@open-everywhere/provider-github 0.0.0-stage → 0.1.0

package/dist/agent/channels/github-supervisor.d.ts

@@ -0,0 +1,308 @@
+import { shouldRotate, type SeatAdmissionFn, type SeatCatchUpRequest, type SeatCatchUpResult, type NormalizedWake, type WakeEngagementTier, type UnifiedWindowWake, type WakeTrust, type IngestedChatMessage, type WakeMessageInput, type SessionTailWakeRow } from "@open-everywhere/core/agent/adapter-api.js";
+import { type OpenEverywhereGitHubAuth } from "./github-identity.js";
+/** The reserved pseudo-thread sentinel for a supervisor generation (mirrors Slack's/Notion's). */
+export declare function githubSupervisorSentinel(generation: number): string;
+/** The reserved continuation token for a repo's supervisor session at a given generation:
+ *  `github:<owner>/<repo>:oe-sup:g<generation>`. A custom continuation token eve never
+ *  re-anchors, carrying the `:oe-sup:g` infix hooks/spend.ts + model/routing.ts key on. */
+export declare function githubSupervisorToken(owner: string, repo: string, generation: number): string;
+/** How the ambient leg treats one comment. By default a bot @mention is owned by eve's NATIVE
+ *  githubChannel path (github.ts onComment), so the ambient leg `drop`s it and everything it keeps
+ *  is `channel-watch` (judged by the repo supervisor). The `direct` value exists ONLY for the
+ *  SINGLE-WINDOW path (github.ts passes `treatMentionAsDirect` for the GRAIN alone — the repo's
+ *  domain has crossSurfaceWindow on — and passes the operator VOUCH beside it as the privacy floor,
+ *  never the repo-private flag; see step 4 below): there the native mention session is suppressed,
+ *  so the ambient leg keeps the @mention and routes it to the unified window as an ADDRESSED wake
+ *  the shared-context supervisor answers. */
+export type GitHubAmbientAddressing = "direct" | "channel-watch" | "drop";
+export interface GitHubAmbientClassification {
+    readonly addressing: GitHubAmbientAddressing;
+    readonly reason: string;
+}
+/** The comment facts the classifier consumes — a narrow projection of the issue_comment
+ *  webhook payload (the route leg extracts it; tests build it directly). */
+export interface GitHubAmbientComment {
+    readonly body?: string;
+    readonly authorLogin?: string;
+    /** "User" | "Bot" | "Organization" — GitHub's `comment.user.type`. */
+    readonly authorType?: string;
+    /** Repo privacy, positively known (payload `repository.private`); absent → unknown. DEMOTED to
+     *  a logged defense-in-depth SIGNAL: it no longer gates the cross-surface window (the operator
+     *  vouch does) but still enables the per-repo ambient path (a private repo is invite-only). */
+    readonly repoPrivate?: boolean;
+}
+/**
+ * Decide how the ambient leg should treat one issue/PR-timeline comment, in cost order:
+ *  1. NO bot slug configured ⇒ DROP (fail closed) — self-identity is a precondition for the
+ *     loop guard (the same hardening as Notion's unresolved-botUserId drop).
+ *  2. BOT-authored (`user.type === "Bot"`) ⇒ DROP — covers our own `<slug>[bot]` replies AND
+ *     every other bot (prevents bot-to-bot loops).
+ *  3. Our own login (`<slug>[bot]`, belt-and-braces under a mislabelled type) ⇒ DROP.
+ *  4. @mentions the bot (githubBotMentioned — the native path's EXACT gate):
+ *       • DEFAULT (per-repo) ⇒ DROP: the native githubChannel session owns mentions; the two legs
+ *         partition, never overlap.
+ *       • SINGLE-WINDOW (`treatMentionAsDirect`) on a VOUCHED repo ⇒ `direct`: github.ts
+ *         suppresses the native session for exactly this case, so the ambient leg keeps the mention
+ *         and the unified window answers it as an addressed wake. Still DROP on an un-vouched repo —
+ *         the native path is NOT suppressed there (the gate on both sides is
+ *         `singleWindow && vouched`, the OPERATOR VOUCH — NOT the repo-private flag), so letting
+ *         ambient keep it would double-handle.
+ *  5. Repo neither positively private NOR operator-vouched ⇒ DROP (fail closed) — drive-by public
+ *     repos never ambient-wake (strangers must not buy judged turns; see the header).
+ *  6. otherwise ⇒ channel-watch (judged by the standing repo supervisor).
+ *
+ * `opts.vouched` is the OPERATOR-VOUCH fact the caller resolves (github.ts: isVouchedInternal on
+ * `github/<owner>` OR `github/<owner>/<repo>`, or OE_TRUST=internal). It is the SOLE floor for the
+ * cross-surface WINDOW (step 4's `direct` divert) — the repo's own `repoPrivate` flag is a logged
+ * defense-in-depth SIGNAL, never a window gate. `repoPrivate` still enables the per-repo ambient
+ * path (step 5): a private repo is invite-only, so it ambient-wakes even un-vouched; the vouch
+ * WIDENS ambient to a vouched public repo, and never narrows an already-private one.
+ */
+export declare function classifyGitHubAmbientComment(c: GitHubAmbientComment, botSlug: string | undefined, opts?: {
+    treatMentionAsDirect?: boolean;
+    vouched?: boolean;
+}): GitHubAmbientClassification;
+export interface GitHubSupervisorWakeInput {
+    readonly owner: string;
+    readonly repo: string;
+    /** The issue (or PR timeline) number the comment landed on — the reply anchor. */
+    readonly issueNumber: number;
+    /** The issue/PR title (untrusted, payload-supplied) — rendered as a wrapped context line so
+     *  the judge knows WHAT conversation the comment belongs to. Absent ⇒ no context block. */
+    readonly issueTitle?: string;
+    /**
+     * THE DOMAIN'S ADMISSION POLICY over this wake's CONTEXT-LINE slot (OPE-1800), resolved by NAME by
+     * the caller (`seatAdmissionFor`, channels/seat-catch-up.ts) so this core stays config-free —
+     * exactly as `engagementTier` is. It judges the ONE line the slot holds: the issue/PR title.
+     * 🔴 THE SAME POLICY THE CATCH-UP READ ALREADY APPLIES, over the seat's OTHER read, off the SAME
+     * channel key. Since OPE-1857 the catch-up half does not pass a policy at all — `seatCatchUp`
+     * resolves the domain's own from `req.channelKey`, which is the key this caller spells here — so
+     * the two reads take one rule per domain from one resolver. The docs row promises that, and until
+     * OPE-1800 only the catch-up half delivered it.
+     * 🔴 THE TITLE LINE IS UNGRADED AND FLOORS AT `unauth`, by construction: this surface has no
+     * synchronous roster probe for the person who OPENED the issue, and the wake input carries no
+     * identity for them — the same reason `deps.catchUp` is wired with no `trustFor`. So a
+     * `members-only` domain reads the comment without the title, which is the fail-closed answer the
+     * seam's own header states; `wide` (the default) and `wide-with-bots` admit it unchanged.
+     * Absent ⇒ NO admission runs and the slot is byte-identical to the pre-OPE-1800 wake, which is
+     * what keeps an older test double compiling (the posture `catchUp` and `recordWake` take).
+     */
+    readonly admit?: SeatAdmissionFn;
+    readonly trigger: {
+        readonly id: string;
+        readonly authorLogin?: string;
+        readonly sentAt: string;
+        readonly text: string;
+        /**
+         * Resolved per-wake trust tier (identity/wake-trust.ts — the audit-wedge F3 assignment). The
+         * live dispatch (github.ts ambientDelivery) resolves it off the binding gate + admin rosters.
+         *
+         * 🔴 REQUIRED, NOT OPTIONAL (OPE-596) — see LinearSupervisorWakeInput.trigger.trust for the
+         * whole reason. An upward default is fail-OPEN, and since OPE-577 the tier decides the
+         * `<untrusted_external_data>` fence. A caller that cannot resolve a tier states the fail-closed
+         * one itself: `relay` for a machine author, `unauth` for an unvouchable human.
+         */
+        readonly trust: WakeTrust;
+    };
+    /** Engagement calibration (memory/domain.ts engagementTierFor — GitHub platform-defaults to
+     *  `reserved`). Resolved by the caller; this core stays config-free. */
+    readonly engagementTier?: WakeEngagementTier;
+    /** The OUTGOING generation's recorded TAIL (OPE-794), rendered as this first wake's backscroll.
+     *  Only a FRESH generation's first wake carries one; empty or omitted otherwise. */
+    readonly tail?: readonly WakeMessageInput[];
+    /** This surface could not read its own conversation since the seat's last wake (core
+     *  channels/seat-catch-up.ts). Rendered as a trusted `<system-note>`; unset ⇒ no note. */
+    readonly catchUpUnavailable?: string;
+    /** Host-minted wake id (rendered `<wake wake-id=…>`) — SINGLE-WINDOW path only (channels/
+     *  unified-window.ts): the id the model echoes to `reply` so the host resolves this wake's
+     *  origin from the map. Unset ⇒ byte-identical (no attribute) — mirrors SlackWakeOpts.wakeId. */
+    readonly wakeId?: string;
+    /** SINGLE-WINDOW addressed @mention: render
+     *  the wake as `direct-mention` — the full judged envelope (so the `wake-id` survives for the reply
+     *  tool, which is the ONLY reply route on the unified channel) but with the ADDRESSED preamble that
+     *  tells the supervisor it was @mentioned and owes a reply, instead of the silence-biased
+     *  channel-watch preamble. Unset/false ⇒ the channel-watch ambient wake, byte-identical to today.
+     *  Only github.ts's single-window direct path sets it (the classifier returned `direct`). */
+    readonly directMention?: boolean;
+    /**
+     * This issue/PR carries an ENGAGED registry row that reaches the seat — the seam's `deliver`
+     * verdict floored on `githubEngagedFollowUpReach` (github.ts `engagedFollowUp`). A JUDGED
+     * wake then states `follow-up="thread-engaged"`, the envelope's own words for "you are already in
+     * this conversation and `stand_down` is how you leave". Slack, Linear and Notion state the same
+     * fact through the same shared helper (channels/engaged-wake.ts).
+     *
+     * 🔴 THE AUDIT ROW ALREADY SAID IT AND THE ENVELOPE DID NOT (OPE-2093). `github.dispatched` reads
+     * `addressing=thread-follow` off this verdict (OPE-1752) while the seat read bare ambient
+     * activity, so it declined an engaged follow-up with `no_reply` (ship #237, J-ENGAGED-github).
+     * It does NOT touch `addressing`: an @mention stays `direct-mention` and carries no follow-up
+     * attribute, because it is owed an answer whatever the enrolment says. Unset/false ⇒ no attribute.
+     */
+    readonly threadEngaged?: boolean;
+}
+/**
+ * Build the NormalizedWake for one repo-supervisor turn: platform "github", containerNoun
+ * "repo", locus.channel = `owner/repo`, locus.thread = `#<issueNumber>` (the conversation the
+ * comment belongs to), the issue title as an untrusted-wrapped context line, and the comment as
+ * the trigger. `channel-watch` (judged) by default; `direct-mention` (addressed, enveloped) when
+ * `directMention` is set — the SINGLE-WINDOW @mention path, which keeps the wake-id envelope but
+ * swaps the silence-biased watch preamble for the addressed one (see the field doc). renderWake
+ * then emits the exact `{message, context}` every OE dispatch sends — the SAME renderer
+ * Slack/Notion use, with NO platform branch.
+ */
+export declare function buildGitHubSupervisorWake(input: GitHubSupervisorWakeInput): NormalizedWake;
+/** The narrow projection of an `issue_comment` webhook payload the ambient leg consumes —
+ *  classifier facts + wake parts + identity facts, extracted defensively (GitHub payloads are
+ *  external input; anything missing/odd → the fact stays undefined and the consumers fail
+ *  closed). Review-thread inline comments (`pull_request_review_comment`) are deliberately NOT
+ *  ambient v1 — a different reply endpoint/threading model; the extractor returns null. */
+export interface GitHubAmbientEvent {
+    readonly owner: string;
+    readonly repo: string;
+    readonly repositoryFullName?: string;
+    readonly repositoryId?: number;
+    readonly repoPrivate?: boolean;
+    readonly installationId?: number;
+    readonly issueNumber: number;
+    readonly issueTitle?: string;
+    /** True when the timeline comment is on a PR (issue_comment fires for both). */
+    readonly isPullRequest: boolean;
+    readonly comment: GitHubAmbientComment & {
+        readonly id?: string;
+        readonly createdAt?: string;
+        readonly authorId?: number;
+        readonly authorAssociation?: string;
+    };
+}
+/** The taint-clean identity fields on one admitted ambient dispatch audit row. */
+export declare function githubDispatchAuditDetail(input: {
+    readonly addressing: string;
+    readonly issueNumber: number;
+    readonly commentId?: string;
+    readonly wakeId?: string;
+    readonly repoPrivate: boolean;
+    readonly vouched: boolean;
+}): Readonly<Record<string, unknown>>;
+/**
+ * Extract the ambient-leg facts from one webhook delivery, or null when the delivery is not an
+ * ambient candidate at all: only `issue_comment` + `action: "created"` qualifies (edits/deletes
+ * are not conversational triggers v1; review-thread comments are out of scope v1 — see
+ * {@link GitHubAmbientEvent}). Null is "not for this leg", NOT an error — the native mention
+ * path and the routine fan-out see every delivery regardless.
+ */
+export declare function extractGitHubAmbientEvent(eventType: string, payload: Record<string, unknown>): GitHubAmbientEvent | null;
+/** The live supervisor session pointer for a repo, as the deps report it (mirrors
+ *  NotionSupervisorSession). `freshGeneration` = brand-new OR just-rotated. */
+export interface GitHubSupervisorSession {
+    readonly token: string;
+    readonly generation: number;
+    readonly freshGeneration: boolean;
+    /** ISO-8601 of the most recent wake this generation delivered (the registry row's `lastWakeAt`),
+     *  or null on a freshly minted/rotated generation. The lower bound of the since-last-wake catch-up
+     *  read (OPE-1695 (b), brought to this surface by OPE-1726); absent ⇒ no catch-up. */
+    readonly lastWakeAt?: string | null;
+    /** The OUTGOING generation's recorded tail, oldest-first — empty unless this is a fresh
+     *  generation's first wake (OPE-794). */
+    readonly tail: readonly WakeMessageInput[];
+}
+/** Deps for {@link handleGitHubSupervisorDispatch} — mirror NotionSupervisorDeps, injected so
+ *  the core is unit-testable over a mock store + a capture `wake`. The eve-typed session STATE
+ *  is built by the wiring (github.ts), not here — this core stays eve-free. */
+export interface GitHubSupervisorDeps {
+    /** Create-or-fetch the live supervisor session for this repo's surfaceKey: mint generation 1
+     *  on first sighting, rotate to generation+1 when {@link shouldRotate} says it aged out, else
+     *  return the current generation. */
+    readonly getOrCreateSession: (surfaceKey: string, owner: string, repo: string, atIso: string) => Promise<GitHubSupervisorSession>;
+    /** Record one wake on the current generation (lastWakeAt/turnCount). Best-effort. */
+    readonly touchSession?: (surfaceKey: string, atIso: string) => Promise<void>;
+    /**
+     * Record this delivered wake onto the LIVE generation's TAIL ring (OPE-794). Injected because the
+     * entry has to be filed under an ORG and a registry key, and this core deliberately holds neither
+     * — the live wiring does. Absent (a unit test) ⇒ nothing is recorded and the dispatch is
+     * unchanged, which is the same posture `touchSession` takes.
+     */
+    readonly recordWake?: (entry: SessionTailWakeRow, token: string, surfaceKey: string) => Promise<void>;
+    /** Start/continue the supervisor session under its reserved token, posting the rendered wake.
+     *  The wiring closes over the channel `send` and builds the eve-typed supervisor state.
+     *  `window` is present ONLY on the SINGLE-WINDOW path (dispatch input carried it): the wiring
+     *  then DIVERTS the wake through eve's cross-channel `receive` into the synthetic `unified`
+     *  channel (github.ts). Absent ⇒ this channel's own send, byte-identical. */
+    readonly wake: (input: {
+        token: string;
+        auth: OpenEverywhereGitHubAuth;
+        message: string;
+        context: readonly string[];
+        window?: UnifiedWindowWake;
+    }) => Promise<void>;
+    /**
+     * THE SINCE-LAST-WAKE CATCH-UP, through the ONE shared path every surface takes
+     * (channels/seat-catch-up.ts `seatCatchUp`). Optional so older test doubles keep compiling
+     * (absent ⇒ no catch-up, the pre-OPE-1726 behaviour); fail-soft by construction.
+     */
+    readonly catchUp?: (req: SeatCatchUpRequest) => Promise<SeatCatchUpResult>;
+    /** Clock seam (defaults to the real clock). */
+    readonly now?: () => string;
+}
+/** Everything github.ts hands the supervisor dispatch: the wake parts + identity/session facts.
+ *  Built by the route leg AFTER the ambient gate + classifier kept the comment. */
+export interface GitHubSupervisorDispatch {
+    readonly surfaceKey: string;
+    readonly owner: string;
+    readonly repo: string;
+    readonly issueNumber: number;
+    readonly issueTitle?: string;
+    readonly auth: OpenEverywhereGitHubAuth;
+    /**
+     * THE CHAT NON-MEMBER TAINT CARRIAGE input (OPE-494 / OPE-466): the author facts for every
+     * message whose bytes enter this wake's context. GitHub sends one comment per wake, so the route
+     * leg passes exactly one entry — `githubAuthorFacts` over the free `author_association`.
+     *
+     * 🔴 REQUIRED, NOT OPTIONAL, and for the reason `stampNonMemberChatAuth` makes its own `room`
+     * argument required: an optional field lets a new leg silently lose the author question, and a
+     * carriage that is absent looks identical to a carriage that answered "member". A leg with
+     * genuinely nothing to say passes `[]` and says so on purpose.
+     */
+    readonly ingested: readonly IngestedChatMessage[];
+    readonly trigger: GitHubSupervisorWakeInput["trigger"];
+    /**
+     * The domain's admission policy for this surface's context-line slot, resolved by the route leg
+     * off the SAME channel key `deps.catchUp` resolves its own from. See
+     * {@link GitHubSupervisorWakeInput.admit}.
+     * 🔴 REQUIRED, NOT OPTIONAL, and for the reason `ingested` above is: an optional field lets a
+     * SECOND route leg compile with the slot unpoliced, and an absent policy looks identical to a
+     * policy that admitted. The builder's own `admit` stays optional — that keeps this core
+     * config-free for a pure caller — so `required here, optional there` is the whole guard.
+     */
+    readonly admit: SeatAdmissionFn;
+    /** Engagement calibration tier (resolved by the route leg; fail-soft neutral). */
+    readonly engagementTier?: WakeEngagementTier;
+    /** UNIFIED cross-surface grain resolved by the route leg (supervisorGrainFor, fail-soft false) —
+     *  stamps the wake's platform address + P5 disclosure. Unset ⇒ byte-identical per-repo wake. */
+    readonly unified?: boolean;
+    /** SINGLE-WINDOW wake plumbing, minted by the route leg when the grain says `singleWindow`
+     *  (channels/unified-window.ts): the wakeId is rendered into the envelope by this core; the
+     *  whole object is passed through to deps.wake, whose wiring registers the map entry and
+     *  diverts into the unified channel. Unset ⇒ byte-identical. */
+    readonly window?: UnifiedWindowWake;
+    /** SINGLE-WINDOW addressed @mention (the classifier returned `direct`): render the wake as the
+     *  addressed `direct-mention` variant (envelope kept, watch-preamble swapped for the addressed
+     *  one) so the shared-context supervisor answers it. Unset ⇒ the channel-watch ambient wake,
+     *  byte-identical. See {@link GitHubSupervisorWakeInput.directMention}. */
+    readonly directMention?: boolean;
+    /** The seam's enrolment verdict for this issue/PR (github.ts `admission.engagedFollowUp`) — the
+     *  SAME value the `github.dispatched` row promotes to `thread-follow`. Rendered as
+     *  `follow-up="thread-engaged"` on a judged wake. See {@link GitHubSupervisorWakeInput.threadEngaged}. */
+    readonly threadEngaged?: boolean;
+}
+/**
+ * Route one kept comment to the repo supervisor: get-or-create the session, build + render the
+ * wake for that generation, and deliver it.
+ *
+ * A DELIVERY failure (the send itself) propagates to the caller's catch. A session that dies at
+ * TURN time does not: nothing here observes it, so the trigger is lost SILENTLY, and no reactive
+ * arm can exist (OPE-174 removed the inert one; channels/session-resume.ts holds the measurement).
+ * The working remedy is PRE-DISPATCH — the live `getOrCreateSession` claims the OPE-599
+ * runtime-change rotation before this call and hands back a session the running eve build can read.
+ */
+export declare function handleGitHubSupervisorDispatch(d: GitHubSupervisorDispatch, deps: GitHubSupervisorDeps): Promise<void>;
+export { shouldRotate };
+//# sourceMappingURL=github-supervisor.d.ts.map

package/dist/agent/channels/github-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-supervisor.d.ts","sourceRoot":"","sources":["../../../agent/channels/github-supervisor.ts"],"names":[],"mappings":"AAqCA,OAAO,EAGL,YAAY,EAMZ,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAEvB,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EAErB,KAAK,kBAAkB,EACxB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAsB,KAAK,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAgBzF,kGAAkG;AAClG,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;2FAE2F;AAC3F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7F;AAgBD;;;;;;;6CAO6C;AAC7C,MAAM,MAAM,uBAAuB,GAAG,QAAQ,GAAG,eAAe,GAAG,MAAM,CAAC;AAE1E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;4EAC4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;mGAE+F;IAC/F,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,4BAA4B,CAC1C,CAAC,EAAE,oBAAoB,EACvB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,CAAC,EAAE;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3D,2BAA2B,CA2B7B;AAID,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;+FAC2F;IAC3F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB;;;;;;;;WAQG;QACH,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;KAC3B,CAAC;IACF;4EACwE;IACxE,QAAQ,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IAC7C;wFACoF;IACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C;8FAC0F;IAC1F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAKrC;;qGAEiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;iGAK6F;IAC7F,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB,GAAG,cAAc,CAsD1F;AAID;;;;2FAI2F;AAC3F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QACvC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;KACrC,CAAC;CACH;AAED,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CASpC;AAYD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,kBAAkB,GAAG,IAAI,CAkCxH;AAID;+EAC+E;AAC/E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;0FAEsF;IACtF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;6CACyC;IACzC,QAAQ,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC5C;AAED;;+EAE+E;AAC/E,MAAM,WAAW,oBAAoB;IACnC;;yCAEqC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAClI,qFAAqF;IACrF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtG;;;;iFAI6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,wBAAwB,CAAC;QAC/B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,EAAE,iBAAiB,CAAC;KAC5B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3E,+CAA+C;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED;mFACmF;AACnF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACvD;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,kFAAkF;IAClF,QAAQ,CAAC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IAC7C;oGACgG;IAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;;oEAGgE;IAChE,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC;;;+EAG2E;IAC3E,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;8GAE0G;IAC1G,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoF3H;AAID,OAAO,EAAE,YAAY,EAAE,CAAC"}