@openrig/cli 0.5.4 → 0.5.6

package/daemon/dist/domain/gateway/slack/slack-subsystem.js

@@ -0,0 +1,473 @@
+// S10 — the SLACK gateway wiring: composes the in-process wire (shipped dispatcher + durable
+// buffer), the chat.postMessage delivery path, the outbound queue-poll driver, and the Socket
+// Mode inbound service into ONE GatewayWire the subsystem activates at daemon boot.
+//
+// Configuration honesty: an unconfigured/disabled connector yields an INERT wire — delivery
+// refuses with a named class, no ops advertised, no drivers started — never a throw (boot
+// proceeds; `rig slack status` names what is missing) and never a silent pretend-active
+// delivery path.
+//
+// Durable-state continuity through the cutover: the SAME slice-11 state files carry over
+// (slack-outbound-seen.jsonl, slack-inbound-seen.jsonl, slack-inbound-deadletter.jsonl), so
+// the relay's history IS the subsystem's history — enabling the subsystem replays nothing the
+// relay already delivered (the enable-time backlog rule survives the cutover by construction).
+import path from "node:path";
+import fs from "node:fs";
+import { buildInProcessWire } from "../gateway-subsystem.js";
+import { downloadPrivateFile } from "./slack-api.js";
+import { loadConfig } from "./config.js";
+import { resolveSecret } from "./secrets.js";
+import { SeenStore, DeadLetterStore } from "./state-store.js";
+import { makeQueuePorts } from "./queue-access.js";
+import { SlackOutboundDriver, OUTBOUND_OP } from "./outbound-driver.js";
+import { subsystemSlackDeliver } from "./slack-delivery.js";
+import { InboundRouter } from "./inbound.js";
+import { makeInboundSenderResolver } from "./inbound-admission.js";
+import { ThreadSeatMap, formatPostedStamp } from "./thread-seat-map.js";
+import { makeThreadRouteResolver } from "./thread-routing.js";
+import { startSocketInbound } from "./socket-inbound.js";
+import { loadHumanRegistry, resolveSlackHandle } from "../human-registry.js";
+import { ownerNotificationLevelAtLeast } from "../../queue-transition-log.js";
+// OPR.0.5.6.1 — the delivery rules engine: ONE decision per message replaces
+// the two dial-reads (the S14 default-decision stub). The legacy dial path
+// survives ONLY as the stated degrade when the destination is not a
+// registered human (no prefs -> no engine input).
+import { decideDelivery, resolveAvailability, isEscalationClass, formatDeliveryTermination, DELIVERY_TERMINATION_PREFIX, } from "../delivery-rules-engine.js";
+import { armDeliveryDeferral } from "../../policies/delivery-deferral.js";
+import { WatchdogJobsRepository } from "../../watchdog-jobs-repository.js";
+const SECRET_BOT = "SLACK_BOT_TOKEN";
+const SECRET_APP = "SLACK_APP_TOKEN";
+/**
+ * OPR.0.5.6.2 — the inbound file port: Slack `url_private` → authenticated
+ * download → workspace-local media file → LOCAL path for the reply row.
+ * Slack owns nothing (design §2): the stored file is OUR copy of the human's
+ * contribution to OUR work record; no Slack URL and no token ever leaves this
+ * function toward a row. Failure is per-file and NAMED — a failed transfer
+ * yields `{ name, error }`, never an exception that could cost the message.
+ *
+ * Safe-path discipline: filenames sanitize to a bounded [A-Za-z0-9._-] basename
+ * prefixed with the event ts + index (unique per event), and the resolved path
+ * is verified to stay inside `mediaDir` before any write.
+ */
+/** R1 F1 — the anchored Slack-host verdict: https + URL-parsed hostname that is
+ *  exactly `slack.com` or ends with `.slack.com`. Never a substring match. */
+function isSlackHost(url) {
+    try {
+        const u = new URL(url);
+        return u.protocol === "https:" && (u.hostname === "slack.com" || u.hostname.endsWith(".slack.com"));
+    }
+    catch {
+        return false;
+    }
+}
+export function makeInboundFilePort(opts) {
+    const log = opts.log ?? (() => { });
+    const mkdirp = opts.mkdirp ?? ((dir) => { fs.mkdirSync(dir, { recursive: true }); });
+    const writeFile = opts.writeFile ?? ((p, bytes) => { fs.writeFileSync(p, bytes); });
+    return {
+        async transfer(files, eventTs) {
+            const stored = [];
+            const failed = [];
+            mkdirp(opts.mediaDir);
+            for (let i = 0; i < files.length; i++) {
+                const meta = (files[i] ?? {});
+                const name = String(meta.name ?? meta.id ?? `file-${i + 1}`);
+                const url = meta.url_private;
+                // R1 F1: ANCHORED host check — URL-parsed hostname, exact `slack.com`
+                // or a dot-suffix subdomain. A substring/regex match admits lookalike
+                // domains (evilslack.com) and would send the Bearer token to them.
+                if (!url || !isSlackHost(url)) {
+                    failed.push({ name, error: "missing or non-Slack url_private" });
+                    continue;
+                }
+                const dl = await downloadPrivateFile(url, opts.token, opts.fetchImpl ?? fetch, 30_000, opts.maxBytes);
+                if (!dl.ok) {
+                    log(`inbound file transfer FAILED name=${name} ts=${eventTs}: ${dl.error}`);
+                    failed.push({ name, error: dl.error });
+                    continue;
+                }
+                const safeBase = path.basename(name).replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 80) || `file-${i + 1}`;
+                const localPath = path.join(opts.mediaDir, `${eventTs.replace(/[^0-9.]/g, "")}-${i + 1}-${safeBase}`);
+                if (!path.resolve(localPath).startsWith(path.resolve(opts.mediaDir) + path.sep)) {
+                    failed.push({ name, error: "unsafe path refused" });
+                    continue;
+                }
+                try {
+                    writeFile(localPath, dl.bytes);
+                }
+                catch (e) {
+                    failed.push({ name, error: `local write failed: ${e.message}` });
+                    continue;
+                }
+                stored.push({ name, localPath, mimetype: meta.mimetype, bytes: dl.bytes.byteLength });
+            }
+            return { stored, failed };
+        },
+    };
+}
+function stateDir(home) {
+    return path.join(home, "state");
+}
+/** Build the production Slack gateway wire from config + secrets. Never throws on a missing
+ *  configuration — that is an honest inert wire, not a boot failure. */
+export function buildSlackGatewayWire(opts) {
+    const log = opts.log ?? (() => { });
+    const cfg = loadConfig(opts.home);
+    const envFile = cfg.secretsEnvFile ?? undefined;
+    const bot = resolveSecret(SECRET_BOT, { envFile });
+    const app = resolveSecret(SECRET_APP, { envFile });
+    const outboundReady = cfg.enabled && bot !== null && cfg.channel !== null;
+    const inboundReady = cfg.enabled && app !== null;
+    if (!outboundReady && !inboundReady) {
+        const missing = !cfg.enabled ? "connector disabled (rig slack enable)" : !bot ? "SLACK_BOT_TOKEN unresolved" : "channel unconfigured";
+        log(`slack delivery not configured (${missing}) — wire is inert; dispatches would be refused honestly`);
+        return buildInProcessWire({
+            home: opts.home,
+            ops: [],
+            deliver: async () => ({ ok: false, class: "slack-not-configured", detail: missing }),
+            log,
+        });
+    }
+    const registrySurface = opts.registry ?? { loadHumanRegistry, resolveSlackHandle };
+    const ports = makeQueuePorts(opts.queueRepo, {
+        loadHumanRegistry: () => registrySurface.loadHumanRegistry(opts.home),
+    });
+    // OPR.0.5.6.1 — the one engine consult (AM-F5: the gateway consults the
+    // engine BEFORE dispatch). Null = destination is not a registered human;
+    // the caller keeps the pre-engine dial behavior (stated degrade).
+    const decideForPayload = (p) => {
+        const local = (p.destinationSession ?? "").split("@")[0] ?? "";
+        if (!local)
+            return null;
+        const reg = registrySurface.loadHumanRegistry(opts.home);
+        if (!reg.ok)
+            return null;
+        const human = reg.entities.find((e) => e.entityId === local);
+        if (!human)
+            return null;
+        return decideDelivery({
+            level: p.ownerNotificationLevel ?? null,
+            escalation: isEscalationClass(p.tags),
+            human: {
+                entityId: human.entityId,
+                deliveryClass: human.prefs.deliveryClass,
+                availability: resolveAvailability(human.prefs),
+            },
+            dials: {
+                minimumLevelThatPosts: cfg.minimumLevelThatPosts,
+                minimumLevelThatInterrupts: cfg.minimumLevelThatInterrupts,
+            },
+        });
+    };
+    const outboundSeen = new SeenStore(path.join(stateDir(opts.home), "slack-outbound-seen.jsonl"));
+    const delivered = new SeenStore(path.join(stateDir(opts.home), "slack-delivered-decisions.jsonl"));
+    const attempted = new SeenStore(path.join(stateDir(opts.home), "slack-attempted-decisions.jsonl"));
+    // S10 thread routing — the map shares the daemon DB (queue rows carry the rebuild stamps).
+    const threadMap = new ThreadSeatMap(opts.queueRepo.db);
+    // Late-bound so deliver can release the driver's in-flight guard (built after the wire).
+    let releaseRef = () => { };
+    const deliver = outboundReady
+        ? subsystemSlackDeliver({
+            botToken: bot,
+            channel: cfg.channel,
+            sourceLabel: cfg.sourceLabel,
+            fetchImpl: opts.fetchImpl,
+            delivered,
+            attempted,
+            outboundSeen,
+            release: (q) => releaseRef(q),
+            // Thread reuse: an open (human, seat) conversation threads; otherwise a new root.
+            // For an outbound alert, human = the destination seat-ref, seat = the source seat.
+            resolveThreadTs: (p) => threadMap.resolveOpenForPair(p.destinationSession ?? "", p.sourceSession ?? "")?.threadTs,
+            // S14: posting and interruption are separate threshold dials over one vocabulary.
+            resolveMentionUserId: (p) => {
+                // OPR.0.5.6.1: the engine's decided loudness is the mention rule for
+                // registered humans; the dial pair remains only for the null degrade.
+                if (p.deliveryDigestPost)
+                    return undefined; // notify-class aggregate, never a mention
+                const fire = p.deliveryDeferralFire === true;
+                const decision = fire ? null : decideForPayload(p);
+                const eligible = fire
+                    ? true // the deferred interrupt mentions at fire time — that IS the deferral's promise
+                    : decision
+                        ? decision.mention
+                        : Boolean(p.ownerNotificationLevel && ownerNotificationLevelAtLeast(p.ownerNotificationLevel, cfg.minimumLevelThatInterrupts));
+                if (!eligible)
+                    return undefined;
+                const local = (p.destinationSession ?? "").split("@")[0] ?? "";
+                if (!local)
+                    return undefined;
+                const reg = registrySurface.loadHumanRegistry(opts.home);
+                if (!reg.ok)
+                    return undefined;
+                for (const e of reg.entities) {
+                    if (e.entityId !== local)
+                        continue;
+                    for (const b of e.connectorBindings) {
+                        if (b.kind === "slack" && b.handle)
+                            return b.handle;
+                    }
+                }
+                return undefined;
+            },
+            onPostedRoot: (p, ts) => {
+                const human = p.destinationSession ?? "";
+                const seat = p.sourceSession ?? "";
+                threadMap.open({ threadTs: ts, channel: cfg.channel, human, seat, conversationId: p.qitemId });
+                // The REBUILD stamp: the queue row is the durable source the map re-derives from.
+                try {
+                    opts.queueRepo.update({
+                        qitemId: p.qitemId,
+                        actorSession: "daemon@kernel",
+                        transitionNote: formatPostedStamp({ threadTs: ts, messageTs: ts, channel: cfg.channel, human, seat, conversationId: p.qitemId }),
+                    });
+                }
+                catch (e) {
+                    // Stamp failure degrades REBUILDABILITY, not routing — loud, never fatal to delivery.
+                    log(`thread stamp failed for ${p.qitemId}: ${e.message}`);
+                }
+            },
+            // OPR.0.5.6.14 — a failed post writes the transport-failed ledger
+            // transition so the undelivered surface can name the gateway's error
+            // instead of guessing from nudge telemetry.
+            onTransportFailed: (p, failureClass, detail) => {
+                if (!p.qitemId)
+                    return;
+                const key = p.notificationKey ?? p.qitemId;
+                const alreadyRecorded = opts.queueRepo.transitionLog.listForQitem(p.qitemId).some((transition) => transition.transitionNote?.startsWith("slack-owner-notification-transport-failed ")
+                    && transition.transitionNote.split(/\s+/).includes(`notification_key=${key}`));
+                if (alreadyRecorded)
+                    return;
+                opts.queueRepo.update({
+                    qitemId: p.qitemId,
+                    actorSession: "daemon@kernel",
+                    transitionNote: [
+                        "slack-owner-notification-transport-failed",
+                        `notification_key=${key}`,
+                        `class=${failureClass}`,
+                        `error=${detail}`,
+                    ].join(" "),
+                });
+            },
+            onPosted: (p, messageTs, threadTs) => {
+                // v3 digest branch: transport truth first — every member receipt is
+                // stamped HERE, after the real post, digest-tokened and episode-keyed.
+                const digest = p;
+                if (digest.deliveryDigestPost && Array.isArray(digest.memberReceipts)) {
+                    for (const m of digest.memberReceipts) {
+                        if (opts.queueRepo.transitionLog.hasOwnerNotificationReceipt(m.qitemId, m.notificationKey))
+                            continue;
+                        opts.queueRepo.update({
+                            qitemId: m.qitemId,
+                            actorSession: "daemon@kernel",
+                            transitionNote: [
+                                "slack-owner-notification-posted",
+                                `notification_key=${m.notificationKey}`,
+                                `level=${m.level}`,
+                                `kind=${m.kind}`,
+                                `message_ts=${messageTs}`,
+                                `thread_ts=${threadTs ?? messageTs}`,
+                                `digest=${digest.digestId ?? "unknown"}`,
+                            ].join(" "),
+                        });
+                    }
+                    return;
+                }
+                const key = p.notificationKey ?? p.qitemId;
+                if (opts.queueRepo.transitionLog.hasOwnerNotificationReceipt(p.qitemId, key))
+                    return;
+                opts.queueRepo.update({
+                    qitemId: p.qitemId,
+                    actorSession: "daemon@kernel",
+                    transitionNote: [
+                        "slack-owner-notification-posted",
+                        `notification_key=${key}`,
+                        `level=${p.ownerNotificationLevel ?? "RECORD"}`,
+                        `kind=${p.ownerNotificationKind ?? "unclassified"}`,
+                        `message_ts=${messageTs}`,
+                        `thread_ts=${threadTs ?? messageTs}`,
+                    ].join(" "),
+                });
+            },
+            log,
+        })
+        : async () => ({ ok: false, class: "slack-outbound-not-configured", detail: "bot token or channel missing" });
+    // OPR.0.5.6.1 — decision containment ahead of the transport: log-class and
+    // digest-class produce ZERO post attempts (AM-F5 tooth); an away-escalation
+    // deferral arms the watchdog substrate and posts nothing now (AM-F1); an
+    // away/off escalation records the single-human termination exactly once per
+    // episode (A1.1, F-7). interrupt/notify fall through to the S14 delivery
+    // path unchanged.
+    const recordTerminationOnce = (p, decision) => {
+        if (!decision.termination || !p.qitemId)
+            return;
+        const key = p.notificationKey ?? p.qitemId;
+        const already = opts.queueRepo.transitionLog.listForQitem(p.qitemId).some((t) => t.transitionNote?.startsWith(DELIVERY_TERMINATION_PREFIX)
+            && t.transitionNote.split(/\s+/).includes(`notification_key=${key}`));
+        if (already)
+            return;
+        opts.queueRepo.update({
+            qitemId: p.qitemId,
+            actorSession: "daemon@kernel",
+            transitionNote: formatDeliveryTermination(decision.termination, key),
+        });
+    };
+    const engineDeliver = async (decision) => {
+        const p = (decision.payload ?? {});
+        // The T+30 deferral FIRE executes an already-made decision — never re-consult
+        // (a re-consult would re-defer: the immediate-plus-deferred shape AM-F3 forbids).
+        // R2 B-3 belt: an episode that already carries its posted receipt (a replayed
+        // decision, or any second mint) posts NOTHING — exactly-once by the receipt.
+        // A digest post is an already-decided aggregate — never re-consulted
+        // (member decisions were recorded at containment; receipts land in onPosted).
+        if (p.deliveryDigestPost)
+            return deliver(decision);
+        if (p.deliveryDeferralFire) {
+            const fireKey = p.notificationKey ?? p.qitemId;
+            if (p.qitemId && opts.queueRepo.transitionLog.hasOwnerNotificationReceipt(p.qitemId, fireKey)) {
+                releaseRef(p.qitemId);
+                return { ok: true };
+            }
+            return deliver(decision);
+        }
+        const ruled = p.qitemId ? decideForPayload(p) : null;
+        if (ruled) {
+            recordTerminationOnce(p, ruled);
+            const episodeKey = p.notificationKey ?? p.qitemId;
+            if (ruled.outcome === "log") {
+                outboundSeen.mark(episodeKey, "log-class-contained");
+                releaseRef(p.qitemId);
+                return { ok: true };
+            }
+            if (ruled.outcome === "digest") {
+                // R1 B-4: the MESSAGE-TIME decision is recorded on the row (with the
+                // live dials already applied by the consult above); the flush consumes
+                // this record and never re-decides from later registry state.
+                const already = opts.queueRepo.listTransitions(p.qitemId).some((t) => t.transitionNote?.startsWith("delivery-decision: digest")
+                    && t.transitionNote.includes(`notification_key=${episodeKey}`));
+                if (!already) {
+                    opts.queueRepo.update({
+                        qitemId: p.qitemId,
+                        actorSession: "daemon@kernel",
+                        transitionNote: `delivery-decision: digest window=${ruled.digestWindow ?? "4h"} notification_key=${episodeKey}`,
+                    });
+                }
+                outboundSeen.mark(episodeKey, `digest-deferred-${ruled.digestWindow ?? "4h"}`);
+                releaseRef(p.qitemId);
+                return { ok: true };
+            }
+            if (ruled.deferMinutes !== undefined) {
+                try {
+                    armDeliveryDeferral({
+                        jobsRepo: new WatchdogJobsRepository(opts.queueRepo.db),
+                        queueRepo: opts.queueRepo,
+                        qitemId: p.qitemId,
+                        entityId: (p.destinationSession ?? "").split("@")[0] ?? "unknown",
+                        minutes: ruled.deferMinutes,
+                        notificationKey: episodeKey,
+                    });
+                }
+                catch (e) {
+                    log(`deferral arm failed for ${p.qitemId}: ${e.message} — falling through to immediate notify-class delivery (fail-loud beats silent loss)`);
+                    return deliver(decision);
+                }
+                outboundSeen.mark(episodeKey, "interrupt-deferred");
+                releaseRef(p.qitemId);
+                return { ok: true };
+            }
+        }
+        return deliver(decision);
+    };
+    const wire = buildInProcessWire({
+        home: opts.home,
+        ops: outboundReady ? [OUTBOUND_OP] : [],
+        deliver: outboundReady ? engineDeliver : deliver,
+        log,
+    });
+    // Services are CONSTRUCTED here but started only via startServices() (post-bind, index.ts):
+    // composing a daemon must never dial Slack or start pollers — the createDaemon-in-tests
+    // hermeticity rule, same as every monitor in the supervision tree.
+    const stops = [];
+    const starts = [];
+    if (outboundReady) {
+        const driver = new SlackOutboundDriver({
+            home: opts.home,
+            queue: ports,
+            seen: outboundSeen,
+            filter: { minimumLevel: cfg.minimumLevelThatPosts },
+            dispatch: (op, ref, payload) => wire.dispatcher.dispatch(op, ref, payload),
+            intervalMs: opts.outboundIntervalMs,
+            log,
+        });
+        releaseRef = (q) => driver.release(q);
+        starts.push(() => {
+            driver.start();
+            log("slack outbound driver started (subsystem path)");
+        });
+        stops.push(() => driver.stop());
+    }
+    if (inboundReady) {
+        const inboundSeen = new SeenStore(path.join(stateDir(opts.home), "slack-inbound-seen.jsonl"));
+        const dead = new DeadLetterStore(path.join(stateDir(opts.home), "slack-inbound-deadletter.jsonl"));
+        const registry = registrySurface;
+        const router = new InboundRouter({
+            queue: ports,
+            seen: inboundSeen,
+            deadLetter: dead,
+            destination: cfg.inboundDestination,
+            resolveSender: makeInboundSenderResolver(registry, opts.home),
+            // S10 — deterministic thread routing: mapped thread → exactly the mapped seat; unmapped
+            // or human-initiated → the configured orchestrator slot as an unrouted-signal row.
+            resolveRoute: makeThreadRouteResolver({ map: threadMap, unroutedDestination: cfg.inboundDestination, log }),
+            // OPR.0.5.6.2 — inbound file transfer: wired only when the bot token exists
+            // (downloads need `files:read`); absent → the router's own named-failure
+            // arm keeps failure honest. Media lives beside the gateway's other durable
+            // state, under the same home convention.
+            ...(bot ? {
+                files: makeInboundFilePort({
+                    token: bot,
+                    mediaDir: path.join(stateDir(opts.home), "slack-inbound-media"),
+                    fetchImpl: opts.fetchImpl,
+                    log,
+                }),
+            } : {}),
+            log,
+        });
+        let handle;
+        starts.push(() => {
+            handle = startSocketInbound(app, router, {
+                fetchImpl: opts.fetchImpl,
+                wsFactory: opts.wsFactory,
+                retryIntervalMs: opts.inboundRetryIntervalMs,
+                inboundMaxConnects: opts.inboundMaxConnects,
+                log,
+            });
+            log("slack socket-mode inbound started (subsystem path)");
+        });
+        stops.push(() => handle?.stop());
+    }
+    const baseStop = wire.stop;
+    const baseStartServices = wire.startServices;
+    let servicesLive = false;
+    return {
+        dispatcher: wire.dispatcher,
+        startServices: () => {
+            if (servicesLive)
+                return; // idempotent — a double post-bind start must not double-poll
+            servicesLive = true;
+            baseStartServices?.(); // replay un-Acked decisions through delivery (restart no-loss)
+            for (const s of starts)
+                s();
+        },
+        stop: () => {
+            for (const s of stops) {
+                try {
+                    s();
+                }
+                catch { /* best-effort */ }
+            }
+            baseStop();
+        },
+    };
+}
+//# sourceMappingURL=slack-subsystem.js.map

package/daemon/dist/domain/gateway/slack/slack-subsystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-subsystem.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-subsystem.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,8FAA8F;AAC9F,oFAAoF;AACpF,EAAE;AACF,4FAA4F;AAC5F,0FAA0F;AAC1F,wFAAwF;AACxF,iBAAiB;AACjB,EAAE;AACF,yFAAyF;AACzF,4FAA4F;AAC5F,8FAA8F;AAC9F,+FAA+F;AAE/F,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAA6C,MAAM,yBAAyB,CAAC;AACxG,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAA4B,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAiH,MAAM,cAAc,CAAC;AAC5J,OAAO,EAAE,yBAAyB,EAAwB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAyC,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,oEAAoE;AACpE,kDAAkD;AAClD,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,2BAA2B,GAE5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAerC;;;;;;;;;;;GAWG;AACH;8EAC8E;AAC9E,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAQnC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,KAAiB,EAAE,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,KAAgB,EAAE,OAAe;YAC9C,MAAM,MAAM,GAAwB,EAAE,CAAC;YACvC,MAAM,MAAM,GAAwB,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4E,CAAC;gBACzG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;gBAC7B,sEAAsE;gBACtE,sEAAsE;gBACtE,mEAAmE;gBACnE,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;oBACjE,SAAS;gBACX,CAAC;gBACD,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtG,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBACX,GAAG,CAAC,qCAAqC,IAAI,OAAO,OAAO,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC5E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;oBACvC,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;gBACtG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;oBACpD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAwB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC5E,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,IAAmB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC;IAChD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnD,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC;IAC1E,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,KAAK,IAAI,CAAC;IAEjD,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACtI,GAAG,CAAC,kCAAkC,OAAO,yDAAyD,CAAC,CAAC;QACxG,OAAO,kBAAkB,CAAC;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,EAAE;YACP,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACpF,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAoB,IAAI,CAAC,QAAQ,IAAI,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;IACpG,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE;QAC3C,iBAAiB,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CAAC,CAAC;IACH,wEAAwE;IACxE,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,CAAC,CAAsB,EAA2B,EAAE;QAC3E,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,GAAG,GAAG,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,cAAc,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,sBAAsB,IAAI,IAAI;YACvC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa;gBACxC,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;aAC/C;YACD,KAAK,EAAE;gBACL,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;gBAChD,0BAA0B,EAAE,GAAG,CAAC,0BAA0B;aAC3D;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACnG,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAEnG,2FAA2F;IAC3F,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEvD,yFAAyF;IACzF,IAAI,UAAU,GAA8B,GAAG,EAAE,GAAE,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,aAAa;QAC3B,CAAC,CAAC,qBAAqB,CAAC;YACpB,QAAQ,EAAE,GAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAQ;YACrB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS;YACT,SAAS;YACT,YAAY;YACZ,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7B,kFAAkF;YAClF,mFAAmF;YACnF,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CACrB,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,QAAQ;YAC3F,kFAAkF;YAClF,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1B,qEAAqE;gBACrE,sEAAsE;gBACtE,IAAK,CAAsC,CAAC,kBAAkB;oBAAE,OAAO,SAAS,CAAC,CAAC,0CAA0C;gBAC5H,MAAM,IAAI,GAAI,CAAwC,CAAC,oBAAoB,KAAK,IAAI,CAAC;gBACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,IAAI;oBACnB,CAAC,CAAC,IAAI,CAAC,gFAAgF;oBACvF,CAAC,CAAC,QAAQ;wBACR,CAAC,CAAC,QAAQ,CAAC,OAAO;wBAClB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,IAAI,6BAA6B,CAAC,CAAC,CAAC,sBAAsB,EAAE,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBACnI,IAAI,CAAC,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAChC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC/D,IAAI,CAAC,KAAK;oBAAE,OAAO,SAAS,CAAC;gBAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;wBAAE,SAAS;oBACnC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;wBACpC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM;4BAAE,OAAO,CAAC,CAAC,MAAM,CAAC;oBACtD,CAAC;gBACH,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE;gBACtB,MAAM,KAAK,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;gBACnC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChG,kFAAkF;gBAClF,IAAI,CAAC;oBACH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;wBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,YAAY,EAAE,eAAe;wBAC7B,cAAc,EAAE,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;qBAClI,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,sFAAsF;oBACtF,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,kEAAkE;YAClE,qEAAqE;YACrE,4CAA4C;YAC5C,iBAAiB,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE;gBAC7C,IAAI,CAAC,CAAC,CAAC,OAAO;oBAAE,OAAO;gBACvB,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;gBAC3C,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAC/F,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,4CAA4C,CAAC;uBAC9E,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC,CAAC;gBACnF,IAAI,eAAe;oBAAE,OAAO;gBAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,YAAY,EAAE,eAAe;oBAC7B,cAAc,EAAE;wBACd,2CAA2C;wBAC3C,oBAAoB,GAAG,EAAE;wBACzB,SAAS,YAAY,EAAE;wBACvB,SAAS,MAAM,EAAE;qBAClB,CAAC,IAAI,CAAC,GAAG,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;gBACnC,oEAAoE;gBACpE,uEAAuE;gBACvE,MAAM,MAAM,GAAI,CAAuK,CAAC;gBACxL,IAAI,MAAM,CAAC,kBAAkB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;oBACtE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;wBACtC,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC;4BAAE,SAAS;wBACrG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;4BACpB,OAAO,EAAE,CAAC,CAAC,OAAO;4BAClB,YAAY,EAAE,eAAe;4BAC7B,cAAc,EAAE;gCACd,iCAAiC;gCACjC,oBAAoB,CAAC,CAAC,eAAe,EAAE;gCACvC,SAAS,CAAC,CAAC,KAAK,EAAE;gCAClB,QAAQ,CAAC,CAAC,IAAI,EAAE;gCAChB,cAAc,SAAS,EAAE;gCACzB,aAAa,QAAQ,IAAI,SAAS,EAAE;gCACpC,UAAU,MAAM,CAAC,QAAQ,IAAI,SAAS,EAAE;6BACzC,CAAC,IAAI,CAAC,GAAG,CAAC;yBACZ,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;gBAC3C,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;oBAAE,OAAO;gBACrF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,YAAY,EAAE,eAAe;oBAC7B,cAAc,EAAE;wBACd,iCAAiC;wBACjC,oBAAoB,GAAG,EAAE;wBACzB,SAAS,CAAC,CAAC,sBAAsB,IAAI,QAAQ,EAAE;wBAC/C,QAAQ,CAAC,CAAC,qBAAqB,IAAI,cAAc,EAAE;wBACnD,cAAc,SAAS,EAAE;wBACzB,aAAa,QAAQ,IAAI,SAAS,EAAE;qBACrC,CAAC,IAAI,CAAC,GAAG,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,GAAG;SACJ,CAAC;QACJ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAEzH,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,kBAAkB;IAClB,MAAM,qBAAqB,GAAG,CAAC,CAAsB,EAAE,QAA0B,EAAQ,EAAE;QACzF,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO;QAChD,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC,2BAA2B,CAAC;eACpD,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,YAAY,EAAE,eAAe;YAC7B,cAAc,EAAE,yBAAyB,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;SACrE,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,aAAa,GAAuB,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC3D,MAAM,CAAC,GAAG,CAAE,QAAkC,CAAC,OAAO,IAAI,EAAE,CAA6D,CAAC;QAC1H,8EAA8E;QAC9E,kFAAkF;QAClF,8EAA8E;QAC9E,6EAA6E;QAC7E,qEAAqE;QACrE,8EAA8E;QAC9E,IAAK,CAAsC,CAAC,kBAAkB;YAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzF,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;YAC/C,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC9F,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;YAC/B,CAAC;YACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,IAAI,KAAK,EAAE,CAAC;YACV,qBAAqB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;YAClD,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC5B,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;gBACrD,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;YAC/B,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC/B,qEAAqE;gBACrE,uEAAuE;gBACvE,8DAA8D;gBAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACnE,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC,2BAA2B,CAAC;uBACpD,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;wBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,YAAY,EAAE,eAAe;wBAC7B,cAAc,EAAE,oCAAoC,KAAK,CAAC,YAAY,IAAI,IAAI,qBAAqB,UAAU,EAAE;qBAChH,CAAC,CAAC;gBACL,CAAC;gBACD,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,KAAK,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC/E,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;YAC/B,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,mBAAmB,CAAC;wBAClB,QAAQ,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;wBACvD,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,QAAQ,EAAE,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS;wBACjE,OAAO,EAAE,KAAK,CAAC,YAAY;wBAC3B,eAAe,EAAE,UAAU;qBAC5B,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,KAAM,CAAW,CAAC,OAAO,qFAAqF,CAAC,CAAC;oBACxJ,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC3B,CAAC;gBACD,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;gBACpD,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACvC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO;QAChD,GAAG;KACJ,CAAC,CAAC;IAEH,4FAA4F;IAC5F,wFAAwF;IACxF,mEAAmE;IACnE,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,qBAAqB,EAAE;YACnD,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC;YAC1E,UAAU,EAAE,IAAI,CAAC,kBAAkB;YACnC,GAAG;SACJ,CAAC,CAAC;QACH,UAAU,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,gDAAgD,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,IAAI,eAAe,CAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC,CAAC,CAAC;QAC/G,MAAM,QAAQ,GAAoB,eAAe,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;YAC/B,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,GAAG,CAAC,kBAAkB;YACnC,aAAa,EAAE,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;YAC7D,wFAAwF;YACxF,mFAAmF;YACnF,YAAY,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,mBAAmB,EAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC;YAC3G,4EAA4E;YAC5E,yEAAyE;YACzE,2EAA2E;YAC3E,yCAAyC;YACzC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBACR,KAAK,EAAE,mBAAmB,CAAC;oBACzB,KAAK,EAAE,GAAG;oBACV,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC;oBAC/D,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG;iBACJ,CAAC;aACH,CAAC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,MAAuC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,kBAAkB,CAAC,GAAI,EAAE,MAAM,EAAE;gBACxC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,sBAAsB;gBAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,GAAG;aACJ,CAAC,CAAC;YACH,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IAC3B,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC;IAC7C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,GAAG,EAAE;YAClB,IAAI,YAAY;gBAAE,OAAO,CAAC,6DAA6D;YACvF,YAAY,GAAG,IAAI,CAAC;YACpB,iBAAiB,EAAE,EAAE,CAAC,CAAC,+DAA+D;YACtF,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,CAAC,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YACnE,QAAQ,EAAE,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/gateway/slack/socket-inbound.d.ts

@@ -0,0 +1,30 @@
+import { type FetchImpl } from "./slack-api.js";
+import { type InboundRouter } from "./inbound.js";
+export interface WsLike {
+    send(data: string): void;
+    close(): void;
+    onopen: ((this: unknown, ev?: unknown) => void) | null;
+    onmessage: ((this: unknown, ev: {
+        data: unknown;
+    }) => void) | null;
+    onclose: ((this: unknown, ev?: unknown) => void) | null;
+    onerror: ((this: unknown, ev?: unknown) => void) | null;
+}
+export interface SocketInboundDeps {
+    fetchImpl?: FetchImpl;
+    /** Open a Socket Mode WebSocket (default: global WebSocket). Injectable for tests. */
+    wsFactory?: (url: string) => WsLike;
+    /** Test seam: run N reconnect cycles then stop (default: forever, until stop()). */
+    inboundMaxConnects?: number;
+    /** Dead-letter retry cadence WHILE the socket stays connected (default 5min). */
+    retryIntervalMs?: number;
+    log?: (msg: string) => void;
+}
+export interface SocketInboundHandle {
+    /** Resolves when the loop ends (maxConnects reached or stop() called). */
+    done: Promise<void>;
+    stop(): void;
+}
+/** Start the Socket Mode loop (the shipped runner's exact shape, service-ified with a stop()). */
+export declare function startSocketInbound(appToken: string, router: InboundRouter, deps?: SocketInboundDeps): SocketInboundHandle;
+//# sourceMappingURL=socket-inbound.d.ts.map

package/daemon/dist/domain/gateway/slack/socket-inbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-inbound.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/socket-inbound.ts"],"names":[],"mappings":"AAWA,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAkB,KAAK,aAAa,EAAuB,MAAM,cAAc,CAAC;AAEvF,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;IACd,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,sFAAsF;IACtF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,IAAI,IAAI,CAAC;CACd;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,GAAE,iBAAsB,GAAG,mBAAmB,CA0E7H"}

package/daemon/dist/domain/gateway/slack/socket-inbound.js

@@ -0,0 +1,99 @@
+// S10 — the Socket Mode INBOUND service, in-daemon. The loop is the shipped relay runner's
+// (moved verbatim from the CLI `rig slack inbound` action, which retires with the cutover):
+// open the ws via apps.connections.open, FAST-ACK every envelope, route human messages through
+// the InboundRouter, drain the dead-letter on connect + periodically (B1), reconnect with
+// backoff. Amendment A1 (M1 §3): inbound rides the PLATFORM socket — this service — never a
+// gateway↔connector wire.
+//
+// Cold-init receipts (dual-path class "inbound cold-init"): on every (re)connect the router's
+// dead-letter set drains before new traffic matters, and a fresh boot picks up where the
+// durable seen/dead-letter stores left off — no replay storm, no drop.
+import { openSocketConnection } from "./slack-api.js";
+import { handleEnvelope } from "./inbound.js";
+/** Start the Socket Mode loop (the shipped runner's exact shape, service-ified with a stop()). */
+export function startSocketInbound(appToken, router, deps = {}) {
+    const log = deps.log ?? (() => { });
+    const wsFactory = deps.wsFactory ?? ((url) => new globalThis.WebSocket(url));
+    const retryIntervalMs = deps.retryIntervalMs ?? 5 * 60 * 1000;
+    let connects = 0;
+    let backoff = 1000;
+    let stopped = false;
+    let liveWs;
+    let pendingTimer;
+    const done = new Promise((resolve) => {
+        const connect = async () => {
+            if (stopped)
+                return resolve();
+            connects++;
+            const open = await openSocketConnection(appToken, deps.fetchImpl);
+            if (stopped)
+                return resolve();
+            if (!open.ok || !open.url) {
+                log(`connect failed: ${open.error}`);
+                if (deps.inboundMaxConnects && connects >= deps.inboundMaxConnects)
+                    return resolve();
+                pendingTimer = setTimeout(connect, backoff);
+                backoff = Math.min(backoff * 2, 60000);
+                return;
+            }
+            const ws = wsFactory(open.url);
+            liveWs = ws;
+            let retryTimer;
+            ws.onopen = () => {
+                backoff = 1000;
+                log("socket connected");
+                void router.retryDeadLetters(); // drain on connect (cold-init)…
+                // …AND periodically WHILE connected (B1: recovery after a queue outage
+                // must not wait for the next Slack reconnect). Cleared on close.
+                retryTimer = setInterval(() => void router.retryDeadLetters(), retryIntervalMs);
+                if (typeof retryTimer.unref === "function") {
+                    retryTimer.unref();
+                }
+            };
+            ws.onmessage = (m) => {
+                let env;
+                try {
+                    env = JSON.parse(String(m.data));
+                }
+                catch {
+                    return;
+                }
+                void handleEnvelope(env, () => env.envelope_id && ws.send(JSON.stringify({ envelope_id: env.envelope_id })), router, log);
+            };
+            ws.onclose = () => {
+                if (retryTimer)
+                    clearInterval(retryTimer);
+                liveWs = undefined;
+                if (stopped)
+                    return resolve();
+                log(`socket closed; reconnect in ${backoff}ms`);
+                if (deps.inboundMaxConnects && connects >= deps.inboundMaxConnects)
+                    return resolve();
+                pendingTimer = setTimeout(connect, backoff);
+                backoff = Math.min(backoff * 2, 60000);
+            };
+            ws.onerror = () => {
+                try {
+                    ws.close();
+                }
+                catch {
+                    /* ignore */
+                }
+            };
+        };
+        void connect();
+    });
+    return {
+        done,
+        stop: () => {
+            stopped = true;
+            if (pendingTimer)
+                clearTimeout(pendingTimer);
+            try {
+                liveWs?.close();
+            }
+            catch { /* best-effort */ }
+        },
+    };
+}
+//# sourceMappingURL=socket-inbound.js.map

package/daemon/dist/domain/gateway/slack/socket-inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-inbound.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/socket-inbound.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,4FAA4F;AAC5F,+FAA+F;AAC/F,0FAA0F;AAC1F,4FAA4F;AAC5F,0BAA0B;AAC1B,EAAE;AACF,8FAA8F;AAC9F,yFAAyF;AACzF,uEAAuE;AAEvE,OAAO,EAAE,oBAAoB,EAAkB,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,cAAc,EAA2C,MAAM,cAAc,CAAC;AA4BvF,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAqB,EAAE,OAA0B,EAAE;IACtG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAK,UAAkE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9I,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAA0B,CAAC;IAC/B,IAAI,YAAuD,CAAC;IAE5D,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YACxC,IAAI,OAAO;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC9B,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClE,IAAI,OAAO;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1B,GAAG,CAAC,mBAAmB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrC,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBACrF,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,GAAG,EAAE,CAAC;YACZ,IAAI,UAAsD,CAAC;YAC3D,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;gBACf,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBACxB,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,gCAAgC;gBAChE,uEAAuE;gBACvE,iEAAiE;gBACjE,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,gBAAgB,EAAE,EAAE,eAAe,CAAC,CAAC;gBAChF,IAAI,OAAQ,UAAgD,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACjF,UAA+C,CAAC,KAAK,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC,CAAC;YACF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE;gBACnB,IAAI,GAAmB,CAAC;gBACxB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAmB,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5H,CAAC,CAAC;YACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,UAAU;oBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC1C,MAAM,GAAG,SAAS,CAAC;gBACnB,IAAI,OAAO;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC9B,GAAG,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC;gBAChD,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBACrF,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC,CAAC;YACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,KAAK,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,GAAG,EAAE;YACT,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC;gBAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC"}