maestro-flow 0.1.3 → 0.2.0

package/dist/services/auth.service.d.ts

@@ -0,0 +1,24 @@
+export declare class ConflictError extends Error {
+    constructor(message: string);
+}
+interface RegisterInput {
+    email: string;
+    password: string;
+    displayName: string;
+}
+interface RegisterResult {
+    user: {
+        id: string;
+        email: string;
+        displayName: string;
+    };
+    organization: {
+        id: string;
+        name: string;
+        slug: string;
+        role: 'owner';
+    };
+}
+export declare function registerUser(db: any, input: RegisterInput): Promise<RegisterResult>;
+export {};
+//# sourceMappingURL=auth.service.d.ts.map

package/dist/services/auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAKA,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,cAAc;IACtB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,YAAY,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,OAAO,CAAC;KACf,CAAC;CACH;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,GAAG,EACP,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,cAAc,CAAC,CAgEzB"}

package/dist/services/auth.service.js

@@ -0,0 +1,70 @@
+import { eq } from 'drizzle-orm';
+import { users } from '../db/schema/core/users.js';
+import { organizations, organizationMembers } from '../db/schema/core/organizations.js';
+import { hashPassword } from './password.service.js';
+export class ConflictError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ConflictError';
+    }
+}
+export async function registerUser(db, input) {
+    // Check email uniqueness
+    const existing = await db
+        .select({ id: users.id })
+        .from(users)
+        .where(eq(users.email, input.email))
+        .limit(1);
+    if (existing.length > 0) {
+        throw new ConflictError('Email already registered');
+    }
+    // Hash password
+    const hashedPassword = await hashPassword(input.password);
+    // Create user
+    const [newUser] = await db
+        .insert(users)
+        .values({
+        email: input.email,
+        passwordHash: hashedPassword,
+        displayName: input.displayName,
+    })
+        .returning({
+        id: users.id,
+        email: users.email,
+        displayName: users.displayName,
+    });
+    // Create default organization
+    const slug = 'org-' + newUser.id.slice(0, 8);
+    const [org] = await db
+        .insert(organizations)
+        .values({
+        name: 'My Organization',
+        slug,
+        ownerId: newUser.id,
+    })
+        .returning({
+        id: organizations.id,
+        name: organizations.name,
+        slug: organizations.slug,
+    });
+    // Add user as owner
+    await db.insert(organizationMembers).values({
+        orgId: org.id,
+        userId: newUser.id,
+        role: 'owner',
+    });
+    return {
+        user: {
+            id: newUser.id,
+            email: newUser.email,
+            displayName: newUser.displayName,
+        },
+        organization: {
+            id: org.id,
+            name: org.name,
+            slug: org.slug,
+            role: 'owner',
+        },
+    };
+}
+//# sourceMappingURL=auth.service.js.map

package/dist/services/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAsBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAO,EACP,KAAoB;IAEpB,yBAAyB;IACzB,MAAM,QAAQ,GAAG,MAAM,EAAE;SACtB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;SACxB,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;SACnC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,CAAC;IACtD,CAAC;IAED,gBAAgB;IAChB,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE1D,cAAc;IACd,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC,KAAK,CAAC;SACb,MAAM,CAAC;QACN,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,cAAc;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;SACD,SAAS,CAAC;QACT,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IAEL,8BAA8B;IAC9B,MAAM,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC;QACN,IAAI,EAAE,iBAAiB;QACvB,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,EAAE;KACpB,CAAC;SACD,SAAS,CAAC;QACT,EAAE,EAAE,aAAa,CAAC,EAAE;QACpB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,IAAI,EAAE,aAAa,CAAC,IAAI;KACzB,CAAC,CAAC;IAEL,oBAAoB;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC;QAC1C,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,MAAM,EAAE,OAAO,CAAC,EAAE;QAClB,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE;YACJ,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC;QACD,YAAY,EAAE;YACZ,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,OAAgB;SACvB;KACF,CAAC;AACJ,CAAC"}

package/dist/services/password.service.d.ts

@@ -0,0 +1,3 @@
+export declare function hashPassword(plain: string): Promise<string>;
+export declare function verifyPassword(plain: string, hashed: string): Promise<boolean>;
+//# sourceMappingURL=password.service.d.ts.map

package/dist/services/password.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.service.d.ts","sourceRoot":"","sources":["../../src/services/password.service.ts"],"names":[],"mappings":"AAEA,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOjE;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMpF"}

package/dist/services/password.service.js

@@ -0,0 +1,18 @@
+import { hash, verify } from 'argon2';
+export async function hashPassword(plain) {
+    return hash(plain, {
+        type: 2, // argon2id
+        memoryCost: 65536,
+        timeCost: 3,
+        parallelism: 4,
+    });
+}
+export async function verifyPassword(plain, hashed) {
+    try {
+        return await verify(hashed, plain);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=password.service.js.map

package/dist/services/password.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.service.js","sourceRoot":"","sources":["../../src/services/password.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,OAAO,IAAI,CAAC,KAAK,EAAE;QACjB,IAAI,EAAE,CAAC,EAAE,WAAW;QACpB,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,CAAC;KACf,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,MAAc;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/services/rbac.service.d.ts

@@ -0,0 +1,7 @@
+export type Role = 'owner' | 'admin' | 'member' | 'guest';
+export type Permission = `${string}:${string}`;
+export declare function checkPermission(role: Role, resource: string, action: string): boolean;
+export declare function checkPermissions(role: Role, required: Permission[]): boolean;
+export declare function getRolePermissions(role: Role): Permission[];
+export declare function hasAnyPermission(role: Role, resource: string): boolean;
+//# sourceMappingURL=rbac.service.d.ts.map

package/dist/services/rbac.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.service.d.ts","sourceRoot":"","sources":["../../src/services/rbac.service.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC1D,MAAM,MAAM,UAAU,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;AAE/C,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAcrF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAO5E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,EAAE,CAE3D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAKtE"}

package/dist/services/rbac.service.js

@@ -0,0 +1,36 @@
+import { PERMISSION_MATRIX } from '../db/schema/core/permissions.js';
+export function checkPermission(role, resource, action) {
+    const permissions = PERMISSION_MATRIX[role];
+    if (!permissions)
+        return false;
+    // Global wildcard
+    if (permissions.includes('*'))
+        return true;
+    // Exact match
+    if (permissions.includes(`${resource}:${action}`))
+        return true;
+    // Resource wildcard
+    if (permissions.includes(`${resource}:*`))
+        return true;
+    return false;
+}
+export function checkPermissions(role, required) {
+    return required.every((p) => {
+        const parts = p.split(':');
+        const resource = parts[0];
+        const action = parts.slice(1).join(':');
+        return checkPermission(role, resource, action);
+    });
+}
+export function getRolePermissions(role) {
+    return (PERMISSION_MATRIX[role] || []);
+}
+export function hasAnyPermission(role, resource) {
+    const permissions = PERMISSION_MATRIX[role];
+    if (!permissions)
+        return false;
+    if (permissions.includes('*'))
+        return true;
+    return permissions.some((p) => p.startsWith(`${resource}:`));
+}
+//# sourceMappingURL=rbac.service.js.map

package/dist/services/rbac.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.service.js","sourceRoot":"","sources":["../../src/services/rbac.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAKrE,MAAM,UAAU,eAAe,CAAC,IAAU,EAAE,QAAgB,EAAE,MAAc;IAC1E,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,kBAAkB;IAClB,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,cAAc;IACd,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/D,oBAAoB;IACpB,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAU,EAAE,QAAsB;IACjE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAU;IAC3C,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAiB,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAU,EAAE,QAAgB;IAC3D,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/services/token.service.d.ts

@@ -0,0 +1,18 @@
+export interface TokenPayload {
+    sub: string;
+    email: string;
+    iat: number;
+    exp: number;
+}
+export interface TokenPair {
+    accessToken: string;
+    refreshToken: string;
+}
+export declare function generateAccessToken(userId: string, email: string): Promise<string>;
+export declare function generateRefreshToken(userId: string, db: any): Promise<string>;
+export declare function generateTokenPair(userId: string, email: string, db: any): Promise<TokenPair>;
+export declare function verifyAccessToken(token: string): Promise<TokenPayload | null>;
+export declare function rotateRefreshToken(oldToken: string, db: any): Promise<TokenPair | null>;
+export declare function revokeRefreshToken(tokenHash: string, db: any): Promise<void>;
+export declare function revokeAllUserTokens(userId: string, db: any): Promise<void>;
+//# sourceMappingURL=token.service.d.ts.map

package/dist/services/token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.service.d.ts","sourceRoot":"","sources":["../../src/services/token.service.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAUD,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAWxF;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,GAAG,GACN,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,GAAG,GACN,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAOnF;AAED,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,GAAG,GACN,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAwC3B;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAElF;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhF"}

package/dist/services/token.service.js

@@ -0,0 +1,86 @@
+import { sign, verify } from 'hono/jwt';
+import { createHash, randomUUID } from 'crypto';
+import { eq } from 'drizzle-orm';
+import { refreshTokens } from '../db/schema/core/refresh-tokens.js';
+function getJwtSecret() {
+    const secret = process.env.JWT_SECRET;
+    if (!secret) {
+        throw new Error('JWT_SECRET environment variable is required');
+    }
+    return secret;
+}
+export async function generateAccessToken(userId, email) {
+    const now = Math.floor(Date.now() / 1000);
+    return sign({
+        sub: userId,
+        email,
+        iat: now,
+        exp: now + 15 * 60, // 15 minutes
+    }, getJwtSecret());
+}
+export async function generateRefreshToken(userId, db) {
+    const token = randomUUID();
+    const tokenHash = createHash('sha256').update(token).digest('hex');
+    await db.insert(refreshTokens).values({
+        userId,
+        tokenHash,
+        expiresAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000), // 7 days
+    });
+    return token;
+}
+export async function generateTokenPair(userId, email, db) {
+    const accessToken = await generateAccessToken(userId, email);
+    const refreshToken = await generateRefreshToken(userId, db);
+    return { accessToken, refreshToken };
+}
+export async function verifyAccessToken(token) {
+    try {
+        const payload = await verify(token, getJwtSecret(), 'HS256');
+        return payload;
+    }
+    catch {
+        return null;
+    }
+}
+export async function rotateRefreshToken(oldToken, db) {
+    const tokenHash = createHash('sha256').update(oldToken).digest('hex');
+    // Find the stored token
+    const stored = await db.query.refreshTokens.findFirst({
+        where: eq(refreshTokens.tokenHash, tokenHash),
+    });
+    if (!stored)
+        return null;
+    // Check if token is expired
+    if (new Date() > stored.expiresAt)
+        return null;
+    // If already rotated, possible token theft — revoke all user tokens
+    if (stored.rotatedAt !== null) {
+        await db
+            .delete(refreshTokens)
+            .where(eq(refreshTokens.userId, stored.userId));
+        return null;
+    }
+    // Mark old token as rotated
+    await db
+        .update(refreshTokens)
+        .set({ rotatedAt: new Date() })
+        .where(eq(refreshTokens.id, stored.id));
+    // Generate new token pair
+    const accessToken = await generateAccessToken(stored.userId, '');
+    const newRefreshToken = randomUUID();
+    const newTokenHash = createHash('sha256').update(newRefreshToken).digest('hex');
+    await db.insert(refreshTokens).values({
+        userId: stored.userId,
+        tokenHash: newTokenHash,
+        expiresAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000),
+        rotatedFrom: stored.id,
+    });
+    return { accessToken, refreshToken: newRefreshToken };
+}
+export async function revokeRefreshToken(tokenHash, db) {
+    await db.delete(refreshTokens).where(eq(refreshTokens.tokenHash, tokenHash));
+}
+export async function revokeAllUserTokens(userId, db) {
+    await db.delete(refreshTokens).where(eq(refreshTokens.userId, userId));
+}
+//# sourceMappingURL=token.service.js.map

package/dist/services/token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.service.js","sourceRoot":"","sources":["../../src/services/token.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAcpE,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,KAAa;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,CACT;QACE,GAAG,EAAE,MAAM;QACX,KAAK;QACL,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,aAAa;KAClC,EACD,YAAY,EAAE,CACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,EAAO;IAEP,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnE,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;QACpC,MAAM;QACN,SAAS;QACT,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,SAAS;KACrE,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,KAAa,EACb,EAAO;IAEP,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7D,OAAO,OAAkC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,EAAO;IAEP,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtE,wBAAwB;IACxB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC;QACpD,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC;KAC9C,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,4BAA4B;IAC5B,IAAI,IAAI,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE/C,oEAAoE;IACpE,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,EAAE;aACL,MAAM,CAAC,aAAa,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4BAA4B;IAC5B,MAAM,EAAE;SACL,MAAM,CAAC,aAAa,CAAC;SACrB,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;SAC9B,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE1C,0BAA0B;IAC1B,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,UAAU,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEhF,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACzD,WAAW,EAAE,MAAM,CAAC,EAAE;KACvB,CAAC,CAAC;IAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,EAAO;IACjE,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,EAAO;IAC/D,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC"}

package/dist/shared/agent-types.d.ts

@@ -0,0 +1,146 @@
+/** Supported agent CLI types */
+export type AgentType = 'claude-code' | 'codex' | 'codex-server' | 'gemini' | 'gemini-a2a' | 'qwen' | 'opencode' | 'agent-sdk';
+/** Agent process lifecycle status */
+export type AgentProcessStatus = 'spawning' | 'running' | 'paused' | 'stopping' | 'stopped' | 'error';
+/** Configuration for spawning an agent process */
+export interface AgentConfig {
+    type: AgentType;
+    prompt: string;
+    workDir: string;
+    env?: Record<string, string>;
+    model?: string;
+    approvalMode?: 'suggest' | 'auto';
+    baseUrl?: string;
+    apiKey?: string;
+    settingsFile?: string;
+    /** Path to .env file for loading environment variables before spawn */
+    envFile?: string;
+    /** When true, spawn in interactive mode (stdin kept open for follow-up messages) */
+    interactive?: boolean;
+}
+/** Runtime state of a spawned agent process */
+export interface AgentProcess {
+    id: string;
+    type: AgentType;
+    status: AgentProcessStatus;
+    config: AgentConfig;
+    startedAt: string;
+    pid?: number;
+    /** Whether the agent supports interactive follow-up messages */
+    interactive?: boolean;
+}
+/** Base fields shared by all normalized entries */
+export interface NormalizedEntryBase {
+    id: string;
+    processId: string;
+    timestamp: string;
+}
+/** All possible entry type discriminators */
+export type EntryType = 'user_message' | 'assistant_message' | 'thinking' | 'tool_use' | 'file_change' | 'command_exec' | 'approval_request' | 'approval_response' | 'error' | 'status_change' | 'token_usage';
+export interface UserMessageEntry extends NormalizedEntryBase {
+    type: 'user_message';
+    content: string;
+}
+export interface AssistantMessageEntry extends NormalizedEntryBase {
+    type: 'assistant_message';
+    content: string;
+    partial: boolean;
+}
+export interface ThinkingEntry extends NormalizedEntryBase {
+    type: 'thinking';
+    content: string;
+}
+export interface ToolUseEntry extends NormalizedEntryBase {
+    type: 'tool_use';
+    name: string;
+    input: Record<string, unknown>;
+    status: 'pending' | 'running' | 'completed' | 'failed';
+    result?: string;
+}
+export interface FileChangeEntry extends NormalizedEntryBase {
+    type: 'file_change';
+    path: string;
+    action: 'create' | 'modify' | 'delete';
+    diff?: string;
+}
+export interface CommandExecEntry extends NormalizedEntryBase {
+    type: 'command_exec';
+    command: string;
+    exitCode?: number;
+    output?: string;
+}
+export interface ApprovalRequestEntry extends NormalizedEntryBase {
+    type: 'approval_request';
+    toolName: string;
+    toolInput: Record<string, unknown>;
+    requestId: string;
+}
+export interface ApprovalResponseEntry extends NormalizedEntryBase {
+    type: 'approval_response';
+    requestId: string;
+    allowed: boolean;
+}
+export interface ErrorEntry extends NormalizedEntryBase {
+    type: 'error';
+    message: string;
+    code?: string;
+}
+export interface StatusChangeEntry extends NormalizedEntryBase {
+    type: 'status_change';
+    status: AgentProcessStatus;
+    reason?: string;
+}
+export interface TokenUsageEntry extends NormalizedEntryBase {
+    type: 'token_usage';
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens?: number;
+    cacheWriteTokens?: number;
+}
+/** Discriminated union of all 11 normalized entry types */
+export type NormalizedEntry = UserMessageEntry | AssistantMessageEntry | ThinkingEntry | ToolUseEntry | FileChangeEntry | CommandExecEntry | ApprovalRequestEntry | ApprovalResponseEntry | ErrorEntry | StatusChangeEntry | TokenUsageEntry;
+/** Thought data from agent reasoning */
+export interface ThoughtData {
+    subject: string;
+    description: string;
+}
+/** Payload for agent:thought events */
+export interface AgentThoughtPayload {
+    processId: string;
+    thought: ThoughtData;
+}
+/** Payload for agent:streaming events */
+export interface AgentStreamingPayload {
+    processId: string;
+    streaming: boolean;
+}
+/** Payload for agent:status events */
+export interface AgentStatusPayload {
+    processId: string;
+    status: AgentProcessStatus;
+    reason?: string;
+}
+/** Payload for agent:stopped events */
+export interface AgentStoppedPayload {
+    processId: string;
+    reason?: string;
+}
+/** Payload for agent:turnCompleted events (codex-server multi-turn) */
+export interface AgentTurnCompletedPayload {
+    processId: string;
+}
+/** Server-side approval request (sent to client for user decision) */
+export interface ApprovalRequest {
+    id: string;
+    processId: string;
+    toolName: string;
+    toolInput: Record<string, unknown>;
+    timestamp: string;
+}
+/** Client-side approval decision (sent back to server) */
+export interface ApprovalDecision {
+    id: string;
+    allow: boolean;
+    processId: string;
+}
+//# sourceMappingURL=agent-types.d.ts.map

package/dist/shared/agent-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-types.d.ts","sourceRoot":"","sources":["../../shared/agent-types.ts"],"names":[],"mappings":"AAOA,gCAAgC;AAChC,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,OAAO,GAAG,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;AAE/H,qCAAqC;AACrC,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,SAAS,GACT,QAAQ,GACR,UAAU,GACV,SAAS,GACT,OAAO,CAAC;AAMZ,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAMD,mDAAmD;AACnD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,6CAA6C;AAC7C,MAAM,MAAM,SAAS,GACjB,cAAc,GACd,mBAAmB,GACnB,UAAU,GACV,UAAU,GACV,aAAa,GACb,cAAc,GACd,kBAAkB,GAClB,mBAAmB,GACnB,OAAO,GACP,eAAe,GACf,aAAa,CAAC;AAIlB,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IAChE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAc,SAAQ,mBAAmB;IACxD,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAa,SAAQ,mBAAmB;IACvD,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAgB,SAAQ,mBAAmB;IAC1D,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,IAAI,EAAE,kBAAkB,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IAChE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,UAAW,SAAQ,mBAAmB;IACrD,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAgB,SAAQ,mBAAmB;IAC1D,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,qBAAqB,GACrB,aAAa,GACb,YAAY,GACZ,eAAe,GACf,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,UAAU,GACV,iBAAiB,GACjB,eAAe,CAAC;AAMpB,wCAAwC;AACxC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,sCAAsC;AACtC,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uCAAuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,uEAAuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/shared/agent-types.js

@@ -0,0 +1,8 @@
+// ---------------------------------------------------------------------------
+// Agent type system — protocol abstraction for CLI agent processes
+//
+// CANONICAL source of truth for all agent types. Both the maestro CLI (src/)
+// and dashboard (dashboard/src/) import from this file.
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=agent-types.js.map

package/dist/shared/agent-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-types.js","sourceRoot":"","sources":["../../shared/agent-types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mEAAmE;AACnE,EAAE;AACF,6EAA6E;AAC7E,wDAAwD;AACxD,8EAA8E"}

package/dist/src/agents/cli-agent-runner.d.ts

@@ -0,0 +1,58 @@
+import { type DelegateBrokerApi } from '../async/index.js';
+import type { AgentType, AgentConfig, AgentProcess, NormalizedEntry } from '../../shared/agent-types.js';
+/** Minimal adapter interface matching BaseAgentAdapter's public surface */
+interface AdapterLike {
+    spawn(config: AgentConfig): Promise<AgentProcess>;
+    stop(processId: string): Promise<void>;
+    onEntry(processId: string, cb: (entry: NormalizedEntry) => void): () => void;
+    sendMessage?(processId: string, content: string): Promise<void>;
+    supportsInteractive?(): boolean;
+    endInput?(processId: string): void;
+}
+interface DashboardBridgeLike {
+    tryConnect(url: string, timeoutMs?: number): Promise<boolean>;
+    forwardSpawn(process: unknown): void;
+    forwardEntry(entry: unknown): void;
+    forwardStopped(processId: string): void;
+    close(): void;
+}
+export interface CliAgentRunnerDependencies {
+    brokerClient?: DelegateBrokerApi;
+    createAdapter?: (agentType: AgentType, backend?: 'direct' | 'terminal') => Promise<AdapterLike>;
+    createBridge?: () => DashboardBridgeLike;
+    spawnDetachedDelegate?: (options: CliRunOptions, execId: string, prompt: string) => boolean;
+    now?: () => string;
+    renderEntry?: (entry: NormalizedEntry) => void;
+}
+export interface CliRunOptions {
+    prompt: string;
+    tool: string;
+    mode: 'analysis' | 'write';
+    model?: string;
+    workDir: string;
+    rule?: string;
+    execId?: string;
+    resume?: string;
+    includeDirs?: string[];
+    sessionId?: string;
+    backend?: 'direct' | 'terminal';
+}
+export declare function generateCliExecId(tool: string): string;
+export declare class CliAgentRunner {
+    private readonly dependencies;
+    constructor(dependencies?: CliAgentRunnerDependencies);
+    /** Resolve dashboard WS URL from env → config → default port 3001 */
+    private static getDashboardWsUrl;
+    /**
+     * Send MCP channel notification (primary path).
+     * If maestro MCP server is running in this process, push a
+     * notifications/claude/channel message directly.
+     */
+    private static sendChannelNotification;
+    /**
+     * Run a CLI agent to completion and return its exit code (0 = success).
+     */
+    run(options: CliRunOptions): Promise<number>;
+}
+export {};
+//# sourceMappingURL=cli-agent-runner.d.ts.map

package/dist/src/agents/cli-agent-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-agent-runner.d.ts","sourceRoot":"","sources":["../../../src/agents/cli-agent-runner.ts"],"names":[],"mappings":"AAeA,OAAO,EAAwB,KAAK,iBAAiB,EAA2C,MAAM,mBAAmB,CAAC;AAM1H,OAAO,KAAK,EACV,SAAS,EAET,WAAW,EACX,YAAY,EACZ,eAAe,EAChB,MAAM,6BAA6B,CAAC;AAErC,2EAA2E;AAC3E,UAAU,WAAW;IACnB,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC7E,WAAW,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,mBAAmB,CAAC,IAAI,OAAO,CAAC;IAChC,QAAQ,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,UAAU,mBAAmB;IAC3B,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACrC,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IAChG,YAAY,CAAC,EAAE,MAAM,mBAAmB,CAAC;IACzC,qBAAqB,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5F,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;CAChD;AAMD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CACjC;AA4CD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQtD;AA2PD,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,GAAE,0BAA+B;IAE1E,qEAAqE;IACrE,OAAO,CAAC,MAAM,CAAC,iBAAiB;IAoBhC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAwCtC;;OAEG;IACG,GAAG,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;CAsYnD"}