@memberjunction/livekit-room-server 6.2.0-edge.2 → 6.2.0-edge.4

package/dist/room-audio/room-speech-synthesizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"room-speech-synthesizer.d.ts","sourceRoot":"","sources":["../../src/room-audio/room-speech-synthesizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEjE,yGAAyG;AACzG,MAAM,WAAW,sBAAsB;IACrC;;;;;;OAMG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CAC/E;AAED,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,0GAA0G;IAC1G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wHAAwH;IACxH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8HAA8H;IAC9H,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,+FAA+F;AAC/F,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;AAEnF,6HAA6H;AAC7H,qBAAa,uBAAwB,YAAW,sBAAsB;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAEhD;;;;OAIG;gBACS,OAAO,EAAE,8BAA8B,EAAE,MAAM,CAAC,EAAE,sBAAsB;IAQpF,oFAAoF;IACvE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;CAqB3F"}

package/dist/room-audio/room-speech-synthesizer.js

@@ -0,0 +1,56 @@
+/**
+ * @fileoverview The text-to-speech port the room audio player announces through ({@link IRoomSpeechSynthesizer}),
+ * and {@link MJRoomSpeechSynthesizer}, an implementation over MJ's own `AITextToSpeechRunner` (model selection,
+ * credentials, failover and an `MJ: AI Prompt Runs` row, all handled there).
+ *
+ * The player ships with NO synthesizer installed, because a voice is vendor-specific and only the host knows which
+ * one its callers should hear. A host opts in once at startup:
+ *
+ * ```ts
+ * RoomAudioPlayer.Instance.SetSpeechSynthesizer(new MJRoomSpeechSynthesizer({ Voice: 'alloy' }));
+ * ```
+ *
+ * @module @memberjunction/livekit-room-server
+ */
+import { LogError } from '@memberjunction/core';
+import { AITextToSpeechRunner } from '@memberjunction/ai-prompts';
+import { DecodeAudio } from './audio-decoder.js';
+/** An {@link IRoomSpeechSynthesizer} backed by MJ's `AITextToSpeechRunner`. Never throws: failures log and return `null`. */
+export class MJRoomSpeechSynthesizer {
+    /**
+     * @param options The voice and model selection.
+     * @param runner The runner (tests); defaults to a new `AITextToSpeechRunner`.
+     * @throws {Error} when no voice is given.
+     */
+    constructor(options, runner) {
+        if (!options.Voice?.trim()) {
+            throw new Error('MJRoomSpeechSynthesizer needs a Voice (a provider-native voice id or name).');
+        }
+        this.options = options;
+        this.runner = runner ?? new AITextToSpeechRunner();
+    }
+    /** Speaks `text` through the configured TTS model and decodes the result to PCM. */
+    async Synthesize(text, contextUser) {
+        try {
+            const result = await this.runner.RunTextToSpeech({
+                text,
+                voice: this.options.Voice,
+                output_format: this.options.OutputFormat,
+                ModelID: this.options.ModelID,
+                PromptID: this.options.PromptID,
+                ContextUser: contextUser,
+            });
+            const audio = result.SpeechResult?.data;
+            if (!result.Success || !audio || audio.byteLength === 0) {
+                LogError(`[MJRoomSpeechSynthesizer] text-to-speech failed for voice '${this.options.Voice}': ${result.ErrorMessage ?? 'no audio returned'}`);
+                return null;
+            }
+            return await DecodeAudio(new Uint8Array(audio.buffer, audio.byteOffset, audio.byteLength));
+        }
+        catch (err) {
+            LogError(`[MJRoomSpeechSynthesizer] could not synthesize an announcement: ${err instanceof Error ? err.message : String(err)}`);
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=room-speech-synthesizer.js.map

package/dist/room-audio/room-speech-synthesizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"room-speech-synthesizer.js","sourceRoot":"","sources":["../../src/room-audio/room-speech-synthesizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAiB,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,WAAW,EAAqB,MAAM,iBAAiB,CAAC;AA6BjE,6HAA6H;AAC7H,MAAM,OAAO,uBAAuB;IAIlC;;;;OAIG;IACH,YAAY,OAAuC,EAAE,MAA+B;QAClF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;IACrD,CAAC;IAED,oFAAoF;IAC7E,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,WAAqB;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;gBAC/C,IAAI;gBACJ,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;gBACxC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAC/B,WAAW,EAAE,WAAW;aACzB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,8DAA8D,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,MAAM,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC,CAAC;gBAC7I,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,MAAM,WAAW,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,mEAAmE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChI,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/room-authorization.d.ts

@@ -0,0 +1,58 @@
+import { BaseSingleton } from '@memberjunction/global';
+import { type IMetadataProvider, type UserInfo } from '@memberjunction/core';
+export declare const DEFAULT_SIP_CALL_ROOM_PREFIX = "call-";
+export declare const SIP_CALL_ROOM_PREFIX = "call-";
+export interface RoomAuthorizationResult {
+    Authorized: boolean;
+    Reason?: string;
+}
+export type RoomAuthorizerFn = (roomName: string, user: UserInfo, provider?: IMetadataProvider) => Promise<RoomAuthorizationResult>;
+/**
+ * Service enforcing per-room authorization for LiveKit rooms.
+ *
+ * Rules:
+ * 1. Rooms tied to an `MJ: Meetings` record:
+ *    - Cancelled meetings refuse access.
+ *    - Host user (`meeting.HostUserID`) is granted access.
+ *    - Meeting participants (`MJ: Meeting Participants` where `UserID = user.ID`):
+ *      - If `InviteStatus === 'Declined'`, access is refused.
+ *      - If `InviteStatus` is `'Invited'`, `'Accepted'`, or `'Tentative'`, access is granted.
+ *    - Non-participants are refused access.
+ *
+ * 2. Rooms tied to an `MJ: Interactions` record OR starting with the SIP call prefix (`call-`):
+ *    - Never ad-hoc.
+ *    - User who has an `Accepted` offer for this room is granted access.
+ *    - User who started it (the Interaction's agent-session owner) is granted access.
+ *    - Otherwise access is refused.
+ *
+ * 3. Rooms tied to an `MJ: Interaction Offers` record:
+ *    - User must be the `TargetUserID` AND have `Status === 'Accepted'`.
+ *    - Otherwise access is refused.
+ *
+ * 4. Ad-hoc rooms:
+ *    - Only rooms with NO Meeting, NO Interaction, and NO Offer row (and not starting with `call-`)
+ *      are ad-hoc and open to authenticated users.
+ */
+export declare class RoomAuthorizationService extends BaseSingleton<RoomAuthorizationService> {
+    private authorizerOverride?;
+    private sipRoomPrefix;
+    constructor();
+    static get Instance(): RoomAuthorizationService;
+    /**
+     * Sets an authorizer override for testing or specialized harnesses.
+     */
+    SetAuthorizerForTesting(fn?: RoomAuthorizerFn): void;
+    /**
+     * Sets or resets the SIP call room prefix (e.g. to match LiveKitSipTelephonyService.roomPrefix).
+     */
+    SetSipRoomPrefix(prefix?: string): void;
+    /**
+     * Gets the active SIP call room prefix.
+     */
+    get SipRoomPrefix(): string;
+    /**
+     * Authorizes whether the given user may access the specified LiveKit room.
+     */
+    AuthorizeRoomAccess(roomName: string, user: UserInfo, provider?: IMetadataProvider): Promise<RoomAuthorizationResult>;
+}
+//# sourceMappingURL=room-authorization.d.ts.map

package/dist/room-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"room-authorization.d.ts","sourceRoot":"","sources":["../src/room-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA+B,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAqB,KAAK,iBAAiB,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhG,eAAO,MAAM,4BAA4B,UAAU,CAAC;AACpD,eAAO,MAAM,oBAAoB,UAA+B,CAAC;AAEjE,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,QAAQ,EACd,QAAQ,CAAC,EAAE,iBAAiB,KACzB,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAoCtC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,wBAAyB,SAAQ,aAAa,CAAC,wBAAwB,CAAC;IACnF,OAAO,CAAC,kBAAkB,CAAC,CAAmB;IAC9C,OAAO,CAAC,aAAa,CAAwH;;IAM7I,WAAkB,QAAQ,IAAI,wBAAwB,CAErD;IAED;;OAEG;IACI,uBAAuB,CAAC,EAAE,CAAC,EAAE,gBAAgB,GAAG,IAAI;IAI3D;;OAEG;IACI,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAI9C;;OAEG;IACH,IAAW,aAAa,IAAI,MAAM,CAEjC;IAED;;OAEG;IACU,mBAAmB,CAC9B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,QAAQ,EACd,QAAQ,CAAC,EAAE,iBAAiB,GAC3B,OAAO,CAAC,uBAAuB,CAAC;CAyLpC"}

package/dist/room-authorization.js

@@ -0,0 +1,212 @@
+import { BaseSingleton, EscapeSQLString, UUIDsEqual } from '@memberjunction/global';
+import { LogError, RunView } from '@memberjunction/core';
+import { LiveKitAgentRoomCoordinator } from './livekit-agent-room-coordinator.js';
+export const DEFAULT_SIP_CALL_ROOM_PREFIX = 'call-';
+export const SIP_CALL_ROOM_PREFIX = DEFAULT_SIP_CALL_ROOM_PREFIX;
+/**
+ * Service enforcing per-room authorization for LiveKit rooms.
+ *
+ * Rules:
+ * 1. Rooms tied to an `MJ: Meetings` record:
+ *    - Cancelled meetings refuse access.
+ *    - Host user (`meeting.HostUserID`) is granted access.
+ *    - Meeting participants (`MJ: Meeting Participants` where `UserID = user.ID`):
+ *      - If `InviteStatus === 'Declined'`, access is refused.
+ *      - If `InviteStatus` is `'Invited'`, `'Accepted'`, or `'Tentative'`, access is granted.
+ *    - Non-participants are refused access.
+ *
+ * 2. Rooms tied to an `MJ: Interactions` record OR starting with the SIP call prefix (`call-`):
+ *    - Never ad-hoc.
+ *    - User who has an `Accepted` offer for this room is granted access.
+ *    - User who started it (the Interaction's agent-session owner) is granted access.
+ *    - Otherwise access is refused.
+ *
+ * 3. Rooms tied to an `MJ: Interaction Offers` record:
+ *    - User must be the `TargetUserID` AND have `Status === 'Accepted'`.
+ *    - Otherwise access is refused.
+ *
+ * 4. Ad-hoc rooms:
+ *    - Only rooms with NO Meeting, NO Interaction, and NO Offer row (and not starting with `call-`)
+ *      are ad-hoc and open to authenticated users.
+ */
+export class RoomAuthorizationService extends BaseSingleton {
+    constructor() {
+        super();
+        this.sipRoomPrefix = (process.env.LIVEKIT_SIP_ROOM_PREFIX ?? DEFAULT_SIP_CALL_ROOM_PREFIX).trim() || DEFAULT_SIP_CALL_ROOM_PREFIX;
+    }
+    static get Instance() {
+        return RoomAuthorizationService.getInstance();
+    }
+    /**
+     * Sets an authorizer override for testing or specialized harnesses.
+     */
+    SetAuthorizerForTesting(fn) {
+        this.authorizerOverride = fn;
+    }
+    /**
+     * Sets or resets the SIP call room prefix (e.g. to match LiveKitSipTelephonyService.roomPrefix).
+     */
+    SetSipRoomPrefix(prefix) {
+        this.sipRoomPrefix = (prefix ?? process.env.LIVEKIT_SIP_ROOM_PREFIX ?? DEFAULT_SIP_CALL_ROOM_PREFIX).trim() || DEFAULT_SIP_CALL_ROOM_PREFIX;
+    }
+    /**
+     * Gets the active SIP call room prefix.
+     */
+    get SipRoomPrefix() {
+        return this.sipRoomPrefix;
+    }
+    /**
+     * Authorizes whether the given user may access the specified LiveKit room.
+     */
+    async AuthorizeRoomAccess(roomName, user, provider) {
+        if (!user || !user.ID) {
+            return { Authorized: false, Reason: 'User is not authenticated.' };
+        }
+        if (this.authorizerOverride) {
+            return await this.authorizerOverride(roomName, user, provider);
+        }
+        const trimmedRoom = roomName.trim();
+        if (!trimmedRoom) {
+            return { Authorized: false, Reason: 'Room name cannot be empty.' };
+        }
+        const escapedRoom = EscapeSQLString(trimmedRoom);
+        const escapedUserID = EscapeSQLString(user.ID);
+        const rv = provider ? RunView.FromMetadataProvider(provider) : new RunView();
+        try {
+            // Batch initial lookups for Meetings, Interactions, Interaction Offers, and Agent Session Bridges
+            const [meetingResult, interactionResult, offerResult, bridgeResult] = await rv.RunViews([
+                {
+                    EntityName: 'MJ: Meetings',
+                    ExtraFilter: `RoomName = '${escapedRoom}'`,
+                    Fields: ['ID', 'Status', 'HostUserID'],
+                    ResultType: 'simple',
+                },
+                {
+                    EntityName: 'MJ: Interactions',
+                    ExtraFilter: `RoomName = '${escapedRoom}'`,
+                    Fields: ['ID', 'Status', 'AgentSessionID'],
+                    ResultType: 'simple',
+                },
+                {
+                    EntityName: 'MJ: Interaction Offers',
+                    ExtraFilter: `RoomName = '${escapedRoom}'`,
+                    Fields: ['ID', 'Status', 'TargetUserID'],
+                    ResultType: 'simple',
+                },
+                {
+                    EntityName: 'MJ: AI Agent Session Bridges',
+                    ExtraFilter: `ExternalConnectionID = '${escapedRoom}' AND Status = 'Active'`,
+                    Fields: ['ID', 'AgentSessionID'],
+                    ResultType: 'simple',
+                },
+            ], user);
+            if (!meetingResult.Success) {
+                LogError(`[RoomAuthorizationService] Error querying MJ: Meetings for room '${trimmedRoom}': ${meetingResult.ErrorMessage}`);
+                return { Authorized: false, Reason: 'Error verifying meeting authorization.' };
+            }
+            if (!interactionResult.Success) {
+                LogError(`[RoomAuthorizationService] Error querying MJ: Interactions for room '${trimmedRoom}': ${interactionResult.ErrorMessage}`);
+                return { Authorized: false, Reason: 'Error verifying interaction authorization.' };
+            }
+            if (!offerResult.Success) {
+                LogError(`[RoomAuthorizationService] Error querying MJ: Interaction Offers for room '${trimmedRoom}': ${offerResult.ErrorMessage}`);
+                return { Authorized: false, Reason: 'Error verifying interaction offer authorization.' };
+            }
+            if (!bridgeResult.Success) {
+                LogError(`[RoomAuthorizationService] Error querying MJ: AI Agent Session Bridges for room '${trimmedRoom}': ${bridgeResult.ErrorMessage}`);
+                return { Authorized: false, Reason: 'Error verifying agent bridge authorization.' };
+            }
+            const meetings = (meetingResult.Results ?? []);
+            const interactions = (interactionResult.Results ?? []);
+            const offers = (offerResult.Results ?? []);
+            const bridges = (bridgeResult.Results ?? []);
+            const activeRoster = LiveKitAgentRoomCoordinator.Instance.GetAgentsInRoom(trimmedRoom);
+            const agentSessionIDs = new Set();
+            for (const i of interactions) {
+                if (i.AgentSessionID)
+                    agentSessionIDs.add(i.AgentSessionID);
+            }
+            for (const b of bridges) {
+                if (b.AgentSessionID)
+                    agentSessionIDs.add(b.AgentSessionID);
+            }
+            for (const r of activeRoster) {
+                if (r.AgentSessionID)
+                    agentSessionIDs.add(r.AgentSessionID);
+            }
+            // 1. Check if room is tied to an MJ: Meetings record
+            if (meetings.length > 0) {
+                const meeting = meetings[0];
+                if (meeting.Status === 'Cancelled') {
+                    return { Authorized: false, Reason: 'Meeting is cancelled.' };
+                }
+                if (UUIDsEqual(meeting.HostUserID, user.ID)) {
+                    return { Authorized: true };
+                }
+                const participantResult = await rv.RunView({
+                    EntityName: 'MJ: Meeting Participants',
+                    ExtraFilter: `MeetingID = '${EscapeSQLString(meeting.ID)}' AND UserID = '${escapedUserID}'`,
+                    Fields: ['ID', 'InviteStatus', 'UserID'],
+                    ResultType: 'simple',
+                }, user);
+                if (!participantResult.Success) {
+                    LogError(`[RoomAuthorizationService] Error querying MJ: Meeting Participants for meeting '${meeting.ID}': ${participantResult.ErrorMessage}`);
+                    return { Authorized: false, Reason: 'Error verifying participant authorization.' };
+                }
+                const participants = (participantResult.Results ?? []);
+                if (participants.length > 0) {
+                    const participant = participants[0];
+                    if (participant.InviteStatus === 'Declined') {
+                        return { Authorized: false, Reason: 'User declined the invitation to this meeting.' };
+                    }
+                    return { Authorized: true };
+                }
+                return { Authorized: false, Reason: 'User is not a host or participant in this meeting.' };
+            }
+            // 2. Check if room is tied to an Interaction, has active agent sessions (e.g. web agent rooms), or has a SIP call prefix (never ad-hoc)
+            const isSipCallRoom = trimmedRoom.startsWith(this.sipRoomPrefix);
+            if (interactions.length > 0 || isSipCallRoom || agentSessionIDs.size > 0) {
+                // User with an Accepted offer for it
+                const hasAcceptedOffer = offers.some((o) => UUIDsEqual(o.TargetUserID, user.ID) && o.Status === 'Accepted');
+                if (hasAcceptedOffer) {
+                    return { Authorized: true };
+                }
+                // User who started it (the Interaction's or Agent Session's owner)
+                if (agentSessionIDs.size > 0) {
+                    const filter = [...agentSessionIDs].map((id) => `ID = '${EscapeSQLString(id)}'`).join(' OR ');
+                    const sessionResult = await rv.RunView({
+                        EntityName: 'MJ: AI Agent Sessions',
+                        ExtraFilter: filter,
+                        Fields: ['ID', 'UserID'],
+                        ResultType: 'simple',
+                    }, user);
+                    if (!sessionResult.Success) {
+                        LogError(`[RoomAuthorizationService] Error querying MJ: AI Agent Sessions for room '${trimmedRoom}': ${sessionResult.ErrorMessage}`);
+                        return { Authorized: false, Reason: 'Error verifying session authorization.' };
+                    }
+                    const sessions = (sessionResult.Results ?? []);
+                    if (sessions.some((s) => UUIDsEqual(s.UserID, user.ID))) {
+                        return { Authorized: true };
+                    }
+                }
+                return { Authorized: false, Reason: 'User is not authorized to access this call or agent session room.' };
+            }
+            // 3. Rooms tied to an MJ: Interaction Offers record
+            if (offers.length > 0) {
+                const acceptedOffer = offers.find((o) => UUIDsEqual(o.TargetUserID, user.ID) && o.Status === 'Accepted');
+                if (acceptedOffer) {
+                    return { Authorized: true };
+                }
+                return { Authorized: false, Reason: 'User has not accepted a handoff offer for this room.' };
+            }
+            // 4. Ad-hoc rooms: only rooms with no Meeting, no Interaction, no Agent Session, and no Offer row
+            return { Authorized: true };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            LogError(`[RoomAuthorizationService] Unexpected error authorizing room '${trimmedRoom}': ${msg}`);
+            return { Authorized: false, Reason: `Internal authorization error: ${msg}` };
+        }
+    }
+}
+//# sourceMappingURL=room-authorization.js.map

package/dist/room-authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"room-authorization.js","sourceRoot":"","sources":["../src/room-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAyC,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAO,CAAC;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AA+CjE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,wBAAyB,SAAQ,aAAuC;IAInF;QACE,KAAK,EAAE,CAAC;QAHF,kBAAa,GAAW,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,4BAA4B,CAAC,CAAC,IAAI,EAAE,IAAI,4BAA4B,CAAC;IAI7I,CAAC;IAEM,MAAM,KAAK,QAAQ;QACxB,OAAO,wBAAwB,CAAC,WAAW,EAA4B,CAAC;IAC1E,CAAC;IAED;;OAEG;IACI,uBAAuB,CAAC,EAAqB;QAClD,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACI,gBAAgB,CAAC,MAAe;QACrC,IAAI,CAAC,aAAa,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,4BAA4B,CAAC,CAAC,IAAI,EAAE,IAAI,4BAA4B,CAAC;IAC9I,CAAC;IAED;;OAEG;IACH,IAAW,aAAa;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,mBAAmB,CAC9B,QAAgB,EAChB,IAAc,EACd,QAA4B;QAE5B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE/C,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAE7E,IAAI,CAAC;YACH,kGAAkG;YAClG,MAAM,CAAC,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,EAAE,CAAC,QAAQ,CAGrF;gBACE;oBACE,UAAU,EAAE,cAAc;oBAC1B,WAAW,EAAE,eAAe,WAAW,GAAG;oBAC1C,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC;oBACtC,UAAU,EAAE,QAAQ;iBACrB;gBACD;oBACE,UAAU,EAAE,kBAAkB;oBAC9B,WAAW,EAAE,eAAe,WAAW,GAAG;oBAC1C,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC;oBAC1C,UAAU,EAAE,QAAQ;iBACrB;gBACD;oBACE,UAAU,EAAE,wBAAwB;oBACpC,WAAW,EAAE,eAAe,WAAW,GAAG;oBAC1C,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC;oBACxC,UAAU,EAAE,QAAQ;iBACrB;gBACD;oBACE,UAAU,EAAE,8BAA8B;oBAC1C,WAAW,EAAE,2BAA2B,WAAW,yBAAyB;oBAC5E,MAAM,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;oBAChC,UAAU,EAAE,QAAQ;iBACrB;aACF,EACD,IAAI,CACL,CAAC;YAEF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,QAAQ,CAAC,oEAAoE,WAAW,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC5H,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;YACjF,CAAC;YAED,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;gBAC/B,QAAQ,CAAC,wEAAwE,WAAW,MAAM,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC;gBACpI,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;YACrF,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,QAAQ,CAAC,8EAA8E,WAAW,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC;gBACpI,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;YAC3F,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC1B,QAAQ,CAAC,oFAAoF,WAAW,MAAM,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC3I,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;YACtF,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC,OAAO,IAAI,EAAE,CAAuB,CAAC;YACrE,MAAM,YAAY,GAAG,CAAC,iBAAiB,CAAC,OAAO,IAAI,EAAE,CAA2B,CAAC;YACjF,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAqB,CAAC;YAC/D,MAAM,OAAO,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAsB,CAAC;YAClE,MAAM,YAAY,GAAG,2BAA2B,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAEvF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;YAC1C,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,CAAC,cAAc;oBAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,cAAc;oBAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,CAAC,cAAc;oBAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAC9D,CAAC;YAED,qDAAqD;YACrD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBACnC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;gBAChE,CAAC;gBAED,IAAI,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC5C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBAC9B,CAAC;gBAED,MAAM,iBAAiB,GAAG,MAAM,EAAE,CAAC,OAAO,CACxC;oBACE,UAAU,EAAE,0BAA0B;oBACtC,WAAW,EAAE,gBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,mBAAmB,aAAa,GAAG;oBAC3F,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC;oBACxC,UAAU,EAAE,QAAQ;iBACrB,EACD,IAAI,CACL,CAAC;gBAEF,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;oBAC/B,QAAQ,CAAC,mFAAmF,OAAO,CAAC,EAAE,MAAM,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC;oBAC9I,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;gBACrF,CAAC;gBAED,MAAM,YAAY,GAAG,CAAC,iBAAiB,CAAC,OAAO,IAAI,EAAE,CAA2B,CAAC;gBACjF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;oBACpC,IAAI,WAAW,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;wBAC5C,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;oBACxF,CAAC;oBACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBAC9B,CAAC;gBAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;YAC7F,CAAC;YAED,wIAAwI;YACxI,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACzE,qCAAqC;gBACrC,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CACtE,CAAC;gBACF,IAAI,gBAAgB,EAAE,CAAC;oBACrB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBAC9B,CAAC;gBAED,mEAAmE;gBACnE,IAAI,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC9F,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,OAAO,CACpC;wBACE,UAAU,EAAE,uBAAuB;wBACnC,WAAW,EAAE,MAAM;wBACnB,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;wBACxB,UAAU,EAAE,QAAQ;qBACrB,EACD,IAAI,CACL,CAAC;oBAEF,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;wBAC3B,QAAQ,CAAC,6EAA6E,WAAW,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;wBACrI,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;oBACjF,CAAC;oBAED,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;oBAC1E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;wBACxD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC;YAC5G,CAAC;YAED,oDAAoD;YACpD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CACtE,CAAC;gBACF,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBAC9B,CAAC;gBACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC;YAC/F,CAAC;YAED,kGAAkG;YAClG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,QAAQ,CAAC,iEAAiE,WAAW,MAAM,GAAG,EAAE,CAAC,CAAC;YAClG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,GAAG,EAAE,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;CACF"}

package/dist/room-handoff/handoff-offer-registry.d.ts

@@ -0,0 +1,147 @@
+/**
+ * @fileoverview Durable registry of handoff offers backed by `MJ: Interaction Offers`.
+ *
+ * An offer is a short-lived question put to one person: "a caller is waiting, will you take the conversation?".
+ * It lives in `MJ: Interaction Offers` from the moment the AI asks until it is accepted, declined, expired or cancelled,
+ * and is kept so a console that was open when it resolved can still show what happened.
+ *
+ * **Durable and cluster-safe.** Offers are stored in the database (`MJ: Interaction Offers`). Accept and decline
+ * execute a compare-and-set on `Status = 'Pending'` inside `RunInEntityTransaction` so multiple server instances
+ * cannot both accept or race. Expired offers are updated on read and through a periodic sweep. Live changes are
+ * published locally and across instances via cluster pub/sub.
+ *
+ * An accept or decline is authorised by comparing the offer's target user with the caller, and a mismatch answers
+ * exactly as a missing offer does: someone who does not own an offer cannot learn that it exists.
+ *
+ * @module @memberjunction/livekit-room-server
+ */
+import { IMetadataProvider, UserInfo } from '@memberjunction/core';
+import { BaseSingleton } from '@memberjunction/global';
+import type { HandoffMode, HandoffOfferStatus, HandoffOfferView } from './handoff-types.js';
+/** How long a person has to accept an offer before it expires. */
+export declare const HANDOFF_OFFER_TIMEOUT_MS = 45000;
+/** How long a resolved offer stays listed (so a console that was open still sees what happened). */
+export declare const HANDOFF_OFFER_RETENTION_MS: number;
+/** The most pending offers one person can have at once; a flood of offers is refused rather than queued. */
+export declare const MAX_PENDING_OFFERS_PER_USER = 10;
+/** What the registry stores for one offer. */
+export interface HandoffOfferRecord {
+    OfferID: string;
+    RoomName: string;
+    /** The person the offer was made to. Server-side only. */
+    TargetUserID: string;
+    Mode: HandoffMode;
+    Summary: string;
+    CallerLabel: string;
+    AgentName: string;
+    Status: HandoffOfferStatus;
+    CreatedAtMs: number;
+    ExpiresAtMs: number;
+    /** When the offer left `Pending`, for retention. */
+    ResolvedAtMs?: number;
+    InteractionID?: string;
+    OfferedByAgentID?: string | null;
+}
+/** What it takes to create an offer. */
+export interface CreateOfferInput {
+    RoomName: string;
+    TargetUserID: string;
+    Mode: HandoffMode;
+    Summary: string;
+    CallerLabel: string;
+    AgentName: string;
+    InteractionID?: string;
+    OfferedByAgentID?: string | null;
+    ContextUser?: UserInfo;
+    Provider?: IMetadataProvider;
+}
+/** The result of trying to resolve an offer on a person's behalf. */
+export type ResolveOfferResult = {
+    Ok: true;
+    Offer: HandoffOfferRecord;
+} | {
+    Ok: false;
+    Reason: string;
+};
+/** The one answer for "no such offer", "not yours" and "too late", so an offer's existence is not leaked. */
+export declare const OFFER_UNAVAILABLE = "This conversation offer is no longer available.";
+/** Converts a stored offer to what a console may see. */
+export declare function ToOfferView(offer: HandoffOfferRecord): HandoffOfferView;
+export interface HandoffOfferRegistryDeps {
+    Provider?: IMetadataProvider;
+    ContextUser?: UserInfo;
+    /**
+     * Lazily resolves a server identity when no `ContextUser` was given (e.g. the system user, which only exists once the
+     * host's user cache has loaded). Consulted on every call, so a late-loading cache is picked up.
+     */
+    ResolveContextUser?: () => UserInfo | undefined;
+    Publisher?: (event: {
+        UserID: string;
+        Kind: 'offered' | 'updated';
+        Offer: HandoffOfferView;
+    }) => void;
+}
+/** Holds handoff offers in `MJ: Interaction Offers` with in-memory caching and compare-and-set concurrency guards. */
+export declare class HandoffOfferRegistry extends BaseSingleton<HandoffOfferRegistry> {
+    private deps;
+    private readonly offers;
+    private now;
+    private sweepTimer?;
+    protected constructor();
+    /** The process-wide registry. */
+    static get Instance(): HandoffOfferRegistry;
+    /** Configures collaborator dependencies. */
+    Configure(deps: HandoffOfferRegistryDeps): void;
+    /** Stops the periodic background sweep timer (shutdown, tests). */
+    StopPeriodicSweep(): void;
+    /** Replaces the clock (tests). */
+    SetClock(now: () => number): void;
+    /** Forgets every cached offer (tests, shutdown). */
+    Clear(): void;
+    /**
+     * Creates a pending offer. Refuses when the person already has {@link MAX_PENDING_OFFERS_PER_USER} pending.
+     *
+     * @returns The new offer, or `undefined` when the person's pending-offer cap is reached.
+     */
+    Create(input: CreateOfferInput, timeoutMs?: number): Promise<HandoffOfferRecord | undefined>;
+    /** The offer with this id, or `undefined`. */
+    Get(offerID: string, contextUser?: UserInfo, provider?: IMetadataProvider): Promise<HandoffOfferRecord | undefined>;
+    /** The person's offers that can still be accepted, soonest to expire first. */
+    PendingForUser(userID: string, contextUser?: UserInfo, provider?: IMetadataProvider): Promise<HandoffOfferRecord[]>;
+    /** The person's offers to show: pending ones, plus ones resolved recently enough to still be retained. */
+    ListForUser(userID: string, contextUser?: UserInfo, provider?: IMetadataProvider): Promise<HandoffOfferRecord[]>;
+    /** The offers made from one room, any status. */
+    ForRoom(roomName: string, contextUser?: UserInfo, provider?: IMetadataProvider): Promise<HandoffOfferRecord[]>;
+    /**
+     * Moves a pending offer to a terminal status on behalf of the person it was made to. The caller must be the
+     * offer's target and the offer must still be pending and unexpired; anything else answers the same way.
+     *
+     * Compares and sets atomically in a transaction on `Status = 'Pending'` so concurrent requests across
+     * multiple instances cannot both succeed.
+     */
+    ResolveForUser(offerID: string, userID: string, status: 'Accepted' | 'Declined', contextUser?: UserInfo, provider?: IMetadataProvider): Promise<ResolveOfferResult>;
+    /**
+     * Moves a pending offer to `Expired` or `Cancelled` (a system decision, not the person's).
+     *
+     * @returns The offer when it was pending and has now changed; `undefined` when it was already resolved or unknown.
+     */
+    Close(offerID: string, status: 'Expired' | 'Cancelled', contextUser?: UserInfo, provider?: IMetadataProvider): Promise<HandoffOfferRecord | undefined>;
+    /**
+     * Sweeps expired pending offers and purges retained resolved offers.
+     *
+     * @returns How many pending offers were expired by this sweep.
+     */
+    Sweep(contextUser?: UserInfo, provider?: IMetadataProvider): Promise<number>;
+    private sweep;
+    private finish;
+    private entityToRecord;
+    private notifyPublisher;
+    private warnedNoUser;
+    /** The caller's user, else the configured server identity, else the lazily resolved one. */
+    private resolveUser;
+    /** Logs once (not per tick) that database queries are being skipped because no user identity is available yet. */
+    private noteNoUser;
+    private getProvider;
+    private getRunView;
+}
+//# sourceMappingURL=handoff-offer-registry.d.ts.map

package/dist/room-handoff/handoff-offer-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff-offer-registry.d.ts","sourceRoot":"","sources":["../../src/room-handoff/handoff-offer-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAA+B,iBAAiB,EAAoE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAClK,OAAO,EAAE,aAAa,EAA+B,MAAM,wBAAwB,CAAC;AAEpF,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEzF,kEAAkE;AAClE,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,oGAAoG;AACpG,eAAO,MAAM,0BAA0B,QAAa,CAAC;AAErD,4GAA4G;AAC5G,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAE9C,8CAA8C;AAC9C,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzG,6GAA6G;AAC7G,eAAO,MAAM,iBAAiB,oDAAoD,CAAC;AAEnF,yDAAyD;AACzD,wBAAgB,WAAW,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAavE;AAED,MAAM,WAAW,wBAAwB;IACrC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,QAAQ,GAAG,SAAS,CAAC;IAChD,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;QAAC,KAAK,EAAE,gBAAgB,CAAA;KAAE,KAAK,IAAI,CAAC;CACzG;AAeD,sHAAsH;AACtH,qBAAa,oBAAqB,SAAQ,aAAa,CAAC,oBAAoB,CAAC;IACzE,OAAO,CAAC,IAAI,CAAgC;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,GAAG,CAA0B;IACrC,OAAO,CAAC,UAAU,CAAC,CAAiC;IAEpD,SAAS;IAUT,iCAAiC;IACjC,WAAkB,QAAQ,IAAI,oBAAoB,CAEjD;IAED,4CAA4C;IACrC,SAAS,CAAC,IAAI,EAAE,wBAAwB,GAAG,IAAI;IAItD,mEAAmE;IAC5D,iBAAiB,IAAI,IAAI;IAOhC,kCAAkC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,IAAI;IAIxC,oDAAoD;IAC7C,KAAK,IAAI,IAAI;IAIpB;;;;OAIG;IACU,MAAM,CAAC,KAAK,EAAE,gBAAgB,EAAE,SAAS,GAAE,MAAiC,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAqFnI,8CAA8C;IACjC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAoChI,+EAA+E;IAClE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAiDhI,0GAA0G;IAC7F,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAwC7H,iDAAiD;IACpC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA+B3H;;;;;;OAMG;IACU,cAAc,CACvB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,GAAG,UAAU,EAC/B,WAAW,CAAC,EAAE,QAAQ,EACtB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,kBAAkB,CAAC;IAyD9B;;;;OAIG;IACU,KAAK,CACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,GAAG,WAAW,EAC/B,WAAW,CAAC,EAAE,QAAQ,EACtB,QAAQ,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAsC1C;;;;OAIG;IACU,KAAK,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;YAI3E,KAAK;IAmDnB,OAAO,CAAC,MAAM;IAKd,OAAO,CAAC,cAAc;IA2BtB,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,YAAY,CAAS;IAE7B,4FAA4F;IAC5F,OAAO,CAAC,WAAW;IAInB,kHAAkH;IAClH,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,UAAU;CAMrB"}