IACH,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CACvC;AAED,qHAAqH;AACrH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAGvD;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAEhE;AAED,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,IAAI,CAAC;IAClC,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE;;;OAGG;IACH,KAAK,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;CAC/D;AAED,wBAAgB,gBAAgB,IAAI,UAAU,CAiC7C"}

package/dist/server/core/callers/index.js

@@ -0,0 +1,42 @@
+/** Held by every run: the routes about the run itself (`run self`, `run context`, naming its conversation). */
+export const RUN_SELF_ACTION = 'agents.runs/self';
+/** Held by every caller: seeing which agents one may give work to (`agent list`). */
+export const AGENTS_VIEW_ACTION = 'agents.agents/view';
+/** Whether an action only reads: its verb is `view`, `read` or `read-…` (`pm.issues/view`, `rel.apps/read-logs`). */
+export function isReadingAction(action) {
+    const verb = action.slice(action.lastIndexOf('/') + 1);
+    return verb === 'view' || verb === 'read' || verb.startsWith('read-');
+}
+/** Whether the caller is a consultation's run, which only reads. */
+export function isConsultation(identity) {
+    return identity.kind === 'run' && Boolean(identity.run?.run.parentRunId);
+}
+export function createCallerGate() {
+    let current;
+    const universal = (identity, held) => {
+        held.add(AGENTS_VIEW_ACTION);
+        if (identity.kind === 'run')
+            held.add(RUN_SELF_ACTION);
+        return held;
+    };
+    return {
+        set(gate) {
+            current = gate;
+            return () => {
+                if (current === gate)
+                    current = undefined;
+            };
+        },
+        async allowed(identity) {
+            const gate = current;
+            let held = new Set(gate ? await gate.allowed(identity) : []);
+            if (isConsultation(identity))
+                held = new Set([...held].filter((action) => isReadingAction(action) || gate?.consultable?.(action) === true));
+            return universal(identity, held);
+        },
+        async reach(identity) {
+            return universal(identity, new Set(current ? await current.allowed(identity) : []));
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/server/core/callers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../server/core/callers/index.ts"],"names":[],"mappings":"AAqBA,+GAA+G;AAC/G,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAElD,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AA4BvD,qHAAqH;AACrH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,QAAwB;IACrD,OAAO,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC;AAcD,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAA+B,CAAC;IACpC,MAAM,SAAS,GAAG,CAAC,QAAwB,EAAE,IAAiB,EAAE,EAAE;QAChE,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO;QACL,GAAG,CAAC,IAAI;YACN,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,GAAG,EAAE;gBACV,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,GAAG,SAAS,CAAC;YAC5C,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,QAAQ;YACpB,MAAM,IAAI,GAAG,OAAO,CAAC;YACrB,IAAI,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,cAAc,CAAC,QAAQ,CAAC;gBAC1B,IAAI,GAAG,IAAI,GAAG,CACZ,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CACd,CAAC,MAAM,EAAE,EAAE,CACT,eAAe,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,CAClE,CACF,CAAC;YACJ,OAAO,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAQ;YAClB,OAAO,SAAS,CACd,QAAQ,EACR,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACxD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/core/conversations/attachments.d.ts

@@ -0,0 +1,159 @@
+/**
+ * Files people send with chat messages (`agChatAttachments`; the contract is "Attachments" in `shared/conversations`).
+ * The bytes go through the file plugin's repository onto a Drive disk, as the projects plugin stores issue files; Drive
+ * reads and deletes them. Both are asked on each use, so without the file plugin (or Drive) an upload answers 503
+ * `NOT_IMPLEMENTED`.
+ *
+ * An upload is its uploader's alone until it is sent with a message (`attach`, in the message's transaction), which
+ * gives it to the conversation: from then on its owner reads it, and a run of the conversation's agent on that
+ * conversation. Anyone else gets 404, as if it did not exist. Uploads never sent are purged after
+ * `CHAT_ATTACHMENT_ORPHAN_HOURS`.
+ */
+import { Readable } from 'node:stream';
+import type { DatabaseConnection } from '@nocobase/db';
+import { type MessageAttachment } from '../../../shared/conversations.js';
+import { ProtocolError } from '../../kernel/errors.js';
+import type { TxRunner } from '../../kernel/tx.js';
+export declare const CHAT_ATTACHMENTS = "agChatAttachments";
+/** Required by the file repository; nothing is served there (the content route checks who may read). */
+export declare const CHAT_ATTACHMENTS_ACCESS_PATH = "/uploads/ag-chat-attachments";
+export interface ChatAttachmentRecord {
+    readonly id: string;
+    readonly disk: string;
+    readonly key: string;
+    readonly filename: string;
+    readonly ext: string;
+    readonly mimeType: string;
+    readonly size: string | number;
+    readonly uploaderId: string;
+    readonly conversationId: string | null;
+    readonly messageId: string | null;
+    readonly createdAt: Date | string;
+    readonly updatedAt: Date | string;
+}
+/** What a message keeps of each file it was sent with (`agConversationMessages.attachments`). */
+export interface StoredAttachment {
+    readonly id: string;
+    readonly filename: string;
+    readonly ext: string;
+    readonly mimeType: string;
+    readonly size: number;
+}
+/** The file plugin's server repository, as far as uploading goes (`ServerFileRepositoryManager`). */
+export interface ChatFileUploader {
+    repository(collection: string, options: {
+        readonly disk: string;
+        readonly accessPath: string;
+        readonly policy: {
+            readonly read: true;
+            readonly create: {
+                readonly scope: true;
+                readonly defaults: Readonly<Record<string, string>>;
+            };
+            readonly update: false;
+            readonly delete: false;
+        };
+    }): {
+        uploadOne(input: {
+            readonly file: File;
+        }): Promise<{
+            readonly record: {
+                readonly id: string;
+            };
+        }>;
+    };
+}
+/** A Drive manager, as far as reading and deleting go. */
+export interface ChatFileDisks {
+    use(disk: string): {
+        getBytes(key: string): Promise<Uint8Array>;
+        getStream(key: string): Promise<Readable>;
+        delete(key: string): Promise<void>;
+    };
+}
+/** Where a stored file's bytes are. */
+export interface StoredObject {
+    readonly disk: string;
+    readonly key: string;
+}
+/** Where the bytes go; the file plugin and Drive in an application, memory in tests. */
+export interface ChatFileStorage {
+    /** Stores the bytes and inserts the row, attached to nothing; answers its id. */
+    store(file: File, uploaderId: string): Promise<string>;
+    bytes(object: StoredObject): Promise<Uint8Array>;
+    stream(object: StoredObject): Promise<ReadableStream<Uint8Array>>;
+    /** Deletes the bytes; a failure leaves an orphan object, never a broken row, and is only logged. */
+    remove(object: StoredObject): Promise<void>;
+}
+export interface ChatFileStorageDeps {
+    /** Null when the application registers no file plugin. */
+    readonly uploader: () => ChatFileUploader | null;
+    readonly disks: () => ChatFileDisks | null;
+    /** The Drive disk new files go to. */
+    readonly disk: () => string;
+    readonly onError?: (error: unknown) => void;
+}
+/** Storage over the file plugin's repository and Drive, both asked on each use. */
+export declare function createChatFileStorage(deps: ChatFileStorageDeps): ChatFileStorage;
+/** Who reads a file: a person, or a run of an agent acting for them (its subject). */
+export interface AttachmentReader {
+    readonly userId: string;
+    /** Set for a request authenticated by a run token: only files of the conversation the run works on. */
+    readonly run?: {
+        readonly subjectKind: string;
+        readonly subjectId: string;
+    } | null;
+}
+export interface ChatAttachmentContent {
+    readonly attachment: MessageAttachment;
+    readonly body: ReadableStream<Uint8Array>;
+}
+export interface ChatAttachmentService {
+    /** An upload of the person's, attached to nothing yet. */
+    upload(userId: string, file: File): Promise<MessageAttachment>;
+    /** Deletes the person's own upload not sent yet; 404 for anything else. */
+    remove(userId: string, id: string): Promise<void>;
+    /** A file's bytes; 404 unless the reader may read it. */
+    content(reader: AttachmentReader, id: string): Promise<ChatAttachmentContent>;
+    /** The images of `ids` sent in `conversationId`, at most `maxBytes` each, for an online agent's model. */
+    images(conversationId: string, ids: readonly string[], maxBytes: number): Promise<{
+        readonly mediaType: string;
+        readonly data: Uint8Array;
+    }[]>;
+    /** Deletes uploads attached to nothing for `CHAT_ATTACHMENT_ORPHAN_HOURS`; answers how many. */
+    purge(at?: Date): Promise<number>;
+}
+/** What the conversation service uses inside a message's transaction. */
+export interface ChatAttachmentLinks {
+    /**
+     * Gives `ids` (checked: at most `CHAT_ATTACHMENTS_PER_MESSAGE_MAX` distinct ids of `userId`'s uploads attached to
+     * nothing) to the conversation and message. Answers what the message keeps, in the order named; 400
+     * `INVALID_REQUEST` otherwise, and nothing is attached.
+     */
+    attach(conn: DatabaseConnection, userId: string, target: {
+        readonly conversationId: string;
+        readonly messageId: string;
+    }, ids: readonly string[]): Promise<StoredAttachment[]>;
+}
+export interface ChatAttachmentDeps {
+    readonly tx: TxRunner;
+    readonly storage: ChatFileStorage;
+    /** The application's public base path (`/app`, or empty), for the content URLs. */
+    readonly basePath: () => string;
+    readonly now?: () => Date;
+}
+/** The content route of a file, with the application's base path. */
+export declare function chatAttachmentUrl(basePath: string, id: string): string;
+/** A file as the API answers it. */
+export declare function attachmentView(basePath: string, file: StoredAttachment): MessageAttachment;
+/** What a message stored as its files; anything malformed is left out. */
+export declare function storedAttachments(value: unknown): StoredAttachment[];
+/** The `attachmentIds` of a request: absent is none; otherwise at most the maximum distinct non-empty strings. */
+export declare function readAttachmentIds(value: unknown): string[];
+/** 413 `UPLOAD_TOO_LARGE`: a file over `CHAT_ATTACHMENT_SIZE_MAX`. */
+export declare function fileTooLarge(): ProtocolError;
+export declare function createChatAttachments(deps: ChatAttachmentDeps): {
+    readonly service: ChatAttachmentService;
+    readonly links: ChatAttachmentLinks;
+};
+//# sourceMappingURL=attachments.d.ts.map

package/dist/server/core/conversations/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../../../server/core/conversations/attachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,KAAK,EAAE,kBAAkB,EAAc,MAAM,cAAc,CAAC;AAEnE,OAAO,EAML,KAAK,iBAAiB,EACvB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAIL,aAAa,EACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,gBAAgB,sBAAsB,CAAC;AAEpD,wGAAwG;AACxG,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAK3E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;CACnC;AAED,iGAAiG;AACjG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,qGAAqG;AACrG,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;QACP,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;YACpB,QAAQ,CAAC,MAAM,EAAE;gBACf,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;gBACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;aACrD,CAAC;YACF,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;YACvB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;SACxB,CAAC;KACH,GACA;QACD,SAAS,CAAC,KAAK,EAAE;YAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;SAAE,GAAG,OAAO,CAAC;YACjD,QAAQ,CAAC,MAAM,EAAE;gBAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;aAAE,CAAC;SAC1C,CAAC,CAAC;KACJ,CAAC;CACH;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG;QACjB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACpC,CAAC;CACH;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IAClE,oGAAoG;IACpG,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,MAAM,gBAAgB,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,aAAa,GAAG,IAAI,CAAC;IAC3C,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC7C;AASD,mFAAmF;AACnF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,mBAAmB,GACxB,eAAe,CAqCjB;AAED,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uGAAuG;IACvG,QAAQ,CAAC,GAAG,CAAC,EAAE;QACb,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/D,2EAA2E;IAC3E,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,yDAAyD;IACzD,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC9E,0GAA0G;IAC1G,MAAM,CACJ,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,SAAS,MAAM,EAAE,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC,CAAC;IACxE,gGAAgG;IAChG,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC;AAED,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,MAAM,CACJ,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;QAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EACvE,GAAG,EAAE,SAAS,MAAM,EAAE,GACrB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAgCD,qEAAqE;AACrE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,oCAAoC;AACpC,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,gBAAgB,GACrB,iBAAiB,CAYnB;AAYD,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,EAAE,CA2BpE;AAED,kHAAkH;AAClH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAgB1D;AAED,sEAAsE;AACtE,wBAAgB,YAAY,IAAI,aAAa,CAM5C;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG;IAC/D,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC,CAuIA"}