managed-deepagents 0.9.2-dev.8 → 0.10.0-dev.1

package/dist/channels/github/index.js

@@ -0,0 +1,336 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { channelThreadId, httpChannel, } from "../http/index.js";
+import { isJsonValue } from "../message-schema.js";
+import { immutableCopy } from "../runtime.js";
+import { logger } from "../../runtime/log.js";
+import { ConnectionNotFoundError, DEPLOYMENT_ID_ENV, connections, } from "../../connections.js";
+import { GITHUB_TOKEN_SLUG, githubAppConnectionSlug } from "./connections.js";
+import { managedDeploymentName } from "../../runtime/sandbox-manager.js";
+import { SUPPORTED_EVENT_KEYS, githubReceiptSchema, githubIdentifierSchema, githubEventSchema, } from "./schema.js";
+/** Adapt verified GitHub events into HTTP channel messages or skips. */
+export function githubChannel(options = {}) {
+    const handlers = { ...options.onEvent };
+    // A misspelled option would silently widen what the agent's token reaches.
+    const unknown = Object.keys(options.app ?? {}).filter((key) => key !== "permissions" && key !== "repositories");
+    if (unknown.length)
+        throw new TypeError(`unknown GitHub app option ${unknown.join(", ")}; use permissions or repositories`);
+    // GitHub names are case-insensitive; deploy validates the rest.
+    const repositories = options.app?.repositories?.map((repository) => repository.trim().toLowerCase());
+    if (repositories?.length === 0)
+        throw new TypeError("GitHub app.repositories must list at least one repository; omit it to allow every repository");
+    const channel = httpChannel({
+        provider: "github",
+        ...(options.multitaskStrategy && {
+            multitaskStrategy: options.multitaskStrategy,
+        }),
+        providerConfig: {
+            // Deploy subscribes the GitHub App to the handled events.
+            events: subscribedEvents(handlers),
+            ...(options.app && { app: appConfig(options.app) }),
+        },
+        verify: verifyGitHubRequest,
+        parse: (context) => parseGitHubRequest(context, handlers, channelName(channel), repositories),
+        input: (_message, rawEvent) => handlerInput(handlers, rawEvent, channelName(channel), false),
+        // Only for an event its handler would act on, so the handler's filters,
+        // such as trusted senders or mentions, decide who gets a notice. The
+        // handler knows it is only asked, so it can skip side effects.
+        onPaused: async (target, run) => {
+            if ((await handlerInput(handlers, run.rawEvent, channelName(channel), true)) === undefined)
+                return;
+            await postPausedNotice(target, run);
+        },
+    });
+    return channel;
+}
+function channelName(channel) {
+    return channel.name ?? channel.kind;
+}
+/** The events deploy subscribes the App to: the handled ones. */
+function subscribedEvents(handlers) {
+    return Object.keys(handlers)
+        .filter((key) => handlers[key] !== undefined)
+        .sort();
+}
+/** The App options deploy reads, without unset fields. */
+function appConfig(app) {
+    return Object.fromEntries(Object.entries({
+        permissions: app.permissions && { ...app.permissions },
+        repositories: app.repositories && [...app.repositories],
+    }).filter(([, value]) => value !== undefined));
+}
+/** How long a value read from Agent Auth is reused before it is read again. */
+const APP_VALUE_TTL_MS = 5 * 60_000;
+/** How long a missing value is remembered, so unsigned traffic can't hammer Agent Auth. */
+const MISSING_APP_VALUE_TTL_MS = 60_000;
+const appValues = new Map();
+/**
+ * The App's webhook secret or bot ID: the `GH_*` env override when set,
+ * otherwise the agent secret Agent Auth stored when `mda deploy` created the
+ * App, at `mda/github-app/{deployment}/{suffix}`. Only a missing connection
+ * reads as `undefined`; credential store failures propagate.
+ */
+async function gitHubAppValue(envKey, suffix) {
+    const override = process.env[envKey]?.trim();
+    if (override)
+        return override;
+    const deploymentId = process.env[DEPLOYMENT_ID_ENV]?.trim();
+    if (!deploymentId)
+        return undefined;
+    const slug = githubAppConnectionSlug(deploymentId, suffix);
+    const cached = appValues.get(slug);
+    if (cached && cached.expiresAt > Date.now())
+        return cached.value;
+    // Concurrent deliveries share the in-flight read.
+    const entry = {
+        value: connections.resolveDeploymentSecret(slug).catch((error) => {
+            if (error instanceof ConnectionNotFoundError) {
+                entry.expiresAt = Date.now() + MISSING_APP_VALUE_TTL_MS;
+                logger.error(`GitHub App ${suffix} is not stored in Agent Auth`);
+                return undefined;
+            }
+            // Read again on the next delivery rather than caching a failure.
+            if (appValues.get(slug) === entry)
+                appValues.delete(slug);
+            throw error;
+        }),
+        expiresAt: Date.now() + APP_VALUE_TTL_MS,
+    };
+    appValues.set(slug, entry);
+    return entry.value;
+}
+/** Forget values read from Agent Auth; for tests. */
+export function resetGitHubAppValues() {
+    appValues.clear();
+}
+async function verifyGitHubRequest({ request, rawBody, }) {
+    // GitHub pings a new App before Agent Auth has its webhook secret, and a
+    // ping starts nothing, so it needs no secret. Reading it here would also
+    // remember the secret as missing and reject the first real events.
+    if (request.headers.get("x-github-event") === "ping")
+        return true;
+    // Reject unsigned deliveries before reading the secret from Agent Auth.
+    const signature = request.headers.get("x-hub-signature-256") ?? "";
+    if (!/^sha256=[a-fA-F0-9]{64}$/.test(signature))
+        return false;
+    const secret = await gitHubAppValue("GH_WEBHOOK_SECRET", "webhook-secret");
+    if (!secret)
+        return false;
+    return timingSafeEqual(createHmac("sha256", secret).update(rawBody).digest(), Buffer.from(signature.slice(7), "hex"));
+}
+const EVENT_KEYS = new Set(SUPPORTED_EVENT_KEYS);
+async function parseGitHubRequest({ request }, handlers, channelName, repositories) {
+    const envelope = githubReceiptSchema.parse({
+        event: request.headers.get("x-github-event"),
+        deliveryId: request.headers.get("x-github-delivery"),
+        payload: await request.json(),
+    });
+    const { event, deliveryId, payload } = envelope;
+    logReceipt(envelope);
+    const response = Response.json({ status: "received" }, { status: event === "ping" ? 200 : 202 });
+    // Events nothing handles stop here, before run creation.
+    // Events without an action, such as `push`, are keyed by their name.
+    const key = (payload.action === undefined ? event : `${event}.${payload.action}`);
+    if (!Object.hasOwn(handlers, key) || handlers[key] === undefined)
+        return { type: "ignore", response };
+    const parsedEvent = githubEventSchema.parse({ key, payload, deliveryId });
+    // Events from repositories the channel is not limited to start nothing.
+    if (repositories &&
+        !repositories.includes(parsedEvent.repository.fullName.toLowerCase()))
+        return { type: "ignore", response };
+    // Ignore the App's own activity to avoid triggering ourselves.
+    const configuredBotId = (await gitHubAppValue("GH_APP_BOT_ID", "bot-id")) ?? "";
+    if (!/^[1-9][0-9]*$/.test(configuredBotId))
+        throw new TypeError("GitHub App bot ID is unavailable; run `mda deploy` to store it or set GH_APP_BOT_ID");
+    const botId = githubIdentifierSchema.parse(Number(configuredBotId));
+    if (parsedEvent.sender.id === botId)
+        return { type: "ignore", response };
+    // Preserve the original event even if a callback modifies its argument.
+    if (!isJsonValue(parsedEvent))
+        throw new TypeError("invalid GitHub event");
+    const eventSnapshot = immutableCopy(parsedEvent);
+    // One thread per issue or pull request, so the agent keeps the
+    // conversation. Other events get their own thread, keyed by the delivery so
+    // a redelivery still finds the run it started.
+    const number = conversationNumber(parsedEvent);
+    const threadId = channelThreadId(channelName, number === undefined
+        ? `delivery/${deliveryId}`
+        : `${parsedEvent.repository.id}/${number}`);
+    const target = number === undefined
+        ? null
+        : { repository: parsedEvent.repository.fullName, number };
+    // What the run starts with is decided once MDA knows the thread takes a
+    // new turn.
+    return {
+        type: "message",
+        message: {
+            threadId,
+            userId: "mda:channel",
+            target,
+            deliveryKey: deliveryId,
+        },
+        rawEvent: eventSnapshot,
+        response,
+    };
+}
+/** What the event's handler starts a run with; `undefined` when it skips or fails. */
+async function handlerInput(handlers, rawEvent, channelName, paused) {
+    const event = githubEvent(rawEvent);
+    const handler = event && Object.hasOwn(handlers, event.key)
+        ? handlers[event.key]
+        : undefined;
+    if (!event || !handler)
+        return undefined;
+    const receipt = {
+        event: logger.logIdentifier(event.key),
+        deliveryId: logger.logIdentifier(event.deliveryId),
+    };
+    try {
+        const input = await handler(event, {
+            channel: { name: channelName },
+            ...(paused && { paused: true }),
+        });
+        if (input === undefined || input === null)
+            return undefined;
+        logger.info(`GitHub handler returned run input ${JSON.stringify(receipt)}`);
+        return input;
+    }
+    catch (error) {
+        logger.error(`github callback failed ${JSON.stringify(receipt)} (${logger.safeErrorLabel(error)})`);
+        return undefined;
+    }
+}
+/** The parsed event a delivery carries, as handlers may change it. */
+function githubEvent(rawEvent) {
+    if (!rawEvent || typeof rawEvent !== "object" || Array.isArray(rawEvent))
+        return undefined;
+    const event = structuredClone(rawEvent);
+    return EVENT_KEYS.has(event.key) ? event : undefined;
+}
+/** The issue or pull request an event is about, if any. */
+function conversationNumber(event) {
+    const payload = event.payload;
+    for (const subject of ["issue", "pull_request"]) {
+        const number = payload[subject]
+            ?.number;
+        if (isIssueNumber(number))
+            return number;
+    }
+    // A CI run belongs to a pull request only when it ran for exactly one.
+    for (const run of ["workflow_run", "check_run", "check_suite"]) {
+        const pullRequests = payload[run]?.pull_requests;
+        if (Array.isArray(pullRequests) && pullRequests.length === 1) {
+            const number = pullRequests[0]?.number;
+            if (isIssueNumber(number))
+                return number;
+        }
+    }
+    return undefined;
+}
+function isIssueNumber(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+const REPOSITORY_PATTERN = /^[A-Za-z0-9-]+\/[A-Za-z0-9._-]+$/;
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const DEPLOYMENT_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+const GITHUB_API_TIMEOUT_MS = 10_000;
+/**
+ * The thread waits on an interrupt, so tell the issue or pull request where
+ * to continue it. Posts as the App; the notice is fixed text.
+ */
+async function postPausedNotice(target, run) {
+    if (!isGitHubTarget(target))
+        return;
+    const url = studioUrl(run);
+    const studio = url ? `[LangSmith Studio](${url})` : "LangSmith Studio";
+    const [owner, name] = target.repository.split("/");
+    const token = await connections.resolveDeploymentSecret(GITHUB_TOKEN_SLUG);
+    const response = await fetch(`https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/issues/${target.number}/comments`, {
+        method: "POST",
+        headers: {
+            Accept: "application/vnd.github+json",
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+            "X-GitHub-Api-Version": "2022-11-28",
+        },
+        body: JSON.stringify({
+            body: `I'm waiting for a decision on an earlier step in this conversation, so I haven't read this yet. Review the pending step in ${studio}, then comment again.`,
+        }),
+        signal: AbortSignal.timeout(GITHUB_API_TIMEOUT_MS),
+    });
+    if (!response.ok)
+        throw new Error(`GitHub refused the paused notice (HTTP ${response.status})`);
+}
+/**
+ * The thread in the deployment's Studio, or the deployment's page when the
+ * deployment's name or the thread's assistant is unknown. The LangSmith UI is
+ * the one `mda deploy` recorded for the deployment's environment
+ * (`MDA_LANGSMITH_URL`); without it there is nothing to link to.
+ */
+export function studioUrl(run, env = process.env) {
+    const workspace = env.LANGSMITH_TENANT_ID?.trim() ?? "";
+    const deployment = env[DEPLOYMENT_ID_ENV]?.trim() ?? "";
+    if (!UUID_PATTERN.test(workspace) || !UUID_PATTERN.test(deployment))
+        return undefined;
+    const origin = parseHttpUrl(env.MDA_LANGSMITH_URL)?.origin;
+    if (!origin)
+        return undefined;
+    const name = managedDeploymentName(env);
+    const { threadId, assistantId } = run ?? {};
+    if (!name ||
+        !DEPLOYMENT_NAME_PATTERN.test(name) ||
+        !threadId ||
+        !UUID_PATTERN.test(threadId) ||
+        !assistantId ||
+        !UUID_PATTERN.test(assistantId))
+        return `${origin}/o/${workspace}/host/deployments/${deployment}`;
+    const query = new URLSearchParams({
+        organizationId: workspace,
+        render: "interact",
+        hostProjectId: deployment,
+        assistantId,
+        mode: "chat",
+        threadId,
+    });
+    return `${origin}/o/${workspace}/a/${encodeURIComponent(name)}/studio/thread?${query}`;
+}
+function parseHttpUrl(value) {
+    if (!value?.trim())
+        return undefined;
+    try {
+        const url = new URL(value.trim());
+        return url.protocol === "https:" || url.protocol === "http:"
+            ? url
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isGitHubTarget(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const { repository, number } = value;
+    return (typeof repository === "string" &&
+        REPOSITORY_PATTERN.test(repository) &&
+        isIssueNumber(number));
+}
+function logReceipt({ event, deliveryId, payload, }) {
+    const receipt = {
+        event: logger.logIdentifier(event),
+        deliveryId: logger.logIdentifier(deliveryId),
+    };
+    if (payload.action !== undefined)
+        receipt.action = logger.logIdentifier(payload.action);
+    for (const [key, field] of [
+        ["repository", "id"],
+        ["issue", "number"],
+        ["pull_request", "number"],
+    ]) {
+        const id = payload[key]?.[field];
+        if (typeof id === "number")
+            receipt[key] = id;
+    }
+    logger.info(`github receipt ${JSON.stringify(receipt)}`);
+    return receipt;
+}
+//# sourceMappingURL=index.js.map

package/dist/channels/github/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/channels/github/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG1D,OAAO,EACL,eAAe,EACf,WAAW,GAKZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAuBrB,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,OAAO,GAAyB,EAAE;IAC9D,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACxC,2EAA2E;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,cAAc,CACzD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM;QAChB,MAAM,IAAI,SAAS,CACjB,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CACnF,CAAC;IACJ,gEAAgE;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACjE,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAChC,CAAC;IACF,IAAI,YAAY,EAAE,MAAM,KAAK,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,8FAA8F,CAC/F,CAAC;IAEJ,MAAM,OAAO,GAAG,WAAW,CAAC;QAC1B,QAAQ,EAAE,QAAQ;QAClB,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI;YAC/B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C,CAAC;QACF,cAAc,EAAE;YACd,0DAA0D;YAC1D,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC;YAClC,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;SACpD;QACD,MAAM,EAAE,mBAAmB;QAC3B,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACjB,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;QAC3E,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAC5B,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;QAC/D,wEAAwE;QACxE,qEAAqE;QACrE,+DAA+D;QAC/D,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAC9B,IACE,CAAC,MAAM,YAAY,CACjB,QAAQ,EACR,GAAG,CAAC,QAAQ,EACZ,WAAW,CAAC,OAAO,CAAC,EACpB,IAAI,CACL,CAAC,KAAK,SAAS;gBAEhB,OAAO;YACT,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;KACF,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAoB;IACvC,OAAO,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;AACtC,CAAC;AAED,iEAAiE;AACjE,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAwB,CAAC,KAAK,SAAS,CAAC;SACjE,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,GAAqB;IACtC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC;QACb,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE;QACtD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;KACxD,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAChC,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC;AACpC,2FAA2F;AAC3F,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAExC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;AAE9C;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAC3B,MAA6C,EAC7C,MAAmC;IAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,IAAI,GAAG,uBAAuB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACjE,kDAAkD;IAClD,MAAM,KAAK,GAAa;QACtB,KAAK,EAAE,WAAW,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/D,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,wBAAwB,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,8BAA8B,CAAC,CAAC;gBACjE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,iEAAiE;YACjE,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK;gBAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC,CAAC;QACF,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB;KACzC,CAAC;IACF,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,oBAAoB;IAClC,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EACjC,OAAO,EACP,OAAO,GACY;IACnB,yEAAyE;IACzE,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClE,wEAAwE;IACxE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,OAAO,eAAe,CACpB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EACrD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAEtE,KAAK,UAAU,kBAAkB,CAC/B,EAAE,OAAO,EAAsB,EAC/B,QAAkB,EAClB,WAAmB,EACnB,YAAkC;IAElC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC;QACzC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC5C,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAChD,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAC5B,EAAE,MAAM,EAAE,UAAU,EAAE,EACtB,EAAE,MAAM,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CACzC,CAAC;IAEF,yDAAyD;IACzD,qEAAqE;IACrE,MAAM,GAAG,GAAG,CACV,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAC/C,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;QAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEtC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAE1E,wEAAwE;IACxE,IACE,YAAY;QACZ,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAErE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEtC,+DAA+D;IAC/D,MAAM,eAAe,GACnB,CAAC,MAAM,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC;QACxC,MAAM,IAAI,SAAS,CACjB,qFAAqF,CACtF,CAAC;IACJ,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACpE,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEzE,wEAAwE;IACxE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAEjD,+DAA+D;IAC/D,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,eAAe,CAC9B,WAAW,EACX,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,YAAY,UAAU,EAAE;QAC1B,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,MAAM,EAAE,CAC7C,CAAC;IACF,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9D,wEAAwE;IACxE,YAAY;IACZ,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,QAAQ;YACR,MAAM,EAAE,aAAa;YACrB,MAAM;YACN,WAAW,EAAE,UAAU;SACxB;QACD,QAAQ,EAAE,aAAa;QACvB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,YAAY,CACzB,QAAkB,EAClB,QAA+B,EAC/B,WAAmB,EACnB,MAAe;IAEf,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GACX,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC;QACzC,CAAC,CAAE,QAAQ,CAAC,KAAK,CAAC,GAAwB,CAE1B;QAChB,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QACtC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;KACnD,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAc,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC9B,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,0BAA0B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CACtF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,QAA+B;IAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAA2B,CAAC;IAClE,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,2DAA2D;AAC3D,SAAS,kBAAkB,CACzB,KAAwC;IAExC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;IACzD,KAAK,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAI,OAAO,CAAC,OAAO,CAAsC;YACnE,EAAE,MAAM,CAAC;QACX,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAC3C,CAAC;IACD,uEAAuE;IACvE,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;QAC/D,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CACZ,EAAE,aAAa,CAAC;QACjB,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAI,YAAY,CAAC,CAAC,CAAiC,EAAE,MAAM,CAAC;YACxE,IAAI,aAAa,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC/E,CAAC;AAKD,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAC9D,MAAM,YAAY,GAChB,iEAAiE,CAAC;AACpE,MAAM,uBAAuB,GAAG,oCAAoC,CAAC;AACrE,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAiB,EACjB,GAAuB;IAEvB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO;IACpC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACvE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,gCAAgC,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,WAAW,EACxH;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,sBAAsB,EAAE,YAAY;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI,EAAE,8HAA8H,MAAM,uBAAuB;SAClK,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACnD,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,CAAC,MAAM,GAAG,CAC7D,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,GAAmC,EACnC,GAAG,GAAG,OAAO,CAAC,GAAG;IAEjB,MAAM,SAAS,GAAG,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,UAAU,GAAG,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,GAAG,IAAI,EAAE,CAAC;IAC5C,IACE,CAAC,IAAI;QACL,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,CAAC,QAAQ;QACT,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC5B,CAAC,WAAW;QACZ,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC;QAE/B,OAAO,GAAG,MAAM,MAAM,SAAS,qBAAqB,UAAU,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,cAAc,EAAE,SAAS;QACzB,MAAM,EAAE,UAAU;QAClB,aAAa,EAAE,UAAU;QACzB,WAAW;QACX,IAAI,EAAE,MAAM;QACZ,QAAQ;KACT,CAAC,CAAC;IACH,OAAO,GAAG,MAAM,MAAM,SAAS,MAAM,kBAAkB,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;YAC1D,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAgC,CAAC;IAChE,OAAO,CACL,OAAO,UAAU,KAAK,QAAQ;QAC9B,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;QACnC,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,EAClB,KAAK,EACL,UAAU,EACV,OAAO,GAC6B;IACpC,MAAM,OAAO,GAAoC;QAC/C,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;KAC7C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAC9B,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI;QACzB,CAAC,YAAY,EAAE,IAAI,CAAC;QACpB,CAAC,OAAO,EAAE,QAAQ,CAAC;QACnB,CAAC,cAAc,EAAE,QAAQ,CAAC;KAClB,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC"}