@cello-protocol/daemon 0.0.229 → 0.0.231

package/dist/channel-membership-wiring.js

@@ -0,0 +1,387 @@
+import { channelJoinFrameType, encodeChannelRekey, buildChannelFetchKeyTbs, JOIN_REQUEST_TYPE, } from "@cello-protocol/protocol-types";
+import { generateGroupKey, wrapGroupKeyFor, deriveFetchKey } from "@cello-protocol/crypto";
+import { ChannelMembershipStore } from "./channel-membership-store.js";
+import { ChannelSubscriptionStore } from "./channel-subscription-store.js";
+import { createChannelJoinExchange } from "./channel-join-exchange.js";
+import { createChannelAdminLookup, } from "./channel-admin-lookup.js";
+import { extractErrorMessage } from "./error-message.js";
+/**
+ * M16 020-CHANADMIN — where the subscriber's admin key comes from.
+ *
+ * The join exchange compares the agent that answered against this. It is deliberately the ONLY
+ * source: the session proves who the counterparty is and says nothing about their authority over a
+ * channel, so "whoever answered" is exactly the hole the check exists to close.
+ *
+ * Two sources, in order:
+ *  1. **This daemon's own settings**, when we publish the channel. No round trip, and no directory
+ *     outage in the path of a join to a channel running on this very machine.
+ *  2. **The directory**, for everything else. Before 020 there was no step 2 and this returned null
+ *     for every channel not published here — so nobody could join anybody else's channel, or their
+ *     own from a second device.
+ *
+ * ⚠️ **`null` MEANS REFUSE, AND EVERY UNKNOWN STILL ENDS HERE.** A directory that cannot be reached,
+ * one that faults, a pubkey that is not a channel, and a lookup that throws all answer `null`, which
+ * the exchange refuses as `admin_unresolved`. 020 removes a refusal that was firing on every
+ * channel; it must not weaken the one that remains.
+ */
+export function createProfileAdminPubkey(deps) {
+    return async function profileAdminPubkey(channelHex, agentId) {
+        // The ADMIN this daemon recorded, not the channel's own key — the two are different agents, and
+        // comparing a key with itself is what the first version of this did.
+        const settings = deps.members.settings(channelHex);
+        if (settings && settings.admin_pubkey.length > 0)
+            return settings.admin_pubkey;
+        try {
+            const outcome = await deps.lookup(agentId, channelHex);
+            if (outcome.kind === "admin")
+                return outcome.adminPubkeyHex;
+            deps.logger.info("channel.join.admin_unresolved", {
+                channel_pubkey: channelHex,
+                reason: outcome.kind === "not_a_channel" ? "not_a_channel" : outcome.reason,
+            });
+            return null;
+        }
+        catch (err) {
+            // This runs inside the inbound content path. An exception escaping would surface as a broken
+            // session rather than a refused join, which is a worse answer to the same question.
+            deps.logger.warn("channel.join.admin_unresolved", {
+                channel_pubkey: channelHex, reason: extractErrorMessage(err),
+            });
+            return null;
+        }
+    };
+}
+function needAgent(deps, params, connectionId) {
+    const agentName = deps.resolveCurrentAgent(connectionId, params?.["agent"]);
+    if (agentName === null) {
+        return {
+            ok: false,
+            answer: { ok: false, reason: "no_current_agent", guidance: "Name the agent, or select one with cello_use_agent." },
+        };
+    }
+    return { ok: true, agentName };
+}
+function needChannel(params) {
+    const raw = params?.["channel"];
+    if (typeof raw !== "string" || !/^[0-9a-fA-F]{64}$/.test(raw)) {
+        return {
+            ok: false,
+            answer: { ok: false, reason: "bad_channel", guidance: "Pass the channel's 64-character hex public key as `channel`." },
+        };
+    }
+    return { ok: true, channelHex: raw.toLowerCase() };
+}
+export function wireChannelMembership(deps) {
+    const { handlers, logger } = deps;
+    const members = new ChannelMembershipStore(deps.getDb(), logger);
+    const subscriptions = new ChannelSubscriptionStore(deps.getDb(), logger);
+    /**
+     * ⚠️ A CHANNEL IS AN AGENT THIS DAEMON HOLDS, looked up BY PUBKEY — the same rule the publisher
+     * follows, because the pubkey is the identity and the name is a mutable label. In this release the
+     * publisher and the admin are the SAME daemon; that is ASSERTED by returning null when the key is
+     * not here, rather than assumed anywhere downstream.
+     */
+    const localChannelAdmin = (channelHex) => {
+        const channel = deps.loadedAgents.find((a) => a.pubkey.toLowerCase() === channelHex.toLowerCase());
+        if (!channel)
+            return null;
+        /**
+         * ⚠️ **THE ADMIN IS A DIFFERENT AGENT FROM THE CHANNEL, and reading the channel's own key here
+         * was a defect.** The channel signs posts and never converses; the ADMIN holds the sessions and
+         * answers join requests. A subscriber compares the agent that answered against the admin key, so
+         * returning the channel's key made that comparison a key against itself — it could never
+         * succeed, in either direction, and the check was safe only by never passing.
+         *
+         * The admin is whichever agent ran the channel's setup, recorded then. No row, or an agent this
+         * daemon no longer holds, means this daemon cannot answer for the channel — which is the truth.
+         */
+        const settings = members.settings(channelHex);
+        if (!settings || settings.admin_pubkey.length === 0)
+            return null;
+        const adminAgent = deps.loadedAgents.find((a) => a.pubkey.toLowerCase() === settings.admin_pubkey.toLowerCase());
+        if (!adminAgent)
+            return null;
+        const adminKp = deps.keyProviders.get(adminAgent.name);
+        if (!adminKp)
+            return null;
+        return {
+            agentId: deps.resolveAgentId(adminAgent.name),
+            adminPubkeyHex: adminAgent.pubkey,
+            channelKeyProvider: channel.keyProvider,
+            adminKeyProvider: adminKp,
+        };
+    };
+    /**
+     * The join path carries an agent ID; `signalingFor` is keyed by the daemon's agent NAME. Resolved
+     * the same way `keyProviderFor` does it just below — by walking the loaded agents, because the ID
+     * is the stable key and the name is a mutable label.
+     */
+    const signalingForAgentId = (agentId) => {
+        const agent = deps.loadedAgents.find((a) => deps.resolveAgentId(a.name) === agentId);
+        return agent ? deps.signalingFor(agent.name) : null;
+    };
+    const profileAdminPubkey = createProfileAdminPubkey({
+        members,
+        logger,
+        lookup: createChannelAdminLookup({ signalingFor: signalingForAgentId, logger }),
+    });
+    const keyProviderFor = (agentId) => {
+        const agent = deps.loadedAgents.find((a) => deps.resolveAgentId(a.name) === agentId);
+        return agent ? (deps.keyProviders.get(agent.name) ?? null) : null;
+    };
+    const openSessionWith = (agentName, memberPubkeyHex) => {
+        const open = deps.activeSessionsFor(agentName)
+            .find((s) => s.counterpartyPubkeyHex.toLowerCase() === memberPubkeyHex.toLowerCase());
+        return open ? open.sessionId : null;
+    };
+    const raiseNotice = (event, channelHex, subscriberHex) => {
+        logger.info(event, { channel_pubkey: channelHex, subscriber_pubkey: subscriberHex });
+    };
+    /** Which agent a session belongs to, so the hook's answers go back down the right one. */
+    const exchangeFor = (agentName) => createChannelJoinExchange({
+        logger,
+        members,
+        subscriptions,
+        sendInSession: (sessionId, content) => deps.sendInSession(agentName, sessionId, content),
+        localChannelAdmin,
+        profileAdminPubkey,
+        keyProviderFor,
+        raiseNotice,
+    });
+    /**
+     * ⚠️ CLASSIFY SYNCHRONOUSLY, HANDLE ASYNCHRONOUSLY. The ingest path needs an immediate answer to
+     * decide whether these bytes are conversation; the admin and subscriber work — key wrapping,
+     * a directory lookup — cannot be done in that window.
+     */
+    deps.setOnChannelJoinFrame((agentName, sessionId, content, senderPubkey, correlationId) => {
+        /**
+         * ⚠️ **ROUTED BY FRAME TYPE, ONCE — trying the admin half first and falling through was a bug
+         * that made joining impossible.** `onAdminFrame` answers `consumed: true` for any join frame it
+         * cannot read as a REQUEST, so an acceptance or a re-key arriving at a SUBSCRIBER was absorbed
+         * there and the subscriber half was never called. A member sent a request, the admin admitted
+         * them and replied with the key, and their daemon appended a leaf and discarded it: no
+         * subscription, no key, and not one line saying anything had gone wrong. Every re-key after an
+         * ejection went the same way. The unit tests missed it because they call the two halves by hand.
+         */
+        const kind = channelJoinFrameType(content);
+        if (kind === null)
+            return { consumed: false };
+        const exchange = exchangeFor(agentName);
+        const agentId = deps.resolveAgentId(agentName);
+        void (async () => {
+            if (kind === JOIN_REQUEST_TYPE) {
+                await exchange.onAdminFrame(sessionId, senderPubkey, content);
+                return;
+            }
+            // An acceptance, a refusal or a re-key: all answers TO us, all the subscriber's business.
+            const asSubscriber = await exchange.onSubscriberFrame(agentId, sessionId, senderPubkey, content);
+            if (!asSubscriber.ok) {
+                logger.warn("channel.join.refused", {
+                    ...(correlationId !== undefined ? { correlationId } : {}),
+                    reason: asSubscriber.reason, sender: senderPubkey, frame_type: kind,
+                });
+            }
+        })().catch((err) => {
+            // A rejected promise here must not take down the content path for every other session.
+            logger.error("channel.join.handling_failed", {
+                ...(correlationId !== undefined ? { correlationId } : {}),
+                reason: extractErrorMessage(err),
+            });
+        });
+        return { consumed: true };
+    });
+    // ─── Operator verbs ───────────────────────────────────────────────────────────────────────────
+    handlers.set("cello_channels", async (params, connectionId) => {
+        const agent = needAgent(deps, params, connectionId);
+        if (!agent.ok)
+            return agent.answer;
+        const agentId = deps.resolveAgentId(agent.agentName);
+        const rows = subscriptions.active().filter((s) => s.agent_id === agentId);
+        return Promise.resolve({
+            ok: true,
+            channels: rows.map((s) => ({
+                channel: s.channel_pubkey,
+                moniker: s.moniker,
+                access: s.access,
+                delivered_through: s.delivered_through,
+                processed_through: s.processed_through,
+                // What the operator actually wants to know: how much is waiting.
+                unread: Math.max(0, s.delivered_through - s.processed_through),
+            })),
+        });
+    });
+    handlers.set("cello_channel_set_moniker", async (params, connectionId) => {
+        const agent = needAgent(deps, params, connectionId);
+        if (!agent.ok)
+            return agent.answer;
+        const channel = needChannel(params);
+        if (!channel.ok)
+            return channel.answer;
+        const moniker = params?.["moniker"];
+        if (typeof moniker !== "string" || moniker.length === 0) {
+            return { ok: false, reason: "bad_moniker", guidance: "Pass a `moniker`: what you want to call this channel." };
+        }
+        subscriptions.setMoniker(deps.resolveAgentId(agent.agentName), channel.channelHex, moniker);
+        return Promise.resolve({ ok: true, channel: channel.channelHex, moniker });
+    });
+    handlers.set("cello_channel_leave", async (params, connectionId) => {
+        const agent = needAgent(deps, params, connectionId);
+        if (!agent.ok)
+            return agent.answer;
+        const channel = needChannel(params);
+        if (!channel.ok)
+            return channel.answer;
+        try {
+            subscriptions.markLeft(deps.resolveAgentId(agent.agentName), channel.channelHex);
+        }
+        catch (err) {
+            return { ok: false, reason: extractErrorMessage(err) };
+        }
+        return Promise.resolve({
+            ok: true,
+            channel: channel.channelHex,
+            // ⚠️ LEAVING IS LOCAL, and saying so matters: an operator who thinks the publisher was told
+            // may expect to be removed from a member list they are still on.
+            guidance: "You have stopped collecting this channel. Nothing was sent — the publisher does not know, and your keys are kept so old posts stay readable.",
+        });
+    });
+    /**
+     * Eject a member and re-key the channel.
+     *
+     * ⚠️ **THE GENERATION BUMP AND THE STATUS FLIP ARE ONE TRANSACTION** (in the store). What happens
+     * HERE is the delivery, and a delivery that fails does NOT undo the ejection: the member is out at
+     * the relay the moment the next deposit carries the new fetch key, whether or not every remaining
+     * member has collected their new key yet. A member left behind hits `unknown_generation` and asks.
+     */
+    handlers.set("cello_channel_eject", async (params, connectionId) => {
+        const agent = needAgent(deps, params, connectionId);
+        if (!agent.ok)
+            return agent.answer;
+        const channel = needChannel(params);
+        if (!channel.ok)
+            return channel.answer;
+        const subscriber = params?.["subscriber"];
+        if (typeof subscriber !== "string" || !/^[0-9a-fA-F]{64}$/.test(subscriber)) {
+            return { ok: false, reason: "bad_subscriber", guidance: "Pass the member's 64-character hex public key as `subscriber`." };
+        }
+        const admin = localChannelAdmin(channel.channelHex);
+        if (!admin) {
+            return {
+                ok: false, reason: "channel_not_local",
+                guidance: "This daemon does not hold that channel's key, and ejecting is the admin's own act. Cross-daemon admin is not in this release.",
+            };
+        }
+        let outcome;
+        try {
+            outcome = members.eject(channel.channelHex, subscriber.toLowerCase());
+        }
+        catch (err) {
+            return { ok: false, reason: extractErrorMessage(err) };
+        }
+        /**
+         * The new key, wrapped once per REMAINING member — the ejected one is simply not in this list.
+         *
+         * ⚠️ STORED FIRST, against the admin's own agent id. If the process died between minting and
+         * storing, the channel's settings would say generation N while no key for N existed anywhere:
+         * every subsequent publish would encrypt under a key no member was ever given, and the channel
+         * would go permanently silent for everyone rather than for the one person ejected.
+         */
+        const gk = generateGroupKey(outcome.generation);
+        subscriptions.addKey(admin.agentId, channel.channelHex, gk, Date.now());
+        const channelPubkey = await admin.channelKeyProvider.getPublicKey();
+        let delivered = 0;
+        const unreached = [];
+        for (const member of outcome.remaining) {
+            const sessionId = openSessionWith(agent.agentName, member);
+            if (sessionId === null) {
+                // Not a failure of the ejection. Recorded by name so an operator can see who is behind.
+                logger.warn("channel.rekey.member_unreached", {
+                    channel_pubkey: channel.channelHex, member_pubkey: member, generation: outcome.generation,
+                });
+                unreached.push(member);
+                continue;
+            }
+            const bundle = await wrapGroupKeyFor(gk, channelPubkey, new Uint8Array(Buffer.from(member, "hex")), admin.adminKeyProvider);
+            await deps.sendInSession(agent.agentName, sessionId, encodeChannelRekey({
+                channel_pubkey: channelPubkey, key_bundle: bundle, generation: outcome.generation,
+            }));
+            delivered += 1;
+        }
+        logger.info("channel.rekey.completed", {
+            channel_pubkey: channel.channelHex,
+            generation: outcome.generation,
+            member_count: outcome.remaining.length,
+            delivered_count: delivered,
+            failed_count: unreached.length,
+        });
+        return {
+            ok: true,
+            channel: channel.channelHex,
+            generation: outcome.generation,
+            delivered,
+            unreached,
+            guidance: unreached.length > 0
+                ? `${String(unreached.length)} member(s) were not reachable and still hold the old key. They will ask for the new one when they next read; the ejection itself is done.`
+                : undefined,
+        };
+    });
+    handlers.set("cello_channel_approve", async (params, connectionId) => {
+        const agent = needAgent(deps, params, connectionId);
+        if (!agent.ok)
+            return agent.answer;
+        const channel = needChannel(params);
+        if (!channel.ok)
+            return channel.answer;
+        const subscriber = params?.["subscriber"];
+        if (typeof subscriber !== "string" || !/^[0-9a-fA-F]{64}$/.test(subscriber)) {
+            return { ok: false, reason: "bad_subscriber" };
+        }
+        const sessionId = openSessionWith(agent.agentName, subscriber.toLowerCase());
+        if (sessionId === null) {
+            // The approval is recorded either way: the next request from an approved member is accepted
+            // immediately, so an admin approving somebody who has gone offline is not wasted work.
+            return { ok: false, reason: "no_open_session", guidance: "They are not currently reachable. Approve again when they next ask, or the approval applies to their next request." };
+        }
+        const result = await exchangeFor(agent.agentName).approve(channel.channelHex, subscriber.toLowerCase(), sessionId);
+        return result.ok ? { ok: true, channel: channel.channelHex } : { ok: false, reason: result.reason };
+    });
+    handlers.set("cello_channel_refuse", async (params, connectionId) => {
+        const agent = needAgent(deps, params, connectionId);
+        if (!agent.ok)
+            return agent.answer;
+        const channel = needChannel(params);
+        if (!channel.ok)
+            return channel.answer;
+        const subscriber = params?.["subscriber"];
+        if (typeof subscriber !== "string" || !/^[0-9a-fA-F]{64}$/.test(subscriber)) {
+            return { ok: false, reason: "bad_subscriber" };
+        }
+        const sessionId = openSessionWith(agent.agentName, subscriber.toLowerCase());
+        if (sessionId === null)
+            return { ok: false, reason: "no_open_session" };
+        const result = await exchangeFor(agent.agentName).refuse(channel.channelHex, subscriber.toLowerCase(), sessionId);
+        return result.ok ? { ok: true, channel: channel.channelHex } : { ok: false, reason: result.reason };
+    });
+    return {
+        currentFetchKey: async (channelHex) => {
+            const admin = localChannelAdmin(channelHex);
+            if (!admin)
+                return undefined;
+            // The NEWEST generation this daemon holds for its own channel. `keysFor` returns them newest
+            // first, so a re-key is picked up by the next publish without anything else being told.
+            const newest = subscriptions.keysFor(admin.agentId, channelHex)[0];
+            if (!newest)
+                return undefined;
+            const fetchKey = await deriveFetchKey(newest, new Uint8Array(Buffer.from(channelHex, "hex")));
+            const timeMs = Date.now();
+            /**
+             * ⚠️ SIGNED WITH THE CHANNEL KEY, and it must be: the post's signature does not cover the
+             * fetch key, so without one of its own anyone who could read a post could replay its bytes
+             * inside the clock window, attach their own key and take the channel over.
+             */
+            const signature = await admin.channelKeyProvider.sign(buildChannelFetchKeyTbs(new Uint8Array(Buffer.from(channelHex, "hex")), fetchKey.publicKey, timeMs));
+            return { pubkey: fetchKey.publicKey, time_ms: timeMs, signature };
+        },
+    };
+}
+//# sourceMappingURL=channel-membership-wiring.js.map

package/dist/channel-membership-wiring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-membership-wiring.js","sourceRoot":"","sources":["../src/channel-membership-wiring.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,oBAAoB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,iBAAiB,GACrF,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAA0B,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EACL,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AA8BzD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAIxC;IACC,OAAO,KAAK,UAAU,kBAAkB,CAAC,UAAkB,EAAE,OAAe;QAC1E,gGAAgG;QAChG,qEAAqE;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,YAAY,CAAC;QAE/E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC,cAAc,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBAChD,cAAc,EAAE,UAAU;gBAC1B,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;aAC5E,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,6FAA6F;YAC7F,oFAAoF;YACpF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBAChD,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAiC,EAAE,MAA2C,EAAE,YAAoB;IAErH,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,OAAO,CAAuB,CAAC,CAAC;IAClG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,qDAAqD,EAAE;SACnH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,MAA2C;IAE9D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,8DAA8D,EAAE;SACvH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;AACrD,CAAC;AAWD,MAAM,UAAU,qBAAqB,CAAC,IAAiC;IACrE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAElC,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAEzE;;;;;OAKG;IACH,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAA4B,EAAE;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B;;;;;;;;;WASG;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC;YAC7C,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,kBAAkB,EAAE,OAAO,CAAC,WAAW;YACvC,gBAAgB,EAAE,OAAO;SAC1B,CAAC;IACJ,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAwB,EAAE;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;QAClD,OAAO;QACP,MAAM;QACN,MAAM,EAAE,wBAAwB,CAAC,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;KAChF,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,CAAC,OAAe,EAAsB,EAAE;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAE,eAAuB,EAAiB,EAAE;QACpF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC;aAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,UAAkB,EAAE,aAAqB,EAAQ,EAAE;QACrF,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC;IAEF,0FAA0F;IAC1F,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,yBAAyB,CAAC;QACnE,MAAM;QACN,OAAO;QACP,aAAa;QACb,aAAa,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC;QACxF,iBAAiB;QACjB,kBAAkB;QAClB,cAAc;QACd,WAAW;KACZ,CAAC,CAAC;IAEH;;;;OAIG;IACH,IAAI,CAAC,qBAAqB,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,EAAE;QACxF;;;;;;;;WAQG;QACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAE9C,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,MAAM,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YACD,0FAA0F;YAC1F,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACjG,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;oBAClC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzD,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC1B,uFAAuF;YACvF,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,iGAAiG;IAEjG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QAC5D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC,CAAC,cAAc;gBACzB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;gBACtC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;gBACtC,iEAAiE;gBACjE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC;aAC/D,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACvE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,uDAAuD,EAAE,CAAC;QACjH,CAAC;QACD,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACvC,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,CAAC,UAAU;YAC3B,4FAA4F;YAC5F,iEAAiE;YACjE,QAAQ,EAAE,8IAA8I;SACzJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gEAAgE,EAAE,CAAC;QAC7H,CAAC;QAED,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB;gBACtC,QAAQ,EAAE,+HAA+H;aAC1I,CAAC;QACJ,CAAC;QAED,IAAI,OAAoD,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,CAAC;QAED;;;;;;;WAOG;QACH,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,CAAC;QACpE,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,wFAAwF;gBACxF,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;oBAC5C,cAAc,EAAE,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC1F,CAAC,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,EAAE,EAAE,aAAa,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,gBAAgB,CACtF,CAAC;YACF,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,kBAAkB,CAAC;gBACtE,cAAc,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;aAClF,CAAC,CAAC,CAAC;YACJ,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACrC,cAAc,EAAE,OAAO,CAAC,UAAU;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;YACtC,eAAe,EAAE,SAAS;YAC1B,YAAY,EAAE,SAAS,CAAC,MAAM;SAC/B,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,CAAC,UAAU;YAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS;YACT,SAAS;YACT,QAAQ,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC;gBAC5B,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,2IAA2I;gBACxK,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACnE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,4FAA4F;YAC5F,uFAAuF;YACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,oHAAoH,EAAE,CAAC;QAClL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;QACnH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QAClE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7E,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;QAClH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YACpC,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,6FAA6F;YAC7F,wFAAwF;YACxF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAE9B,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B;;;;eAIG;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,IAAI,CACnD,uBAAuB,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CACpG,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/channel-publish-handlers.d.ts

@@ -0,0 +1,42 @@
+/**
+ * M16 018-PUBCOLLECT — the operator's IPC verbs for publishing on a channel.
+ *
+ *   cello_channel_publish    publish a post to the channel's relays
+ *   cello_channel_info_set   sign and deposit the channel's info record
+ *   cello_channel_prune      drop everything through a post number, oldest end only
+ *   cello_channel_resend     refill a relay that lost content, or fill a newly added one
+ *
+ * **IPC only — no MCP tools.** These are the publisher's own administration of a channel it holds
+ * the key to, and the caller is a human at a terminal, not an agent mid-conversation. The MCP
+ * surface for channels is a later tier; adding one here would put a publishing verb in reach of
+ * anything that can drive an agent's tools.
+ *
+ * Every verb answers `{ ok: false, reason, guidance }` rather than throwing, because the far side is
+ * a CLI that has to print something a person can act on.
+ */
+import type { Logger } from "./types.js";
+import type { ChannelPublisher } from "./channel-publisher.js";
+import { type ChannelConfig } from "./channel-config-store.js";
+type Handler = (params: Record<string, unknown> | undefined, connectionId: string) => Promise<unknown>;
+export interface ChannelPublishDeps {
+    handlers: Map<string, Handler>;
+    logger: Logger;
+    getPublisher: (agentName: string) => ChannelPublisher | null;
+    /**
+     * Record the publisher's decisions for a channel it holds the key to. REFUSES when this daemon
+     * does not hold that channel's key — otherwise an operator could record relays for somebody
+     * else's channel and every later verb would fail with a key error instead of the real reason.
+     */
+    setChannelConfig: (agentName: string, channelHex: string, config: ChannelConfig) => {
+        ok: true;
+    } | {
+        ok: false;
+        reason: string;
+        guidance?: string;
+    };
+    /** The daemon's single agent-selection rule, injected rather than re-implemented here. */
+    resolveCurrentAgent: (connectionId: string, explicitAgent?: string) => string | null;
+}
+export declare function registerChannelPublishHandlers(deps: ChannelPublishDeps): void;
+export {};
+//# sourceMappingURL=channel-publish-handlers.d.ts.map

package/dist/channel-publish-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-publish-handlers.d.ts","sourceRoot":"","sources":["../src/channel-publish-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1F,KAAK,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IAC7D;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,KAC7E;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,0FAA0F;IAC1F,mBAAmB,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACtF;AAkCD,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAuL7E"}