managed-deepagents 0.5.0-dev.89 → 0.5.0-dev.96

package/dist/memory/types.d.ts

@@ -0,0 +1,71 @@
+/**
+ * The `defineMemory(...)` input and the resolved contract the runtime reads.
+ *
+ * Durable memory is opt-in and owned by one root declaration: a project with no
+ * `memory.ts` mounts nothing. The resolved form is a list of slices rather than a
+ * flag, so later slice kinds (a private user slice, a group mount keyed by a JWT
+ * claim) are data the runtime already knows how to carry — not a new shape.
+ */
+/**
+ * One enabled memory mount after normalize. Mounts are always read/write.
+ *
+ * One kind today. The resolved shape is a list so later kinds (a private user
+ * slice, a group mount keyed by a claim) are added here without changing what
+ * consumers read.
+ */
+export type ResolvedMemorySlice = {
+    kind: "agent";
+};
+/** Slice kinds the runtime can mount, authorable or not. */
+export type MemorySliceKind = ResolvedMemorySlice["kind"];
+/**
+ * Resolved durable memory: which slices are mounted.
+ *
+ * Empty array means no durable memory.
+ */
+export type MemoryScope = ResolvedMemorySlice[];
+/**
+ * Authoring form of a single memory slice.
+ *
+ * Deployment-shared agent memory is the whole launch surface. `"user"` and the
+ * object slice form (`{ kind, mount, access }`) are recognized and rejected with
+ * a "not implemented yet" error rather than being silently accepted.
+ */
+export type MemorySliceInput = "agent";
+/**
+ * Authoring form of `defineMemory({ scope })`.
+ *
+ * - `"none"` / `[]` / omitted — no durable memory
+ * - `"agent"` / `["agent"]` — deployment-shared memory at `/memories/agent/`
+ */
+export type MemoryScopeInput = "none" | MemorySliceInput | MemorySliceInput[];
+/** The memory declaration. Every key is optional. */
+export interface MemoryOptions {
+    /**
+     * Which memory slices runs of this deployment may use. Defaults to `"none"`,
+     * so a declaration that names no scope mounts nothing.
+     */
+    scope?: MemoryScopeInput;
+}
+/**
+ * The resolved memory contract the managed runtime reads.
+ *
+ * Versioned because the authoring surface will grow slice kinds and per-slice
+ * options: a consumer can branch on `version` instead of guessing from shape.
+ */
+export interface MemoryConfig {
+    readonly version: 1;
+    /** Enabled slices, agent first (empty = no durable memory). */
+    readonly slices: MemoryScope;
+}
+/**
+ * The pre-runtime spec returned by `defineMemory`.
+ *
+ * The CLI discovers the `memory` export from a root `memory.{ts,tsx,mts,cts}`
+ * and hands this config to the managed runtime, which mounts the named slices.
+ */
+export interface MemoryDefinition {
+    readonly kind: "memory";
+    readonly config: MemoryConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/memory/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEpD,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAE1D;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,gBAAgB,GAAG,gBAAgB,EAAE,CAAC;AAE9E,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B"}

package/dist/memory/types.js

@@ -0,0 +1,10 @@
+/**
+ * The `defineMemory(...)` input and the resolved contract the runtime reads.
+ *
+ * Durable memory is opt-in and owned by one root declaration: a project with no
+ * `memory.ts` mounts nothing. The resolved form is a list of slices rather than a
+ * flag, so later slice kinds (a private user slice, a group mount keyed by a JWT
+ * claim) are data the runtime already knows how to carry — not a new shape.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/memory/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/namespaces.d.ts

@@ -6,12 +6,9 @@
  * and providers can be added without growing the barrel:
  *
  * ```ts
- * connectors.slack({ on: ["app_mention"] });
- * connectors.github({
- *   repositories: [{ repo: "acme/api", path: "api" }],
- *   events: [{ on: "pull_request.opened", prompt: () => "review" }],
- * });
- * sandboxes.langsmith({ defaultTimeout: 600 });
+ * channels.slack();
+ * connectors.slack({ includeTools: ["slack_list_channels"] });
+ * defineSandbox({ defaultTimeout: 600 });
  * auth.supabase({ projectRef: "abc" });
  * credentials.github({ read: ["user"] });
  * connect.github();
@@ -24,11 +21,9 @@
  * These are the only primitives the managed runtime will mount. A project
  * cannot contribute its own — `defineExtension` stays internal.
  */
-import { LangSmithSandbox } from "deepagents";
-import { githubConnector } from "./connectors/github/index.js";
-import { annotationQueues, chatFeedback, examples, feedback, langsmithConnector, prompts, runs, threads, traceViewer } from "./connectors/langsmith/index.js";
 import { type MarketplaceConnectors } from "./connectors/marketplace/index.js";
 import { mcpConnector } from "./connectors/mcp/index.js";
+import { slackChannel } from "./channels/slack/index.js";
 import { slackConnector } from "./connectors/slack/index.js";
 import { type ToolServerConnectors } from "./connectors/toolserver/index.js";
 import { connect as githubConnect } from "./identity/github/connect-http.js";
@@ -39,34 +34,7 @@ import { connect as linkedinConnect } from "./identity/linkedin/connect-http.js"
 import { connect as microsoftConnect } from "./identity/microsoft/connect-http.js";
 import { connect as slackConnect } from "./identity/slack/connect-http.js";
 import { connect as xConnect } from "./identity/x/connect-http.js";
-import { type LangSmithSandboxOptions, type SandboxDefinition } from "./sandbox.js";
 export { auth } from "./identity/index.js";
-/** Execution environments the agent's shell runs in. Exported from `sandbox/`. */
-export declare const sandboxes: {
-    langsmith(options?: LangSmithSandboxOptions): SandboxDefinition<typeof LangSmithSandbox>;
-};
-/**
- * `connectors.langsmith` — the connector factory plus its capability builders.
- *
- * Call `connectors.langsmith({ capabilities })` to declare the connector; use
- * the attached builders / presets to compose grants without a second import.
- *
- * Builder properties are typed as `typeof` the exported functions so hover
- * docs stay on those symbols (`runs`, `chatFeedback`, …) rather than being
- * restated here.
- *
- * @see {@link langsmithConnector}
- */
-export type LangSmithConnectorsNamespace = typeof langsmithConnector & {
-    readonly runs: typeof runs;
-    readonly feedback: typeof feedback;
-    readonly examples: typeof examples;
-    readonly annotationQueues: typeof annotationQueues;
-    readonly prompts: typeof prompts;
-    readonly threads: typeof threads;
-    readonly chatFeedback: typeof chatFeedback;
-    readonly traceViewer: typeof traceViewer;
-};
 /**
  * Integrations: tools, HTTP routes, sandbox provisioning, inbound events, and
  * named messaging. Exported from `connectors/*`.
@@ -77,11 +45,8 @@ export type LangSmithConnectorsNamespace = typeof langsmithConnector & {
  * LangSmith. They are spread from the catalog so adding an integration is one
  * entry there rather than a line here as well. Marketplace bridges
  * (`connectors.notion`, `connectors.cloudflare`, …) are spread the same way
- * from the Fleet marketplace catalog. GitHub and Slack are first-class
- * connectors that may also contribute sandbox / Events / messaging.
- *
- * `langsmith` doubles as the namespace for its capability builders, so a
- * project selects grants without a second import.
+ * from the Fleet marketplace catalog. Slack tool-server tools live here;
+ * Slack Events ingress lives on {@link channels}.
  *
  * Docs live on this interface (not the value) so IDE hover on `connectors.<name>`
  * stays useful — TypeScript surfaces property docs from the annotation.
@@ -104,67 +69,58 @@ export interface Connectors extends ToolServerConnectors, MarketplaceConnectors
      */
     mcp: typeof mcpConnector;
     /**
-     * GitHub tools (via the LangSmith tool server), sandbox repository checkout,
-     * optional `gh` CLI provisioning, and optional GitHub App webhook Events.
+     * Slack tool-server tools (`includeTools` / `excludeTools`). Names are typed
+     * from the catalog's `slack` entry.
      *
-     * Installing the `gh` CLI (the default) leaves tool-server tools off; name
-     * tools via `includeTools` / `excludeTools` or set `installCLI: false` to
-     * expose them. Tool names are typed from the catalog's `github` entry.
+     * For Slack Events ingress / messaging, use {@link channels.slack}.
      *
      * @example
      * ```ts
-     * export const connector = connectors.github({
-     *   repositories: [{ repo: "acme/api", path: "api" }],
-     *   events: [{ on: "pull_request.opened", prompt: () => "review" }],
+     * export const connector = connectors.slack({
+     *   includeTools: ["slack_list_channels"],
      * });
      * ```
      *
-     * @see {@link githubConnector}
-     */
-    github: typeof githubConnector;
-    /**
-     * Slack Events ingress, named messaging, and optional tool-server Slack tools.
-     *
-     * Events (`on`) mount ingress + messaging; `includeTools` / `excludeTools`
-     * enable Slack tool-server tools (names typed from the catalog's `slack`
-     * entry).
-     *
-     * @example
-     * ```ts
-     * export const connector = connectors.slack({ on: ["app_mention"] });
-     * ```
-     *
      * @see {@link slackConnector}
      */
     slack: typeof slackConnector;
+}
+/**
+ * Integrations: tools, HTTP routes, sandbox provisioning, inbound events, and
+ * named messaging. Exported from `connectors/*`.
+ *
+ * Factories are assigned by reference (same pattern as the Python namespace) so
+ * signatures stay in step with the connector modules. Hover docs come from
+ * {@link Connectors}.
+ */
+export declare const connectors: Connectors;
+/**
+ * Inbound messaging surfaces (Events ingress + outbound messaging). Exported
+ * from `channels/*`. Slack-only for now.
+ *
+ * Docs live on this interface so IDE hover on `channels.<name>` stays useful.
+ */
+export interface Channels {
     /**
-     * Capability-delegation connector for external / untrusted callers (browser,
-     * channels, schedules). Declares constrained LangSmith grants; MDA performs
-     * them server-side so the caller never receives `LANGSMITH_API_KEY`.
+     * Slack Events ingress, named messaging, and deploy requirements.
      *
-     * Also namespaces the grant builders: `connectors.langsmith.runs(...)`,
-     * `connectors.langsmith.chatFeedback(...)`, …
+     * Mounts public Events at `/channels/{name}/events`. For Slack tool-server
+     * tools, use {@link connectors.slack}.
      *
      * @example
      * ```ts
-     * export const connector = connectors.langsmith({
-     *   capabilities: [connectors.langsmith.traceViewer()],
-     * });
+     * export const channel = channels.slack();
      * ```
      *
-     * @see {@link langsmithConnector}
+     * @see {@link slackChannel}
      */
-    langsmith: LangSmithConnectorsNamespace;
+    slack: typeof slackChannel;
 }
 /**
- * Integrations: tools, HTTP routes, sandbox provisioning, inbound events, and
- * named messaging. Exported from `connectors/*`.
- *
- * Factories are assigned by reference (same pattern as the Python namespace) so
- * signatures stay in step with the connector modules. Hover docs come from
- * {@link Connectors}.
+ * Inbound messaging surfaces. Factories are assigned by reference so signatures
+ * stay in step with the channel modules. Hover docs come from {@link Channels}.
  */
-export declare const connectors: Connectors;
+export declare const channels: Channels;
 /** Third-party token resolvers. Composed into `defineIdentity({ credentials })`. */
 export declare const credentials: {
     github: typeof githubCredentials;
@@ -177,12 +133,12 @@ export declare const credentials: {
 export interface Connect extends MarketplaceConnect {
     /**
      * Connect-with-GitHub — link a caller's GitHub account for actor OAuth tokens
-     * used by sandbox git/`gh` and GitHub credentials.
+     * used by GitHub credentials.
      *
-     * Usually unnecessary: declaring `connectors.github` on a user-scoped identity
-     * deployment mounts this automatically (same pattern as Google/Microsoft).
-     * Also mounts when a credential chain reads per-user GitHub tokens, or when
-     * listed on `identity.connect`.
+     * Usually unnecessary: declaring `credentials.github(...)` on a user-scoped
+     * identity deployment mounts this automatically (same pattern as
+     * Google/Microsoft). Also mounts when a credential chain reads per-user
+     * GitHub tokens, or when listed on `identity.connect`.
      *
      * @example
      * ```ts
@@ -257,10 +213,10 @@ export interface Connect extends MarketplaceConnect {
     x: typeof xConnect;
     /**
      * Connect-with-Slack — link a caller's Slack identity via OIDC for per-user
-     * channel routing and actor mapping.
+     * Events remapping and credential resolution.
      *
      * Mounts under `/identity/slack/*` when listed on `identity.connect`, or when
-     * a Slack channel routes into a user-scoped deployment.
+     * a Slack channel routes into a user-scoped / custom-credentials deployment.
      *
      * @example
      * ```ts
@@ -286,8 +242,8 @@ export interface Connect extends MarketplaceConnect {
  *   per-actor tokens for tools, sandbox git/`gh`, or Fleet toolserver subjects.
  *
  * Authors rarely list providers by hand. Prefer inference: a user-scoped
- * identity plus `connectors.github` / `credentials.github({ read: ["user"] })`,
- * Slack Events, Google/Microsoft/LinkedIn/X toolserver connectors, or marketplace
+ * identity plus `credentials.github({ read: ["user"] })`, Slack Events,
+ * Google/Microsoft/LinkedIn/X toolserver connectors, or marketplace
  * bridges (`connectors.notion`, `connectors.neon`, …) mounts the matching
  * Connect flow automatically. Use this namespace when you need an explicit
  * opt-in or a custom options bag.

package/dist/namespaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"namespaces.d.ts","sourceRoot":"","sources":["../src/namespaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,kBAAkB,EAClB,OAAO,EACP,IAAI,EACJ,OAAO,EACP,WAAW,EACZ,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAW3C,kFAAkF;AAClF,eAAO,MAAM,SAAS;IACpB,SAAS,WACG,uBAAuB,GAChC,iBAAiB,CAAC,OAAO,gBAAgB,CAAC;CAG9C,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,kBAAkB,GAAG;IACrE,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,QAAQ,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,OAAO,QAAQ,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,OAAO,YAAY,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,OAAO,WAAW,CAAC;CAC1C,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,UACf,SAAQ,oBAAoB,EAAE,qBAAqB;IACnD;;;;;;;;;;;;;;OAcG;IACH,GAAG,EAAE,OAAO,YAAY,CAAC;IAEzB;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,EAAE,OAAO,eAAe,CAAC;IAE/B;;;;;;;;;;;;;OAaG;IACH,KAAK,EAAE,OAAO,cAAc,CAAC;IAE7B;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,EAAE,4BAA4B,CAAC;CACzC;AAgBD;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE,UAOxB,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,WAAW;IACtB,MAAM;CACP,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,OAAQ,SAAQ,kBAAkB;IACjD;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,EAAE,OAAO,aAAa,CAAC;IAE7B;;;;;;;;;;;;;;OAcG;IACH,MAAM,EAAE,OAAO,aAAa,CAAC;IAE7B;;;;;;;;;;;;;OAaG;IACH,SAAS,EAAE,OAAO,gBAAgB,CAAC;IAEnC;;;;;;;;;;;;;OAaG;IACH,QAAQ,EAAE,OAAO,eAAe,CAAC;IAEjC;;;;;;;;;;;;;OAaG;IACH,CAAC,EAAE,OAAO,QAAQ,CAAC;IAEnB;;;;;;;;;;;;;;;OAeG;IACH,KAAK,EAAE,OAAO,YAAY,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,OAAO,EAAE,OAQrB,CAAC"}
+{"version":3,"file":"namespaces.d.ts","sourceRoot":"","sources":["../src/namespaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,UACf,SAAQ,oBAAoB,EAAE,qBAAqB;IACnD;;;;;;;;;;;;;;OAcG;IACH,GAAG,EAAE,OAAO,YAAY,CAAC;IAEzB;;;;;;;;;;;;;;OAcG;IACH,KAAK,EAAE,OAAO,cAAc,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,UAAU,EAAE,UAKxB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;;;;;;;;;OAYG;IACH,KAAK,EAAE,OAAO,YAAY,CAAC;CAC5B;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,QAEtB,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,WAAW;IACtB,MAAM;CACP,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,OAAQ,SAAQ,kBAAkB;IACjD;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,EAAE,OAAO,aAAa,CAAC;IAE7B;;;;;;;;;;;;;;OAcG;IACH,MAAM,EAAE,OAAO,aAAa,CAAC;IAE7B;;;;;;;;;;;;;OAaG;IACH,SAAS,EAAE,OAAO,gBAAgB,CAAC;IAEnC;;;;;;;;;;;;;OAaG;IACH,QAAQ,EAAE,OAAO,eAAe,CAAC;IAEjC;;;;;;;;;;;;;OAaG;IACH,CAAC,EAAE,OAAO,QAAQ,CAAC;IAEnB;;;;;;;;;;;;;;;OAeG;IACH,KAAK,EAAE,OAAO,YAAY,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,OAAO,EAAE,OAQrB,CAAC"}

package/dist/namespaces.js

@@ -6,12 +6,9 @@
  * and providers can be added without growing the barrel:
  *
  * ```ts
- * connectors.slack({ on: ["app_mention"] });
- * connectors.github({
- *   repositories: [{ repo: "acme/api", path: "api" }],
- *   events: [{ on: "pull_request.opened", prompt: () => "review" }],
- * });
- * sandboxes.langsmith({ defaultTimeout: 600 });
+ * channels.slack();
+ * connectors.slack({ includeTools: ["slack_list_channels"] });
+ * defineSandbox({ defaultTimeout: 600 });
  * auth.supabase({ projectRef: "abc" });
  * credentials.github({ read: ["user"] });
  * connect.github();
@@ -24,14 +21,11 @@
  * These are the only primitives the managed runtime will mount. A project
  * cannot contribute its own — `defineExtension` stays internal.
  */
-import { LangSmithSandbox } from "deepagents";
-import { githubConnector } from "./connectors/github/index.js";
-import { annotationQueues, chatFeedback, examples, feedback, langsmithConnector, prompts, runs, threads, traceViewer, } from "./connectors/langsmith/index.js";
 import { marketplaceConnectors, } from "./connectors/marketplace/index.js";
 import { mcpConnector } from "./connectors/mcp/index.js";
+import { slackChannel } from "./channels/slack/index.js";
 import { slackConnector } from "./connectors/slack/index.js";
 import { toolServerConnectors, } from "./connectors/toolserver/index.js";
-import { defineExtension } from "./extension.js";
 import { connect as githubConnect } from "./identity/github/connect-http.js";
 import { credentials as githubCredentials } from "./identity/github/credentials.js";
 import { connect as googleConnect } from "./identity/google/connect-http.js";
@@ -40,32 +34,7 @@ import { connect as linkedinConnect } from "./identity/linkedin/connect-http.js"
 import { connect as microsoftConnect } from "./identity/microsoft/connect-http.js";
 import { connect as slackConnect } from "./identity/slack/connect-http.js";
 import { connect as xConnect } from "./identity/x/connect-http.js";
-import {} from "./sandbox.js";
 export { auth } from "./identity/index.js";
-const langsmithSandbox = defineExtension("sandbox", {
-    label: "sandboxes.langsmith",
-    provider: LangSmithSandbox,
-    // Not a schema: a sandbox's options are inferred from the provider class's
-    // own `create(...)` types, so a hand-written one would restate deepagents'
-    // surface and drift from it.
-    args: (options) => options ?? {},
-});
-/** Execution environments the agent's shell runs in. Exported from `sandbox/`. */
-export const sandboxes = {
-    langsmith(options) {
-        return langsmithSandbox(options);
-    },
-};
-const langsmithConnectors = Object.assign(langsmithConnector, {
-    runs,
-    feedback,
-    examples,
-    annotationQueues,
-    prompts,
-    threads,
-    chatFeedback,
-    traceViewer,
-});
 /**
  * Integrations: tools, HTTP routes, sandbox provisioning, inbound events, and
  * named messaging. Exported from `connectors/*`.
@@ -78,9 +47,14 @@ export const connectors = {
     ...toolServerConnectors,
     ...marketplaceConnectors,
     mcp: mcpConnector,
-    github: githubConnector,
     slack: slackConnector,
-    langsmith: langsmithConnectors,
+};
+/**
+ * Inbound messaging surfaces. Factories are assigned by reference so signatures
+ * stay in step with the channel modules. Hover docs come from {@link Channels}.
+ */
+export const channels = {
+    slack: slackChannel,
 };
 /** Third-party token resolvers. Composed into `defineIdentity({ credentials })`. */
 export const credentials = {
@@ -99,8 +73,8 @@ export const credentials = {
  *   per-actor tokens for tools, sandbox git/`gh`, or Fleet toolserver subjects.
  *
  * Authors rarely list providers by hand. Prefer inference: a user-scoped
- * identity plus `connectors.github` / `credentials.github({ read: ["user"] })`,
- * Slack Events, Google/Microsoft/LinkedIn/X toolserver connectors, or marketplace
+ * identity plus `credentials.github({ read: ["user"] })`, Slack Events,
+ * Google/Microsoft/LinkedIn/X toolserver connectors, or marketplace
  * bridges (`connectors.notion`, `connectors.neon`, …) mounts the matching
  * Connect flow automatically. Use this namespace when you need an explicit
  * opt-in or a custom options bag.

package/dist/namespaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"namespaces.js","sourceRoot":"","sources":["../src/namespaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,kBAAkB,EAClB,OAAO,EACP,IAAI,EACJ,OAAO,EACP,WAAW,GACZ,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qBAAqB,GAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,oBAAoB,GAErB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EACL,kBAAkB,GAEnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAGN,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3C,MAAM,gBAAgB,GAAG,eAAe,CAAC,SAAS,EAAE;IAClD,KAAK,EAAE,qBAAqB;IAC5B,QAAQ,EAAE,gBAAgB;IAC1B,2EAA2E;IAC3E,2EAA2E;IAC3E,6BAA6B;IAC7B,IAAI,EAAE,CAAC,OAAiC,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE;CAC3D,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,SAAS,CACP,OAAiC;QAEjC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;CACF,CAAC;AAuHF,MAAM,mBAAmB,GAAiC,MAAM,CAAC,MAAM,CACrE,kBAAkB,EAClB;IACE,IAAI;IACJ,QAAQ;IACR,QAAQ;IACR,gBAAgB;IAChB,OAAO;IACP,OAAO;IACP,YAAY;IACZ,WAAW;CACZ,CACF,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAe;IACpC,GAAG,oBAAoB;IACvB,GAAG,qBAAqB;IACxB,GAAG,EAAE,YAAY;IACjB,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE,mBAAmB;CAC/B,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAgHF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,OAAO,GAAY;IAC9B,GAAG,kBAAkB;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,gBAAgB;IAC3B,QAAQ,EAAE,eAAe;IACzB,CAAC,EAAE,QAAQ;IACX,KAAK,EAAE,YAAY;CACpB,CAAC"}
+{"version":3,"file":"namespaces.js","sourceRoot":"","sources":["../src/namespaces.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EACL,qBAAqB,GAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,oBAAoB,GAErB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,WAAW,IAAI,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EACL,kBAAkB,GAEnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAuD3C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAe;IACpC,GAAG,oBAAoB;IACvB,GAAG,qBAAqB;IACxB,GAAG,EAAE,YAAY;IACjB,KAAK,EAAE,cAAc;CACtB,CAAC;AAyBF;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAa;IAChC,KAAK,EAAE,YAAY;CACpB,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAgHF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,OAAO,GAAY;IAC9B,GAAG,kBAAkB;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,gBAAgB;IAC3B,QAAQ,EAAE,eAAe;IACzB,CAAC,EAAE,QAAQ;IACX,KAAK,EAAE,YAAY;CACpB,CAAC"}

package/dist/runtime/auth.d.ts

@@ -8,18 +8,24 @@ import { type IdentityConfig, type IdentityDefinition, type RuntimeIdentity } fr
  */
 /** Trusted-backend / channel-loopback identity headers (single source of truth). */
 export declare const USER_HEADER = "x-mda-user-id";
-/** Comma- or space-delimited group memberships. */
-export declare const GROUPS_HEADER = "x-mda-groups";
 export declare const INGRESS_SECRET_HEADER = "x-mda-ingress-secret";
 /**
- * Internal channel handoff headers. Accepted only after the ingress secret
- * validates — never part of the public HTTP identity surface, and deliberately
- * not allowlisted into `config.configurable`.
+ * Internal channel handoff headers. Accepted only after a server API key or
+ * legacy ingress secret validates — never part of the public HTTP identity
+ * surface, and deliberately not allowlisted into `config.configurable`.
  */
 export declare const SOURCE_PROVIDER_HEADER = "x-mda-source-provider";
 export declare const SOURCE_THREAD_HEADER = "x-mda-source-thread-id";
 /** Deployment env var carrying the shared secret the trusted backend presents. */
 export declare const INGRESS_SECRET_ENV = "MDA_INGRESS_SECRET";
+/** Deploy/dev-owned credential used only for internal identity handoffs. */
+export declare const HANDOFF_SECRET_ENV = "MDA_HANDOFF_SECRET";
+export declare const HANDOFF_SECRET_HEADER = "x-mda-handoff-secret";
+/** Platform-owned LangSmith auth configuration. */
+export declare const LANGSMITH_AUTH_ENDPOINT_ENV = "LANGSMITH_AUTH_ENDPOINT";
+export declare const LANGSMITH_TENANT_ID_ENV = "LANGSMITH_TENANT_ID";
+export declare const LANGSMITH_API_KEY_HEADER = "x-api-key";
+export declare const LANGSMITH_API_KEY_ENV = "LANGSMITH_API_KEY";
 /**
  * The user object `@auth.authenticate` returns. `identity`/`permissions` satisfy
  * the LangGraph base shape; the `mda_*` fields carry the identity envelope into
@@ -30,7 +36,7 @@ export interface ManagedUser {
     permissions: string[];
     mda_user_id: string;
     mda_user_email?: string;
-    /** Group memberships the ingress asserted; read-only, never an isolation key. */
+    /** Resolved group memberships; read-only, never an isolation key. */
     mda_groups?: string[];
     mda_claims?: Record<string, unknown>;
     /** Trusted source provider stamped by managed ingress (never client-supplied). */
@@ -42,10 +48,8 @@ export interface ManagedUser {
 /**
  * Build the managed LangGraph custom-auth handler from a declared identity.
  *
- * Handles both ingress modes: `trusted_backend` (reserved headers behind a
- * shared ingress secret) and `validated_token` (browser-direct IdP tokens
- * verified via JWKS / introspection / MDA-signed guest). Also registers thread
- * and store scoping with a studio bypass.
+ * Handles trusted-backend, LangSmith API-key, and validated-token ingress.
+ * Also registers thread and store scoping with a studio bypass.
  */
 export declare function buildManagedAuth(identity: IdentityDefinition): Auth;
 /**
@@ -72,11 +76,19 @@ export declare const GITHUB_CREDENTIALS_STORE_PREFIX = "mda_github_credentials";
  */
 export declare const IDENTITY_LINKS_SERVICE_USER = "mda:identity-links";
 /**
- * Fail-closed (403) unless the store `namespace` contains the caller id as a
- * contiguous ordered prefix (typically after the deployment id). No user slice
- * → no per-identity restriction.
+ * Fail-closed (403) on the managed reserved namespaces.
+ *
+ * `mda_identity_links` and `mda_github_credentials` are deployment-wide managed
+ * tables — account links and OAuth tokens for every caller — so only the trusted
+ * identity-links service principal may touch them. This check deliberately does
+ * not consult memory: it used to sit behind a per-caller memory check, which left
+ * the tables open to any authenticated caller on deployments without a user
+ * slice.
+ *
+ * There is no per-caller store partition to enforce beyond that, because no
+ * declaration mounts per-caller state in this release.
  */
-export declare function assertStoreAccess(cfg: IdentityConfig, user: ManagedUser, value: unknown): void;
+export declare function assertStoreAccess(user: ManagedUser, value: unknown): void;
 /** True when `required` appears as a contiguous ordered subsequence of `namespace`. */
 export declare function namespaceHasOrderedSegments(namespace: string[], required: string[]): boolean;
 /**
@@ -93,6 +105,8 @@ export declare function namespaceHasOrderedSegments(namespace: string[], require
  * loopback handoff — ordinary clients without the secret cannot stamp them.
  */
 export declare function resolveTrustedBackendUser(cfg: IdentityConfig, request: Request): ManagedUser;
+/** Verify a LangSmith API key without replacing MDA's authorization hooks. */
+export declare function resolveLangSmithApiKeyUser(request: Request): Promise<ManagedUser>;
 /**
  * Under `mda dev`, synthetic local/Companion service principals are unscoped
  * for thread search + store so authors can see Studio-created Local threads.
@@ -108,14 +122,12 @@ export declare function isLocalDevUnscopedUser(user: unknown): boolean;
 export declare function tryLocalDevTrustedUser(_cfg: IdentityConfig, request: Request): ManagedUser | null;
 /** Derive the owner value `@auth.on.threads` filters on (the caller user id). */
 export declare function threadOwnerKey(user: ManagedUser): string;
-/** True when this deployment exposes guest issuance and the request targets it. */
-export declare function isGuestIssuanceRequest(request: Request, cfg: IdentityConfig): boolean;
-/** True when the request targets a public connector Events ingress route. */
+/** True when the request targets a public channel/connector Events ingress route. */
 export declare function isChannelEventsRequest(request: Request): boolean;
 /** True when the request is a public identity-provider OAuth/OIDC callback. */
 export declare function isIdentityProviderCallbackRequest(request: Request): boolean;
-/** Placeholder identity so LangGraph auth middleware allows tokenless issuance. */
-export declare function guestIssuanceBypassUser(): ManagedUser;
+/** Placeholder identity so LangGraph auth middleware allows public routes. */
+export declare function publicRouteBypassUser(): ManagedUser;
 /** Placeholder identity so middleware allows provider-signed channel Events. */
 export declare function channelEventsBypassUser(): ManagedUser;
 //# sourceMappingURL=auth.d.ts.map

package/dist/runtime/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EAGL,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAO9B;;;;;GAKG;AACH,oFAAoF;AACpF,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAC3C,mDAAmD;AACnD,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAC5C,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,0BAA0B,CAAC;AAC9D,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAE7D,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AA4CvD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kFAAkF;IAClF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAmDnE;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,eAAe,CAAC,CAoB1B;AAED,uEAAuE;AACvE,eAAO,MAAM,2BAA2B,uBAAuB,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,2BAA2B,uBAAuB,CAAC;AAEhE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,OAAO,GACb,IAAI,CAkCN;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EAAE,EACnB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAeT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,WAAW,CA8Cb;AAOD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAgB7D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,OAAO,GACf,WAAW,GAAG,IAAI,CAgBpB;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAExD;AAkBD,mFAAmF;AACnF,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,cAAc,GAClB,OAAO,CAaT;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAMhE;AAED,+EAA+E;AAC/E,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAM3E;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,IAAI,WAAW,CAMrD;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,IAAI,WAAW,CAMrD"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EAGL,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAEvB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAI9B;;;;;GAKG;AACH,oFAAoF;AACpF,eAAO,MAAM,WAAW,kBAAkB,CAAC;AAC3C,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAC5D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,0BAA0B,CAAC;AAC9D,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAE7D,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAE5D,mDAAmD;AACnD,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AACrE,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,wBAAwB,cAAc,CAAC;AACpD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AA+CzD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kFAAkF;IAClF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAuDnE;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,eAAe,CAAC,CA4B1B;AAED,uEAAuE;AACvE,eAAO,MAAM,2BAA2B,uBAAuB,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,2BAA2B,uBAAuB,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAqBzE;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EAAE,EACnB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAeT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,OAAO,GACf,WAAW,CASb;AA4FD,8EAA8E;AAC9E,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,WAAW,CAAC,CA+EtB;AAiBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAgB7D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,OAAO,GACf,WAAW,GAAG,IAAI,CASpB;AAYD,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAExD;AAkBD,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAQhE;AAED,+EAA+E;AAC/E,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAM3E;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,IAAI,WAAW,CAMnD;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,IAAI,WAAW,CAMrD"}