@remnic/core 9.69.56 → 9.69.57

package/dist/connectors/live/gmail.d.ts

@@ -0,0 +1,253 @@
+/**
+ * @remnic/core — Gmail live connector (issue #683 PR 4/6)
+ *
+ * Concrete `LiveConnector` implementation that incrementally imports new
+ * inbox messages from Gmail into Remnic. Built on top of the framework
+ * shipped in PR 1/N (`framework.ts` / `registry.ts` / `state-store.ts`)
+ * and mirrors the structure of the Drive connector (PR 2/N) and the Notion
+ * connector (PR 3/N).
+ *
+ * Design notes:
+ *
+ *   - **Auth.** OAuth2 refresh-token from config (`connectors.gmail.*`).
+ *     Tokens are accepted at config-parse time but never logged. Operators
+ *     must populate them from a secret store; per the repo-wide privacy
+ *     policy no real value may appear in tests, fixtures, or comments.
+ *
+ *   - **Transport.** Raw `fetch` against
+ *     `https://gmail.googleapis.com/gmail/v1/...` with a bearer token
+ *     obtained from the OAuth2 token endpoint using the refresh token.
+ *     We do NOT depend on `googleapis` — there is no optional-peer-dep
+ *     machinery needed and the API surface we consume is tiny. The
+ *     `fetchFn` argument is the test hook allowing stubbing without
+ *     network access.
+ *
+ *   - **Cursor semantics.** High-water mark is the highest `internalDate`
+ *     (Unix epoch milliseconds as a string) seen across all processed messages.
+ *     Stored as an exact epoch-ms numeric string (`watermarkMs`) in the cursor
+ *     value — NOT as an ISO 8601 string — to preserve sub-second precision and
+ *     prevent the `after:<sec>` Gmail query from re-returning messages that
+ *     fall in the same second as the watermark. On first sync (cursor=null) we
+ *     record "now" as the watermark WITHOUT importing anything — mirrors
+ *     Drive's getStartPageToken bootstrap and keeps "first install" from
+ *     re-ingesting history.
+ *
+ *   - **Polling.** `users.messages.list` with `q: "after:<internalDate/1000>
+ *     <userQuery>"` retrieves message ids newer than the watermark. We then
+ *     fetch each message with `users.messages.get?format=full`.
+ *
+ *   - **Content extraction.** Plaintext body (`text/plain` part first;
+ *     `text/html` as fallback, stripped to text). Attachment parts are
+ *     ignored — bytes belong in the binary-lifecycle pipeline.
+ *
+ *   - **Idempotency.** `ConnectorDocument.source.externalId` is the message
+ *     id and `externalRevision` is `internalDate` (epoch ms string), so
+ *     downstream dedup can recognise repeat fetches if the cursor is rewound.
+ *
+ *   - **Watermark advancement.** The high-water mark advances only when the
+ *     full message list is drained without hitting the per-pass cap. Skipped
+ *     messages (empty/too-large/inaccessible) are recorded in a `skippedIds`
+ *     set in the cursor and bypassed on future polls without stalling the
+ *     watermark. Sub-second duplicate messages (re-returned by Gmail's
+ *     second-granular `after:` filter) are suppressed via a `seenIds` map.
+ *     If a transient error stops the pass mid-batch, the cursor is NOT
+ *     advanced so the next poll retries the same batch — mirrors Drive's
+ *     contract (CLAUDE.md gotcha: never advance cursor past unprocessed
+ *     transient failures).
+ *
+ *   - **Privacy.** No message content, subject, or headers are ever logged.
+ *     Message counts and ids may be logged. OAuth credentials are never
+ *     exposed in logs, state, or error messages.
+ *
+ *   - **Read-only.** This connector only reads. It never marks messages as
+ *     read, modifies labels, or mutates any Gmail resource.
+ */
+import type { LiveConnector, SyncIncrementalResult } from "./framework.js";
+/** Stable connector id. Lives in the registry under this exact string. */
+export declare const GMAIL_CONNECTOR_ID = "gmail";
+/**
+ * Cursor `kind` we emit. Opaque to the framework; documented here so
+ * tests can assert on it.
+ */
+export declare const GMAIL_CURSOR_KIND = "gmailWatermark";
+/**
+ * Default poll interval (5 minutes). Gmail has no push capability in the
+ * connector model; polling sub-minute wastes quota for a personal memory
+ * layer.
+ */
+export declare const GMAIL_DEFAULT_POLL_INTERVAL_MS: number;
+/**
+ * Maximum number of messages we process in a single `syncIncremental` pass.
+ * Prevents one runaway pass from monopolising the scheduler.
+ * Exported for test access.
+ */
+export declare const MAX_MESSAGES_PER_PASS = 200;
+/**
+ * Hard cap on the number of entries allowed in the `seenIds` map stored in the
+ * cursor. Without this, a heavily-active inbox causes `seenIds` to grow without
+ * bound, eventually blowing the cursor JSON size limit.
+ *
+ * When the entry count reaches this threshold, we prune down to
+ * SEEN_IDS_RETAIN by dropping the oldest entries (lowest internalDate).
+ */
+export declare const SEEN_IDS_MAX = 1000;
+/**
+ * Target entry count after a seenIds eviction. We retain the most recently
+ * seen messages (highest internalDate) so that sub-second dedup continues to
+ * work for the active second window.
+ */
+export declare const SEEN_IDS_RETAIN = 500;
+/**
+ * Hard cap on the number of entries in the `skippedIds` map.
+ * When exceeded, the oldest entries (lowest internalDate) are evicted first.
+ * Inaccessible messages whose internalDate is unknown are stored as "0" and
+ * are evicted last (they sort highest when negated, so they sort lowest
+ * when ascending — we keep them until the cap forces eviction).
+ */
+export declare const SKIPPED_IDS_MAX = 5000;
+/** Target entry count after a skippedIds eviction. */
+export declare const SKIPPED_IDS_RETAIN = 2500;
+/**
+ * Validated, frozen view of `connectors.gmail.*`.
+ */
+export interface GmailConnectorConfig {
+    /** OAuth2 client id. */
+    readonly clientId: string;
+    /** OAuth2 client secret. */
+    readonly clientSecret: string;
+    /** OAuth2 refresh token issued for the Gmail scope. */
+    readonly refreshToken: string;
+    /** Gmail userId (almost always "me"). */
+    readonly userId: string;
+    /** Gmail search query applied in addition to the watermark filter. */
+    readonly query: string;
+    /** Poll interval surfaced to the scheduler (ms). */
+    readonly pollIntervalMs: number;
+}
+/** Minimal message-list entry from `users.messages.list`. */
+export interface GmailMessageRef {
+    readonly id: string;
+    readonly threadId?: string;
+}
+/** Minimal message response from `users.messages.get`. */
+export interface GmailMessage {
+    readonly id: string;
+    readonly threadId?: string;
+    readonly internalDate?: string;
+    readonly snippet?: string;
+    readonly payload?: GmailMessagePart;
+}
+/** Minimal MIME part shape. */
+export interface GmailMessagePart {
+    readonly mimeType?: string;
+    readonly body?: {
+        readonly data?: string;
+        readonly size?: number;
+    };
+    readonly parts?: readonly GmailMessagePart[];
+    readonly headers?: readonly GmailHeader[];
+}
+/** Message header. */
+export interface GmailHeader {
+    readonly name?: string;
+    readonly value?: string;
+}
+/**
+ * Minimal fetch-compatible surface we use. The real connector delegates to
+ * the global `fetch`; tests inject a stub factory.
+ */
+export type GmailFetchFn = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+    signal?: AbortSignal;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+/**
+ * Validate and normalise raw config. Throws with a concrete message on any
+ * malformed input — never silently defaults (CLAUDE.md gotcha #51).
+ */
+export declare function validateGmailConfig(raw: unknown): GmailConnectorConfig;
+/**
+ * Classify a fetch error as transient (re-throw to stop the pass without
+ * advancing the cursor) or terminal (skip-and-continue for per-message
+ * errors).
+ *
+ * Delegates to the shared `isTransientHttpError` helper in
+ * `transient-errors.ts` (Thread 3 — Cursor PRRT_kwDORJXyws59sdH4). The
+ * Gmail-specific `gmailStatus` property (attached by `gmailFetch`) is passed
+ * as an extra lookup key so the shared resolver finds it before the generic
+ * `status` field.
+ */
+export declare function isTransientGmailError(err: unknown): boolean;
+/**
+ * Convert an `internalDate` epoch-ms string to epoch seconds (for Gmail's
+ * `after:` query operator which takes epoch seconds).
+ */
+declare function internalDateToEpochSeconds(internalDate: string): number;
+/**
+ * Convert an `internalDate` epoch-ms string to an ISO 8601 string.
+ */
+declare function internalDateToIso(internalDate: string): string;
+/**
+ * Prune `seenIds` to remove entries that can no longer be returned by the next
+ * `after:` query. Gmail's `after:N` matches messages with `internalDate > N*1000`,
+ * where `N = Math.floor(watermarkMs / 1000)`. So any message with
+ * `internalDate <= floor(watermarkMs/1000) * 1000` cannot appear in the next
+ * query and can be safely dropped. Messages in the same floor-second as the
+ * watermark (i.e. `internalDate > floor(watermarkMs/1000)*1000`) must be
+ * retained so seenIds can suppress them if Gmail re-returns them.
+ *
+ * Additionally enforce a hard size cap: if after date-pruning the map still
+ * exceeds SEEN_IDS_MAX, retain only the SEEN_IDS_RETAIN most recent entries
+ * (by internalDate value) to prevent unbounded cursor growth.
+ */
+export declare function pruneSeenIds(seenIds: Record<string, string>, watermarkMs: number): Record<string, string>;
+/**
+ * Prune the `skippedIds` map to prevent unbounded cursor growth.
+ * (Codex P2 PRRT_kwDORJXyws59z612)
+ *
+ * `skippedIds` maps message id → internalDate ms string (or "0" when the
+ * internalDate is unknown, e.g. inaccessible messages that never returned a
+ * body). Entries whose internalDate is strictly below the current watermark
+ * are eligible for pruning: Gmail's `after:floor(watermarkMs/1000)` query
+ * will never re-return them, so there is nothing left to suppress.
+ *
+ * Entries stored as "0" (unknown date) are retained unless the hard cap
+ * forces eviction, at which point they are treated as date=0 and evicted
+ * first (oldest-first ordering).
+ *
+ * After date-based pruning, if the entry count still exceeds SKIPPED_IDS_MAX
+ * we evict down to SKIPPED_IDS_RETAIN, keeping the most recent entries.
+ */
+export declare function pruneSkippedIds(skippedIds: Record<string, string>, watermarkMs: number): Record<string, string>;
+/**
+ * Result of a single sync pass. Superset of `SyncIncrementalResult` for
+ * richer test assertions.
+ */
+export interface GmailSyncResult extends SyncIncrementalResult {
+    readonly skippedInaccessible: number;
+    readonly skippedEmpty: number;
+    readonly skippedTooLarge: number;
+}
+/**
+ * Construct the connector. The `fetchFn` argument is the test hook —
+ * production callers omit it and the connector uses the global `fetch`.
+ */
+export declare function createGmailConnector(options?: {
+    fetchFn?: GmailFetchFn;
+}): LiveConnector;
+/**
+ * Build the Gmail query string combining the `after:` watermark filter with
+ * the operator-configured `query`. The `after:` operator takes epoch seconds.
+ */
+declare function buildListQuery(afterEpochSec: number, userQuery: string): string;
+/**
+ * Convert an `internalDate` epoch-ms string to an ISO 8601 timestamp.
+ * Exported for test assertions.
+ */
+export { internalDateToIso, internalDateToEpochSeconds, buildListQuery };
+//# sourceMappingURL=gmail.d.ts.map

package/dist/connectors/live/gmail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail.d.ts","sourceRoot":"","sources":["../../../src/connectors/live/gmail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAEH,OAAO,KAAK,EAIV,aAAa,EAEb,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAQxB,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,QAAgB,CAAC;AAa5D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAOzC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,OAAQ,CAAC;AAElC;;;;GAIG;AACH,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,OAAQ,CAAC;AAErC,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAYxC;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4BAA4B;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAMD,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,+BAA+B;AAC/B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CAC3C;AAED,sBAAsB;AACtB,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,KACE,OAAO,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B,CAAC,CAAC;AAMH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,CAmEtE;AAiBD;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE3D;AA4ID;;;GAGG;AACH,iBAAS,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAIhE;AAED;;GAEG;AACH,iBAAS,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAIvD;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,WAAW,EAAE,MAAM,GAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAyBxB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,WAAW,EAAE,MAAM,GAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBxB;AA0ND;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,qBAAqB;IAC5D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,YAAY,CAAA;CAAO,GACvC,aAAa,CA4Df;AA+SD;;;GAGG;AACH,iBAAS,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAUxE;AAsFD;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,cAAc,EAAE,CAAC"}

package/dist/connectors/live/google-drive.d.ts

@@ -0,0 +1,198 @@
+/**
+ * @remnic/core — Google Drive live connector (issue #683 PR 2/N)
+ *
+ * Concrete `LiveConnector` implementation that incrementally imports text
+ * content from a user's Google Drive into Remnic. Built on top of the
+ * framework shipped in PR 1/N (`framework.ts` / `registry.ts` /
+ * `state-store.ts`).
+ *
+ * Design notes:
+ *
+ *   - **Cursor semantics.** We page Drive with the official `changes` API
+ *     when a `startPageToken` is available. The cursor is opaque from the
+ *     framework's POV (`{kind: "drivePageToken", value: ...}`), and on the
+ *     very first sync (cursor=null) we call `changes.getStartPageToken()`
+ *     to seed it without importing anything. This matches the documented
+ *     Drive incremental-sync recipe and means re-runs never re-ingest the
+ *     same file as long as the cursor file survives.
+ *
+ *   - **Folder scope.** When `folderIds` is non-empty, files are filtered
+ *     to those whose `parents` intersect the configured folder set. Drive
+ *     does not currently support server-side parent filtering on the
+ *     `changes.list` endpoint, so we pull the change record's `file` payload
+ *     and apply the filter on our side. Folder ids are validated up front so
+ *     a typo in config doesn't silently cause a broad import.
+ *
+ *   - **Content extraction.** Google-native MIME types
+ *     (`application/vnd.google-apps.{document,spreadsheet,presentation}`)
+ *     are exported via `files.export` to plaintext. Plain-text MIME types
+ *     are pulled with `files.get?alt=media`. Everything else is skipped —
+ *     bytes from binary formats (images, PDFs, archives) belong in the
+ *     binary-lifecycle pipeline, not in the textual ingestion path.
+ *
+ *   - **Idempotency.** Each emitted `ConnectorDocument.source` carries
+ *     `externalId = file.id` plus `externalRevision = file.modifiedTime`,
+ *     so downstream dedup (CLAUDE.md gotcha #44 — never index content that
+ *     failed to persist) can recognise repeat fetches even if the cursor is
+ *     manually rewound.
+ *
+ *   - **Privacy.** No document content is ever logged. Folder ids and
+ *     counts may be logged. OAuth credentials (`clientId`,
+ *     `clientSecret`, `refreshToken`) are accepted via config but the
+ *     intent is for callers to populate them from a secret store; we never
+ *     persist credentials through the connector state-store. Per CLAUDE.md
+ *     repository-privacy rules, no real credentials may appear in tests,
+ *     fixtures, or comments.
+ *
+ *   - **À-la-carte packaging (CLAUDE.md gotcha #57).** `googleapis` is NOT
+ *     listed as a hard dependency of `@remnic/core`. It is loaded via a
+ *     computed-specifier dynamic import (`await import("google" + "apis")`)
+ *     so bundlers cannot statically resolve it, and it is declared as an
+ *     optional peer dependency. Operators who never enable the connector
+ *     pay nothing for it.
+ *
+ *   - **Read-only.** This connector only reads. It never marks files as
+ *     read, edits metadata, or modifies sharing settings.
+ */
+import type { LiveConnector, SyncIncrementalResult } from "./framework.js";
+/**
+ * Stable connector id. Lives in the registry under this exact string.
+ */
+export declare const GOOGLE_DRIVE_CONNECTOR_ID = "google-drive";
+/**
+ * Cursor `kind` we emit. Treated as opaque by the framework; documented
+ * here so tests can assert on it.
+ */
+export declare const GOOGLE_DRIVE_CURSOR_KIND = "drivePageToken";
+/**
+ * Default poll interval (5 minutes). Surfaced in `openclaw.plugin.json`
+ * defaults and in the documented config schema. Drive's `changes.list`
+ * endpoint is cheap, but polling sub-minute is wasteful for a personal
+ * memory layer.
+ */
+export declare const DEFAULT_POLL_INTERVAL_MS: number;
+/**
+ * Validated, frozen view of `connectors.googleDrive.*`.
+ */
+export interface GoogleDriveConnectorConfig {
+    readonly clientId: string;
+    readonly clientSecret: string;
+    readonly refreshToken: string;
+    /** Poll interval surfaced to the scheduler. */
+    readonly pollIntervalMs: number;
+    /** Folder ids to scope import to. Empty = "all accessible". */
+    readonly folderIds: readonly string[];
+}
+/**
+ * Optional injection point for tests. The real connector dynamically imports
+ * `googleapis`; tests pass a stub here to avoid the optional-peer-dep
+ * machinery and to keep the test suite hermetic.
+ *
+ * The shape only covers the tiny slice of the SDK we actually use.
+ */
+export interface GoogleDriveClientFactory {
+    (config: GoogleDriveConnectorConfig): Promise<GoogleDriveClient>;
+}
+/**
+ * Minimal Drive client surface. Tests provide a fake; production wraps
+ * `googleapis` to fit. Method shapes mirror the upstream API where it
+ * matters (`startPageToken` / `nextPageToken` / `newStartPageToken`,
+ * `files.modifiedTime` ISO 8601 strings).
+ */
+export interface GoogleDriveClient {
+    /** Mirrors `drive.changes.getStartPageToken()`. */
+    getStartPageToken(): Promise<{
+        startPageToken: string;
+    }>;
+    /**
+     * Mirrors `drive.changes.list(...)`. We page until the response yields a
+     * `newStartPageToken` (i.e., no more pages). Each `change.file`, when
+     * present, includes the metadata we need to decide whether to ingest.
+     */
+    listChanges(args: {
+        pageToken: string;
+        pageSize: number;
+    }): Promise<DriveChangesPage>;
+    /**
+     * Export a Google-native doc to plaintext. Returns the body as a string.
+     */
+    exportFile(args: {
+        fileId: string;
+        mimeType: string;
+    }): Promise<string>;
+    /**
+     * Download a non-Google-native file as a string. Used for `text/*` MIME
+     * types; binary formats are filtered out before we get here.
+     */
+    getFileMedia(args: {
+        fileId: string;
+    }): Promise<string>;
+}
+export interface DriveChangesPage {
+    readonly changes: readonly DriveChange[];
+    readonly newStartPageToken?: string;
+    readonly nextPageToken?: string;
+}
+export interface DriveChange {
+    readonly removed?: boolean;
+    readonly fileId?: string;
+    readonly file?: DriveFileMetadata;
+}
+export interface DriveFileMetadata {
+    readonly id: string;
+    readonly name?: string;
+    readonly mimeType?: string;
+    readonly modifiedTime?: string;
+    readonly trashed?: boolean;
+    readonly parents?: readonly string[];
+    readonly webViewLink?: string;
+    readonly size?: string | number;
+}
+/**
+ * Result of a single sync pass — exposed for richer test assertions.
+ * Strict superset of `SyncIncrementalResult`.
+ */
+export interface GoogleDriveSyncResult extends SyncIncrementalResult {
+    readonly skippedBinary: number;
+    readonly skippedFolderScope: number;
+    readonly skippedTooLarge: number;
+}
+/**
+ * Validate and normalise raw config. Throws with a concrete message on any
+ * malformed input — never silently defaults (CLAUDE.md gotcha #51).
+ */
+export declare function validateGoogleDriveConfig(raw: unknown): GoogleDriveConnectorConfig;
+/**
+ * Construct the connector. The `clientFactory` argument is the test hook —
+ * production callers omit it and the connector lazy-loads `googleapis`.
+ */
+export declare function createGoogleDriveConnector(options?: {
+    clientFactory?: GoogleDriveClientFactory;
+}): LiveConnector;
+/**
+ * Classify a per-file fetch error as "transient" (re-throw to caller so
+ * the sync stops without advancing the cursor and the next poll retries)
+ * vs. "terminal" (skip the file and continue — the file is gone, we lack
+ * access, or the request was malformed in a non-recoverable way).
+ *
+ * `googleapis` surfaces errors as `GaxiosError` instances. We do NOT
+ * `instanceof`-check that class because `googleapis` is an optional peer
+ * dependency (CLAUDE.md gotcha #57); we'd have to import its types and
+ * that would break the à-la-carte contract. Instead we read the
+ * documented duck-typed shape: `{ code, status, response: { status }, name }`.
+ *
+ * Delegates to the shared `isTransientHttpError` helper in
+ * `transient-errors.ts` (Thread 3 — Cursor PRRT_kwDORJXyws59sdH4). Drive
+ * attaches no connector-specific status property, so `statusProps` is empty.
+ */
+export declare function isTransientDriveError(err: unknown): boolean;
+/**
+ * Production client factory. Lazy-loads `googleapis` via a computed-specifier
+ * dynamic import so bundlers never statically resolve it (CLAUDE.md gotcha
+ * #57). Surfaces a precise install hint on miss.
+ *
+ * Exported only for the `index.ts` barrel; consumers that already inject a
+ * test factory don't need to touch this.
+ */
+export declare const defaultGoogleDriveClientFactory: GoogleDriveClientFactory;
+//# sourceMappingURL=google-drive.d.ts.map

package/dist/connectors/live/google-drive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-drive.d.ts","sourceRoot":"","sources":["../../../src/connectors/live/google-drive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,OAAO,KAAK,EAIV,aAAa,EAEb,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAIxB;;GAEG;AACH,eAAO,MAAM,yBAAyB,iBAAiB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,QAAgB,CAAC;AAmCtD;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAClE;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,iBAAiB,IAAI,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEzD;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE9B;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAExE;;;OAGG;IACH,YAAY,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACjC;AA2BD;;;GAGG;AACH,MAAM,WAAW,qBAAsB,SAAQ,qBAAqB;IAClE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,0BAA0B,CAsElF;AA2ED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,wBAAwB,CAAA;CAAO,GACzD,aAAa,CAwIf;AA2DD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE3D;AAiDD;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,wBAiE7C,CAAC"}

package/dist/connectors/live/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @remnic/core — Live Connectors public barrel (issue #683 PR 1/N)
+ *
+ * Re-exports the live-connector framework, registry, and state store. This
+ * is the only path other modules in `@remnic/core` should import from.
+ *
+ * NOTE: These symbols intentionally live under `connectors/live/` to avoid
+ * colliding with the existing Codex marketplace integration in
+ * `connectors/`. Do not flatten this barrel into the parent `connectors/`
+ * index — keep the namespaces distinct.
+ */
+export { CONNECTOR_ID_PATTERN, isValidConnectorId, persistableConnectorConfig, redactConnectorConfigSecrets, type ConnectorConfig, type ConnectorCursor, type ConnectorDocument, type ConnectorDocumentSource, type LiveConnector, type SyncIncrementalArgs, type SyncIncrementalResult, } from "./framework.js";
+export { LiveConnectorRegistry, LiveConnectorRegistryError, } from "./registry.js";
+export { ConnectorStateLockLostError, listConnectorStates, readConnectorState, withConnectorStateLock, writeConnectorState, type ConnectorState, type ConnectorSyncStatus, } from "./state-store.js";
+export { isTransientHttpError } from "./transient-errors.js";
+export { GOOGLE_DRIVE_CONNECTOR_ID, GOOGLE_DRIVE_CURSOR_KIND, DEFAULT_POLL_INTERVAL_MS as GOOGLE_DRIVE_DEFAULT_POLL_INTERVAL_MS, createGoogleDriveConnector, defaultGoogleDriveClientFactory, isTransientDriveError, validateGoogleDriveConfig, type DriveChange, type DriveChangesPage, type DriveFileMetadata, type GoogleDriveClient, type GoogleDriveClientFactory, type GoogleDriveConnectorConfig, type GoogleDriveSyncResult, } from "./google-drive.js";
+export { NOTION_CONNECTOR_ID, NOTION_CURSOR_KIND, NOTION_DEFAULT_POLL_INTERVAL_MS, createNotionConnector, isTransientNotionError, validateNotionConfig, type NotionBlock, type NotionConnectorConfig, type NotionFetchFn, type NotionPage, type NotionSyncResult, } from "./notion.js";
+export { GMAIL_CONNECTOR_ID, GMAIL_CURSOR_KIND, GMAIL_DEFAULT_POLL_INTERVAL_MS, buildListQuery, createGmailConnector, internalDateToEpochSeconds, internalDateToIso, isTransientGmailError, validateGmailConfig, type GmailConnectorConfig, type GmailFetchFn, type GmailHeader, type GmailMessage, type GmailMessagePart, type GmailMessageRef, type GmailSyncResult, } from "./gmail.js";
+export { GITHUB_CONNECTOR_ID, GITHUB_CURSOR_KIND, GITHUB_DEFAULT_POLL_INTERVAL_MS, createGitHubConnector, isTransientGitHubError, validateGitHubConfig, type GitHubComment, type GitHubConnectorConfig, type GitHubFetchFn, type GitHubSyncResult, } from "./github.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/connectors/live/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/live/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,EAC1B,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,IAAI,qCAAqC,EACjE,0BAA0B,EAC1B,+BAA+B,EAC/B,qBAAqB,EACrB,yBAAyB,EACzB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC3B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,+BAA+B,EAC/B,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,8BAA8B,EAC9B,cAAc,EACd,oBAAoB,EACpB,0BAA0B,EAC1B,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,+BAA+B,EAC/B,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC"}

package/dist/connectors/live/notion.d.ts

@@ -0,0 +1,146 @@
+/**
+ * @remnic/core — Notion live connector (issue #683 PR 3/N)
+ *
+ * Concrete `LiveConnector` implementation that incrementally imports text
+ * content from Notion database pages into Remnic. Built on top of the
+ * framework shipped in PR 1/N (`framework.ts` / `registry.ts` /
+ * `state-store.ts`) and mirrors the structure of the Google Drive connector
+ * (PR 2/N).
+ *
+ * Design notes:
+ *
+ *   - **Auth.** Integration token from config (`connectors.notion.token`).
+ *     The token is accepted at config-parse time but never logged. Operators
+ *     must populate it from a secret store; per the repo-wide privacy policy
+ *     no real value may appear in tests or comments.
+ *
+ *   - **Scope.** `databaseIds` in config limits the import to the listed
+ *     Notion databases. The connector queries each database for pages whose
+ *     `last_edited_time` is after a per-page high-water mark stored in the
+ *     cursor. When `databaseIds` is empty the connector does nothing (safe
+ *     default — no credentials → no import).
+ *
+ *   - **Cursor semantics.** The cursor is a JSON string encoding a
+ *     `NotionCursorPayload`: a map from page-id to last-seen
+ *     `last_edited_time` ISO string. On the first sync (cursor=null) we
+ *     seed the payload from the current state of each database WITHOUT
+ *     importing any content, so "first install" doesn't re-ingest history.
+ *     Each subsequent pass only imports pages edited after the stored
+ *     watermark.
+ *
+ *   - **Block extraction.** Page content is fetched via
+ *     `blocks.children.list` recursively up to `MAX_BLOCK_DEPTH` levels.
+ *     Block text is extracted to Markdown-ish plain text (no raw JSON blobs).
+ *     Only text-bearing block types are included; unsupported types are
+ *     silently skipped.
+ *
+ *   - **Raw `fetch`.** We call the Notion REST API directly rather than using
+ *     `@notionhq/client` — there is no optional-peer-dep machinery needed and
+ *     the API surface we consume is tiny. The `fetchFn` argument is the test
+ *     hook allowing stubbing without network access.
+ *
+ *   - **Idempotency.** `ConnectorDocument.source.externalId` is the page id
+ *     and `externalRevision` is `last_edited_time`, so downstream dedup can
+ *     recognise repeat fetches if the cursor is rewound.
+ *
+ *   - **Privacy.** No page content is ever logged. Database ids and counts
+ *     may be logged. The integration token is never exposed in logs, state,
+ *     or error messages.
+ *
+ *   - **Read-only.** This connector only reads. It never modifies pages,
+ *     databases, or any other Notion resource.
+ */
+import type { LiveConnector, SyncIncrementalResult } from "./framework.js";
+/** Stable connector id. Lives in the registry under this exact string. */
+export declare const NOTION_CONNECTOR_ID = "notion";
+/**
+ * Cursor `kind` we emit. Opaque to the framework; documented here so
+ * tests can assert on it.
+ */
+export declare const NOTION_CURSOR_KIND = "notionWatermark";
+/**
+ * Default poll interval (5 minutes). Notion's API has no push capability;
+ * polling sub-minute wastes quota for a personal memory layer.
+ */
+export declare const NOTION_DEFAULT_POLL_INTERVAL_MS: number;
+/**
+ * Validated, frozen view of `connectors.notion.*`.
+ */
+export interface NotionConnectorConfig {
+    /** Notion integration token. Starts with `secret_`. */
+    readonly token: string;
+    /** Database ids to import pages from. Empty = connector is a no-op. */
+    readonly databaseIds: readonly string[];
+    /** Poll interval surfaced to the scheduler (ms). */
+    readonly pollIntervalMs: number;
+}
+/** Minimal Notion page shape from `databases/{id}/query`. */
+export interface NotionPage {
+    readonly id: string;
+    readonly last_edited_time: string;
+    readonly url?: string;
+    readonly properties?: Record<string, {
+        type?: string;
+        title?: Array<{
+            plain_text?: string;
+        }>;
+    }>;
+}
+/** Minimal block shape from `blocks/{id}/children`. */
+export interface NotionBlock {
+    readonly id: string;
+    readonly type: string;
+    readonly has_children?: boolean;
+    readonly [key: string]: unknown;
+}
+/**
+ * Minimal fetch-compatible surface we use. The real connector delegates to
+ * the global `fetch`; tests inject a stub factory.
+ */
+export type NotionFetchFn = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+    signal?: AbortSignal;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+/**
+ * Validate and normalise raw config. Throws with a concrete message on any
+ * malformed input — never silently defaults (CLAUDE.md gotcha #51).
+ */
+export declare function validateNotionConfig(raw: unknown): NotionConnectorConfig;
+/**
+ * Classify a per-page fetch error as transient (re-throw to caller so the
+ * sync stops without advancing the cursor and the next poll retries) or
+ * terminal (skip the page and continue).
+ *
+ * We use raw `fetch`, so errors arrive either as network-layer `Error`
+ * instances (no `.status`) or we detect them ourselves by inspecting the
+ * HTTP status code from the parsed JSON body (attached as `notionStatus`).
+ *
+ * Delegates to the shared `isTransientHttpError` helper in
+ * `transient-errors.ts` (Thread 3 — Cursor PRRT_kwDORJXyws59sdH4). The
+ * Notion-specific `notionStatus` property is passed as an extra lookup key
+ * so the shared resolver finds it before the generic `status` field.
+ */
+export declare function isTransientNotionError(err: unknown): boolean;
+/**
+ * Result of a single sync pass. Superset of `SyncIncrementalResult` for
+ * richer test assertions.
+ */
+export interface NotionSyncResult extends SyncIncrementalResult {
+    readonly skippedUnchanged: number;
+    readonly skippedTooLarge: number;
+    readonly skippedEmpty: number;
+}
+/**
+ * Construct the connector. The `fetchFn` argument is the test hook —
+ * production callers omit it and the connector uses the global `fetch`.
+ */
+export declare function createNotionConnector(options?: {
+    fetchFn?: NotionFetchFn;
+}): LiveConnector;
+//# sourceMappingURL=notion.d.ts.map

package/dist/connectors/live/notion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notion.d.ts","sourceRoot":"","sources":["../../../src/connectors/live/notion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH,OAAO,KAAK,EAIV,aAAa,EAEb,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAQxB,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,WAAW,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,+BAA+B,QAAgB,CAAC;AAmC7D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,oDAAoD;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAmBD,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAC1B,MAAM,EACN;QACE,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,KAAK,CAAC;YAAE,UAAU,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACxC,CACF,CAAC;CACH;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAEhC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAcD;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,KACE,OAAO,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B,CAAC,CAAC;AAMH;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,CAyExE;AA6DD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE5D;AAkPD;;;GAGG;AACH,MAAM,WAAW,gBAAiB,SAAQ,qBAAqB;IAC7D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAMD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,aAAa,CAAA;CAAO,GACxC,aAAa,CAwEf"}