managed-deepagents 0.0.3-dev.32 → 0.0.3-dev.34

package/dist/runtime/langsmith-connector.js

@@ -1,410 +0,0 @@
-/**
- * LangSmith connector — runtime enforcement engine.
- *
- * Mounted by the connector's `http(ctx)` hook on its namespaced sub-router.
- * Exposes one uniform endpoint per capability:
- *
- *   POST /connectors/langsmith/capabilities/{capability_id}
- *
- * with a JSON body naming the `action` and its parameters. Per request the
- * engine resolves identity (resolve-or-401), checks the caller surface, checks
- * the action, validates typed constraints, performs the LangSmith operation
- * server-side with the workspace key, and returns an allowlisted response.
- *
- * v0 does NOT prove object ownership (`runId` is treated as an unguessable
- * capability, matching the app being replaced), and has no rate limiting, audit,
- * or multi-workspace fan-out.
- */
-import { Client } from "langsmith";
-/** An error carrying an HTTP status the engine surfaces to the caller. */
-export class EnforcementError extends Error {
-    status;
-    constructor(status, message) {
-        super(message);
-        this.status = status;
-        this.name = "EnforcementError";
-    }
-}
-/**
- * Mount the capability route on the connector's namespaced sub-router. Runs the
- * identity-dependent authoring checks at mount time (fails startup on an illegal
- * scope/ingress combination), then registers the uniform POST endpoint.
- */
-export function mountLangSmithRoutes(ctx, capabilities, client = defaultClient()) {
-    validateAgainstIdentity(capabilities, ctx.identity);
-    const deps = {
-        capabilitiesById: new Map(capabilities.map((c) => [c.id, c])),
-        client,
-        identityConfig: ctx.identity,
-        requireIdentity: ctx.requireIdentity,
-    };
-    ctx.router.post("/capabilities/:id", (request) => handleCapabilityRequest(request, deps));
-}
-/** Identity-aware authoring validation, run when the app is constructed. */
-export function validateAgainstIdentity(capabilities, identity) {
-    const httpMode = identity?.ingress.http;
-    const hasValidatedToken = httpMode !== undefined && httpMode !== "trusted_backend";
-    const tenancy = identity?.tenancy ?? "single";
-    for (const capability of capabilities) {
-        const externallyExposed = capability.exposeTo.length > 0;
-        const identityScoped = capability.scope === "actor" ||
-            capability.scope === "tenant" ||
-            capability.scope === "thread" ||
-            capability.scope === "run";
-        if (!identity) {
-            const readOnly = capability.actions.every((a) => a.startsWith("read"));
-            if (externallyExposed && !(capability.scope === "agent" && readOnly)) {
-                throw new Error(`LangSmith capability "${capability.id}" is exposed externally but the ` +
-                    `deployment has no identity configured. Only agent-scoped, read-only ` +
-                    `capabilities may be exposed without identity.`);
-            }
-            continue;
-        }
-        if (capability.scope === "tenant" && tenancy === "single") {
-            throw new Error(`LangSmith capability "${capability.id}" is tenant-scoped but the ` +
-                `deployment is tenancy: "single".`);
-        }
-        if (capability.exposeTo.includes("browser") &&
-            identityScoped &&
-            !hasValidatedToken) {
-            throw new Error(`LangSmith capability "${capability.id}" is ${capability.scope}-scoped and ` +
-                `exposed to browser, but the deployment has no validated_token ingress ` +
-                `to resolve an end-user identity.`);
-        }
-    }
-}
-/** The per-request enforcement pipeline. Returns a JSON `Response`. */
-export async function handleCapabilityRequest(request, deps) {
-    try {
-        const capabilityId = capabilityIdFromUrl(request.url);
-        const capability = deps.capabilitiesById.get(capabilityId);
-        if (!capability) {
-            throw new EnforcementError(404, `unknown capability "${capabilityId}"`);
-        }
-        const identity = await deps.requireIdentity(request);
-        const surface = callerSurface(identity, deps.identityConfig);
-        if (!capability.exposeTo.includes(surface)) {
-            throw new EnforcementError(403, `capability "${capability.id}" is not exposed to ${surface}`);
-        }
-        const body = await parseJsonBody(request);
-        const action = String(body.action ?? "");
-        if (!capability.actions.includes(action)) {
-            throw new EnforcementError(403, `action "${action}" is not allowed for capability "${capability.id}"`);
-        }
-        const raw = toRecord(await performLangSmithCall(capability, action, body, deps));
-        const shaped = shapeResponse(raw, capability);
-        return jsonResponse(200, { data: shaped });
-    }
-    catch (error) {
-        if (error instanceof EnforcementError) {
-            return jsonResponse(error.status, { error: error.message });
-        }
-        const status = statusFromUnknownError(error);
-        return jsonResponse(status, { error: errorMessage(error) });
-    }
-}
-/** Map the resolved identity + ingress mode to a caller surface. */
-export function callerSurface(identity, identityConfig) {
-    const provider = identity.source.provider;
-    if (provider === "slack") {
-        return "channel";
-    }
-    if (provider === "schedule") {
-        return "schedule";
-    }
-    // http / cli: browser vs trusted_backend depends on the ingress mode.
-    return identityConfig?.ingress.http === "trusted_backend"
-        ? "trusted_backend"
-        : "browser";
-}
-// --- Call mapping ----------------------------------------------------------
-async function performLangSmithCall(capability, action, body, deps) {
-    switch (capability.resource) {
-        case "feedback":
-            return feedbackCall(capability, action, body, deps.client);
-        case "runs":
-            return runsCall(action, body, deps.client);
-        case "examples":
-            return examplesCall(capability, body, deps.client);
-        case "annotation_queues":
-            return annotationQueueCall(capability, body, deps.client);
-        case "prompts":
-            return deps.client.readPrompt({ name: requireString(body, "name") });
-        case "threads":
-            return threadsCall(capability, action, body, deps.client);
-        default:
-            throw new EnforcementError(400, `resource "${capability.resource}" is not supported in v0`);
-    }
-}
-async function feedbackCall(capability, action, body, client) {
-    const c = capability.constraints ?? {};
-    if (action === "create") {
-        const key = requireString(body, "key");
-        assertAllowed(c.keys, key, "key");
-        // Validated against the `scores` allowlist, then handed to the SDK as a
-        // categorical score/value (see LangSmithClient docs).
-        const score = body.score;
-        if (score !== undefined) {
-            assertAllowed(c.scores, String(score), "score");
-        }
-        const comment = optionalComment(body, c.maxCommentChars);
-        return client.createFeedback({
-            runId: requireString(body, "runId"),
-            key,
-            ...(score !== undefined ? { score } : {}),
-            ...(comment !== undefined ? { comment } : {}),
-            ...(typeof body.feedbackId === "string"
-                ? { feedbackId: body.feedbackId }
-                : {}),
-        });
-    }
-    if (action === "update") {
-        const comment = optionalComment(body, c.maxCommentChars);
-        const score = body.score;
-        return client.updateFeedback({
-            feedbackId: requireString(body, "feedbackId"),
-            ...(score !== undefined ? { score } : {}),
-            ...(comment !== undefined ? { comment } : {}),
-        });
-    }
-    if (action === "delete") {
-        return client.deleteFeedback({
-            feedbackId: requireString(body, "feedbackId"),
-        });
-    }
-    throw new EnforcementError(400, `unknown feedback action "${action}"`);
-}
-async function runsCall(action, body, client) {
-    const runId = requireString(body, "runId");
-    if (action === "read") {
-        return client.readRun({ runId });
-    }
-    if (action === "share") {
-        return client.shareRun({ runId });
-    }
-    throw new EnforcementError(400, `unknown runs action "${action}"`);
-}
-async function examplesCall(capability, body, client) {
-    const c = capability.constraints ?? {};
-    const dataset = c.dataset;
-    if (!dataset) {
-        throw new EnforcementError(400, "examples capability has no dataset");
-    }
-    const inputs = requireObject(body, "inputs");
-    const allowedFields = c.allowedFields;
-    if (allowedFields) {
-        for (const field of Object.keys(inputs)) {
-            if (!allowedFields.includes(field)) {
-                throw new EnforcementError(400, `field "${field}" is not allowed`);
-            }
-        }
-    }
-    const outputs = body.outputs && typeof body.outputs === "object"
-        ? body.outputs
-        : undefined;
-    return client.createExample({
-        dataset,
-        inputs,
-        ...(outputs ? { outputs } : {}),
-    });
-}
-async function annotationQueueCall(capability, body, client) {
-    const c = capability.constraints ?? {};
-    const queue = c.queue;
-    if (!queue) {
-        throw new EnforcementError(400, "annotation queue capability has no queue");
-    }
-    const priority = body.priority;
-    if (priority !== undefined) {
-        assertAllowed(c.allowedPriorities, String(priority), "priority");
-    }
-    const note = optionalComment(body, c.maxNoteChars, "note");
-    return client.enqueueRun({
-        queue,
-        runId: requireString(body, "runId"),
-        ...(typeof priority === "string" ? { priority } : {}),
-        ...(note !== undefined ? { note } : {}),
-    });
-}
-async function threadsCall(capability, action, body, client) {
-    const threadId = requireString(body, "threadId");
-    if (action === "read") {
-        return client.readThread({ threadId });
-    }
-    if (action === "update_metadata") {
-        const c = capability.constraints ?? {};
-        const metadata = requireObject(body, "metadata");
-        const metadataKeys = c.metadataKeys;
-        if (metadataKeys) {
-            for (const key of Object.keys(metadata)) {
-                if (!metadataKeys.includes(key)) {
-                    throw new EnforcementError(400, `metadata key "${key}" is not allowed`);
-                }
-            }
-        }
-        const maxTitle = c.maxTitleChars;
-        if (maxTitle !== undefined && typeof metadata.title === "string") {
-            if (metadata.title.length > maxTitle) {
-                throw new EnforcementError(400, `title exceeds ${maxTitle} characters`);
-            }
-        }
-        return client.updateThreadMetadata({ threadId, metadata });
-    }
-    throw new EnforcementError(400, `unknown threads action "${action}"`);
-}
-// --- Response shaping ------------------------------------------------------
-/** Apply the capability's `include` allowlist, then drop any `redact` roots. */
-export function shapeResponse(raw, capability) {
-    const include = capability.response?.include ?? [];
-    const redact = new Set(capability.response?.redact ?? []);
-    const picked = {};
-    for (const path of include) {
-        const [root, ...rest] = path.split(".");
-        if (root === undefined || redact.has(root)) {
-            continue;
-        }
-        if (rest.length === 0) {
-            if (root in raw) {
-                picked[root] = raw[root];
-            }
-            continue;
-        }
-        const nested = pickNested(raw[root], rest);
-        if (nested !== undefined) {
-            const existing = picked[root] ?? {};
-            picked[root] = { ...existing, [rest.join(".")]: nested };
-        }
-    }
-    return picked;
-}
-function pickNested(value, path) {
-    let current = value;
-    for (const segment of path) {
-        if (current && typeof current === "object" && segment in current) {
-            current = current[segment];
-        }
-        else {
-            return undefined;
-        }
-    }
-    return current;
-}
-// --- Helpers ---------------------------------------------------------------
-function capabilityIdFromUrl(url) {
-    const { pathname } = new URL(url);
-    const marker = "/capabilities/";
-    const index = pathname.lastIndexOf(marker);
-    if (index === -1) {
-        throw new EnforcementError(404, "capability id missing from path");
-    }
-    return decodeURIComponent(pathname.slice(index + marker.length));
-}
-async function parseJsonBody(request) {
-    try {
-        const parsed = await request.json();
-        if (parsed && typeof parsed === "object") {
-            return parsed;
-        }
-    }
-    catch {
-        // fall through to the uniform error below
-    }
-    throw new EnforcementError(400, "request body must be a JSON object");
-}
-function requireString(body, key) {
-    const value = body[key];
-    if (typeof value !== "string" || value.length === 0) {
-        throw new EnforcementError(400, `missing or invalid "${key}"`);
-    }
-    return value;
-}
-function requireObject(body, key) {
-    const value = body[key];
-    if (!value || typeof value !== "object" || Array.isArray(value)) {
-        throw new EnforcementError(400, `missing or invalid "${key}"`);
-    }
-    return value;
-}
-function assertAllowed(allowed, value, label) {
-    if (allowed && !allowed.includes(value)) {
-        throw new EnforcementError(400, `${label} "${value}" is not allowed`);
-    }
-}
-function optionalComment(body, maxChars, field = "comment") {
-    const value = body[field];
-    if (value === undefined || value === null) {
-        return undefined;
-    }
-    if (typeof value !== "string") {
-        throw new EnforcementError(400, `"${field}" must be a string`);
-    }
-    if (maxChars !== undefined && value.length > maxChars) {
-        throw new EnforcementError(400, `"${field}" exceeds ${maxChars} characters`);
-    }
-    return value;
-}
-function jsonResponse(status, body) {
-    return new Response(JSON.stringify(body), {
-        status,
-        headers: { "content-type": "application/json" },
-    });
-}
-function statusFromUnknownError(error) {
-    const status = error?.status;
-    if (typeof status === "number" && status >= 400 && status <= 599) {
-        return status;
-    }
-    return 502;
-}
-function errorMessage(error) {
-    if (error instanceof Error) {
-        return error.message;
-    }
-    return "internal error";
-}
-/** Coerce an SDK result (object | void | null) into a plain record for shaping. */
-function toRecord(value) {
-    if (value && typeof value === "object") {
-        return { ...value };
-    }
-    return {};
-}
-/**
- * Default client backed by the `langsmith` SDK {@link Client}. The underlying
- * client is created on first use so building the engine (e.g. for an app with no
- * requests yet) never requires `LANGSMITH_API_KEY`.
- *
- * A connector "score" is numeric/boolean → LangSmith `score`, or categorical
- * (string/object) → LangSmith feedback `value`.
- */
-export function defaultClient() {
-    let client;
-    const sdk = () => {
-        client ??= new Client({ apiKey: process.env.LANGSMITH_API_KEY });
-        return client;
-    };
-    const isScore = (value) => typeof value === "number" || typeof value === "boolean" || value === null;
-    const scoreOrValue = (value) => {
-        if (isScore(value)) {
-            return { score: value };
-        }
-        return value === undefined ? {} : { value };
-    };
-    return {
-        createFeedback: ({ runId, key, score, comment, feedbackId }) => sdk().createFeedback(runId, key, {
-            ...scoreOrValue(score),
-            comment,
-            feedbackId,
-        }),
-        updateFeedback: ({ feedbackId, score, comment }) => sdk().updateFeedback(feedbackId, { ...scoreOrValue(score), comment }),
-        deleteFeedback: ({ feedbackId }) => sdk().deleteFeedback(feedbackId),
-        readRun: ({ runId }) => sdk().readRun(runId),
-        shareRun: async ({ runId }) => ({ url: await sdk().shareRun(runId) }),
-        createExample: ({ dataset, inputs, outputs }) => sdk().createExample({ inputs, outputs, dataset_name: dataset }),
-        enqueueRun: ({ queue, runId }) => sdk().addRunsToAnnotationQueue(queue, [runId]),
-        readPrompt: ({ name }) => sdk().getPrompt(name),
-        readThread: ({ threadId }) => sdk().readRun(threadId),
-        updateThreadMetadata: ({ threadId, metadata }) => sdk().updateRun(threadId, { extra: metadata }),
-    };
-}
-//# sourceMappingURL=langsmith-connector.js.map

package/dist/runtime/langsmith-connector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"langsmith-connector.js","sourceRoot":"","sources":["../../src/runtime/langsmith-connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AA+DnC,0EAA0E;AAC1E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAE9B;IADX,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QAIvB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAUD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAgB,EAChB,YAAmC,EACnC,SAA0B,aAAa,EAAE;IAEzC,uBAAuB,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEpD,MAAM,IAAI,GAAgB;QACxB,gBAAgB,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM;QACN,cAAc,EAAE,GAAG,CAAC,QAAQ;QAC5B,eAAe,EAAE,GAAG,CAAC,eAAe;KACrC,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC/C,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CACrC,YAAmC,EACnC,QAAoC;IAEpC,MAAM,QAAQ,GAAG,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;IACxC,MAAM,iBAAiB,GACrB,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,iBAAiB,CAAC;IAC3D,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC;IAE9C,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACtC,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACzD,MAAM,cAAc,GAClB,UAAU,CAAC,KAAK,KAAK,OAAO;YAC5B,UAAU,CAAC,KAAK,KAAK,QAAQ;YAC7B,UAAU,CAAC,KAAK,KAAK,QAAQ;YAC7B,UAAU,CAAC,KAAK,KAAK,KAAK,CAAC;QAE7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,iBAAiB,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,EAAE,kCAAkC;oBACtE,sEAAsE;oBACtE,+CAA+C,CAClD,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,EAAE,6BAA6B;gBACjE,kCAAkC,CACrC,CAAC;QACJ,CAAC;QAED,IACE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YACvC,cAAc;YACd,CAAC,iBAAiB,EAClB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yBAAyB,UAAU,CAAC,EAAE,QAAQ,UAAU,CAAC,KAAK,cAAc;gBAC1E,wEAAwE;gBACxE,kCAAkC,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAgB,EAChB,IAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,YAAY,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,gBAAgB,CACxB,GAAG,EACH,eAAe,UAAU,CAAC,EAAE,uBAAuB,OAAO,EAAE,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,gBAAgB,CACxB,GAAG,EACH,WAAW,MAAM,oCAAoC,UAAU,CAAC,EAAE,GAAG,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAClB,MAAM,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAC3D,CAAC;QACF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC9C,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAC3B,QAAyB,EACzB,cAA0C;IAE1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC1C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,sEAAsE;IACtE,OAAO,cAAc,EAAE,OAAO,CAAC,IAAI,KAAK,iBAAiB;QACvD,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,8EAA8E;AAE9E,KAAK,UAAU,oBAAoB,CACjC,UAA+B,EAC/B,MAAc,EACd,IAA6B,EAC7B,IAAiB;IAEjB,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5B,KAAK,UAAU;YACb,OAAO,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,UAAU;YACb,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,KAAK,mBAAmB;YACtB,OAAO,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACvE,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D;YACE,MAAM,IAAI,gBAAgB,CACxB,GAAG,EACH,aAAa,UAAU,CAAC,QAAQ,0BAA0B,CAC3D,CAAC;IACN,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAA+B,EAC/B,MAAc,EACd,IAA6B,EAC7B,MAAuB;IAEvB,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;IACvC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,aAAa,CAAC,CAAC,CAAC,IAA4B,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1D,wEAAwE;QACxE,sDAAsD;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAA0C,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,aAAa,CAAC,CAAC,CAAC,MAA8B,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAC7B,IAAI,EACJ,CAAC,CAAC,eAAqC,CACxC,CAAC;QACF,OAAO,MAAM,CAAC,cAAc,CAAC;YAC3B,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC;YACnC,GAAG;YACH,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;gBACrC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;gBACjC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,eAAe,CAC7B,IAAI,EACJ,CAAC,CAAC,eAAqC,CACxC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAA0C,CAAC;QAC9D,OAAO,MAAM,CAAC,cAAc,CAAC;YAC3B,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC;YAC7C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,cAAc,CAAC;YAC3B,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,4BAA4B,MAAM,GAAG,CAAC,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAc,EACd,IAA6B,EAC7B,MAAuB;IAEvB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,wBAAwB,MAAM,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAA+B,EAC/B,IAA6B,EAC7B,MAAuB;IAEvB,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,CAAC,OAA6B,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,CAAC,CAAC,aAAqC,CAAC;IAC9D,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,UAAU,KAAK,kBAAkB,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAC9C,CAAC,CAAE,IAAI,CAAC,OAAmC;QAC3C,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,MAAM,CAAC,aAAa,CAAC;QAC1B,OAAO;QACP,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,UAA+B,EAC/B,IAA6B,EAC7B,MAAuB;IAEvB,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,CAAC,KAA2B,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,aAAa,CACX,CAAC,CAAC,iBAAyC,EAC3C,MAAM,CAAC,QAAQ,CAAC,EAChB,UAAU,CACX,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAC1B,IAAI,EACJ,CAAC,CAAC,YAAkC,EACpC,MAAM,CACP,CAAC;IACF,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,KAAK;QACL,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC;QACnC,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,UAA+B,EAC/B,MAAc,EACd,IAA6B,EAC7B,MAAuB;IAEvB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,CAAC,CAAC,YAAoC,CAAC;QAC5D,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,gBAAgB,CACxB,GAAG,EACH,iBAAiB,GAAG,kBAAkB,CACvC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,CAAC,aAAmC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACjE,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBACrC,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,iBAAiB,QAAQ,aAAa,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,MAAM,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,8EAA8E;AAE9E,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAC3B,GAA4B,EAC5B,UAA+B;IAE/B,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GACX,MAAM,CAAC,IAAI,CAAyC,IAAI,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAc;IAChD,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACjE,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAE9E,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,MAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IACD,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,IAA6B,EAAE,GAAW;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,GAAG,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CACpB,IAA6B,EAC7B,GAAW;IAEX,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,GAAG,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CACpB,OAA6B,EAC7B,KAAa,EACb,KAAa;IAEb,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,KAAK,KAAK,KAAK,kBAAkB,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,IAA6B,EAC7B,QAA4B,EAC5B,KAAK,GAAG,SAAS;IAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,gBAAgB,CAAC,GAAG,EAAE,IAAI,KAAK,oBAAoB,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,gBAAgB,CACxB,GAAG,EACH,IAAI,KAAK,aAAa,QAAQ,aAAa,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,MAAM,GAAI,KAA8B,EAAE,MAAM,CAAC;IACvD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACjE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,mFAAmF;AACnF,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,EAAE,GAAI,KAAiC,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,MAA0B,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAW,EAAE;QACvB,MAAM,KAAK,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CACd,KAAwC,EACpB,EAAE,CACtB,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;IAE5E,MAAM,YAAY,GAAG,CACnB,KAAwC,EACO,EAAE;QACjD,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAC7D,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE;YAC/B,GAAG,YAAY,CAAC,KAAK,CAAC;YACtB,OAAO;YACP,UAAU;SACX,CAAC;QACJ,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACjD,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;QACvE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;QACpE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5C,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9C,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;QACjE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAC/B,GAAG,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;QAChD,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;QAC/C,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrD,oBAAoB,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC/C,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/runtime/managed-middleware.d.ts

@@ -1,25 +0,0 @@
-import type { IdentityConfig } from "../identity.js";
-/**
- * A middleware from MDA's perspective: an object carrying optional lifecycle and
- * wrap hooks. Kept structural so the wrapper works across `createMiddleware`
- * objects and class-based `AgentMiddleware` instances alike.
- */
-export interface ManagedMiddleware {
-    [key: string]: unknown;
-}
-/**
- * Wrap a middleware so every hook sees `runtime.identity` (…) without changing
- * its name, schema, registered tools, or class.
- *
- * A `Proxy` intercepts only the hook properties: lifecycle hooks
- * (`beforeAgent`/`beforeModel`/`afterModel`/`afterAgent`, in either function or
- * `{ hook, canJumpTo }` form) get their `runtime` argument augmented, and the
- * `wrap*` hooks get `request.runtime` augmented. Every other property and method
- * — including the middleware brand, `name`, and `stateSchema` — passes through,
- * preserving hook detection, `instanceof`, and framework wiring. Hooks are bound
- * to the original instance so class-based middleware keep their `this`.
- */
-export declare function withManagedMiddleware<T extends ManagedMiddleware>(middleware: T, cfg?: IdentityConfig): T;
-/** Wrap every middleware in a list with {@link withManagedMiddleware}. */
-export declare function wrapMiddlewareWithManagedRuntime<T extends ManagedMiddleware>(middleware: readonly T[], cfg?: IdentityConfig): T[];
-//# sourceMappingURL=managed-middleware.d.ts.map

package/dist/runtime/managed-middleware.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-middleware.d.ts","sourceRoot":"","sources":["../../src/runtime/managed-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMrD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA4ED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,iBAAiB,EAC/D,UAAU,EAAE,CAAC,EACb,GAAG,CAAC,EAAE,cAAc,GACnB,CAAC,CAgBH;AAED,0EAA0E;AAC1E,wBAAgB,gCAAgC,CAAC,CAAC,SAAS,iBAAiB,EAC1E,UAAU,EAAE,SAAS,CAAC,EAAE,EACxB,GAAG,CAAC,EAAE,cAAc,GACnB,CAAC,EAAE,CAEL"}

package/dist/runtime/managed-middleware.js

@@ -1,76 +0,0 @@
-import { managedRuntimeOverrides, } from "./managed-tools.js";
-/** Lifecycle hooks receive `(state, runtime)`; either a fn or `{ hook, canJumpTo }`. */
-const LIFECYCLE_HOOKS = new Set([
-    "beforeAgent",
-    "beforeModel",
-    "afterModel",
-    "afterAgent",
-]);
-/** Wrap hooks receive `(request, handler)` with `request.runtime`. */
-const WRAP_HOOKS = new Set(["wrapModelCall", "wrapToolCall"]);
-/**
- * Return a copy of the middleware runtime with the managed primitives
- * (`runtime.identity`, …) layered on. Identity is built from the trusted
- * `runtime.configurable.langgraph_auth_user` the custom-auth handler produced —
- * the same channel tools use — since the platform, not us, invokes the graph and
- * `runtime.context` is caller-supplied per-run data we do not control.
- */
-function augmentRuntime(runtime, cfg) {
-    const overrides = managedRuntimeOverrides(runtime, cfg);
-    return Object.keys(overrides).length > 0
-        ? { ...runtime, ...overrides }
-        : runtime;
-}
-function wrapLifecycleHook(target, value, cfg) {
-    if (typeof value === "function") {
-        const fn = value;
-        return (state, runtime) => fn.call(target, state, augmentRuntime(runtime, cfg));
-    }
-    if (value && typeof value.hook === "function") {
-        const original = value;
-        const fn = original.hook;
-        return {
-            ...original,
-            hook: (state, runtime) => fn.call(target, state, augmentRuntime(runtime, cfg)),
-        };
-    }
-    return value;
-}
-function wrapWrapHook(target, value, cfg) {
-    const fn = value;
-    return (request, handler) => fn.call(target, { ...request, runtime: augmentRuntime(request?.runtime, cfg) }, handler);
-}
-/**
- * Wrap a middleware so every hook sees `runtime.identity` (…) without changing
- * its name, schema, registered tools, or class.
- *
- * A `Proxy` intercepts only the hook properties: lifecycle hooks
- * (`beforeAgent`/`beforeModel`/`afterModel`/`afterAgent`, in either function or
- * `{ hook, canJumpTo }` form) get their `runtime` argument augmented, and the
- * `wrap*` hooks get `request.runtime` augmented. Every other property and method
- * — including the middleware brand, `name`, and `stateSchema` — passes through,
- * preserving hook detection, `instanceof`, and framework wiring. Hooks are bound
- * to the original instance so class-based middleware keep their `this`.
- */
-export function withManagedMiddleware(middleware, cfg) {
-    return new Proxy(middleware, {
-        get(target, property, receiver) {
-            const value = Reflect.get(target, property, receiver);
-            if (value == null || typeof property !== "string") {
-                return value;
-            }
-            if (LIFECYCLE_HOOKS.has(property)) {
-                return wrapLifecycleHook(target, value, cfg);
-            }
-            if (WRAP_HOOKS.has(property)) {
-                return wrapWrapHook(target, value, cfg);
-            }
-            return value;
-        },
-    });
-}
-/** Wrap every middleware in a list with {@link withManagedMiddleware}. */
-export function wrapMiddlewareWithManagedRuntime(middleware, cfg) {
-    return middleware.map((entry) => withManagedMiddleware(entry, cfg));
-}
-//# sourceMappingURL=managed-middleware.js.map

package/dist/runtime/managed-middleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-middleware.js","sourceRoot":"","sources":["../../src/runtime/managed-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAiB5B,wFAAwF;AACxF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,aAAa;IACb,aAAa;IACb,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AAEH,sEAAsE;AACtE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;AAE9D;;;;;;GAMG;AACH,SAAS,cAAc,CACrB,OAAsC,EACtC,GAAoB;IAEpB,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;QACtC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE;QAC9B,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAMD,SAAS,iBAAiB,CACxB,MAAc,EACd,KAAc,EACd,GAAoB;IAEpB,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,KAAoB,CAAC;QAChC,OAAO,CAAC,KAAc,EAAE,OAA2B,EAAE,EAAE,CACrD,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,IAAI,OAAQ,KAAyB,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,KAAwB,CAAC;QAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QACzB,OAAO;YACL,GAAG,QAAQ;YACX,IAAI,EAAE,CAAC,KAAc,EAAE,OAA2B,EAAE,EAAE,CACpD,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;SACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CACnB,MAAc,EACd,KAAc,EACd,GAAoB;IAEpB,MAAM,EAAE,GAAG,KAAe,CAAC;IAC3B,OAAO,CAAC,OAAwB,EAAE,OAAgB,EAAE,EAAE,CACpD,EAAE,CAAC,IAAI,CACL,MAAM,EACN,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAC9D,OAAO,CACR,CAAC;AACN,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAa,EACb,GAAoB;IAEpB,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE;QAC3B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ;YAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gCAAgC,CAC9C,UAAwB,EACxB,GAAoB;IAEpB,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/runtime/managed-tools.d.ts

@@ -1,61 +0,0 @@
-import type { ToolRuntime } from "@langchain/core/tools";
-import type { IdentityConfig, RuntimeIdentity } from "../identity.js";
-import { type CredentialsProvider } from "./credentials.js";
-import type { RuntimeConfigLike } from "./identity-runtime.js";
-export type { RuntimeConfigLike } from "./identity-runtime.js";
-/**
- * A LangChain/LangGraph tool from MDA's perspective: the only surface the runtime
- * seam touches is `invoke(input, runtime)`. Kept structural so the wrapper works
- * across `DynamicStructuredTool`, MCP tools, and any other tool shape.
- */
-export interface InvokableTool {
-    invoke(input: unknown, runtime?: RuntimeConfigLike): unknown;
-}
-/** The managed primitives MDA layers onto the tool runtime. */
-export interface ManagedRuntimeExtras {
-    identity?: RuntimeIdentity;
-    /**
-     * Per-run credential minting for custom mode (`scoping.credentials: "custom"`).
-     * Absent in managed/`none` modes. Call `runtime.credentials.for(target)` and
-     * attach the returned headers to the downstream request.
-     */
-    credentials?: CredentialsProvider;
-}
-/**
- * The runtime surface managed Deep Agent tools receive: LangGraph's
- * {@link ToolRuntime} plus MDA-managed primitives such as `identity`.
- *
- * Annotate the second parameter of a `tool(...)` handler when you need the
- * frozen identity envelope for the current run.
- */
-export interface ManagedDeepAgentRuntime<TState = unknown, TContext = unknown> extends ToolRuntime<TState, TContext>, ManagedRuntimeExtras {
-}
-/**
- * Derive the managed runtime primitives for a run from its config. Identity is
- * built only from the trusted `configurable.langgraph_auth_user` the custom-auth
- * handler produced — the field LangGraph propagates to every node and tool.
- */
-export declare function managedRuntimeExtras(runtime: RuntimeConfigLike | undefined, cfg?: IdentityConfig): ManagedRuntimeExtras;
-/**
- * The fields MDA overlays onto the runtime a tool/middleware hook receives:
- * the frozen `identity` (when an actor resolved) and a `configurable` with the
- * reserved identity keys stripped (§8) so downstream code can't read a
- * client-spoofed `actor_id`/`tenant_id`. Returns an empty object when there is
- * nothing to change, so the original runtime passes through untouched.
- */
-export declare function managedRuntimeOverrides(runtime: RuntimeConfigLike | undefined, cfg?: IdentityConfig): ManagedRuntimeExtras & {
-    configurable?: Record<string, unknown>;
-};
-/**
- * Wrap a tool so its runtime carries the managed primitives (`runtime.identity`,
- * …) without changing its name, schema, or class.
- *
- * Augments `invoke` (for LangGraph's `ToolNode`) and patches the tool's internal
- * `func`/`coroutine` so identity reaches the authored handler even when LangChain
- * rewrites the runtime into a RunnableConfig before calling the tool function.
- * Every other property/method passes through untouched.
- */
-export declare function withManagedRuntime<T extends InvokableTool>(managedTool: T, cfg?: IdentityConfig): T;
-/** Wrap every tool in a list with {@link withManagedRuntime}. */
-export declare function wrapToolsWithManagedRuntime<T extends InvokableTool>(tools: readonly T[], cfg?: IdentityConfig): T[];
-//# sourceMappingURL=managed-tools.d.ts.map

package/dist/runtime/managed-tools.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"managed-tools.d.ts","sourceRoot":"","sources":["../../src/runtime/managed-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,kBAAkB,CAAC;AAM1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;CAC9D;AAED,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB,CAAC,MAAM,GAAG,OAAO,EAAE,QAAQ,GAAG,OAAO,CAC3E,SAAQ,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB;CAAG;AAEhE;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,GAAG,SAAS,EACtC,GAAG,CAAC,EAAE,cAAc,GACnB,oBAAoB,CAatB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,GAAG,SAAS,EACtC,GAAG,CAAC,EAAE,cAAc,GACnB,oBAAoB,GAAG;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA8BnE;AA0BD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,aAAa,EACxD,WAAW,EAAE,CAAC,EACd,GAAG,CAAC,EAAE,cAAc,GACnB,CAAC,CAoCH;AAED,iEAAiE;AACjE,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,aAAa,EACjE,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,GAAG,CAAC,EAAE,cAAc,GACnB,CAAC,EAAE,CAEL"}