managed-deepagents 0.9.4-dev.9 → 0.10.0-dev.10

package/dist/channels/github/index.js

@@ -0,0 +1,268 @@
+import { channelThreadId, httpChannel, } from "../http/index.js";
+import { channelName, checkEventKeys, definedFields, eventSnapshot, handledEventKeys, readDeploymentSecret, resetDeploymentSecrets, resolveEndpoints, runEventHandler, settleEvents, verifyHmacSha256, } from "../http/provider.js";
+import { interruptedNotice } from "../http/studio.js";
+import { logger } from "../../runtime/log.js";
+import { connections } from "../../connections.js";
+import { ConnectionsNotConfiguredError } from "../../agent-auth.js";
+import { GITHUB_TOKEN_SLUG, githubAppConnectionSlug } from "./connections.js";
+import { SUPPORTED_EVENT_KEYS, githubReceiptSchema, githubIdentifierSchema, githubEventSchema, } from "./schema.js";
+const EVENT_KEYS = new Set(SUPPORTED_EVENT_KEYS);
+/** Adapt verified GitHub events into HTTP channel messages or skips. */
+export function githubChannel(options = {}) {
+    const handlers = resolveEndpoints("GitHub", options.onEvent);
+    checkEventKeys("GitHub", handlers, EVENT_KEYS);
+    // A misspelled option would silently widen what the agent's token reaches.
+    const unknown = Object.keys(options.app ?? {}).filter((key) => key !== "permissions" && key !== "repositories");
+    if (unknown.length)
+        throw new TypeError(`unknown GitHub app option ${unknown.join(", ")}; use permissions or repositories`);
+    // GitHub names are case-insensitive; deploy validates the rest.
+    const repositories = options.app?.repositories?.map((repository) => repository.trim().toLowerCase());
+    if (repositories?.length === 0)
+        throw new TypeError("GitHub app.repositories must list at least one repository; omit it to allow every repository");
+    const channel = httpChannel({
+        provider: "github",
+        ...(options.multitaskStrategy && {
+            multitaskStrategy: options.multitaskStrategy,
+        }),
+        providerConfig: {
+            // Deploy subscribes the GitHub App to the handled events.
+            events: handledEventKeys(handlers),
+            ...(options.app && { app: appConfig(options.app) }),
+        },
+        verify: verifyGitHubRequest,
+        parse: (context) => parseGitHubRequest(context, handlers, channelName(channel), repositories),
+        input: (message, rawEvent) => handlerInput(handlers, rawEvent, {
+            id: message.threadId,
+            channel: { name: channelName(channel) },
+        }),
+        onSettled: settleEvents((target, delivery) => notifyInterrupted(handlers, target, delivery, channelName(channel)), options.onSettled, githubEvent, () => channelName(channel)),
+    });
+    return channel;
+}
+/**
+ * Tell the issue or pull request when its thread waits on a decision. Only
+ * for an event its handler would act on, so the handler's filters, such as
+ * trusted senders or mentions, decide who gets a notice. The handler knows it
+ * is only asked, so it can skip side effects.
+ */
+async function notifyInterrupted(handlers, target, delivery, name) {
+    const { type } = delivery.outcome;
+    if (type !== "interrupted" && type !== "waiting")
+        return;
+    if ((await handlerInput(handlers, delivery.rawEvent, {
+        id: delivery.threadId,
+        channel: { name },
+        interrupted: true,
+    })) === undefined)
+        return;
+    await postInterruptedNotice(target, delivery, type);
+}
+/** The App options deploy reads, without unset fields. */
+function appConfig(app) {
+    return definedFields({
+        permissions: app.permissions && { ...app.permissions },
+        repositories: app.repositories && [...app.repositories],
+    });
+}
+/**
+ * The App's webhook secret or bot ID: the `GH_*` env override when set,
+ * otherwise the agent secret Agent Auth stored when `mda deploy` created the
+ * App, at `mda/github-app/{deployment}/{suffix}`. Only a missing connection
+ * reads as `undefined`; credential store failures propagate.
+ */
+function gitHubAppValue(envKey, suffix) {
+    return readDeploymentSecret(envKey, (deploymentId) => githubAppConnectionSlug(deploymentId, suffix), `GitHub App ${suffix}`);
+}
+/** Forget values read from Agent Auth; for tests. */
+export function resetGitHubAppValues() {
+    resetDeploymentSecrets();
+}
+/** GitHub's delivery ID for a log line, or `unknown` when it is not one. */
+function deliveryLabel(deliveryId) {
+    return deliveryId && /^[0-9a-fA-F-]{1,64}$/.test(deliveryId)
+        ? deliveryId
+        : "unknown";
+}
+async function verifyGitHubRequest({ request, rawBody, }) {
+    // GitHub pings a new App before Agent Auth has its webhook secret, and a
+    // ping starts nothing, so it needs no secret. Reading it here would also
+    // remember the secret as missing and reject the first real events.
+    if (request.headers.get("x-github-event") === "ping")
+        return true;
+    // Reject unsigned deliveries before reading the secret from Agent Auth.
+    const signature = request.headers.get("x-hub-signature-256") ?? "";
+    if (!/^sha256=[a-fA-F0-9]{64}$/.test(signature))
+        return false;
+    let secret;
+    try {
+        secret = await gitHubAppValue("GH_WEBHOOK_SECRET", "webhook-secret");
+    }
+    catch (error) {
+        if (error instanceof ConnectionsNotConfiguredError) {
+            // The message names only the missing setting, so it is safe to log.
+            logger.error(`GitHub delivery ${deliveryLabel(request.headers.get("x-github-delivery"))} ` +
+                `cannot be verified: ${error.message}`);
+        }
+        throw error;
+    }
+    if (!secret)
+        return false;
+    return verifyHmacSha256(secret, rawBody, signature.slice(7));
+}
+async function parseGitHubRequest({ request }, handlers, channelName, repositories) {
+    const envelope = githubReceiptSchema.parse({
+        event: request.headers.get("x-github-event"),
+        deliveryId: request.headers.get("x-github-delivery"),
+        payload: await request.json(),
+    });
+    const { event, deliveryId, payload } = envelope;
+    logReceipt(envelope);
+    const response = Response.json({ status: "received" }, { status: event === "ping" ? 200 : 202 });
+    // Events nothing handles stop here, before run creation.
+    // Events without an action, such as `push`, are keyed by their name.
+    const key = (payload.action === undefined ? event : `${event}.${payload.action}`);
+    if (!Object.hasOwn(handlers, key) || handlers[key] === undefined)
+        return { type: "ignore", response };
+    const parsedEvent = githubEventSchema.parse({ key, payload, deliveryId });
+    // Events from repositories the channel is not limited to start nothing.
+    if (repositories &&
+        !repositories.includes(parsedEvent.repository.fullName.toLowerCase()))
+        return { type: "ignore", response };
+    // Ignore the App's own activity to avoid triggering ourselves.
+    const configuredBotId = (await gitHubAppValue("GH_APP_BOT_ID", "bot-id")) ?? "";
+    if (!/^[1-9][0-9]*$/.test(configuredBotId))
+        throw new TypeError("GitHub App bot ID is unavailable; run `mda deploy` to store it or set GH_APP_BOT_ID");
+    const botId = githubIdentifierSchema.parse(Number(configuredBotId));
+    if (parsedEvent.sender.id === botId)
+        return { type: "ignore", response };
+    // Preserve the original event even if a callback modifies its argument.
+    const snapshot = eventSnapshot(parsedEvent, "GitHub");
+    // One thread per issue or pull request, so the agent keeps the
+    // conversation. Other events get their own thread, keyed by the delivery so
+    // a redelivery still finds the run it started.
+    const number = conversationNumber(parsedEvent);
+    const threadId = channelThreadId(channelName, number === undefined
+        ? `delivery/${deliveryId}`
+        : `${parsedEvent.repository.id}/${number}`);
+    const target = number === undefined
+        ? null
+        : { repository: parsedEvent.repository.fullName, number };
+    // What the run starts with is decided once MDA knows the thread takes a
+    // new turn.
+    return {
+        type: "message",
+        message: {
+            threadId,
+            userId: senderUserId(parsedEvent.sender),
+            target,
+            deliveryKey: deliveryId,
+        },
+        rawEvent: snapshot,
+        response,
+    };
+}
+/**
+ * Who the run acts for. GitHub signs each delivery, so its sender is verified:
+ * a person acts as `github:<id>`, by the numeric ID that outlives login
+ * renames, and gets their own user memory where the agent allows it. Bots and
+ * organizations run as the channel.
+ */
+function senderUserId(sender) {
+    return sender.type === "User" ? `github:${sender.id}` : "mda:channel";
+}
+/** What the event's handler starts a run with; `undefined` when it skips or fails. */
+async function handlerInput(handlers, rawEvent, thread) {
+    const event = githubEvent(rawEvent);
+    const handler = event && Object.hasOwn(handlers, event.key)
+        ? handlers[event.key]
+        : undefined;
+    if (!event || !handler)
+        return undefined;
+    const outcome = await runEventHandler("GitHub", event, () => handler(event, thread));
+    return outcome.type === "input" ? outcome.input : undefined;
+}
+/** The parsed event a delivery carries, as handlers may change it. */
+function githubEvent(rawEvent) {
+    if (!rawEvent || typeof rawEvent !== "object" || Array.isArray(rawEvent))
+        return undefined;
+    const event = structuredClone(rawEvent);
+    return EVENT_KEYS.has(event.key) ? event : undefined;
+}
+/** The issue or pull request an event is about, if any. */
+function conversationNumber(event) {
+    const payload = event.payload;
+    for (const subject of ["issue", "pull_request"]) {
+        const number = payload[subject]
+            ?.number;
+        if (isIssueNumber(number))
+            return number;
+    }
+    // A CI run belongs to a pull request only when it ran for exactly one.
+    for (const run of ["workflow_run", "check_run", "check_suite"]) {
+        const pullRequests = payload[run]?.pull_requests;
+        if (Array.isArray(pullRequests) && pullRequests.length === 1) {
+            const number = pullRequests[0]?.number;
+            if (isIssueNumber(number))
+                return number;
+        }
+    }
+    return undefined;
+}
+function isIssueNumber(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+const REPOSITORY_PATTERN = /^[A-Za-z0-9-]+\/[A-Za-z0-9._-]+$/;
+const GITHUB_API_TIMEOUT_MS = 10_000;
+/**
+ * The thread waits on an interrupt, so tell the issue or pull request where
+ * to continue it. Posts as the App; the notice is fixed text.
+ */
+async function postInterruptedNotice(target, delivery, outcome) {
+    if (!isGitHubTarget(target))
+        return;
+    const [owner, name] = target.repository.split("/");
+    const token = await connections.resolveDeploymentSecret(GITHUB_TOKEN_SLUG);
+    const response = await fetch(`https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/issues/${target.number}/comments`, {
+        method: "POST",
+        headers: {
+            Accept: "application/vnd.github+json",
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+            "X-GitHub-Api-Version": "2022-11-28",
+        },
+        body: JSON.stringify({
+            body: interruptedNotice(outcome, delivery, "comment again"),
+        }),
+        signal: AbortSignal.timeout(GITHUB_API_TIMEOUT_MS),
+    });
+    if (!response.ok)
+        throw new Error(`GitHub refused the interrupted notice (HTTP ${response.status})`);
+}
+function isGitHubTarget(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const { repository, number } = value;
+    return (typeof repository === "string" &&
+        REPOSITORY_PATTERN.test(repository) &&
+        isIssueNumber(number));
+}
+function logReceipt({ event, deliveryId, payload, }) {
+    const receipt = {
+        event: logger.logIdentifier(event),
+        deliveryId: logger.logIdentifier(deliveryId),
+    };
+    if (payload.action !== undefined)
+        receipt.action = logger.logIdentifier(payload.action);
+    for (const [key, field] of [
+        ["repository", "id"],
+        ["issue", "number"],
+        ["pull_request", "number"],
+    ]) {
+        const id = payload[key]?.[field];
+        if (typeof id === "number")
+            receipt[key] = id;
+    }
+    logger.info(`github receipt ${JSON.stringify(receipt)}`);
+    return receipt;
+}
+//# sourceMappingURL=index.js.map

package/dist/channels/github/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/channels/github/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,EACf,WAAW,GAMZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,WAAW,EACX,cAAc,EACd,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAyBrB,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAEtE,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,OAAO,GAAyB,EAAE;IAC9D,MAAM,QAAQ,GAAa,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/C,2EAA2E;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,cAAc,CACzD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM;QAChB,MAAM,IAAI,SAAS,CACjB,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CACnF,CAAC;IACJ,gEAAgE;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACjE,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAChC,CAAC;IACF,IAAI,YAAY,EAAE,MAAM,KAAK,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,8FAA8F,CAC/F,CAAC;IAEJ,MAAM,OAAO,GAAG,WAAW,CAAC;QAC1B,QAAQ,EAAE,QAAQ;QAClB,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI;YAC/B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C,CAAC;QACF,cAAc,EAAE;YACd,0DAA0D;YAC1D,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC;YAClC,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;SACpD;QACD,MAAM,EAAE,mBAAmB;QAC3B,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACjB,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;QAC3E,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAC3B,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE;YAC/B,EAAE,EAAE,OAAO,CAAC,QAAQ;YACpB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;SACxC,CAAC;QACJ,SAAS,EAAE,YAAY,CACrB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CACnB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,EACrE,OAAO,CAAC,SAAS,EACjB,WAAW,EACX,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAC3B;KACF,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC9B,QAAkB,EAClB,MAAiB,EACjB,QAA6B,EAC7B,IAAY;IAEZ,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC;IAClC,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IACzD,IACE,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;QAC/C,EAAE,EAAE,QAAQ,CAAC,QAAQ;QACrB,OAAO,EAAE,EAAE,IAAI,EAAE;QACjB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC,KAAK,SAAS;QAEjB,OAAO;IACT,MAAM,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,GAAqB;IACtC,OAAO,aAAa,CAAC;QACnB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE;QACtD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,MAA6C,EAC7C,MAAmC;IAEnC,OAAO,oBAAoB,CACzB,MAAM,EACN,CAAC,YAAY,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY,EAAE,MAAM,CAAC,EAC/D,cAAc,MAAM,EAAE,CACvB,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,oBAAoB;IAClC,sBAAsB,EAAE,CAAC;AAC3B,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,UAAyB;IAC9C,OAAO,UAAU,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC;QAC1D,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EACjC,OAAO,EACP,OAAO,GACY;IACnB,yEAAyE;IACzE,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClE,wEAAwE;IACxE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,cAAc,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;YACnD,oEAAoE;YACpE,MAAM,CAAC,KAAK,CACV,mBAAmB,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,GAAG;gBAC3E,uBAAuB,KAAK,CAAC,OAAO,EAAE,CACzC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,OAAO,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,EAAE,OAAO,EAAsB,EAC/B,QAAkB,EAClB,WAAmB,EACnB,YAAkC;IAElC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC;QACzC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC5C,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAChD,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAC5B,EAAE,MAAM,EAAE,UAAU,EAAE,EACtB,EAAE,MAAM,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CACzC,CAAC;IAEF,yDAAyD;IACzD,qEAAqE;IACrE,MAAM,GAAG,GAAG,CACV,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAC/C,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;QAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEtC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAE1E,wEAAwE;IACxE,IACE,YAAY;QACZ,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAErE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEtC,+DAA+D;IAC/D,MAAM,eAAe,GACnB,CAAC,MAAM,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC;QACxC,MAAM,IAAI,SAAS,CACjB,qFAAqF,CACtF,CAAC;IACJ,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACpE,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEzE,wEAAwE;IACxE,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEtD,+DAA+D;IAC/D,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,eAAe,CAC9B,WAAW,EACX,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,YAAY,UAAU,EAAE;QAC1B,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,MAAM,EAAE,CAC7C,CAAC;IACF,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9D,wEAAwE;IACxE,YAAY;IACZ,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,QAAQ;YACR,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC;YACxC,MAAM;YACN,WAAW,EAAE,UAAU;SACxB;QACD,QAAQ,EAAE,QAAQ;QAClB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAoC;IACxD,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;AACxE,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,YAAY,CACzB,QAAkB,EAClB,QAA+B,EAC/B,MAA2B;IAE3B,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GACX,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC;QACzC,CAAC,CAAE,QAAQ,CAAC,KAAK,CAAC,GAAwB,CAE1B;QAChB,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC1D,OAAO,CAAC,KAAc,EAAE,MAAM,CAAC,CAChC,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,QAA+B;IAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAA2B,CAAC;IAClE,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,2DAA2D;AAC3D,SAAS,kBAAkB,CACzB,KAAwC;IAExC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;IACzD,KAAK,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAI,OAAO,CAAC,OAAO,CAAsC;YACnE,EAAE,MAAM,CAAC;QACX,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAC3C,CAAC;IACD,uEAAuE;IACvE,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;QAC/D,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CACZ,EAAE,aAAa,CAAC;QACjB,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAI,YAAY,CAAC,CAAC,CAAiC,EAAE,MAAM,CAAC;YACxE,IAAI,aAAa,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC/E,CAAC;AAKD,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAC9D,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAClC,MAAiB,EACjB,QAAsB,EACtB,OAAkC;IAElC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO;IACpC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,gCAAgC,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,WAAW,EACxH;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,sBAAsB,EAAE,YAAY;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC;SAC5D,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACnD,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CACb,+CAA+C,QAAQ,CAAC,MAAM,GAAG,CAClE,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAgC,CAAC;IAChE,OAAO,CACL,OAAO,UAAU,KAAK,QAAQ;QAC9B,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;QACnC,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,EAClB,KAAK,EACL,UAAU,EACV,OAAO,GAC6B;IACpC,MAAM,OAAO,GAAoC;QAC/C,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;KAC7C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAC9B,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI;QACzB,CAAC,YAAY,EAAE,IAAI,CAAC;QACpB,CAAC,OAAO,EAAE,QAAQ,CAAC;QACnB,CAAC,cAAc,EAAE,QAAQ,CAAC;KAClB,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC"}