@0xmaxma/claude-gateway 1.5.8 → 1.6.0

package/dist/share/session-image-catalog.js

@@ -0,0 +1,151 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeSessionImageCatalog = computeSessionImageCatalog;
+const fs = __importStar(require("fs"));
+const db_1 = require("../history/db");
+const media_store_1 = require("../history/media-store");
+const share_store_1 = require("./share-store");
+/**
+ * Session image catalog (#72) — the single deterministic answer to
+ * "which image is image N in this chat?".
+ *
+ * The agent must never count images from its own transcript: after a context
+ * compaction or a resumed session that count silently drifts, and the number
+ * the user sees has no shared source with the number the agent quotes. This
+ * module derives the list from data that is already persisted and append-only
+ * (message media_files), so every consumer that calls it agrees by construction.
+ *
+ * Computed fresh on every call — no new table, no reconciliation job. Ordinals
+ * are stable because history only ever grows; the one case that renumbers is
+ * retention pruning, which deletes the files too (they were unreferenceable
+ * anyway) and renumbers every consumer at once.
+ */
+/** Phase-1 catalog scope: raster images the share/reference path can carry. */
+const IMAGE_EXT_RE = /\.(png|jpe?g|webp|gif)$/i;
+/** Legacy uploads whose original name had no extension were stored as .bin
+ *  (clipboard pastes, sanitized non-ASCII filenames). Their extension says
+ *  nothing, so ask the bytes: read just enough header to run the same magic-
+ *  bytes sniff the share layer validates with. Anything unreadable is not an
+ *  image for catalog purposes. */
+function binFileIsImage(agentsBaseDir, agentId, relativePath) {
+    try {
+        const abs = media_store_1.MediaStore.resolvePath(agentsBaseDir, agentId, relativePath);
+        const fd = fs.openSync(abs, 'r');
+        try {
+            const header = Buffer.alloc(12);
+            const read = fs.readSync(fd, header, 0, 12, 0);
+            return (0, share_store_1.detectImageMime)(header.subarray(0, read)) !== null;
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    }
+    catch {
+        return false;
+    }
+}
+/** Cap catalog descriptions — they describe, they are not a transcript. */
+const MAX_DESC_CHARS = 200;
+/** Channel receivers persist bare placeholders ("(photo)") for captionless
+ *  media — those describe nothing, so they don't become a desc. */
+const PLACEHOLDER_CONTENT_RE = /^\((?:photo|image|video|file|sticker|audio|voice)\)$/i;
+function toDesc(text) {
+    const t = (text ?? '').trim();
+    if (!t || PLACEHOLDER_CONTENT_RE.test(t))
+        return undefined;
+    return t.length > MAX_DESC_CHARS ? `${t.slice(0, MAX_DESC_CHARS)}…` : t;
+}
+/**
+ * History stores media as `media/<chat>/<file>` while image_artifacts (and
+ * validateShareFile) store the media-ROOT-relative `<chat>/<file>`. Normalise to
+ * the root-relative form so the artifact join can match, and so the same file
+ * recorded in either form dedupes to ONE ordinal. MediaStore.resolvePath accepts
+ * both, so the emitted path stays usable as a ref.
+ */
+function toMediaRootRelative(p) {
+    return p.startsWith('media/') ? p.slice(6) : p;
+}
+/** available = the bytes are still on disk. A path that cannot even be resolved
+ *  (traversal, escaped symlink) is not addressable, so it is unavailable too. */
+function isOnDisk(agentsBaseDir, agentId, relativePath) {
+    try {
+        return fs.existsSync(media_store_1.MediaStore.resolvePath(agentsBaseDir, agentId, relativePath));
+    }
+    catch {
+        return false;
+    }
+}
+function computeSessionImageCatalog(opts) {
+    const { agentsBaseDir, store, agentId, sessionId } = opts;
+    const rows = db_1.HistoryDB.forAgent(agentsBaseDir, agentId).listSessionMedia(sessionId);
+    const items = [];
+    const seen = new Set();
+    for (const row of rows) {
+        // Anything the agent produced is a generation; everything else (user turn,
+        // system note) is an upload from the caller's side.
+        const origin = row.role === 'assistant' ? 'generated' : 'upload';
+        for (const raw of row.mediaFiles) {
+            if (typeof raw !== 'string' || !raw.trim())
+                continue;
+            const relativePath = toMediaRootRelative(raw.trim());
+            if (!IMAGE_EXT_RE.test(relativePath) &&
+                !(/\.bin$/i.test(relativePath) && binFileIsImage(agentsBaseDir, agentId, relativePath)))
+                continue;
+            // First appearance owns the ordinal forever — re-sending the same file
+            // later must not create a second entry or shift the numbers after it.
+            if (seen.has(relativePath))
+                continue;
+            seen.add(relativePath);
+            const artifact = store.findArtifactByPath(agentId, sessionId, relativePath);
+            // Generated → the generation prompt (persisted on the artifact); upload →
+            // whatever the user said in the message that carried the file.
+            const desc = origin === 'generated' ? toDesc(artifact?.prompt) : toDesc(row.content);
+            items.push({
+                index: items.length + 1,
+                ref: artifact ? `artifact:${artifact.id}` : relativePath,
+                relative_path: relativePath,
+                origin,
+                ts: row.ts,
+                // A missing file STAYS listed (available:false) so the ordinals of the
+                // images after it do not shift under the agent mid-conversation.
+                available: isOnDisk(agentsBaseDir, agentId, relativePath),
+                ...(desc ? { desc } : {}),
+            });
+        }
+    }
+    return items;
+}
+//# sourceMappingURL=session-image-catalog.js.map

package/dist/share/session-image-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-image-catalog.js","sourceRoot":"","sources":["../../src/share/session-image-catalog.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8FA,gEA6CC;AA3ID,uCAAyB;AACzB,sCAA0C;AAC1C,wDAAoD;AACpD,+CAA4D;AAE5D;;;;;;;;;;;;;;GAcG;AAEH,+EAA+E;AAC/E,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD;;;;kCAIkC;AAClC,SAAS,cAAc,CAAC,aAAqB,EAAE,OAAe,EAAE,YAAoB;IAClF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,wBAAU,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/C,OAAO,IAAA,6BAAe,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC;QAC5D,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAiBD,2EAA2E;AAC3E,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;mEACmE;AACnE,MAAM,sBAAsB,GAAG,uDAAuD,CAAC;AAEvF,SAAS,MAAM,CAAC,IAA+B;IAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,OAAO,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;iFACiF;AACjF,SAAS,QAAQ,CAAC,aAAqB,EAAE,OAAe,EAAE,YAAoB;IAC5E,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,UAAU,CAAC,wBAAU,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,0BAA0B,CAAC,IAK1C;IACC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC1D,MAAM,IAAI,GAAG,cAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAEpF,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,2EAA2E;QAC3E,oDAAoD;QACpD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjE,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACjC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAAE,SAAS;YACrD,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;gBAChC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;gBAEvF,SAAS;YACX,uEAAuE;YACvE,sEAAsE;YACtE,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAC5E,0EAA0E;YAC1E,+DAA+D;YAC/D,MAAM,IAAI,GAAG,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrF,KAAK,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBACvB,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY;gBACxD,aAAa,EAAE,YAAY;gBAC3B,MAAM;gBACN,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,uEAAuE;gBACvE,iEAAiE;gBACjE,SAAS,EAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC;gBACzD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/share/share-store.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Share bridge — SQLite-backed store for short-lived public image shares
+ * and private image artifacts (#70, plan §8/§9).
+ *
+ * The gateway MAIN process is the only owner of this DB: MCP subprocesses go
+ * through the authenticated HTTP API (share-router.ts) and never open
+ * SQLite themselves. Tokens are bearer capabilities: 24 random bytes,
+ * base64url, and ONLY the SHA-256 hash is persisted — the plaintext token
+ * exists in the mint response (and a short-lived in-memory dedupe cache) only.
+ */
+/** randomBytes(24) → base64url without padding = 32 chars. */
+export declare const SHARE_TOKEN_RE: RegExp;
+/** Idempotent-mint window (§17.4): a re-mint for the same (agent, session,
+ *  ref, purpose) within this window returns the SAME token/URL so the
+ *  provider's duplicate-submit guard (which hashes the image URLs) still
+ *  dedupes agent retries instead of double-billing. */
+export declare const MINT_DEDUPE_WINDOW_MS = 60000;
+export declare const DEFAULT_SHARE_TTL_SECONDS = 1800;
+export declare const DEFAULT_MAX_REFS = 5;
+export declare const DEFAULT_MAX_FILE_BYTES: number;
+export declare const DEFAULT_MAX_TOTAL_BYTES: number;
+/** Artifacts older than this are pruned opportunistically — far beyond any share
+ *  TTL (max 24h) and any live session, so removal never breaks an active ref. */
+export declare const ARTIFACT_RETENTION_MS: number;
+export type ShareLimits = {
+    maxRefs: number;
+    maxFileBytes: number;
+    maxTotalBytes: number;
+};
+export declare function shareLimitsFromEnv(): ShareLimits;
+/** Typed error with a stable machine-readable code (used for HTTP mapping). */
+export declare class ShareError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/** Phase-1 formats: PNG / JPEG / WebP only (§11). GIF/SVG/PDF are rejected. */
+export declare function detectImageMime(header: Buffer): 'image/png' | 'image/jpeg' | 'image/webp' | null;
+export type ValidatedShareFile = {
+    /** Path relative to the agent's media root — the ONLY path form persisted (§12.8). */
+    relativePath: string;
+    size: number;
+    mime: string;
+};
+/**
+ * Validate a local ref (absolute or media-relative path) for sharing (§12):
+ * canonicalize, require containment in the agent's media root, reject symlink
+ * escapes, require a regular file, validate magic bytes and the per-file cap.
+ * Returns only the media-root-relative path — client-supplied absolute paths
+ * are never persisted. Throws ShareError with a stable code.
+ */
+export declare function validateShareFile(agentsBaseDir: string, agentId: string, ref: string, maxFileBytes?: number): ValidatedShareFile;
+export type MintedShare = {
+    shareId: string;
+    /** Plaintext token — returned to the caller, NEVER persisted or logged. */
+    token: string;
+    expiresAtMs: number;
+    /** true when this mint was served from the idempotency window (§17.4). */
+    deduped: boolean;
+};
+export type ShareRow = {
+    shareId: string;
+    agentId: string;
+    sessionId: string;
+    relativePath: string;
+    purpose: string;
+};
+export type ArtifactRow = {
+    artifactId: string;
+    agentId: string;
+    sessionId: string;
+    relativePath: string;
+    provider: string;
+    model: string;
+};
+export declare class ShareStore {
+    private readonly db;
+    /** In-memory idempotent-mint cache: dedupe key → last mint. Plaintext tokens
+     *  live here only for MINT_DEDUPE_WINDOW_MS, never on disk (§9/§17.4). */
+    private readonly mintCache;
+    /** Last opportunistic artifact-prune timestamp (throttle, see registerArtifact). */
+    private lastArtifactPruneMs;
+    constructor(dbPath: string);
+    registerArtifact(a: {
+        agentId: string;
+        sessionId: string;
+        relativePath: string;
+        provider: string;
+        model: string;
+        taskId?: string;
+        imageIndex?: number;
+        prompt?: string;
+    }): string;
+    /** Opportunistic, throttled retention sweep — delete artifacts older than
+     *  ARTIFACT_RETENTION_MS. Best-effort: a failure here must not fail the insert. */
+    private pruneOldArtifacts;
+    /** Resolve an artifact bound to the SAME agent AND session — cross-agent or
+     *  cross-session lookups return null (uniform "not found", §8). */
+    resolveArtifact(agentId: string, sessionId: string, artifactId: string): ArtifactRow | null;
+    /** Newest artifact id registered for (agent, session, relative_path), or null.
+     *  Read-only reverse lookup for the session image catalog (#72): a path that
+     *  was produced by generate_image gets the stable `artifact:<id>` ref instead
+     *  of a raw path. Same agent+session binding as resolveArtifact — a path
+     *  registered by another agent/session is invisible here. */
+    findArtifactByPath(agentId: string, sessionId: string, relativePath: string): {
+        id: string;
+        prompt: string | null;
+    } | null;
+    /**
+     * Mint a share. `dedupeRef` is the caller-facing identity of the ref
+     * (e.g. "artifact:img_x" or "path:<relative>") — an identical mint for the
+     * same (agent, session, ref, purpose) within MINT_DEDUPE_WINDOW_MS returns
+     * the SAME token (§17.4) so provider-side dedupe keeps working.
+     */
+    mintShare(a: {
+        agentId: string;
+        sessionId: string;
+        relativePath: string;
+        dedupeRef: string;
+        purpose: string;
+        ttlSeconds: number;
+    }): MintedShare;
+    /** Look up a live (unexpired, unrevoked) share by plaintext token. */
+    lookupByToken(token: string): ShareRow | null;
+    getShareOwner(shareId: string): {
+        agentId: string;
+        sessionId: string;
+        purpose: string;
+    } | null;
+    /** Revoke a share by id. Also evicts any idempotency-cache entry pointing at
+     *  it so a post-revoke mint issues a FRESH token. Returns false when unknown. */
+    revokeShare(shareId: string): boolean;
+    /** Lazy cleanup — delete expired rows. Safe to call opportunistically. */
+    cleanupExpired(): void;
+    close(): void;
+    private pruneMintCache;
+}
+//# sourceMappingURL=share-store.d.ts.map

package/dist/share/share-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-store.d.ts","sourceRoot":"","sources":["../../src/share/share-store.ts"],"names":[],"mappings":"AAMA;;;;;;;;;GASG;AAEH,8DAA8D;AAC9D,eAAO,MAAM,cAAc,QAAwB,CAAC;AAEpD;;;uDAGuD;AACvD,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAE5C,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAC9C,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,sBAAsB,QAAmB,CAAC;AACvD,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AACxD;iFACiF;AACjF,eAAO,MAAM,qBAAqB,QAA2B,CAAC;AAG9D,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAgB,kBAAkB,IAAI,WAAW,CAUhD;AAED,+EAA+E;AAC/E,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI1C;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,IAAI,CAShG;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,YAAY,GAAE,MAA+B,GAC5C,kBAAkB,CA6CpB;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAe;IAClC;8EAC0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2D;IACrF,oFAAoF;IACpF,OAAO,CAAC,mBAAmB,CAAK;gBAEpB,MAAM,EAAE,MAAM;IA8C1B,gBAAgB,CAAC,CAAC,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,MAAM;IAUV;uFACmF;IACnF,OAAO,CAAC,iBAAiB;IAWzB;uEACmE;IACnE,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAkB3F;;;;iEAI6D;IAC7D,kBAAkB,CAChB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAW/C;;;;;OAKG;IACH,SAAS,CAAC,CAAC,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,WAAW;IAoBf,sEAAsE;IACtE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAoB7C,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAO9F;qFACiF;IACjF,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAUrC,0EAA0E;IAC1E,cAAc,IAAI,IAAI;IAQtB,KAAK,IAAI,IAAI;IAQb,OAAO,CAAC,cAAc;CAOvB"}

package/dist/share/share-store.js

@@ -0,0 +1,340 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShareStore = exports.ShareError = exports.ARTIFACT_RETENTION_MS = exports.DEFAULT_MAX_TOTAL_BYTES = exports.DEFAULT_MAX_FILE_BYTES = exports.DEFAULT_MAX_REFS = exports.DEFAULT_SHARE_TTL_SECONDS = exports.MINT_DEDUPE_WINDOW_MS = exports.SHARE_TOKEN_RE = void 0;
+exports.shareLimitsFromEnv = shareLimitsFromEnv;
+exports.detectImageMime = detectImageMime;
+exports.validateShareFile = validateShareFile;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const node_sqlite_1 = require("node:sqlite");
+const media_store_1 = require("../history/media-store");
+/**
+ * Share bridge — SQLite-backed store for short-lived public image shares
+ * and private image artifacts (#70, plan §8/§9).
+ *
+ * The gateway MAIN process is the only owner of this DB: MCP subprocesses go
+ * through the authenticated HTTP API (share-router.ts) and never open
+ * SQLite themselves. Tokens are bearer capabilities: 24 random bytes,
+ * base64url, and ONLY the SHA-256 hash is persisted — the plaintext token
+ * exists in the mint response (and a short-lived in-memory dedupe cache) only.
+ */
+/** randomBytes(24) → base64url without padding = 32 chars. */
+exports.SHARE_TOKEN_RE = /^[A-Za-z0-9_-]{32}$/;
+/** Idempotent-mint window (§17.4): a re-mint for the same (agent, session,
+ *  ref, purpose) within this window returns the SAME token/URL so the
+ *  provider's duplicate-submit guard (which hashes the image URLs) still
+ *  dedupes agent retries instead of double-billing. */
+exports.MINT_DEDUPE_WINDOW_MS = 60000;
+exports.DEFAULT_SHARE_TTL_SECONDS = 1800; // 30 min (§3.15)
+exports.DEFAULT_MAX_REFS = 5;
+exports.DEFAULT_MAX_FILE_BYTES = 20 * 1024 * 1024; // 20 MiB
+exports.DEFAULT_MAX_TOTAL_BYTES = 50 * 1024 * 1024; // 50 MiB
+/** Artifacts older than this are pruned opportunistically — far beyond any share
+ *  TTL (max 24h) and any live session, so removal never breaks an active ref. */
+exports.ARTIFACT_RETENTION_MS = 30 * 24 * 60 * 60 * 1000; // 30 days
+const ARTIFACT_PRUNE_THROTTLE_MS = 60 * 60 * 1000; // sweep at most once/hour
+function shareLimitsFromEnv() {
+    const num = (v, dflt) => {
+        const n = Number(v);
+        return Number.isFinite(n) && n > 0 ? Math.floor(n) : dflt;
+    };
+    return {
+        maxRefs: num(process.env.IMAGE_SHARE_MAX_REFS, exports.DEFAULT_MAX_REFS),
+        maxFileBytes: num(process.env.IMAGE_SHARE_MAX_FILE_BYTES, exports.DEFAULT_MAX_FILE_BYTES),
+        maxTotalBytes: num(process.env.IMAGE_SHARE_MAX_TOTAL_BYTES, exports.DEFAULT_MAX_TOTAL_BYTES),
+    };
+}
+/** Typed error with a stable machine-readable code (used for HTTP mapping). */
+class ShareError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+exports.ShareError = ShareError;
+/** Phase-1 formats: PNG / JPEG / WebP only (§11). GIF/SVG/PDF are rejected. */
+function detectImageMime(header) {
+    if (header.length >= 3 && header[0] === 0xff && header[1] === 0xd8 && header[2] === 0xff)
+        return 'image/jpeg';
+    if (header.length >= 8 && header[0] === 0x89 && header[1] === 0x50 && header[2] === 0x4e && header[3] === 0x47)
+        return 'image/png';
+    if (header.length >= 12 &&
+        header[0] === 0x52 && header[1] === 0x49 && header[2] === 0x46 && header[3] === 0x46 &&
+        header[8] === 0x57 && header[9] === 0x45 && header[10] === 0x42 && header[11] === 0x50)
+        return 'image/webp';
+    return null;
+}
+/**
+ * Validate a local ref (absolute or media-relative path) for sharing (§12):
+ * canonicalize, require containment in the agent's media root, reject symlink
+ * escapes, require a regular file, validate magic bytes and the per-file cap.
+ * Returns only the media-root-relative path — client-supplied absolute paths
+ * are never persisted. Throws ShareError with a stable code.
+ */
+function validateShareFile(agentsBaseDir, agentId, ref, maxFileBytes = exports.DEFAULT_MAX_FILE_BYTES) {
+    const root = media_store_1.MediaStore.agentMediaRoot(agentsBaseDir, agentId);
+    let resolved;
+    try {
+        if (path.isAbsolute(ref)) {
+            // Absolute input (e.g. the path generate_image returned): containment +
+            // symlink checks mirror MediaStore.resolvePath.
+            const abs = path.resolve(ref);
+            if (!abs.startsWith(root + path.sep))
+                throw new Error('outside media root');
+            resolved = fs.existsSync(abs) ? fs.realpathSync(abs) : abs;
+            if (!resolved.startsWith(root + path.sep))
+                throw new Error('outside media root');
+        }
+        else {
+            resolved = media_store_1.MediaStore.resolvePath(agentsBaseDir, agentId, ref);
+        }
+    }
+    catch {
+        throw new ShareError('invalid_path', 'path is outside the agent media root');
+    }
+    let stat;
+    try {
+        stat = fs.lstatSync(resolved); // realpath already followed links; lstat guards devices/FIFOs
+    }
+    catch {
+        throw new ShareError('image_ref_not_found', 'referenced image file does not exist');
+    }
+    if (!stat.isFile()) {
+        throw new ShareError('invalid_path', 'referenced path is not a regular file');
+    }
+    if (stat.size > maxFileBytes) {
+        throw new ShareError('image_too_large', `image exceeds ${maxFileBytes} bytes`);
+    }
+    const header = Buffer.alloc(12);
+    const fd = fs.openSync(resolved, 'r');
+    try {
+        fs.readSync(fd, header, 0, 12, 0);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    const mime = detectImageMime(header);
+    if (!mime) {
+        throw new ShareError('unsupported_image_type', 'only PNG, JPEG and WebP can be shared');
+    }
+    const relativePath = path.relative(root, resolved);
+    if (relativePath.startsWith('..') || path.isAbsolute(relativePath)) {
+        throw new ShareError('invalid_path', 'path is outside the agent media root');
+    }
+    return { relativePath, size: stat.size, mime };
+}
+class ShareStore {
+    constructor(dbPath) {
+        /** In-memory idempotent-mint cache: dedupe key → last mint. Plaintext tokens
+         *  live here only for MINT_DEDUPE_WINDOW_MS, never on disk (§9/§17.4). */
+        this.mintCache = new Map();
+        /** Last opportunistic artifact-prune timestamp (throttle, see registerArtifact). */
+        this.lastArtifactPruneMs = 0;
+        fs.mkdirSync(path.dirname(dbPath), { recursive: true });
+        this.db = new node_sqlite_1.DatabaseSync(dbPath);
+        this.db.exec('PRAGMA journal_mode=WAL');
+        this.db.exec('PRAGMA busy_timeout=5000');
+        this.db.exec('PRAGMA foreign_keys=ON');
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS image_shares (
+        id            TEXT PRIMARY KEY,
+        token_hash    BLOB NOT NULL UNIQUE,
+        agent_id      TEXT NOT NULL,
+        session_id    TEXT NOT NULL,
+        relative_path TEXT NOT NULL,
+        purpose       TEXT NOT NULL,
+        created_at    INTEGER NOT NULL,
+        expires_at    INTEGER NOT NULL,
+        revoked_at    INTEGER
+      );
+      CREATE INDEX IF NOT EXISTS image_shares_expiry ON image_shares(expires_at);
+
+      CREATE TABLE IF NOT EXISTS image_artifacts (
+        id            TEXT PRIMARY KEY,
+        agent_id      TEXT NOT NULL,
+        session_id    TEXT NOT NULL,
+        relative_path TEXT NOT NULL,
+        provider      TEXT NOT NULL,
+        model         TEXT NOT NULL,
+        task_id       TEXT,
+        image_index   INTEGER NOT NULL DEFAULT 0,
+        created_at    INTEGER NOT NULL,
+        prompt        TEXT
+      );
+      CREATE INDEX IF NOT EXISTS image_artifacts_session_created
+        ON image_artifacts(agent_id, session_id, created_at DESC);
+    `);
+        // DBs created before the `prompt` column existed: CREATE TABLE IF NOT
+        // EXISTS leaves them untouched, so add the column in place. Additive and
+        // nullable — older rows simply have no prompt.
+        const cols = this.db.prepare(`PRAGMA table_info(image_artifacts)`).all();
+        if (!cols.some((c) => c.name === 'prompt')) {
+            this.db.exec('ALTER TABLE image_artifacts ADD COLUMN prompt TEXT');
+        }
+    }
+    // ── artifacts (§8) ────────────────────────────────────────────────────────
+    registerArtifact(a) {
+        const id = `img_${(0, crypto_1.randomBytes)(9).toString('base64url')}`;
+        this.db.prepare(`INSERT INTO image_artifacts (id, agent_id, session_id, relative_path, provider, model, task_id, image_index, created_at, prompt)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(id, a.agentId, a.sessionId, a.relativePath, a.provider, a.model, a.taskId ?? null, a.imageIndex ?? 0, Date.now(), a.prompt ?? null);
+        this.pruneOldArtifacts();
+        return id;
+    }
+    /** Opportunistic, throttled retention sweep — delete artifacts older than
+     *  ARTIFACT_RETENTION_MS. Best-effort: a failure here must not fail the insert. */
+    pruneOldArtifacts() {
+        const now = Date.now();
+        if (now - this.lastArtifactPruneMs < ARTIFACT_PRUNE_THROTTLE_MS)
+            return;
+        this.lastArtifactPruneMs = now;
+        try {
+            this.db.prepare('DELETE FROM image_artifacts WHERE created_at <= ?').run(now - exports.ARTIFACT_RETENTION_MS);
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+    /** Resolve an artifact bound to the SAME agent AND session — cross-agent or
+     *  cross-session lookups return null (uniform "not found", §8). */
+    resolveArtifact(agentId, sessionId, artifactId) {
+        const row = this.db.prepare(`SELECT id, agent_id, session_id, relative_path, provider, model
+       FROM image_artifacts WHERE id = ? AND agent_id = ? AND session_id = ?`).get(artifactId, agentId, sessionId);
+        if (!row)
+            return null;
+        return {
+            artifactId: row.id,
+            agentId: row.agent_id,
+            sessionId: row.session_id,
+            relativePath: row.relative_path,
+            provider: row.provider,
+            model: row.model,
+        };
+    }
+    /** Newest artifact id registered for (agent, session, relative_path), or null.
+     *  Read-only reverse lookup for the session image catalog (#72): a path that
+     *  was produced by generate_image gets the stable `artifact:<id>` ref instead
+     *  of a raw path. Same agent+session binding as resolveArtifact — a path
+     *  registered by another agent/session is invisible here. */
+    findArtifactByPath(agentId, sessionId, relativePath) {
+        const row = this.db.prepare(`SELECT id, prompt FROM image_artifacts
+       WHERE agent_id = ? AND session_id = ? AND relative_path = ?
+       ORDER BY created_at DESC, rowid DESC LIMIT 1`).get(agentId, sessionId, relativePath);
+        return row ? { id: row.id, prompt: row.prompt } : null;
+    }
+    // ── shares (§9) ───────────────────────────────────────────────────────────
+    /**
+     * Mint a share. `dedupeRef` is the caller-facing identity of the ref
+     * (e.g. "artifact:img_x" or "path:<relative>") — an identical mint for the
+     * same (agent, session, ref, purpose) within MINT_DEDUPE_WINDOW_MS returns
+     * the SAME token (§17.4) so provider-side dedupe keeps working.
+     */
+    mintShare(a) {
+        const key = [a.agentId, a.sessionId, a.dedupeRef, a.purpose].join('');
+        const now = Date.now();
+        const cached = this.mintCache.get(key);
+        if (cached && now - cached.mintedAtMs < exports.MINT_DEDUPE_WINDOW_MS && cached.expiresAtMs > now) {
+            return { shareId: cached.shareId, token: cached.token, expiresAtMs: cached.expiresAtMs, deduped: true };
+        }
+        const token = (0, crypto_1.randomBytes)(24).toString('base64url');
+        const tokenHash = (0, crypto_1.createHash)('sha256').update(token).digest();
+        const shareId = `shr_${(0, crypto_1.randomBytes)(9).toString('base64url')}`;
+        const expiresAtMs = now + a.ttlSeconds * 1000;
+        this.db.prepare(`INSERT INTO image_shares (id, token_hash, agent_id, session_id, relative_path, purpose, created_at, expires_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?)`).run(shareId, tokenHash, a.agentId, a.sessionId, a.relativePath, a.purpose, now, expiresAtMs);
+        this.mintCache.set(key, { shareId, token, expiresAtMs, deduped: false, mintedAtMs: now });
+        this.pruneMintCache(now);
+        return { shareId, token, expiresAtMs, deduped: false };
+    }
+    /** Look up a live (unexpired, unrevoked) share by plaintext token. */
+    lookupByToken(token) {
+        if (!exports.SHARE_TOKEN_RE.test(token))
+            return null;
+        const tokenHash = (0, crypto_1.createHash)('sha256').update(token).digest();
+        const row = this.db.prepare(`SELECT id, agent_id, session_id, relative_path, purpose
+       FROM image_shares
+       WHERE token_hash = ? AND revoked_at IS NULL AND expires_at > ?`).get(tokenHash, Date.now());
+        if (!row)
+            return null;
+        return {
+            shareId: row.id,
+            agentId: row.agent_id,
+            sessionId: row.session_id,
+            relativePath: row.relative_path,
+            purpose: row.purpose,
+        };
+    }
+    getShareOwner(shareId) {
+        const row = this.db.prepare(`SELECT agent_id, session_id, purpose FROM image_shares WHERE id = ? AND revoked_at IS NULL`).get(shareId);
+        return row ? { agentId: row.agent_id, sessionId: row.session_id, purpose: row.purpose } : null;
+    }
+    /** Revoke a share by id. Also evicts any idempotency-cache entry pointing at
+     *  it so a post-revoke mint issues a FRESH token. Returns false when unknown. */
+    revokeShare(shareId) {
+        const res = this.db.prepare(`UPDATE image_shares SET revoked_at = ? WHERE id = ? AND revoked_at IS NULL`).run(Date.now(), shareId);
+        for (const [key, entry] of this.mintCache) {
+            if (entry.shareId === shareId)
+                this.mintCache.delete(key);
+        }
+        return Number(res.changes) > 0;
+    }
+    /** Lazy cleanup — delete expired rows. Safe to call opportunistically. */
+    cleanupExpired() {
+        try {
+            this.db.prepare(`DELETE FROM image_shares WHERE expires_at <= ?`).run(Date.now());
+        }
+        catch {
+            /* best-effort */
+        }
+    }
+    close() {
+        try {
+            this.db.close();
+        }
+        catch {
+            /* already closed */
+        }
+    }
+    pruneMintCache(now) {
+        for (const [key, entry] of this.mintCache) {
+            if (now - entry.mintedAtMs >= exports.MINT_DEDUPE_WINDOW_MS || entry.expiresAtMs <= now) {
+                this.mintCache.delete(key);
+            }
+        }
+    }
+}
+exports.ShareStore = ShareStore;
+//# sourceMappingURL=share-store.js.map

package/dist/share/share-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-store.js","sourceRoot":"","sources":["../../src/share/share-store.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,gDAUC;AAYD,0CASC;AAgBD,8CAkDC;AA1ID,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAiD;AACjD,6CAA2C;AAC3C,wDAAoD;AAEpD;;;;;;;;;GASG;AAEH,8DAA8D;AACjD,QAAA,cAAc,GAAG,qBAAqB,CAAC;AAEpD;;;uDAGuD;AAC1C,QAAA,qBAAqB,GAAG,KAAM,CAAC;AAE/B,QAAA,yBAAyB,GAAG,IAAI,CAAC,CAAC,iBAAiB;AACnD,QAAA,gBAAgB,GAAG,CAAC,CAAC;AACrB,QAAA,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AACpD,QAAA,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAClE;iFACiF;AACpE,QAAA,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AACzE,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,0BAA0B;AAQ7E,SAAgB,kBAAkB;IAChC,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAE,IAAY,EAAU,EAAE;QAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC,CAAC;IACF,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,wBAAgB,CAAC;QAChE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,8BAAsB,CAAC;QACjF,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,+BAAuB,CAAC;KACrF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAa,UAAW,SAAQ,KAAK;IAEnC,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAND,gCAMC;AAED,+EAA+E;AAC/E,SAAgB,eAAe,CAAC,MAAc;IAC5C,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAC9G,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACnI,IACE,MAAM,CAAC,MAAM,IAAI,EAAE;QACnB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QACpF,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI;QACtF,OAAO,YAAY,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AASD;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAC/B,aAAqB,EACrB,OAAe,EACf,GAAW,EACX,eAAuB,8BAAsB;IAE7C,MAAM,IAAI,GAAG,wBAAU,CAAC,cAAc,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,wEAAwE;YACxE,gDAAgD;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC5E,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,wBAAU,CAAC,WAAW,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,8DAA8D;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,sCAAsC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,uCAAuC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,YAAY,QAAQ,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,uCAAuC,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AA4BD,MAAa,UAAU;IAQrB,YAAY,MAAc;QAN1B;kFAC0E;QACzD,cAAS,GAAG,IAAI,GAAG,EAAgD,CAAC;QACrF,oFAAoF;QAC5E,wBAAmB,GAAG,CAAC,CAAC;QAG9B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,GAAG,IAAI,0BAAY,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4BZ,CAAC,CAAC;QACH,sEAAsE;QACtE,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,EAA6B,CAAC;QACpG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E,gBAAgB,CAAC,CAShB;QACC,MAAM,EAAE,GAAG,OAAO,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,OAAO,CACb;6CACuC,CACxC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;QAC1I,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;uFACmF;IAC3E,iBAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,mBAAmB,GAAG,0BAA0B;YAAE,OAAO;QACxE,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,6BAAqB,CAAC,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAED;uEACmE;IACnE,eAAe,CAAC,OAAe,EAAE,SAAiB,EAAE,UAAkB;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB;6EACuE,CACxE,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAEvB,CAAC;QACd,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC;IACJ,CAAC;IAED;;;;iEAI6D;IAC7D,kBAAkB,CAChB,OAAe,EACf,SAAiB,EACjB,YAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB;;oDAE8C,CAC/C,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAsD,CAAC;QAC7F,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED,6EAA6E;IAE7E;;;;;OAKG;IACH,SAAS,CAAC,CAOT;QACC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,6BAAqB,IAAI,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;YAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1G,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,OAAO,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;QAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,CACb;uCACiC,CAClC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAC/F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzD,CAAC;IAED,sEAAsE;IACtE,aAAa,CAAC,KAAa;QACzB,IAAI,CAAC,sBAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB;;sEAEgE,CACjE,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAEd,CAAC;QACd,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,4FAA4F,CAC7F,CAAC,GAAG,CAAC,OAAO,CAA0E,CAAC;QACxF,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjG,CAAC;IAED;qFACiF;IACjF,WAAW,CAAC,OAAe;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,4EAA4E,CAC7E,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,0EAA0E;IAC1E,cAAc;QACZ,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,6BAAqB,IAAI,KAAK,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;gBAChF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA/ND,gCA+NC"}