@rubytech/create-realagent 1.0.707 → 1.0.709

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-realagent",
-  "version": "1.0.707",
+  "version": "1.0.709",
   "description": "Install Real Agent — Built for agents. By agents.",
   "bin": {
     "create-realagent": "./dist/index.js"

package/payload/platform/lib/oauth-llm/dist/index.d.ts

@@ -0,0 +1,101 @@
+/**
+ * OAuth-bearer LLM calls for admin-side classifiers (Task 740).
+ *
+ * Every admin-side classifier (memory-classify, memory-rank, commitment,
+ * adherence, inbound-gateway, query classifier, summarisation, email
+ * screening) uses Claude Code OAuth credentials — never the Anthropic
+ * API key. The API-key path is reserved for the public agent.
+ *
+ * Mechanism: read the access token from ~/.claude/.credentials.json,
+ * refresh it via the standard refresh-token grant if expired, then call
+ * api.anthropic.com with `Authorization: Bearer <token>` and the
+ * `anthropic-beta: oauth-2025-04-20` header. Billed against the operator's
+ * Claude Code subscription, not the API-key key. Refresh uses a
+ * module-level mutex so concurrent classifier calls during expiry don't
+ * race and invalidate each other's tokens (Anthropic rotates both tokens
+ * on refresh).
+ *
+ * Implementation note: this lib uses raw fetch() rather than the
+ * @anthropic-ai/sdk package to keep the lib dependency-free — every
+ * consumer already has its own SDK copy for other purposes, but the
+ * shared lib would create a circular package dependency. The Messages
+ * API surface we use (model + system + one user message + max_tokens)
+ * is small and stable.
+ *
+ * Failure modes are surfaced as a structured `Result` so callers can
+ * pattern-match without parsing error strings. The skill / agent layer
+ * is responsible for translating `fallback` results into operator-visible
+ * blocker messages (loud failure doctrine — Task 540, 740).
+ */
+declare const OAUTH_BETA_HEADER = "oauth-2025-04-20";
+/** Anthropic tool definition — structural-output enforcement via function calling. */
+export interface OauthLlmTool {
+    name: string;
+    description: string;
+    input_schema: Record<string, unknown>;
+}
+export interface CallOauthLlmParams {
+    /** Anthropic model id (e.g. claude-haiku-4-5). */
+    model: string;
+    /** System prompt — the classifier instructions. */
+    system: string;
+    /** User message — the input to classify / rank / etc. */
+    userMessage: string;
+    /** Max output tokens. Default 4096. */
+    maxTokens?: number;
+    /** Hard timeout in ms for the model call. Default 60_000. */
+    timeoutMs?: number;
+    /**
+     * Optional tools for structured output. When provided with a forced
+     * `toolChoiceName`, the model returns a `tool_use` block whose `input` is
+     * a structured object matching the tool's `input_schema` — strictly typed
+     * JSON without the parsing brittleness of free-form text output.
+     */
+    tools?: OauthLlmTool[];
+    /** Force the model to call this tool. Required when `tools` is provided. */
+    toolChoiceName?: string;
+}
+/** Result when the call did not declare any tool — only text or fallback. */
+export type CallOauthLlmTextResult = {
+    kind: "ok";
+    text: string;
+} | CallOauthLlmFallback;
+/** Result when the call forced a tool — only the tool input or fallback. */
+export type CallOauthLlmToolResult = {
+    kind: "ok-tool";
+    toolName: string;
+    input: Record<string, unknown>;
+} | CallOauthLlmFallback;
+/** Discriminated union of every possible result. Returned by the no-overload form. */
+export type CallOauthLlmResult = CallOauthLlmTextResult | CallOauthLlmToolResult;
+export interface CallOauthLlmFallback {
+    kind: "fallback";
+    /** Human-readable single-line reason (for operator-visible blocker). */
+    reason: string;
+    /** Stable classifier — callers can pattern-match for retry/abort policy. */
+    cause: "missing-creds" | "dead-token" | "refresh-failed" | "auth-error" | "rate-limit" | "server-error" | "network-error" | "timeout" | "empty-response" | "malformed-response" | "unexpected";
+}
+/**
+ * Call an Anthropic model via OAuth bearer auth.
+ *
+ * Returns:
+ *   { kind: "ok", text }                   — model's text response
+ *   { kind: "ok-tool", toolName, input }   — when `tools` + `toolChoiceName` provided
+ *   { kind: "fallback", reason, cause }    — caller decides whether to abort
+ *
+ * The caller is responsible for translating fallback results into
+ * operator-visible blocker messages — this wrapper never silently
+ * substitutes a degraded response.
+ *
+ * Overloads narrow the return type by call shape: text-only callers (no
+ * `tools`) statically rule out `ok-tool`; tool callers statically rule out
+ * `ok`. Mixed callers get the full union.
+ */
+export declare function callOauthLlm(params: Omit<CallOauthLlmParams, "tools" | "toolChoiceName">): Promise<CallOauthLlmTextResult>;
+export declare function callOauthLlm(params: CallOauthLlmParams & {
+    tools: OauthLlmTool[];
+    toolChoiceName: string;
+}): Promise<CallOauthLlmToolResult>;
+export declare function callOauthLlm(params: CallOauthLlmParams): Promise<CallOauthLlmResult>;
+export { OAUTH_BETA_HEADER };
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/oauth-llm/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAgBH,QAAA,MAAM,iBAAiB,qBAAqB,CAAC;AAe7C,sFAAsF;AACtF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,4EAA4E;IAC5E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,6EAA6E;AAC7E,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5B,oBAAoB,CAAC;AAEzB,4EAA4E;AAC5E,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACrE,oBAAoB,CAAC;AAEzB,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;AAEjF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,EACD,eAAe,GACf,YAAY,GACZ,gBAAgB,GAChB,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,eAAe,GACf,SAAS,GACT,gBAAgB,GAChB,oBAAoB,GACpB,YAAY,CAAC;CAClB;AAuND;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,OAAO,GAAG,gBAAgB,CAAC,GAC3D,OAAO,CAAC,sBAAsB,CAAC,CAAC;AACnC,wBAAgB,YAAY,CAC1B,MAAM,EAAE,kBAAkB,GAAG;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,sBAAsB,CAAC,CAAC;AACnC,wBAAgB,YAAY,CAC1B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAwK/B,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/payload/platform/lib/oauth-llm/dist/index.js

@@ -0,0 +1,353 @@
+"use strict";
+/**
+ * OAuth-bearer LLM calls for admin-side classifiers (Task 740).
+ *
+ * Every admin-side classifier (memory-classify, memory-rank, commitment,
+ * adherence, inbound-gateway, query classifier, summarisation, email
+ * screening) uses Claude Code OAuth credentials — never the Anthropic
+ * API key. The API-key path is reserved for the public agent.
+ *
+ * Mechanism: read the access token from ~/.claude/.credentials.json,
+ * refresh it via the standard refresh-token grant if expired, then call
+ * api.anthropic.com with `Authorization: Bearer <token>` and the
+ * `anthropic-beta: oauth-2025-04-20` header. Billed against the operator's
+ * Claude Code subscription, not the API-key key. Refresh uses a
+ * module-level mutex so concurrent classifier calls during expiry don't
+ * race and invalidate each other's tokens (Anthropic rotates both tokens
+ * on refresh).
+ *
+ * Implementation note: this lib uses raw fetch() rather than the
+ * @anthropic-ai/sdk package to keep the lib dependency-free — every
+ * consumer already has its own SDK copy for other purposes, but the
+ * shared lib would create a circular package dependency. The Messages
+ * API surface we use (model + system + one user message + max_tokens)
+ * is small and stable.
+ *
+ * Failure modes are surfaced as a structured `Result` so callers can
+ * pattern-match without parsing error strings. The skill / agent layer
+ * is responsible for translating `fallback` results into operator-visible
+ * blocker messages (loud failure doctrine — Task 540, 740).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAUTH_BETA_HEADER = void 0;
+exports.callOauthLlm = callOauthLlm;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
+// ---------------------------------------------------------------------------
+// Constants — token endpoint, client id, beta header, file path.
+// All four are pinned values that match the Claude Code CLI's own usage.
+// ---------------------------------------------------------------------------
+const CREDENTIALS_FILE = (0, node_path_1.resolve)((0, node_os_1.homedir)(), ".claude", ".credentials.json");
+const TOKEN_ENDPOINT = "https://platform.claude.com/v1/oauth/token";
+const ANTHROPIC_MESSAGES_ENDPOINT = "https://api.anthropic.com/v1/messages";
+const ANTHROPIC_VERSION = "2023-06-01";
+const CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+const OAUTH_BETA_HEADER = "oauth-2025-04-20";
+exports.OAUTH_BETA_HEADER = OAUTH_BETA_HEADER;
+/** Refresh proactively when the token expires within this window. */
+const EXPIRING_THRESHOLD_MS = 5 * 60 * 1000;
+// ---------------------------------------------------------------------------
+// Credential reading + refresh — minimal duplicate of platform/ui claude-auth.
+// We duplicate (not import) so this lib stays self-contained and importable
+// from MCP plugins via dist/. The duplicated logic is small and the auth
+// mechanism is pinned by Anthropic — divergence risk is low.
+// ---------------------------------------------------------------------------
+function readCredentials() {
+    let raw;
+    try {
+        raw = (0, node_fs_1.readFileSync)(CREDENTIALS_FILE, "utf-8");
+    }
+    catch {
+        return null;
+    }
+    let data;
+    try {
+        data = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    const oauth = data.claudeAiOauth;
+    if (!oauth || typeof oauth !== "object")
+        return null;
+    const accessToken = oauth.accessToken;
+    const refreshToken = oauth.refreshToken;
+    const expiresAt = oauth.expiresAt;
+    if (typeof accessToken !== "string" || !accessToken)
+        return null;
+    if (typeof expiresAt !== "number" || !Number.isFinite(expiresAt) || expiresAt <= 0) {
+        return null;
+    }
+    return {
+        accessToken,
+        refreshToken: typeof refreshToken === "string" && refreshToken ? refreshToken : null,
+        expiresAt,
+    };
+}
+function writeCredentials(tokens) {
+    const newExpiresAt = typeof tokens.expiresIn === "number" && tokens.expiresIn > 0
+        ? Date.now() + tokens.expiresIn * 1000
+        : Date.now() + 3600 * 1000;
+    let fileData = {};
+    try {
+        fileData = JSON.parse((0, node_fs_1.readFileSync)(CREDENTIALS_FILE, "utf-8"));
+    }
+    catch {
+        // start fresh
+    }
+    const existing = fileData.claudeAiOauth;
+    fileData.claudeAiOauth = {
+        ...existing,
+        accessToken: tokens.accessToken,
+        ...(tokens.refreshToken != null ? { refreshToken: tokens.refreshToken } : {}),
+        expiresAt: newExpiresAt,
+    };
+    (0, node_fs_1.writeFileSync)(CREDENTIALS_FILE, JSON.stringify(fileData, null, 2), "utf-8");
+    return newExpiresAt;
+}
+// Module-level mutex serialises refresh calls. Anthropic rotates both
+// tokens on refresh; concurrent unsynchronised refreshes invalidate
+// each other.
+let refreshLock = null;
+async function refreshAccessToken(current) {
+    if (refreshLock)
+        return refreshLock;
+    refreshLock = (async () => {
+        // Re-read inside the lock — another caller may have refreshed already.
+        const fresh = readCredentials();
+        if (fresh && fresh.expiresAt - Date.now() > EXPIRING_THRESHOLD_MS) {
+            return fresh;
+        }
+        if (!current.refreshToken) {
+            return null;
+        }
+        let res;
+        try {
+            res = await fetch(TOKEN_ENDPOINT, {
+                method: "POST",
+                headers: { "Content-Type": "application/x-www-form-urlencoded" },
+                body: new URLSearchParams({
+                    grant_type: "refresh_token",
+                    refresh_token: current.refreshToken,
+                    client_id: CLIENT_ID,
+                }),
+            });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[oauth-llm] refresh network error: ${msg}`);
+            return null;
+        }
+        if (!res.ok) {
+            const body = await res.text().catch(() => "");
+            console.error(`[oauth-llm] refresh failed status=${res.status} body=${body.slice(0, 200)}`);
+            return null;
+        }
+        let tokenData;
+        try {
+            tokenData = (await res.json());
+        }
+        catch {
+            console.error("[oauth-llm] refresh returned malformed JSON");
+            return null;
+        }
+        const newAccessToken = tokenData.access_token;
+        const newRefreshToken = tokenData.refresh_token;
+        const expiresIn = tokenData.expires_in;
+        if (typeof newAccessToken !== "string" || !newAccessToken) {
+            console.error("[oauth-llm] refresh response missing access_token");
+            return null;
+        }
+        const newExpiresAt = writeCredentials({
+            accessToken: newAccessToken,
+            refreshToken: typeof newRefreshToken === "string" && newRefreshToken
+                ? newRefreshToken
+                : current.refreshToken,
+            expiresIn: typeof expiresIn === "number" && expiresIn > 0 ? expiresIn : undefined,
+        });
+        console.error(`[oauth-llm] refresh ok expiresAt=${new Date(newExpiresAt).toISOString()}`);
+        return {
+            accessToken: newAccessToken,
+            refreshToken: typeof newRefreshToken === "string" && newRefreshToken
+                ? newRefreshToken
+                : current.refreshToken,
+            expiresAt: newExpiresAt,
+        };
+    })();
+    try {
+        return await refreshLock;
+    }
+    finally {
+        refreshLock = null;
+    }
+}
+/**
+ * Read credentials and proactively refresh if approaching expiry.
+ * Returns null when the credentials are missing or unrecoverable
+ * (operator must re-authenticate via Claude Code login).
+ */
+async function ensureValidToken() {
+    const creds = readCredentials();
+    if (!creds)
+        return null;
+    const remaining = creds.expiresAt - Date.now();
+    if (remaining > EXPIRING_THRESHOLD_MS)
+        return creds;
+    if (remaining > 0 && !creds.refreshToken)
+        return creds; // valid but no way to renew
+    if (remaining <= 0 && !creds.refreshToken)
+        return null; // dead
+    return refreshAccessToken(creds);
+}
+// ---------------------------------------------------------------------------
+// First-call beta-header diagnostic — emitted once per process so server.log
+// makes the OAuth path visible without flooding on every classifier call.
+// ---------------------------------------------------------------------------
+let betaHeaderLogged = false;
+function logBetaHeaderOnce() {
+    if (betaHeaderLogged)
+        return;
+    betaHeaderLogged = true;
+    console.error(`[oauth-llm] beta-header=${OAUTH_BETA_HEADER}`);
+}
+async function callOauthLlm(params) {
+    const { model, system, userMessage, maxTokens = 4096, timeoutMs = 60_000, tools, toolChoiceName, } = params;
+    if (tools && tools.length > 0 && !toolChoiceName) {
+        return {
+            kind: "fallback",
+            cause: "unexpected",
+            reason: "callOauthLlm: `tools` provided without `toolChoiceName`. Forced tool selection is required.",
+        };
+    }
+    logBetaHeaderOnce();
+    const creds = await ensureValidToken();
+    if (!creds) {
+        return {
+            kind: "fallback",
+            cause: "missing-creds",
+            reason: "Claude Code OAuth credentials missing or expired with no refresh token available — operator must re-authenticate.",
+        };
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let res;
+    try {
+        res = await fetch(ANTHROPIC_MESSAGES_ENDPOINT, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "anthropic-version": ANTHROPIC_VERSION,
+                "anthropic-beta": OAUTH_BETA_HEADER,
+                Authorization: `Bearer ${creds.accessToken}`,
+            },
+            body: JSON.stringify({
+                model,
+                max_tokens: maxTokens,
+                system,
+                messages: [{ role: "user", content: userMessage }],
+                ...(tools && tools.length > 0 ? { tools } : {}),
+                ...(toolChoiceName
+                    ? { tool_choice: { type: "tool", name: toolChoiceName } }
+                    : {}),
+            }),
+            signal: controller.signal,
+        });
+    }
+    catch (err) {
+        clearTimeout(timer);
+        const msg = err instanceof Error ? err.message : String(err);
+        if (controller.signal.aborted) {
+            return {
+                kind: "fallback",
+                cause: "timeout",
+                reason: `Model call timed out after ${timeoutMs}ms.`,
+            };
+        }
+        return {
+            kind: "fallback",
+            cause: "network-error",
+            reason: `Network error reaching Anthropic: ${msg}`,
+        };
+    }
+    clearTimeout(timer);
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        if (res.status === 401 || res.status === 403) {
+            return {
+                kind: "fallback",
+                cause: "auth-error",
+                reason: `OAuth bearer rejected (status=${res.status}) — token may be revoked or beta header rejected. body=${body.slice(0, 200)}`,
+            };
+        }
+        if (res.status === 429) {
+            return {
+                kind: "fallback",
+                cause: "rate-limit",
+                reason: `Anthropic rate limit hit (status=429): ${body.slice(0, 200)}`,
+            };
+        }
+        if (res.status >= 500) {
+            return {
+                kind: "fallback",
+                cause: "server-error",
+                reason: `Anthropic server error (status=${res.status}): ${body.slice(0, 200)}`,
+            };
+        }
+        return {
+            kind: "fallback",
+            cause: "unexpected",
+            reason: `Anthropic returned status=${res.status}: ${body.slice(0, 200)}`,
+        };
+    }
+    let payload;
+    try {
+        payload = (await res.json());
+    }
+    catch {
+        return {
+            kind: "fallback",
+            cause: "malformed-response",
+            reason: "Anthropic returned malformed JSON.",
+        };
+    }
+    if (payload.error) {
+        return {
+            kind: "fallback",
+            cause: "unexpected",
+            reason: `Anthropic API error: ${payload.error.type ?? "unknown"} ${payload.error.message ?? ""}`,
+        };
+    }
+    // When the caller forced a tool, prefer the tool_use block — its input
+    // is the structured output the caller wants.
+    if (toolChoiceName) {
+        const toolBlock = payload.content?.find((block) => block.type === "tool_use");
+        if (!toolBlock || !toolBlock.input || typeof toolBlock.input !== "object") {
+            return {
+                kind: "fallback",
+                cause: "empty-response",
+                reason: "Model returned no tool_use block despite forced tool selection.",
+            };
+        }
+        return {
+            kind: "ok-tool",
+            toolName: toolBlock.name ?? toolChoiceName,
+            input: toolBlock.input,
+        };
+    }
+    const textBlock = payload.content?.find((block) => {
+        if (block.type !== "text")
+            return false;
+        const candidate = block.text;
+        return typeof candidate === "string" && candidate.trim().length > 0;
+    });
+    if (!textBlock) {
+        return {
+            kind: "fallback",
+            cause: "empty-response",
+            reason: "Model returned no text content.",
+        };
+    }
+    return { kind: "ok", text: textBlock.text };
+}
+//# sourceMappingURL=index.js.map

package/payload/platform/lib/oauth-llm/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AA0UH,oCAiKC;AAzeD,qCAAsD;AACtD,yCAAoC;AACpC,qCAAkC;AAElC,8EAA8E;AAC9E,iEAAiE;AACjE,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,IAAA,mBAAO,EAAC,IAAA,iBAAO,GAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAC5E,MAAM,cAAc,GAAG,4CAA4C,CAAC;AACpE,MAAM,2BAA2B,GAAG,uCAAuC,CAAC;AAC5E,MAAM,iBAAiB,GAAG,YAAY,CAAC;AACvC,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAiepC,8CAAiB;AA/d1B,qEAAqE;AACrE,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAyE5C,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,yEAAyE;AACzE,6DAA6D;AAC7D,8EAA8E;AAE9E,SAAS,eAAe;IACtB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,aAAoD,CAAC;IACxE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAElC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,WAAW;QACX,YAAY,EACV,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QACxE,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAIzB;IACC,MAAM,YAAY,GAChB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;QAC1D,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI;QACtC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAE/B,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,gBAAgB,EAAE,OAAO,CAAC,CAG5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAoD,CAAC;IAC/E,QAAQ,CAAC,aAAa,GAAG;QACvB,GAAG,QAAQ;QACX,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,SAAS,EAAE,YAAY;KACxB,CAAC;IAEF,IAAA,uBAAa,EAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5E,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,sEAAsE;AACtE,oEAAoE;AACpE,cAAc;AACd,IAAI,WAAW,GAA6C,IAAI,CAAC;AAEjE,KAAK,UAAU,kBAAkB,CAC/B,OAA0B;IAE1B,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;QACxB,uEAAuE;QACvE,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,EAAE,CAAC;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,eAAe;oBAC3B,aAAa,EAAE,OAAO,CAAC,YAAY;oBACnC,SAAS,EAAE,SAAS;iBACrB,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,KAAK,CACX,qCAAqC,GAAG,CAAC,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC7E,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAAkC,CAAC;QACvC,IAAI,CAAC;YACH,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,CAAC;QAC9C,MAAM,eAAe,GAAG,SAAS,CAAC,aAAa,CAAC;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC;QAEvC,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1D,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,gBAAgB,CAAC;YACpC,WAAW,EAAE,cAAc;YAC3B,YAAY,EACV,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe;gBACpD,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,OAAO,CAAC,YAAY;YAC1B,SAAS,EAAE,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAClF,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CACX,oCAAoC,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAC3E,CAAC;QAEF,OAAO;YACL,WAAW,EAAE,cAAc;YAC3B,YAAY,EACV,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe;gBACpD,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,OAAO,CAAC,YAAY;YAC1B,SAAS,EAAE,YAAY;SACxB,CAAC;IACJ,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB;IAC7B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/C,IAAI,SAAS,GAAG,qBAAqB;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC,CAAC,4BAA4B;IACpF,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC,CAAC,OAAO;IAE/D,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAE9E,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAE7B,SAAS,iBAAiB;IACxB,IAAI,gBAAgB;QAAE,OAAO;IAC7B,gBAAgB,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,KAAK,CAAC,2BAA2B,iBAAiB,EAAE,CAAC,CAAC;AAChE,CAAC;AA4CM,KAAK,UAAU,YAAY,CAChC,MAA0B;IAE1B,MAAM,EACJ,KAAK,EACL,MAAM,EACN,WAAW,EACX,SAAS,GAAG,IAAI,EAChB,SAAS,GAAG,MAAM,EAClB,KAAK,EACL,cAAc,GACf,GAAG,MAAM,CAAC;IAEX,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,6FAA6F;SACtG,CAAC;IACJ,CAAC;IAED,iBAAiB,EAAE,CAAC;IAEpB,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,eAAe;YACtB,MAAM,EACJ,mHAAmH;SACtH,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAE9D,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,2BAA2B,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,iBAAiB;gBACtC,gBAAgB,EAAE,iBAAiB;gBACnC,aAAa,EAAE,UAAU,KAAK,CAAC,WAAW,EAAE;aAC7C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK;gBACL,UAAU,EAAE,SAAS;gBACrB,MAAM;gBACN,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;gBAClD,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,cAAc;oBAChB,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;oBACzD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YACF,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,8BAA8B,SAAS,KAAK;aACrD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,qCAAqC,GAAG,EAAE;SACnD,CAAC;IACJ,CAAC;IACD,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,iCAAiC,GAAG,CAAC,MAAM,0DAA0D,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aAClI,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,0CAA0C,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aACvE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACtB,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,kCAAkC,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aAC/E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,6BAA6B,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SACzE,CAAC;IACJ,CAAC;IAED,IAAI,OAAkC,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8B,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,oBAAoB;YAC3B,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,wBAAwB,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE;SACjG,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,6CAA6C;IAC7C,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CACrC,CAAC,KAAK,EAAiF,EAAE,CACvF,KAAK,CAAC,IAAI,KAAK,UAAU,CAC5B,CAAC;QACF,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1E,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,iEAAiE;aAC1E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,SAAS,CAAC,IAAI,IAAI,cAAc;YAC1C,KAAK,EAAE,SAAS,CAAC,KAAK;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CACrC,CAAC,KAAK,EAA2C,EAAE;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,SAAS,GAAI,KAA4B,CAAC,IAAI,CAAC;QACrD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IACtE,CAAC,CACF,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,iCAAiC;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC"}