@rubytech/create-sitedesk-code 0.1.550 → 0.1.552

package/payload/platform/plugins/scheduling/mcp/dist/tools/scheduling-gate.js

@@ -0,0 +1,410 @@
+/**
+ * Task 2378 — the precondition a gated routine calls before the model is
+ * invoked.
+ *
+ * One tool serves every routine because the dispatcher evaluates exactly one
+ * gate per event, and each binding names its own checks in `gateArgs`. Four
+ * check types, each drawn from what the surveyed routines already do the
+ * expensive way — after a full model turn had already been paid for.
+ *
+ * Every check reads a STRUCTURED source. None parses another tool's prose:
+ * deciding whether to spend a model turn by matching words in a third-party
+ * tool's wording is exactly what the plugin doctrine forbids, and it is why the
+ * D1 check reads the query envelope and the WhatsApp check reads the status
+ * JSON rather than either tool's rendered text.
+ *
+ * Direction of failure is uniform and deliberate: any check that errors, or
+ * whose source is unreachable, contributes `hasWork: true` and its own name in
+ * `reasons`. A gate that fails closed silently mutes a routine and reads healthy
+ * on every surface, which is the Task 2313 class this must not recreate.
+ */
+import { createHash } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { getSession } from "../lib/neo4j.js";
+/**
+ * Rooted at the INSTALL, not at the account.
+ *
+ * `eventId` is a UUID, so the filename is already unique across accounts and no
+ * account segment adds anything. What an account segment would add is a way for
+ * the two callers to disagree: the gate runs under the dispatcher's
+ * `ACCOUNT_ID` (the event's account) and the commit runs inside the agent turn,
+ * whose account is resolved by the channel. A path that depended on that
+ * resolution would let the commit write one file while the next gate read
+ * another, and the symptom would be a routine that never stops reporting work.
+ */
+export function watermarkPath(eventId, platformRoot) {
+    return resolve(platformRoot, "..", "state", "scheduling-gate", `${eventId}.json`);
+}
+export function readWatermarks(eventId, platformRoot) {
+    try {
+        const raw = readFileSync(watermarkPath(eventId, platformRoot), "utf-8");
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        // A first run has no file, and an unreadable one must not be a hard error:
+        // an empty watermark set makes every watermarked check report work, which
+        // is the fail-open direction the whole tool holds to.
+        return {};
+    }
+}
+function writeWatermarks(eventId, platformRoot, marks) {
+    const path = watermarkPath(eventId, platformRoot);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(marks, null, 2));
+}
+// ---------------------------------------------------------------------------
+// Real sources
+// ---------------------------------------------------------------------------
+function loopbackBase() {
+    // PLATFORM_PORT is what every plugin resolves its loopback base from. The
+    // dispatcher stamps it from MAXY_UI_INTERNAL_PORT when the cron env carries
+    // only the latter (lib/gate.ts), so both names are accepted here rather than
+    // making this tool the one place that disagrees.
+    const port = process.env.PLATFORM_PORT ?? process.env.MAXY_UI_INTERNAL_PORT;
+    if (!port) {
+        throw new Error("neither PLATFORM_PORT nor MAXY_UI_INTERNAL_PORT is set — no loopback base URL");
+    }
+    return `http://127.0.0.1:${port}`;
+}
+async function getJson(path, accountId) {
+    const res = await fetch(`${loopbackBase()}${path}`, {
+        headers: { "x-maxy-caller-account": accountId },
+    });
+    if (!res.ok)
+        throw new Error(`HTTP ${res.status} on GET ${path}`);
+    return (await res.json());
+}
+async function postJson(path, accountId, body) {
+    const res = await fetch(`${loopbackBase()}${path}`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", "x-maxy-caller-account": accountId },
+        body: JSON.stringify(body),
+    });
+    if (!res.ok)
+        throw new Error(`HTTP ${res.status} on POST ${path}`);
+    return (await res.json());
+}
+/**
+ * D1: the first column of the first row of a single count query.
+ *
+ * The envelope is `[{results: [...]}]`, unwrapped the same way
+ * `parsePendingRows` (ui/server/portal-uploads-pull.ts:458) does, because both
+ * read the same `d1Query` return. Getting the shape wrong yields zero rows,
+ * which is indistinguishable from an empty result and would make this check
+ * report "no work" for ever — so an envelope this cannot understand throws and
+ * is counted as work rather than parsed optimistically.
+ */
+export function parseD1Count(payload) {
+    const result = payload?.result;
+    const envelope = Array.isArray(result) ? result[0] : null;
+    const rows = envelope?.results;
+    if (!Array.isArray(rows)) {
+        throw new Error("unexpected d1 payload: envelope carries no results array");
+    }
+    if (rows.length === 0)
+        return 0;
+    const first = rows[0];
+    const values = Object.values(first);
+    if (values.length === 0)
+        return 0;
+    const n = Number(values[0]);
+    if (Number.isNaN(n))
+        throw new Error(`d1 first column is not a number: ${String(values[0])}`);
+    return n;
+}
+/**
+ * The calendar digest.
+ *
+ * The task specified a Google sync token. No sync token exists anywhere in this
+ * tree — `plugins/google/mcp/src/tools/calendar-list.ts` queries with `timeMin`
+ * and stores nothing — so there is no token to compare. What DOES exist, inside
+ * this plugin's own graph, is the `:ConnectorBusy` set that
+ * `schedule-connector-busy-sync` wholesale-replaces on every connector sync. A
+ * digest over that set changes exactly when the connector calendar changes,
+ * which is the signal the sync token was wanted for, and it needs no credential
+ * and no cross-plugin call.
+ *
+ * The connector name is inside the digest so that re-authorising against a
+ * different provider reads as a change even when the busy blocks happen to
+ * coincide.
+ */
+export function digestBusy(connector, intervals) {
+    const sorted = [...intervals].sort((a, b) => a.start === b.start ? a.end.localeCompare(b.end) : a.start.localeCompare(b.start));
+    const body = sorted.map((iv) => `${iv.start}/${iv.end}`).join(",");
+    return createHash("sha256").update(`${connector}\n${body}`).digest("hex");
+}
+/**
+ * IMAP config for a mailbox, read from the `:EmailAccount` node the email plugin
+ * writes at setup. Read rather than imported: pulling the email plugin's
+ * `credentials.ts` across the plugin boundary would make scheduling's build
+ * depend on email's, and the node is the same source that module reads.
+ */
+async function readMailboxConfig(accountId, mailbox) {
+    const session = getSession();
+    try {
+        const res = await session.run(`MATCH (e:EmailAccount {accountId: $accountId, email: $mailbox})
+       RETURN e.imapHost AS host, e.imapPort AS port, e.imapSecurity AS security LIMIT 1`, { accountId, mailbox });
+        if (res.records.length === 0)
+            return null;
+        const r = res.records[0];
+        const rawPort = r.get("port");
+        const port = typeof rawPort === "number"
+            ? rawPort
+            : rawPort && typeof rawPort.toNumber === "function"
+                ? rawPort.toNumber()
+                : Number(rawPort ?? 993);
+        const host = r.get("host");
+        if (!host)
+            return null;
+        return { host, port, secure: r.get("security") === "tls" };
+    }
+    finally {
+        await session.close();
+    }
+}
+/** The brand-rooted store the email plugin writes at `config/email-credentials.json`. */
+function readMailboxPassword(mailbox) {
+    const path = resolve(process.env.PLATFORM_ROOT, "config", "email-credentials.json");
+    const store = JSON.parse(readFileSync(path, "utf-8"));
+    const pass = store[mailbox];
+    if (!pass || pass.trim() === "") {
+        throw new Error(`no stored credential for ${mailbox} at ${path}`);
+    }
+    return pass;
+}
+/**
+ * The mail probe: is there a UID above the watermark, optionally with a matching
+ * subject.
+ *
+ * It opens IMAP itself rather than reading `(:EmailAccount).lastFetchedUid`,
+ * which the email plugin already maintains. That watermark is advanced by the
+ * agent's own `email-fetch` calls, so a gate reading it would mute itself
+ * permanently at its first skip: no turn, no fetch, no movement, no work ever
+ * reported again. The probe has to be independent of the thing it gates.
+ */
+const realMail = async (check, sinceUid, accountId) => {
+    const config = await readMailboxConfig(accountId, check.mailbox);
+    if (!config)
+        throw new Error(`no :EmailAccount node for ${check.mailbox}`);
+    const password = readMailboxPassword(check.mailbox);
+    const { ImapFlow } = await import("imapflow");
+    const client = new ImapFlow({
+        host: config.host,
+        port: config.port,
+        secure: config.secure,
+        auth: { user: check.mailbox, pass: password },
+        logger: false,
+        tls: { rejectUnauthorized: true },
+        connectionTimeout: 30_000,
+        greetingTimeout: 30_000,
+        socketTimeout: 30_000,
+    });
+    await client.connect();
+    try {
+        const lock = await client.getMailboxLock(check.folder ?? "INBOX");
+        try {
+            const box = client.mailbox;
+            const uidValidity = box && typeof box !== "boolean" ? Number(box.uidValidity) : null;
+            // `UID SEARCH UID <n+1>:*` is the whole probe. Nothing is fetched: the
+            // question is only whether anything arrived, and a body fetch here would
+            // cost what the gate exists to save.
+            const uids = await client.search({ uid: `${sinceUid + 1}:*` }, { uid: true });
+            let matched = Array.isArray(uids) ? uids : [];
+            if (check.subjectPrefixes && check.subjectPrefixes.length > 0 && matched.length > 0) {
+                const perPrefix = await Promise.all(check.subjectPrefixes.map((p) => client.search({ uid: `${sinceUid + 1}:*`, header: { subject: p } }, { uid: true })));
+                const union = new Set();
+                for (const set of perPrefix)
+                    for (const u of Array.isArray(set) ? set : [])
+                        union.add(u);
+                matched = [...union];
+            }
+            // The highest UID SEEN, not the highest MATCHED: committing a matched-only
+            // high-water mark would re-examine every non-matching message on the next
+            // fire for ever, and committing below what was seen would replay them.
+            const seen = Array.isArray(uids) ? uids : [];
+            const highestUid = seen.length > 0 ? Math.max(...seen) : sinceUid;
+            return { matched: matched.length > 0, highestUid, uidValidity };
+        }
+        finally {
+            lock.release();
+        }
+    }
+    finally {
+        try {
+            await client.logout();
+        }
+        catch {
+            try {
+                client.close();
+            }
+            catch {
+                // best effort
+            }
+        }
+    }
+};
+export const REAL_SOURCES = {
+    mail: realMail,
+    d1: async (check, accountId) => {
+        const body = await postJson("/api/storage/d1/query", accountId, {
+            name: check.database,
+            sql: check.sql,
+        });
+        if (typeof body.error === "string")
+            throw new Error(body.error);
+        return parseD1Count(body);
+    },
+    whatsappStatus: async (accountId) => {
+        const body = await getJson("/api/whatsapp/status", accountId);
+        const accounts = Array.isArray(body.accounts) ? body.accounts : [];
+        // Connected means EVERY linked account's socket is up. An install with one
+        // disconnected socket among several has a channel that cannot deliver, and
+        // reporting that as connected is the case the check exists to catch.
+        const connected = accounts.length > 0 && accounts.every((a) => a.connected === true);
+        return { connected };
+    },
+    whatsappInbound: async (accountId, sinceEpochSec) => {
+        const convBody = await getJson("/api/whatsapp/conversations", accountId);
+        const conversations = Array.isArray(convBody.conversations) ? convBody.conversations : [];
+        let latest = sinceEpochSec;
+        let newer = false;
+        // The conversation list carries the last message of each thread whichever
+        // direction it went, so it narrows the candidate set and cannot answer on
+        // its own — our own outbound reply moves the same field. Only threads that
+        // moved are opened, so a quiet quarter-hour costs exactly one request.
+        for (const conv of conversations) {
+            const c = conv;
+            const ts = typeof c.lastMessageTimestamp === "number" ? c.lastMessageTimestamp : 0;
+            if (typeof c.jid !== "string" || ts <= sinceEpochSec)
+                continue;
+            const msgBody = await getJson(`/api/whatsapp/messages?jid=${encodeURIComponent(c.jid)}&limit=50`, accountId);
+            const messages = Array.isArray(msgBody.messages) ? msgBody.messages : [];
+            for (const m of messages) {
+                const msg = m;
+                const mts = typeof msg.timestamp === "number" ? msg.timestamp : 0;
+                if (mts > latest)
+                    latest = mts;
+                if (msg.fromMe !== true && mts > sinceEpochSec)
+                    newer = true;
+            }
+        }
+        return { latest, newer };
+    },
+    calendarDigest: async (check, accountId) => {
+        const session = getSession();
+        try {
+            const res = await session.run(`MATCH (b:ConnectorBusy {accountId: $accountId})
+         RETURN toString(b.startsAt) AS start, toString(b.endsAt) AS end`, { accountId });
+            return digestBusy(check.connector, res.records.map((r) => ({ start: r.get("start"), end: r.get("end") })));
+        }
+        finally {
+            await session.close();
+        }
+    },
+};
+// ---------------------------------------------------------------------------
+// Evaluation
+// ---------------------------------------------------------------------------
+async function probe(check, marks, accountId, sources) {
+    switch (check.type) {
+        case "mail": {
+            const key = `${check.mailbox}|${check.folder ?? "INBOX"}`;
+            const stored = marks.mail?.[key];
+            const since = stored?.uid ?? 0;
+            const res = await sources.mail(check, since, accountId);
+            // A UIDVALIDITY change means the server renumbered the folder, so the
+            // stored UID names a different message. Treating that as work is the only
+            // honest answer: the alternative is comparing against a number that no
+            // longer refers to anything.
+            const renumbered = stored != null && stored.uidValidity != null && res.uidValidity !== stored.uidValidity;
+            return {
+                hasWork: res.matched || renumbered,
+                mark: (m) => {
+                    m.mail = { ...(m.mail ?? {}), [key]: { uid: res.highestUid, uidValidity: res.uidValidity } };
+                    return key;
+                },
+            };
+        }
+        case "d1": {
+            const count = await sources.d1(check, accountId);
+            return { hasWork: count > 0, mark: null };
+        }
+        case "whatsapp": {
+            if (check.scope === "status") {
+                const { connected } = await sources.whatsappStatus(accountId);
+                return { hasWork: !connected, mark: null };
+            }
+            const since = marks.whatsapp?.inbound ?? 0;
+            const res = await sources.whatsappInbound(accountId, since);
+            return {
+                hasWork: res.newer,
+                mark: (m) => {
+                    m.whatsapp = { ...(m.whatsapp ?? {}), inbound: res.latest };
+                    return "whatsapp";
+                },
+            };
+        }
+        case "calendar": {
+            const digest = await sources.calendarDigest(check, accountId);
+            const stored = marks.calendar?.digest;
+            return {
+                hasWork: stored !== digest,
+                mark: (m) => {
+                    m.calendar = { ...(m.calendar ?? {}), digest };
+                    return "calendar";
+                },
+            };
+        }
+    }
+}
+/**
+ * Run every check and answer whether the routine has work.
+ *
+ * `hasWork` is true when ANY check is true, which is what makes one tool serve
+ * every binding: a routine names the sources it cares about and the disjunction
+ * is the routine's precondition.
+ *
+ * On a commit, every named check is re-probed and its current position written.
+ * Re-probing rather than reusing an earlier read is the point — the commit runs
+ * at the END of the agent turn, and anything that arrived while the turn ran has
+ * not been seen by the model, so it must stay above the watermark.
+ */
+export async function runSchedulingGate(params, accountId, platformRoot, sources = REAL_SOURCES) {
+    const started = Date.now();
+    const marks = readWatermarks(params.eventId, platformRoot);
+    const reasons = [];
+    const advanced = [];
+    let hasWork = false;
+    for (const check of params.checks) {
+        let outcome;
+        try {
+            outcome = await probe(check, marks, accountId, sources);
+        }
+        catch (err) {
+            const detail = err instanceof Error ? err.message : String(err);
+            console.error(`[scheduling-gate] op=check-error kind=${check.type} detail=${detail} treatedAs=has-work`);
+            hasWork = true;
+            if (!reasons.includes(check.type))
+                reasons.push(check.type);
+            continue;
+        }
+        if (outcome.hasWork) {
+            hasWork = true;
+            if (!reasons.includes(check.type))
+                reasons.push(check.type);
+        }
+        if (params.commit && outcome.mark)
+            advanced.push(outcome.mark(marks));
+    }
+    if (params.commit) {
+        marks.lastCommitAt = new Date().toISOString();
+        writeWatermarks(params.eventId, platformRoot, marks);
+        console.error(`[scheduling-gate] op=commit eventId=${params.eventId.slice(0, 8)} advanced=${advanced.join(",")}`);
+    }
+    console.error(`[scheduling-gate] op=checked hasWork=${hasWork} reasons=${reasons.join(",")} ` +
+        `checks=${params.checks.length} ms=${Date.now() - started}`);
+    return params.commit ? { hasWork, reasons, advanced } : { hasWork, reasons };
+}
+//# sourceMappingURL=scheduling-gate.js.map

package/payload/platform/plugins/scheduling/mcp/dist/tools/scheduling-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduling-gate.js","sourceRoot":"","sources":["../../src/tools/scheduling-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAsE7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,YAAoB;IACjE,OAAO,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,YAAoB;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QACjD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,0EAA0E;QAC1E,sDAAsD;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,YAAoB,EAAE,KAAqB;IACnF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAClD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAiCD,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,SAAS,YAAY;IACnB,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,iDAAiD;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,oBAAoB,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,SAAiB;IACpD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,EAAE,GAAG,IAAI,EAAE,EAAE;QAClD,OAAO,EAAE,EAAE,uBAAuB,EAAE,SAAS,EAAE;KAChD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,WAAW,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAY,EACZ,SAAiB,EACjB,IAAa;IAEb,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,EAAE,GAAG,IAAI,EAAE,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,SAAS,EAAE;QACnF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,YAAY,IAAI,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,MAAM,GAAI,OAAuC,EAAE,MAAM,CAAC;IAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,MAAM,IAAI,GAAI,QAAyC,EAAE,OAAO,CAAC;IACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA4B,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,UAAU,CACxB,SAAiB,EACjB,SAAgD;IAEhD,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1C,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAClF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,OAAe;IAEf,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;yFACmF,EACnF,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;QACF,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAY,CAAC;QACzC,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ;YACzB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,OAAO,IAAI,OAAQ,OAAuC,CAAC,QAAQ,KAAK,UAAU;gBAClF,CAAC,CAAE,OAAsC,CAAC,QAAQ,EAAE;gBACpD,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAkB,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAmB,KAAK,KAAK,EAAE,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAc,EAAE,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA2B,CAAC;IAChF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,QAAQ,GAAwB,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7C,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE;QACjC,iBAAiB,EAAE,MAAM;QACzB,eAAe,EAAE,MAAM;QACvB,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;YAC3B,MAAM,WAAW,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACrF,uEAAuE;YACvE,yEAAyE;YACzE,qCAAqC;YACrC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CACnF,CACF,CAAC;gBACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;gBAChC,KAAK,MAAM,GAAG,IAAI,SAAS;oBAAE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;wBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzF,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,2EAA2E;YAC3E,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;QAClE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,IAAI,EAAE,QAAQ;IACd,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,uBAAuB,EAAE,SAAS,EAAE;YAC9D,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,GAAG,EAAE,KAAK,CAAC,GAAG;SACf,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,2EAA2E;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA6B,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;QAClG,OAAO,EAAE,SAAS,EAAE,CAAC;IACvB,CAAC;IACD,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,IAAI,MAAM,GAAG,aAAa,CAAC;QAC3B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,IAAyD,CAAC;YACpE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,EAAE,IAAI,aAAa;gBAAE,SAAS;YAC/D,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,8BAA8B,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAClE,SAAS,CACV,CAAC;YACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,CAA8C,CAAC;gBAC3D,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClE,IAAI,GAAG,GAAG,MAAM;oBAAE,MAAM,GAAG,GAAG,CAAC;gBAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,GAAG,aAAa;oBAAE,KAAK,GAAG,IAAI,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;yEACiE,EACjE,EAAE,SAAS,EAAE,CACd,CAAC;YACF,OAAO,UAAU,CACf,KAAK,CAAC,SAAS,EACf,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAW,EAAE,CAAC,CAAC,CAC3F,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,KAAK,UAAU,KAAK,CAClB,KAAgB,EAChB,KAAqB,EACrB,SAAiB,EACjB,OAAoB;IAEpB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YACxD,sEAAsE;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,6BAA6B;YAC7B,MAAM,UAAU,GACd,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;YACzF,OAAO;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,UAAU;gBAClC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;oBACV,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC7F,OAAO,GAAG,CAAC;gBACb,CAAC;aACF,CAAC;QACJ,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC9D,OAAO,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC7C,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,GAAG,CAAC,KAAK;gBAClB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;oBACV,CAAC,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC5D,OAAO,UAAU,CAAC;gBACpB,CAAC;aACF,CAAC;QACJ,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,MAAM,KAAK,MAAM;gBAC1B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;oBACV,CAAC,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;oBAC/C,OAAO,UAAU,CAAC;gBACpB,CAAC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA4B,EAC5B,SAAiB,EACjB,YAAoB,EACpB,UAAuB,YAAY;IAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,OAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,KAAK,CACX,yCAAyC,KAAK,CAAC,IAAI,WAAW,MAAM,qBAAqB,CAC1F,CAAC;YACF,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,CACX,uCAAuC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACnG,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,KAAK,CACX,wCAAwC,OAAO,YAAY,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAC7E,UAAU,MAAM,CAAC,MAAM,CAAC,MAAM,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAC9D,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC/E,CAAC"}

package/payload/platform/plugins/scheduling/mcp/package.json

@@ -12,6 +12,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
     "cron-parser": "^4.9.0",
+    "imapflow": "^1.0.171",
     "neo4j-driver": "^5.28.1",
     "zod": "^3.24.0"
   },

package/payload/platform/plugins/telegram/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "telegram",
-  "description": "Guide users through connecting a Telegram bot — creating a bot via BotFather, finding user IDs, and configuring admin vs public bots.",
+  "description": "Guide users through connecting Telegram bots — creating a bot via BotFather, finding user IDs, and registering any number of bots, each with its own role, access policy and agent.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/telegram/PLUGIN.md

@@ -1,6 +1,6 @@
 ---
 name: telegram
-description: Guide users through connecting a Telegram bot — creating a bot via BotFather, finding user IDs, and configuring admin vs public bots.
+description: Guide users through connecting Telegram bots — creating a bot via BotFather, finding user IDs, and registering any number of bots, each with its own role, access policy and agent.
 metadata: {"platform":{"optional":true}}
 tools:
   - name: message
@@ -44,14 +44,16 @@ Walks users through connecting Telegram bots. Covers bot creation, token configu
 ## What it unlocks
 
 - Telegram as a messaging channel — DMs and group conversations routed to the AI assistant
-- Multi-bot support — separate admin and public bots with different access policies
+- Any number of bots per account, each with its own role, its own access policy and its own agent
 - Admin routing — restrict a bot to admin-only access via numeric user ID bindings
 
 ## Setup
 
-Connecting a Telegram bot runs through the `telegram:configure` skill (`skills/configure/SKILL.md`) — the brand-aware, PTY-only setup flow. It is the maxy `telegram:configure`; on `-code` brands the upstream `claude-plugins-official/telegram` plugin is not installed, so there is no shadowing. The skill stores the BotFather token under the brand install, registers the webhook on the `/api/telegram/` edge path, sets access policy, and selects the responding agent.
+Connecting a Telegram bot runs through the `telegram:configure` skill (`skills/configure/SKILL.md`) — the brand-aware, PTY-only setup flow. It is the maxy `telegram:configure`; on `-code` brands the upstream `claude-plugins-official/telegram` plugin is not installed, so there is no shadowing. The skill stores the BotFather token under the brand install, registers the webhook on the `/api/telegram/` edge path, and sets the bot's role, access policy and agent.
 
-Each account owns its own bot. `telegram-webhook-register` stamps the calling account onto the registered URL as `account=<accountId>` and writes that account's own secret file (`~/.<brand>/.telegram-{admin-}webhook-secret.<accountId>`), so registering one account's bot cannot disturb another's. A bot registered before the account parameter existed answers `reason=missing-account-param` until it is registered once more; the standing `[telegram-audit]` line names the account that needs it.
+An account holds `telegram.bots[]`, an array keyed on each bot's own Telegram id (the token's `:`-prefix). Each entry carries its own `token`, an explicit `role` (`admin` or `public`, never derived from a slug, because it selects the spawn path), the policy for that bot alone, and — on a public entry only — the `agent` it answers as. An admin entry names no agent: it reads `agents/admin` by construction. `telegram-webhook-register` derives the bot id from the token, stamps `?bot=<botId>` onto the registered URL, and replaces only the entry with that id, so registering one bot cannot disturb another in any account. Secrets live at `~/.<brand>/telegram-secrets/<botId>` (directory 700, file 600).
+
+A bot registered before the registry answers `reason=unknown-bot` until it is registered once more; the boot converter rewrites the old two-slot config in place but makes no outbound call, and the standing `[telegram-audit]` line names every bot that has not re-registered.
 
 ## References