@essentialai/cogent-server 3.4.2 → 3.4.3

package/dist/services/session-store-postgres.js

@@ -0,0 +1,393 @@
+import { BridgeError, ErrorCode, isValidSessionId } from "@essentialai/cogent";
+import { withTransaction } from "../db/pool.js";
+import { isUpToDate } from "../db/migrate.js";
+import { labelIndexKey } from "./session-store.js";
+import { logOrgEvent } from "./obs-log.js";
+/**
+ * Postgres implementation of {@link SessionStore} (Business Edition, FR35),
+ * JSONB-hybrid: queryable/unique/auth scalars are columns; the rest of the
+ * session document lives in a `state jsonb` column — a 1:1 mirror of the file
+ * store's per-session JSON, so `updateSession` is a whole-document UPDATE.
+ *
+ * The synchronous index methods (`getSessionIdByLabel`, `isLabelTaken`,
+ * `getTokenIndex`) are served from in-memory caches rebuilt on `init()` and kept
+ * in sync on writes — exactly as `FileSessionStore` does. This is correct for
+ * the single-node MVP (all writes go through this instance); multi-node (vNext)
+ * will need cache invalidation or a shared lookup. `getSessionByTokenHash`
+ * queries the DB directly so bearer-token auth is always authoritative.
+ *
+ * The pool is injected (DI) and owned by the caller (index.ts closes it).
+ */
+export class PostgresSessionStore {
+    pool;
+    maxMessagesPerSession;
+    /** label-scope key -> sessionId (mirrors FileSessionStore.labelIndex). */
+    labelIndex = new Map();
+    /** SHA-256 tokenHash -> sessionId. */
+    tokenIndex = new Map();
+    constructor(pool, maxMessagesPerSession) {
+        this.pool = pool;
+        this.maxMessagesPerSession = maxMessagesPerSession;
+    }
+    async init() {
+        if (!(await isUpToDate(this.pool))) {
+            throw new BridgeError(ErrorCode.STARTUP_FAILED, "Database schema is not migrated", "Run `npm run db:migrate` against COGENT_SERVER_DATABASE_URL before starting");
+        }
+        // Rebuild the sync-lookup caches from the DB.
+        const tokens = await this.pool.query("SELECT token_hash, session_id FROM tokens");
+        for (const r of tokens.rows)
+            this.tokenIndex.set(r.token_hash, r.session_id);
+        const labels = await this.pool.query("SELECT session_id, label, org_id_hash, org_scope FROM sessions WHERE label IS NOT NULL");
+        for (const r of labels.rows) {
+            // Fail-closed: never index a legacy business session lacking org_scope
+            // under the public bare key (mirrors FileSessionStore._rebuildLabelIndex).
+            if (r.org_id_hash !== null && r.org_scope === null)
+                continue;
+            this.labelIndex.set(labelIndexKey(r.label, r.org_scope ?? undefined), r.session_id);
+        }
+    }
+    async createSession(sessionId, label, secretHash, tokenEntry, creatorIp, org) {
+        const createdAt = new Date().toISOString();
+        const initialDoc = { peers: {}, messages: [], peerEvents: [] };
+        // Returned from the tx, logged AFTER commit so an "admitted" quota_check is
+        // never emitted for a create that later rolls back. (Rejections are logged
+        // inside the tx — the rejection IS the committed outcome.)
+        const channelAdmit = await withTransaction(this.pool, async (client) => {
+            let admit = null;
+            // Atomic per-org channel quota (FR7/FR8). Row-lock the org's quota row so
+            // concurrent creates for the same org serialize: exactly one can cross the
+            // limit. A missing quota row = not-yet-provisioned (E3) -> no cap. The
+            // lock_timeout bounds FOR UPDATE contention (no indefinite block).
+            if (org) {
+                await client.query("SET LOCAL lock_timeout = '3s'");
+                try {
+                    const qr = await client.query("SELECT max_channels FROM org_quotas WHERE org_scope = $1 FOR UPDATE", [org.scope]);
+                    if (qr.rowCount && qr.rowCount > 0) {
+                        const cnt = await client.query("SELECT count(*)::int AS n FROM sessions WHERE org_scope = $1", [org.scope]);
+                        const atLimit = cnt.rows[0].n >= qr.rows[0].max_channels;
+                        if (atLimit) {
+                            logOrgEvent({
+                                event: "quota_check",
+                                orgScope: org.scope,
+                                sessionId,
+                                outcome: "rejected",
+                                detail: { quota: "channel", used: cnt.rows[0].n, limit: qr.rows[0].max_channels },
+                            });
+                            throw new BridgeError(ErrorCode.SESSION_FULL, `Org channel quota reached (${cnt.rows[0].n}/${qr.rows[0].max_channels})`, "Upgrade your tier or delete a channel before creating another");
+                        }
+                        admit = { used: cnt.rows[0].n, limit: qr.rows[0].max_channels };
+                    }
+                }
+                catch (err) {
+                    // Surface lock_timeout/deadlock as a clean retryable error; rethrow
+                    // everything else (incl. the SESSION_FULL above) unchanged.
+                    this._mapLockError(err);
+                }
+            }
+            try {
+                await client.query(`INSERT INTO sessions
+             (session_id, label, secret_hash, org_id_hash, org_scope, creator_ip, created_at, state)
+           VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb)`, [
+                    sessionId,
+                    label ?? null,
+                    secretHash,
+                    org?.idHash ?? null,
+                    org?.scope ?? null,
+                    creatorIp || null, // drop empty string, like the file store
+                    createdAt,
+                    JSON.stringify(initialDoc),
+                ]);
+            }
+            catch (err) {
+                this._mapCreateError(err, sessionId, label);
+            }
+            await client.query("INSERT INTO tokens (token_hash, session_id, peer_id, created_at) VALUES ($1, $2, $3, $4)", [tokenEntry.tokenHash, sessionId, tokenEntry.peerId ?? null, tokenEntry.createdAt]);
+            return admit;
+        });
+        // Update caches AFTER the commit.
+        this.tokenIndex.set(tokenEntry.tokenHash, sessionId);
+        if (label !== undefined)
+            this.labelIndex.set(labelIndexKey(label, org?.scope), sessionId);
+        // Admitted quota_check logged post-commit (accurate: the channel exists now).
+        if (org && channelAdmit) {
+            logOrgEvent({
+                event: "quota_check",
+                orgScope: org.scope,
+                sessionId,
+                outcome: "admitted",
+                detail: { quota: "channel", used: channelAdmit.used, limit: channelAdmit.limit },
+            });
+        }
+        const state = {
+            sessionId,
+            ...(label !== undefined ? { label } : {}),
+            secretHash,
+            ...(org !== undefined ? { orgIdHash: org.idHash, orgScope: org.scope } : {}),
+            tokens: [tokenEntry],
+            createdAt,
+            ...(creatorIp ? { creatorIp } : {}),
+            peers: {},
+            messages: [],
+            peerEvents: [],
+        };
+        return state;
+    }
+    async getSession(sessionId) {
+        // A malformed (non-UUID) id can't exist in a uuid column; return not-found
+        // rather than letting Postgres raise 22P02 (parity with the file store).
+        if (!isValidSessionId(sessionId))
+            return null;
+        const res = await this.pool.query("SELECT * FROM sessions WHERE session_id = $1", [sessionId]);
+        if (res.rowCount === 0)
+            return null;
+        const tokens = await this.pool.query("SELECT token_hash, peer_id, created_at FROM tokens WHERE session_id = $1 ORDER BY created_at ASC", [sessionId]);
+        return this._rowToState(res.rows[0], tokens.rows);
+    }
+    async getSessionByTokenHash(tokenHash) {
+        // Authoritative DB lookup (not the cache) — auth must never read stale.
+        const res = await this.pool.query("SELECT session_id FROM tokens WHERE token_hash = $1", [tokenHash]);
+        if (res.rowCount === 0)
+            return null;
+        const sessionId = res.rows[0].session_id;
+        const state = await this.getSession(sessionId);
+        if (!state)
+            return null;
+        return { sessionId, state };
+    }
+    async updateSession(sessionId, updater) {
+        if (!isValidSessionId(sessionId)) {
+            throw new BridgeError(ErrorCode.SESSION_NOT_FOUND, `Session ${sessionId} not found`, "Check the session ID or create a new session");
+        }
+        const { state: result, admit: agentAdmit } = await withTransaction(this.pool, async (client) => {
+            let admit = null;
+            const res = await client.query("SELECT * FROM sessions WHERE session_id = $1 FOR UPDATE", [sessionId]);
+            if (res.rowCount === 0) {
+                throw new BridgeError(ErrorCode.SESSION_NOT_FOUND, `Session ${sessionId} not found`, "Check the session ID or create a new session");
+            }
+            const tokens = await client.query("SELECT token_hash, peer_id, created_at FROM tokens WHERE session_id = $1 ORDER BY created_at ASC", [sessionId]);
+            const current = this._rowToState(res.rows[0], tokens.rows);
+            const updated = updater(structuredClone(current));
+            if (updated.messages.length > this.maxMessagesPerSession) {
+                updated.messages = updated.messages.slice(-this.maxMessagesPerSession);
+            }
+            // Atomic per-org AGENT quota (FR7/FR8). Enforce ONLY when this update adds
+            // a net-new peer to a business (org-scoped) session — peer registration is
+            // the single mutation that consumes an agent slot. We already hold this
+            // session's row lock (FOR UPDATE above); additionally row-lock the org's
+            // quota row so concurrent registrations across the org's channels
+            // serialize — exactly one can cross the limit (parity with the channel
+            // quota in createSession). Release is inherent: deregister drops a peer →
+            // the count falls. A missing quota row = not-yet-provisioned (E3) → no cap.
+            // `addsPeer` uses the net key-count delta, which is exact here because the
+            // only updater that grows `peers` is peer registration, and it adds exactly
+            // one key (peers.ts). A heartbeat (lastSeenAt), message append, or
+            // deregister never grows the count, so the check is skipped for them. The
+            // enforced `total` below is the absolute post-state count (not a delta), so
+            // even a hypothetical multi-peer churn could never cross the cap.
+            const orgScope = res.rows[0].org_scope;
+            const addsPeer = orgScope !== null &&
+                Object.keys(updated.peers).length > Object.keys(current.peers).length;
+            if (addsPeer) {
+                await client.query("SET LOCAL lock_timeout = '3s'");
+                try {
+                    const qr = await client.query("SELECT max_agents FROM org_quotas WHERE org_scope = $1 FOR UPDATE", [orgScope]);
+                    if (qr.rowCount && qr.rowCount > 0) {
+                        // Count agents in the org's OTHER channels from the DB (this session's
+                        // new peers aren't written yet), then add this session's post-update
+                        // peer count. COALESCE guards a null/absent peers document.
+                        const others = await client.query(`SELECT COALESCE(
+                  SUM((SELECT count(*) FROM jsonb_object_keys(COALESCE(s.state->'peers', '{}'::jsonb)))),
+                  0)::int AS n
+                 FROM sessions s
+                WHERE s.org_scope = $1 AND s.session_id <> $2`, [orgScope, sessionId]);
+                        const total = others.rows[0].n + Object.keys(updated.peers).length;
+                        const atLimit = total > qr.rows[0].max_agents;
+                        if (atLimit) {
+                            logOrgEvent({
+                                event: "quota_check",
+                                orgScope,
+                                sessionId,
+                                outcome: "rejected",
+                                detail: { quota: "agent", used: total, limit: qr.rows[0].max_agents },
+                            });
+                            throw new BridgeError(ErrorCode.SESSION_FULL, `Org agent quota reached (${total}/${qr.rows[0].max_agents})`, "Upgrade your tier or disconnect an agent before registering another");
+                        }
+                        admit = { used: total, limit: qr.rows[0].max_agents, orgScope: orgScope };
+                    }
+                }
+                catch (err) {
+                    // Surface lock_timeout/deadlock as a clean retryable error; rethrow
+                    // everything else (incl. the SESSION_FULL above) unchanged.
+                    this._mapLockError(err);
+                }
+            }
+            // Persist the document (everything except tokens, which addToken owns) +
+            // the scalar columns, in case the updater changed them.
+            const doc = this._docFromState(updated);
+            await client.query(`UPDATE sessions
+           SET label = $2, secret_hash = $3, org_id_hash = $4, org_scope = $5,
+               creator_ip = $6, state = $7::jsonb
+         WHERE session_id = $1`, [
+                sessionId,
+                updated.label ?? null,
+                updated.secretHash,
+                updated.orgIdHash ?? null,
+                updated.orgScope ?? null,
+                updated.creatorIp ?? null,
+                JSON.stringify(doc),
+            ]);
+            return { state: structuredClone(updated), admit };
+        });
+        // Admitted agent quota_check logged post-commit (the peer is persisted now).
+        if (agentAdmit) {
+            logOrgEvent({
+                event: "quota_check",
+                orgScope: agentAdmit.orgScope,
+                sessionId,
+                outcome: "admitted",
+                detail: { quota: "agent", used: agentAdmit.used, limit: agentAdmit.limit },
+            });
+        }
+        return result;
+    }
+    async addToken(sessionId, tokenEntry) {
+        if (!isValidSessionId(sessionId)) {
+            throw new BridgeError(ErrorCode.SESSION_NOT_FOUND, `Session ${sessionId} not found`, "Check the session ID or create a new session");
+        }
+        try {
+            await this.pool.query(`INSERT INTO tokens (token_hash, session_id, peer_id, created_at)
+         VALUES ($1, $2, $3, $4) ON CONFLICT (token_hash) DO NOTHING`, [tokenEntry.tokenHash, sessionId, tokenEntry.peerId ?? null, tokenEntry.createdAt]);
+        }
+        catch (err) {
+            // FK violation => the session does not exist (parity with file store).
+            if (err.code === "23503") {
+                throw new BridgeError(ErrorCode.SESSION_NOT_FOUND, `Session ${sessionId} not found`, "Check the session ID or create a new session");
+            }
+            throw err;
+        }
+        this.tokenIndex.set(tokenEntry.tokenHash, sessionId);
+    }
+    async deleteSession(sessionId) {
+        if (!isValidSessionId(sessionId))
+            return; // no-op like the file store
+        const res = await this.pool.query("DELETE FROM sessions WHERE session_id = $1 RETURNING label, org_scope", [sessionId]);
+        if (res.rowCount && res.rowCount > 0) {
+            const { label, org_scope } = res.rows[0];
+            if (label !== null) {
+                this.labelIndex.delete(labelIndexKey(label, org_scope ?? undefined));
+            }
+        }
+        // tokens were cascade-deleted; purge their cache entries for this session.
+        for (const [hash, sid] of this.tokenIndex) {
+            if (sid === sessionId)
+                this.tokenIndex.delete(hash);
+        }
+    }
+    async listSessions() {
+        const res = await this.pool.query("SELECT session_id FROM sessions");
+        return res.rows.map((r) => r.session_id);
+    }
+    async countAgentsByOrgScope(orgScope) {
+        // Mirrors EXACTLY the per-org agent-quota count in updateSession (sum of
+        // peer keys across the org's sessions) — minus the self-exclusion, since
+        // here we want the full current total. Keeps usage == enforcement.
+        const res = await this.pool.query(`SELECT COALESCE(
+          SUM((SELECT count(*) FROM jsonb_object_keys(COALESCE(s.state->'peers', '{}'::jsonb)))),
+          0)::int AS n
+         FROM sessions s
+        WHERE s.org_scope = $1`, [orgScope]);
+        return res.rows[0].n;
+    }
+    async setOrgQuota(orgScope, tier, maxChannels, maxAgents) {
+        // Upsert the org's enforced quota row (Story 5.1, FR20). The CP owns the
+        // tier→limits mapping; the relay persists what it enforces (channel quota in
+        // createSession, agent quota in updateSession — both row-lock this row). Idempotent:
+        // a tier change (5.7) re-sends and overwrites. updated_at tracks the last push.
+        await this.pool.query(`INSERT INTO org_quotas (org_scope, tier, max_channels, max_agents, updated_at)
+         VALUES ($1, $2, $3, $4, now())
+       ON CONFLICT (org_scope) DO UPDATE SET
+         tier = EXCLUDED.tier,
+         max_channels = EXCLUDED.max_channels,
+         max_agents = EXCLUDED.max_agents,
+         updated_at = now()`, [orgScope, tier, maxChannels, maxAgents]);
+    }
+    getTokenIndex() {
+        return this.tokenIndex;
+    }
+    getSessionIdByLabel(label, orgScope) {
+        return this.labelIndex.get(labelIndexKey(label, orgScope)) ?? null;
+    }
+    isLabelTaken(label, orgScope) {
+        return this.labelIndex.has(labelIndexKey(label, orgScope));
+    }
+    async getGlobalMessageCount() {
+        const res = await this.pool.query("SELECT total_messages FROM global_stats WHERE id = true");
+        return res.rowCount ? Number(res.rows[0].total_messages) : 0;
+    }
+    async incrementGlobalMessageCount() {
+        // Atomic in SQL — no read-modify-write race.
+        await this.pool.query("UPDATE global_stats SET total_messages = total_messages + 1 WHERE id = true");
+    }
+    // --- Private helpers ---
+    /** Assemble a SessionFileState from a sessions row + its token rows. */
+    _rowToState(row, tokenRows) {
+        const doc = row.state ?? {};
+        return {
+            sessionId: row.session_id,
+            ...(row.label !== null ? { label: row.label } : {}),
+            secretHash: row.secret_hash,
+            ...(row.org_id_hash !== null ? { orgIdHash: row.org_id_hash } : {}),
+            ...(row.org_scope !== null ? { orgScope: row.org_scope } : {}),
+            tokens: tokenRows.map((t) => ({
+                tokenHash: t.token_hash,
+                createdAt: t.created_at instanceof Date ? t.created_at.toISOString() : String(t.created_at),
+                ...(t.peer_id !== null ? { peerId: t.peer_id } : {}),
+            })),
+            createdAt: row.created_at instanceof Date ? row.created_at.toISOString() : String(row.created_at),
+            ...(row.creator_ip !== null ? { creatorIp: row.creator_ip } : {}),
+            peers: doc.peers ?? {},
+            messages: doc.messages ?? [],
+            peerEvents: doc.peerEvents ?? [],
+            ...(doc.messageQueue !== undefined ? { messageQueue: doc.messageQueue } : {}),
+            ...(doc.channelMappings !== undefined ? { channelMappings: doc.channelMappings } : {}),
+        };
+    }
+    /** Extract the JSONB document (everything not in a scalar column or tokens). */
+    _docFromState(state) {
+        return {
+            peers: state.peers,
+            messages: state.messages,
+            peerEvents: state.peerEvents,
+            ...(state.messageQueue !== undefined ? { messageQueue: state.messageQueue } : {}),
+            ...(state.channelMappings !== undefined ? { channelMappings: state.channelMappings } : {}),
+        };
+    }
+    /**
+     * Map a row-lock contention failure to a clean, retryable BridgeError.
+     * 55P03 = lock_timeout fired (FOR UPDATE could not acquire within 3s);
+     * 40P01 = deadlock_detected. Both bound the critical section so a busy org
+     * can never hang a request indefinitely. Any other error is rethrown as-is
+     * (including the BridgeError SESSION_FULL raised inside the quota block).
+     */
+    _mapLockError(err) {
+        const code = err.code;
+        if (code === "55P03" || code === "40P01") {
+            throw new BridgeError(ErrorCode.LOCK_TIMEOUT, "Org quota check timed out under contention", "Too many concurrent requests for this org — retry in a moment");
+        }
+        throw err;
+    }
+    /** Map a pg INSERT error to the file store's BridgeError contract. */
+    _mapCreateError(err, sessionId, label) {
+        const e = err;
+        if (e.code === "23505") {
+            // Positively identify the constraint (don't assume label by elimination).
+            if (e.constraint === "sessions_scope_label_uniq") {
+                throw new BridgeError(ErrorCode.INVALID_INPUT, `Label "${label}" already in use`, "Choose a different label");
+            }
+            // sessions_pkey (or any other dup) -> the session id is taken.
+            throw new BridgeError(ErrorCode.INVALID_INPUT, `Session ${sessionId} already exists`, "Use a different session ID or join the existing session");
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=session-store-postgres.js.map

package/dist/services/session-store-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store-postgres.js","sourceRoot":"","sources":["../../src/services/session-store-postgres.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE/E,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAgC3C;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,oBAAoB;IACd,IAAI,CAAO;IACX,qBAAqB,CAAS;IAE/C,0EAA0E;IACzD,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxD,sCAAsC;IACrB,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExD,YAAY,IAAU,EAAE,qBAA6B;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,cAAc,EACxB,iCAAiC,EACjC,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,8CAA8C;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAClC,2CAA2C,CAC5C,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QAE7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAKjC,wFAAwF,CAAC,CAAC;QAC7F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5B,uEAAuE;YACvE,2EAA2E;YAC3E,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;gBAAE,SAAS;YAC7D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,KAAyB,EACzB,UAAkB,EAClB,UAAsB,EACtB,SAAkB,EAClB,GAAgB;QAEhB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAE/D,4EAA4E;QAC5E,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAM,YAAY,GAAG,MAAM,eAAe,CAAyC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7G,IAAI,KAAK,GAA2C,IAAI,CAAC;YACzD,0EAA0E;YAC1E,2EAA2E;YAC3E,uEAAuE;YACvE,mEAAmE;YACnE,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACpD,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC3B,qEAAqE,EACrE,CAAC,GAAG,CAAC,KAAK,CAAC,CACZ,CAAC;oBACF,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;wBACnC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,8DAA8D,EAC9D,CAAC,GAAG,CAAC,KAAK,CAAC,CACZ,CAAC;wBACF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;wBACzD,IAAI,OAAO,EAAE,CAAC;4BACZ,WAAW,CAAC;gCACV,KAAK,EAAE,aAAa;gCACpB,QAAQ,EAAE,GAAG,CAAC,KAAK;gCACnB,SAAS;gCACT,OAAO,EAAE,UAAU;gCACnB,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE;6BAClF,CAAC,CAAC;4BACH,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,YAAY,EACtB,8BAA8B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,EACzE,+DAA+D,CAChE,CAAC;wBACJ,CAAC;wBACD,KAAK,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;oBAClE,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,oEAAoE;oBACpE,4DAA4D;oBAC5D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAChB;;0DAEgD,EAChD;oBACE,SAAS;oBACT,KAAK,IAAI,IAAI;oBACb,UAAU;oBACV,GAAG,EAAE,MAAM,IAAI,IAAI;oBACnB,GAAG,EAAE,KAAK,IAAI,IAAI;oBAClB,SAAS,IAAI,IAAI,EAAE,yCAAyC;oBAC5D,SAAS;oBACT,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;iBAC3B,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,MAAM,CAAC,KAAK,CAChB,0FAA0F,EAC1F,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CACnF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;QAE1F,8EAA8E;QAC9E,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;YACxB,WAAW,CAAC;gBACV,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,GAAG,CAAC,KAAK;gBACnB,SAAS;gBACT,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE;aACjF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAqB;YAC9B,SAAS;YACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,UAAU;YACV,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,EAAE,CAAC,UAAU,CAAC;YACpB,SAAS;YACT,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;SACf,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,2EAA2E;QAC3E,yEAAyE;QACzE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B,8CAA8C,EAC9C,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAClC,kGAAkG,EAClG,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,SAAiB;QAEjB,wEAAwE;QACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B,qDAAqD,EACrD,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,OAAsD;QAEtD,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,iBAAiB,EAC3B,WAAW,SAAS,YAAY,EAChC,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QAGD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAG/D,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7B,IAAI,KAAK,GAAe,IAAI,CAAC;YAC7B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,yDAAyD,EACzD,CAAC,SAAS,CAAC,CACZ,CAAC;YACF,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,iBAAiB,EAC3B,WAAW,SAAS,YAAY,EAChC,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,kGAAkG,EAClG,CAAC,SAAS,CAAC,CACZ,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YAElD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACzD,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACzE,CAAC;YAED,2EAA2E;YAC3E,2EAA2E;YAC3E,wEAAwE;YACxE,yEAAyE;YACzE,kEAAkE;YAClE,uEAAuE;YACvE,0EAA0E;YAC1E,4EAA4E;YAC5E,2EAA2E;YAC3E,4EAA4E;YAC5E,mEAAmE;YACnE,0EAA0E;YAC1E,4EAA4E;YAC5E,kEAAkE;YAClE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvC,MAAM,QAAQ,GACZ,QAAQ,KAAK,IAAI;gBACjB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YACxE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACpD,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC3B,mEAAmE,EACnE,CAAC,QAAQ,CAAC,CACX,CAAC;oBACF,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;wBACnC,uEAAuE;wBACvE,qEAAqE;wBACrE,4DAA4D;wBAC5D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B;;;;8DAIgD,EAChD,CAAC,QAAQ,EAAE,SAAS,CAAC,CACtB,CAAC;wBACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;wBACnE,MAAM,OAAO,GAAG,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;wBAC9C,IAAI,OAAO,EAAE,CAAC;4BACZ,WAAW,CAAC;gCACV,KAAK,EAAE,aAAa;gCACpB,QAAQ;gCACR,SAAS;gCACT,OAAO,EAAE,UAAU;gCACnB,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE;6BACtE,CAAC,CAAC;4BACH,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,YAAY,EACtB,4BAA4B,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,EAC7D,qEAAqE,CACtE,CAAC;wBACJ,CAAC;wBACD,KAAK,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAS,EAAE,CAAC;oBAC7E,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,oEAAoE;oBACpE,4DAA4D;oBAC5D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,wDAAwD;YACxD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,MAAM,CAAC,KAAK,CAChB;;;+BAGuB,EACvB;gBACE,SAAS;gBACT,OAAO,CAAC,KAAK,IAAI,IAAI;gBACrB,OAAO,CAAC,UAAU;gBAClB,OAAO,CAAC,SAAS,IAAI,IAAI;gBACzB,OAAO,CAAC,QAAQ,IAAI,IAAI;gBACxB,OAAO,CAAC,SAAS,IAAI,IAAI;gBACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;aACpB,CACF,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,6EAA6E;QAC7E,IAAI,UAAU,EAAE,CAAC;YACf,WAAW,CAAC;gBACV,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,SAAS;gBACT,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,UAAsB;QACtD,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,iBAAiB,EAC3B,WAAW,SAAS,YAAY,EAChC,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB;qEAC6D,EAC7D,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,MAAM,IAAI,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CACnF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,IAAK,GAAe,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACtC,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,iBAAiB,EAC3B,WAAW,SAAS,YAAY,EAChC,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,CAAC,4BAA4B;QACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B,uEAAuE,EACvE,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,2EAA2E;QAC3E,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,GAAG,KAAK,SAAS;gBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAyB,iCAAiC,CAAC,CAAC;QAC7F,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,QAAgB;QAC1C,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B;;;;+BAIyB,EACzB,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAY,EAAE,WAAmB,EAAE,SAAiB;QACtF,yEAAyE;QACzE,6EAA6E;QAC7E,qFAAqF;QACrF,gFAAgF;QAChF,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB;;;;;;4BAMsB,EACtB,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CACzC,CAAC;IACJ,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,mBAAmB,CAAC,KAAa,EAAE,QAAiB;QAClD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;IACrE,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,QAAiB;QAC3C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/B,yDAAyD,CAC1D,CAAC;QACF,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,2BAA2B;QAC/B,6CAA6C;QAC7C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACvG,CAAC;IAED,0BAA0B;IAE1B,wEAAwE;IAChE,WAAW,CAAC,GAAe,EAAE,SAAqB;QACxD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,SAAS,EAAE,CAAC,CAAC,UAAU;gBACvB,SAAS,EAAE,CAAC,CAAC,UAAU,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC3F,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,CAAC,CAAC;YACH,SAAS,EAAE,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YACjG,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;YAC5B,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE;YAChC,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACxB,CAAC;IAED,gFAAgF;IACxE,aAAa,CAAC,KAAuB;QAC3C,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,aAAa,CAAC,GAAY;QAChC,MAAM,IAAI,GAAI,GAAe,CAAC,IAAI,CAAC;QACnC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,YAAY,EACtB,4CAA4C,EAC5C,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,sEAAsE;IAC9D,eAAe,CAAC,GAAY,EAAE,SAAiB,EAAE,KAAyB;QAChF,MAAM,CAAC,GAAG,GAAc,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvB,0EAA0E;YAC1E,IAAI,CAAC,CAAC,UAAU,KAAK,2BAA2B,EAAE,CAAC;gBACjD,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,aAAa,EACvB,UAAU,KAAK,kBAAkB,EACjC,0BAA0B,CAC3B,CAAC;YACJ,CAAC;YACD,+DAA+D;YAC/D,MAAM,IAAI,WAAW,CACnB,SAAS,CAAC,aAAa,EACvB,WAAW,SAAS,iBAAiB,EACrC,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;CACF"}

package/dist/services/session-store.d.ts

@@ -1,13 +1,73 @@
 import type { TokenEntry, SessionFileState } from "../types.js";
+/** Business-org fields persisted on a session, derived from the Org_ID at create time. */
+export interface SessionOrg {
+    /** bcrypt hash of the Org_ID (auth verification). */
+    idHash: string;
+    /** SHA-256 of the Org_ID (stable label-scoping key; never auth). */
+    scope: string;
+}
+/**
+ * Compute the label-index key. Free channels (no orgScope) use the BARE label
+ * so global free-channel uniqueness and resolution are unchanged (NFR6).
+ * Business channels namespace the label by their org scope, so two orgs can
+ * both hold `sprint-42` (Map keys compare by strict ===, so distinct strings
+ * are distinct keys).
+ */
+export declare function labelIndexKey(label: string, orgScope?: string): string;
+/**
+ * Persistence contract for relay sessions.
+ *
+ * Relay services depend on this interface, not a concrete store, so the
+ * single-tenant file store (`FileSessionStore`) and the multi-tenant Postgres
+ * store (`PostgresSessionStore`, Story 2.4b) are interchangeable via constructor
+ * injection. `InMemorySessionStore` provides a dependency-free implementation
+ * for fast tests and the pre-Postgres business path.
+ */
+export interface SessionStore {
+    /** Initialize the store (rebuild indexes / open connections). */
+    init(): Promise<void>;
+    createSession(sessionId: string, label: string | undefined, secretHash: string, tokenEntry: TokenEntry, creatorIp?: string, org?: SessionOrg): Promise<SessionFileState>;
+    getSession(sessionId: string): Promise<SessionFileState | null>;
+    getSessionByTokenHash(tokenHash: string): Promise<{
+        sessionId: string;
+        state: SessionFileState;
+    } | null>;
+    updateSession(sessionId: string, updater: (state: SessionFileState) => SessionFileState): Promise<SessionFileState>;
+    addToken(sessionId: string, tokenEntry: TokenEntry): Promise<void>;
+    deleteSession(sessionId: string): Promise<void>;
+    listSessions(): Promise<string[]>;
+    /**
+     * Sum of registered peers across all sessions under `orgScope` (Business
+     * Edition). This is the SAME definition the per-org agent quota enforces (peer
+     * keys in each session's state document), so usage reporting and enforcement
+     * agree. Returns 0 for an unknown scope.
+     */
+    countAgentsByOrgScope(orgScope: string): Promise<number>;
+    /**
+     * Upsert an org's enforced tier quota (Business Edition, Epic 5 Story 5.1). The
+     * control plane pushes the tier-derived limits; the relay persists them (keyed by
+     * `orgScope`) and row-locks the row to enforce channel/agent caps atomically.
+     * Idempotent — a re-send (e.g. a tier change, 5.7) overwrites the limits. The free
+     * single-tenant store has no per-org quotas, so its implementation is a no-op.
+     */
+    setOrgQuota(orgScope: string, tier: string, maxChannels: number, maxAgents: number): Promise<void>;
+    /** Read-only token-hash -> sessionId index for auth middleware. */
+    getTokenIndex(): ReadonlyMap<string, string>;
+    getSessionIdByLabel(label: string, orgScope?: string): string | null;
+    isLabelTaken(label: string, orgScope?: string): boolean;
+    getGlobalMessageCount(): Promise<number>;
+    incrementGlobalMessageCount(): Promise<void>;
+}
 /**
  * Per-session JSON file store with in-memory locking and atomic writes.
+ * The single-tenant (free relay) implementation of {@link SessionStore}.
  *
  * Each session is stored as `{sessionId}.json` in the state directory.
  * A per-session promise-chain mutex prevents lost updates from concurrent
  * requests targeting the same session. An in-memory Map provides O(1)
  * token-to-session lookup, rebuilt from disk on startup.
  */
-export declare class SessionStore {
+export declare class FileSessionStore implements SessionStore {
     private readonly stateDir;
     private readonly maxMessagesPerSession;
     /** Per-session promise-chain mutex. */
@@ -26,7 +86,7 @@ export declare class SessionStore {
      * Create a new session with the given ID, label, secret hash, and initial token.
      * Throws INVALID_INPUT if a session file already exists for this ID.
      */
-    createSession(sessionId: string, label: string | undefined, secretHash: string, tokenEntry: TokenEntry, creatorIp?: string): Promise<SessionFileState>;
+    createSession(sessionId: string, label: string | undefined, secretHash: string, tokenEntry: TokenEntry, creatorIp?: string, org?: SessionOrg): Promise<SessionFileState>;
     /**
      * Read a session by ID. Returns null if the session file does not exist.
      */
@@ -59,6 +119,8 @@ export declare class SessionStore {
      * List all session IDs by scanning .json files in the state directory.
      */
     listSessions(): Promise<string[]>;
+    countAgentsByOrgScope(orgScope: string): Promise<number>;
+    setOrgQuota(_orgScope: string, _tier: string, _maxChannels: number, _maxAgents: number): Promise<void>;
     /**
      * Return the token-to-session index (read-only) for auth middleware.
      */
@@ -67,11 +129,11 @@ export declare class SessionStore {
      * Look up a session ID by its human-readable label.
      * Returns null if no session has the given label.
      */
-    getSessionIdByLabel(label: string): string | null;
+    getSessionIdByLabel(label: string, orgScope?: string): string | null;
     /**
-     * Check whether a label is already in use by an existing session.
+     * Check whether a label is already in use within the given org scope.
      */
-    isLabelTaken(label: string): boolean;
+    isLabelTaken(label: string, orgScope?: string): boolean;
     /**
      * Read and parse a session JSON file.
      * Throws SESSION_NOT_FOUND if the file does not exist.
@@ -95,6 +157,12 @@ export declare class SessionStore {
     private _rebuildTokenIndex;
     /**
      * Rebuild the label index entry for a single session.
+     *
+     * Fail-closed migration guard: a legacy business session (orgIdHash set but no
+     * orgScope — e.g. created before per-org scoping) must NOT be indexed under the
+     * public bare key, or its label would become cross-org enumerable via the
+     * public resolve endpoint. We cannot backfill orgScope (orgId is only stored
+     * hashed), so we skip indexing it; the channel remains usable by sessionId.
      */
     private _rebuildLabelIndex;
     /** Compute the file path for a session ID. */

package/dist/services/session-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../src/services/session-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEhE;;;;;;;GAOG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAE/C,uCAAuC;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAE1D,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;gBAE5C,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM;IAK3D;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B3B;;;OAGG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,CAAC;IA8C5B;;OAEG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAcrE;;;OAGG;IACG,qBAAqB,CACzB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAA;KAAE,GAAG,IAAI,CAAC;IAcjE;;;;OAIG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,gBAAgB,GACrD,OAAO,CAAC,gBAAgB,CAAC;IAe5B;;OAEG;IACG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASxE;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CrD;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAOvC;;OAEG;IACH,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAI5C;;;OAGG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIjD;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAMpC;;;;OAIG;YACW,UAAU;IAgCxB;;;OAGG;YACW,WAAW;IAWzB;;;;OAIG;YACW,SAAS;IAmBvB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B,8CAA8C;IAC9C,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,gBAAgB;IAIxB;;;OAGG;IACG,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC;IAU9C;;;OAGG;IACG,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;YAOpC,iBAAiB;CAMhC"}
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../src/services/session-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEhE,0FAA0F;AAC1F,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,EACtB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,UAAU,GACf,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAChE,qBAAqB,CACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAClE,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,gBAAgB,GACrD,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClC;;;;;OAKG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD;;;;;;OAMG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG,mEAAmE;IACnE,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACrE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACxD,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,qBAAa,gBAAiB,YAAW,YAAY;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAE/C,uCAAuC;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAE1D,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;gBAE5C,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM;IAK3D;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B3B;;;OAGG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,EACtB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,UAAU,GACf,OAAO,CAAC,gBAAgB,CAAC;IA+C5B;;OAEG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAcrE;;;OAGG;IACG,qBAAqB,CACzB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAA;KAAE,GAAG,IAAI,CAAC;IAcjE;;;;OAIG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,gBAAgB,GACrD,OAAO,CAAC,gBAAgB,CAAC;IAe5B;;OAEG;IACG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASxE;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CrD;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAOjC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAexD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5G;;OAEG;IACH,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAI5C;;;OAGG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIpE;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAMvD;;;;OAIG;YACW,UAAU;IAgCxB;;;OAGG;YACW,WAAW;IAWzB;;;;OAIG;YACW,SAAS;IA0BvB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAM1B,8CAA8C;IAC9C,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,gBAAgB;IAIxB;;;OAGG;IACG,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC;IAU9C;;;OAGG;IACG,2BAA2B,IAAI,OAAO,CAAC,IAAI,CAAC;YAOpC,iBAAiB;CAMhC"}