@yadsh/dsh-qa-surface 0.10.0 → 0.11.1

package/lib/integration/service.js

@@ -0,0 +1,373 @@
+import { remoteErrorOf } from "@deepseek-ai/dsh-typert-protocol";
+import { parseServiceToken, } from "../accounts/service-token.js";
+import { boundAnswer } from "./answer.js";
+import { QaIntegrationAttachmentError } from "./attachments.js";
+import { QaIntegrationError, } from "./contract.js";
+/**
+ * The integration API's brain: credential, budget, and one answered turn.
+ *
+ * The service owns everything that must be identical for every transport —
+ * who is allowed to ask, how often, how many at once, what a refusal means and
+ * how an answered turn is shaped into the contract. The HTTP layer owns bytes
+ * and status codes, the runner owns sessions and agents. That split is what
+ * lets the mechanics be tested without a web server, a model or a database.
+ *
+ * Two limits, deliberately different in kind. Concurrency (`maxConcurrent`)
+ * protects the deployment: a bridge that fires a hundred questions must not
+ * open a hundred agent turns. Rate (`requestsPerMinute`) protects the account:
+ * one token cannot spend the deployment's whole budget. Both refuse with 429,
+ * which the bridge already retries.
+ */
+/** The bridge publishes a handful of citations; more is noise in a Jira note. */
+export const QA_INTEGRATION_MAX_CITATIONS = 5;
+const MINUTE_MS = 60_000;
+/**
+ * One citation string per source, in the bridge's own style: the document plus
+ * where in it the evidence sits, so a reader can open the right page.
+ *
+ * @param sources - the turn's evidence, best first.
+ * @returns bounded citation strings.
+ */
+export function sourceCitations(sources) {
+    const citations = [];
+    for (const source of sources) {
+        if (citations.length >= QA_INTEGRATION_MAX_CITATIONS)
+            break;
+        const location = source.locations?.[0];
+        const base = source.uri ?? source.path ?? source.title;
+        let citation = base;
+        if (location !== undefined) {
+            if (location.anchor !== undefined && location.anchor !== "") {
+                citation = `${base}#${location.anchor}`;
+            }
+            else if (location.lineStart !== undefined) {
+                citation =
+                    location.lineEnd === undefined ||
+                        location.lineEnd === location.lineStart
+                        ? `${base}:${String(location.lineStart)}`
+                        : `${base}:${String(location.lineStart)}-${String(location.lineEnd)}`;
+            }
+        }
+        if (citation === "" || citations.includes(citation))
+            continue;
+        citations.push(citation);
+    }
+    return Object.freeze(citations);
+}
+export class QaIntegrationService {
+    deps;
+    now;
+    startedAt;
+    /** Recent request timestamps per token id, pruned to the rolling minute. */
+    recent = new Map();
+    inFlight = 0;
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? Date.now;
+        this.startedAt = this.now();
+    }
+    /** Requests currently inside `ask`; the console shows this as load. */
+    get busy() {
+        return this.inFlight;
+    }
+    /**
+     * Resolve a bearer credential to its token, or refuse.
+     *
+     * A malformed, unknown, expired, revoked or disabled-account token is one
+     * answer — 401 — because telling them apart would let an unauthenticated
+     * caller enumerate token ids. A valid token missing the scope is 403: the
+     * caller proved who it is, and the refusal is about rights, not identity.
+     */
+    authenticate(authorization, required) {
+        const token = bearerToken(authorization);
+        if (token === null) {
+            throw new QaIntegrationError("unauthorized", "a Bearer integration token is required");
+        }
+        const accounts = this.deps.accounts();
+        if (accounts === undefined) {
+            throw new QaIntegrationError("unavailable", "QA accounts are not enabled on this deployment");
+        }
+        // The shape check happens before the store: a foreign credential must not
+        // even reach a database lookup.
+        if (parseServiceToken(token) === null) {
+            throw new QaIntegrationError("unauthorized", "the token is not accepted");
+        }
+        const verified = accounts.verifyServiceToken(token);
+        if (verified === null) {
+            throw new QaIntegrationError("unauthorized", "the token is expired, revoked or unknown");
+        }
+        if (required !== null && !verified.scopes.includes(required)) {
+            throw new QaIntegrationError("forbidden", `the token lacks the ${required} scope`);
+        }
+        return Object.freeze({
+            tokenId: verified.tokenId,
+            userId: verified.userId,
+            scopes: verified.scopes,
+        });
+    }
+    /**
+     * Answer one question, or refuse before a turn is ever opened.
+     *
+     * @param authorization - the raw `Authorization` header value.
+     * @param request - the parsed body.
+     * @param signal - the request's own lifetime; a dropped connection stops the wait.
+     * @returns the answer the bridge publishes.
+     */
+    async ask(authorization, request, signal) {
+        const config = this.deps.getConfig();
+        if (!config.integration.enabled) {
+            throw new QaIntegrationError("unavailable", "the QA integration API is disabled on this deployment");
+        }
+        const identity = this.authenticate(authorization, "ask");
+        this.assertRate(identity.tokenId);
+        if (this.inFlight >= config.integration.maxConcurrent) {
+            throw new QaIntegrationError("busy", "too many integration requests are being answered right now");
+        }
+        const started = this.now();
+        const deadline = new AbortController();
+        const timer = setTimeout(() => {
+            deadline.abort(new Error("integration request timed out"));
+        }, config.integration.requestTimeoutMs);
+        const combined = AbortSignal.any([signal, deadline.signal]);
+        let chatId = request.sessionId;
+        this.inFlight += 1;
+        try {
+            const turn = await this.deps.runner.run({
+                userId: identity.userId,
+                chatId: request.sessionId,
+                message: request.message,
+                attachments: request.attachments,
+                ticketKey: request.context.ticketKey,
+                signal: combined,
+                onChat: (id) => {
+                    chatId = id;
+                },
+            });
+            this.deps.logger.info("integration.answered", {
+                tokenId: identity.tokenId,
+                chatId: turn.chatId,
+                ticketKey: request.context.ticketKey,
+                attachments: request.attachments.length,
+                ms: this.now() - started,
+            });
+            if (turn.interrupted) {
+                // A cancelled or failed turn does commit a partial message. Publishing
+                // it as "the answer" would put a truncated answer in front of a
+                // customer; the bridge's escalation path is exactly for this.
+                return this.escalated(turn.chatId, "turn interrupted");
+            }
+            const answer = boundAnswer(turn.answer.trim(), config.integration.maxAnswerCharacters);
+            if (answer === "") {
+                return this.escalated(turn.chatId, "the assistant produced no answer");
+            }
+            if (answer.length < turn.answer.trim().length) {
+                // The caller publishes into a comment with its own budget, so an
+                // over-long answer is cut here, at a boundary it can read, instead of
+                // there, mid-sentence and unannounced.
+                this.deps.logger.warn("integration.answer_truncated", {
+                    tokenId: identity.tokenId,
+                    chatId: turn.chatId,
+                    published: answer.length,
+                });
+            }
+            return Object.freeze({
+                chatId: turn.chatId,
+                answer,
+                sources: sourceCitations(turn.sources),
+                // "high" is deliberately never claimed: no model-side judgment backs
+                // it, and a field that always says high teaches the operator to
+                // ignore it.
+                confidence: "medium",
+                escalate: false,
+                reason: "",
+            });
+        }
+        catch (error) {
+            if (deadline.signal.aborted) {
+                // The bridge's contract is a 90-second answer. Escalating with the
+                // chat id keeps the still-running turn reachable: a retry that
+                // started a new chat would orphan the answer being written.
+                this.deps.logger.warn("integration.timeout", {
+                    tokenId: identity.tokenId,
+                    chatId,
+                    ms: this.now() - started,
+                });
+                return this.escalated(chatId ?? "", "the request timed out");
+            }
+            if (signal.aborted) {
+                throw new QaIntegrationError("unavailable", "the request was dropped");
+            }
+            if (error instanceof QaIntegrationAttachmentError) {
+                // The caller's own fallback signal: repeat the question without the
+                // attachment it sent. Answering anyway would publish an answer to a
+                // question the model never saw the material for.
+                this.deps.logger.warn("integration.attachment-refused", {
+                    tokenId: identity.tokenId,
+                    chatId,
+                    name: error.attachment,
+                    reason: error.reason,
+                });
+                throw new QaIntegrationError("unsupported-media", error.message, {
+                    cause: error,
+                });
+            }
+            const refusal = admittedAttachmentRefusal(error);
+            if (refusal !== null) {
+                // The Harness refuses the prompt itself when it will not admit an
+                // attachment: an image its admission rejects (over its byte, pixel or
+                // dimension budget, bytes that are not the type the caller declared)
+                // or one the selected model cannot see, which is the same refusal for
+                // a deployment whose model has no vision. The caller can correct all
+                // of them by sending the question again without attachments, which is
+                // what the bridge's own 415 fallback does — a 503 would instead set a
+                // bridge whose tickets carry screenshots retrying the same refusal.
+                const code = /^[A-Z][A-Z0-9_]{2,63}$/u.test(refusal)
+                    ? ` (${refusal})`
+                    : "";
+                this.deps.logger.warn("integration.attachment-refused", {
+                    tokenId: identity.tokenId,
+                    chatId,
+                    reason: refusal,
+                });
+                throw new QaIntegrationError("unsupported-media", `the attachment was refused${code}; repeat the request without attachments`, { cause: error });
+            }
+            this.deps.logger.error("integration.failed", {
+                tokenId: identity.tokenId,
+                chatId,
+                message: error instanceof Error ? error.message : String(error),
+            });
+            // No answer was produced and no chat may even exist: this is a Host
+            // failure, not an answer, so the bridge retries rather than escalating.
+            throw new QaIntegrationError("unavailable", "the QA assistant failed", {
+                cause: error,
+            });
+        }
+        finally {
+            clearTimeout(timer);
+            this.inFlight -= 1;
+        }
+    }
+    /**
+     * Read one conversation back for the application that started it.
+     *
+     * This is what `sessions:read` is for. A bridge that escalated a question,
+     * or that has to show a specialist what was already said, reads the chat it
+     * owns instead of asking the same question again — which would spend a turn
+     * and produce a second answer to a question that already has one.
+     *
+     * The ownership rule is the same one `ask` applies when it continues a chat:
+     * the account the token belongs to has to own the conversation. A chat that
+     * does not exist and a chat that belongs to somebody else get one answer, so
+     * an id alone never confirms that another account's conversation exists.
+     *
+     * @param authorization - the raw `Authorization` header value.
+     * @param query - the chat, the caller's cursor and the page size.
+     * @returns the window of messages, with the caller's new cursor.
+     */
+    async session(authorization, query) {
+        const config = this.deps.getConfig();
+        if (!config.integration.enabled) {
+            throw new QaIntegrationError("unavailable", "the QA integration API is disabled on this deployment");
+        }
+        const identity = this.authenticate(authorization, "sessions:read");
+        this.assertRate(identity.tokenId);
+        const owner = this.deps.accounts()?.ownerIdOf(query.chatId);
+        if (owner === undefined || owner !== identity.userId) {
+            throw new QaIntegrationError("not-found", "this account has no such conversation");
+        }
+        const transcript = await this.deps.runner.transcript(query);
+        this.deps.logger.info("integration.transcript-read", {
+            tokenId: identity.tokenId,
+            chatId: query.chatId,
+            after: query.after,
+            messages: transcript.messages.length,
+        });
+        return transcript;
+    }
+    /**
+     * Liveness and routing facts for the bridge's own UI.
+     * @param authorization - the raw `Authorization` header value.
+     * @returns the health payload; `ok` is true whenever it is answered at all.
+     */
+    async health(authorization) {
+        this.authenticate(authorization, null);
+        let models = [];
+        try {
+            models = await this.deps.runner.models();
+        }
+        catch (error) {
+            // A deployment with no routable provider is still a live deployment:
+            // the health answer is owed, and the missing catalog is not a failure.
+            this.deps.logger.warn("integration.models-unavailable", {
+                message: error instanceof Error ? error.message : String(error),
+            });
+        }
+        return Object.freeze({
+            ok: true,
+            version: this.deps.version,
+            models: Object.freeze([...models]),
+            uptimeS: Math.max(0, Math.floor((this.now() - this.startedAt) / 1000)),
+        });
+    }
+    /** One refusal shaped as an answer: empty text, escalated, no citations. */
+    escalated(chatId, reason) {
+        return Object.freeze({
+            chatId,
+            answer: "",
+            sources: Object.freeze([]),
+            confidence: "low",
+            escalate: true,
+            reason,
+        });
+    }
+    /** Refuse with `rate-limited` once a token spends its minute's budget. */
+    assertRate(tokenId) {
+        const limit = this.deps.getConfig().integration.requestsPerMinute;
+        const cutoff = this.now() - MINUTE_MS;
+        const kept = (this.recent.get(tokenId) ?? []).filter((at) => at > cutoff);
+        if (kept.length >= limit) {
+            this.recent.set(tokenId, kept);
+            throw new QaIntegrationError("rate-limited", "this token exceeded its requests-per-minute budget");
+        }
+        kept.push(this.now());
+        this.recent.set(tokenId, kept);
+    }
+}
+/**
+ * Why the Harness refused one prompt for its attachment, or null.
+ *
+ * The session controller folds every attachment failure — its own admission
+ * codes (`IMAGE_TOO_LARGE`, `IMAGE_TOO_MANY_PIXELS`, `IMAGE_TYPE_MISMATCH`, …)
+ * and a model that cannot take images at all — into one Remote failure,
+ * `session/attachment-invalid`, whose `reason` carries the code. The failure is
+ * identified structurally rather than with `instanceof`: it crosses the session
+ * controller's bundle boundary, which is exactly what `remoteErrorOf` exists
+ * for.
+ *
+ * @param error - the failure raised by the turn.
+ * @returns the Harness's reason code, or null when this is some other failure.
+ */
+function admittedAttachmentRefusal(error) {
+    const failure = remoteErrorOf(error);
+    if (failure?.code !== "session/attachment-invalid")
+        return null;
+    const reason = failure.details?.reason;
+    return typeof reason === "string" ? reason : "attachment-refused";
+}
+/**
+ * The credential in one `Authorization` value, or null.
+ *
+ * `Bearer` is matched case-insensitively, as HTTP authentication schemes are,
+ * and the token itself is never trimmed: whitespace inside a credential is
+ * part of it, and accepting a padded variant would accept a token the store
+ * never minted.
+ * @param authorization - the raw header, when the caller sent one.
+ * @returns the token, or null.
+ */
+export function bearerToken(authorization) {
+    if (typeof authorization !== "string")
+        return null;
+    const match = /^Bearer[ \t]+(\S+)$/iu.exec(authorization.trim());
+    return match?.[1] ?? null;
+}
+//# sourceMappingURL=service.js.map

package/lib/integration/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/integration/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAGjE,OAAO,EACL,iBAAiB,GAElB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EACL,kBAAkB,GAMnB,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;GAcG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAE9C,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAqC;IAErC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,MAAM,IAAI,4BAA4B;YAAE,MAAM;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC;QACvD,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC5D,QAAQ,GAAG,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1C,CAAC;iBAAM,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5C,QAAQ;oBACN,QAAQ,CAAC,OAAO,KAAK,SAAS;wBAC9B,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,SAAS;wBACrC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;wBACzC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,EAAE,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC9D,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAoBD,MAAM,OAAO,oBAAoB;IACd,IAAI,CAA8B;IAClC,GAAG,CAAe;IAClB,SAAS,CAAS;IACnC,4EAA4E;IAC3D,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC9C,QAAQ,GAAG,CAAC,CAAC;IAErB,YAAY,IAAiC;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,uEAAuE;IACvE,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CACV,aAAiC,EACjC,QAAoC;QAEpC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,kBAAkB,CAC1B,cAAc,EACd,wCAAwC,CACzC,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,kBAAkB,CAC1B,aAAa,EACb,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,gCAAgC;QAChC,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACtC,MAAM,IAAI,kBAAkB,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAC1B,cAAc,EACd,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,kBAAkB,CAC1B,WAAW,EACX,uBAAuB,QAAQ,QAAQ,CACxC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,CACP,aAAiC,EACjC,OAAqB,EACrB,MAAmB;QAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,kBAAkB,CAC1B,aAAa,EACb,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YACtD,MAAM,IAAI,kBAAkB,CAC1B,MAAM,EACN,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC7D,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,GAAkB,OAAO,CAAC,SAAS,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACtC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,OAAO,CAAC,SAAS;gBACzB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;gBACpC,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;oBACb,MAAM,GAAG,EAAE,CAAC;gBACd,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBAC5C,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;gBACpC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;gBACvC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aACzB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,uEAAuE;gBACvE,gEAAgE;gBAChE,8DAA8D;gBAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CACxB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAClB,MAAM,CAAC,WAAW,CAAC,mBAAmB,CACvC,CAAC;YACF,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC9C,iEAAiE;gBACjE,sEAAsE;gBACtE,uCAAuC;gBACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;oBACpD,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,MAAM,CAAC,MAAM;iBACzB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM;gBACN,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;gBACtC,qEAAqE;gBACrE,gEAAgE;gBAChE,aAAa;gBACb,UAAU,EAAE,QAAiB;gBAC7B,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC5B,mEAAmE;gBACnE,+DAA+D;gBAC/D,4DAA4D;gBAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE;oBAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM;oBACN,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;iBACzB,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,kBAAkB,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;gBAClD,oEAAoE;gBACpE,oEAAoE;gBACpE,iDAAiD;gBACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBACtD,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM;oBACN,IAAI,EAAE,KAAK,CAAC,UAAU;oBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAC;gBACH,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,KAAK,CAAC,OAAO,EAAE;oBAC/D,KAAK,EAAE,KAAK;iBACb,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,kEAAkE;gBAClE,sEAAsE;gBACtE,qEAAqE;gBACrE,sEAAsE;gBACtE,qEAAqE;gBACrE,sEAAsE;gBACtE,sEAAsE;gBACtE,oEAAoE;gBACpE,MAAM,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;oBAClD,CAAC,CAAC,KAAK,OAAO,GAAG;oBACjB,CAAC,CAAC,EAAE,CAAC;gBACP,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBACtD,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM;oBACN,MAAM,EAAE,OAAO;iBAChB,CAAC,CAAC;gBACH,MAAM,IAAI,kBAAkB,CAC1B,mBAAmB,EACnB,6BAA6B,IAAI,0CAA0C,EAC3E,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,MAAM;gBACN,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;YACH,oEAAoE;YACpE,wEAAwE;YACxE,MAAM,IAAI,kBAAkB,CAAC,aAAa,EAAE,yBAAyB,EAAE;gBACrE,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,OAAO,CACX,aAAiC,EACjC,KAIC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,kBAAkB,CAC1B,aAAa,EACb,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACnE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrD,MAAM,IAAI,kBAAkB,CAC1B,WAAW,EACX,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;YACnD,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;SACrC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,aAAiC;QAC5C,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM,GAAsB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,uEAAuE;YACvE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBACtD,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;YAClC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;SACvE,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IACpE,SAAS,CAAC,MAAc,EAAE,MAAc;QAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM;YACN,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,UAAU,EAAE,KAAc;YAC1B,QAAQ,EAAE,IAAI;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAClE,UAAU,CAAC,OAAe;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,iBAAiB,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/B,MAAM,IAAI,kBAAkB,CAC1B,cAAc,EACd,oDAAoD,CACrD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,yBAAyB,CAAC,KAAc;IAC/C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAKtB,CAAC;IACd,IAAI,OAAO,EAAE,IAAI,KAAK,4BAA4B;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;IACvC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,aAAiC;IAC3D,IAAI,OAAO,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC"}

package/lib/integration/transcript-reader.js

@@ -0,0 +1,202 @@
+import { integrationMessageWindow, QA_INTEGRATION_MAX_TRANSCRIPT_MESSAGES, } from "./transcript.js";
+/**
+ * A conversation read warm, for an application that pages through it.
+ *
+ * The projection itself (`transcript.ts`) answers one page from a log. That is
+ * the right shape for a review page opened once and the wrong one for a caller
+ * that follows a cursor: every read of a long chat would load the stored log
+ * and flatten every message in it to hand back the newest fifty, so a bridge
+ * paging through a two-year-old conversation pays for the whole conversation
+ * per page, and pays it again on the next poll.
+ *
+ * What is kept here is the window itself — the newest messages, already
+ * flattened — plus the newest seq below it, which is all the arithmetic a page
+ * needs to be exact. A page is then either served from that window or, when the
+ * window cannot answer for the caller's cursor, read from the log.
+ *
+ * Two things decide whether the window may be trusted:
+ *
+ * - **A chat this process holds is probed in memory.** The Harness is the
+ *   writer, so its in-memory events answer \"has anything been appended?\" with
+ *   no stored read at all, and only the appended events are projected. This is
+ *   the common case: the bridge reads back the chat it just asked in.
+ * - **A chat this process does not hold is trusted for a bounded time.** Nobody
+ *   in this process can append to it, so the window can only be wrong about a
+ *   write from somewhere else sharing the same storage — which no page read can
+ *   distinguish either. The bound is deliberately the same budget the review
+ *   console gives its own transcript cache, so the two answer a reviewer the
+ *   same way.
+ *
+ * A window is never *replaced* by an in-memory snapshot, only extended from it:
+ * a session that outlived a process restart, or a very long one, may hold only
+ * part of its history in memory, and a read that trusted it as the whole log
+ * would answer a page from half a conversation.
+ *
+ * What it costs: at most one window per conversation, and a window is at most
+ * one maximal page — so the memory this keeps is bounded by
+ * {@link QA_INTEGRATION_TRANSCRIPT_CACHE_CHATS} pages of conversation, and a
+ * page a caller would have received anyway. An old chat's *first* read is still
+ * a stored read, and its projection walks back only as far as the window it is
+ * building: the whole log of a long conversation is never flattened to answer a
+ * page of it.
+ */
+/** How long a window is trusted for a chat this process does not hold. */
+export const QA_INTEGRATION_TRANSCRIPT_TTL_MS = 30_000;
+/** How many conversations keep a warm window. */
+export const QA_INTEGRATION_TRANSCRIPT_CACHE_CHATS = 128;
+const EMPTY_MESSAGES = Object.freeze([]);
+export class QaIntegrationTranscriptReader {
+    windows = new Map();
+    log;
+    logger;
+    now;
+    ttlMs;
+    maxChats;
+    maxMessages;
+    constructor(options) {
+        this.log = options.log;
+        this.logger = options.logger;
+        this.now = options.now ?? (() => Date.now());
+        this.ttlMs = options.ttlMs ?? QA_INTEGRATION_TRANSCRIPT_TTL_MS;
+        this.maxChats = options.maxChats ?? QA_INTEGRATION_TRANSCRIPT_CACHE_CHATS;
+        this.maxMessages =
+            options.maxMessages ?? QA_INTEGRATION_MAX_TRANSCRIPT_MESSAGES;
+    }
+    /**
+     * One page of a conversation, from the window when the window can answer it.
+     * @param chatId - the conversation; the caller's ownership of it is the
+     *   service's business, and this reader only reads it.
+     * @param query - the caller's exclusive cursor and the page size it wants.
+     * @returns the newest page after the cursor, with its new cursor.
+     */
+    async page(chatId, query) {
+        const window = this.windows.get(chatId);
+        if (window !== undefined) {
+            const held = this.log.snapshot(chatId, { after: this.covered(window) });
+            if (held === undefined) {
+                if (this.now() - window.at < this.ttlMs) {
+                    return this.pageOf(chatId, window, query);
+                }
+            }
+            else if (this.merge(chatId, window, held)) {
+                return this.pageOf(chatId, window, query);
+            }
+            // Either the window aged out, or it met a chat whose new events it cannot
+            // absorb: both are answered from the log rather than from memory.
+        }
+        return await this.readLog(chatId, query);
+    }
+    /** One page out of a window: exact, whatever the caller's cursor is. */
+    pageOf(chatId, window, query) {
+        const limit = Math.min(query.limit, this.maxMessages);
+        const inside = window.messages.filter((message) => message.seq > query.after);
+        const messages = inside.length > limit ? inside.slice(inside.length - limit) : inside;
+        // A caller whose cursor fell below the window still gets the newest page —
+        // its answer is the window's tail — but there are messages it has not seen
+        // below the window, and that is what truncation reports.
+        const older = window.below !== undefined && window.below > query.after;
+        return Object.freeze({
+            chatId,
+            messages: Object.freeze([...messages]),
+            lastSeq: messages.at(-1)?.seq ?? query.after,
+            truncated: older || inside.length > limit,
+        });
+    }
+    /**
+     * Fold what the Harness is holding into a window, projecting only the events
+     * the window has not covered yet.
+     * @returns whether the window absorbed the update; false means the delta is
+     *   larger than a whole window, so the log has to answer instead.
+     */
+    merge(chatId, window, events) {
+        const delta = integrationMessageWindow(chatId, events, {
+            after: this.covered(window),
+            cover: this.maxMessages,
+        });
+        if (delta.messages.length === 0) {
+            // Nothing was appended, and the window is current as of now.
+            window.at = this.now();
+            return true;
+        }
+        const combined = [...window.messages, ...delta.messages];
+        if (combined.length > this.maxMessages)
+            return false;
+        window.messages = Object.freeze(combined);
+        if (delta.below !== undefined) {
+            // The newest seq left below the *window*: the delta's own cut is newer
+            // than anything the previous window had already left behind.
+            window.below = delta.below;
+        }
+        window.at = this.now();
+        return true;
+    }
+    /**
+     * The newest published seq a window has covered, which is also the cursor a
+     * probe is asked from: `undefined` while the window holds nothing, where the
+     * question is "what has this chat published at all".
+     */
+    covered(window) {
+        return window.messages.at(-1)?.seq;
+    }
+    /** Read the log and remember what it says, for the pages that follow. */
+    async readLog(chatId, query) {
+        const read = await this.log.read(chatId);
+        if (!read.ok) {
+            this.windows.delete(chatId);
+            if (read.reason === "not-found") {
+                // The ownership record is written before the first message, so a chat
+                // that exists but has written nothing is an empty conversation rather
+                // than a failure. Nothing is remembered: it may write any moment.
+                return Object.freeze({
+                    chatId,
+                    messages: EMPTY_MESSAGES,
+                    lastSeq: query.after,
+                    truncated: false,
+                });
+            }
+            throw new Error(`the session log is unavailable (${read.reason})`);
+        }
+        const base = integrationMessageWindow(chatId, read.events, {
+            after: undefined,
+            cover: this.maxMessages,
+        });
+        const window = {
+            at: this.now(),
+            messages: base.messages,
+            ...(base.below === undefined ? {} : { below: base.below }),
+        };
+        // Storage lags the session it belongs to, so a chat this process holds is
+        // extended with what memory has already: the alternative is answering a
+        // page with a turn the Harness has written but not flushed.
+        const held = this.log.snapshot(chatId, { after: this.covered(window) });
+        if (held !== undefined && !this.merge(chatId, window, held)) {
+            // A window cannot hold more than a page, and a chat that wrote more than
+            // that between two reads is read rather than merged. The window is still
+            // exact for its own messages; the newest ones arrive with the next read.
+            this.logger?.warn("integration.transcript-window-behind", {
+                chatId,
+                below: window.below,
+            });
+        }
+        this.remember(chatId, window);
+        return this.pageOf(chatId, window, query);
+    }
+    /** Keep a bounded number of conversations warm, oldest window first. */
+    remember(chatId, window) {
+        this.windows.set(chatId, window);
+        while (this.windows.size > this.maxChats) {
+            let oldestId;
+            let oldestAt = Number.POSITIVE_INFINITY;
+            for (const [id, entry] of this.windows) {
+                if (entry.at < oldestAt) {
+                    oldestAt = entry.at;
+                    oldestId = id;
+                }
+            }
+            if (oldestId === undefined)
+                return;
+            this.windows.delete(oldestId);
+        }
+    }
+}
+//# sourceMappingURL=transcript-reader.js.map

package/lib/integration/transcript-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-reader.js","sourceRoot":"","sources":["../../src/integration/transcript-reader.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,wBAAwB,EACxB,sCAAsC,GACvC,MAAM,iBAAiB,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AAEvD,iDAAiD;AACjD,MAAM,CAAC,MAAM,qCAAqC,GAAG,GAAG,CAAC;AAiBzD,MAAM,cAAc,GAAoC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAc1E,MAAM,OAAO,6BAA6B;IACvB,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IAChD,GAAG,CAAqB;IACxB,MAAM,CAA2B;IACjC,GAAG,CAAe;IAClB,KAAK,CAAS;IACd,QAAQ,CAAS;IACjB,WAAW,CAAS;IAErC,YAAY,OAA6C;QACvD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,gCAAgC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,qCAAqC,CAAC;QAC1E,IAAI,CAAC,WAAW;YACd,OAAO,CAAC,WAAW,IAAI,sCAAsC,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CACR,MAAc,EACd,KAAyD;QAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;oBACxC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,0EAA0E;YAC1E,kEAAkE;QACpE,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,wEAAwE;IAChE,MAAM,CACZ,MAAc,EACd,MAA0B,EAC1B,KAAyD;QAEzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACnC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CACvC,CAAC;QACF,MAAM,QAAQ,GACZ,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACvE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM;YACN,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;YACtC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,KAAK,CAAC,KAAK;YAC5C,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,KAAK,CACX,MAAc,EACd,MAA0B,EAC1B,MAAqC;QAErC,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE;YACrD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,IAAI,CAAC,WAAW;SACxB,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,6DAA6D;YAC7D,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACrD,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,uEAAuE;YACvE,6DAA6D;YAC7D,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,OAAO,CAAC,MAA0B;QACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IACrC,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,KAAyD;QAEzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAChC,sEAAsE;gBACtE,sEAAsE;gBACtE,kEAAkE;gBAClE,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,MAAM;oBACN,QAAQ,EAAE,cAAc;oBACxB,OAAO,EAAE,KAAK,CAAC,KAAK;oBACpB,SAAS,EAAE,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;YACzD,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,IAAI,CAAC,WAAW;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAuB;YACjC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SAC3D,CAAC;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC5D,yEAAyE;YACzE,yEAAyE;YACzE,yEAAyE;YACzE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,sCAAsC,EAAE;gBACxD,MAAM;gBACN,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,wEAAwE;IAChE,QAAQ,CAAC,MAAc,EAAE,MAA0B;QACzD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,QAA4B,CAAC;YACjC,IAAI,QAAQ,GAAG,MAAM,CAAC,iBAAiB,CAAC;YACxC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvC,IAAI,KAAK,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;oBACxB,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;oBACpB,QAAQ,GAAG,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF"}