patchwork-os 0.2.0-alpha.33 → 0.2.0-alpha.35

package/dist/connectors/discord.js

@@ -0,0 +1,544 @@
+/**
+ * Discord connector — read guilds, channels, messages.
+ *
+ * OAuth 2.0 Authorization Code Grant. Discord is a confidential client
+ * (bridge holds the client secret), so PKCE is not required. Refresh
+ * tokens are issued; access tokens expire (typically 7 days).
+ *
+ * Auth: standard OAuth 2.0 with `client_id` + `client_secret` + `redirect_uri`.
+ *   - Env vars: DISCORD_CLIENT_ID, DISCORD_CLIENT_SECRET (mirrors slack)
+ *   - Stored: getSecretJsonSync("discord") → DiscordTokens
+ *   - Header: Authorization: Bearer <access_token>
+ *
+ * Tools: getCurrentUser, listGuilds, listChannels, listMessages (read);
+ *   sendMessage (write).
+ *
+ * NOTE on writes: Discord's REST API does NOT permit user-context OAuth tokens
+ * to send messages on behalf of the user — only bot-scope tokens can hit
+ * `POST /channels/{id}/messages`. The current connector authenticates as a
+ * regular user (scopes: identify, guilds, messages.read), so `sendMessage`
+ * will return a `permission_denied` error until the user re-authenticates
+ * with the `bot` scope. The method is wired correctly; the gap is the auth
+ * scope, which is left to operators to upgrade when they want write access.
+ *
+ * HTTP routes (wired in src/server.ts):
+ *   GET    /connections/discord/auth     — redirect to Discord consent
+ *   GET    /connections/discord/callback — exchange code for tokens
+ *   POST   /connections/discord/test     — ping Discord API
+ *   DELETE /connections/discord          — clear stored tokens
+ *
+ * Extends BaseConnector for unified auth, retry, rate-limit, error handling.
+ * Token refresh is delegated to BaseConnector.refreshToken() via apiCall.
+ */
+import crypto from "node:crypto";
+import { BaseConnector, } from "./baseConnector.js";
+import { escHtml } from "./htmlEscape.js";
+import { deleteSecretJsonSync, getSecretJsonSync, storeSecretJsonSync, } from "./tokenStorage.js";
+const DISCORD_API_BASE = "https://discord.com/api/v10";
+const DISCORD_AUTH_URL = "https://discord.com/api/oauth2/authorize";
+const DISCORD_TOKEN_URL = "https://discord.com/api/oauth2/token";
+const DISCORD_REVOKE_URL = "https://discord.com/api/oauth2/token/revoke";
+const SCOPES = ["identify", "guilds", "messages.read"];
+// ── Config ───────────────────────────────────────────────────────────────────
+function clientId() {
+    return process.env.DISCORD_CLIENT_ID ?? "";
+}
+function clientSecret() {
+    return process.env.DISCORD_CLIENT_SECRET ?? "";
+}
+function redirectUri() {
+    const base = (process.env.PATCHWORK_BRIDGE_URL ??
+        `http://localhost:${process.env.PATCHWORK_BRIDGE_PORT ?? "3101"}`).replace(/\/$/, "");
+    return `${base}/connections/discord/callback`;
+}
+function isConfigured() {
+    return Boolean(clientId() && clientSecret());
+}
+// ── Token persistence ────────────────────────────────────────────────────────
+export function loadTokens() {
+    return getSecretJsonSync("discord");
+}
+export function saveTokens(tokens) {
+    storeSecretJsonSync("discord", tokens);
+}
+export function clearTokens() {
+    try {
+        deleteSecretJsonSync("discord");
+    }
+    catch {
+        // ignore
+    }
+}
+export function isConnected() {
+    return loadTokens() !== null;
+}
+// ── State (CSRF) ─────────────────────────────────────────────────────────────
+// In-memory map keyed by hex random — short-lived (5 min). Mirrors gmail's
+// approach (Set + setTimeout) rather than slack's on-disk file because we
+// don't need cross-process resumption for an OAuth round-trip.
+const pendingStates = new Set();
+const STATE_TTL_MS = 5 * 60 * 1000;
+function generateState() {
+    const state = crypto.randomBytes(32).toString("hex");
+    pendingStates.add(state);
+    setTimeout(() => pendingStates.delete(state), STATE_TTL_MS);
+    return state;
+}
+function consumeState(state) {
+    if (!pendingStates.has(state))
+        return false;
+    pendingStates.delete(state);
+    return true;
+}
+// ── Connector class ──────────────────────────────────────────────────────────
+export class DiscordConnector extends BaseConnector {
+    providerName = "discord";
+    getOAuthConfig() {
+        // Resolve credentials from env first, then fall back to credentials we
+        // stored at auth time (so refresh keeps working even if env is unset).
+        const tokens = loadTokens();
+        const id = clientId() || tokens?._client_id || "";
+        const secret = clientSecret() || tokens?._client_secret || "";
+        if (!id || !secret)
+            return null;
+        return {
+            clientId: id,
+            clientSecret: secret,
+            tokenEndpoint: DISCORD_TOKEN_URL,
+            scopes: SCOPES,
+        };
+    }
+    async authenticate() {
+        const tokens = loadTokens();
+        if (!tokens) {
+            throw new Error("Discord not connected. Visit /connections/discord/auth to authorize.");
+        }
+        return {
+            token: tokens.access_token,
+            refreshToken: tokens.refresh_token,
+            expiresAt: tokens.expires_at ? new Date(tokens.expires_at) : undefined,
+            scopes: tokens.scope ? tokens.scope.split(" ") : SCOPES,
+        };
+    }
+    /**
+     * Persist refreshed tokens after BaseConnector.refreshToken() updates
+     * `this.auth`. BaseConnector calls `saveTokens()` (its own method on the
+     * tokenStorage StoredToken shape); we additionally mirror to our
+     * Discord-specific JSON so loadTokens() keeps working for HTTP probes.
+     */
+    async saveTokens() {
+        await super.saveTokens();
+        if (!this.auth)
+            return;
+        const existing = loadTokens();
+        saveTokens({
+            access_token: this.auth.token,
+            refresh_token: this.auth.refreshToken,
+            expires_at: this.auth.expiresAt
+                ? this.auth.expiresAt.getTime()
+                : undefined,
+            scope: this.auth.scopes?.join(" "),
+            token_type: existing?.token_type ?? "Bearer",
+            _client_id: existing?._client_id,
+            _client_secret: existing?._client_secret,
+            username: existing?.username,
+            user_id: existing?.user_id,
+            connected_at: existing?.connected_at ?? new Date().toISOString(),
+        });
+    }
+    async healthCheck() {
+        try {
+            const result = await this.apiCall(async (token) => {
+                const res = await fetch(`${DISCORD_API_BASE}/users/@me`, {
+                    headers: this.buildHeaders(token),
+                });
+                if (!res.ok)
+                    throw res;
+                return res.json();
+            });
+            if ("error" in result)
+                return { ok: false, error: result.error };
+            return { ok: true };
+        }
+        catch (err) {
+            return { ok: false, error: this.normalizeError(err) };
+        }
+    }
+    normalizeError(error) {
+        if (error instanceof Response) {
+            const s = error.status;
+            if (s === 401)
+                return {
+                    code: "auth_expired",
+                    message: "Discord authentication failed — token expired or revoked",
+                    retryable: true,
+                    suggestedAction: "Reconnect via /connections/discord/auth",
+                };
+            if (s === 403)
+                return {
+                    code: "permission_denied",
+                    message: "Discord write requires bot scope — re-authenticate with the bot scope to enable sendMessage. (Other 403s indicate insufficient permissions for this resource.)",
+                    retryable: false,
+                };
+            if (s === 404)
+                return {
+                    code: "not_found",
+                    message: "Discord resource not found",
+                    retryable: false,
+                };
+            if (s === 429)
+                return {
+                    code: "rate_limited",
+                    message: "Discord API rate limit exceeded",
+                    retryable: true,
+                    suggestedAction: "Wait and retry",
+                };
+            return {
+                code: "provider_error",
+                message: `Discord API error: HTTP ${s}`,
+                retryable: s >= 500,
+            };
+        }
+        if (error instanceof Error) {
+            if (error.message.includes("ENOTFOUND") ||
+                error.message.includes("ECONNREFUSED")) {
+                return {
+                    code: "network_error",
+                    message: `Cannot connect to Discord: ${error.message}`,
+                    retryable: true,
+                };
+            }
+        }
+        return {
+            code: "provider_error",
+            message: error instanceof Error ? error.message : String(error),
+            retryable: false,
+        };
+    }
+    getStatus() {
+        const tokens = loadTokens();
+        return {
+            id: "discord",
+            status: tokens ? "connected" : "disconnected",
+            lastSync: tokens?.connected_at,
+            workspace: tokens?.username,
+        };
+    }
+    // ── API Methods ────────────────────────────────────────────────────────────
+    async getCurrentUser() {
+        const result = await this.apiCall(async (token) => {
+            const res = await fetch(`${DISCORD_API_BASE}/users/@me`, {
+                headers: this.buildHeaders(token),
+            });
+            this.captureRateLimit(res);
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    async listGuilds(params = {}) {
+        const result = await this.apiCall(async (token) => {
+            const qs = new URLSearchParams({
+                limit: String(Math.min(params.limit ?? 100, 200)),
+            });
+            const res = await fetch(`${DISCORD_API_BASE}/users/@me/guilds?${qs}`, {
+                headers: this.buildHeaders(token),
+            });
+            this.captureRateLimit(res);
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    async listChannels(guildId) {
+        const result = await this.apiCall(async (token) => {
+            const res = await fetch(`${DISCORD_API_BASE}/guilds/${encodeURIComponent(guildId)}/channels`, { headers: this.buildHeaders(token) });
+            this.captureRateLimit(res);
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        // Filter to text channels only (type 0). Voice/category/thread channels
+        // are excluded — recipe consumers only care about messageable text rooms.
+        return result.data.filter((c) => c.type === 0);
+    }
+    async listMessages(channelId, params = {}) {
+        const result = await this.apiCall(async (token) => {
+            const qs = new URLSearchParams({
+                limit: String(Math.min(params.limit ?? 50, 100)),
+            });
+            const res = await fetch(`${DISCORD_API_BASE}/channels/${encodeURIComponent(channelId)}/messages?${qs}`, { headers: this.buildHeaders(token) });
+            this.captureRateLimit(res);
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    /**
+     * Send a message to a Discord channel.
+     *
+     * Caveat: requires bot-scope OAuth — regular user-context tokens cannot
+     * send via this endpoint. On 403 the connector surfaces a
+     * `permission_denied` error pointing at the bot-scope requirement.
+     *
+     * @param channelId Discord channel id (non-empty)
+     * @param body { content (≤2000 chars), tts? defaults false }
+     */
+    async sendMessage(channelId, body) {
+        if (!channelId || typeof channelId !== "string") {
+            throw new Error("sendMessage requires a non-empty channelId");
+        }
+        if (!body?.content || typeof body.content !== "string") {
+            throw new Error("sendMessage requires a non-empty content string");
+        }
+        if (body.content.length > 2000) {
+            throw new Error(`sendMessage content exceeds Discord's 2000-character limit (${body.content.length})`);
+        }
+        const payload = {
+            content: body.content,
+            tts: body.tts ?? false,
+        };
+        const result = await this.apiCall(async (token) => {
+            const res = await fetch(`${DISCORD_API_BASE}/channels/${encodeURIComponent(channelId)}/messages`, {
+                method: "POST",
+                headers: this.buildHeaders(token),
+                body: JSON.stringify(payload),
+            });
+            this.captureRateLimit(res);
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    // ── Helpers ────────────────────────────────────────────────────────────────
+    buildHeaders(token) {
+        return {
+            Authorization: `Bearer ${token}`,
+            Accept: "application/json",
+            "Content-Type": "application/json",
+        };
+    }
+    captureRateLimit(res) {
+        this.updateRateLimitFromHeaders({
+            "x-ratelimit-remaining": res.headers.get("x-ratelimit-remaining") ?? undefined,
+            "x-ratelimit-reset": res.headers.get("x-ratelimit-reset") ?? undefined,
+            "retry-after": res.headers.get("retry-after") ?? undefined,
+        });
+    }
+}
+// ── Singleton ────────────────────────────────────────────────────────────────
+let _instance = null;
+function resetDiscordConnector() {
+    _instance = null;
+}
+export function getDiscordConnector() {
+    if (!_instance) {
+        _instance = new DiscordConnector();
+    }
+    return _instance;
+}
+export { getDiscordConnector as discord };
+/**
+ * GET /connections/discord/auth — redirect to Discord consent screen.
+ */
+export function handleDiscordAuthorize() {
+    if (!isConfigured()) {
+        return {
+            status: 503,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: "Discord connector not configured. Set DISCORD_CLIENT_ID and DISCORD_CLIENT_SECRET.",
+            }),
+        };
+    }
+    const state = generateState();
+    const params = new URLSearchParams({
+        client_id: clientId(),
+        redirect_uri: redirectUri(),
+        response_type: "code",
+        scope: SCOPES.join(" "),
+        state,
+    });
+    return {
+        status: 302,
+        body: "",
+        redirect: `${DISCORD_AUTH_URL}?${params.toString()}`,
+    };
+}
+/**
+ * GET /connections/discord/callback — exchange code for tokens.
+ */
+export async function handleDiscordCallback(code, state, error) {
+    if (error) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Discord connect failed</h2><pre>${escHtml(error)}</pre></body></html>`,
+        };
+    }
+    if (!code || !state) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Discord connect failed</h2><pre>missing code or state</pre></body></html>`,
+        };
+    }
+    if (!consumeState(state)) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Discord connect failed</h2><pre>invalid or expired state</pre></body></html>`,
+        };
+    }
+    try {
+        const params = new URLSearchParams({
+            grant_type: "authorization_code",
+            code,
+            redirect_uri: redirectUri(),
+            client_id: clientId(),
+            client_secret: clientSecret(),
+        });
+        const res = await fetch(DISCORD_TOKEN_URL, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                Accept: "application/json",
+            },
+            body: params.toString(),
+        });
+        if (!res.ok) {
+            const body = await res.text();
+            throw new Error(`Token exchange HTTP ${res.status}: ${body}`);
+        }
+        const json = (await res.json());
+        if (!json.access_token) {
+            throw new Error("Token exchange returned no access_token");
+        }
+        // Fetch user info so we can show "connected as <username>" on the dash.
+        let username;
+        let userId;
+        try {
+            const userRes = await fetch(`${DISCORD_API_BASE}/users/@me`, {
+                headers: { Authorization: `Bearer ${json.access_token}` },
+            });
+            if (userRes.ok) {
+                const u = (await userRes.json());
+                username = u.global_name ?? u.username;
+                userId = u.id;
+            }
+        }
+        catch {
+            // best-effort — don't fail connect just because /users/@me hiccuped
+        }
+        const expiresAt = typeof json.expires_in === "number" && json.expires_in > 0
+            ? Date.now() + json.expires_in * 1000
+            : undefined;
+        saveTokens({
+            access_token: json.access_token,
+            refresh_token: json.refresh_token,
+            expires_at: expiresAt,
+            scope: json.scope,
+            token_type: json.token_type ?? "Bearer",
+            _client_id: clientId() || undefined,
+            _client_secret: clientSecret() || undefined,
+            username,
+            user_id: userId,
+            connected_at: new Date().toISOString(),
+        });
+        resetDiscordConnector();
+        return {
+            status: 200,
+            contentType: "text/html",
+            body: `<html><body><h2>Discord connected${username ? ` as ${escHtml(username)}` : ""}</h2><script>try { window.opener.postMessage('patchwork:discord:connected', '*'); } catch(_) {} window.close();</script></body></html>`,
+        };
+    }
+    catch (err) {
+        return {
+            status: 400,
+            contentType: "text/html",
+            body: `<html><body><h2>Discord connect failed</h2><pre>${escHtml(err instanceof Error ? err.message : String(err))}</pre></body></html>`,
+        };
+    }
+}
+/**
+ * POST /connections/discord/test — verify stored token works.
+ */
+export async function handleDiscordTest() {
+    const tokens = loadTokens();
+    if (!tokens) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: false, error: "Discord not connected" }),
+        };
+    }
+    try {
+        const connector = getDiscordConnector();
+        const check = await connector.healthCheck();
+        return {
+            status: check.ok ? 200 : 401,
+            contentType: "application/json",
+            body: JSON.stringify(check.ok
+                ? { ok: true, username: tokens.username }
+                : { ok: false, error: check.error?.message }),
+        };
+    }
+    catch (err) {
+        return {
+            status: 500,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            }),
+        };
+    }
+}
+/**
+ * DELETE /connections/discord — clear stored tokens (and revoke at Discord).
+ */
+export async function handleDiscordDisconnect() {
+    const tokens = loadTokens();
+    // Best-effort revoke at Discord. Slack doesn't do this but Discord exposes
+    // a standard RFC 7009 revocation endpoint, and the spec allowlist permits
+    // it. Failure to revoke must NOT block the local disconnect.
+    if (tokens?.access_token && isConfigured()) {
+        try {
+            await fetch(DISCORD_REVOKE_URL, {
+                method: "POST",
+                headers: { "Content-Type": "application/x-www-form-urlencoded" },
+                body: new URLSearchParams({
+                    token: tokens.access_token,
+                    client_id: clientId(),
+                    client_secret: clientSecret(),
+                }).toString(),
+            });
+        }
+        catch {
+            // ignore — still drop local tokens
+        }
+    }
+    clearTokens();
+    resetDiscordConnector();
+    return {
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ ok: true }),
+    };
+}
+//# sourceMappingURL=discord.js.map

package/dist/connectors/discord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord.js","sourceRoot":"","sources":["../../src/connectors/discord.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAEL,aAAa,GAId,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AACvD,MAAM,gBAAgB,GAAG,0CAA0C,CAAC;AACpE,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AACjE,MAAM,kBAAkB,GAAG,6CAA6C,CAAC;AACzE,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AAsDvD,gFAAgF;AAEhF,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,CACX,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,oBAAoB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,EAAE,CAClE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,IAAI,+BAA+B,CAAC;AAChD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,YAAY,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,UAAU;IACxB,OAAO,iBAAiB,CAAgB,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,EAAE,KAAK,IAAI,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAChF,2EAA2E;AAC3E,0EAA0E;AAC1E,+DAA+D;AAE/D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;AACxC,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF,MAAM,OAAO,gBAAiB,SAAQ,aAAa;IACxC,YAAY,GAAG,SAAS,CAAC;IAExB,cAAc;QACtB,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,QAAQ,EAAE,IAAI,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,YAAY,EAAE,IAAI,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,MAAM;YACpB,aAAa,EAAE,iBAAiB;YAChC,MAAM,EAAE,MAAM;SACf,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,YAAY;YAC1B,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACtE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM;SACxD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACM,KAAK,CAAC,UAAU;QACvB,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,UAAU,CAAC;YACT,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAC7B,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;YACrC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;gBAC7B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;gBAC/B,CAAC,CAAC,SAAS;YACb,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;YAClC,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,QAAQ;YAC5C,UAAU,EAAE,QAAQ,EAAE,UAAU;YAChC,cAAc,EAAE,QAAQ,EAAE,cAAc;YACxC,QAAQ,EAAE,QAAQ,EAAE,QAAQ;YAC5B,OAAO,EAAE,QAAQ,EAAE,OAAO;YAC1B,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,YAAY,EAAE;oBACvD,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,GAAG,CAAC;gBACvB,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;YACpB,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,IAAI,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,cAAc,CAAC,KAAc;QAC3B,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG;gBACX,OAAO;oBACL,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,0DAA0D;oBACnE,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,yCAAyC;iBAC3D,CAAC;YACJ,IAAI,CAAC,KAAK,GAAG;gBACX,OAAO;oBACL,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EACL,gKAAgK;oBAClK,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,IAAI,CAAC,KAAK,GAAG;gBACX,OAAO;oBACL,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,4BAA4B;oBACrC,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,IAAI,CAAC,KAAK,GAAG;gBACX,OAAO;oBACL,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,iCAAiC;oBAC1C,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,gBAAgB;iBAClC,CAAC;YACJ,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,2BAA2B,CAAC,EAAE;gBACvC,SAAS,EAAE,CAAC,IAAI,GAAG;aACpB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACnC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EACtC,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,8BAA8B,KAAK,CAAC,OAAO,EAAE;oBACtD,SAAS,EAAE,IAAI;iBAChB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/D,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,SAAS;QACP,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc;YAC7C,QAAQ,EAAE,MAAM,EAAE,YAAY;YAC9B,SAAS,EAAE,MAAM,EAAE,QAAQ;SAC5B,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,YAAY,EAAE;gBACvD,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA0B,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAmB,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAA6B,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAChD,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC;gBAC7B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;aAClD,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,qBAAqB,EAAE,EAAE,EAAE;gBACpE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA6B,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAsB,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,gBAAgB,WAAW,kBAAkB,CAAC,OAAO,CAAC,WAAW,EACpE,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CACtC,CAAC;YACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA+B,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,wEAAwE;QACxE,0EAA0E;QAC1E,OAAQ,MAAM,CAAC,IAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,SAAiB,EACjB,SAA6B,EAAE;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAChD,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC;gBAC7B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;aACjD,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,gBAAgB,aAAa,kBAAkB,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,EAC9E,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CACtC,CAAC;YACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA+B,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAwB,CAAC;IACzC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,IAAwC;QAExC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,+DAA+D,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,KAAK;SACvB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,gBAAgB,aAAa,kBAAkB,CAAC,SAAS,CAAC,WAAW,EACxE;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;gBACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAC9B,CACF,CAAC;YACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA6B,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAsB,CAAC;IACvC,CAAC;IAED,8EAA8E;IAEtE,YAAY,CAAC,KAAa;QAChC,OAAO;YACL,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;SACnC,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,GAAa;QACpC,IAAI,CAAC,0BAA0B,CAAC;YAC9B,uBAAuB,EACrB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,SAAS;YACvD,mBAAmB,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,SAAS;YACtE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS;SAC3D,CAAC,CAAC;IACL,CAAC;CACF;AAED,gFAAgF;AAEhF,IAAI,SAAS,GAA4B,IAAI,CAAC;AAE9C,SAAS,qBAAqB;IAC5B,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,OAAO,EAAE,mBAAmB,IAAI,OAAO,EAAE,CAAC;AAW1C;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,oFAAoF;aACvF,CAAC;SACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ,EAAE;QACrB,YAAY,EAAE,WAAW,EAAE;QAC3B,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,KAAK;KACN,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,GAAG,gBAAgB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE;KACrD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAmB,EACnB,KAAoB,EACpB,KAAoB;IAEpB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,mDAAmD,OAAO,CAAC,KAAK,CAAC,sBAAsB;SAC9F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,2FAA2F;SAClG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,8FAA8F;SACrG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,WAAW,EAAE;YAC3B,SAAS,EAAE,QAAQ,EAAE;YACrB,aAAa,EAAE,YAAY,EAAE;SAC9B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAM7B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,wEAAwE;QACxE,IAAI,QAA4B,CAAC;QACjC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,YAAY,EAAE;gBAC3D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,YAAY,EAAE,EAAE;aAC1D,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAgB,CAAC;gBAChD,QAAQ,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC;gBACvC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QAED,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC;YACxD,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;YACrC,CAAC,CAAC,SAAS,CAAC;QAEhB,UAAU,CAAC;YACT,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;YACvC,UAAU,EAAE,QAAQ,EAAE,IAAI,SAAS;YACnC,cAAc,EAAE,YAAY,EAAE,IAAI,SAAS;YAC3C,QAAQ;YACR,OAAO,EAAE,MAAM;YACf,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC;QACH,qBAAqB,EAAE,CAAC;QAExB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,oCAAoC,QAAQ,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,wIAAwI;SAC7N,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,mDAAmD,OAAO,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,sBAAsB;SACzI,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAC5B,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,KAAK,CAAC,EAAE;gBACN,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAC/C;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,2EAA2E;IAC3E,0EAA0E;IAC1E,6DAA6D;IAC7D,IAAI,MAAM,EAAE,YAAY,IAAI,YAAY,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,kBAAkB,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,KAAK,EAAE,MAAM,CAAC,YAAY;oBAC1B,SAAS,EAAE,QAAQ,EAAE;oBACrB,aAAa,EAAE,YAAY,EAAE;iBAC9B,CAAC,CAAC,QAAQ,EAAE;aACd,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IACD,WAAW,EAAE,CAAC;IACd,qBAAqB,EAAE,CAAC;IACxB,OAAO;QACL,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/connectors/github.js

@@ -13,6 +13,7 @@
  *
  * Exports preserved for yamlRunner; listIssues/listPRs are now async.
  */
+import { escHtml } from "./htmlEscape.js";
 import { McpClient } from "./mcpClient.js";
 import { completeAuthorize, getAccessToken, isConnected, loadTokenFile, revoke, startAuthorize, updateTokenProfile, vendorConfig, } from "./mcpOAuth.js";
 const GITHUB_MCP_ENDPOINT = "https://api.githubcopilot.com/mcp/";
@@ -78,8 +79,14 @@ export async function listIssues(opts = {}) {
         const fallbackRepo = opts.repo ?? "";
         return arr.map((i) => coerceIssue(i, fallbackRepo));
     }
-    catch {
-        return [];
+    catch (err) {
+        // Pre-fix this swallowed everything to `[]`. A token expiry, rate
+        // limit, or MCP outage looked identical to "no issues this week"
+        // — the recipe agent then summarized "no work" with confidence.
+        // Throw real failures so the recipe-tool wrapper can return a
+        // `{count:0, issues:[], error}` shape that the runner's silent-
+        // fail detector flags as a step error (PR #72).
+        throw new Error(`github list_issues failed: ${err instanceof Error ? err.message : String(err)}`);
     }
 }
 export async function listPRs(opts = {}) {
@@ -112,8 +119,9 @@ export async function listPRs(opts = {}) {
             reviewDecision: p.review_decision ?? p.reviewDecision ?? "",
         }));
     }
-    catch {
-        return [];
+    catch (err) {
+        // Same antipattern as listIssues — see comment there.
+        throw new Error(`github list_pull_requests failed: ${err instanceof Error ? err.message : String(err)}`);
     }
 }
 function parseIssueRef(ref) {
@@ -243,7 +251,7 @@ export async function handleGithubCallback(code, state, error) {
         return {
             status: 400,
             contentType: "text/html",
-            body: `<html><body><h2>GitHub connect failed</h2><pre>${error}</pre></body></html>`,
+            body: `<html><body><h2>GitHub connect failed</h2><pre>${escHtml(error)}</pre></body></html>`,
         };
     }
     if (!code || !state) {
@@ -280,14 +288,14 @@ export async function handleGithubCallback(code, state, error) {
         return {
             status: 200,
             contentType: "text/html",
-            body: `<html><body><h2>GitHub connected${login ? ` as ${login}` : ""}</h2><script>window.close();</script></body></html>`,
+            body: `<html><body><h2>GitHub connected${login ? ` as ${escHtml(login)}` : ""}</h2><script>window.close();</script></body></html>`,
         };
     }
     catch (err) {
         return {
             status: 400,
             contentType: "text/html",
-            body: `<html><body><h2>GitHub connect failed</h2><pre>${err instanceof Error ? err.message : String(err)}</pre></body></html>`,
+            body: `<html><body><h2>GitHub connect failed</h2><pre>${escHtml(err instanceof Error ? err.message : String(err))}</pre></body></html>`,
         };
     }
 }