@essentialai/cogent-server 2.0.0

package/dist/services/peer-cleanup.js

@@ -0,0 +1,96 @@
+/**
+ * Background service that periodically scans all sessions and removes
+ * stale peers -- peers whose lastSeenAt timestamp exceeds the configured
+ * timeout. Removal adds peer_disconnected events to the session state
+ * so poll consumers are notified.
+ *
+ * Uses setInterval with unref() so the timer does not prevent Node.js
+ * from exiting naturally during graceful shutdown.
+ */
+export class PeerCleanup {
+    sessionStore;
+    staleTimeoutMs;
+    intervalHandle = null;
+    constructor(sessionStore, staleTimeoutMs) {
+        this.sessionStore = sessionStore;
+        this.staleTimeoutMs = staleTimeoutMs;
+    }
+    /**
+     * Start the periodic cleanup timer.
+     *
+     * @param intervalMs - How often to check for stale peers (default: 60 seconds)
+     */
+    start(intervalMs = 60_000) {
+        if (this.intervalHandle !== null) {
+            return; // Already running
+        }
+        this.intervalHandle = setInterval(() => {
+            this.cleanup().catch((err) => {
+                console.error("Peer cleanup error:", err);
+            });
+        }, intervalMs);
+        // Allow Node.js to exit even if the timer is still running
+        this.intervalHandle.unref();
+    }
+    /**
+     * Stop the periodic cleanup timer.
+     */
+    stop() {
+        if (this.intervalHandle !== null) {
+            clearInterval(this.intervalHandle);
+            this.intervalHandle = null;
+        }
+    }
+    /**
+     * Scan all sessions and remove stale peers.
+     *
+     * A peer is stale if `Date.now() - Date.parse(peer.lastSeenAt)` exceeds
+     * the configured staleTimeoutMs.
+     *
+     * For each removed peer, a peer_disconnected event is recorded in the
+     * session state so poll consumers are notified.
+     *
+     * @returns Total number of stale peers removed across all sessions.
+     */
+    async cleanup() {
+        const sessionIds = await this.sessionStore.listSessions();
+        let totalRemoved = 0;
+        for (const sessionId of sessionIds) {
+            const session = await this.sessionStore.getSession(sessionId);
+            if (!session)
+                continue;
+            const now = Date.now();
+            const stalePeerIds = [];
+            for (const [peerId, peer] of Object.entries(session.peers)) {
+                const lastSeen = Date.parse(peer.lastSeenAt);
+                if (now - lastSeen > this.staleTimeoutMs) {
+                    stalePeerIds.push(peerId);
+                }
+            }
+            if (stalePeerIds.length === 0)
+                continue;
+            await this.sessionStore.updateSession(sessionId, (state) => {
+                const timestamp = new Date().toISOString();
+                for (const peerId of stalePeerIds) {
+                    // Only remove if still present (could have been deregistered concurrently)
+                    if (state.peers[peerId]) {
+                        delete state.peers[peerId];
+                        const event = {
+                            type: "peer_disconnected",
+                            peerId,
+                            timestamp,
+                        };
+                        state.peerEvents.push(event);
+                    }
+                }
+                return state;
+            });
+            totalRemoved += stalePeerIds.length;
+        }
+        if (totalRemoved > 0) {
+            console.error(`Peer cleanup: removed ${totalRemoved} stale peer(s)`);
+        }
+        return totalRemoved;
+    }
+}
+//# sourceMappingURL=peer-cleanup.js.map

package/dist/services/peer-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-cleanup.js","sourceRoot":"","sources":["../../src/services/peer-cleanup.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IACL,YAAY,CAAe;IAC3B,cAAc,CAAS;IAChC,cAAc,GAA0C,IAAI,CAAC;IAErE,YAAY,YAA0B,EAAE,cAAsB;QAC5D,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAqB,MAAM;QAC/B,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO,CAAC,kBAAkB;QAC5B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC3B,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,UAAU,CAAC,CAAC;QAEf,2DAA2D;QAC3D,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;QAC1D,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,YAAY,GAAa,EAAE,CAAC;YAElC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC7C,IAAI,GAAG,GAAG,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;oBACzC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAExC,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACzD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAE3C,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;oBAClC,2EAA2E;oBAC3E,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;wBACxB,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBAE3B,MAAM,KAAK,GAAc;4BACvB,IAAI,EAAE,mBAAmB;4BACzB,MAAM;4BACN,SAAS;yBACV,CAAC;wBACF,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;gBAED,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,YAAY,IAAI,YAAY,CAAC,MAAM,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,yBAAyB,YAAY,gBAAgB,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;CACF"}

package/dist/services/session-cleanup.d.ts

@@ -0,0 +1,44 @@
+import type { SessionStore } from "./session-store.js";
+import type { ConnectionManager } from "./connection-manager.js";
+/**
+ * Background service that periodically scans all sessions and deletes
+ * those with no activity (messages, peer registrations, or peer events)
+ * beyond the configured inactivity threshold.
+ *
+ * Sessions with active WebSocket connections are never deleted,
+ * regardless of their timestamp age.
+ *
+ * Uses setInterval with unref() so the timer does not prevent Node.js
+ * from exiting naturally during graceful shutdown.
+ */
+export declare class SessionCleanup {
+    private readonly sessionStore;
+    private readonly connectionManager;
+    private readonly inactivityThresholdMs;
+    private intervalHandle;
+    constructor(sessionStore: SessionStore, connectionManager: ConnectionManager, inactivityThresholdMs: number);
+    /**
+     * Start the periodic cleanup timer.
+     *
+     * @param intervalMs - How often to scan for inactive sessions (default: 1 hour)
+     */
+    start(intervalMs?: number): void;
+    /**
+     * Stop the periodic cleanup timer.
+     */
+    stop(): void;
+    /**
+     * Scan all sessions and delete those inactive beyond the threshold.
+     *
+     * A session is inactive if the most recent activity timestamp
+     * (from createdAt, last message, last peer registration, or last peer event)
+     * is older than `inactivityThresholdMs` milliseconds ago.
+     *
+     * Sessions with active WebSocket connections are always preserved,
+     * regardless of their timestamps.
+     *
+     * @returns Number of sessions deleted.
+     */
+    cleanup(): Promise<number>;
+}
+//# sourceMappingURL=session-cleanup.d.ts.map

package/dist/services/session-cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cleanup.d.ts","sourceRoot":"","sources":["../../src/services/session-cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;;;;;;;;GAUG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,cAAc,CAA+C;gBAGnE,YAAY,EAAE,YAAY,EAC1B,iBAAiB,EAAE,iBAAiB,EACpC,qBAAqB,EAAE,MAAM;IAO/B;;;;OAIG;IACH,KAAK,CAAC,UAAU,GAAE,MAAkB,GAAG,IAAI;IAe3C;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ;;;;;;;;;;;OAWG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CAiDjC"}

package/dist/services/session-cleanup.js

@@ -0,0 +1,100 @@
+/**
+ * Background service that periodically scans all sessions and deletes
+ * those with no activity (messages, peer registrations, or peer events)
+ * beyond the configured inactivity threshold.
+ *
+ * Sessions with active WebSocket connections are never deleted,
+ * regardless of their timestamp age.
+ *
+ * Uses setInterval with unref() so the timer does not prevent Node.js
+ * from exiting naturally during graceful shutdown.
+ */
+export class SessionCleanup {
+    sessionStore;
+    connectionManager;
+    inactivityThresholdMs;
+    intervalHandle = null;
+    constructor(sessionStore, connectionManager, inactivityThresholdMs) {
+        this.sessionStore = sessionStore;
+        this.connectionManager = connectionManager;
+        this.inactivityThresholdMs = inactivityThresholdMs;
+    }
+    /**
+     * Start the periodic cleanup timer.
+     *
+     * @param intervalMs - How often to scan for inactive sessions (default: 1 hour)
+     */
+    start(intervalMs = 3_600_000) {
+        if (this.intervalHandle !== null) {
+            return; // Already running
+        }
+        this.intervalHandle = setInterval(() => {
+            this.cleanup().catch((err) => {
+                console.error("Session cleanup error:", err);
+            });
+        }, intervalMs);
+        // Allow Node.js to exit even if the timer is still running
+        this.intervalHandle.unref();
+    }
+    /**
+     * Stop the periodic cleanup timer.
+     */
+    stop() {
+        if (this.intervalHandle !== null) {
+            clearInterval(this.intervalHandle);
+            this.intervalHandle = null;
+        }
+    }
+    /**
+     * Scan all sessions and delete those inactive beyond the threshold.
+     *
+     * A session is inactive if the most recent activity timestamp
+     * (from createdAt, last message, last peer registration, or last peer event)
+     * is older than `inactivityThresholdMs` milliseconds ago.
+     *
+     * Sessions with active WebSocket connections are always preserved,
+     * regardless of their timestamps.
+     *
+     * @returns Number of sessions deleted.
+     */
+    async cleanup() {
+        const sessionIds = await this.sessionStore.listSessions();
+        let count = 0;
+        for (const sessionId of sessionIds) {
+            const session = await this.sessionStore.getSession(sessionId);
+            if (!session)
+                continue;
+            // Never delete a session with active WebSocket connections
+            if (this.connectionManager.getConnectedPeerIds(sessionId).length > 0) {
+                continue;
+            }
+            // Determine last activity timestamp from all sources
+            let lastActivityMs = Date.parse(session.createdAt);
+            // Last message timestamp (messages are in chronological order)
+            const lastMessage = session.messages.at(-1);
+            if (lastMessage) {
+                lastActivityMs = Math.max(lastActivityMs, Date.parse(lastMessage.timestamp));
+            }
+            // Last peer registration timestamp
+            const peerTimestamps = Object.values(session.peers).map((p) => Date.parse(p.registeredAt));
+            if (peerTimestamps.length > 0) {
+                lastActivityMs = Math.max(lastActivityMs, ...peerTimestamps);
+            }
+            // Last peer event timestamp
+            const lastEvent = session.peerEvents.at(-1);
+            if (lastEvent) {
+                lastActivityMs = Math.max(lastActivityMs, Date.parse(lastEvent.timestamp));
+            }
+            // Delete if inactive beyond threshold
+            if (Date.now() - lastActivityMs > this.inactivityThresholdMs) {
+                await this.sessionStore.deleteSession(sessionId);
+                count++;
+            }
+        }
+        if (count > 0) {
+            console.error(`Session cleanup: deleted ${count} inactive session(s)`);
+        }
+        return count;
+    }
+}
+//# sourceMappingURL=session-cleanup.js.map

package/dist/services/session-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cleanup.js","sourceRoot":"","sources":["../../src/services/session-cleanup.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACR,YAAY,CAAe;IAC3B,iBAAiB,CAAoB;IACrC,qBAAqB,CAAS;IACvC,cAAc,GAA0C,IAAI,CAAC;IAErE,YACE,YAA0B,EAC1B,iBAAoC,EACpC,qBAA6B;QAE7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAqB,SAAS;QAClC,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO,CAAC,kBAAkB;QAC5B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC3B,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,UAAU,CAAC,CAAC;QAEf,2DAA2D;QAC3D,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;QAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,2DAA2D;YAC3D,IAAI,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrE,SAAS;YACX,CAAC;YAED,qDAAqD;YACrD,IAAI,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAEnD,+DAA+D;YAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,WAAW,EAAE,CAAC;gBAChB,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/E,CAAC;YAED,mCAAmC;YACnC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAClC,CAAC;YACF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC;YAC/D,CAAC;YAED,4BAA4B;YAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,SAAS,EAAE,CAAC;gBACd,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7E,CAAC;YAED,sCAAsC;YACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBACjD,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,4BAA4B,KAAK,sBAAsB,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/services/session-store.d.ts

@@ -0,0 +1,103 @@
+import type { TokenEntry, SessionFileState } from "../types.js";
+/**
+ * Per-session JSON file store with in-memory locking and atomic writes.
+ *
+ * Each session is stored as `{sessionId}.json` in the state directory.
+ * A per-session promise-chain mutex prevents lost updates from concurrent
+ * requests targeting the same session. An in-memory Map provides O(1)
+ * token-to-session lookup, rebuilt from disk on startup.
+ */
+export declare class SessionStore {
+    private readonly stateDir;
+    private readonly maxMessagesPerSession;
+    /** Per-session promise-chain mutex. */
+    private readonly locks;
+    /** In-memory index: SHA-256 tokenHash -> sessionId. Rebuilt on init(). */
+    private readonly tokenIndex;
+    /** In-memory index: label -> sessionId. Rebuilt on init(). */
+    private readonly labelIndex;
+    constructor(stateDir: string, maxMessagesPerSession: number);
+    /**
+     * Initialize the store: create state directory and rebuild token index
+     * from all existing session files on disk.
+     */
+    init(): Promise<void>;
+    /**
+     * Create a new session with the given ID, label, secret hash, and initial token.
+     * Throws INVALID_INPUT if a session file already exists for this ID.
+     */
+    createSession(sessionId: string, label: string | undefined, secretHash: string, tokenEntry: TokenEntry, creatorIp?: string): Promise<SessionFileState>;
+    /**
+     * Read a session by ID. Returns null if the session file does not exist.
+     */
+    getSession(sessionId: string): Promise<SessionFileState | null>;
+    /**
+     * Look up a session by token hash. Returns the sessionId and state,
+     * or null if no matching token is found.
+     */
+    getSessionByTokenHash(tokenHash: string): Promise<{
+        sessionId: string;
+        state: SessionFileState;
+    } | null>;
+    /**
+     * Read-modify-write a session within a per-session lock.
+     * The updater function receives the current state and must return the new state.
+     * Throws SESSION_NOT_FOUND if the session does not exist.
+     */
+    updateSession(sessionId: string, updater: (state: SessionFileState) => SessionFileState): Promise<SessionFileState>;
+    /**
+     * Add a bearer token to a session and update the in-memory index.
+     */
+    addToken(sessionId: string, tokenEntry: TokenEntry): Promise<void>;
+    /**
+     * Delete a session by ID: remove token index entries, delete the JSON file,
+     * and clean up the lock entry. Silently succeeds if the session file is
+     * already deleted (ENOENT). Needed for admin CRUD operations.
+     */
+    deleteSession(sessionId: string): Promise<void>;
+    /**
+     * List all session IDs by scanning .json files in the state directory.
+     */
+    listSessions(): Promise<string[]>;
+    /**
+     * Return the token-to-session index (read-only) for auth middleware.
+     */
+    getTokenIndex(): ReadonlyMap<string, string>;
+    /**
+     * Look up a session ID by its human-readable label.
+     * Returns null if no session has the given label.
+     */
+    getSessionIdByLabel(label: string): string | null;
+    /**
+     * Check whether a label is already in use by an existing session.
+     */
+    isLabelTaken(label: string): boolean;
+    /**
+     * Read and parse a session JSON file.
+     * Throws SESSION_NOT_FOUND if the file does not exist.
+     * Throws STATE_CORRUPT if the file cannot be parsed.
+     */
+    private _readState;
+    /**
+     * Write session state to disk atomically.
+     * Writes to a temp file first, then renames (atomic on same filesystem).
+     */
+    private _writeState;
+    /**
+     * Per-session promise-chain mutex.
+     * Serializes all operations on a given session to prevent lost updates
+     * from concurrent requests.
+     */
+    private _withLock;
+    /**
+     * Rebuild the token index entries for a single session's tokens.
+     */
+    private _rebuildTokenIndex;
+    /**
+     * Rebuild the label index entry for a single session.
+     */
+    private _rebuildLabelIndex;
+    /** Compute the file path for a session ID. */
+    private _filePath;
+}
+//# sourceMappingURL=session-store.d.ts.map

package/dist/services/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../src/services/session-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEhE;;;;;;;GAOG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAE/C,uCAAuC;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAE1D,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;gBAE5C,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM;IAK3D;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B;;;OAGG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,CAAC;IA8C5B;;OAEG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAcrE;;;OAGG;IACG,qBAAqB,CACzB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAA;KAAE,GAAG,IAAI,CAAC;IAcjE;;;;OAIG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,gBAAgB,GACrD,OAAO,CAAC,gBAAgB,CAAC;IAe5B;;OAEG;IACG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASxE;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CrD;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAOvC;;OAEG;IACH,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAI5C;;;OAGG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIjD;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAMpC;;;;OAIG;YACW,UAAU;IAgCxB;;;OAGG;YACW,WAAW;IAWzB;;;;OAIG;YACW,SAAS;IAmBvB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B,8CAA8C;IAC9C,OAAO,CAAC,SAAS;CAGlB"}

package/dist/services/session-store.js

@@ -0,0 +1,292 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { BridgeError, ErrorCode } from "@essentialai/cogent";
+/**
+ * Per-session JSON file store with in-memory locking and atomic writes.
+ *
+ * Each session is stored as `{sessionId}.json` in the state directory.
+ * A per-session promise-chain mutex prevents lost updates from concurrent
+ * requests targeting the same session. An in-memory Map provides O(1)
+ * token-to-session lookup, rebuilt from disk on startup.
+ */
+export class SessionStore {
+    stateDir;
+    maxMessagesPerSession;
+    /** Per-session promise-chain mutex. */
+    locks = new Map();
+    /** In-memory index: SHA-256 tokenHash -> sessionId. Rebuilt on init(). */
+    tokenIndex = new Map();
+    /** In-memory index: label -> sessionId. Rebuilt on init(). */
+    labelIndex = new Map();
+    constructor(stateDir, maxMessagesPerSession) {
+        this.stateDir = stateDir;
+        this.maxMessagesPerSession = maxMessagesPerSession;
+    }
+    /**
+     * Initialize the store: create state directory and rebuild token index
+     * from all existing session files on disk.
+     */
+    async init() {
+        await fs.mkdir(this.stateDir, { recursive: true });
+        const files = await fs.readdir(this.stateDir);
+        for (const file of files) {
+            if (!file.endsWith(".json"))
+                continue;
+            const filePath = path.join(this.stateDir, file);
+            try {
+                const raw = await fs.readFile(filePath, "utf-8");
+                const state = JSON.parse(raw);
+                this._rebuildTokenIndex(state);
+                this._rebuildLabelIndex(state);
+            }
+            catch {
+                // Skip corrupt files during init -- they'll error on access
+            }
+        }
+    }
+    /**
+     * Create a new session with the given ID, label, secret hash, and initial token.
+     * Throws INVALID_INPUT if a session file already exists for this ID.
+     */
+    async createSession(sessionId, label, secretHash, tokenEntry, creatorIp) {
+        return this._withLock(sessionId, async () => {
+            const filePath = this._filePath(sessionId);
+            // Check if session file already exists
+            try {
+                await fs.access(filePath);
+                throw new BridgeError(ErrorCode.INVALID_INPUT, `Session ${sessionId} already exists`, "Use a different session ID or join the existing session");
+            }
+            catch (err) {
+                // If the error is our BridgeError, re-throw it
+                if (err instanceof BridgeError)
+                    throw err;
+                // Otherwise, file doesn't exist -- proceed
+            }
+            // Enforce label uniqueness before creating
+            if (label !== undefined && this.isLabelTaken(label)) {
+                throw new BridgeError(ErrorCode.INVALID_INPUT, `Label "${label}" already in use`, "Choose a different label");
+            }
+            const state = {
+                sessionId,
+                ...(label !== undefined ? { label } : {}),
+                secretHash,
+                tokens: [tokenEntry],
+                createdAt: new Date().toISOString(),
+                ...(creatorIp ? { creatorIp } : {}),
+                peers: {},
+                messages: [],
+                peerEvents: [],
+            };
+            await this._writeState(sessionId, state);
+            this._rebuildTokenIndex(state);
+            this._rebuildLabelIndex(state);
+            return state;
+        });
+    }
+    /**
+     * Read a session by ID. Returns null if the session file does not exist.
+     */
+    async getSession(sessionId) {
+        try {
+            return await this._readState(sessionId);
+        }
+        catch (err) {
+            if (err instanceof BridgeError &&
+                err.code === ErrorCode.SESSION_NOT_FOUND) {
+                return null;
+            }
+            throw err;
+        }
+    }
+    /**
+     * Look up a session by token hash. Returns the sessionId and state,
+     * or null if no matching token is found.
+     */
+    async getSessionByTokenHash(tokenHash) {
+        const sessionId = this.tokenIndex.get(tokenHash);
+        if (!sessionId)
+            return null;
+        const state = await this.getSession(sessionId);
+        if (!state) {
+            // Token index is stale -- remove the mapping
+            this.tokenIndex.delete(tokenHash);
+            return null;
+        }
+        return { sessionId, state };
+    }
+    /**
+     * Read-modify-write a session within a per-session lock.
+     * The updater function receives the current state and must return the new state.
+     * Throws SESSION_NOT_FOUND if the session does not exist.
+     */
+    async updateSession(sessionId, updater) {
+        return this._withLock(sessionId, async () => {
+            const state = await this._readState(sessionId);
+            const updated = updater(state);
+            // Enforce message cap
+            if (updated.messages.length > this.maxMessagesPerSession) {
+                updated.messages = updated.messages.slice(-this.maxMessagesPerSession);
+            }
+            await this._writeState(sessionId, updated);
+            return updated;
+        });
+    }
+    /**
+     * Add a bearer token to a session and update the in-memory index.
+     */
+    async addToken(sessionId, tokenEntry) {
+        await this._withLock(sessionId, async () => {
+            const state = await this._readState(sessionId);
+            state.tokens.push(tokenEntry);
+            await this._writeState(sessionId, state);
+            this.tokenIndex.set(tokenEntry.tokenHash, sessionId);
+        });
+    }
+    /**
+     * Delete a session by ID: remove token index entries, delete the JSON file,
+     * and clean up the lock entry. Silently succeeds if the session file is
+     * already deleted (ENOENT). Needed for admin CRUD operations.
+     */
+    async deleteSession(sessionId) {
+        await this._withLock(sessionId, async () => {
+            // Read the session to get all token hashes for index cleanup
+            const filePath = this._filePath(sessionId);
+            try {
+                const raw = await fs.readFile(filePath, "utf-8");
+                const state = JSON.parse(raw);
+                // Remove each token hash from the in-memory index
+                for (const token of state.tokens) {
+                    this.tokenIndex.delete(token.tokenHash);
+                }
+                // Remove label from the label index
+                if (state.label) {
+                    this.labelIndex.delete(state.label);
+                }
+            }
+            catch {
+                // If we can't read the file, it may already be deleted or corrupt.
+                // In either case, proceed with file deletion attempt.
+            }
+            // Delete the session JSON file from disk
+            try {
+                await fs.unlink(filePath);
+            }
+            catch (err) {
+                // ENOENT is fine -- file already deleted
+                if (!(err instanceof Error &&
+                    "code" in err &&
+                    err.code === "ENOENT")) {
+                    throw err;
+                }
+            }
+        });
+        // Clean up the lock entry after completion
+        this.locks.delete(sessionId);
+    }
+    /**
+     * List all session IDs by scanning .json files in the state directory.
+     */
+    async listSessions() {
+        const files = await fs.readdir(this.stateDir);
+        return files
+            .filter((f) => f.endsWith(".json"))
+            .map((f) => f.slice(0, -5));
+    }
+    /**
+     * Return the token-to-session index (read-only) for auth middleware.
+     */
+    getTokenIndex() {
+        return this.tokenIndex;
+    }
+    /**
+     * Look up a session ID by its human-readable label.
+     * Returns null if no session has the given label.
+     */
+    getSessionIdByLabel(label) {
+        return this.labelIndex.get(label) ?? null;
+    }
+    /**
+     * Check whether a label is already in use by an existing session.
+     */
+    isLabelTaken(label) {
+        return this.labelIndex.has(label);
+    }
+    // --- Private methods ---
+    /**
+     * Read and parse a session JSON file.
+     * Throws SESSION_NOT_FOUND if the file does not exist.
+     * Throws STATE_CORRUPT if the file cannot be parsed.
+     */
+    async _readState(sessionId) {
+        const filePath = this._filePath(sessionId);
+        let raw;
+        try {
+            raw = await fs.readFile(filePath, "utf-8");
+        }
+        catch (err) {
+            if (err instanceof Error &&
+                "code" in err &&
+                err.code === "ENOENT") {
+                throw new BridgeError(ErrorCode.SESSION_NOT_FOUND, `Session ${sessionId} not found`, "Check the session ID or create a new session");
+            }
+            throw err;
+        }
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            throw new BridgeError(ErrorCode.STATE_CORRUPT, `Session file for ${sessionId} is corrupt`, "The session data file could not be parsed as JSON");
+        }
+    }
+    /**
+     * Write session state to disk atomically.
+     * Writes to a temp file first, then renames (atomic on same filesystem).
+     */
+    async _writeState(sessionId, state) {
+        const filePath = this._filePath(sessionId);
+        const tmpPath = `${filePath}.${process.pid}.tmp`;
+        await fs.writeFile(tmpPath, JSON.stringify(state, null, 2), "utf-8");
+        await fs.rename(tmpPath, filePath);
+    }
+    /**
+     * Per-session promise-chain mutex.
+     * Serializes all operations on a given session to prevent lost updates
+     * from concurrent requests.
+     */
+    async _withLock(sessionId, fn) {
+        const prev = this.locks.get(sessionId) ?? Promise.resolve();
+        let release;
+        const next = new Promise((resolve) => {
+            release = resolve;
+        });
+        this.locks.set(sessionId, next);
+        await prev;
+        try {
+            return await fn();
+        }
+        finally {
+            release();
+        }
+    }
+    /**
+     * Rebuild the token index entries for a single session's tokens.
+     */
+    _rebuildTokenIndex(state) {
+        for (const token of state.tokens) {
+            this.tokenIndex.set(token.tokenHash, state.sessionId);
+        }
+    }
+    /**
+     * Rebuild the label index entry for a single session.
+     */
+    _rebuildLabelIndex(state) {
+        if (state.label) {
+            this.labelIndex.set(state.label, state.sessionId);
+        }
+    }
+    /** Compute the file path for a session ID. */
+    _filePath(sessionId) {
+        return path.join(this.stateDir, `${sessionId}.json`);
+    }
+}
+//# sourceMappingURL=session-store.js.map

package/dist/services/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../src/services/session-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAG7D;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACN,QAAQ,CAAS;IACjB,qBAAqB,CAAS;IAE/C,uCAAuC;IACtB,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE1D,0EAA0E;IACzD,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExD,8DAA8D;IAC7C,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExD,YAAY,QAAgB,EAAE,qBAA6B;QACzD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;gBAClD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,KAAyB,EACzB,UAAkB,EAClB,UAAsB,EACtB,SAAkB;QAElB,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAE3C,uCAAuC;YACvC,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC1B,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,aAAa,EACvB,WAAW,SAAS,iBAAiB,EACrC,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+CAA+C;gBAC/C,IAAI,GAAG,YAAY,WAAW;oBAAE,MAAM,GAAG,CAAC;gBAC1C,2CAA2C;YAC7C,CAAC;YAED,2CAA2C;YAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,aAAa,EACvB,UAAU,KAAK,kBAAkB,EACjC,0BAA0B,CAC3B,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAqB;gBAC9B,SAAS;gBACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,UAAU;gBACV,MAAM,EAAE,CAAC,UAAU,CAAC;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;aACf,CAAC;YAEF,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IACE,GAAG,YAAY,WAAW;gBAC1B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,iBAAiB,EACxC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qBAAqB,CACzB,SAAiB;QAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,6CAA6C;YAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,OAAsD;QAEtD,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAE/B,sBAAsB;YACtB,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACzD,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,UAAsB;QACtD,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC/C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YACzC,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;gBAElD,kDAAkD;gBAClD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC1C,CAAC;gBAED,oCAAoC;gBACpC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,sDAAsD;YACxD,CAAC;YAED,yCAAyC;YACzC,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,yCAAyC;gBACzC,IACE,CAAC,CACC,GAAG,YAAY,KAAK;oBACpB,MAAM,IAAI,GAAG;oBACZ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CACjD,EACD,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,2CAA2C;QAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,KAAK;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,0BAA0B;IAE1B;;;;OAIG;IACK,KAAK,CAAC,UAAU,CAAC,SAAiB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,GAAW,CAAC;QAEhB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IACE,GAAG,YAAY,KAAK;gBACpB,MAAM,IAAI,GAAG;gBACZ,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAChD,CAAC;gBACD,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,iBAAiB,EAC3B,WAAW,SAAS,YAAY,EAChC,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,aAAa,EACvB,oBAAoB,SAAS,aAAa,EAC1C,mDAAmD,CACpD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,WAAW,CACvB,SAAiB,EACjB,KAAuB;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QAEjD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,SAAS,CACrB,SAAiB,EACjB,EAAoB;QAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,IAAI,OAAmB,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAEhC,MAAM,IAAI,CAAC;QACX,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,OAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,KAAuB;QAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,KAAuB;QAChD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,8CAA8C;IACtC,SAAS,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IACvD,CAAC;CACF"}