lastlight 0.16.0 → 0.16.1

package/dist/engine/github/git-auth.d.ts

@@ -1,62 +0,0 @@
-export type GitHubPermissionLevel = "read" | "write";
-/**
- * Subset of GitHub App installation-token permissions supported by Last Light.
- * Any omitted permission inherits the app's installation defaults.
- */
-export type GitHubTokenPermissions = Partial<{
-    contents: GitHubPermissionLevel;
-    issues: GitHubPermissionLevel;
-    pull_requests: GitHubPermissionLevel;
-    metadata: GitHubPermissionLevel;
-}>;
-/**
- * Mint a GitHub App installation token; OPTIONALLY also write the bot
- * identity + credential helper to the user's global git config.
- *
- * The default is to leave `~/.gitconfig` alone — every agent run happens
- * inside a Docker sandbox where `sandbox-entrypoint.sh` configures git at
- * the container's `--system` scope using the `GIT_TOKEN` env var the
- * harness forwards. The harness process itself does not need git
- * credentials for normal operation.
- *
- * Set `LASTLIGHT_WRITE_GLOBAL_GIT=1` only if you have a non-sandboxed
- * code path that needs the harness user to be able to push as the bot.
- */
-export declare function configureGitAuth(config: {
-    appId: string;
-    privateKeyPath: string;
-    installationId: string;
-    /** Resolved bot login incl. the `[bot]` suffix (e.g. `last-light[bot]`). */
-    botLogin?: string;
-    /**
-     * Optional repository-name allowlist for the minted installation token.
-     * Names are repo names within the installation owner (e.g. ["lastlight"]).
-     */
-    repositories?: string[];
-    /** Optional per-token permission downscoping. */
-    permissions?: GitHubTokenPermissions;
-}): Promise<{
-    token: string;
-    expiresAt: string;
-}>;
-/**
- * Mint a fresh installation token. Same opt-in rule as configureGitAuth:
- * `LASTLIGHT_WRITE_GLOBAL_GIT=1` is required before this rotates the
- * credential helper in the user's `~/.gitconfig`. Otherwise the token is
- * just returned (executor.ts forwards it to the sandbox via env).
- */
-export declare function refreshGitAuth(config: {
-    appId: string;
-    privateKeyPath: string;
-    installationId: string;
-    /**
-     * Optional repository-name allowlist for the minted installation token.
-     * Names are repo names within the installation owner (e.g. ["lastlight"]).
-     */
-    repositories?: string[];
-    /** Optional per-token permission downscoping. */
-    permissions?: GitHubTokenPermissions;
-}): Promise<{
-    token: string;
-    expiresAt: string;
-}>;

package/dist/engine/github/git-auth.js

@@ -1,161 +0,0 @@
-import { execFileSync } from "child_process";
-import { createSign } from "crypto";
-import { mkdirSync, readFileSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { dirname, join, resolve } from "path";
-/**
- * Whether to write the bot identity + credential helper to the user's
- * GLOBAL git config (`~/.gitconfig`). Defaults to **false** — the harness
- * still mints installation tokens and forwards them to sandboxes via the
- * `GIT_TOKEN` env var, where `sandbox-entrypoint.sh` configures git at the
- * container's `--system` scope. The host's `~/.gitconfig` is left
- * untouched.
- *
- * Set `LASTLIGHT_WRITE_GLOBAL_GIT=1` only when the harness itself runs git
- * commands against your real filesystem (e.g. a non-sandboxed direct
- * execution path). Production Docker doesn't need this — the entrypoint
- * sets `--system` config inside the container.
- *
- * `LASTLIGHT_LOCAL_DEV=1` is accepted as a compat alias for the inverse
- * (legacy meaning: "skip global writes") and silently ignored; that is
- * now the default. The flag is harmless if left in place but the
- * intentional opt-in is `LASTLIGHT_WRITE_GLOBAL_GIT=1`.
- */
-function shouldWriteGlobalGitConfig() {
-    return process.env.LASTLIGHT_WRITE_GLOBAL_GIT === "1";
-}
-/**
- * Conservative shape check on a GitHub installation token. The credentials
- * file we write contains a single URL of the form
- * `https://x-access-token:${token}@github.com` — any `@`, `:`, `/`, or
- * newline in the token would break URL parsing or inject extra entries.
- * Real GitHub tokens are alphanumeric (plus `_`); this assertion catches
- * any future format change before we write a malformed credentials file.
- */
-function assertSafeToken(token) {
-    if (!/^[A-Za-z0-9_-]+$/.test(token)) {
-        throw new Error("Refusing to embed a token containing characters outside [A-Za-z0-9_-] into git credentials file");
-    }
-}
-/**
- * Resolve the path of the shared credentials file used by `credential.helper
- * store`. Honors `LASTLIGHT_GIT_CREDENTIALS` so the sandbox entrypoint and
- * the MCP server can agree on a path; falls back to `~/.config/lastlight/
- * git-credentials` for the opt-in host write.
- *
- * Whitespace in the path would break git's helper-arg splitting (the
- * `store --file=<path>` value is shell-split on spaces, not exec'd), so
- * reject any whitespace defensively.
- */
-function credentialsFilePath() {
-    const fromEnv = process.env.LASTLIGHT_GIT_CREDENTIALS?.trim();
-    const path = fromEnv || join(homedir(), ".config", "lastlight", "git-credentials");
-    if (/\s/.test(path)) {
-        throw new Error(`LASTLIGHT_GIT_CREDENTIALS contains whitespace; git's helper-arg parsing would break: ${path}`);
-    }
-    return path;
-}
-/**
- * Write the credentials file consumed by `credential.helper store`. One
- * line: `https://x-access-token:${token}@github.com`. File is mode 600,
- * parent dir mode 700. Returns the absolute path.
- */
-function writeCredentialsFile(token) {
-    assertSafeToken(token);
-    const credPath = credentialsFilePath();
-    mkdirSync(dirname(credPath), { recursive: true, mode: 0o700 });
-    writeFileSync(credPath, `https://x-access-token:${token}@github.com\n`, { mode: 0o600 });
-    return credPath;
-}
-/**
- * Mint a GitHub App installation token; OPTIONALLY also write the bot
- * identity + credential helper to the user's global git config.
- *
- * The default is to leave `~/.gitconfig` alone — every agent run happens
- * inside a Docker sandbox where `sandbox-entrypoint.sh` configures git at
- * the container's `--system` scope using the `GIT_TOKEN` env var the
- * harness forwards. The harness process itself does not need git
- * credentials for normal operation.
- *
- * Set `LASTLIGHT_WRITE_GLOBAL_GIT=1` only if you have a non-sandboxed
- * code path that needs the harness user to be able to push as the bot.
- */
-export async function configureGitAuth(config) {
-    const token = await getInstallationToken(config);
-    if (!shouldWriteGlobalGitConfig()) {
-        console.log(`[git-auth] Minted GitHub App token (expires: ${token.expiresAt}). ` +
-            `Global git config left untouched; sandboxes receive the token via GIT_TOKEN. ` +
-            `Set LASTLIGHT_WRITE_GLOBAL_GIT=1 to also write ~/.gitconfig.`);
-        return token;
-    }
-    // Opt-in path: write the token to a 600-mode credentials file and point
-    // git's built-in `store` helper at it. No shell interpolation anywhere
-    // along the way — git invokes `credential-store --file=<path>` as
-    // argv-array, not through a shell.
-    const credPath = writeCredentialsFile(token.token);
-    execGit(["config", "--global", "credential.helper", `store --file=${credPath}`]);
-    const botLogin = config.botLogin || "last-light[bot]";
-    execGit(["config", "--global", "user.name", botLogin]);
-    execGit(["config", "--global", "user.email", `${botLogin}@users.noreply.github.com`]);
-    console.log(`[git-auth] Configured GLOBAL git with GitHub App token (file: ${credPath}, expires: ${token.expiresAt})`);
-    return token;
-}
-/**
- * Mint a fresh installation token. Same opt-in rule as configureGitAuth:
- * `LASTLIGHT_WRITE_GLOBAL_GIT=1` is required before this rotates the
- * credential helper in the user's `~/.gitconfig`. Otherwise the token is
- * just returned (executor.ts forwards it to the sandbox via env).
- */
-export async function refreshGitAuth(config) {
-    const token = await getInstallationToken(config);
-    if (!shouldWriteGlobalGitConfig()) {
-        return token;
-    }
-    const credPath = writeCredentialsFile(token.token);
-    // The credential.helper config already points at this path from the
-    // initial configureGitAuth call, but set it again so refreshGitAuth is
-    // safe to call standalone (idempotent).
-    execGit(["config", "--global", "credential.helper", `store --file=${credPath}`]);
-    console.log(`[git-auth] Refreshed token in GLOBAL git config (file: ${credPath}, expires: ${token.expiresAt})`);
-    return token;
-}
-// ── Internal ────────────────────────────────────────────────────────
-async function getInstallationToken(config) {
-    const privateKey = readFileSync(resolve(config.privateKeyPath), "utf-8");
-    // Generate JWT (RS256, no external dependency)
-    const now = Math.floor(Date.now() / 1000);
-    const header = Buffer.from(JSON.stringify({ alg: "RS256", typ: "JWT" })).toString("base64url");
-    const payload = Buffer.from(JSON.stringify({ iat: now - 60, exp: now + 600, iss: config.appId })).toString("base64url");
-    const signer = createSign("RSA-SHA256");
-    signer.update(`${header}.${payload}`);
-    const signature = signer.sign(privateKey, "base64url");
-    const jwtToken = `${header}.${payload}.${signature}`;
-    // Exchange for installation token
-    const requestBody = {};
-    if (config.repositories && config.repositories.length > 0) {
-        requestBody.repositories = config.repositories;
-    }
-    if (config.permissions && Object.keys(config.permissions).length > 0) {
-        requestBody.permissions = config.permissions;
-    }
-    const hasRequestBody = Object.keys(requestBody).length > 0;
-    const res = await fetch(`https://api.github.com/app/installations/${config.installationId}/access_tokens`, {
-        method: "POST",
-        headers: {
-            Authorization: `Bearer ${jwtToken}`,
-            Accept: "application/vnd.github+json",
-            ...(hasRequestBody ? { "Content-Type": "application/json" } : {}),
-        },
-        body: hasRequestBody ? JSON.stringify(requestBody) : undefined,
-    });
-    if (!res.ok) {
-        const body = await res.text();
-        throw new Error(`GitHub App token request failed (${res.status}): ${body}`);
-    }
-    const data = await res.json();
-    return { token: data.token, expiresAt: data.expires_at };
-}
-function execGit(args) {
-    execFileSync("git", args, { stdio: "pipe" });
-}
-//# sourceMappingURL=git-auth.js.map

package/dist/engine/github/git-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-auth.js","sourceRoot":"","sources":["../../../src/engine/github/git-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAe9C;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,0BAA0B;IACjC,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,wFAAwF,IAAI,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,aAAa,CAAC,QAAQ,EAAE,0BAA0B,KAAK,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAatC;IACC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI,CAAC,0BAA0B,EAAE,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,gDAAgD,KAAK,CAAC,SAAS,KAAK;YAC9E,+EAA+E;YAC/E,8DAA8D,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,mCAAmC;IACnC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,mBAAmB,EAAE,gBAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACtD,OAAO,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,QAAQ,2BAA2B,CAAC,CAAC,CAAC;IAEtF,OAAO,CAAC,GAAG,CAAC,iEAAiE,QAAQ,cAAc,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IAEvH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAWpC;IACC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI,CAAC,0BAA0B,EAAE,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,oEAAoE;IACpE,uEAAuE;IACvE,wCAAwC;IACxC,OAAO,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,mBAAmB,EAAE,gBAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEjF,OAAO,CAAC,GAAG,CAAC,0DAA0D,QAAQ,cAAc,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AAEvE,KAAK,UAAU,oBAAoB,CAAC,MAMnC;IACC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;IAEzE,+CAA+C;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxH,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;IAErD,kCAAkC;IAClC,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,WAAW,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,WAAW,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAC/C,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAE3D,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,4CAA4C,MAAM,CAAC,cAAc,gBAAgB,EACjF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,QAAQ,EAAE;YACnC,MAAM,EAAE,6BAA6B;YACrC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE;QACD,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/D,CACF,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,OAAO,CAAC,IAAc;IAC7B,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/C,CAAC"}

package/dist/engine/github/github-app-client.d.ts

@@ -1,23 +0,0 @@
-import { Octokit } from "octokit";
-export interface GitHubAppClientConfig {
-    appId: string;
-    privateKeyPath: string;
-    installationId: string;
-    /**
-     * Override the GitHub REST base URL (Octokit `baseUrl`). Prod leaves this
-     * unset → `api.github.com`. The evals harness points it at its mock server so
-     * harness-side writes land there. Test/eval escape hatch only — mirrors
-     * `ExecutorConfig.githubApiBaseUrl`.
-     */
-    baseUrl?: string;
-}
-export declare function githubAppClient(config: GitHubAppClientConfig): Octokit;
-/**
- * Octokit authed with a raw bearer token (a pre-minted installation token) plus
- * an optional `baseUrl`. This is the auth shape the evals mock and the
- * harness-minted scoped token both use — no App JWT / installation-token
- * minting round-trip against the REST base URL. Used by the harness-side
- * `post-review` action so it works identically against api.github.com and the
- * eval mock.
- */
-export declare function githubTokenClient(token: string, baseUrl?: string): Octokit;

package/dist/engine/github/github-app-client.js

@@ -1,33 +0,0 @@
-import { createAppAuth } from "@octokit/auth-app";
-import { readFileSync } from "fs";
-import { Octokit } from "octokit";
-import { resolve } from "path";
-function normalizeBaseUrl(baseUrl) {
-    return baseUrl ? baseUrl.replace(/\/+$/, "") : undefined;
-}
-export function githubAppClient(config) {
-    const privateKey = readFileSync(resolve(config.privateKeyPath), "utf-8");
-    const baseUrl = normalizeBaseUrl(config.baseUrl);
-    return new Octokit({
-        authStrategy: createAppAuth,
-        auth: {
-            appId: config.appId,
-            privateKey,
-            installationId: config.installationId,
-        },
-        ...(baseUrl ? { baseUrl } : {}),
-    });
-}
-/**
- * Octokit authed with a raw bearer token (a pre-minted installation token) plus
- * an optional `baseUrl`. This is the auth shape the evals mock and the
- * harness-minted scoped token both use — no App JWT / installation-token
- * minting round-trip against the REST base URL. Used by the harness-side
- * `post-review` action so it works identically against api.github.com and the
- * eval mock.
- */
-export function githubTokenClient(token, baseUrl) {
-    const url = normalizeBaseUrl(baseUrl);
-    return new Octokit({ auth: token, ...(url ? { baseUrl: url } : {}) });
-}
-//# sourceMappingURL=github-app-client.js.map

package/dist/engine/github/github-app-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"github-app-client.js","sourceRoot":"","sources":["../../../src/engine/github/github-app-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAe/B,SAAS,gBAAgB,CAAC,OAA2B;IACnD,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA6B;IAC3D,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,IAAI,OAAO,CAAC;QACjB,YAAY,EAAE,aAAa;QAC3B,IAAI,EAAE;YACJ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU;YACV,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC;QACD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,OAAgB;IAC/D,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/engine/github/github-tools.d.ts

@@ -1,18 +0,0 @@
-import type { Tool, ToolCall } from "@earendil-works/pi-ai";
-import { type GitHubAppClientConfig } from "./github-app-client.js";
-/**
- * Auth for the read-only chat GitHub tools. Either a GitHub App config or a
- * raw Personal Access Token (the PAT fallback). Both resolve to an Octokit.
- */
-export type ChatGitHubAuth = GitHubAppClientConfig | {
-    token: string;
-    baseUrl?: string;
-};
-export interface ChatGitHubToolset {
-    tools: Tool[];
-    execute(call: ToolCall): Promise<{
-        content: string;
-        isError: boolean;
-    }>;
-}
-export declare function buildChatGitHubTools(auth: ChatGitHubAuth): ChatGitHubToolset;

package/dist/engine/github/github-tools.js

@@ -1,263 +0,0 @@
-/**
- * Read-only GitHub tools registered with pi-ai for the in-process Slack
- * chat path. Severely scoped: the chat agent can look up issues / PRs /
- * comments / repo files / commits / search, and nothing else. There are
- * no write operations on this surface — issue creation, labels, branches,
- * commits, merges all live in the workflow path under sandbox isolation.
- *
- * Returned value is a `{ tools, execute }` pair. `tools` plugs into
- * pi-ai's `Context.tools`; `execute(toolCall)` is what the chat-runner
- * loop calls when the model emits a tool_call.
- */
-import { Type } from "@sinclair/typebox";
-import { githubAppClient, githubTokenClient } from "./github-app-client.js";
-function tool(name, description, parameters, handler) {
-    return {
-        name,
-        description,
-        parameters,
-        handler: handler,
-    };
-}
-export function buildChatGitHubTools(auth) {
-    const octokit = "token" in auth
-        ? githubTokenClient(auth.token, auth.baseUrl)
-        : githubAppClient(auth);
-    const entries = [
-        tool("github_get_repository", "Get a repository's metadata (default branch, description, topics).", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-        }), async ({ owner, repo }) => {
-            const { data } = await octokit.rest.repos.get({ owner, repo });
-            return {
-                full_name: data.full_name,
-                default_branch: data.default_branch,
-                description: data.description,
-                topics: data.topics ?? [],
-                private: data.private,
-                open_issues_count: data.open_issues_count,
-            };
-        }),
-        tool("github_get_issue", "Get a single issue by number.", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-            issue_number: Type.Number(),
-        }), async ({ owner, repo, issue_number }) => {
-            const { data } = await octokit.rest.issues.get({ owner, repo, issue_number });
-            return {
-                number: data.number,
-                title: data.title,
-                state: data.state,
-                body: data.body,
-                labels: (data.labels || []).map((l) => (typeof l === "string" ? l : l.name)),
-                html_url: data.html_url,
-                author: data.user?.login,
-                created_at: data.created_at,
-                updated_at: data.updated_at,
-            };
-        }),
-        tool("github_list_issue_comments", "List comments on an issue or PR.", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-            issue_number: Type.Number(),
-            per_page: Type.Optional(Type.Number()),
-        }), async ({ owner, repo, issue_number, per_page }) => {
-            const { data } = await octokit.rest.issues.listComments({
-                owner,
-                repo,
-                issue_number,
-                per_page: per_page ?? 30,
-            });
-            return data.map((c) => ({
-                id: c.id,
-                author: c.user?.login,
-                body: c.body,
-                created_at: c.created_at,
-            }));
-        }),
-        tool("github_list_issues", "List issues on a repository.", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-            state: Type.Optional(Type.Union([Type.Literal("open"), Type.Literal("closed"), Type.Literal("all")])),
-            labels: Type.Optional(Type.String({ description: "Comma-separated label names." })),
-            per_page: Type.Optional(Type.Number()),
-        }), async ({ owner, repo, state, labels, per_page }) => {
-            const { data } = await octokit.rest.issues.listForRepo({
-                owner,
-                repo,
-                state: state ?? "open",
-                labels,
-                per_page: per_page ?? 30,
-            });
-            return data
-                .filter((i) => !i.pull_request)
-                .map((i) => ({
-                number: i.number,
-                title: i.title,
-                state: i.state,
-                labels: (i.labels || []).map((l) => (typeof l === "string" ? l : l.name)),
-                author: i.user?.login,
-                updated_at: i.updated_at,
-            }));
-        }),
-        tool("github_get_pull_request", "Get a single pull request by number.", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-            pull_number: Type.Number(),
-        }), async ({ owner, repo, pull_number }) => {
-            const { data } = await octokit.rest.pulls.get({ owner, repo, pull_number });
-            return {
-                number: data.number,
-                title: data.title,
-                state: data.state,
-                body: data.body,
-                head: data.head.ref,
-                base: data.base.ref,
-                mergeable: data.mergeable,
-                draft: data.draft,
-                html_url: data.html_url,
-                author: data.user?.login,
-            };
-        }),
-        tool("github_get_pull_request_diff", "Get the unified diff of a pull request.", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-            pull_number: Type.Number(),
-        }), async ({ owner, repo, pull_number }) => {
-            const { data } = await octokit.rest.pulls.get({
-                owner,
-                repo,
-                pull_number,
-                mediaType: { format: "diff" },
-            });
-            return { diff: data };
-        }),
-        tool("github_list_pull_requests", "List pull requests on a repository.", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-            state: Type.Optional(Type.Union([Type.Literal("open"), Type.Literal("closed"), Type.Literal("all")])),
-            per_page: Type.Optional(Type.Number()),
-        }), async ({ owner, repo, state, per_page }) => {
-            const { data } = await octokit.rest.pulls.list({
-                owner,
-                repo,
-                state: state ?? "open",
-                per_page: per_page ?? 30,
-            });
-            return data.map((p) => ({
-                number: p.number,
-                title: p.title,
-                state: p.state,
-                draft: p.draft,
-                head: p.head.ref,
-                base: p.base.ref,
-                author: p.user?.login,
-                updated_at: p.updated_at,
-            }));
-        }),
-        tool("github_get_file_contents", "Read a file from a repository at the given ref (default: default branch).", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-            path: Type.String(),
-            ref: Type.Optional(Type.String()),
-        }), async ({ owner, repo, path, ref }) => {
-            const { data } = await octokit.rest.repos.getContent({ owner, repo, path, ref });
-            if (Array.isArray(data)) {
-                return data.map((d) => ({ name: d.name, type: d.type, size: d.size, path: d.path }));
-            }
-            if ("content" in data && data.content) {
-                const text = Buffer.from(data.content, "base64").toString("utf-8");
-                return { path: data.path, size: data.size, encoding: "utf-8", content: text };
-            }
-            return data;
-        }),
-        tool("github_list_commits", "List commits on a repository (optionally limited to a branch or path).", Type.Object({
-            owner: Type.String(),
-            repo: Type.String(),
-            sha: Type.Optional(Type.String({ description: "Branch / commit SHA to start from." })),
-            path: Type.Optional(Type.String()),
-            per_page: Type.Optional(Type.Number()),
-        }), async ({ owner, repo, sha, path, per_page }) => {
-            const { data } = await octokit.rest.repos.listCommits({
-                owner,
-                repo,
-                sha,
-                path,
-                per_page: per_page ?? 20,
-            });
-            return data.map((c) => ({
-                sha: c.sha,
-                message: c.commit.message,
-                author: c.commit.author?.name,
-                date: c.commit.author?.date,
-                html_url: c.html_url,
-            }));
-        }),
-        tool("github_search_issues", "Search across issues and pull requests with GitHub's search syntax.", Type.Object({
-            q: Type.String({ description: "Search query, e.g. 'repo:owner/name is:open label:bug'." }),
-            per_page: Type.Optional(Type.Number()),
-        }), async ({ q, per_page }) => {
-            const { data } = await octokit.rest.search.issuesAndPullRequests({
-                q,
-                per_page: per_page ?? 20,
-            });
-            return {
-                total_count: data.total_count,
-                items: data.items.map((i) => ({
-                    number: i.number,
-                    title: i.title,
-                    state: i.state,
-                    html_url: i.html_url,
-                    repository_url: i.repository_url,
-                })),
-            };
-        }),
-        tool("github_search_code", "Search code using GitHub's code search.", Type.Object({
-            q: Type.String({ description: "Code search query, e.g. 'memorystore in:file repo:owner/name'." }),
-            per_page: Type.Optional(Type.Number()),
-        }), async ({ q, per_page }) => {
-            const { data } = await octokit.rest.search.code({ q, per_page: per_page ?? 20 });
-            return {
-                total_count: data.total_count,
-                items: data.items.map((i) => ({
-                    path: i.path,
-                    repository: i.repository.full_name,
-                    html_url: i.html_url,
-                })),
-            };
-        }),
-    ];
-    const byName = new Map(entries.map((e) => [e.name, e]));
-    const tools = entries.map((e) => ({
-        name: e.name,
-        description: e.description,
-        parameters: e.parameters,
-    }));
-    return {
-        tools,
-        async execute(call) {
-            const entry = byName.get(call.name);
-            if (!entry) {
-                return {
-                    content: JSON.stringify({ error: `unknown tool: ${call.name}` }),
-                    isError: true,
-                };
-            }
-            try {
-                const result = await entry.handler(call.arguments);
-                return { content: JSON.stringify(result, null, 2), isError: false };
-            }
-            catch (err) {
-                const e = err;
-                return {
-                    content: JSON.stringify({
-                        error: e.message ?? String(err),
-                        status: e.status,
-                    }),
-                    isError: true,
-                };
-            }
-        },
-    };
-}
-//# sourceMappingURL=github-tools.js.map

package/dist/engine/github/github-tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"github-tools.js","sourceRoot":"","sources":["../../../src/engine/github/github-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,IAAI,EAA6B,MAAM,mBAAmB,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAA8B,MAAM,wBAAwB,CAAC;AAsBxG,SAAS,IAAI,CACX,IAAY,EACZ,WAAmB,EACnB,UAAa,EACb,OAAgD;IAEhD,OAAO;QACL,IAAI;QACJ,WAAW;QACX,UAAU;QACV,OAAO,EAAE,OAAuC;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,MAAM,OAAO,GAAG,OAAO,IAAI,IAAI;QAC7B,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAE1B,MAAM,OAAO,GAAgB;QAC3B,IAAI,CACF,uBAAuB,EACvB,oEAAoE,EACpE,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;SACpB,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC;QACJ,CAAC,CACF;QAED,IAAI,CACF,kBAAkB,EAClB,+BAA+B,EAC/B,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE;SAC5B,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE;YACtC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9E,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACjF,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK;gBACxB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC;QACJ,CAAC,CACF;QAED,IAAI,CACF,4BAA4B,EAC5B,kCAAkC,EAClC,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SACvC,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBACtD,KAAK;gBACL,IAAI;gBACJ,YAAY;gBACZ,QAAQ,EAAE,QAAQ,IAAI,EAAE;aACzB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK;gBACrB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CAAC;QACN,CAAC,CACF;QAED,IAAI,CACF,oBAAoB,EACpB,8BAA8B,EAC9B,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAChF;YACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACnF,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SACvC,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;YACjD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBACrD,KAAK;gBACL,IAAI;gBACJ,KAAK,EAAE,KAAK,IAAI,MAAM;gBACtB,MAAM;gBACN,QAAQ,EAAE,QAAQ,IAAI,EAAE;aACzB,CAAC,CAAC;YACH,OAAO,IAAI;iBACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC9E,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK;gBACrB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CAAC;QACR,CAAC,CACF;QAED,IAAI,CACF,yBAAyB,EACzB,sCAAsC,EACtC,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;SAC3B,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YACrC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5E,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK;aACzB,CAAC;QACJ,CAAC,CACF;QAED,IAAI,CACF,8BAA8B,EAC9B,yCAAyC,EACzC,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE;SAC3B,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YACrC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBAC5C,KAAK;gBACL,IAAI;gBACJ,WAAW;gBACX,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC9B,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,IAAyB,EAAE,CAAC;QAC7C,CAAC,CACF;QAED,IAAI,CACF,2BAA2B,EAC3B,qCAAqC,EACrC,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAChF;YACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SACvC,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC7C,KAAK;gBACL,IAAI;gBACJ,KAAK,EAAE,KAAK,IAAI,MAAM;gBACtB,QAAQ,EAAE,QAAQ,IAAI,EAAE;aACzB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG;gBAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG;gBAChB,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK;gBACrB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CAAC;QACN,CAAC,CACF;QAED,IAAI,CACF,0BAA0B,EAC1B,2EAA2E,EAC3E,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SAClC,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;YACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACjF,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACnE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAChF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CACF;QAED,IAAI,CACF,qBAAqB,EACrB,wEAAwE,EACxE,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;YACnB,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtF,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SACvC,CAAC,EACF,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBACpD,KAAK;gBACL,IAAI;gBACJ,GAAG;gBACH,IAAI;gBACJ,QAAQ,EAAE,QAAQ,IAAI,EAAE;aACzB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;gBACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI;gBAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI;gBAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,CAAC;QACN,CAAC,CACF;QAED,IAAI,CACF,sBAAsB,EACtB,qEAAqE,EACrE,IAAI,CAAC,MAAM,CAAC;YACV,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;YAC1F,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SACvC,CAAC,EACF,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;gBAC/D,CAAC;gBACD,QAAQ,EAAE,QAAQ,IAAI,EAAE;aACzB,CAAC,CAAC;YACH,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,cAAc,EAAE,CAAC,CAAC,cAAc;iBACjC,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC,CACF;QAED,IAAI,CACF,oBAAoB,EACpB,yCAAyC,EACzC,IAAI,CAAC,MAAM,CAAC;YACV,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gEAAgE,EAAE,CAAC;YACjG,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;SACvC,CAAC,EACF,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;YACjF,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS;oBAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACrB,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC,CACF;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAExD,MAAM,KAAK,GAAW,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,KAAK;QACL,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAChE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACtE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAA4C,CAAC;gBACvD,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;wBACtB,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;wBAC/B,MAAM,EAAE,CAAC,CAAC,MAAM;qBACjB,CAAC;oBACF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}