discord-agent-bridge 0.1.0

package/dist/core/sessionOrchestrator.js

@@ -0,0 +1,463 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+// Default: deny, so an unwired permission prompt fails safe rather than
+// auto-approving a tool the operator never saw (§7.5, deny-by-default).
+const denyByDefault = async () => ({
+    behavior: 'deny',
+    message: 'Permission prompts are not wired yet; denying by default.',
+});
+function channelKey(guildId, channelId) {
+    return `${guildId}:${channelId}`;
+}
+export class SessionOrchestrator {
+    channelRegistry;
+    modeRegistry;
+    eventBus;
+    configResolver;
+    permissionResolver;
+    auditLog;
+    logger;
+    requestPermission;
+    // Live sessions keyed by "<guildId>:<channelId>". This is the in-memory
+    // counterpart to the persisted ChannelRegistry binding; resumeAll() rebuilds
+    // it on boot (fixes A2).
+    active = new Map();
+    constructor(deps) {
+        this.channelRegistry = deps.channelRegistry;
+        this.modeRegistry = deps.modeRegistry;
+        this.eventBus = deps.eventBus;
+        this.configResolver = deps.configResolver;
+        this.permissionResolver = deps.permissionResolver;
+        this.auditLog = deps.auditLog;
+        this.logger = deps.logger;
+        this.requestPermission = deps.requestPermission ?? denyByDefault;
+    }
+    // §9 step 1. Resolve effective config + permission, start a fresh mode
+    // session, persist the binding, and track it live. Returns the ModeSession.
+    async start(params) {
+        const { guildId, channelId, mode, cwd, ownerId } = params;
+        const perm = this.permissionResolver.resolve(guildId, channelId, {
+            ...(params.permMode !== undefined ? { permMode: params.permMode } : {}),
+            ...(params.profile !== undefined ? { profile: params.profile } : {}),
+        });
+        const agentMode = this.modeRegistry.get(mode);
+        const ctx = this.buildContext({
+            guildId,
+            channelId,
+            cwd,
+            ownerId,
+            mode,
+            permMode: perm.permMode,
+            allowedTools: perm.allowedTools,
+            ...(params.effort !== undefined ? { effort: params.effort } : {}),
+        });
+        const session = await agentMode.start(ctx);
+        // Persist the binding (source of truth for resume-on-boot) then track live.
+        this.channelRegistry.set({
+            guildId,
+            channelId,
+            mode: mode,
+            sessionId: session.sessionId,
+            cwd,
+            ownerId,
+            permMode: perm.permMode,
+            profile: perm.profile,
+        });
+        this.active.set(channelKey(guildId, channelId), {
+            guildId,
+            channelId,
+            mode,
+            cwd,
+            ownerId,
+            permMode: perm.permMode,
+            session,
+            queue: [],
+            running: false,
+        });
+        this.auditLog.record({
+            actorId: ownerId,
+            roleTier: 'execute',
+            guildId,
+            channelId,
+            action: 'start',
+            mode,
+            permMode: perm.permMode,
+            cwd,
+            status: 'ok',
+        });
+        this.logger.info('session started', { guildId, channelId, mode, cwd });
+        return session;
+    }
+    // §9 on-demand resume. Rebind a channel to an EXISTING backend session id (chosen
+    // in the resume UX), mirroring start() but calling agentMode.resume(ctx, sessionId)
+    // instead of start(ctx). Resolves the layered config + permission, persists the
+    // binding (source of truth for resume-on-boot), tracks it live, and audits. Used by
+    // the Discord layer's "Resume Session" flow (distinct from resumeAll(), which
+    // rebinds every persisted channel on boot). Returns the ModeSession.
+    async resume(params, sessionId) {
+        const { guildId, channelId, mode, cwd, ownerId } = params;
+        const perm = this.permissionResolver.resolve(guildId, channelId, {
+            ...(params.permMode !== undefined ? { permMode: params.permMode } : {}),
+            ...(params.profile !== undefined ? { profile: params.profile } : {}),
+        });
+        const agentMode = this.modeRegistry.get(mode);
+        const ctx = this.buildContext({
+            guildId,
+            channelId,
+            cwd,
+            ownerId,
+            mode,
+            permMode: perm.permMode,
+            allowedTools: perm.allowedTools,
+            ...(params.effort !== undefined ? { effort: params.effort } : {}),
+        });
+        const session = await agentMode.resume(ctx, sessionId);
+        this.channelRegistry.set({
+            guildId,
+            channelId,
+            mode: mode,
+            sessionId: session.sessionId ?? sessionId,
+            cwd,
+            ownerId,
+            permMode: perm.permMode,
+            profile: perm.profile,
+        });
+        this.active.set(channelKey(guildId, channelId), {
+            guildId,
+            channelId,
+            mode,
+            cwd,
+            ownerId,
+            permMode: perm.permMode,
+            session,
+            queue: [],
+            running: false,
+        });
+        this.auditLog.record({
+            actorId: ownerId,
+            roleTier: 'execute',
+            guildId,
+            channelId,
+            action: 'resume',
+            mode,
+            permMode: perm.permMode,
+            cwd,
+            status: 'ok',
+        });
+        this.logger.info('session resumed', { guildId, channelId, mode, sessionId });
+        return session;
+    }
+    // §9 step 2. Enqueue a user turn. If a turn is already in flight for this
+    // channel it is queued (never dropped, fixing A4) and processed strictly in
+    // arrival order once the current turn completes. Files are realpath-confined
+    // to the session workspace before the turn reaches the mode (§7.5); a turn
+    // whose file escapes the workspace is rejected outright (an error event is
+    // emitted and the turn is not sent).
+    async send(guildId, channelId, turn) {
+        const key = channelKey(guildId, channelId);
+        const channel = this.active.get(key);
+        if (!channel) {
+            throw new Error(`No active session for channel ${key}. Run /agent start first.`);
+        }
+        const violation = this.findConfinementViolation(channel.cwd, turn);
+        if (violation) {
+            this.emit(guildId, channelId, {
+                kind: 'error',
+                message: `File path escapes the workspace and was rejected: ${violation}`,
+                retryable: false,
+            });
+            this.auditLog.record({
+                actorId: channel.ownerId,
+                roleTier: 'execute',
+                guildId,
+                channelId,
+                action: 'turn',
+                mode: channel.mode,
+                permMode: channel.permMode,
+                cwd: channel.cwd,
+                outcome: `path confinement rejected: ${violation}`,
+                status: 'denied',
+            });
+            throw new Error(`File path escapes the workspace: ${violation}`);
+        }
+        channel.queue.push(turn);
+        const wasIdle = !channel.running;
+        // If a turn is in flight we simply leave ours queued; the running drain
+        // loop will pick it up in order. Otherwise we kick off the drain.
+        if (wasIdle) {
+            // Fire-and-forget: the drain loop owns error handling and audit per turn.
+            void this.drain(key);
+        }
+        return {
+            status: wasIdle ? 'started' : 'queued',
+            queueDepth: channel.queue.length,
+        };
+    }
+    // §9 step 5 / §7.5 kill switch. Abort the running session, drain (clear) the
+    // channel's queue, archive the binding, and drop the live tracking. Audited.
+    async stop(guildId, channelId) {
+        const key = channelKey(guildId, channelId);
+        const channel = this.active.get(key);
+        if (!channel)
+            return;
+        channel.queue.length = 0;
+        try {
+            await channel.session.stop();
+        }
+        catch (err) {
+            this.logger.error('session stop failed', { guildId, channelId, err: String(err) });
+        }
+        this.active.delete(key);
+        this.channelRegistry.markArchived(guildId, channelId);
+        this.auditLog.record({
+            actorId: channel.ownerId,
+            roleTier: 'execute',
+            guildId,
+            channelId,
+            action: 'stop',
+            mode: channel.mode,
+            permMode: channel.permMode,
+            cwd: channel.cwd,
+            status: 'ok',
+        });
+        this.logger.info('session stopped', { guildId, channelId });
+    }
+    // §7.5 admin kill switch. Stop every active session across all guilds. The
+    // tier check happens at the router; the orchestrator just executes. Each stop
+    // is isolated so one failure does not abort the rest.
+    async stopAll() {
+        const keys = [...this.active.keys()];
+        for (const key of keys) {
+            const channel = this.active.get(key);
+            if (!channel)
+                continue;
+            await this.stop(channel.guildId, channel.channelId);
+        }
+        this.logger.info('all sessions stopped', { count: keys.length });
+    }
+    // §9 step 4 (fixes A2). Boot recovery: re-bind every non-archived channel from
+    // persisted state via mode.resume(ctx, sessionId). A mode/session that fails
+    // to resume is logged and skipped so one bad binding never crashes boot.
+    async resumeAll() {
+        const bindings = this.channelRegistry.list().filter((b) => !b.archived);
+        let resumed = 0;
+        for (const binding of bindings) {
+            const { guildId, channelId, mode, cwd, ownerId, permMode, sessionId } = binding;
+            try {
+                const agentMode = this.modeRegistry.get(mode);
+                // Re-resolve the layered tool allowlist for the resumed channel (no live
+                // session override on boot — the persisted profile/mode drive it) so a
+                // resumed session gets the same allowlist a fresh start() would.
+                const perm = this.permissionResolver.resolve(guildId, channelId);
+                const ctx = this.buildContext({
+                    guildId,
+                    channelId,
+                    cwd,
+                    ownerId,
+                    mode,
+                    permMode,
+                    allowedTools: perm.allowedTools,
+                });
+                // A binding with no backend sessionId cannot be resumed against a
+                // specific id; skip it (the channel starts fresh on its next turn).
+                if (sessionId === null) {
+                    this.logger.warn('skipping resume: no sessionId', { guildId, channelId, mode });
+                    continue;
+                }
+                const session = await agentMode.resume(ctx, sessionId);
+                this.active.set(channelKey(guildId, channelId), {
+                    guildId,
+                    channelId,
+                    mode,
+                    cwd,
+                    ownerId,
+                    permMode,
+                    session,
+                    queue: [],
+                    running: false,
+                });
+                this.auditLog.record({
+                    actorId: ownerId,
+                    roleTier: 'execute',
+                    guildId,
+                    channelId,
+                    action: 'resume',
+                    mode,
+                    permMode,
+                    cwd,
+                    status: 'ok',
+                });
+                resumed++;
+            }
+            catch (err) {
+                // Tolerate a mode/session that fails to resume: log + skip, never crash.
+                this.logger.error('resume failed; skipping channel', {
+                    guildId,
+                    channelId,
+                    mode,
+                    err: String(err),
+                });
+            }
+        }
+        this.logger.info('resume-on-boot complete', { resumed, total: bindings.length });
+    }
+    // Drain a channel's queue one turn at a time, strictly in FIFO order. Marked
+    // running for the whole drain so a concurrent send() cannot start a second
+    // drain (single-threaded JS + this flag = no interleaving). Each turn is
+    // audited; a send() failure is surfaced as an error event but does not stop
+    // the queue (the next turn still runs).
+    async drain(key) {
+        const channel = this.active.get(key);
+        if (!channel || channel.running)
+            return;
+        channel.running = true;
+        try {
+            while (channel.queue.length > 0) {
+                const turn = channel.queue.shift();
+                try {
+                    await channel.session.send(turn);
+                    this.auditLog.record({
+                        actorId: channel.ownerId,
+                        roleTier: 'execute',
+                        guildId: channel.guildId,
+                        channelId: channel.channelId,
+                        action: 'turn',
+                        mode: channel.mode,
+                        permMode: channel.permMode,
+                        cwd: channel.cwd,
+                        status: 'ok',
+                    });
+                }
+                catch (err) {
+                    this.logger.error('turn failed', {
+                        guildId: channel.guildId,
+                        channelId: channel.channelId,
+                        err: String(err),
+                    });
+                    this.emit(channel.guildId, channel.channelId, {
+                        kind: 'error',
+                        message: `Turn failed: ${String(err)}`,
+                        retryable: true,
+                    });
+                    this.auditLog.record({
+                        actorId: channel.ownerId,
+                        roleTier: 'execute',
+                        guildId: channel.guildId,
+                        channelId: channel.channelId,
+                        action: 'turn',
+                        mode: channel.mode,
+                        permMode: channel.permMode,
+                        cwd: channel.cwd,
+                        outcome: String(err),
+                        status: 'error',
+                    });
+                }
+            }
+        }
+        finally {
+            channel.running = false;
+        }
+    }
+    // Build the ModeContext handed to a mode's start()/resume(): emit → EventBus,
+    // requestPermission → the injectable resolver, config → the resolved layered
+    // view, audit → AuditLog. guildId/channelId/cwd/ownerId/permMode are carried.
+    // The resolved tool allowlist (from PermissionResolver: the global auto-allow
+    // set, narrowed by any active profile) is threaded onto the config view so the
+    // Claude mode reads the layered allowlist instead of re-hardcoding one (A8).
+    buildContext(args) {
+        const { guildId, channelId, cwd, ownerId, permMode, allowedTools, effort } = args;
+        const modeConfig = this.configResolver.resolveModeConfig(guildId, channelId);
+        modeConfig.allowedTools = allowedTools;
+        modeConfig.autoAllowClaudeTools = allowedTools;
+        return {
+            guildId,
+            channelId,
+            cwd,
+            ownerId,
+            ...(modeConfig.model !== undefined ? { model: modeConfig.model } : {}),
+            ...(effort !== undefined && effort.length > 0 ? { effort } : {}),
+            permMode,
+            emit: (ev) => this.emit(guildId, channelId, ev),
+            requestPermission: (req) => this.requestPermission({ guildId, channelId, ownerId }, req),
+            config: modeConfig,
+            logger: this.logger,
+            audit: (entry) => {
+                this.auditLog.record(entry);
+            },
+        };
+    }
+    // Build a MINIMAL read-only ModeContext for a mode's listResumable (resume UX): it
+    // carries the browsed cwd + the mode's resolved config view (codexHome etc.) + the
+    // logger, but its emit/requestPermission/audit are inert no-ops — listResumable only
+    // reads cwd/config/logger and must never start a session or emit events. Not bound to
+    // a live channel (no guildId/channelId semantics beyond placeholders): nothing is
+    // persisted or tracked. Used by the Discord layer's resume flow before any channel is
+    // created for the resumed session.
+    buildListContext(mode, cwd) {
+        const modeConfig = this.configResolver.resolveModeConfig('', '');
+        return {
+            guildId: '',
+            channelId: '',
+            cwd,
+            ownerId: '',
+            ...(modeConfig.model !== undefined ? { model: modeConfig.model } : {}),
+            permMode: 'default',
+            emit: () => { },
+            requestPermission: async () => ({ behavior: 'deny' }),
+            config: modeConfig,
+            logger: this.logger,
+            audit: () => { },
+        };
+    }
+    emit(guildId, channelId, ev) {
+        this.eventBus.emit(guildId, channelId, ev);
+    }
+    // Return the first TurnInput file whose realpath escapes the workspace root,
+    // or null if every file is confined. Resolves symlinks by realpath-ing the
+    // deepest existing ancestor of each path (a file need not exist yet), so a
+    // symlink pointing outside the workspace is caught, not just a literal `..`.
+    // NOTE: this is a pre-filter only and is subject to TOCTOU (a tail component
+    // could be swapped for a symlink after this check). The authoritative guard
+    // belongs at the mode's file-open site (Phase 2); do not treat this as the
+    // sole confinement enforcement.
+    findConfinementViolation(cwd, turn) {
+        if (!turn.files || turn.files.length === 0)
+            return null;
+        const root = realpathOrResolve(cwd);
+        for (const file of turn.files) {
+            const resolved = realpathOrResolve(path.resolve(cwd, file.path));
+            if (!isWithin(root, resolved))
+                return file.path;
+        }
+        return null;
+    }
+}
+// Realpath a path, falling back to the realpath of its deepest existing ancestor
+// joined with the non-existent tail — so confinement holds for paths that do not
+// exist yet while still resolving symlinks in the part that does.
+function realpathOrResolve(target) {
+    const abs = path.resolve(target);
+    let existing = abs;
+    const tail = [];
+    while (!fs.existsSync(existing)) {
+        const parent = path.dirname(existing);
+        if (parent === existing)
+            break; // reached the filesystem root
+        tail.unshift(path.basename(existing));
+        existing = parent;
+    }
+    try {
+        const realExisting = fs.realpathSync(existing);
+        return tail.length > 0 ? path.join(realExisting, ...tail) : realExisting;
+    }
+    catch {
+        return abs;
+    }
+}
+// True when `child` is the same as, or nested under, `root`. Uses path.relative
+// so it is not fooled by shared string prefixes (e.g. /ws vs /ws-evil).
+function isWithin(root, child) {
+    const rel = path.relative(root, child);
+    return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
+}
+//# sourceMappingURL=sessionOrchestrator.js.map

package/dist/core/sessionOrchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionOrchestrator.js","sourceRoot":"","sources":["../../src/core/sessionOrchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAoClC,wEAAwE;AACxE,wEAAwE;AACxE,MAAM,aAAa,GAAsB,KAAK,IAAI,EAAE,CAAC,CAAC;IACpD,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,2DAA2D;CACrE,CAAC,CAAC;AAmDH,SAAS,UAAU,CAAC,OAAe,EAAE,SAAiB;IACpD,OAAO,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,OAAO,mBAAmB;IACb,eAAe,CAAkB;IACjC,YAAY,CAAe;IAC3B,QAAQ,CAAW;IACnB,cAAc,CAAiB;IAC/B,kBAAkB,CAAqB;IACvC,QAAQ,CAAW;IACnB,MAAM,CAAS;IACf,iBAAiB,CAAoB;IAEtD,wEAAwE;IACxE,6EAA6E;IAC7E,yBAAyB;IACR,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE3D,YAAY,IAA6B;QACvC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,aAAa,CAAC;IACnE,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,KAAK,CAAC,KAAK,CAAC,MAAmB;QAC7B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE;YAC/D,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC;YAC5B,OAAO;YACP,SAAS;YACT,GAAG;YACH,OAAO;YACP,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE3C,4EAA4E;QAC5E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YACvB,OAAO;YACP,SAAS;YACT,IAAI,EAAE,IAA0B;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG;YACH,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;YAC9C,OAAO;YACP,SAAS;YACT,IAAI;YACJ,GAAG;YACH,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO;YACP,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,SAAS;YACnB,OAAO;YACP,SAAS;YACT,MAAM,EAAE,OAAO;YACf,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG;YACH,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kFAAkF;IAClF,oFAAoF;IACpF,gFAAgF;IAChF,oFAAoF;IACpF,8EAA8E;IAC9E,qEAAqE;IACrE,KAAK,CAAC,MAAM,CAAC,MAAmB,EAAE,SAAiB;QACjD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE;YAC/D,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC;YAC5B,OAAO;YACP,SAAS;YACT,GAAG;YACH,OAAO;YACP,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YACvB,OAAO;YACP,SAAS;YACT,IAAI,EAAE,IAA0B;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;YACzC,GAAG;YACH,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;YAC9C,OAAO;YACP,SAAS;YACT,IAAI;YACJ,GAAG;YACH,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO;YACP,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,SAAS;YACnB,OAAO;YACP,SAAS;YACT,MAAM,EAAE,QAAQ;YAChB,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG;YACH,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,qCAAqC;IACrC,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,SAAiB,EAAE,IAAe;QAC5D,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,2BAA2B,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE;gBAC5B,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,qDAAqD,SAAS,EAAE;gBACzE,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACnB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,SAAS;gBACnB,OAAO;gBACP,SAAS;gBACT,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,8BAA8B,SAAS,EAAE;gBAClD,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;QACjC,wEAAwE;QACxE,kEAAkE;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,0EAA0E;YAC1E,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACtC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;SACjC,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,SAAiB;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEtD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,SAAS;YACnB,OAAO;YACP,SAAS;YACT,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,sDAAsD;IACtD,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,yEAAyE;IACzE,KAAK,CAAC,SAAS;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;YAChF,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC9C,yEAAyE;gBACzE,uEAAuE;gBACvE,iEAAiE;gBACjE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACjE,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC;oBAC5B,OAAO;oBACP,SAAS;oBACT,GAAG;oBACH,OAAO;oBACP,IAAI;oBACJ,QAAQ;oBACR,YAAY,EAAE,IAAI,CAAC,YAAY;iBAChC,CAAC,CAAC;gBACH,kEAAkE;gBAClE,oEAAoE;gBACpE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAChF,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;oBAC9C,OAAO;oBACP,SAAS;oBACT,IAAI;oBACJ,GAAG;oBACH,OAAO;oBACP,QAAQ;oBACR,OAAO;oBACP,KAAK,EAAE,EAAE;oBACT,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACnB,OAAO,EAAE,OAAO;oBAChB,QAAQ,EAAE,SAAS;oBACnB,OAAO;oBACP,SAAS;oBACT,MAAM,EAAE,QAAQ;oBAChB,IAAI;oBACJ,QAAQ;oBACR,GAAG;oBACH,MAAM,EAAE,IAAI;iBACb,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,yEAAyE;gBACzE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;oBACnD,OAAO;oBACP,SAAS;oBACT,IAAI;oBACJ,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,4EAA4E;IAC5E,wCAAwC;IAChC,KAAK,CAAC,KAAK,CAAC,GAAW;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO;QACxC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAe,CAAC;gBAChD,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;wBACnB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,MAAM,EAAE,IAAI;qBACb,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE;wBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;qBACjB,CAAC,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE;wBAC5C,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,gBAAgB,MAAM,CAAC,GAAG,CAAC,EAAE;wBACtC,SAAS,EAAE,IAAI;qBAChB,CAAC,CAAC;oBACH,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;wBACnB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;wBACpB,MAAM,EAAE,OAAO;qBAChB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IACrE,YAAY,CAAC,IASpB;QACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAClF,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7E,UAAU,CAAC,YAAY,GAAG,YAAY,CAAC;QACvC,UAAU,CAAC,oBAAoB,GAAG,YAAY,CAAC;QAC/C,OAAO;YACL,OAAO;YACP,SAAS;YACT,GAAG;YACH,OAAO;YACP,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,QAAQ;YACR,IAAI,EAAE,CAAC,EAAc,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;YAC3D,iBAAiB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC;YACxF,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,CAAC,KAAiB,EAAE,EAAE;gBAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;SACF,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,mFAAmF;IACnF,qFAAqF;IACrF,sFAAsF;IACtF,kFAAkF;IAClF,sFAAsF;IACtF,mCAAmC;IACnC,gBAAgB,CAAC,IAAY,EAAE,GAAW;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,EAAE;YACb,GAAG;YACH,OAAO,EAAE,EAAE;YACX,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;YACd,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAe,EAAE,CAAC;YAC9D,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;SAChB,CAAC;IACJ,CAAC;IAEO,IAAI,CAAC,OAAe,EAAE,SAAiB,EAAE,EAAc;QAC7D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,gCAAgC;IACxB,wBAAwB,CAAC,GAAW,EAAE,IAAe;QAC3D,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,iFAAiF;AACjF,iFAAiF;AACjF,kEAAkE;AAClE,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,QAAQ;YAAE,MAAM,CAAC,8BAA8B;QAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,QAAQ,GAAG,MAAM,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,wEAAwE;AACxE,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC"}