@stigmer/sdk 3.12.4 → 3.12.5

package/src/mcpserver-connect.ts

@@ -0,0 +1,159 @@
+import { Code, ConnectError } from "@connectrpc/connect";
+import type { McpServer } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import type { ConnectInput } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/io_pb";
+import { ConnectPhase } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/status_pb";
+import { isUnimplemented, wrapError } from "./gen/errors.js";
+
+/**
+ * The slice of {@link McpServerClient} the connect protocol needs — the
+ * async-lane pair plus the blocking fallback. Structural on purpose: the
+ * full client satisfies it, and tests can hand in three functions.
+ */
+export interface McpServerConnectLane {
+  startConnect(input: ConnectInput): Promise<McpServer>;
+  connect(input: ConnectInput): Promise<McpServer>;
+  get(id: string): Promise<McpServer>;
+}
+
+/**
+ * How often {@link connectAndWait} re-reads the resource while a connect
+ * operation runs. Discovery legitimately takes tens of seconds to minutes;
+ * a few seconds of staleness is invisible next to that, and each poll is
+ * one cheap get.
+ */
+export const CONNECT_POLL_INTERVAL_MS = 2_500;
+
+/**
+ * Absolute bound on waiting for a connect to settle: the backend's async
+ * connect ceiling (its asyncConnectTimeout, 60 min) plus margin. Every
+ * operation settles within the ceiling by construction; only a
+ * connect_status orphaned by a backend restart can still read CONNECTING
+ * past it, and this bound turns that into a typed error instead of an
+ * infinite wait.
+ */
+export const CONNECT_SETTLE_BOUND_MS = 65 * 60_000;
+
+/**
+ * Thrown by {@link connectAndWait} when it stopped waiting while the
+ * server-side operation was still running. NOT a failure: the backend
+ * finishes the connect on its own and persists the result — re-read the
+ * resource (or re-run the connect) to observe the outcome.
+ */
+export class ConnectStillRunningError extends Error {
+  readonly mcpServerId: string;
+
+  constructor(mcpServerId: string, waitedMs: number) {
+    super(
+      `the connect of MCP server '${mcpServerId}' is still running server-side after ${Math.round(waitedMs / 1000)}s — ` +
+        "it will persist its result on its own; re-read the server to observe the outcome",
+    );
+    this.name = "ConnectStillRunningError";
+    this.mcpServerId = mcpServerId;
+  }
+}
+
+/** Options for {@link connectAndWait}. */
+export interface ConnectAndWaitOptions {
+  /** Poll cadence. Defaults to {@link CONNECT_POLL_INTERVAL_MS}. */
+  readonly pollIntervalMs?: number;
+  /**
+   * Stop waiting after this long (soft bound — the server-side operation
+   * keeps running). Defaults to {@link CONNECT_SETTLE_BOUND_MS}, and is
+   * capped by it: waiting longer than the backend's own ceiling can only
+   * ever observe an orphaned record.
+   */
+  readonly deadlineMs?: number;
+  /**
+   * Observe the CONNECTING snapshot the moment the operation is accepted —
+   * the place to read `status.connect_status.warning` (the dead-runner
+   * advisory) before the wait begins. Not called on the blocking fallback,
+   * which has no start-time snapshot.
+   */
+  readonly onStarted?: (started: McpServer) => void;
+}
+
+/**
+ * Connect an MCP server and wait for the operation to settle, without any
+ * long-lived RPC (stigmer/stigmer#425).
+ *
+ * Uses the async lane — `startConnect` returns immediately with
+ * `status.connect_status = CONNECTING`, then the resource is polled until
+ * the operation settles — so the wait survives transport limits that kill
+ * a long-blocking unary call (browsers drop no-bytes responses around
+ * ~300s, below the server's discovery ceiling). Callers never see the
+ * mechanics: the promise resolves with the updated server exactly as the
+ * blocking `connect` RPC resolved, and a failed operation rejects with the
+ * same {@link StigmerError} classification the blocking RPC would have
+ * thrown (`connect_status.failure_code` is the Go gRPC code name, which
+ * matches connect-es `Code` member names — rehydration is lossless).
+ *
+ * Backends that predate the async lane answer UNIMPLEMENTED for
+ * `startConnect`; this falls back to the blocking `connect` RPC — the same
+ * edition capability-probe idiom as the skill artifact-transfer lane
+ * (skill.ts) and the org-OAuth-app surface.
+ */
+export async function connectAndWait(
+  client: McpServerConnectLane,
+  input: ConnectInput,
+  options?: ConnectAndWaitOptions,
+): Promise<McpServer> {
+  const pollIntervalMs = options?.pollIntervalMs ?? CONNECT_POLL_INTERVAL_MS;
+  const waitMs = Math.min(options?.deadlineMs ?? CONNECT_SETTLE_BOUND_MS, CONNECT_SETTLE_BOUND_MS);
+
+  let started: McpServer;
+  try {
+    started = await client.startConnect(input);
+  } catch (err) {
+    if (!isUnimplemented(err)) throw err;
+    return blockingConnect(client, input, waitMs);
+  }
+  options?.onStarted?.(started);
+
+  const deadline = Date.now() + waitMs;
+  for (;;) {
+    if (Date.now() >= deadline) {
+      throw new ConnectStillRunningError(input.mcpServerId, waitMs);
+    }
+    await sleep(Math.min(pollIntervalMs, Math.max(1, deadline - Date.now())));
+
+    const current = await client.get(input.mcpServerId);
+    const cs = current.status?.connectStatus;
+    if (cs?.phase === ConnectPhase.succeeded) return current;
+    if (cs?.phase === ConnectPhase.failed) {
+      throw rehydrateConnectFailure(cs.failureCode, cs.failureMessage);
+    }
+  }
+}
+
+// The pre-async-lane path, kept behaviorally identical for old backends: one
+// blocking RPC, raced (not cancelled — the server finishes and persists on
+// its own) against the caller's soft bound.
+async function blockingConnect(client: McpServerConnectLane, input: ConnectInput, waitMs: number): Promise<McpServer> {
+  const push = client.connect(input);
+  // The losing push may settle after the caller has moved on; swallow its
+  // late rejection so it cannot surface as an unhandled-rejection crash.
+  void push.catch(() => {});
+
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  const timeout = new Promise<never>((_, reject) => {
+    timer = setTimeout(() => reject(new ConnectStillRunningError(input.mcpServerId, waitMs)), waitMs);
+  });
+  try {
+    return await Promise.race([push, timeout]);
+  } finally {
+    if (timer !== undefined) clearTimeout(timer);
+  }
+}
+
+// Rebuild the failure the blocking connect RPC would have thrown, from the
+// classification the backend persisted on connect_status. Routing the
+// rehydrated ConnectError through wrapError makes the result byte-identical
+// to a live RPC failure (same StigmerError code mapping, same raw message).
+function rehydrateConnectFailure(failureCode: string, failureMessage: string) {
+  const code = (Code as Record<string, unknown>)[failureCode];
+  return wrapError(new ConnectError(failureMessage, typeof code === "number" ? (code as Code) : Code.Unknown));
+}
+
+function sleep(ms: number): Promise<void> {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}

package/src/update-input.ts

@@ -0,0 +1,168 @@
+// Complete update-input mappers.
+//
+// The platform's update RPCs are FULL-SPEC REPLACEMENTS: the request spec
+// wholesale overwrites the stored spec (both editions; only a small
+// server-side preserve list of immutable identifiers survives). A client
+// that sends only the fields it edits therefore silently WIPES every other
+// mutable spec field — a data-loss bug class, not a single bug
+// (stigmer/stigmer#293 Phase 1 surfaced it when `spec.preferences` set via
+// CLI was dropped by a console profile save).
+//
+// These mappers are the structural fix: they convert a LOADED resource into
+// a complete `*Input` for the generated update builders. Editors spread the
+// mapper output and override only the fields they edit:
+//
+//   await update({ ...toOrganizationUpdateInput(org), description: next });
+//
+// The `CompleteInput` mapped type removes optionality from every Input key,
+// so when codegen adds a new Input field, compilation fails HERE — the one
+// place a human must decide how the new field round-trips — instead of the
+// field silently wiping in every subset-editing form.
+//
+// NESTED MESSAGE RULE: `CompleteInput` only sees TOP-LEVEL keys — a nested
+// message (e.g. `preferences`) is one key whose object literal would keep
+// compiling when codegen adds fields INSIDE it, recreating the wipe bug one
+// level down. Every nested-message literal in this file must therefore be
+// built by a dedicated `toXxxInput` helper whose return literal is itself
+// typed `CompleteInput<XxxInput>`. Editors that override a nested message
+// must spread the mapper's complete value and override only their fields:
+//
+//   preferences: { ...mapped.preferences, standingContext: next }
+
+import type { ApiResourceReference } from "@stigmer/protos/ai/stigmer/commons/apiresource/io_pb";
+import type { IdentityAccount } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/api_pb";
+import type { IdentityAccountPreferences } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/spec_pb";
+import type { Organization } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/api_pb";
+import type { OrganizationPreferences } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/spec_pb";
+import type {
+  IdentityAccountInput,
+  IdentityAccountPreferencesInput,
+} from "./gen/identityaccount.js";
+import type {
+  OrganizationInput,
+  OrganizationPreferencesInput,
+} from "./gen/organization.js";
+import type { ResourceRef } from "./gen/types.js";
+
+/**
+ * Every key of `T`, required to be present. Optional keys keep their
+ * `| undefined` value type (explicit `undefined` is stripped by the proto
+ * builders), so a mapper cannot compile while omitting an Input field.
+ *
+ * Mapping over `keyof Required<T>` (instead of a homomorphic `-?` map)
+ * is deliberate: `-?` would also strip `undefined` from optional value
+ * types, forcing fake values for genuinely absent fields.
+ */
+type CompleteInput<T> = { [K in keyof Required<T>]: T[K] };
+
+/**
+ * Maps a loaded {@link Organization} to a complete {@link OrganizationInput}
+ * for `organization.update()`.
+ *
+ * Proto3 scalar defaults (empty string, `false`, enum `0`) are normalized to
+ * `undefined` — omitting them is wire-identical to sending the default, and
+ * it keeps the built proto in the builders' canonical shape.
+ */
+export function toOrganizationUpdateInput(
+  org: Organization,
+): OrganizationInput {
+  const input: CompleteInput<OrganizationInput> = {
+    name: org.metadata?.name ?? "",
+    slug: org.metadata?.slug || undefined,
+    org: org.metadata?.org || org.metadata?.slug || "",
+    labels: nonEmptyLabels(org.metadata?.labels),
+    visibility: org.metadata?.visibility || undefined,
+    description: org.spec?.description || undefined,
+    logoUrl: org.spec?.logoUrl || undefined,
+    managementMode: org.spec?.managementMode || undefined,
+    identityProviderRef: toResourceRef(org.spec?.identityProviderRef),
+    externalOrgId: org.spec?.externalOrgId || undefined,
+    isPersonal: org.spec?.isPersonal || undefined,
+    preferences: org.spec?.preferences
+      ? toOrganizationPreferencesInput(org.spec.preferences)
+      : undefined,
+  };
+  return input;
+}
+
+/**
+ * Maps loaded {@link OrganizationPreferences} to a complete
+ * {@link OrganizationPreferencesInput} (nested-message rule above).
+ */
+function toOrganizationPreferencesInput(
+  preferences: OrganizationPreferences,
+): OrganizationPreferencesInput {
+  const input: CompleteInput<OrganizationPreferencesInput> = {
+    standingContext: preferences.standingContext || undefined,
+  };
+  return input;
+}
+
+/**
+ * Maps a loaded {@link IdentityAccount} to a complete
+ * {@link IdentityAccountInput} for `identityAccount.update()`.
+ *
+ * The generated builder never sets `metadata.id`; the update pipeline
+ * locates the resource by org + slug instead (and authorizes against the
+ * loaded resource's id), so carrying `org` and `slug` here is what makes
+ * the update addressable.
+ */
+export function toIdentityAccountUpdateInput(
+  account: IdentityAccount,
+): IdentityAccountInput {
+  const input: CompleteInput<IdentityAccountInput> = {
+    name: account.metadata?.name ?? "",
+    slug: account.metadata?.slug || undefined,
+    org: account.metadata?.org ?? "",
+    labels: nonEmptyLabels(account.metadata?.labels),
+    visibility: account.metadata?.visibility || undefined,
+    idpId: account.spec?.idpId ?? "",
+    email: account.spec?.email || undefined,
+    firstName: account.spec?.firstName || undefined,
+    lastName: account.spec?.lastName || undefined,
+    pictureUrl: account.spec?.pictureUrl || undefined,
+    isMachineAccount: account.spec?.isMachineAccount || undefined,
+    provisioningMode: account.spec?.provisioningMode || undefined,
+    identityProviderRef: toResourceRef(account.spec?.identityProviderRef),
+    preferences: account.spec?.preferences
+      ? toIdentityAccountPreferencesInput(account.spec.preferences)
+      : undefined,
+  };
+  return input;
+}
+
+/**
+ * Maps loaded {@link IdentityAccountPreferences} to a complete
+ * {@link IdentityAccountPreferencesInput} (nested-message rule above).
+ */
+function toIdentityAccountPreferencesInput(
+  preferences: IdentityAccountPreferences,
+): IdentityAccountPreferencesInput {
+  const input: CompleteInput<IdentityAccountPreferencesInput> = {
+    standingContext: preferences.standingContext || undefined,
+    defaultHarness: preferences.defaultHarness || undefined,
+    defaultNativeModel: preferences.defaultNativeModel || undefined,
+    defaultCursorModel: preferences.defaultCursorModel || undefined,
+  };
+  return input;
+}
+
+function nonEmptyLabels(
+  labels: Record<string, string> | undefined,
+): Record<string, string> | undefined {
+  return labels && Object.keys(labels).length > 0 ? labels : undefined;
+}
+
+function toResourceRef(
+  ref: ApiResourceReference | undefined,
+): ResourceRef | undefined {
+  // The builders treat a ref without org and slug as absent; mirror that so
+  // an empty message round-trips to "no reference".
+  if (!ref || (!ref.org && !ref.slug)) return undefined;
+  return {
+    org: ref.org,
+    slug: ref.slug,
+    ...(ref.version && { version: ref.version }),
+    ...(ref.kind && { kind: ref.kind }),
+  };
+}

package/update-input.d.ts

@@ -0,0 +1,24 @@
+import type { IdentityAccount } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/api_pb";
+import type { Organization } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/api_pb";
+import type { IdentityAccountInput } from "./gen/identityaccount.js";
+import type { OrganizationInput } from "./gen/organization.js";
+/**
+ * Maps a loaded {@link Organization} to a complete {@link OrganizationInput}
+ * for `organization.update()`.
+ *
+ * Proto3 scalar defaults (empty string, `false`, enum `0`) are normalized to
+ * `undefined` — omitting them is wire-identical to sending the default, and
+ * it keeps the built proto in the builders' canonical shape.
+ */
+export declare function toOrganizationUpdateInput(org: Organization): OrganizationInput;
+/**
+ * Maps a loaded {@link IdentityAccount} to a complete
+ * {@link IdentityAccountInput} for `identityAccount.update()`.
+ *
+ * The generated builder never sets `metadata.id`; the update pipeline
+ * locates the resource by org + slug instead (and authorizes against the
+ * loaded resource's id), so carrying `org` and `slug` here is what makes
+ * the update addressable.
+ */
+export declare function toIdentityAccountUpdateInput(account: IdentityAccount): IdentityAccountInput;
+//# sourceMappingURL=update-input.d.ts.map

package/update-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-input.d.ts","sourceRoot":"","sources":["../src/update-input.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAEhG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AAE9F,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,uBAAuB,CAAC;AAc/B;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,YAAY,GAChB,iBAAiB,CAkBnB;AAeD;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,eAAe,GACvB,oBAAoB,CAoBtB"}

package/update-input.js

@@ -0,0 +1,126 @@
+// Complete update-input mappers.
+//
+// The platform's update RPCs are FULL-SPEC REPLACEMENTS: the request spec
+// wholesale overwrites the stored spec (both editions; only a small
+// server-side preserve list of immutable identifiers survives). A client
+// that sends only the fields it edits therefore silently WIPES every other
+// mutable spec field — a data-loss bug class, not a single bug
+// (stigmer/stigmer#293 Phase 1 surfaced it when `spec.preferences` set via
+// CLI was dropped by a console profile save).
+//
+// These mappers are the structural fix: they convert a LOADED resource into
+// a complete `*Input` for the generated update builders. Editors spread the
+// mapper output and override only the fields they edit:
+//
+//   await update({ ...toOrganizationUpdateInput(org), description: next });
+//
+// The `CompleteInput` mapped type removes optionality from every Input key,
+// so when codegen adds a new Input field, compilation fails HERE — the one
+// place a human must decide how the new field round-trips — instead of the
+// field silently wiping in every subset-editing form.
+//
+// NESTED MESSAGE RULE: `CompleteInput` only sees TOP-LEVEL keys — a nested
+// message (e.g. `preferences`) is one key whose object literal would keep
+// compiling when codegen adds fields INSIDE it, recreating the wipe bug one
+// level down. Every nested-message literal in this file must therefore be
+// built by a dedicated `toXxxInput` helper whose return literal is itself
+// typed `CompleteInput<XxxInput>`. Editors that override a nested message
+// must spread the mapper's complete value and override only their fields:
+//
+//   preferences: { ...mapped.preferences, standingContext: next }
+/**
+ * Maps a loaded {@link Organization} to a complete {@link OrganizationInput}
+ * for `organization.update()`.
+ *
+ * Proto3 scalar defaults (empty string, `false`, enum `0`) are normalized to
+ * `undefined` — omitting them is wire-identical to sending the default, and
+ * it keeps the built proto in the builders' canonical shape.
+ */
+export function toOrganizationUpdateInput(org) {
+    const input = {
+        name: org.metadata?.name ?? "",
+        slug: org.metadata?.slug || undefined,
+        org: org.metadata?.org || org.metadata?.slug || "",
+        labels: nonEmptyLabels(org.metadata?.labels),
+        visibility: org.metadata?.visibility || undefined,
+        description: org.spec?.description || undefined,
+        logoUrl: org.spec?.logoUrl || undefined,
+        managementMode: org.spec?.managementMode || undefined,
+        identityProviderRef: toResourceRef(org.spec?.identityProviderRef),
+        externalOrgId: org.spec?.externalOrgId || undefined,
+        isPersonal: org.spec?.isPersonal || undefined,
+        preferences: org.spec?.preferences
+            ? toOrganizationPreferencesInput(org.spec.preferences)
+            : undefined,
+    };
+    return input;
+}
+/**
+ * Maps loaded {@link OrganizationPreferences} to a complete
+ * {@link OrganizationPreferencesInput} (nested-message rule above).
+ */
+function toOrganizationPreferencesInput(preferences) {
+    const input = {
+        standingContext: preferences.standingContext || undefined,
+    };
+    return input;
+}
+/**
+ * Maps a loaded {@link IdentityAccount} to a complete
+ * {@link IdentityAccountInput} for `identityAccount.update()`.
+ *
+ * The generated builder never sets `metadata.id`; the update pipeline
+ * locates the resource by org + slug instead (and authorizes against the
+ * loaded resource's id), so carrying `org` and `slug` here is what makes
+ * the update addressable.
+ */
+export function toIdentityAccountUpdateInput(account) {
+    const input = {
+        name: account.metadata?.name ?? "",
+        slug: account.metadata?.slug || undefined,
+        org: account.metadata?.org ?? "",
+        labels: nonEmptyLabels(account.metadata?.labels),
+        visibility: account.metadata?.visibility || undefined,
+        idpId: account.spec?.idpId ?? "",
+        email: account.spec?.email || undefined,
+        firstName: account.spec?.firstName || undefined,
+        lastName: account.spec?.lastName || undefined,
+        pictureUrl: account.spec?.pictureUrl || undefined,
+        isMachineAccount: account.spec?.isMachineAccount || undefined,
+        provisioningMode: account.spec?.provisioningMode || undefined,
+        identityProviderRef: toResourceRef(account.spec?.identityProviderRef),
+        preferences: account.spec?.preferences
+            ? toIdentityAccountPreferencesInput(account.spec.preferences)
+            : undefined,
+    };
+    return input;
+}
+/**
+ * Maps loaded {@link IdentityAccountPreferences} to a complete
+ * {@link IdentityAccountPreferencesInput} (nested-message rule above).
+ */
+function toIdentityAccountPreferencesInput(preferences) {
+    const input = {
+        standingContext: preferences.standingContext || undefined,
+        defaultHarness: preferences.defaultHarness || undefined,
+        defaultNativeModel: preferences.defaultNativeModel || undefined,
+        defaultCursorModel: preferences.defaultCursorModel || undefined,
+    };
+    return input;
+}
+function nonEmptyLabels(labels) {
+    return labels && Object.keys(labels).length > 0 ? labels : undefined;
+}
+function toResourceRef(ref) {
+    // The builders treat a ref without org and slug as absent; mirror that so
+    // an empty message round-trips to "no reference".
+    if (!ref || (!ref.org && !ref.slug))
+        return undefined;
+    return {
+        org: ref.org,
+        slug: ref.slug,
+        ...(ref.version && { version: ref.version }),
+        ...(ref.kind && { kind: ref.kind }),
+    };
+}
+//# sourceMappingURL=update-input.js.map

package/update-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-input.js","sourceRoot":"","sources":["../src/update-input.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,EAAE;AACF,0EAA0E;AAC1E,oEAAoE;AACpE,yEAAyE;AACzE,2EAA2E;AAC3E,+DAA+D;AAC/D,2EAA2E;AAC3E,8CAA8C;AAC9C,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,sDAAsD;AACtD,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,EAAE;AACF,kEAAkE;AA4BlE;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAiB;IAEjB,MAAM,KAAK,GAAqC;QAC9C,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QAC9B,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS;QACrC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QAClD,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC5C,UAAU,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,IAAI,SAAS;QACjD,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,SAAS;QAC/C,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,SAAS;QACvC,cAAc,EAAE,GAAG,CAAC,IAAI,EAAE,cAAc,IAAI,SAAS;QACrD,mBAAmB,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC;QACjE,aAAa,EAAE,GAAG,CAAC,IAAI,EAAE,aAAa,IAAI,SAAS;QACnD,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,SAAS;QAC7C,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW;YAChC,CAAC,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YACtD,CAAC,CAAC,SAAS;KACd,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,8BAA8B,CACrC,WAAoC;IAEpC,MAAM,KAAK,GAAgD;QACzD,eAAe,EAAE,WAAW,CAAC,eAAe,IAAI,SAAS;KAC1D,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAwB;IAExB,MAAM,KAAK,GAAwC;QACjD,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QAClC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS;QACzC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE;QAChC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC;QAChD,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,IAAI,SAAS;QACrD,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAChC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,SAAS;QACvC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,IAAI,SAAS;QAC/C,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,SAAS;QAC7C,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,SAAS;QACjD,gBAAgB,EAAE,OAAO,CAAC,IAAI,EAAE,gBAAgB,IAAI,SAAS;QAC7D,gBAAgB,EAAE,OAAO,CAAC,IAAI,EAAE,gBAAgB,IAAI,SAAS;QAC7D,mBAAmB,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC;QACrE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW;YACpC,CAAC,CAAC,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;YAC7D,CAAC,CAAC,SAAS;KACd,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,iCAAiC,CACxC,WAAuC;IAEvC,MAAM,KAAK,GAAmD;QAC5D,eAAe,EAAE,WAAW,CAAC,eAAe,IAAI,SAAS;QACzD,cAAc,EAAE,WAAW,CAAC,cAAc,IAAI,SAAS;QACvD,kBAAkB,EAAE,WAAW,CAAC,kBAAkB,IAAI,SAAS;QAC/D,kBAAkB,EAAE,WAAW,CAAC,kBAAkB,IAAI,SAAS;KAChE,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,MAA0C;IAE1C,OAAO,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,aAAa,CACpB,GAAqC;IAErC,0EAA0E;IAC1E,kDAAkD;IAClD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC"}