@wascartech/devbot 0.0.0-stage → 2.1.1

package/dist/oauth-routes.js

@@ -0,0 +1,54 @@
+import { randomBytes } from "node:crypto";
+import { logReq } from "./http-util.js";
+import { config } from "./config.js";
+import { getPlatform } from "./platform/index.js";
+import { isOnboardingAllowed } from "./onboarding-allowlist.js";
+import { signCookie, cookieOptions, SESSION_COOKIE, STATE_COOKIE, } from "./cookie.js";
+export function mountOauthRoutes(app) {
+    const platform = getPlatform();
+    app.get("/oauth/start", (_req, res) => {
+        const state = randomBytes(16).toString("hex");
+        res.cookie(STATE_COOKIE, state, cookieOptions(600));
+        return res.redirect(302, platform.onboarding.authorizeUrl(state));
+    });
+    app.get("/oauth/callback", async (req, res) => {
+        const code = req.query.code;
+        const state = req.query.state;
+        const cookies = req.cookies;
+        const expectedState = cookies?.[STATE_COOKIE];
+        if (!code || !state || state !== expectedState) {
+            logReq(req, "warn", "oauth invalid state", {
+                hasCode: !!code,
+                stateType: typeof state,
+                hasExpectedState: !!expectedState,
+                match: typeof state === "string" && state === expectedState,
+                cookieHeaderPresent: !!req.headers.cookie,
+                cookieKeys: Object.keys(req.cookies ?? {}),
+            });
+            return res.status(403).send("invalid state");
+        }
+        // ponytail: clear state cookie immediately after validation — single-use
+        //   CSRF token, consumed whether the callback succeeds or fails.
+        res.clearCookie(STATE_COOKIE, { path: "/" });
+        try {
+            const { accessToken } = await platform.onboarding.exchangeCode(String(code));
+            const user = await platform.onboarding.currentUser(accessToken);
+            // The allowlist is the single authorization gate for all drivers —
+            // per-forge admin status is no longer checked. Fails closed when
+            // ONBOARDING_USERS is empty.
+            if (!isOnboardingAllowed(user.username, config.ONBOARDING_USERS)) {
+                logReq(req, "warn", "oauth user not allowlisted", { userId: user.id, username: user.username });
+                return res.status(403).send("user not authorized to onboard");
+            }
+            const exp = Math.floor(Date.now() / 1000) + 3600;
+            const cookie = signCookie({ accessToken, userId: user.id, username: user.username, exp });
+            res.cookie(SESSION_COOKIE, cookie, cookieOptions(3600));
+            return res.redirect(302, "/");
+        }
+        catch (e) {
+            logReq(req, "error", "oauth callback failed", { err: e });
+            return res.status(500).send("oauth failed");
+        }
+    });
+}
+//# sourceMappingURL=oauth-routes.js.map

package/dist/oauth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-routes.js","sourceRoot":"","sources":["../src/oauth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EACL,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,gBAAgB,CAAC,GAAoB;IACnD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,MAAM,OAAO,GAAI,GAAW,CAAC,OAA6C,CAAC;QAC3E,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,EAAE;gBACzC,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,SAAS,EAAE,OAAO,KAAK;gBACvB,gBAAgB,EAAE,CAAC,CAAC,aAAa;gBACjC,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,aAAa;gBAC3D,mBAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM;gBACzC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAE,GAAW,CAAC,OAAO,IAAI,EAAE,CAAC;aACpD,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,CAAC;QACD,yEAAyE;QACzE,iEAAiE;QACjE,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAChE,mEAAmE;YACnE,iEAAiE;YACjE,6BAA6B;YAC7B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChG,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YACjD,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1F,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,CAAU,EAAE,CAAC,CAAC;YACnE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/onboarding-allowlist.js

@@ -0,0 +1,32 @@
+// WebUI onboarding authorization gate.
+//
+// A single, platform-neutral allowlist replaces the per-forge instance-admin
+// check: the operator lists the forge usernames allowed to complete onboarding
+// in ONBOARDING_USERS (comma-separated). This is required because github.com
+// has no instance-admin concept, and keeping one gate for every driver makes
+// GitLab/ForgeJo/Gitea behave exactly like GitHub. The gate FAILS CLOSED: an
+// unset/empty allowlist denies everyone, so a misconfigured deploy cannot be
+// onboarded by an arbitrary user.
+/** Parse the raw env value into a normalized, de-duplicated username set. */
+export function parseOnboardingUsers(raw) {
+    const set = new Set();
+    if (!raw)
+        return set;
+    for (const part of raw.split(",")) {
+        const username = part.trim().toLowerCase();
+        if (username)
+            set.add(username);
+    }
+    return set;
+}
+/**
+ * True when `username` is permitted to onboard. Forge usernames are treated
+ * case-insensitively, so both sides are lowercased. An empty allowlist denies
+ * everyone (fail closed).
+ */
+export function isOnboardingAllowed(username, raw) {
+    if (!username)
+        return false;
+    return parseOnboardingUsers(raw).has(username.trim().toLowerCase());
+}
+//# sourceMappingURL=onboarding-allowlist.js.map

package/dist/onboarding-allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-allowlist.js","sourceRoot":"","sources":["../src/onboarding-allowlist.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,kCAAkC;AAElC,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,GAA8B;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAmC,EAAE,GAA8B;IACrG,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/opencode.js

@@ -0,0 +1,291 @@
+import { spawn, spawnSync } from "node:child_process";
+import { log } from "./logger.js";
+import { redact } from "./redact.js";
+import { OpencodeEventSchema, EventWithPartSchema, TextPartSchema, ErrorEventSchema, StepFinishPartSchema, } from "./types/opencode.js";
+export function zeroUsage() {
+    return { input: 0, output: 0, reasoning: 0, cacheRead: 0, cacheWrite: 0, costUsd: 0 };
+}
+// Sum the step-finish parts of a run's NDJSON events. Pure; a malformed part is
+// skipped so a bad upstream shape can never inject NaN into the totals.
+export function extractUsage(events) {
+    const total = zeroUsage();
+    for (const raw of events) {
+        const ev = OpencodeEventSchema.safeParse(raw);
+        if (!ev.success)
+            continue;
+        const withPart = EventWithPartSchema.safeParse(ev.data);
+        if (!withPart.success)
+            continue;
+        const part = StepFinishPartSchema.safeParse(withPart.data.part);
+        if (!part.success)
+            continue;
+        const t = part.data.tokens;
+        total.input += t?.input ?? 0;
+        total.output += t?.output ?? 0;
+        total.reasoning += t?.reasoning ?? 0;
+        total.cacheRead += t?.cache?.read ?? 0;
+        total.cacheWrite += t?.cache?.write ?? 0;
+        total.costUsd += part.data.cost ?? 0;
+    }
+    return total;
+}
+function isTextPart(p) {
+    return TextPartSchema.safeParse(p).success;
+}
+function truncate(s, max = 2000) {
+    return s.length > max ? s.slice(0, max) + "…[truncated]" : s;
+}
+export function extractText(events) {
+    const texts = [];
+    for (const raw of events) {
+        const parsed = OpencodeEventSchema.safeParse(raw);
+        if (!parsed.success)
+            continue;
+        const errorEvent = ErrorEventSchema.safeParse(parsed.data);
+        if (errorEvent.success) {
+            const msg = errorEvent.data.error.data?.message ?? errorEvent.data.error.message;
+            if (msg)
+                texts.push(`⚠️ ${msg}`);
+            continue;
+        }
+        const withPart = EventWithPartSchema.safeParse(parsed.data);
+        if (!withPart.success)
+            continue;
+        if (isTextPart(withPart.data.part))
+            texts.push(withPart.data.part.text);
+    }
+    // ponytail: post only the last text/error entry to the forge (one note per run,
+    //   not the whole transcript). Upgrade to a richer formatter if summaries
+    //   ever need multi-part composition.
+    return texts.at(-1) ?? "";
+}
+// ponytail: spawnSync blocks the loop briefly on timeout (error path only).
+//   If many concurrent timeouts fire, switch to async spawn fire-and-forget.
+export function killContainerByName(name) {
+    try {
+        spawnSync("podman", ["rm", "-f", name], { stdio: "ignore" });
+    }
+    catch {
+        /* best-effort; container may already be gone */
+    }
+}
+function containerNameFromArgs(args) {
+    const i = args.indexOf("--name");
+    return i >= 0 && i + 1 < args.length ? args[i + 1] : undefined;
+}
+export function runPodmanCapture(opts) {
+    return new Promise((resolve) => {
+        const child = spawn("podman", opts.args, {
+            cwd: opts.cwd,
+            env: { ...process.env, ...opts.env },
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        const stderrChunks = [];
+        const stdoutChunks = [];
+        const events = [];
+        const rawStdout = () => redact(Buffer.concat(stdoutChunks).toString("utf8"));
+        let lineBuf = "";
+        let timedOut = false;
+        let stalled = false;
+        let settled = false;
+        let lastOutputAt = Date.now();
+        const timer = setTimeout(() => {
+            timedOut = true;
+            try {
+                child.kill("SIGKILL");
+            }
+            catch { /* already dead */ }
+            const cname = containerNameFromArgs(opts.args);
+            if (cname)
+                killContainerByName(cname);
+        }, opts.timeoutMs);
+        // Inactivity watchdog (work item #96): a fully silent run is killed early
+        // instead of sitting "running" until timeoutMs. Checked a few times per
+        // stall window (bounded) so the kill lands promptly without busy-polling.
+        const stallMs = opts.stallMs ?? 0;
+        const stallTimer = stallMs > 0
+            ? setInterval(() => {
+                if (settled || stalled)
+                    return;
+                if (Date.now() - lastOutputAt < stallMs)
+                    return;
+                stalled = true;
+                try {
+                    child.kill("SIGKILL");
+                }
+                catch { /* already dead */ }
+                const cname = containerNameFromArgs(opts.args);
+                if (cname)
+                    killContainerByName(cname);
+            }, Math.max(1_000, Math.min(30_000, Math.floor(stallMs / 4))))
+            : undefined;
+        const clearTimers = () => {
+            clearTimeout(timer);
+            if (stallTimer)
+                clearInterval(stallTimer);
+        };
+        // ponytail: log each event as it arrives so a long run is observable in
+        //   realtime. One log line per event across all part types — upgrade to
+        //   debounce/batch or a LOG_OPENCODE_* flag if a chatty model floods.
+        function handleLine(raw) {
+            const trimmed = raw.trim();
+            if (!trimmed)
+                return;
+            let parsed;
+            try {
+                parsed = JSON.parse(trimmed);
+            }
+            catch {
+                return;
+            }
+            events.push(parsed);
+            const ev = OpencodeEventSchema.safeParse(parsed);
+            if (!ev.success)
+                return;
+            const errEv = ErrorEventSchema.safeParse(ev.data);
+            if (errEv.success) {
+                const msg = errEv.data.error.data?.message ?? errEv.data.error.message;
+                if (msg)
+                    log.warn("opencode error event", { ...opts.context, msg });
+                return;
+            }
+            const withPart = EventWithPartSchema.safeParse(ev.data);
+            if (!withPart.success)
+                return;
+            const p = withPart.data.part;
+            // ponytail: log every part type as it arrives — previously only text/error
+            //   were logged and every other part (tools, steps, reasoning, files, …)
+            //   was silently dropped in realtime (the raw stdout dump at run end was
+            //   the only record, at debug level, post-exit). One log line per event;
+            //   add a LOG_OPENCODE_* flag if a chatty model floods.
+            switch (p.type) {
+                case "text":
+                    log.debug("opencode text", { ...opts.context, text: p.text });
+                    break;
+                case "tool": {
+                    const st = p.state;
+                    log.debug("opencode tool", {
+                        ...opts.context,
+                        tool: p.tool,
+                        status: st?.status,
+                        input: st?.input,
+                        output: st?.output ? truncate(st.output) : undefined,
+                        error: st?.error,
+                    });
+                    break;
+                }
+                case "step-start":
+                    log.debug("opencode step-start", { ...opts.context });
+                    break;
+                case "step-finish": {
+                    const sf = StepFinishPartSchema.safeParse(p);
+                    log.debug("opencode step-finish", {
+                        ...opts.context,
+                        reason: p.reason,
+                        tokens: sf.success ? sf.data.tokens : undefined,
+                        cost: sf.success ? sf.data.cost : undefined,
+                    });
+                    break;
+                }
+                case "reasoning":
+                    log.debug("opencode reasoning", { ...opts.context, text: p.text });
+                    break;
+                case "file":
+                    log.debug("opencode file", { ...opts.context, mime: p.mime, filename: p.filename, url: p.url });
+                    break;
+                case "subtask":
+                    log.debug("opencode subtask", { ...opts.context, agent: p.agent, description: p.description });
+                    break;
+                case "agent":
+                    log.debug("opencode agent", { ...opts.context, name: p.name });
+                    break;
+                case "retry":
+                    log.warn("opencode retry", { ...opts.context, attempt: p.attempt, error: p.error });
+                    break;
+                case "compaction":
+                    log.debug("opencode compaction", { ...opts.context, auto: p.auto });
+                    break;
+                case "snapshot":
+                    log.debug("opencode snapshot", { ...opts.context });
+                    break;
+                case "patch":
+                    log.debug("opencode patch", { ...opts.context, files: p.files });
+                    break;
+                default:
+                    // ponytail: unknown part type — log the FULL body (not truncated) so
+                    //   no part is ever silently dropped again. Large if a future version
+                    //   emits a big-blob unknown type; that's the cost of completeness.
+                    log.debug("opencode part", { ...opts.context, type: p.type, part: p });
+            }
+        }
+        child.stdout.on("data", (b) => {
+            lastOutputAt = Date.now();
+            stdoutChunks.push(b);
+            opts.onChunk?.("stdout", b.toString("utf8"));
+            lineBuf += b.toString("utf8");
+            let nl;
+            while ((nl = lineBuf.indexOf("\n")) >= 0) {
+                handleLine(lineBuf.slice(0, nl));
+                lineBuf = lineBuf.slice(nl + 1);
+            }
+        });
+        child.stderr.on("data", (b) => {
+            lastOutputAt = Date.now();
+            stderrChunks.push(b);
+            opts.onChunk?.("stderr", b.toString("utf8"));
+        });
+        child.on("error", (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimers();
+            log.error("podman spawn error", { ...opts.context, err: err.message });
+            resolve({ text: `⚠️ Failed to start container: ${err.message}`, error: true, exitCode: -1, kind: "spawn", rawOutput: rawStdout(), stderrTail: "", usage: zeroUsage() });
+        });
+        child.on("close", (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimers();
+            const exitCode = code ?? -1;
+            if (timedOut || stalled) {
+                const text = stalled
+                    ? `⚠️ Run stalled — no output for ${Math.floor(stallMs / 60_000)}min, killed`
+                    : `⚠️ Run timed out after ${Math.floor(opts.timeoutMs / 60_000)}min`;
+                log.warn(stalled ? "opencode stalled" : "opencode timed out", { ...opts.context, stallMs, timeoutMs: opts.timeoutMs });
+                resolve({
+                    text,
+                    error: true,
+                    exitCode,
+                    kind: "timeout",
+                    rawOutput: rawStdout(),
+                    stderrTail: redact(Buffer.concat(stderrChunks).toString("utf8")),
+                    usage: extractUsage(events),
+                });
+                return;
+            }
+            const stderr = Buffer.concat(stderrChunks).toString("utf8");
+            // Flush any trailing partial line (opencode may exit without a final \n).
+            if (lineBuf.length > 0)
+                handleLine(lineBuf);
+            const stderrTail = redact(stderr.length > 1024 ? stderr.slice(-1024) : stderr);
+            const text = extractText(events);
+            if (exitCode !== 0 || (text.length === 0 && events.length === 0)) {
+                log.warn("opencode run failed", { ...opts.context, exitCode, eventCount: events.length, stderrTail });
+                resolve({
+                    text: text.length > 0 ? text : `⚠️ opencode exited (${exitCode})\n\`\`\`\n${stderrTail}\n\`\`\``,
+                    error: true,
+                    exitCode,
+                    kind: "exit",
+                    rawOutput: redact(Buffer.concat(stdoutChunks).toString("utf8")),
+                    stderrTail,
+                    usage: extractUsage(events),
+                });
+                return;
+            }
+            log.debug("opencode ok", { ...opts.context, exitCode, eventCount: events.length });
+            resolve({ text: text || "✅ Done (no text output)", error: false, exitCode, kind: "ok", rawOutput: "", stderrTail: "", usage: extractUsage(events) });
+        });
+    });
+}
+//# sourceMappingURL=opencode.js.map

package/dist/opencode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../src/opencode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,GAGrB,MAAM,qBAAqB,CAAC;AAW7B,MAAM,UAAU,SAAS;IACvB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,gFAAgF;AAChF,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC5C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,CAAC,OAAO;YAAE,SAAS;QAC1B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,SAAS;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3B,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7B,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QAC/B,KAAK,CAAC,SAAS,IAAI,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC;QACrC,KAAK,CAAC,SAAS,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC;QACzC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD,SAAS,UAAU,CAAC,CAAO;IACzB,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AA0BD,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAG,GAAG,IAAI;IACrC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,SAAS;QAC9B,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YACjF,IAAI,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,SAAS;QAChC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,gFAAgF;IAChF,0EAA0E;IAC1E,sCAAsC;IACtC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC;AAoBD,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAc;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAkB;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE;YACvC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrF,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE9B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,KAAK;gBAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC;YAC5B,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE;gBACf,IAAI,OAAO,IAAI,OAAO;oBAAE,OAAO;gBAC/B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,OAAO;oBAAE,OAAO;gBAChD,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC3D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,KAAK;oBAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,UAAU;gBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC,CAAC;QAEF,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,SAAS,UAAU,CAAC,GAAW;YAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,OAAO;gBAAE,OAAO;YACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;gBACvE,IAAI,GAAG;oBAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO;YAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAe,CAAC;YACxC,2EAA2E;YAC3E,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,wDAAwD;YACxD,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,MAAM;oBACT,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC9D,MAAM;gBACR,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;oBACnB,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE;wBACzB,GAAG,IAAI,CAAC,OAAO;wBACf,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,MAAM,EAAE,EAAE,EAAE,MAAM;wBAClB,KAAK,EAAE,EAAE,EAAE,KAAK;wBAChB,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;wBACpD,KAAK,EAAE,EAAE,EAAE,KAAK;qBACjB,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,KAAK,YAAY;oBACf,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;oBACtD,MAAM;gBACR,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,EAAE,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBAC7C,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE;wBAChC,GAAG,IAAI,CAAC,OAAO;wBACf,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBAC/C,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBAC5C,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,KAAK,WAAW;oBACd,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACnE,MAAM;gBACR,KAAK,MAAM;oBACT,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;oBAChG,MAAM;gBACR,KAAK,SAAS;oBACZ,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC/F,MAAM;gBACR,KAAK,OAAO;oBACV,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC/D,MAAM;gBACR,KAAK,OAAO;oBACV,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBACpF,MAAM;gBACR,KAAK,YAAY;oBACf,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBACpE,MAAM;gBACR,KAAK,UAAU;oBACb,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,MAAM;gBACR,KAAK,OAAO;oBACV,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBACjE,MAAM;gBACR;oBACE,qEAAqE;oBACrE,sEAAsE;oBACtE,oEAAoE;oBACpE,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACjC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,EAAE,IAAI,EAAE,iCAAiC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1K,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,WAAW,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;YAC5B,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,OAAO;oBAClB,CAAC,CAAC,kCAAkC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,aAAa;oBAC7E,CAAC,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBACvH,OAAO,CAAC;oBACN,IAAI;oBACJ,KAAK,EAAE,IAAI;oBACX,QAAQ;oBACR,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,SAAS,EAAE;oBACtB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAChE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAE5D,0EAA0E;YAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAE/E,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBACtG,OAAO,CAAC;oBACN,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,QAAQ,cAAc,UAAU,UAAU;oBAChG,KAAK,EAAE,IAAI;oBACX,QAAQ;oBACR,IAAI,EAAE,MAAM;oBACZ,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC/D,UAAU;oBACV,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,yBAAyB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/outbound-webhook-store.js

@@ -0,0 +1,229 @@
+import { db } from "./db.js";
+import { log } from "./logger.js";
+import { encrypt, decryptOrPlaintext } from "./crypto-util.js";
+import { randomBytes } from "node:crypto";
+import { WebhookEndpointSchema, } from "./types/outbound-webhook.js";
+// Outbound webhook endpoints + their delivery queue. Same DB file as the other
+// stores (devbot.db, 0600). Endpoints are keyed by (project_id, name); global
+// endpoints reuse the sentinel scope id 0 (GLOBAL_SCOPE_ID), exactly like
+// global MCP servers. The signing secret is encrypted at rest with SESSION_KEY.
+//
+// Deliveries are durable rows: emit() inserts one per matching endpoint, a
+// worker claims due rows (atomic pending→delivering CAS), and settles them.
+// A failed delivery is re-queued with a backoff until retries are exhausted.
+const SEC = () => Math.floor(Date.now() / 1000);
+export function initOutboundWebhookTables() {
+    // Belt-and-braces: migration 0020 is authoritative; keep the idempotent
+    // CREATE so a test DB opened without migrate() still works.
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS outbound_webhooks (
+      project_id  INTEGER NOT NULL,
+      name        TEXT    NOT NULL,
+      url         TEXT    NOT NULL,
+      events      TEXT    NOT NULL,
+      headers     TEXT    NOT NULL DEFAULT '{}',
+      enabled     INTEGER NOT NULL DEFAULT 1,
+      secret      TEXT    NOT NULL,
+      created_at  INTEGER NOT NULL,
+      updated_at  INTEGER NOT NULL,
+      PRIMARY KEY (project_id, name)
+    )
+  `);
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS outbound_webhook_deliveries (
+      id              INTEGER PRIMARY KEY AUTOINCREMENT,
+      project_id      INTEGER NOT NULL,
+      webhook_name    TEXT    NOT NULL,
+      event           TEXT    NOT NULL,
+      payload         TEXT    NOT NULL,
+      status          TEXT    NOT NULL DEFAULT 'pending',
+      attempts        INTEGER NOT NULL DEFAULT 0,
+      next_attempt_at INTEGER NOT NULL,
+      response_status INTEGER,
+      response_body   TEXT    NOT NULL DEFAULT '',
+      last_error      TEXT    NOT NULL DEFAULT '',
+      created_at      INTEGER NOT NULL,
+      updated_at      INTEGER NOT NULL
+    )
+  `);
+    db.exec("CREATE INDEX IF NOT EXISTS idx_outbound_deliveries_due ON outbound_webhook_deliveries(status, next_attempt_at)");
+    db.exec("CREATE INDEX IF NOT EXISTS idx_outbound_deliveries_webhook ON outbound_webhook_deliveries(project_id, webhook_name)");
+}
+export function newWebhookSecret() {
+    return `whsec_${randomBytes(32).toString("base64url")}`;
+}
+function parseEvents(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch {
+        return [];
+    }
+}
+function parseHeaders(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : {};
+    }
+    catch {
+        return {};
+    }
+}
+function toStored(r) {
+    return {
+        projectId: r.project_id,
+        name: r.name,
+        url: r.url,
+        events: parseEvents(r.events),
+        headers: parseHeaders(r.headers),
+        enabled: r.enabled === 1,
+        secret: decryptOrPlaintext(r.secret),
+        createdAt: r.created_at,
+        updatedAt: r.updated_at,
+    };
+}
+export function upsertWebhook(projectId, name, endpoint, secret) {
+    // Re-validate at the store boundary — the API layer validates too, but this
+    // is the trust boundary for the delivery worker.
+    const v = WebhookEndpointSchema.safeParse(endpoint);
+    if (!v.success)
+        throw new Error("invalid webhook endpoint");
+    const now = SEC();
+    db.prepare(`INSERT OR REPLACE INTO outbound_webhooks
+       (project_id, name, url, events, headers, enabled, secret, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?,
+       COALESCE((SELECT created_at FROM outbound_webhooks WHERE project_id = ? AND name = ?), ?),
+       ?)`).run(projectId, name, v.data.url, JSON.stringify(v.data.events), JSON.stringify(v.data.headers), v.data.enabled ? 1 : 0, encrypt(secret), projectId, name, now, now);
+}
+export function getWebhook(projectId, name) {
+    const row = db
+        .prepare("SELECT * FROM outbound_webhooks WHERE project_id = ? AND name = ?")
+        .get(projectId, name);
+    return row ? toStored(row) : null;
+}
+export function listWebhooks(projectId) {
+    const rows = db
+        .prepare("SELECT * FROM outbound_webhooks WHERE project_id = ? ORDER BY name")
+        .all(projectId);
+    return rows.map(toStored);
+}
+export function deleteWebhook(projectId, name) {
+    const r = db
+        .prepare("DELETE FROM outbound_webhooks WHERE project_id = ? AND name = ?")
+        .run(projectId, name);
+    return r.changes > 0;
+}
+export function deleteAllOutboundWebhooksForProject(projectId) {
+    db.prepare("DELETE FROM outbound_webhooks WHERE project_id = ?").run(projectId);
+    db.prepare("DELETE FROM outbound_webhook_deliveries WHERE project_id = ?").run(projectId);
+}
+// Enabled endpoints in this project's scope (project + global) subscribed to
+// `event`. Global endpoints use scope id 0, which is never a real project id.
+export function matchingWebhooks(projectId, event) {
+    const rows = db
+        .prepare("SELECT * FROM outbound_webhooks WHERE enabled = 1 AND project_id IN (?, 0) ORDER BY project_id, name")
+        .all(projectId);
+    return rows.map(toStored).filter((w) => w.events.includes(event));
+}
+// ---- Delivery queue --------------------------------------------------------
+export function enqueueDelivery(projectId, webhookName, event, payload) {
+    const now = SEC();
+    const r = db
+        .prepare(`INSERT INTO outbound_webhook_deliveries
+         (project_id, webhook_name, event, payload, status, attempts, next_attempt_at, created_at, updated_at)
+       VALUES (?, ?, ?, ?, 'pending', 0, ?, ?, ?)`)
+        .run(projectId, webhookName, event, payload, Date.now(), now, now);
+    return Number(r.lastInsertRowid);
+}
+function toDeliverySummary(r) {
+    return {
+        id: r.id,
+        projectId: r.project_id,
+        webhookName: r.webhook_name,
+        event: r.event,
+        status: r.status,
+        attempts: r.attempts,
+        nextAttemptAt: r.next_attempt_at,
+        responseStatus: r.response_status,
+        lastError: r.last_error,
+        createdAt: r.created_at,
+        updatedAt: r.updated_at,
+    };
+}
+function toDeliveryRow(r) {
+    return { ...toDeliverySummary(r), payload: r.payload, responseBody: r.response_body };
+}
+// Claim due pending rows (atomic pending→delivering CAS). Returns the claimed
+// rows so the worker can deliver them. `nowMs` is explicit for testability.
+export function claimDueDeliveries(limit, nowMs) {
+    const rows = db
+        .prepare(`SELECT * FROM outbound_webhook_deliveries
+        WHERE status = 'pending' AND next_attempt_at <= ?
+        ORDER BY id ASC LIMIT ?`)
+        .all(nowMs, limit);
+    const claimed = [];
+    const upd = db.prepare("UPDATE outbound_webhook_deliveries SET status = 'delivering', updated_at = ? WHERE id = ? AND status = 'pending'");
+    for (const r of rows) {
+        if (upd.run(SEC(), r.id).changes === 0)
+            continue; // CAS lost
+        claimed.push(toDeliveryRow({ ...r, status: "delivering" }));
+    }
+    return claimed;
+}
+export function settleDeliverySucceeded(id, responseStatus, responseBody) {
+    db.prepare(`UPDATE outbound_webhook_deliveries
+        SET status = 'succeeded', attempts = attempts + 1, response_status = ?, response_body = ?,
+            last_error = '', updated_at = ?
+      WHERE id = ?`).run(responseStatus, responseBody.slice(0, 2000), SEC(), id);
+}
+// Settle a failed attempt. `retryAt` non-null re-queues as pending for that
+// time; null marks the delivery terminally failed (retries exhausted).
+export function settleDeliveryFailed(id, input) {
+    db.prepare(`UPDATE outbound_webhook_deliveries
+        SET status = ?, attempts = attempts + 1, response_status = ?, response_body = ?,
+            last_error = ?, next_attempt_at = ?, updated_at = ?
+      WHERE id = ?`).run(input.retryAt === null ? "failed" : "pending", input.responseStatus, input.responseBody.slice(0, 2000), input.error.slice(0, 2000), input.retryAt ?? Date.now(), SEC(), id);
+}
+// Crash recovery: a delivery claimed but never settled goes back to pending.
+export function resetStuckDeliveries() {
+    const r = db
+        .prepare("UPDATE outbound_webhook_deliveries SET status = 'pending', updated_at = ? WHERE status = 'delivering'")
+        .run(SEC());
+    return Number(r.changes);
+}
+export function listDeliveries(projectId, webhookName, limit, offset) {
+    const rows = db
+        .prepare(`SELECT * FROM outbound_webhook_deliveries
+        WHERE project_id = ? AND webhook_name = ?
+        ORDER BY id DESC LIMIT ? OFFSET ?`)
+        .all(projectId, webhookName, limit, offset);
+    return rows.map(toDeliverySummary);
+}
+export function countDeliveries(projectId, webhookName) {
+    const row = db
+        .prepare("SELECT COUNT(*) AS c FROM outbound_webhook_deliveries WHERE project_id = ? AND webhook_name = ?")
+        .get(projectId, webhookName);
+    return row.c;
+}
+export function getDelivery(id) {
+    const row = db.prepare("SELECT * FROM outbound_webhook_deliveries WHERE id = ?").get(id);
+    return row ? toDeliveryRow(row) : null;
+}
+// Re-queue a terminal delivery for another attempt (manual replay from the UI).
+export function replayDelivery(id) {
+    const r = db
+        .prepare("UPDATE outbound_webhook_deliveries SET status = 'pending', next_attempt_at = ?, updated_at = ? WHERE id = ?")
+        .run(Date.now(), SEC(), id);
+    return r.changes > 0;
+}
+export function purgeDeliveriesOlderThan(days) {
+    const cutoff = SEC() - days * 24 * 3600;
+    const r = db.prepare("DELETE FROM outbound_webhook_deliveries WHERE created_at < ?").run(cutoff);
+    if (r.changes > 0)
+        log.debug("outbound delivery purge", { purged: r.changes, days });
+    return Number(r.changes);
+}
+//# sourceMappingURL=outbound-webhook-store.js.map

package/dist/outbound-webhook-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-webhook-store.js","sourceRoot":"","sources":["../src/outbound-webhook-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,qBAAqB,GAKtB,MAAM,6BAA6B,CAAC;AAErC,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAE7E,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAEhD,MAAM,UAAU,yBAAyB;IACvC,wEAAwE;IACxE,4DAA4D;IAC5D,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;GAaP,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;GAgBP,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,gHAAgH,CAAC,CAAC;IAC1H,EAAE,CAAC,IAAI,CAAC,qHAAqH,CAAC,CAAC;AACjI,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,SAAS,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC1D,CAAC;AA0BD,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAAiC;YACpC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAe;IAC/B,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;QAChC,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC;QACxB,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC;QACpC,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,IAAY,EAAE,QAAyB,EAAE,MAAc;IACtG,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,CAAC,GAAG,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC;IAClB,EAAE,CAAC,OAAO,CACR;;;;UAIM,CACP,CAAC,GAAG,CACH,SAAS,EACT,IAAI,EACJ,CAAC,CAAC,IAAI,CAAC,GAAG,EACV,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACtB,OAAO,CAAC,MAAM,CAAC,EACf,SAAS,EACT,IAAI,EACJ,GAAG,EACH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,IAAY;IACxD,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,mEAAmE,CAAC;SAC5E,GAAG,CAAC,SAAS,EAAE,IAAI,CAA6B,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,oEAAoE,CAAC;SAC7E,GAAG,CAAC,SAAS,CAA8B,CAAC;IAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,IAAY;IAC3D,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CAAC,iEAAiE,CAAC;SAC1E,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,SAAiB;IACnE,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChF,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAC5F,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,KAAoB;IACtE,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,sGAAsG,CACvG;SACA,GAAG,CAAC,SAAS,CAA8B,CAAC;IAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAa,EAAE,OAAe;IACpG,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC;IAClB,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CACN;;kDAE4C,CAC7C;SACA,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;AACnC,CAAC;AAkBD,SAAS,iBAAiB,CAAC,CAAgB;IACzC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,KAAK,EAAE,CAAC,CAAC,KAAsB;QAC/B,MAAM,EAAE,CAAC,CAAC,MAA0C;QACpD,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,aAAa,EAAE,CAAC,CAAC,eAAe;QAChC,cAAc,EAAE,CAAC,CAAC,eAAe;QACjC,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAgB;IACrC,OAAO,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;AACxF,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAa;IAC7D,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;;gCAE0B,CAC3B;SACA,GAAG,CAAC,KAAK,EAAE,KAAK,CAA+B,CAAC;IACnD,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB,kHAAkH,CACnH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC;YAAE,SAAS,CAAC,WAAW;QAC7D,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAU,EAAE,cAA6B,EAAE,YAAoB;IACrG,EAAE,CAAC,OAAO,CACR;;;mBAGe,CAChB,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAClC,EAAU,EACV,KAAqG;IAErG,EAAE,CAAC,OAAO,CACR;;;mBAGe,CAChB,CAAC,GAAG,CACH,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAC7C,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EACjC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAC1B,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAC3B,GAAG,EAAE,EACL,EAAE,CACH,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB;IAClC,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CAAC,uGAAuG,CAAC;SAChH,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACd,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAa,EAAE,MAAc;IAClG,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;;0CAEoC,CACrC;SACA,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAA+B,CAAC;IAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,WAAmB;IACpE,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,iGAAiG,CAAC;SAC1G,GAAG,CAAC,SAAS,EAAE,WAAW,CAAkB,CAAC;IAChD,OAAO,GAAG,CAAC,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC,GAAG,CAAC,EAAE,CAE1E,CAAC;IACd,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CACN,6GAA6G,CAC9G;SACA,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC;IACxC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjG,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;QAAE,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC"}