@krischoichoi/channel-files 0.6.0

package/lib/attachments/pipeline.js

@@ -0,0 +1,59 @@
+import { randomUUID } from 'node:crypto';
+import { sanitizeFilename } from './filename.js';
+function initialExtraction(kind) {
+    return kind === 'file' ? { status: 'not-needed' } : { status: 'unsupported' };
+}
+/** Store one channel-neutral file/audio/video part and optionally extract it. */
+export async function storeBinaryPart(store, context, part, options = {}) {
+    if (!part.localData || part.localData.byteLength === 0)
+        return undefined;
+    const asset = await store.put({
+        attachmentId: 'att-' + randomUUID(),
+        sessionId: context.sessionId,
+        channelId: context.channelId,
+        accountId: context.accountId,
+        conversationId: context.conversationId,
+        ...(context.conversationType ? { conversationType: context.conversationType } : {}),
+        ...(context.threadId ? { threadId: context.threadId } : {}),
+        messageId: context.messageId,
+        kind: part.type,
+        name: sanitizeFilename(part.name),
+        mimeType: part.mimeType,
+        data: part.localData,
+        extraction: initialExtraction(part.type),
+    });
+    let extraction = asset.extraction;
+    if (part.type === 'file' && options.extractor && asset.mimeType) {
+        try {
+            extraction = await options.extractor.extract({
+                store,
+                asset,
+                data: part.localData,
+                signal: options.signal,
+            });
+        }
+        catch {
+            if (store.recordExtraction) {
+                try {
+                    await store.recordExtraction(asset.attachmentId, {
+                        status: 'failed',
+                        errorCode: 'parser-error',
+                    });
+                    extraction = { status: 'failed', errorCode: 'parser-error' };
+                }
+                catch {
+                    // File delivery remains best-effort even if extraction metadata fails.
+                }
+            }
+        }
+    }
+    return {
+        attachmentId: asset.attachmentId,
+        name: asset.name,
+        mimeType: asset.mimeType,
+        bytes: asset.bytes,
+        durable: true,
+        readable: extraction.status === 'ready',
+    };
+}
+//# sourceMappingURL=pipeline.js.map

package/lib/attachments/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/attachments/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAgCjD,SAAS,iBAAiB,CAAC,IAAsB;IAC/C,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AAChF,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA+B,EAC/B,OAA0B,EAC1B,IAAgE,EAChE,UAAkC,EAAE;IAEpC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC;QAC5B,YAAY,EAAE,MAAM,GAAG,UAAU,EAAE;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,SAAS;QACpB,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;KACzC,CAAC,CAAC;IAEH,IAAI,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChE,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC3C,KAAK;gBACL,KAAK;gBACL,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,EAAE;wBAC/C,MAAM,EAAE,QAAQ;wBAChB,SAAS,EAAE,cAAc;qBAC1B,CAAC,CAAC;oBACH,UAAU,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,uEAAuE;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,UAAU,CAAC,MAAM,KAAK,OAAO;KACxC,CAAC;AACJ,CAAC"}

package/lib/attachments/policy.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Byte caps for the private channel asset store and its (M4) text extractor
+ * (plan \u00a749). Transport, parser-input and extracted-output bounds are
+ * separated so a large inbound file does not silently blow up a parser or the
+ * model surface.
+ */
+export interface AttachmentPolicy {
+    /** Hard cap for a single inbound stored asset (transport max). */
+    maxInboundBytes: number;
+    extract: {
+        /** Cap on the raw bytes handed to an extractor (parser input). */
+        maxInputBytes: number;
+        /** Cap on the extracted text bytes surfaced to the model. */
+        maxOutputBytes: number;
+    };
+}
+/** Defaults per plan \u00a749 (100 MB inbound, 32 MiB parser input, 5 MiB output). */
+export declare const DEFAULT_ATTACHMENT_POLICY: AttachmentPolicy;
+/** Whether raw `bytes` may be written to a binder-bound asset store. */
+export declare function isInboundWithinLimit(bytes: number, policy: AttachmentPolicy): boolean;
+/** The wider read cap for `readRaw` (bounded by the transport cap). */
+export declare function rawReadLimit(policy: AttachmentPolicy): number;
+/** The read cap for `readExtracted` (bounded by the extractor output cap). */
+export declare function extractedReadLimit(policy: AttachmentPolicy): number;
+//# sourceMappingURL=policy.d.ts.map

package/lib/attachments/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/attachments/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE;QACP,kEAAkE;QAClE,aAAa,EAAE,MAAM,CAAC;QACtB,6DAA6D;QAC7D,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,sFAAsF;AACtF,eAAO,MAAM,yBAAyB,EAAE,gBAMvC,CAAC;AAEF,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAErF;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAE7D;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAEnE"}

package/lib/attachments/policy.js

@@ -0,0 +1,21 @@
+/** Defaults per plan \u00a749 (100 MB inbound, 32 MiB parser input, 5 MiB output). */
+export const DEFAULT_ATTACHMENT_POLICY = {
+    maxInboundBytes: 104857600,
+    extract: {
+        maxInputBytes: 33554432,
+        maxOutputBytes: 5242880,
+    },
+};
+/** Whether raw `bytes` may be written to a binder-bound asset store. */
+export function isInboundWithinLimit(bytes, policy) {
+    return bytes <= policy.maxInboundBytes;
+}
+/** The wider read cap for `readRaw` (bounded by the transport cap). */
+export function rawReadLimit(policy) {
+    return policy.maxInboundBytes;
+}
+/** The read cap for `readExtracted` (bounded by the extractor output cap). */
+export function extractedReadLimit(policy) {
+    return policy.extract.maxOutputBytes;
+}
+//# sourceMappingURL=policy.js.map

package/lib/attachments/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/attachments/policy.ts"],"names":[],"mappings":"AAiBA,sFAAsF;AACtF,MAAM,CAAC,MAAM,yBAAyB,GAAqB;IACzD,eAAe,EAAE,SAAS;IAC1B,OAAO,EAAE;QACP,aAAa,EAAE,QAAQ;QACvB,cAAc,EAAE,OAAO;KACxB;CACF,CAAC;AAEF,wEAAwE;AACxE,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,MAAwB;IAC1E,OAAO,KAAK,IAAI,MAAM,CAAC,eAAe,CAAC;AACzC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,MAAwB;IACnD,OAAO,MAAM,CAAC,eAAe,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,MAAwB;IACzD,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;AACvC,CAAC"}

package/lib/attachments/render.d.ts

@@ -0,0 +1,16 @@
+/**
+ * User-visible descriptor rendering (plan \u00a754).
+ *
+ * Each stored asset appears on the model surface ONLY as a compact line: the
+ * attachment id, filename, MIME, size and whether the extracted text is ready.
+ * The extracted text itself is NEVER embedded here (M4 exposes it through the
+ * `read_channel_attachment` tool instead).
+ */
+import type { StoredAssetDescriptor } from './types.js';
+/** Human/readable size, e.g. "1.2 MB" or "340 B". */
+export declare function humanSize(bytes: number): string;
+/** Compact declarative descriptor (attachment id, name, mime, size, readable). */
+export declare function renderDescriptor(asset: StoredAssetDescriptor): string;
+/** Structured object form (the non-raw shape M4 can extend). */
+export declare function descriptorObject(asset: StoredAssetDescriptor): Record<string, unknown>;
+//# sourceMappingURL=render.d.ts.map

package/lib/attachments/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/attachments/render.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,qDAAqD;AACrD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM/C;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAIrE;AAED,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAStF"}

package/lib/attachments/render.js

@@ -0,0 +1,28 @@
+/** Human/readable size, e.g. "1.2 MB" or "340 B". */
+export function humanSize(bytes) {
+    if (bytes < 1024)
+        return bytes + ' B';
+    const kb = bytes / 1024;
+    if (kb < 1024)
+        return kb.toFixed(1) + ' KB';
+    const mb = kb / 1024;
+    return mb.toFixed(1) + ' MB';
+}
+/** Compact declarative descriptor (attachment id, name, mime, size, readable). */
+export function renderDescriptor(asset) {
+    const mime = asset.mimeType ? ' ' + asset.mimeType : '';
+    const readable = asset.readable ? ' readable' : '';
+    return `[attachment ${asset.attachmentId} ${asset.name}${mime} ${humanSize(asset.bytes)}${readable}]`;
+}
+/** Structured object form (the non-raw shape M4 can extend). */
+export function descriptorObject(asset) {
+    return {
+        attachmentId: asset.attachmentId,
+        name: asset.name,
+        mimeType: asset.mimeType,
+        bytes: asset.bytes,
+        durable: asset.durable,
+        readable: asset.readable,
+    };
+}
+//# sourceMappingURL=render.js.map

package/lib/attachments/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../src/attachments/render.ts"],"names":[],"mappings":"AAUA,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,KAAK,GAAG,IAAI,CAAC;IACtC,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAC/B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,eAAe,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,GAAG,CAAC;AACxG,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC"}

package/lib/attachments/schema.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Zod schema for `meta.json` — used to validate a `StoredChannelAsset` when it
+ * is read back from disk (plan \u00a745 / \u00a747). Anything that fails this
+ * schema is treated as missing/corrupt rather than partially trusted.
+ */
+import { z } from 'zod';
+import { type StoredChannelAsset } from './types.js';
+export declare const StoredChannelAssetSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    attachmentId: z.ZodString;
+    sessionId: z.ZodString;
+    channelId: z.ZodString;
+    accountId: z.ZodString;
+    conversationId: z.ZodString;
+    conversationType: z.ZodOptional<z.ZodEnum<{
+        dm: "dm";
+        group: "group";
+    }>>;
+    threadId: z.ZodOptional<z.ZodString>;
+    messageId: z.ZodString;
+    kind: z.ZodEnum<{
+        file: "file";
+        audio: "audio";
+        video: "video";
+        image: "image";
+    }>;
+    name: z.ZodString;
+    mimeType: z.ZodOptional<z.ZodString>;
+    bytes: z.ZodNumber;
+    sha256: z.ZodString;
+    extraction: z.ZodObject<{
+        status: z.ZodEnum<{
+            "not-needed": "not-needed";
+            ready: "ready";
+            unsupported: "unsupported";
+            failed: "failed";
+            "too-large": "too-large";
+        }>;
+        format: z.ZodOptional<z.ZodEnum<{
+            text: "text";
+            markdown: "markdown";
+        }>>;
+        bytes: z.ZodOptional<z.ZodNumber>;
+        errorCode: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    createdAt: z.ZodNumber;
+}, z.core.$strip>;
+/** Parse and validate a stored asset from parsed JSON meta. */
+export declare function parseStoredChannelAsset(value: unknown): StoredChannelAsset;
+/** Type-safe structured parse (throws ZodError on mismatch). */
+export declare function parseStoredChannelAssetSafe(value: unknown): {
+    ok: true;
+    value: StoredChannelAsset;
+} | {
+    ok: false;
+    error: unknown;
+};
+//# sourceMappingURL=schema.d.ts.map

package/lib/attachments/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/attachments/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAiB3E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBnC,CAAC;AAEH,+DAA+D;AAC/D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAE1E;AAED,gEAAgE;AAChE,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,GACb;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAIzE"}

package/lib/attachments/schema.js

@@ -0,0 +1,50 @@
+/**
+ * Zod schema for `meta.json` — used to validate a `StoredChannelAsset` when it
+ * is read back from disk (plan \u00a745 / \u00a747). Anything that fails this
+ * schema is treated as missing/corrupt rather than partially trusted.
+ */
+import { z } from 'zod';
+import { ASSET_SCHEMA_VERSION } from './types.js';
+const extractionStatusSchema = z.enum([
+    'not-needed',
+    'ready',
+    'unsupported',
+    'failed',
+    'too-large',
+]);
+const extractionSchema = z.object({
+    status: extractionStatusSchema,
+    format: z.enum(['text', 'markdown']).optional(),
+    bytes: z.number().int().nonnegative().optional(),
+    errorCode: z.string().optional(),
+});
+export const StoredChannelAssetSchema = z.object({
+    schemaVersion: z.literal(ASSET_SCHEMA_VERSION),
+    attachmentId: z.string().min(1),
+    sessionId: z.string().min(1),
+    channelId: z.string().min(1),
+    accountId: z.string().min(1),
+    conversationId: z.string().min(1),
+    conversationType: z.enum(['dm', 'group']).optional(),
+    threadId: z.string().optional(),
+    messageId: z.string().min(1),
+    kind: z.enum(['file', 'audio', 'video', 'image']),
+    name: z.string().min(0),
+    mimeType: z.string().optional(),
+    bytes: z.number().int().nonnegative(),
+    sha256: z.string().regex(/^[0-9a-f]{64}$/),
+    extraction: extractionSchema,
+    createdAt: z.number(),
+});
+/** Parse and validate a stored asset from parsed JSON meta. */
+export function parseStoredChannelAsset(value) {
+    return StoredChannelAssetSchema.parse(value);
+}
+/** Type-safe structured parse (throws ZodError on mismatch). */
+export function parseStoredChannelAssetSafe(value) {
+    const result = StoredChannelAssetSchema.safeParse(value);
+    if (result.success)
+        return { ok: true, value: result.data };
+    return { ok: false, error: result.error };
+}
+//# sourceMappingURL=schema.js.map

package/lib/attachments/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/attachments/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAA2B,MAAM,YAAY,CAAC;AAE3E,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,YAAY;IACZ,OAAO;IACP,aAAa;IACb,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,sBAAsB;IAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,UAAU,EAAE,gBAAgB;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAuB,CAAC;AACrE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAA0B,EAAE,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AAC5C,CAAC"}

package/lib/attachments/store.d.ts

@@ -0,0 +1,69 @@
+import { type StoredChannelAsset, type PutChannelAssetInput, type StoredAssetExtractionInput, type AssetExtraction } from './types.js';
+import { type AttachmentPolicy } from './policy.js';
+/** Errors the store raises for security / integrity boundaries. */
+export declare class AssetStoreError extends Error {
+    readonly code: 'ASSET_NOT_FOUND' | 'ASSET_TOO_LARGE' | 'ASSET_OVER_MAX_INBOUND' | 'ASSET_CORRUPT_META';
+    constructor(code: AssetStoreError['code'], message: string);
+}
+export interface PutChannelAssetContext {
+    root?: string;
+    policy?: AttachmentPolicy;
+}
+/** The store contract (plan \u00a743). */
+export interface ChannelInboundAssetStore {
+    put(input: PutChannelAssetInput): Promise<StoredChannelAsset>;
+    putExtracted(attachmentId: string, extraction: StoredAssetExtractionInput): Promise<StoredChannelAsset | undefined>;
+    /**
+     * Record a NON-ready extraction status (unsupported / failed / too-large)
+     * for an already-stored asset, updating only meta.json. No extracted.md is
+     * written. No-op when the asset does not exist.
+     */
+    recordExtraction?(attachmentId: string, extraction: AssetExtraction): Promise<void>;
+    get(attachmentId: string): Promise<StoredChannelAsset | undefined>;
+    readRaw(attachmentId: string, options: {
+        maxBytes: number;
+        signal?: AbortSignal;
+    }): Promise<Uint8Array>;
+    readExtracted(attachmentId: string, options: {
+        maxBytes: number;
+        signal?: AbortSignal;
+    }): Promise<string | undefined>;
+}
+/**
+ * Filesystem-backed `ChannelInboundAssetStore`. Loads the durable
+ * `index.json` lazily on first read, keeps an in-memory cache in sync, and
+ * serializes all publish writes through a promise chain.
+ */
+export declare class FileChannelInboundAssetStore implements ChannelInboundAssetStore {
+    private readonly root;
+    private readonly policy;
+    private index;
+    private indexLoaded;
+    private writeChain;
+    constructor(options?: PutChannelAssetContext);
+    /** Per-asset directory rooted at THIS store's root, not the global default. */
+    private assetDir;
+    /** Run a publish write serialized onto the chain (returns after this op). */
+    private enqueue;
+    put(input: PutChannelAssetInput): Promise<StoredChannelAsset>;
+    putExtracted(attachmentId: string, extraction: StoredAssetExtractionInput): Promise<StoredChannelAsset | undefined>;
+    recordExtraction(attachmentId: string, extraction: AssetExtraction): Promise<void>;
+    get(attachmentId: string): Promise<StoredChannelAsset | undefined>;
+    readRaw(attachmentId: string, options: {
+        maxBytes: number;
+        signal?: AbortSignal;
+    }): Promise<Uint8Array>;
+    readExtracted(attachmentId: string, options: {
+        maxBytes: number;
+        signal?: AbortSignal;
+    }): Promise<string | undefined>;
+    /** Atomic directory publish (plan \u00a744): stage, then rename over target. */
+    private publishDir;
+    private readBounded;
+    private ensureIndex;
+    private persistIndex;
+    private idempotentIndex;
+    private readMeta;
+    private resolveAttachmentId;
+}
+//# sourceMappingURL=store.d.ts.map

package/lib/attachments/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/attachments/store.ts"],"names":[],"mappings":"AA8CA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AAErB,mEAAmE;AACnE,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EACT,iBAAiB,GACjB,iBAAiB,GACjB,wBAAwB,GACxB,oBAAoB,CAAC;gBACb,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM;CAK3D;AAOD,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,0CAA0C;AAC1C,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9D,YAAY,CACV,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,0BAA0B,GACrC,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC3C;;;;OAIG;IACH,gBAAgB,CAAC,CACf,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACnE,OAAO,CACL,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAClD,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,aAAa,CACX,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAClD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChC;AAID;;;;GAIG;AACH,qBAAa,4BAA6B,YAAW,wBAAwB;IAC3E,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAoC;gBAE1C,OAAO,GAAE,sBAA2B;IAKhD,+EAA+E;IAC/E,OAAO,CAAC,QAAQ;IAIhB,6EAA6E;IAC7E,OAAO,CAAC,OAAO;IAKT,GAAG,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+B7D,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,0BAA0B,GACrC,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IA4BpC,gBAAgB,CACpB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC,IAAI,CAAC;IAeV,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAOlE,OAAO,CACX,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAClD,OAAO,CAAC,UAAU,CAAC;IAQhB,aAAa,CACjB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAClD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAW9B,gFAAgF;YAClE,UAAU;YAsBV,WAAW;YAoBX,WAAW;YAcX,YAAY;IAU1B,OAAO,CAAC,eAAe;YAIT,QAAQ;IActB,OAAO,CAAC,mBAAmB;CAG5B"}

package/lib/attachments/store.js

@@ -0,0 +1,254 @@
+/**
+ * Private channel inbound asset store (plan \u00a742-\u00a747).
+ *
+ * Disk layout (plan \u00a742):
+ *
+ * \`\`\`
+ * <attachmentsRoot>/
+ *   sessions/
+ *     <sessionId>/
+ *       <messageId>/
+ *         <attachmentId>/
+ *           meta.json      # StoredChannelAsset, schemaVersion: 1
+ *           raw.bin        # verbatim stored bytes
+ *           extracted.md   # written only when extraction is ready
+ *   index.json            # store-owned attachmentId -> {sessionId,messageId}
+ *   .staging/<uuid>/      # transient write area; never observed by readers
+ * \`\`\`
+ *
+ * PUBLISH IS ATOMIC (plan \u00a744): `put` writes the whole asset into a fresh
+ * `.staging/<uuid>` directory and then renames it over the final directory.
+ * A reader never observes a half-written asset. `meta.json` records the final
+ * `sha256` / `bytes` computed by the store (never caller-supplied truth), and
+ * an adapter `mimeType` is only a hint that is re-verified by magic sniffing
+ * (plan \u00a747).
+ *
+ * Extraction is two-phase: `put` stores the raw bytes + an initial extraction
+ * status, and `putExtracted` atomically publishes the extracted text and flips
+ * `meta.json` to `ready`. If `meta.json` is unreadable, `get` returns
+ * undefined — corrupt metadata is never partially trusted.
+ */
+import { randomUUID } from 'node:crypto';
+import { mkdir, open, readFile, rename, rm, writeFile, } from 'node:fs/promises';
+import { join } from 'node:path';
+import { resolveAttachmentsRoot } from '../paths.js';
+import { sanitizeFilename, normalizeMimeHint } from './filename.js';
+import { verifiedMime } from './mime.js';
+import { sha256Hex } from './hash.js';
+import { assetPathSegment } from '../paths.js';
+import { parseStoredChannelAsset } from './schema.js';
+import { ASSET_SCHEMA_VERSION, } from './types.js';
+import { DEFAULT_ATTACHMENT_POLICY, isInboundWithinLimit, } from './policy.js';
+/** Errors the store raises for security / integrity boundaries. */
+export class AssetStoreError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'AssetStoreError';
+        this.code = code;
+    }
+}
+const INDEX_FILE = 'index.json';
+/**
+ * Filesystem-backed `ChannelInboundAssetStore`. Loads the durable
+ * `index.json` lazily on first read, keeps an in-memory cache in sync, and
+ * serializes all publish writes through a promise chain.
+ */
+export class FileChannelInboundAssetStore {
+    root;
+    policy;
+    index = new Map();
+    indexLoaded = false;
+    writeChain = Promise.resolve();
+    constructor(options = {}) {
+        this.root = options.root ?? resolveAttachmentsRoot();
+        this.policy = options.policy ?? DEFAULT_ATTACHMENT_POLICY;
+    }
+    /** Per-asset directory rooted at THIS store's root, not the global default. */
+    assetDir(attachmentId, sessionId, messageId) {
+        return join(this.root, 'sessions', sessionId, messageId, assetPathSegment(attachmentId));
+    }
+    /** Run a publish write serialized onto the chain (returns after this op). */
+    enqueue(op) {
+        this.writeChain = this.writeChain.then(op);
+        return this.writeChain;
+    }
+    async put(input) {
+        if (!isInboundWithinLimit(input.data.byteLength, this.policy)) {
+            throw new AssetStoreError('ASSET_OVER_MAX_INBOUND', "asset '" + input.attachmentId + "' is " + input.data.byteLength
+                + ' bytes, over the inbound cap ' + this.policy.maxInboundBytes);
+        }
+        const attachmentId = this.resolveAttachmentId(input.attachmentId);
+        const asset = {
+            schemaVersion: ASSET_SCHEMA_VERSION,
+            attachmentId,
+            sessionId: input.sessionId,
+            channelId: input.channelId,
+            accountId: input.accountId,
+            conversationId: input.conversationId,
+            ...(input.conversationType ? { conversationType: input.conversationType } : {}),
+            ...(input.threadId ? { threadId: input.threadId } : {}),
+            messageId: input.messageId,
+            kind: input.kind,
+            name: sanitizeFilename(input.name),
+            mimeType: verifiedMime(input.data, normalizeMimeHint(input.mimeType)),
+            bytes: input.data.byteLength,
+            sha256: sha256Hex(input.data),
+            extraction: input.extraction ?? { status: 'not-needed' },
+            createdAt: input.createdAt ?? Date.now(),
+        };
+        await this.publishDir(input.sessionId, input.messageId, attachmentId, asset, input.data);
+        return asset;
+    }
+    async putExtracted(attachmentId, extraction) {
+        const location = this.index.get(attachmentId);
+        if (!location)
+            throw new AssetStoreError('ASSET_NOT_FOUND', "no stored asset for '" + attachmentId + "'");
+        const dir = this.assetDir(attachmentId, location.sessionId, location.messageId);
+        const meta = await this.readMeta(dir);
+        if (!meta)
+            throw new AssetStoreError('ASSET_NOT_FOUND', "no meta for '" + attachmentId + "'");
+        const outBytes = extraction.bytes ?? new TextEncoder().encode(extraction.text).byteLength;
+        const updated = {
+            ...meta,
+            extraction: { status: 'ready', format: extraction.format, bytes: outBytes },
+        };
+        // Atomically replace extracted.md (staging file -> final name), then flip
+        // meta.json. A reader either sees both, or neither flipped.
+        await this.enqueue(async () => {
+            const stagingDir = join(this.root, '.staging', randomUUID());
+            await mkdir(stagingDir, { recursive: true });
+            const stagedExtracted = join(stagingDir, 'extracted.md');
+            await writeFile(stagedExtracted, extraction.text, 'utf8');
+            await rename(stagedExtracted, join(dir, 'extracted.md'));
+            // Replace meta.json atomically (temp file + rename within the asset dir).
+            const metaTmp = join(dir, 'meta.json.' + randomUUID() + '.tmp');
+            await writeFile(metaTmp, JSON.stringify(updated, null, 2), 'utf8');
+            await rename(metaTmp, join(dir, 'meta.json'));
+            await rm(stagingDir, { recursive: true, force: true });
+        });
+        return updated;
+    }
+    async recordExtraction(attachmentId, extraction) {
+        const location = this.index.get(attachmentId);
+        if (!location)
+            return;
+        const dir = this.assetDir(attachmentId, location.sessionId, location.messageId);
+        const meta = await this.readMeta(dir);
+        if (!meta)
+            return;
+        const updated = { ...meta, extraction };
+        // Replace meta.json atomically (temp file + rename within the asset dir).
+        await this.enqueue(async () => {
+            const metaTmp = join(dir, 'meta.json.' + randomUUID() + '.tmp');
+            await writeFile(metaTmp, JSON.stringify(updated, null, 2), 'utf8');
+            await rename(metaTmp, join(dir, 'meta.json'));
+        });
+    }
+    async get(attachmentId) {
+        await this.ensureIndex();
+        const location = this.index.get(attachmentId);
+        if (!location)
+            return undefined;
+        return this.readMeta(this.assetDir(attachmentId, location.sessionId, location.messageId));
+    }
+    async readRaw(attachmentId, options) {
+        await this.ensureIndex();
+        const location = this.index.get(attachmentId);
+        if (!location)
+            throw new AssetStoreError('ASSET_NOT_FOUND', "no stored asset for '" + attachmentId + "'");
+        const file = join(this.assetDir(attachmentId, location.sessionId, location.messageId), 'raw.bin');
+        return this.readBounded(file, options.maxBytes, options.signal);
+    }
+    async readExtracted(attachmentId, options) {
+        await this.ensureIndex();
+        const location = this.index.get(attachmentId);
+        if (!location)
+            return undefined;
+        const dir = this.assetDir(attachmentId, location.sessionId, location.messageId);
+        const meta = await this.readMeta(dir);
+        if (!meta || meta.extraction.status !== 'ready')
+            return undefined;
+        const bytes = await this.readBounded(join(dir, 'extracted.md'), options.maxBytes, options.signal);
+        return new TextDecoder('utf-8').decode(bytes);
+    }
+    /** Atomic directory publish (plan \u00a744): stage, then rename over target. */
+    async publishDir(sessionId, messageId, attachmentId, asset, data) {
+        const finalDir = this.assetDir(attachmentId, sessionId, messageId);
+        const staging = join(this.root, '.staging', randomUUID());
+        await mkdir(staging, { recursive: true });
+        await writeFile(join(staging, 'raw.bin'), data);
+        await writeFile(join(staging, 'meta.json'), JSON.stringify(asset, null, 2), 'utf8');
+        await mkdir(join(finalDir, '..'), { recursive: true });
+        await this.enqueue(async () => {
+            await rename(staging, finalDir);
+        });
+        // Keep the lookup index durable. A publish that wrote bytes but failed to
+        // record the index is recoverable by re-putting; we prefer correctness.
+        this.idempotentIndex(attachmentId, { sessionId, messageId });
+        await this.persistIndex();
+    }
+    async readBounded(file, maxBytes, signal) {
+        if (signal?.aborted)
+            throw new AssetStoreError('ASSET_CORRUPT_META', 'aborted');
+        const handle = await open(file, 'r');
+        try {
+            const stat = await handle.stat();
+            if (stat.size > maxBytes) {
+                throw new AssetStoreError('ASSET_TOO_LARGE', 'read over cap ' + maxBytes);
+            }
+            const buffer = Buffer.alloc(stat.size);
+            const { bytesRead } = await handle.read(buffer, 0, stat.size, 0);
+            return new Uint8Array(buffer.buffer, buffer.byteOffset, bytesRead);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    async ensureIndex() {
+        if (this.indexLoaded)
+            return;
+        this.indexLoaded = true;
+        try {
+            const text = await readFile(join(this.root, INDEX_FILE), 'utf8');
+            const parsed = JSON.parse(text);
+            if (parsed && typeof parsed === 'object') {
+                this.index = new Map(Object.entries(parsed));
+            }
+        }
+        catch {
+            this.index = new Map();
+        }
+    }
+    async persistIndex() {
+        await mkdir(this.root, { recursive: true });
+        const payload = JSON.stringify(Object.fromEntries(this.index), null, 2);
+        await this.enqueue(async () => {
+            const tmp = join(this.root, '.' + INDEX_FILE + '.' + randomUUID() + '.tmp');
+            await writeFile(tmp, payload, 'utf8');
+            await rename(tmp, join(this.root, INDEX_FILE));
+        });
+    }
+    idempotentIndex(attachmentId, location) {
+        this.index.set(attachmentId, location);
+    }
+    async readMeta(dir) {
+        let text;
+        try {
+            text = await readFile(join(dir, 'meta.json'), 'utf8');
+        }
+        catch {
+            return undefined;
+        }
+        try {
+            return parseStoredChannelAsset(JSON.parse(text));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    resolveAttachmentId(input) {
+        return input && input.trim().length > 0 ? input : 'att-' + randomUUID();
+    }
+}
+//# sourceMappingURL=store.js.map

package/lib/attachments/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/attachments/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,oBAAoB,GAKrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GAErB,MAAM,aAAa,CAAC;AAErB,mEAAmE;AACnE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAIY;IACzB,YAAY,IAA6B,EAAE,OAAe;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAuCD,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IACtB,IAAI,CAAS;IACb,MAAM,CAAmB;IAClC,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IACzC,WAAW,GAAG,KAAK,CAAC;IACpB,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEtD,YAAY,UAAkC,EAAE;QAC9C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,sBAAsB,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,yBAAyB,CAAC;IAC5D,CAAC;IAED,+EAA+E;IACvE,QAAQ,CAAC,YAAoB,EAAE,SAAiB,EAAE,SAAiB;QACzE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,6EAA6E;IACrE,OAAO,CAAC,EAAuB;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAA2B;QACnC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,eAAe,CACvB,wBAAwB,EACxB,SAAS,GAAG,KAAK,CAAC,YAAY,GAAG,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU;kBAC5D,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,KAAK,GAAuB;YAChC,aAAa,EAAE,oBAAoB;YACnC,YAAY;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;YAClC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC5B,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE;YACxD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;SACzC,CAAC;QACF,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,YAAoB,EACpB,UAAsC;QAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,uBAAuB,GAAG,YAAY,GAAG,GAAG,CAAC,CAAC;QAC1G,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,eAAe,GAAG,YAAY,GAAG,GAAG,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;QAC1F,MAAM,OAAO,GAAuB;YAClC,GAAG,IAAI;YACP,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE;SAC5E,CAAC;QACF,0EAA0E;QAC1E,4DAA4D;QAC5D,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7D,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YACzD,MAAM,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1D,MAAM,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;YACzD,0EAA0E;YAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,CAAC;YAChE,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;YAC9C,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,YAAoB,EACpB,UAA2B;QAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,OAAO,GAAuB,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC;QAC5D,0EAA0E;QAC1E,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,CAAC;YAChE,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,YAAoB;QAC5B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,OAAO,CACX,YAAoB,EACpB,OAAmD;QAEnD,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,uBAAuB,GAAG,YAAY,GAAG,GAAG,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QAClG,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,YAAoB,EACpB,OAAmD;QAEnD,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClG,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,UAAU,CACtB,SAAiB,EACjB,SAAiB,EACjB,YAAoB,EACpB,KAAyB,EACzB,IAAgB;QAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,QAAgB,EAChB,MAA+B;QAE/B,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,gBAAgB,GAAG,QAAQ,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACjE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;YACjE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAuC,CAAC,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,UAAU,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,CAAC;YAC5E,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,YAAoB,EAAE,QAAuB;QACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAW;QAChC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACvC,OAAO,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;IAC1E,CAAC;CACF"}