@wascartech/devbot 0.0.0-stage → 2.1.0

package/dist/mr-assignee.js

@@ -0,0 +1,71 @@
+import { getGlobalSettings } from "./global-settings-store.js";
+import { log } from "./logger.js";
+import { getPlatform } from "./platform/index.js";
+import { getProjectSettings } from "./settings-store.js";
+function skipped(projectId, username, reason) {
+    log.warn("mr assignee skipped", { projectId, username, reason });
+    return {
+        warning: reason === "not-a-member"
+            ? `⚠️ Assignee not set: @${username} is not a member of this project.`
+            : reason === "unresolved"
+                ? `⚠️ Assignee not set: @${username} could not be resolved on this forge.`
+                : `⚠️ Assignee not set: could not verify @${username} on this forge.`,
+    };
+}
+// Resolution order: project "none" (deliberate, no warning) -> project username
+// -> global username -> nobody. The membership gate runs before creation.
+export async function resolveMrAssignee(projectId) {
+    let username;
+    try {
+        const projectValue = getProjectSettings(projectId)?.assignee ?? "";
+        if (projectValue === "none")
+            return {};
+        username = projectValue || getGlobalSettings().assignee;
+        if (!username)
+            return {};
+    }
+    catch (e) {
+        log.warn("mr assignee settings unreadable", { projectId, err: e });
+        return {};
+    }
+    try {
+        const user = await getPlatform().workItems.resolveUser(username);
+        if (!user)
+            return skipped(projectId, username, "unresolved");
+        const permission = await getPlatform().workItems.getMemberPermission(projectId, {
+            id: user.id,
+            username: user.username,
+        });
+        if (permission === "none")
+            return skipped(projectId, username, "not-a-member");
+        return { assignee: { id: user.id, username: user.username } };
+    }
+    catch {
+        return skipped(projectId, username, "forge-error");
+    }
+}
+// Create the MR with the resolved assignee. Creation errors propagate to the
+// runner's existing MR-failure handling: the pre-flight resolution/membership
+// gate is the only assignee-related best-effort layer.
+export async function createChangeRequestWithAssignee(projectId, input) {
+    const resolved = await resolveMrAssignee(projectId);
+    const mr = await getPlatform().changeRequests.create(projectId, resolved.assignee ? { ...input, assignee: resolved.assignee } : input);
+    return {
+        mr,
+        note: `✅ Merge request created: ${mr.webUrl}${resolved.warning ? `\n\n${resolved.warning}` : ""}`,
+        ...(resolved.warning ? { warning: resolved.warning } : {}),
+    };
+}
+// Settings-route trust boundary: a non-empty username must exist on the forge.
+// Membership is deliberately not checked here (C2) — it can change later.
+export async function validateAssigneeUsername(username) {
+    if (!username)
+        return "ok";
+    try {
+        return (await getPlatform().workItems.resolveUser(username)) ? "ok" : "unknown";
+    }
+    catch {
+        return "error";
+    }
+}
+//# sourceMappingURL=mr-assignee.js.map

package/dist/mr-assignee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mr-assignee.js","sourceRoot":"","sources":["../src/mr-assignee.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAazD,SAAS,OAAO,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAA0B;IAC9E,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,OAAO;QACL,OAAO,EACL,MAAM,KAAK,cAAc;YACvB,CAAC,CAAC,yBAAyB,QAAQ,mCAAmC;YACtE,CAAC,CAAC,MAAM,KAAK,YAAY;gBACvB,CAAC,CAAC,yBAAyB,QAAQ,uCAAuC;gBAC1E,CAAC,CAAC,0CAA0C,QAAQ,iBAAiB;KAC5E,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,kBAAkB,CAAC,SAAS,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;QACnE,IAAI,YAAY,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QACvC,QAAQ,GAAG,YAAY,IAAI,iBAAiB,EAAE,CAAC,QAAQ,CAAC;QACxD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAU,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,WAAW,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,WAAW,EAAE,CAAC,SAAS,CAAC,mBAAmB,CAAC,SAAS,EAAE;YAC9E,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,IAAI,UAAU,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC/E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,SAAiB,EACjB,KAA2C;IAE3C,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC,cAAc,CAAC,MAAM,CAClD,SAAS,EACT,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CACtE,CAAC;IAEF,OAAO;QACL,EAAE;QACF,IAAI,EAAE,4BAA4B,EAAE,CAAC,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACjG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAID,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAAgB;IAC7D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,WAAW,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/mr-content.js

@@ -0,0 +1,90 @@
+// Pure parser for the agent-authored MR/PR content block. The build-mode agent
+//   ends its reply with a fenced ```mr block carrying `title:` and `description:`
+//   lines; devbot extracts it, strips it from the note text, and feeds it to
+//   createMergeRequest / updateMergeRequest. Falls back to the historical
+//   defaults (`Resolves #<number>` / `Generated by devbot.`) when the block is
+//   absent or malformed — a malformed block never blocks the MR/PR.
+//
+// Format (documented in the build-mode prompt suffix in runner.ts):
+//   ```mr
+//   title: <single-line Conventional Commit summary, end with (#<number>)>
+//   description:
+//   <Markdown body — structured as ## Summary / ## Changes / ## Rationale
+//    sections, ending with `Resolves #<number>`; transported to the forge verbatim>
+//   ```
+//
+// The block must be the LAST fenced ```mr block in the reply. All such blocks
+//   are stripped from the note text posted to the work item (the metadata block
+//   is internal transport, not user-facing prose).
+const DEFAULT_TITLE = (workItemNumber) => `Resolves #${workItemNumber}`;
+const DEFAULT_DESCRIPTION = "Generated by devbot.";
+const TITLE_MAX = 255;
+const DESCRIPTION_MAX = 8000;
+const MR_BLOCK = /```mr\s*\n([\s\S]*?)```/g;
+// Strip any trailing (#<digits>) suffix from the title and append the correct
+//   work-item number anchor. Idempotent: a title already ending in (#<number>)
+//   is returned unchanged; a title with a wrong/old number is normalized to the
+//   correct one; re-runs don't grow the title. Slice to 255 AFTER the suffix
+//   is added so the anchor is never truncated away.
+function normalizeTitle(raw, workItemNumber) {
+    // Strip ALL trailing (#<digits>) suffixes (handles double/multiple from
+    //   re-runs), then append the correct one. Idempotent: a title already
+    //   ending in (#<number>) is returned unchanged after strip+re-add.
+    const stripped = raw.trim().replace(/(?:\s*\(#\d+\))+\s*$/, "");
+    // Slice the body to leave room for the suffix, so the anchor is never
+    //   truncated away. Then append.
+    const suffix = ` (#${workItemNumber})`;
+    const maxBody = TITLE_MAX - suffix.length;
+    return `${stripped.slice(0, maxBody)}${suffix}`;
+}
+export function parseMrContent(reply, workItemNumber) {
+    const matches = [...reply.matchAll(MR_BLOCK)];
+    const replyStripped = matches.reduce((acc, m) => acc.replace(m[0], "").trim(), reply);
+    const defaults = {
+        title: DEFAULT_TITLE(workItemNumber),
+        description: DEFAULT_DESCRIPTION,
+    };
+    if (matches.length === 0)
+        return { reply, mr: defaults };
+    const last = matches[matches.length - 1];
+    const body = (last[1] ?? "").trim();
+    if (!body)
+        return { reply: replyStripped, mr: defaults };
+    let title = "";
+    let description = "";
+    let sawTitle = false;
+    let sawDescription = false;
+    const descLines = [];
+    for (const line of body.split("\n")) {
+        if (!sawDescription) {
+            const tMatch = line.match(/^title:\s*(.*)$/);
+            if (tMatch) {
+                title = (tMatch[1] ?? "").trim();
+                sawTitle = true;
+                continue;
+            }
+            const dMatch = line.match(/^description:\s*(.*)$/);
+            if (dMatch) {
+                description = (dMatch[1] ?? "").trim();
+                sawDescription = true;
+                continue;
+            }
+        }
+        else {
+            descLines.push(line);
+        }
+    }
+    if (sawDescription && descLines.length > 0) {
+        const joined = description ? `${description}\n${descLines.join("\n")}` : descLines.join("\n");
+        description = joined.trim();
+    }
+    const mr = {
+        title: sawTitle && title ? normalizeTitle(title, workItemNumber) : defaults.title,
+        description: sawDescription ? (description || defaults.description) : defaults.description,
+    };
+    if (mr.description.length > DESCRIPTION_MAX) {
+        mr.description = mr.description.slice(0, DESCRIPTION_MAX);
+    }
+    return { reply: replyStripped, mr };
+}
+//# sourceMappingURL=mr-content.js.map

package/dist/mr-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mr-content.js","sourceRoot":"","sources":["../src/mr-content.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,kFAAkF;AAClF,6EAA6E;AAC7E,0EAA0E;AAC1E,+EAA+E;AAC/E,oEAAoE;AACpE,EAAE;AACF,oEAAoE;AACpE,UAAU;AACV,2EAA2E;AAC3E,iBAAiB;AACjB,0EAA0E;AAC1E,oFAAoF;AACpF,QAAQ;AACR,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,mDAAmD;AAEnD,MAAM,aAAa,GAAG,CAAC,cAAsB,EAAU,EAAE,CAAC,aAAa,cAAc,EAAE,CAAC;AACxF,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAY5C,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,oDAAoD;AACpD,SAAS,cAAc,CAAC,GAAW,EAAE,cAAsB;IACzD,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IAChE,sEAAsE;IACtE,iCAAiC;IACjC,MAAM,MAAM,GAAG,MAAM,cAAc,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,cAAsB;IAClE,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAClC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EACxC,KAAK,CACN,CAAC;IAEF,MAAM,QAAQ,GAAc;QAC1B,KAAK,EAAE,aAAa,CAAC,cAAc,CAAC;QACpC,WAAW,EAAE,mBAAmB;KACjC,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;IAEzD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;IAEzD,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC7C,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjC,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACnD,IAAI,MAAM,EAAE,CAAC;gBACX,WAAW,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvC,cAAc,GAAG,IAAI,CAAC;gBACtB,SAAS;YACX,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,cAAc,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9F,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,EAAE,GAAc;QACpB,KAAK,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK;QACjF,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW;KAC3F,CAAC;IACF,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAC5C,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC"}

package/dist/oauth-routes.js

@@ -0,0 +1,54 @@
+import { randomBytes } from "node:crypto";
+import { logReq } from "./http-util.js";
+import { config } from "./config.js";
+import { getPlatform } from "./platform/index.js";
+import { isOnboardingAllowed } from "./onboarding-allowlist.js";
+import { signCookie, cookieOptions, SESSION_COOKIE, STATE_COOKIE, } from "./cookie.js";
+export function mountOauthRoutes(app) {
+    const platform = getPlatform();
+    app.get("/oauth/start", (_req, res) => {
+        const state = randomBytes(16).toString("hex");
+        res.cookie(STATE_COOKIE, state, cookieOptions(600));
+        return res.redirect(302, platform.onboarding.authorizeUrl(state));
+    });
+    app.get("/oauth/callback", async (req, res) => {
+        const code = req.query.code;
+        const state = req.query.state;
+        const cookies = req.cookies;
+        const expectedState = cookies?.[STATE_COOKIE];
+        if (!code || !state || state !== expectedState) {
+            logReq(req, "warn", "oauth invalid state", {
+                hasCode: !!code,
+                stateType: typeof state,
+                hasExpectedState: !!expectedState,
+                match: typeof state === "string" && state === expectedState,
+                cookieHeaderPresent: !!req.headers.cookie,
+                cookieKeys: Object.keys(req.cookies ?? {}),
+            });
+            return res.status(403).send("invalid state");
+        }
+        // ponytail: clear state cookie immediately after validation — single-use
+        //   CSRF token, consumed whether the callback succeeds or fails.
+        res.clearCookie(STATE_COOKIE, { path: "/" });
+        try {
+            const { accessToken } = await platform.onboarding.exchangeCode(String(code));
+            const user = await platform.onboarding.currentUser(accessToken);
+            // The allowlist is the single authorization gate for all drivers —
+            // per-forge admin status is no longer checked. Fails closed when
+            // ONBOARDING_USERS is empty.
+            if (!isOnboardingAllowed(user.username, config.ONBOARDING_USERS)) {
+                logReq(req, "warn", "oauth user not allowlisted", { userId: user.id, username: user.username });
+                return res.status(403).send("user not authorized to onboard");
+            }
+            const exp = Math.floor(Date.now() / 1000) + 3600;
+            const cookie = signCookie({ accessToken, userId: user.id, username: user.username, exp });
+            res.cookie(SESSION_COOKIE, cookie, cookieOptions(3600));
+            return res.redirect(302, "/");
+        }
+        catch (e) {
+            logReq(req, "error", "oauth callback failed", { err: e });
+            return res.status(500).send("oauth failed");
+        }
+    });
+}
+//# sourceMappingURL=oauth-routes.js.map

package/dist/oauth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-routes.js","sourceRoot":"","sources":["../src/oauth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EACL,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,gBAAgB,CAAC,GAAoB;IACnD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,MAAM,OAAO,GAAI,GAAW,CAAC,OAA6C,CAAC;QAC3E,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,EAAE;gBACzC,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,SAAS,EAAE,OAAO,KAAK;gBACvB,gBAAgB,EAAE,CAAC,CAAC,aAAa;gBACjC,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,aAAa;gBAC3D,mBAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM;gBACzC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAE,GAAW,CAAC,OAAO,IAAI,EAAE,CAAC;aACpD,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,CAAC;QACD,yEAAyE;QACzE,iEAAiE;QACjE,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAChE,mEAAmE;YACnE,iEAAiE;YACjE,6BAA6B;YAC7B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YACjD,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1F,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,CAAU,EAAE,CAAC,CAAC;YACnE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/onboarding-allowlist.js

@@ -0,0 +1,32 @@
+// WebUI onboarding authorization gate.
+//
+// A single, platform-neutral allowlist replaces the per-forge instance-admin
+// check: the operator lists the forge usernames allowed to complete onboarding
+// in ONBOARDING_USERS (comma-separated). This is required because github.com
+// has no instance-admin concept, and keeping one gate for every driver makes
+// GitLab/ForgeJo/Gitea behave exactly like GitHub. The gate FAILS CLOSED: an
+// unset/empty allowlist denies everyone, so a misconfigured deploy cannot be
+// onboarded by an arbitrary user.
+/** Parse the raw env value into a normalized, de-duplicated username set. */
+export function parseOnboardingUsers(raw) {
+    const set = new Set();
+    if (!raw)
+        return set;
+    for (const part of raw.split(",")) {
+        const username = part.trim().toLowerCase();
+        if (username)
+            set.add(username);
+    }
+    return set;
+}
+/**
+ * True when `username` is permitted to onboard. Forge usernames are treated
+ * case-insensitively, so both sides are lowercased. An empty allowlist denies
+ * everyone (fail closed).
+ */
+export function isOnboardingAllowed(username, raw) {
+    if (!username)
+        return false;
+    return parseOnboardingUsers(raw).has(username.trim().toLowerCase());
+}
+//# sourceMappingURL=onboarding-allowlist.js.map

package/dist/onboarding-allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-allowlist.js","sourceRoot":"","sources":["../src/onboarding-allowlist.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,kCAAkC;AAElC,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,GAA8B;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAmC,EAAE,GAA8B;IACrG,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/opencode.js

@@ -0,0 +1,291 @@
+import { spawn, spawnSync } from "node:child_process";
+import { log } from "./logger.js";
+import { redact } from "./redact.js";
+import { OpencodeEventSchema, EventWithPartSchema, TextPartSchema, ErrorEventSchema, StepFinishPartSchema, } from "./types/opencode.js";
+export function zeroUsage() {
+    return { input: 0, output: 0, reasoning: 0, cacheRead: 0, cacheWrite: 0, costUsd: 0 };
+}
+// Sum the step-finish parts of a run's NDJSON events. Pure; a malformed part is
+// skipped so a bad upstream shape can never inject NaN into the totals.
+export function extractUsage(events) {
+    const total = zeroUsage();
+    for (const raw of events) {
+        const ev = OpencodeEventSchema.safeParse(raw);
+        if (!ev.success)
+            continue;
+        const withPart = EventWithPartSchema.safeParse(ev.data);
+        if (!withPart.success)
+            continue;
+        const part = StepFinishPartSchema.safeParse(withPart.data.part);
+        if (!part.success)
+            continue;
+        const t = part.data.tokens;
+        total.input += t?.input ?? 0;
+        total.output += t?.output ?? 0;
+        total.reasoning += t?.reasoning ?? 0;
+        total.cacheRead += t?.cache?.read ?? 0;
+        total.cacheWrite += t?.cache?.write ?? 0;
+        total.costUsd += part.data.cost ?? 0;
+    }
+    return total;
+}
+function isTextPart(p) {
+    return TextPartSchema.safeParse(p).success;
+}
+function truncate(s, max = 2000) {
+    return s.length > max ? s.slice(0, max) + "…[truncated]" : s;
+}
+export function extractText(events) {
+    const texts = [];
+    for (const raw of events) {
+        const parsed = OpencodeEventSchema.safeParse(raw);
+        if (!parsed.success)
+            continue;
+        const errorEvent = ErrorEventSchema.safeParse(parsed.data);
+        if (errorEvent.success) {
+            const msg = errorEvent.data.error.data?.message ?? errorEvent.data.error.message;
+            if (msg)
+                texts.push(`⚠️ ${msg}`);
+            continue;
+        }
+        const withPart = EventWithPartSchema.safeParse(parsed.data);
+        if (!withPart.success)
+            continue;
+        if (isTextPart(withPart.data.part))
+            texts.push(withPart.data.part.text);
+    }
+    // ponytail: post only the last text/error entry to the forge (one note per run,
+    //   not the whole transcript). Upgrade to a richer formatter if summaries
+    //   ever need multi-part composition.
+    return texts.at(-1) ?? "";
+}
+// ponytail: spawnSync blocks the loop briefly on timeout (error path only).
+//   If many concurrent timeouts fire, switch to async spawn fire-and-forget.
+export function killContainerByName(name) {
+    try {
+        spawnSync("podman", ["rm", "-f", name], { stdio: "ignore" });
+    }
+    catch {
+        /* best-effort; container may already be gone */
+    }
+}
+function containerNameFromArgs(args) {
+    const i = args.indexOf("--name");
+    return i >= 0 && i + 1 < args.length ? args[i + 1] : undefined;
+}
+export function runPodmanCapture(opts) {
+    return new Promise((resolve) => {
+        const child = spawn("podman", opts.args, {
+            cwd: opts.cwd,
+            env: { ...process.env, ...opts.env },
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        const stderrChunks = [];
+        const stdoutChunks = [];
+        const events = [];
+        const rawStdout = () => redact(Buffer.concat(stdoutChunks).toString("utf8"));
+        let lineBuf = "";
+        let timedOut = false;
+        let stalled = false;
+        let settled = false;
+        let lastOutputAt = Date.now();
+        const timer = setTimeout(() => {
+            timedOut = true;
+            try {
+                child.kill("SIGKILL");
+            }
+            catch { /* already dead */ }
+            const cname = containerNameFromArgs(opts.args);
+            if (cname)
+                killContainerByName(cname);
+        }, opts.timeoutMs);
+        // Inactivity watchdog (work item #96): a fully silent run is killed early
+        // instead of sitting "running" until timeoutMs. Checked a few times per
+        // stall window (bounded) so the kill lands promptly without busy-polling.
+        const stallMs = opts.stallMs ?? 0;
+        const stallTimer = stallMs > 0
+            ? setInterval(() => {
+                if (settled || stalled)
+                    return;
+                if (Date.now() - lastOutputAt < stallMs)
+                    return;
+                stalled = true;
+                try {
+                    child.kill("SIGKILL");
+                }
+                catch { /* already dead */ }
+                const cname = containerNameFromArgs(opts.args);
+                if (cname)
+                    killContainerByName(cname);
+            }, Math.max(1_000, Math.min(30_000, Math.floor(stallMs / 4))))
+            : undefined;
+        const clearTimers = () => {
+            clearTimeout(timer);
+            if (stallTimer)
+                clearInterval(stallTimer);
+        };
+        // ponytail: log each event as it arrives so a long run is observable in
+        //   realtime. One log line per event across all part types — upgrade to
+        //   debounce/batch or a LOG_OPENCODE_* flag if a chatty model floods.
+        function handleLine(raw) {
+            const trimmed = raw.trim();
+            if (!trimmed)
+                return;
+            let parsed;
+            try {
+                parsed = JSON.parse(trimmed);
+            }
+            catch {
+                return;
+            }
+            events.push(parsed);
+            const ev = OpencodeEventSchema.safeParse(parsed);
+            if (!ev.success)
+                return;
+            const errEv = ErrorEventSchema.safeParse(ev.data);
+            if (errEv.success) {
+                const msg = errEv.data.error.data?.message ?? errEv.data.error.message;
+                if (msg)
+                    log.warn("opencode error event", { ...opts.context, msg });
+                return;
+            }
+            const withPart = EventWithPartSchema.safeParse(ev.data);
+            if (!withPart.success)
+                return;
+            const p = withPart.data.part;
+            // ponytail: log every part type as it arrives — previously only text/error
+            //   were logged and every other part (tools, steps, reasoning, files, …)
+            //   was silently dropped in realtime (the raw stdout dump at run end was
+            //   the only record, at debug level, post-exit). One log line per event;
+            //   add a LOG_OPENCODE_* flag if a chatty model floods.
+            switch (p.type) {
+                case "text":
+                    log.debug("opencode text", { ...opts.context, text: p.text });
+                    break;
+                case "tool": {
+                    const st = p.state;
+                    log.debug("opencode tool", {
+                        ...opts.context,
+                        tool: p.tool,
+                        status: st?.status,
+                        input: st?.input,
+                        output: st?.output ? truncate(st.output) : undefined,
+                        error: st?.error,
+                    });
+                    break;
+                }
+                case "step-start":
+                    log.debug("opencode step-start", { ...opts.context });
+                    break;
+                case "step-finish": {
+                    const sf = StepFinishPartSchema.safeParse(p);
+                    log.debug("opencode step-finish", {
+                        ...opts.context,
+                        reason: p.reason,
+                        tokens: sf.success ? sf.data.tokens : undefined,
+                        cost: sf.success ? sf.data.cost : undefined,
+                    });
+                    break;
+                }
+                case "reasoning":
+                    log.debug("opencode reasoning", { ...opts.context, text: p.text });
+                    break;
+                case "file":
+                    log.debug("opencode file", { ...opts.context, mime: p.mime, filename: p.filename, url: p.url });
+                    break;
+                case "subtask":
+                    log.debug("opencode subtask", { ...opts.context, agent: p.agent, description: p.description });
+                    break;
+                case "agent":
+                    log.debug("opencode agent", { ...opts.context, name: p.name });
+                    break;
+                case "retry":
+                    log.warn("opencode retry", { ...opts.context, attempt: p.attempt, error: p.error });
+                    break;
+                case "compaction":
+                    log.debug("opencode compaction", { ...opts.context, auto: p.auto });
+                    break;
+                case "snapshot":
+                    log.debug("opencode snapshot", { ...opts.context });
+                    break;
+                case "patch":
+                    log.debug("opencode patch", { ...opts.context, files: p.files });
+                    break;
+                default:
+                    // ponytail: unknown part type — log the FULL body (not truncated) so
+                    //   no part is ever silently dropped again. Large if a future version
+                    //   emits a big-blob unknown type; that's the cost of completeness.
+                    log.debug("opencode part", { ...opts.context, type: p.type, part: p });
+            }
+        }
+        child.stdout.on("data", (b) => {
+            lastOutputAt = Date.now();
+            stdoutChunks.push(b);
+            opts.onChunk?.("stdout", b.toString("utf8"));
+            lineBuf += b.toString("utf8");
+            let nl;
+            while ((nl = lineBuf.indexOf("\n")) >= 0) {
+                handleLine(lineBuf.slice(0, nl));
+                lineBuf = lineBuf.slice(nl + 1);
+            }
+        });
+        child.stderr.on("data", (b) => {
+            lastOutputAt = Date.now();
+            stderrChunks.push(b);
+            opts.onChunk?.("stderr", b.toString("utf8"));
+        });
+        child.on("error", (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimers();
+            log.error("podman spawn error", { ...opts.context, err: err.message });
+            resolve({ text: `⚠️ Failed to start container: ${err.message}`, error: true, exitCode: -1, kind: "spawn", rawOutput: rawStdout(), stderrTail: "", usage: zeroUsage() });
+        });
+        child.on("close", (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimers();
+            const exitCode = code ?? -1;
+            if (timedOut || stalled) {
+                const text = stalled
+                    ? `⚠️ Run stalled — no output for ${Math.floor(stallMs / 60_000)}min, killed`
+                    : `⚠️ Run timed out after ${Math.floor(opts.timeoutMs / 60_000)}min`;
+                log.warn(stalled ? "opencode stalled" : "opencode timed out", { ...opts.context, stallMs, timeoutMs: opts.timeoutMs });
+                resolve({
+                    text,
+                    error: true,
+                    exitCode,
+                    kind: "timeout",
+                    rawOutput: rawStdout(),
+                    stderrTail: redact(Buffer.concat(stderrChunks).toString("utf8")),
+                    usage: extractUsage(events),
+                });
+                return;
+            }
+            const stderr = Buffer.concat(stderrChunks).toString("utf8");
+            // Flush any trailing partial line (opencode may exit without a final \n).
+            if (lineBuf.length > 0)
+                handleLine(lineBuf);
+            const stderrTail = redact(stderr.length > 1024 ? stderr.slice(-1024) : stderr);
+            const text = extractText(events);
+            if (exitCode !== 0 || (text.length === 0 && events.length === 0)) {
+                log.warn("opencode run failed", { ...opts.context, exitCode, eventCount: events.length, stderrTail });
+                resolve({
+                    text: text.length > 0 ? text : `⚠️ opencode exited (${exitCode})\n\`\`\`\n${stderrTail}\n\`\`\``,
+                    error: true,
+                    exitCode,
+                    kind: "exit",
+                    rawOutput: redact(Buffer.concat(stdoutChunks).toString("utf8")),
+                    stderrTail,
+                    usage: extractUsage(events),
+                });
+                return;
+            }
+            log.debug("opencode ok", { ...opts.context, exitCode, eventCount: events.length });
+            resolve({ text: text || "✅ Done (no text output)", error: false, exitCode, kind: "ok", rawOutput: "", stderrTail: "", usage: extractUsage(events) });
+        });
+    });
+}
+//# sourceMappingURL=opencode.js.map

package/dist/opencode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../src/opencode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,GAGrB,MAAM,qBAAqB,CAAC;AAW7B,MAAM,UAAU,SAAS;IACvB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,gFAAgF;AAChF,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC5C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,CAAC,OAAO;YAAE,SAAS;QAC1B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,SAAS;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3B,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7B,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,SAAS,IAAI,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC;QACrC,KAAK,CAAC,SAAS,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC;QACzC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD,SAAS,UAAU,CAAC,CAAO;IACzB,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AA0BD,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAG,GAAG,IAAI;IACrC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,SAAS;QAC9B,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YACjF,IAAI,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,SAAS;QAChC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,gFAAgF;IAChF,0EAA0E;IAC1E,sCAAsC;IACtC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC;AAoBD,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAc;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAkB;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;YACvC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrF,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE9B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,KAAK;gBAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC;YAC5B,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE;gBACf,IAAI,OAAO,IAAI,OAAO;oBAAE,OAAO;gBAC/B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,OAAO;oBAAE,OAAO;gBAChD,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC3D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,KAAK;oBAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,UAAU;gBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC,CAAC;QAEF,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,SAAS,UAAU,CAAC,GAAW;YAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,OAAO;gBAAE,OAAO;YACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;gBACvE,IAAI,GAAG;oBAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO;YAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAe,CAAC;YACxC,2EAA2E;YAC3E,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,wDAAwD;YACxD,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,MAAM;oBACT,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC9D,MAAM;gBACR,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;oBACnB,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE;wBACzB,GAAG,IAAI,CAAC,OAAO;wBACf,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,MAAM,EAAE,EAAE,EAAE,MAAM;wBAClB,KAAK,EAAE,EAAE,EAAE,KAAK;wBAChB,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;wBACpD,KAAK,EAAE,EAAE,EAAE,KAAK;qBACjB,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,KAAK,YAAY;oBACf,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;oBACtD,MAAM;gBACR,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,EAAE,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBAC7C,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE;wBAChC,GAAG,IAAI,CAAC,OAAO;wBACf,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBAC/C,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBAC5C,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,KAAK,WAAW;oBACd,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACnE,MAAM;gBACR,KAAK,MAAM;oBACT,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;oBAChG,MAAM;gBACR,KAAK,SAAS;oBACZ,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC/F,MAAM;gBACR,KAAK,OAAO;oBACV,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC/D,MAAM;gBACR,KAAK,OAAO;oBACV,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBACpF,MAAM;gBACR,KAAK,YAAY;oBACf,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACpE,MAAM;gBACR,KAAK,UAAU;oBACb,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,MAAM;gBACR,KAAK,OAAO;oBACV,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBACjE,MAAM;gBACR;oBACE,qEAAqE;oBACrE,sEAAsE;oBACtE,oEAAoE;oBACpE,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACjC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,EAAE,IAAI,EAAE,iCAAiC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1K,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;YAC5B,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,OAAO;oBAClB,CAAC,CAAC,kCAAkC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,aAAa;oBAC7E,CAAC,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBACvH,OAAO,CAAC;oBACN,IAAI;oBACJ,KAAK,EAAE,IAAI;oBACX,QAAQ;oBACR,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,SAAS,EAAE;oBACtB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAChE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAE5D,0EAA0E;YAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAE/E,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBACtG,OAAO,CAAC;oBACN,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,QAAQ,cAAc,UAAU,UAAU;oBAChG,KAAK,EAAE,IAAI;oBACX,QAAQ;oBACR,IAAI,EAAE,MAAM;oBACZ,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC/D,UAAU;oBACV,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,yBAAyB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}