codekin 0.6.3 → 0.6.5

package/server/dist/workflow-loader.js

@@ -9,7 +9,8 @@
  *   1. validate_repo  — verify path exists, is a git repo, check staleness
  *   2. create_session — create a Codekin session for the run
  *   3. run_prompt     — start Claude, send the prompt, wait for result
- *   4. save_report    — write Markdown output to outputDir, commit on codekin/reports branch, push
+ *   4. save_report    — write Markdown output to outputDir, commit on a fresh
+ *                       audit/<kind>-<YYYY-MM-DD> branch, push
  *
  * MD file format — YAML frontmatter followed by the Claude prompt:
  *
@@ -30,13 +31,33 @@
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, writeFileSync } from 'fs';
 import { execFileSync } from 'child_process';
-import { dirname, join, sep } from 'path';
+import { dirname, isAbsolute, join, resolve, sep } from 'path';
 import { REPOS_ROOT } from './config.js';
 import { fileURLToPath } from 'url';
+import { SessionGoneError } from './workflow-engine.js';
 // ---------------------------------------------------------------------------
 // MD parser
 // ---------------------------------------------------------------------------
-/** Parse a workflow MD file into a WorkflowDef. Throws if required fields are missing. */
+/**
+ * Validate a relative path that came from untrusted MD frontmatter.
+ *
+ * `outputDir` and `filenameSuffix` are joined with `repoPath` and written to
+ * disk by the save_report step. A repo workflow author who set
+ * `outputDir: /etc` or `outputDir: ../../foo` could otherwise smuggle the
+ * write outside the repo. We reject absolute paths and any segment equal to
+ * `..`; the runtime check in save_report enforces the boundary defensively.
+ */
+function assertSafeRelativePath(value, field, sourcePath) {
+    if (isAbsolute(value)) {
+        throw new Error(`Invalid ${field} in ${sourcePath}: absolute paths are not allowed`);
+    }
+    // Normalize backslashes so a Windows-style ..\\ is caught the same as ../
+    const segments = value.split(/[/\\]/);
+    if (segments.some(s => s === '..')) {
+        throw new Error(`Invalid ${field} in ${sourcePath}: path traversal segments ('..') are not allowed`);
+    }
+}
+/** Parse a workflow MD file into a WorkflowDef. Throws if required fields are missing or unsafe. */
 function parseMdWorkflow(content, sourcePath) {
     const fmMatch = content.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/m);
     if (!fmMatch)
@@ -55,6 +76,11 @@ function parseMdWorkflow(content, sourcePath) {
         if (!meta[key])
             throw new Error(`Missing frontmatter field "${key}" in ${sourcePath}`);
     }
+    // Reject path-traversal in any frontmatter field that is later joined with
+    // repoPath at save time. Failing here prevents an unsafe def from being
+    // registered at all.
+    assertSafeRelativePath(meta.outputDir, 'outputDir', sourcePath);
+    assertSafeRelativePath(meta.filenameSuffix, 'filenameSuffix', sourcePath);
     return {
         kind: meta.kind,
         name: meta.name,
@@ -115,14 +141,17 @@ function loadRepoOverride(repoPath, kind) {
 // Shared polling helper
 // ---------------------------------------------------------------------------
 async function waitForSessionResult(sessions, sessionId, opts = {}) {
-    const { timeoutMs = 600_000, pollMs = 2000, abortSignal } = opts;
+    const { timeoutMs = 600_000, pollMs = 2000, abortSignal, runId, stepKey } = opts;
     const deadline = Date.now() + timeoutMs;
+    let lastSeen = null;
     while (Date.now() < deadline) {
         if (abortSignal?.aborted)
             throw new Error('Aborted');
         const session = sessions.get(sessionId);
-        if (!session)
-            throw new Error(`Session ${sessionId} not found`);
+        if (!session) {
+            throw new SessionGoneError(runId ?? 'unknown', stepKey ?? 'run_prompt', sessionId, lastSeen);
+        }
+        lastSeen = new Date().toISOString();
         const resultMsg = session.outputHistory.find(m => m.type === 'result');
         if (resultMsg) {
             const assistantText = session.outputHistory
@@ -147,6 +176,34 @@ async function waitForSessionResult(sessions, sessionId, opts = {}) {
     throw new Error(`Timed out waiting for session result after ${timeoutMs}ms`);
 }
 // ---------------------------------------------------------------------------
+// Prompt guard
+// ---------------------------------------------------------------------------
+/**
+ * Prepended to every workflow prompt so Claude does not duplicate the report.
+ * The save_report step writes Claude's response text to the configured outputDir;
+ * if Claude also uses the Write tool (per CLAUDE.md guidance), two files appear
+ * — one substantive file under whatever category Claude chose, and one stub
+ * (the conversational reply) under the configured outputDir.
+ */
+const WORKFLOW_PROMPT_GUARD = [
+    'IMPORTANT: You are running as part of an automated Codekin workflow.',
+    'The workflow runner will save your entire response as the report file.',
+    'Do NOT use the Write or Edit tools to create the report yourself — that produces a duplicate file.',
+    'Respond with the report Markdown directly, with no preamble.',
+    'Disregard any conflicting guidance in CLAUDE.md about writing audit reports to disk; the workflow handles saving and committing.',
+].join(' ');
+/** Branch name for the per-run report commit. Kept short and stable per (kind, date). */
+export function reportBranchName(kind, dateStr) {
+    return `audit/${kind}-${dateStr}`;
+}
+/** True when a branch name is one a workflow run produces (or used to produce). */
+export function isWorkflowReportsBranch(branch) {
+    // Accept the legacy long-lived branch and the new per-run audit/<kind>-<date> form.
+    if (branch === 'codekin/reports')
+        return true;
+    return /^audit\/[^/]+-\d{4}-\d{2}-\d{2}$/.test(branch);
+}
+// ---------------------------------------------------------------------------
 // Workflow registration
 // ---------------------------------------------------------------------------
 function registerWorkflow(engine, sessions, def) {
@@ -202,6 +259,9 @@ function registerWorkflow(engine, sessions, def) {
                         provider,
                         allowedTools: ['Bash(gh pr:*)'],
                     });
+                    // Persist the session id on the run BEFORE returning so a server crash
+                    // between this step and `run_prompt` can still locate the session.
+                    ctx.recordSessionId?.(session.id);
                     console.log(`[workflow:${def.kind}] Created session ${session.id} for ${repoName} (run ${ctx.runId})`);
                     return { sessionId: session.id, repoPath, repoName, branch: input.branch, lastCommit: input.lastCommit };
                 },
@@ -214,22 +274,58 @@ function registerWorkflow(engine, sessions, def) {
                     const repoName = input.repoName;
                     const repoPath = input.repoPath;
                     const customPrompt = input.customPrompt;
+                    // If the session is already gone, fail with a typed error before doing any work —
+                    // gives a much clearer signal than a downstream "Session X not found" stack trace.
+                    if (!sessions.get(sessionId)) {
+                        throw new SessionGoneError(ctx.runId, 'run_prompt', sessionId, ctx.run.lastStepAt ?? null);
+                    }
                     sessions.startClaude(sessionId);
                     await sessions.waitForReady(sessionId);
-                    // Per-repo override: check {repoPath}/.codekin/workflows/{kind}.md
-                    const repoOverride = loadRepoOverride(repoPath, ctx.run.kind);
-                    const basePrompt = repoOverride ? repoOverride.prompt : def.prompt;
-                    const prompt = customPrompt
-                        ? `${basePrompt}\n\nAdditional focus areas:\n${customPrompt}`
-                        : basePrompt;
-                    if (repoOverride) {
-                        console.log(`[workflow:${def.kind}] Using per-repo prompt override from ${repoPath}`);
+                    if (ctx.resumed) {
+                        // The prompt was already sent in the original run before the server crashed.
+                        // Just wait for the result Claude is (still) producing — sending again would
+                        // duplicate the prompt and fork the conversation.
+                        console.log(`[workflow:${def.kind}] Resuming run ${ctx.runId}: re-attaching to session ${sessionId} (no re-send)`);
+                    }
+                    else {
+                        // Per-repo override: check {repoPath}/.codekin/workflows/{kind}.md
+                        const repoOverride = loadRepoOverride(repoPath, ctx.run.kind);
+                        const basePrompt = repoOverride ? repoOverride.prompt : def.prompt;
+                        const userPrompt = customPrompt
+                            ? `${basePrompt}\n\nAdditional focus areas:\n${customPrompt}`
+                            : basePrompt;
+                        // If the run carries sanitized commit fields, prepend them as
+                        // XML-delimited context so injected text cannot escape its data
+                        // context. Fields are sanitized upstream in commit-event-handler.ts.
+                        const commitMessage = input.commitMessage;
+                        const commitBranch = input.branch;
+                        const commitAuthor = input.author;
+                        let commitContext = '';
+                        if (commitMessage !== undefined) {
+                            commitContext = [
+                                '<commit-message>',
+                                commitMessage,
+                                '</commit-message>',
+                                `<branch>${commitBranch ?? 'unknown'}</branch>`,
+                                `<author>${commitAuthor ?? 'unknown'}</author>`,
+                                '',
+                                '',
+                            ].join('\n');
+                        }
+                        // Prepend the guard to suppress Claude's CLAUDE.md-driven file-write
+                        // behavior, which otherwise creates a duplicate report file.
+                        const prompt = `${WORKFLOW_PROMPT_GUARD}\n\n${commitContext}${userPrompt}`;
+                        if (repoOverride) {
+                            console.log(`[workflow:${def.kind}] Using per-repo prompt override from ${repoPath}`);
+                        }
+                        sessions.sendInput(sessionId, prompt);
+                        console.log(`[workflow:${def.kind}] Sent prompt to session ${sessionId} for ${repoName}`);
                     }
-                    sessions.sendInput(sessionId, prompt);
-                    console.log(`[workflow:${def.kind}] Sent prompt to session ${sessionId} for ${repoName}`);
                     const result = await waitForSessionResult(sessions, sessionId, {
                         timeoutMs: 600_000,
                         abortSignal: ctx.abortSignal,
+                        runId: ctx.runId,
+                        stepKey: 'run_prompt',
                     });
                     console.log(`[workflow:${def.kind}] Completed for ${repoName} (${result.text.length} chars)`);
                     return {
@@ -267,32 +363,59 @@ function registerWorkflow(engine, sessions, def) {
                         reportText,
                     ].join('\n');
                     const reportsDir = join(repoPath, def.outputDir);
-                    if (!existsSync(reportsDir)) {
-                        mkdirSync(reportsDir, { recursive: true });
-                    }
                     const filename = `${dateStr}${def.filenameSuffix}`;
                     const filePath = join(reportsDir, filename);
-                    writeFileSync(filePath, markdown, 'utf-8');
-                    console.log(`[workflow:${def.kind}] Saved report to ${filePath}`);
-                    // Commit on a dedicated branch so reports don't pollute the working branch.
-                    // Use a temporary git worktree to avoid stash/checkout races when
-                    // multiple workflow runs target the same repo concurrently.
-                    const REPORTS_BRANCH = 'codekin/reports';
+                    // Defense in depth — even though parseMdWorkflow rejects unsafe
+                    // outputDir/filenameSuffix at load, re-verify the resolved write
+                    // target is under the repo. realpath the parent so a symlinked
+                    // outputDir cannot escape; the file itself does not exist yet.
+                    const repoRealRoot = existsSync(repoPath) ? realpathSync(repoPath) : resolve(repoPath);
+                    const reportsRealRoot = existsSync(reportsDir) ? realpathSync(reportsDir) : resolve(reportsDir);
+                    if (!reportsRealRoot.startsWith(repoRealRoot + sep) &&
+                        reportsRealRoot !== repoRealRoot) {
+                        throw new Error(`Refusing to write report outside repo: ${reportsRealRoot} is not under ${repoRealRoot}`);
+                    }
+                    const resolvedFilePath = resolve(reportsRealRoot, filename);
+                    if (!resolvedFilePath.startsWith(reportsRealRoot + sep) &&
+                        resolvedFilePath !== reportsRealRoot) {
+                        throw new Error(`Refusing to write report outside outputDir: ${resolvedFilePath} is not under ${reportsRealRoot}`);
+                    }
+                    console.log(`[workflow:${def.kind}] Writing report to ${filePath}`);
+                    // Commit on a fresh per-run branch (audit/<kind>-<YYYY-MM-DD>) so each
+                    // audit gets its own PR and we never append to a stale, long-lived
+                    // reports branch. Use a temporary git worktree to avoid stash/checkout
+                    // races when multiple workflow runs target the same repo concurrently.
+                    const reportsBranch = reportBranchName(def.kind, dateStr);
                     try {
                         const relativePath = `${def.outputDir}/${filename}`;
-                        // Ensure the reports branch exists (create if needed)
+                        // Ensure the reports branch exists (create if needed). For same-day
+                        // reruns of the same kind we reuse the existing daily branch and
+                        // append a new commit.
                         try {
-                            execFileSync('git', ['rev-parse', '--verify', REPORTS_BRANCH], { cwd: repoPath, timeout: 5_000, stdio: 'pipe' });
+                            execFileSync('git', ['rev-parse', '--verify', reportsBranch], { cwd: repoPath, timeout: 5_000, stdio: 'pipe' });
                         }
                         catch {
-                            // Branch doesn't exist yet — create it from the current branch
-                            execFileSync('git', ['branch', REPORTS_BRANCH], { cwd: repoPath, timeout: 5_000 });
-                            console.log(`[workflow:${def.kind}] Created branch ${REPORTS_BRANCH}`);
+                            // Branch doesn't exist yet — create it from origin/main so the audit
+                            // always forks from the latest upstream commit, even if the local HEAD
+                            // is stale or sitting on a previous audit branch.
+                            let fetchOk = false;
+                            try {
+                                execFileSync('git', ['fetch', 'origin', 'main'], { cwd: repoPath, timeout: 30_000, stdio: 'pipe' });
+                                fetchOk = true;
+                            }
+                            catch (fetchErr) {
+                                console.warn(`[workflow:${def.kind}] git fetch origin main failed (will fork from local HEAD): ${fetchErr}`);
+                            }
+                            const branchArgs = ['branch', reportsBranch];
+                            if (fetchOk)
+                                branchArgs.push('origin/main');
+                            execFileSync('git', branchArgs, { cwd: repoPath, timeout: 5_000 });
+                            console.log(`[workflow:${def.kind}] Created branch ${reportsBranch}${fetchOk ? ' from origin/main' : ' from current HEAD (fetch failed)'}`);
                         }
                         // Create a temporary worktree on the reports branch
                         const wtDir = join(repoPath, '..', `.codekin-wt-report-${ctx.runId}`);
                         try {
-                            execFileSync('git', ['worktree', 'add', wtDir, REPORTS_BRANCH], { cwd: repoPath, timeout: 10_000 });
+                            execFileSync('git', ['worktree', 'add', wtDir, reportsBranch], { cwd: repoPath, timeout: 10_000 });
                             // Write the report file in the worktree
                             const reportsDirInWt = join(wtDir, def.outputDir);
                             if (!existsSync(reportsDirInWt)) {
@@ -301,14 +424,14 @@ function registerWorkflow(engine, sessions, def) {
                             writeFileSync(join(reportsDirInWt, filename), markdown, 'utf-8');
                             execFileSync('git', ['add', relativePath], { cwd: wtDir, timeout: 10_000 });
                             execFileSync('git', ['commit', '-m', `${def.commitMessage} ${dateStr}`], { cwd: wtDir, timeout: 15_000 });
-                            console.log(`[workflow:${def.kind}] Committed ${relativePath} on ${REPORTS_BRANCH}`);
+                            console.log(`[workflow:${def.kind}] Committed ${relativePath} on ${reportsBranch}`);
                             // Push to remote
                             try {
-                                execFileSync('git', ['push', 'origin', REPORTS_BRANCH], { cwd: wtDir, timeout: 30_000, stdio: 'pipe' });
-                                console.log(`[workflow:${def.kind}] Pushed ${REPORTS_BRANCH} to origin`);
+                                execFileSync('git', ['push', 'origin', reportsBranch], { cwd: wtDir, timeout: 30_000, stdio: 'pipe' });
+                                console.log(`[workflow:${def.kind}] Pushed ${reportsBranch} to origin`);
                             }
                             catch (pushErr) {
-                                console.warn(`[workflow:${def.kind}] Could not push ${REPORTS_BRANCH}: ${pushErr}`);
+                                console.warn(`[workflow:${def.kind}] Could not push ${reportsBranch}: ${pushErr}`);
                             }
                         }
                         finally {
@@ -341,6 +464,24 @@ function registerWorkflow(engine, sessions, def) {
             catch {
                 // Ignore cleanup errors
             }
+            // Guard: the audit session runs directly in repoPath (no worktree isolation),
+            // so the Claude agent can check out the audit branch while following CLAUDE.md's
+            // instruction to commit reports on a branch. Restore the original branch so the
+            // next run does not fork its audit branch from a stale, audit-branch HEAD.
+            const repoPath = run.output?.repoPath;
+            const branch = run.output?.branch;
+            if (repoPath && branch) {
+                try {
+                    const current = execFileSync('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd: repoPath, timeout: 5_000, stdio: 'pipe' }).toString().trim();
+                    if (current !== branch) {
+                        console.warn(`[workflow:${def.kind}] Main checkout is on '${current}' instead of '${branch}' — restoring`);
+                        execFileSync('git', ['checkout', branch], { cwd: repoPath, timeout: 10_000, stdio: 'pipe' });
+                    }
+                }
+                catch (err) {
+                    console.warn(`[workflow:${def.kind}] Could not restore branch to ${branch}: ${err}`);
+                }
+            }
         },
     });
 }
@@ -429,6 +570,19 @@ export function loadMdWorkflows(engine, sessions) {
     for (const def of defs) {
         registerWorkflow(engine, sessions, def);
     }
+    // Let the engine consult the session manager when deciding whether an interrupted
+    // run is still resumable. Returning null tells the engine the session has gone and
+    // the run should fail with a clear, typed reason instead of being skipped silently.
+    // (Defensive optional-call so older test doubles without setSessionResolver still pass.)
+    engine.setSessionResolver?.((sessionId) => {
+        const session = sessions.get(sessionId);
+        if (!session)
+            return null;
+        const lastActivityAt = session._lastActivityAt
+            ? new Date(session._lastActivityAt).toISOString()
+            : null;
+        return { lastActivityAt };
+    });
     console.log(`[workflow-loader] Loaded ${defs.length} workflow(s) from MD definitions`);
 }
 //# sourceMappingURL=workflow-loader.js.map

package/server/dist/workflow-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-loader.js","sourceRoot":"","sources":["../workflow-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAA;AA0BnC,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,0FAA0F;AAC1F,SAAS,eAAe,CAAC,OAAe,EAAE,UAAkB;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAC5E,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAA;IAEtE,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAEhC,MAAM,IAAI,GAA2B,EAAE,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAQ;QACxB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9D,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAA;IAClG,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,QAAQ,UAAU,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM;KACP,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACxD,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;AAErC,yEAAyE;AACzE,SAAS,oBAAoB;IAC3B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,uDAAuD,aAAa,EAAE,CAAC,CAAA;QACpF,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,IAAI,GAAkB,EAAE,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;QACtE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,4FAA4F;AAC5F,SAAS,gBAAgB,CAAC,QAAgB,EAAE,IAAY;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,KAAK,CAAC,CAAA;IACtE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,mDAAmD,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;QACjF,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,KAAK,UAAU,oBAAoB,CACjC,QAAwB,EACxB,SAAiB,EACjB,OAA2E,EAAE;IAE7E,MAAM,EAAE,SAAS,GAAG,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IAEvC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,WAAW,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA;QAEpD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,YAAY,CAAC,CAAA;QAE/D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;QACtE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa;iBACxC,MAAM,CAAC,CAAC,CAAC,EAAqD,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;iBACrF,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAChB,IAAI,CAAC,EAAE,CAAC,CAAA;YACX,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;QAC/C,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa;iBACxC,MAAM,CAAC,CAAC,CAAC,EAAqD,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;iBACrF,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAChB,IAAI,CAAC,EAAE,CAAC,CAAA;YACX,OAAO;gBACL,OAAO,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;gBACjC,IAAI,EAAE,aAAa,IAAI,8BAA8B;aACtD,CAAA;QACH,CAAC;QAED,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8CAA8C,SAAS,IAAI,CAAC,CAAA;AAC9E,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,MAAsB,EAAE,QAAwB,EAAE,GAAgB;IAC1F,MAAM,CAAC,gBAAgB,CAAC;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QAEd,KAAK,EAAE;YACL,8BAA8B;YAC9B;gBACE,GAAG,EAAE,eAAe;gBACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,IAAI,CAAC,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;oBACpE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAA;oBACzF,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;oBAC3C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;wBAC/C,MAAM,IAAI,KAAK,CAAC,mBAAmB,YAAY,wBAAwB,CAAC,CAAA;oBAC1E,CAAC;oBAED,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;wBAC7H,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;wBAEtH,MAAM,cAAc,GAAG,KAAK,CAAC,cAAoC,CAAA;wBACjE,IAAI,cAAc,EAAE,CAAC;4BACnB,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,cAAc,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;4BAC7I,IAAI,CAAC,UAAU,EAAE,CAAC;gCAChB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;gCAChE,MAAM,IAAI,eAAe,CAAC,mCAAmC,cAAc,GAAG,CAAC,CAAA;4BACjF,CAAC;wBACH,CAAC;wBAED,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,qBAAqB,QAAQ,KAAK,MAAM,OAAO,UAAU,EAAE,CAAC,CAAA;wBAC7F,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;oBACnE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB;4BAAE,MAAM,GAAG,CAAA;wBACrE,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;oBAC5E,CAAC;gBACH,CAAC;aACF;YAED,yBAAyB;YACzB;gBACE,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,QAAQ,GAAI,KAAK,CAAC,QAAmB,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAA;oBAErF,MAAM,KAAK,GAAI,KAAK,CAAC,KAA4B,IAAI,GAAG,CAAC,KAAK,CAAA;oBAC9D,MAAM,QAAQ,GAAI,KAAK,CAAC,QAA8C,CAAA;oBACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,aAAa,IAAI,QAAQ,EAAE,EAAE,QAAQ,EAAE;wBAC5E,MAAM,EAAE,UAAU;wBAClB,QAAQ,EAAE,QAAQ;wBAClB,KAAK;wBACL,QAAQ;wBACR,YAAY,EAAE,CAAC,eAAe,CAAC;qBAChC,CAAC,CAAA;oBAEF,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,qBAAqB,OAAO,CAAC,EAAE,QAAQ,QAAQ,SAAS,GAAG,CAAC,KAAK,GAAG,CAAC,CAAA;oBACtG,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAA;gBAC1G,CAAC;aACF;YAED,qBAAqB;YACrB;gBACE,GAAG,EAAE,YAAY;gBACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAA;oBAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAkC,CAAA;oBAE7D,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;oBAC/B,MAAM,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;oBAEtC,mEAAmE;oBACnE,MAAM,YAAY,GAAG,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBAC7D,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA;oBAElE,MAAM,MAAM,GAAG,YAAY;wBACzB,CAAC,CAAC,GAAG,UAAU,gCAAgC,YAAY,EAAE;wBAC7D,CAAC,CAAC,UAAU,CAAA;oBAEd,IAAI,YAAY,EAAE,CAAC;wBACjB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,yCAAyC,QAAQ,EAAE,CAAC,CAAA;oBACvF,CAAC;oBAED,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;oBACrC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,4BAA4B,SAAS,QAAQ,QAAQ,EAAE,CAAC,CAAA;oBAEzF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE;wBAC7D,SAAS,EAAE,OAAO;wBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;qBAC7B,CAAC,CAAA;oBAEF,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,mBAAmB,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,CAAA;oBAC7F,OAAO;wBACL,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,SAAS;wBACT,QAAQ;wBACR,QAAQ;wBACR,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;qBACjB,CAAA;gBACH,CAAC;aACF;YAED,sBAAsB;YACtB;gBACE,GAAG,EAAE,aAAa;gBAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAoB,CAAA;oBAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAA;oBAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAgB,CAAA;oBAErC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;oBACtB,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBAE9C,MAAM,QAAQ,GAAG;wBACf,KAAK,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE;wBAC5B,EAAE;wBACF,aAAa,GAAG,CAAC,WAAW,EAAE,EAAE;wBAChC,mBAAmB,QAAQ,EAAE;wBAC7B,eAAe,MAAM,IAAI,SAAS,EAAE;wBACpC,qBAAqB,GAAG,CAAC,KAAK,EAAE;wBAChC,gBAAgB,SAAS,EAAE;wBAC3B,EAAE;wBACF,KAAK;wBACL,EAAE;wBACF,UAAU;qBACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAEZ,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;oBAChD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;oBAC5C,CAAC;oBAED,MAAM,QAAQ,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,cAAc,EAAE,CAAA;oBAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;oBAC3C,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;oBAE1C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,qBAAqB,QAAQ,EAAE,CAAC,CAAA;oBAEjE,4EAA4E;oBAC5E,kEAAkE;oBAClE,4DAA4D;oBAC5D,MAAM,cAAc,GAAG,iBAAiB,CAAA;oBACxC,IAAI,CAAC;wBACH,MAAM,YAAY,GAAG,GAAG,GAAG,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAA;wBAEnD,sDAAsD;wBACtD,IAAI,CAAC;4BACH,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;wBAClH,CAAC;wBAAC,MAAM,CAAC;4BACP,+DAA+D;4BAC/D,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;4BAClF,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,oBAAoB,cAAc,EAAE,CAAC,CAAA;wBACxE,CAAC;wBAED,oDAAoD;wBACpD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,sBAAsB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;wBACrE,IAAI,CAAC;4BACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;4BAEnG,wCAAwC;4BACxC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;4BACjD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gCAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;4BAChD,CAAC;4BACD,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;4BAEhE,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;4BAC3E,YAAY,CACV,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,aAAa,IAAI,OAAO,EAAE,CAAC,EAC1D,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAChC,CAAA;4BACD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,eAAe,YAAY,OAAO,cAAc,EAAE,CAAC,CAAA;4BAEpF,iBAAiB;4BACjB,IAAI,CAAC;gCACH,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;gCACvG,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,YAAY,cAAc,YAAY,CAAC,CAAA;4BAC1E,CAAC;4BAAC,OAAO,OAAO,EAAE,CAAC;gCACjB,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,oBAAoB,cAAc,KAAK,OAAO,EAAE,CAAC,CAAA;4BACrF,CAAC;wBACH,CAAC;gCAAS,CAAC;4BACT,yCAAyC;4BACzC,IAAI,CAAC;gCACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;4BACnG,CAAC;4BAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;wBACnD,CAAC;oBACH,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,8BAA8B,GAAG,EAAE,CAAC,CAAA;oBACxE,CAAC;oBAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;gBAC1C,CAAC;aACF;SACF;QAED,wDAAwD;QACxD,QAAQ,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YACnC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,SAA+B,CAAA;gBAC7D,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;oBACvC,IAAI,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;wBACtC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,yCAAyC,SAAS,EAAE,CAAC,CAAA;wBACtF,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,2EAA2E;AAC3E,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAE/B,MAAM,IAAI,GAAkB,EAAE,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,mDAAmD,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAsB,EACtB,QAAwB,EACxB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IAChD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,eAAe,GAAG,GAAG,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC;YAAE,SAAQ;QACtD,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QAC1C,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;QACvC,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QACxC,OAAO,CAAC,GAAG,CAAC,+CAA+C,GAAG,CAAC,IAAI,UAAU,QAAQ,EAAE,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,QAAiB;IAClD,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAA;IAC1C,MAAM,KAAK,GAAuB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,SAAkB;KAC3B,CAAC,CAAC,CAAA;IAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAE5D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QAChD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;AACzD,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,MAAsB,EAAE,QAAwB;IAC9E,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAA;IACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,MAAM,kCAAkC,CAAC,CAAA;AACxF,CAAC"}
+{"version":3,"file":"workflow-loader.js","sourceRoot":"","sources":["../workflow-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAA;AAEnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAyBvD,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,KAAa,EAAE,KAAa,EAAE,UAAkB;IAC9E,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,UAAU,kCAAkC,CAAC,CAAA;IACtF,CAAC;IACD,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,UAAU,kDAAkD,CAAC,CAAA;IACtG,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,eAAe,CAAC,OAAe,EAAE,UAAkB;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAC5E,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAA;IAEtE,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAEhC,MAAM,IAAI,GAA2B,EAAE,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAQ;QACxB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9D,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAA;IAClG,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,QAAQ,UAAU,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,qBAAqB;IACrB,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;IAC/D,sBAAsB,CAAC,IAAI,CAAC,cAAc,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAA;IAEzE,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM;KACP,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACxD,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;AAErC,yEAAyE;AACzE,SAAS,oBAAoB;IAC3B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,uDAAuD,aAAa,EAAE,CAAC,CAAA;QACpF,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,IAAI,GAAkB,EAAE,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAC1C,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;QACtE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,4FAA4F;AAC5F,SAAS,gBAAgB,CAAC,QAAgB,EAAE,IAAY;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,KAAK,CAAC,CAAA;IACtE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAA;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,mDAAmD,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;QACjF,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,KAAK,UAAU,oBAAoB,CACjC,QAAwB,EACxB,SAAiB,EACjB,OAA6G,EAAE;IAE/G,MAAM,EAAE,SAAS,GAAG,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IACvC,IAAI,QAAQ,GAAkB,IAAI,CAAA;IAElC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,WAAW,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA;QAEpD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,KAAK,IAAI,SAAS,EAAE,OAAO,IAAI,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;QAC9F,CAAC;QACD,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAEnC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;QACtE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa;iBACxC,MAAM,CAAC,CAAC,CAAC,EAAqD,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;iBACrF,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAChB,IAAI,CAAC,EAAE,CAAC,CAAA;YACX,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;QAC/C,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa;iBACxC,MAAM,CAAC,CAAC,CAAC,EAAqD,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;iBACrF,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAChB,IAAI,CAAC,EAAE,CAAC,CAAA;YACX,OAAO;gBACL,OAAO,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;gBACjC,IAAI,EAAE,aAAa,IAAI,8BAA8B;aACtD,CAAA;QACH,CAAC;QAED,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8CAA8C,SAAS,IAAI,CAAC,CAAA;AAC9E,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG;IAC5B,sEAAsE;IACtE,wEAAwE;IACxE,oGAAoG;IACpG,8DAA8D;IAC9D,kIAAkI;CACnI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAEX,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,OAAO,SAAS,IAAI,IAAI,OAAO,EAAE,CAAA;AACnC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,oFAAoF;IACpF,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAA;IAC7C,OAAO,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACxD,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,MAAsB,EAAE,QAAwB,EAAE,GAAgB;IAC1F,MAAM,CAAC,gBAAgB,CAAC;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QAEd,KAAK,EAAE;YACL,8BAA8B;YAC9B;gBACE,GAAG,EAAE,eAAe;gBACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,IAAI,CAAC,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;oBACpE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAA;oBACzF,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;oBAC3C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;wBAC/C,MAAM,IAAI,KAAK,CAAC,mBAAmB,YAAY,wBAAwB,CAAC,CAAA;oBAC1E,CAAC;oBAED,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;wBAC7H,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;wBAEtH,MAAM,cAAc,GAAG,KAAK,CAAC,cAAoC,CAAA;wBACjE,IAAI,cAAc,EAAE,CAAC;4BACnB,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,WAAW,cAAc,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;4BAC7I,IAAI,CAAC,UAAU,EAAE,CAAC;gCAChB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;gCAChE,MAAM,IAAI,eAAe,CAAC,mCAAmC,cAAc,GAAG,CAAC,CAAA;4BACjF,CAAC;wBACH,CAAC;wBAED,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,qBAAqB,QAAQ,KAAK,MAAM,OAAO,UAAU,EAAE,CAAC,CAAA;wBAC7F,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAA;oBACnE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB;4BAAE,MAAM,GAAG,CAAA;wBACrE,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;oBAC5E,CAAC;gBACH,CAAC;aACF;YAED,yBAAyB;YACzB;gBACE,GAAG,EAAE,gBAAgB;gBACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,QAAQ,GAAI,KAAK,CAAC,QAAmB,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAA;oBAErF,MAAM,KAAK,GAAI,KAAK,CAAC,KAA4B,IAAI,GAAG,CAAC,KAAK,CAAA;oBAC9D,MAAM,QAAQ,GAAI,KAAK,CAAC,QAA8C,CAAA;oBACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,aAAa,IAAI,QAAQ,EAAE,EAAE,QAAQ,EAAE;wBAC5E,MAAM,EAAE,UAAU;wBAClB,QAAQ,EAAE,QAAQ;wBAClB,KAAK;wBACL,QAAQ;wBACR,YAAY,EAAE,CAAC,eAAe,CAAC;qBAChC,CAAC,CAAA;oBAEF,uEAAuE;oBACvE,mEAAmE;oBACnE,GAAG,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;oBAEjC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,qBAAqB,OAAO,CAAC,EAAE,QAAQ,QAAQ,SAAS,GAAG,CAAC,KAAK,GAAG,CAAC,CAAA;oBACtG,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAA;gBAC1G,CAAC;aACF;YAED,qBAAqB;YACrB;gBACE,GAAG,EAAE,YAAY;gBACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAA;oBAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAkC,CAAA;oBAE7D,kFAAkF;oBAClF,mFAAmF;oBACnF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAA;oBAC5F,CAAC;oBAED,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;oBAC/B,MAAM,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;oBAEtC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBAChB,6EAA6E;wBAC7E,6EAA6E;wBAC7E,kDAAkD;wBAClD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,kBAAkB,GAAG,CAAC,KAAK,6BAA6B,SAAS,eAAe,CAAC,CAAA;oBACpH,CAAC;yBAAM,CAAC;wBACN,mEAAmE;wBACnE,MAAM,YAAY,GAAG,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;wBAC7D,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA;wBAElE,MAAM,UAAU,GAAG,YAAY;4BAC7B,CAAC,CAAC,GAAG,UAAU,gCAAgC,YAAY,EAAE;4BAC7D,CAAC,CAAC,UAAU,CAAA;wBAEd,8DAA8D;wBAC9D,gEAAgE;wBAChE,qEAAqE;wBACrE,MAAM,aAAa,GAAG,KAAK,CAAC,aAAmC,CAAA;wBAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,MAA4B,CAAA;wBACvD,MAAM,YAAY,GAAG,KAAK,CAAC,MAA4B,CAAA;wBACvD,IAAI,aAAa,GAAG,EAAE,CAAA;wBACtB,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;4BAChC,aAAa,GAAG;gCACd,kBAAkB;gCAClB,aAAa;gCACb,mBAAmB;gCACnB,WAAW,YAAY,IAAI,SAAS,WAAW;gCAC/C,WAAW,YAAY,IAAI,SAAS,WAAW;gCAC/C,EAAE;gCACF,EAAE;6BACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;wBACd,CAAC;wBAED,qEAAqE;wBACrE,6DAA6D;wBAC7D,MAAM,MAAM,GAAG,GAAG,qBAAqB,OAAO,aAAa,GAAG,UAAU,EAAE,CAAA;wBAE1E,IAAI,YAAY,EAAE,CAAC;4BACjB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,yCAAyC,QAAQ,EAAE,CAAC,CAAA;wBACvF,CAAC;wBAED,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;wBACrC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,4BAA4B,SAAS,QAAQ,QAAQ,EAAE,CAAC,CAAA;oBAC3F,CAAC;oBAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE;wBAC7D,SAAS,EAAE,OAAO;wBAClB,WAAW,EAAE,GAAG,CAAC,WAAW;wBAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,OAAO,EAAE,YAAY;qBACtB,CAAC,CAAA;oBAEF,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,mBAAmB,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,CAAA;oBAC7F,OAAO;wBACL,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,SAAS;wBACT,QAAQ;wBACR,QAAQ;wBACR,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;qBACjB,CAAA;gBACH,CAAC;aACF;YAED,sBAAsB;YACtB;gBACE,GAAG,EAAE,aAAa;gBAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;oBAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAkB,CAAA;oBACzC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAoB,CAAA;oBAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAA;oBAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAgB,CAAA;oBAErC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;oBACtB,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBAE9C,MAAM,QAAQ,GAAG;wBACf,KAAK,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE;wBAC5B,EAAE;wBACF,aAAa,GAAG,CAAC,WAAW,EAAE,EAAE;wBAChC,mBAAmB,QAAQ,EAAE;wBAC7B,eAAe,MAAM,IAAI,SAAS,EAAE;wBACpC,qBAAqB,GAAG,CAAC,KAAK,EAAE;wBAChC,gBAAgB,SAAS,EAAE;wBAC3B,EAAE;wBACF,KAAK;wBACL,EAAE;wBACF,UAAU;qBACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBAEZ,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;oBAChD,MAAM,QAAQ,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,cAAc,EAAE,CAAA;oBAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;oBAE3C,gEAAgE;oBAChE,iEAAiE;oBACjE,+DAA+D;oBAC/D,+DAA+D;oBAC/D,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;oBACtF,MAAM,eAAe,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;oBAC/F,IACE,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC;wBAC/C,eAAe,KAAK,YAAY,EAChC,CAAC;wBACD,MAAM,IAAI,KAAK,CACb,0CAA0C,eAAe,iBAAiB,YAAY,EAAE,CACzF,CAAA;oBACH,CAAC;oBACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;oBAC3D,IACE,CAAC,gBAAgB,CAAC,UAAU,CAAC,eAAe,GAAG,GAAG,CAAC;wBACnD,gBAAgB,KAAK,eAAe,EACpC,CAAC;wBACD,MAAM,IAAI,KAAK,CACb,+CAA+C,gBAAgB,iBAAiB,eAAe,EAAE,CAClG,CAAA;oBACH,CAAC;oBAED,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,uBAAuB,QAAQ,EAAE,CAAC,CAAA;oBAEnE,uEAAuE;oBACvE,mEAAmE;oBACnE,uEAAuE;oBACvE,uEAAuE;oBACvE,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;oBACzD,IAAI,CAAC;wBACH,MAAM,YAAY,GAAG,GAAG,GAAG,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAA;wBAEnD,oEAAoE;wBACpE,iEAAiE;wBACjE,uBAAuB;wBACvB,IAAI,CAAC;4BACH,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;wBACjH,CAAC;wBAAC,MAAM,CAAC;4BACP,qEAAqE;4BACrE,uEAAuE;4BACvE,kDAAkD;4BAClD,IAAI,OAAO,GAAG,KAAK,CAAA;4BACnB,IAAI,CAAC;gCACH,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;gCACnG,OAAO,GAAG,IAAI,CAAA;4BAChB,CAAC;4BAAC,OAAO,QAAQ,EAAE,CAAC;gCAClB,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,+DAA+D,QAAQ,EAAE,CAAC,CAAA;4BAC9G,CAAC;4BACD,MAAM,UAAU,GAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;4BACtD,IAAI,OAAO;gCAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;4BAC3C,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;4BAClE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,oBAAoB,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mCAAmC,EAAE,CAAC,CAAA;wBAC7I,CAAC;wBAED,oDAAoD;wBACpD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,sBAAsB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAA;wBACrE,IAAI,CAAC;4BACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;4BAElG,wCAAwC;4BACxC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;4BACjD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gCAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;4BAChD,CAAC;4BACD,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;4BAEhE,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;4BAC3E,YAAY,CACV,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,aAAa,IAAI,OAAO,EAAE,CAAC,EAC1D,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAChC,CAAA;4BACD,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,eAAe,YAAY,OAAO,aAAa,EAAE,CAAC,CAAA;4BAEnF,iBAAiB;4BACjB,IAAI,CAAC;gCACH,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;gCACtG,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,YAAY,aAAa,YAAY,CAAC,CAAA;4BACzE,CAAC;4BAAC,OAAO,OAAO,EAAE,CAAC;gCACjB,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,oBAAoB,aAAa,KAAK,OAAO,EAAE,CAAC,CAAA;4BACpF,CAAC;wBACH,CAAC;gCAAS,CAAC;4BACT,yCAAyC;4BACzC,IAAI,CAAC;gCACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;4BACnG,CAAC;4BAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;wBACnD,CAAC;oBACH,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,8BAA8B,GAAG,EAAE,CAAC,CAAA;oBACxE,CAAC;oBAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;gBAC1C,CAAC;aACF;SACF;QAED,wDAAwD;QACxD,QAAQ,EAAE,KAAK,EAAE,GAAgB,EAAE,EAAE;YACnC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,SAA+B,CAAA;gBAC7D,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;oBACvC,IAAI,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;wBACtC,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,yCAAyC,SAAS,EAAE,CAAC,CAAA;wBACtF,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;YAED,8EAA8E;YAC9E,iFAAiF;YACjF,gFAAgF;YAChF,2EAA2E;YAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,QAA8B,CAAA;YAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAA4B,CAAA;YACvD,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EACvE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;oBACrE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;wBACvB,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,0BAA0B,OAAO,iBAAiB,MAAM,eAAe,CAAC,CAAA;wBAC1G,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;oBAC9F,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,iCAAiC,MAAM,KAAK,GAAG,EAAE,CAAC,CAAA;gBACtF,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,2EAA2E;AAC3E,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IACnD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAE/B,MAAM,IAAI,GAAkB,EAAE,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,mDAAmD,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAsB,EACtB,QAAwB,EACxB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IAChD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,eAAe,GAAG,GAAG,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE,CAAA;QAClD,IAAI,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC;YAAE,SAAQ;QACtD,IAAI,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QAC1C,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;QACvC,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QACxC,OAAO,CAAC,GAAG,CAAC,+CAA+C,GAAG,CAAC,IAAI,UAAU,QAAQ,EAAE,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,QAAiB;IAClD,MAAM,WAAW,GAAG,oBAAoB,EAAE,CAAA;IAC1C,MAAM,KAAK,GAAuB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,SAAkB;KAC3B,CAAC,CAAC,CAAA;IAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAE5D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;QAChD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;AACzD,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,MAAsB,EAAE,QAAwB;IAC9E,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAA;IACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;IACzC,CAAC;IAED,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,yFAAyF;IACzF,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe;YAC5C,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE;YACjD,CAAC,CAAC,IAAI,CAAA;QACR,OAAO,EAAE,cAAc,EAAE,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,MAAM,kCAAkC,CAAC,CAAA;AACxF,CAAC"}

package/server/dist/workflow-routes.d.ts

@@ -8,8 +8,21 @@ import { Router } from 'express';
 import type { Request } from 'express';
 import type { CommitEventHandler } from './commit-event-handler.js';
 import type { SessionManager } from './session-manager.js';
+/**
+ * Parse a GitHub `owner/repo` slug from a git remote URL.
+ * Supports SSH (git@github.com:owner/repo.git) and HTTPS (https://github.com/owner/repo.git).
+ * Returns null for non-GitHub remotes.
+ */
+export declare function parseGitHubSlug(remoteUrl: string): string | null;
+export interface WebhookSetupResult {
+    status: 'created' | 'updated' | 'already_configured' | 'failed';
+    message: string;
+    repo?: string;
+}
 type VerifyFn = (token: string | undefined) => boolean;
 type ExtractFn = (req: Request) => string | undefined;
+/** Validate a 5-field cron expression. Returns true if the format is valid. */
+export declare function isValidCron(expr: string): boolean;
 /**
  * Sync cron schedules with the current workflow config.
  * When `sessions` is provided, also registers any standalone repo workflows.

package/server/dist/workflow-routes.js

@@ -5,13 +5,99 @@
  * runs, schedules, and repo config. All routes require auth.
  */
 import { Router } from 'express';
+import { execFile } from 'child_process';
+import { promisify } from 'util';
 import { getWorkflowEngine } from './workflow-engine.js';
 import { loadWorkflowConfig, addReviewRepo, removeReviewRepo, updateReviewRepo, } from './workflow-config.js';
 import { listAvailableKinds, ensureRepoWorkflowsRegistered } from './workflow-loader.js';
 import { syncCommitHooks } from './commit-event-hooks.js';
+import { resolveRepoPathInRoot } from './config.js';
 import { VALID_PROVIDERS } from './types.js';
+import { previewWebhookSetup, createRepoWebhook, updateRepoWebhook, } from './webhook-github-setup.js';
+import { loadWebhookConfig, generateWebhookSecret, saveWebhookConfig } from './webhook-config.js';
+const execFileAsync = promisify(execFile);
+/**
+ * Parse a GitHub `owner/repo` slug from a git remote URL.
+ * Supports SSH (git@github.com:owner/repo.git) and HTTPS (https://github.com/owner/repo.git).
+ * Returns null for non-GitHub remotes.
+ */
+export function parseGitHubSlug(remoteUrl) {
+    const url = remoteUrl.trim();
+    // SSH form: strictly anchored so "notgithub.com:..." cannot match.
+    const sshMatch = url.match(/^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?$/);
+    if (sshMatch)
+        return `${sshMatch[1]}/${sshMatch[2]}`;
+    // HTTPS form: use the URL constructor so the hostname is checked exactly,
+    // preventing substring matches like "evil.com/github.com/...".
+    try {
+        const parsed = new URL(url);
+        if (parsed.hostname !== 'github.com' && parsed.hostname !== 'www.github.com')
+            return null;
+        const parts = parsed.pathname.replace(/\.git$/, '').split('/').filter(Boolean);
+        if (parts.length < 2)
+            return null;
+        return `${parts[0]}/${parts[1]}`;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Derive the GitHub `owner/repo` slug from a local repo path
+ * by parsing the git remote origin URL.
+ */
+async function getGitHubSlug(repoPath) {
+    try {
+        const { stdout } = await execFileAsync('git', ['-C', repoPath, 'remote', 'get-url', 'origin'], { timeout: 5000 });
+        return parseGitHubSlug(stdout);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Auto-setup the GitHub webhook for a PR review workflow.
+ * Ensures the webhook config has a secret and is enabled, then
+ * creates/updates the webhook on the GitHub repo.
+ */
+async function autoSetupPrWebhook(repoPath, webhookUrl) {
+    const slug = await getGitHubSlug(repoPath);
+    if (!slug) {
+        return {
+            status: 'failed',
+            message: `Could not determine GitHub repository from ${repoPath}. Please set up the webhook manually in Settings.`,
+        };
+    }
+    const preview = await previewWebhookSetup(slug, webhookUrl);
+    if (preview.action === 'none') {
+        return { status: 'already_configured', message: 'GitHub webhook is already configured.', repo: slug };
+    }
+    // Ensure server webhook config has a secret and is enabled
+    let config = loadWebhookConfig();
+    const configUpdates = {};
+    if (!config.secret)
+        configUpdates.secret = generateWebhookSecret();
+    if (!config.enabled)
+        configUpdates.enabled = true;
+    if (Object.keys(configUpdates).length > 0) {
+        saveWebhookConfig(configUpdates);
+        config = loadWebhookConfig();
+    }
+    if (preview.action === 'create') {
+        await createRepoWebhook(slug, webhookUrl, config.secret, preview.proposed.events);
+        return { status: 'created', message: `GitHub webhook created on ${slug}.`, repo: slug };
+    }
+    else {
+        await updateRepoWebhook(slug, preview.existing.id, {
+            events: preview.proposed.events,
+            active: true,
+            secret: config.secret,
+        });
+        return { status: 'updated', message: `GitHub webhook updated on ${slug}.`, repo: slug };
+    }
+}
 /** Validate a 5-field cron expression. Returns true if the format is valid. */
-function isValidCron(expr) {
+export function isValidCron(expr) {
     const parts = expr.trim().split(/\s+/);
     if (parts.length !== 5)
         return false;
@@ -26,6 +112,11 @@ function isValidCron(expr) {
         const [min, max] = ranges[i];
         return part.split(',').every(segment => {
             const stepMatch = segment.match(/^(.+)\/(\d+)$/);
+            if (stepMatch) {
+                const step = parseInt(stepMatch[2], 10);
+                if (isNaN(step) || step < 1)
+                    return false;
+            }
             const range = stepMatch ? stepMatch[1] : segment;
             if (range === '*')
                 return true;
@@ -106,6 +197,9 @@ export function createWorkflowRouter(verifyToken, extractToken, sessions, commit
         if (!repoPath || !branch || !commitHash || !commitMessage) {
             return res.status(400).json({ error: 'Missing required fields: repoPath, branch, commitHash, commitMessage' });
         }
+        if (!resolveRepoPathInRoot(repoPath)) {
+            return res.status(400).json({ error: 'Invalid repoPath: must be an existing directory under the configured repos root' });
+        }
         const result = await handler.handle({
             repoPath,
             branch,
@@ -132,6 +226,9 @@ export function createWorkflowRouter(verifyToken, extractToken, sessions, commit
     // -------------------------------------------------------------------------
     router.get('/kinds', (req, res) => {
         const repoPath = req.query.repoPath;
+        if (repoPath && !resolveRepoPathInRoot(repoPath)) {
+            return res.status(400).json({ error: 'Invalid repoPath: must be an existing directory under the configured repos root' });
+        }
         const kinds = listAvailableKinds(repoPath);
         res.json({ kinds });
     });
@@ -220,6 +317,9 @@ export function createWorkflowRouter(verifyToken, extractToken, sessions, commit
         const existing = engine.getSchedule(req.params.id);
         if (!existing)
             return res.status(404).json({ error: 'Schedule not found' });
+        if (req.body.cronExpression !== undefined && !isValidCron(req.body.cronExpression)) {
+            return res.status(400).json({ error: 'Invalid cron expression' });
+        }
         const schedule = engine.upsertSchedule({
             id: existing.id,
             kind: existing.kind,
@@ -256,14 +356,20 @@ export function createWorkflowRouter(verifyToken, extractToken, sessions, commit
     router.get('/config', (_req, res) => {
         res.json({ config: loadWorkflowConfig() });
     });
-    router.post('/config/repos', (req, res) => {
-        const { id, name, repoPath, cronExpression, enabled, customPrompt, kind, model, provider } = req.body;
+    router.post('/config/repos', async (req, res) => {
+        const { id, name, repoPath, cronExpression, enabled, customPrompt, kind, model, provider, webhookUrl } = req.body;
         if (!id || !name || !repoPath || !cronExpression) {
             return res.status(400).json({ error: 'Missing required fields: id, name, repoPath, cronExpression' });
         }
+        if (cronExpression !== 'event' && !isValidCron(cronExpression)) {
+            return res.status(400).json({ error: 'Invalid cron expression' });
+        }
         if (provider && !VALID_PROVIDERS.has(provider)) {
             return res.status(400).json({ error: `Invalid provider: ${provider}` });
         }
+        if (!resolveRepoPathInRoot(repoPath)) {
+            return res.status(400).json({ error: 'Invalid repoPath: must be an existing directory under the configured repos root' });
+        }
         // Register any standalone repo workflows before saving config
         if (sessions) {
             try {
@@ -290,9 +396,39 @@ export function createWorkflowRouter(verifyToken, extractToken, sessions, commit
         catch {
             // Engine might not be ready yet
         }
-        res.json({ config });
+        // Auto-setup GitHub webhook for pr-review workflows
+        let webhookSetup;
+        if (kind === 'pr-review' && webhookUrl) {
+            try {
+                webhookSetup = await autoSetupPrWebhook(repoPath, webhookUrl);
+            }
+            catch (err) {
+                webhookSetup = {
+                    status: 'failed',
+                    message: err instanceof Error ? err.message : 'Webhook setup failed. Please configure it manually in Settings.',
+                };
+            }
+        }
+        else if (kind === 'pr-review' && !webhookUrl) {
+            webhookSetup = {
+                status: 'failed',
+                message: 'Webhook URL not provided. Please configure the GitHub webhook manually in Settings.',
+            };
+        }
+        res.json({ config, webhookSetup });
     });
     router.patch('/config/repos/:id', (req, res) => {
+        if (req.body.repoPath !== undefined && !resolveRepoPathInRoot(req.body.repoPath)) {
+            return res.status(400).json({ error: 'Invalid repoPath: must be an existing directory under the configured repos root' });
+        }
+        if (req.body.cronExpression !== undefined &&
+            req.body.cronExpression !== 'event' &&
+            !isValidCron(req.body.cronExpression)) {
+            return res.status(400).json({ error: 'Invalid cron expression' });
+        }
+        if (req.body.provider !== undefined && !VALID_PROVIDERS.has(req.body.provider)) {
+            return res.status(400).json({ error: `Invalid provider: ${req.body.provider}` });
+        }
         try {
             const config = updateReviewRepo(req.params.id, req.body);
             try {