@spinabot/brigade 0.1.1 → 1.0.0

package/dist/agents/channels/access-control/store.js

@@ -0,0 +1,482 @@
+/**
+ * Channel access-control store — atomic per-channel JSON files.
+ *
+ * Two files per channel under `~/.brigade/channels/<id>/`:
+ *   - `allow-from.json` — list of approved sender ids.
+ *   - `pairing.json` — pending pairing codes (sender → code, with TTL).
+ *
+ * Both writes go via temp-file + rename for atomicity; both reads are
+ * defensive (missing/corrupt files degrade to empty + a logged warning, never
+ * crash). The pairing store auto-prunes expired + over-capacity entries on
+ * every read so callers see a consistent view.
+ */
+import { randomInt } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import lockfile from "proper-lockfile";
+import { resolveChannelAllowFromPath, resolveChannelGroupAllowFromPath, resolveChannelPairingPath, resolveChannelStateDir, } from "../../../config/paths.js";
+import { createSubsystemLogger } from "../../../logging/subsystem-logger.js";
+import { tryGetRuntimeContext } from "../../../storage/runtime-context.js";
+const log = createSubsystemLogger("channels/access-control");
+const accessCache = new Map();
+const pathSem = new Map();
+let accessFlushChain = Promise.resolve();
+function inConvexMode() {
+    return tryGetRuntimeContext()?.mode === "convex";
+}
+function allowFromPath(channelId, acct) {
+    const p = resolveChannelAllowFromPath(channelId, acct);
+    pathSem.set(p, { channelId, accountId: acct ?? "default", kind: "allow-from" });
+    return p;
+}
+function groupAllowFromPath(channelId, acct) {
+    const p = resolveChannelGroupAllowFromPath(channelId, acct);
+    pathSem.set(p, { channelId, accountId: acct ?? "default", kind: "group-allow-from" });
+    return p;
+}
+function pairingPath(channelId, acct) {
+    const p = resolveChannelPairingPath(channelId, acct);
+    pathSem.set(p, { channelId, accountId: acct ?? "default", kind: "pairing" });
+    return p;
+}
+/** Convex-mode boot hydration — install the full access state (one
+ *  listAllAccessRows query, grouped here) into the in-process cache. */
+export function primeAccessCacheFromRows(rows) {
+    const grouped = new Map();
+    for (const row of rows) {
+        const acct = row.accountId === "default" ? null : row.accountId;
+        const p = row.kind === "allow-from"
+            ? allowFromPath(row.channelId, acct)
+            : row.kind === "group-allow-from"
+                ? groupAllowFromPath(row.channelId, acct)
+                : pairingPath(row.channelId, acct);
+        const bucket = grouped.get(p) ?? [];
+        bucket.push(row);
+        grouped.set(p, bucket);
+    }
+    for (const [p, bucket] of grouped) {
+        const sem = pathSem.get(p);
+        if (sem.kind === "pairing") {
+            accessCache.set(p, {
+                version: 1,
+                requests: bucket.map((r) => ({
+                    senderId: r.senderId,
+                    ...(r.senderName !== undefined ? { senderName: r.senderName } : {}),
+                    code: r.code ?? "",
+                    createdAt: r.createdAt,
+                    lastSeenAt: r.lastSeenAt,
+                })),
+            });
+        }
+        else {
+            accessCache.set(p, { version: 1, allowFrom: bucket.map((r) => r.senderId) });
+        }
+    }
+}
+function enqueueAccessReconcile(filePath, value) {
+    const sem = pathSem.get(filePath);
+    const rctx = tryGetRuntimeContext();
+    if (!sem || !rctx)
+        return;
+    const nowIso = new Date().toISOString();
+    const rows = sem.kind === "pairing"
+        ? (value.requests ?? []).map((r) => ({
+            senderId: r.senderId,
+            ...(r.senderName !== undefined ? { senderName: r.senderName } : {}),
+            code: r.code,
+            createdAt: r.createdAt,
+            lastSeenAt: r.lastSeenAt,
+        }))
+        : (value.allowFrom ?? []).map((senderId) => ({
+            senderId,
+            createdAt: nowIso,
+            lastSeenAt: nowIso,
+        }));
+    const store = rctx.store;
+    accessFlushChain = accessFlushChain
+        .then(() => store.channels.reconcileAccessRows({
+        channelId: sem.channelId,
+        accountId: sem.accountId === "default" ? null : sem.accountId,
+        kind: sem.kind,
+        rows,
+    }))
+        .catch((err) => {
+        console.error(`brigade: access-control write to convex failed (${sem.channelId}/${sem.kind}) — ${err.message}`);
+    });
+}
+/** Resolves when every access-control mutation enqueued so far reached the
+ *  backend (convex mode). */
+export function awaitAccessFlush() {
+    return accessFlushChain;
+}
+/** Test-only. */
+export function __resetAccessCacheForTests() {
+    accessCache.clear();
+    pathSem.clear();
+    accessFlushChain = Promise.resolve();
+}
+// Code alphabet: deliberately drops `0/O/1/I` so an operator reading a code
+// over voice or copying from a screenshot can't fumble it. 32^8 ≈ 1.1×10¹²
+// combinations is plenty for a 1-hour, max-3-pending window.
+const CODE_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+const CODE_LENGTH = 8;
+/** Pending codes expire after this long. */
+export const PAIRING_TTL_MS = 60 * 60 * 1000; // 1h
+/** Most pending codes per channel; LRU-evicted on overflow. */
+export const PAIRING_MAX_PENDING = 3;
+/* ─────────────────────────── atomic JSON ─────────────────────────── */
+function ensureParentDir(filePath) {
+    mkdirSync(path.dirname(filePath), { recursive: true });
+}
+function readJson(filePath, fallback) {
+    if (inConvexMode()) {
+        const cached = accessCache.get(filePath);
+        return cached !== undefined ? structuredClone(cached) : fallback;
+    }
+    if (!existsSync(filePath))
+        return fallback;
+    let raw;
+    try {
+        raw = readFileSync(filePath, "utf8");
+    }
+    catch {
+        return fallback;
+    }
+    // Zero-byte / whitespace-only files are a known artifact: `withFileLock`
+    // creates an empty placeholder before the first write, and an interrupted
+    // write can leave a partial file. Treat both as "absent" silently — no
+    // WARN, no recurring "unreadable" log on every turn.
+    if (raw.trim().length === 0)
+        return fallback;
+    try {
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        // Genuinely corrupted JSON: log ONCE at INFO (not WARN — this is
+        // self-healing), then overwrite with the serialized fallback so the
+        // next read returns clean data instead of repeating this branch.
+        log.info("access-control store reset to empty state (file was corrupted)", {
+            path: filePath,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        try {
+            writeJsonAtomic(filePath, fallback);
+        }
+        catch {
+            /* best-effort heal */
+        }
+        return fallback;
+    }
+}
+function writeJsonAtomic(filePath, value) {
+    if (inConvexMode()) {
+        accessCache.set(filePath, structuredClone(value));
+        enqueueAccessReconcile(filePath, value);
+        return;
+    }
+    ensureParentDir(filePath);
+    const tmp = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(value, null, 2));
+    renameSync(tmp, filePath);
+}
+/**
+ * Serialize every read-modify-write on `filePath` behind a real file lock so
+ * the gateway and CLI can't race each other into a lost update. Atomic-rename
+ * protects against torn writes; the lock protects against two processes
+ * reading the same JSON, both pruning, and both writing — only the last write
+ * would win, silently dropping the other's allow-from add. `proper-lockfile`
+ * handles stale-lock recovery + retries (sync API keeps the store callers sync
+ * so we don't propagate async through the CLI surface).
+ */
+function withFileLock(filePath, fn) {
+    if (inConvexMode()) {
+        // No file to lock. The callers' read-modify-write is synchronous, so
+        // JS single-threading already serialises it in-process; cross-process
+        // writes are linearised by the Convex reconcile mutation.
+        return fn();
+    }
+    ensureParentDir(filePath);
+    // proper-lockfile requires the target to exist; create an empty placeholder
+    // if needed — the real content lands when fn() calls writeJsonAtomic.
+    if (!existsSync(filePath))
+        writeFileSync(filePath, "");
+    // proper-lockfile's `lockSync` doesn't accept `retries` (it can't sleep). The
+    // contention windows here are microseconds (read + JSON.parse + write a tiny
+    // file), so a busy-wait retry loop with a few jittered tries is enough. Each
+    // attempt either acquires immediately or throws ELOCKED.
+    const MAX_ATTEMPTS = 12;
+    let attempt = 0;
+    let release = () => { };
+    while (attempt < MAX_ATTEMPTS) {
+        try {
+            release = lockfile.lockSync(filePath, { stale: 30_000 });
+            break;
+        }
+        catch (err) {
+            attempt += 1;
+            if (attempt >= MAX_ATTEMPTS)
+                throw err;
+            // Cheap synchronous spin: a few microseconds of busywork; jittered.
+            const spinUntil = Date.now() + (5 + Math.floor(Math.random() * 25));
+            while (Date.now() < spinUntil) {
+                /* spin */
+            }
+        }
+    }
+    try {
+        return fn();
+    }
+    finally {
+        try {
+            release();
+        }
+        catch {
+            /* best-effort release */
+        }
+    }
+}
+/**
+ * Read the deduped, normalized allow-from list for a channel account. When
+ * `accountId` is omitted (or `"default"`), the legacy single-account file at
+ * `~/.brigade/channels/<id>/allow-from.json` is read. Multi-account installs
+ * additionally MERGE the legacy file in so an operator who approved a sender
+ * before per-account partitioning landed isn't kicked off the list.
+ */
+export function readAllowFrom(channelId, accountId) {
+    const acct = (accountId ?? "").trim();
+    const data = readJson(allowFromPath(channelId, acct || null), { version: 1, allowFrom: [] });
+    const entries = (data.allowFrom ?? []).map((x) => normalizeId(x)).filter(Boolean);
+    // Multi-account legacy-merge: pull in the channel-wide legacy file too.
+    if (acct && acct !== "default") {
+        const legacy = readJson(allowFromPath(channelId, null), { version: 1, allowFrom: [] });
+        for (const raw of legacy.allowFrom ?? []) {
+            const id = normalizeId(raw);
+            if (id)
+                entries.push(id);
+        }
+    }
+    return [...new Set(entries)];
+}
+/** Add a sender to the allow-from list. Returns true if newly added. */
+export function addAllowFrom(channelId, senderId, accountId) {
+    const id = normalizeId(senderId);
+    if (!id)
+        return false;
+    const acct = (accountId ?? "").trim();
+    const filePath = allowFromPath(channelId, acct || null);
+    return withFileLock(filePath, () => {
+        const current = readAllowFrom(channelId, acct || null);
+        if (current.includes(id))
+            return false;
+        writeJsonAtomic(filePath, { version: 1, allowFrom: [...current, id] });
+        return true;
+    });
+}
+/** Remove a sender from the allow-from list. Returns true if it was present. */
+export function removeAllowFrom(channelId, senderId, accountId) {
+    const id = normalizeId(senderId);
+    if (!id)
+        return false;
+    const acct = (accountId ?? "").trim();
+    const filePath = allowFromPath(channelId, acct || null);
+    return withFileLock(filePath, () => {
+        const current = readAllowFrom(channelId, acct || null);
+        if (!current.includes(id))
+            return false;
+        writeJsonAtomic(filePath, { version: 1, allowFrom: current.filter((x) => x !== id) });
+        return true;
+    });
+}
+/** Add `groupId` to the GROUP allow-from list. Idempotent; returns true when
+ *  the list was modified, false when the id was already present. */
+export function addGroupAllowFrom(channelId, groupId, accountId) {
+    const id = normalizeId(groupId);
+    if (!id)
+        return false;
+    const acct = (accountId ?? "").trim();
+    const filePath = groupAllowFromPath(channelId, acct || null);
+    return withFileLock(filePath, () => {
+        const current = readGroupAllowFrom(channelId, acct || null);
+        if (current.includes(id))
+            return false;
+        writeJsonAtomic(filePath, {
+            version: 1,
+            allowFrom: [...current, id],
+        });
+        return true;
+    });
+}
+/** Remove `groupId` from the GROUP allow-from list. Returns true when the id
+ *  was present and removed. */
+export function removeGroupAllowFrom(channelId, groupId, accountId) {
+    const id = normalizeId(groupId);
+    if (!id)
+        return false;
+    const acct = (accountId ?? "").trim();
+    const filePath = groupAllowFromPath(channelId, acct || null);
+    return withFileLock(filePath, () => {
+        const current = readGroupAllowFrom(channelId, acct || null);
+        if (!current.includes(id))
+            return false;
+        writeJsonAtomic(filePath, {
+            version: 1,
+            allowFrom: current.filter((x) => x !== id),
+        });
+        return true;
+    });
+}
+/** Read the deduped, normalized GROUP allow-from list for a channel account. */
+export function readGroupAllowFrom(channelId, accountId) {
+    const acct = (accountId ?? "").trim();
+    const data = readJson(groupAllowFromPath(channelId, acct || null), { version: 1, allowFrom: [] });
+    const entries = (data.allowFrom ?? []).map((x) => normalizeId(x)).filter(Boolean);
+    if (acct && acct !== "default") {
+        const legacy = readJson(groupAllowFromPath(channelId, null), { version: 1, allowFrom: [] });
+        for (const raw of legacy.allowFrom ?? []) {
+            const id = normalizeId(raw);
+            if (id)
+                entries.push(id);
+        }
+    }
+    return [...new Set(entries)];
+}
+/** True when `senderId` is in the channel's allow-from list. */
+export function isAllowed(channelId, senderId, accountId) {
+    const id = normalizeId(senderId);
+    if (!id)
+        return false;
+    return readAllowFrom(channelId, accountId).includes(id);
+}
+/** Strip ASCII whitespace + uppercase; safe for both sender ids and codes. */
+function normalizeId(value) {
+    return value.replace(/\s+/g, "").trim();
+}
+function normalizeCode(value) {
+    return value.replace(/[\s-]+/g, "").toUpperCase();
+}
+/** Generate one unique 8-char code that isn't already pending in this channel. */
+function generateUniqueCode(existing) {
+    const taken = new Set(existing);
+    for (let attempt = 0; attempt < 500; attempt++) {
+        let out = "";
+        for (let i = 0; i < CODE_LENGTH; i++)
+            out += CODE_ALPHABET[randomInt(CODE_ALPHABET.length)];
+        if (!taken.has(out))
+            return out;
+    }
+    throw new Error("pairing-store: could not generate a unique code after 500 attempts");
+}
+/** Prune expired + over-cap entries. Returns the pruned list (oldest evicted first). */
+function pruneRequests(requests, now = Date.now()) {
+    const fresh = requests.filter((r) => now - Date.parse(r.createdAt) < PAIRING_TTL_MS);
+    if (fresh.length <= PAIRING_MAX_PENDING)
+        return fresh;
+    // Newest by lastSeenAt wins on overflow; insertion order (later = newer)
+    // is the tie-breaker when timestamps land in the same millisecond.
+    return fresh
+        .map((r, i) => ({ r, i }))
+        .sort((a, b) => Date.parse(b.r.lastSeenAt) - Date.parse(a.r.lastSeenAt) || b.i - a.i)
+        .slice(0, PAIRING_MAX_PENDING)
+        .map((x) => x.r);
+}
+/** Read pending pairing requests; prunes expired/over-cap on read (under lock). */
+export function readPendingPairings(channelId, accountId) {
+    const acct = (accountId ?? "").trim();
+    const filePath = pairingPath(channelId, acct || null);
+    return withFileLock(filePath, () => {
+        const data = readJson(filePath, { version: 1, requests: [] });
+        const pruned = pruneRequests(data.requests ?? []);
+        // If pruning changed anything, persist so the next read is consistent.
+        if (pruned.length !== (data.requests ?? []).length) {
+            writeJsonAtomic(filePath, { version: 1, requests: pruned });
+        }
+        return pruned;
+    });
+}
+/**
+ * Issue (or re-emit) a pairing code for `senderId`. If a non-expired code is
+ * already pending for the same sender, the existing one is returned with
+ * `lastSeenAt` refreshed — the operator must approve a stable code, even if
+ * the stranger DMs repeatedly. Returns `{code, isNew}`.
+ */
+export function upsertPairingRequest(args) {
+    const senderId = normalizeId(args.senderId);
+    if (!senderId)
+        throw new Error("upsertPairingRequest: senderId required");
+    const acct = (args.accountId ?? "").trim();
+    const filePath = pairingPath(args.channelId, acct || null);
+    return withFileLock(filePath, () => {
+        const data = readJson(filePath, { version: 1, requests: [] });
+        const now = new Date().toISOString();
+        const fresh = pruneRequests(data.requests ?? []);
+        const existing = fresh.find((r) => r.senderId === senderId);
+        if (existing) {
+            existing.lastSeenAt = now;
+            if (args.senderName)
+                existing.senderName = args.senderName;
+            writeJsonAtomic(filePath, { version: 1, requests: fresh });
+            return { code: existing.code, isNew: false };
+        }
+        const code = generateUniqueCode(fresh.map((r) => r.code));
+        const next = {
+            senderId,
+            senderName: args.senderName,
+            code,
+            createdAt: now,
+            lastSeenAt: now,
+        };
+        const combined = pruneRequests([...fresh, next]);
+        writeJsonAtomic(filePath, { version: 1, requests: combined });
+        return { code, isNew: true };
+    });
+}
+/**
+ * Approve a pairing code: looks up the pending request, removes it, and adds
+ * its sender to the allow-from list. Returns the request that was approved,
+ * or `null` if the code is unknown / expired.
+ */
+export function approvePairingCode(channelId, code, accountId) {
+    const wanted = normalizeCode(code);
+    const acct = (accountId ?? "").trim();
+    const filePath = pairingPath(channelId, acct || null);
+    const approved = withFileLock(filePath, () => {
+        const data = readJson(filePath, { version: 1, requests: [] });
+        const fresh = pruneRequests(data.requests ?? []);
+        const idx = fresh.findIndex((r) => r.code === wanted);
+        if (idx === -1)
+            return null;
+        const a = fresh[idx];
+        fresh.splice(idx, 1);
+        writeJsonAtomic(filePath, { version: 1, requests: fresh });
+        return a;
+    });
+    if (approved)
+        addAllowFrom(channelId, approved.senderId, acct || null);
+    return approved;
+}
+/** Drop a pending code without approving it (operator declines). Returns true if found. */
+export function revokePairingCode(channelId, code, accountId) {
+    const wanted = normalizeCode(code);
+    const acct = (accountId ?? "").trim();
+    const filePath = pairingPath(channelId, acct || null);
+    return withFileLock(filePath, () => {
+        const data = readJson(filePath, { version: 1, requests: [] });
+        const fresh = pruneRequests(data.requests ?? []);
+        const idx = fresh.findIndex((r) => r.code === wanted);
+        if (idx === -1)
+            return false;
+        fresh.splice(idx, 1);
+        writeJsonAtomic(filePath, { version: 1, requests: fresh });
+        return true;
+    });
+}
+/* ─────────────────────────── housekeeping ─────────────────────────── */
+/** Wipe access-control state for a channel (called by `channels unlink`). */
+export function eraseAccessState(channelId) {
+    const dir = resolveChannelStateDir(channelId);
+    // allow-from + pairing files live directly under the channel state dir, so
+    // the existing `rm -rf <stateDir>` in `channels unlink` already covers them.
+    // This helper exists for tests + future per-file resets.
+    void dir;
+}
+//# sourceMappingURL=store.js.map

package/dist/agents/channels/access-control/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../../src/agents/channels/access-control/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EACN,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,sBAAsB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAG3E,MAAM,GAAG,GAAG,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;AAuB7D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;AAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;AAC7C,IAAI,gBAAgB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAExD,SAAS,YAAY;IACpB,OAAO,oBAAoB,EAAE,EAAE,IAAI,KAAK,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,IAAmB;IAC5D,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,CAAC;AACV,CAAC;AACD,SAAS,kBAAkB,CAAC,SAAiB,EAAE,IAAmB;IACjE,MAAM,CAAC,GAAG,gCAAgC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,CAAC;AACV,CAAC;AACD,SAAS,WAAW,CAAC,SAAiB,EAAE,IAAmB;IAC1D,MAAM,CAAC,GAAG,yBAAyB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC;AACV,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,wBAAwB,CACvC,IASE;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAChE,MAAM,CAAC,GACN,GAAG,CAAC,IAAI,KAAK,YAAY;YACxB,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC;YACpC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAkB;gBAChC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC;gBACzC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAc,CAAC;QACxC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE;gBAClB,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;oBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,UAAU,EAAE,CAAC,CAAC,UAAU;iBACxB,CAAC,CAAC;aACH,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,KAAc;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;QAAE,OAAO;IAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,IAAI,GACT,GAAG,CAAC,IAAI,KAAK,SAAS;QACrB,CAAC,CAAC,CAAE,KAAyC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxE,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;SACxB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAE,KAAkC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzE,QAAQ;YACR,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,MAAM;SAClB,CAAC,CAAC,CAAC;IACP,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,gBAAgB,GAAG,gBAAgB;SACjC,IAAI,CAAC,GAAG,EAAE,CACV,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS;QAC7D,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI;KACJ,CAAC,CACF;SACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACd,OAAO,CAAC,KAAK,CACZ,mDAAmD,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,OAAQ,GAAa,CAAC,OAAO,EAAE,CAC3G,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;6BAC6B;AAC7B,MAAM,UAAU,gBAAgB;IAC/B,OAAO,gBAAgB,CAAC;AACzB,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,0BAA0B;IACzC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,gBAAgB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,4EAA4E;AAC5E,2EAA2E;AAC3E,6DAA6D;AAC7D,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,4CAA4C;AAC5C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK;AACnD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,yEAAyE;AAEzE,SAAS,eAAe,CAAC,QAAgB;IACxC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAI,QAAgB,EAAE,QAAW;IACjD,IAAI,YAAY,EAAE,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAE,eAAe,CAAC,MAAM,CAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,qDAAqD;IACrD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,GAAG,CAAC,IAAI,CAAC,gEAAgE,EAAE;YAC1E,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACvD,CAAC,CAAC;QACH,IAAI,CAAC;YACJ,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACR,sBAAsB;QACvB,CAAC;QACD,OAAO,QAAQ,CAAC;IACjB,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,KAAc;IACxD,IAAI,YAAY,EAAE,EAAE,CAAC;QACpB,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxC,OAAO;IACR,CAAC;IACD,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IAC3D,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAI,QAAgB,EAAE,EAAW;IACrD,IAAI,YAAY,EAAE,EAAE,CAAC;QACpB,qEAAqE;QACrE,sEAAsE;QACtE,0DAA0D;QAC1D,OAAO,EAAE,EAAE,CAAC;IACb,CAAC;IACD,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,4EAA4E;IAC5E,sEAAsE;IACtE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvD,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,yDAAyD;IACzD,MAAM,YAAY,GAAG,EAAE,CAAC;IACxB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAe,GAAG,EAAE,GAAE,CAAC,CAAC;IACnC,OAAO,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC;YACJ,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACzD,MAAM;QACP,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,OAAO,IAAI,YAAY;gBAAE,MAAM,GAAG,CAAC;YACvC,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;gBAC/B,UAAU;YACX,CAAC;QACF,CAAC;IACF,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,EAAE,EAAE,CAAC;IACb,CAAC;YAAS,CAAC;QACV,IAAI,CAAC;YACJ,OAAO,EAAE,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACR,yBAAyB;QAC1B,CAAC;IACF,CAAC;AACF,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,SAAyB;IACzE,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAgB,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClF,wEAAwE;IACxE,IAAI,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAgB,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACtG,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,QAAgB,EAAE,SAAyB;IAC1F,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACxD,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClC,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,EAAE,EAAE,CAAC,EAA0B,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,QAAgB,EAAE,SAAyB;IAC7F,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACxD,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClC,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAA0B,CAAC,CAAC;QAC9G,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,iBAAiB,CAChC,SAAiB,EACjB,OAAe,EACf,SAAyB;IAEzB,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IAC7D,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClC,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,eAAe,CAAC,QAAQ,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,CAAC,GAAG,OAAO,EAAE,EAAE,CAAC;SACH,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;+BAC+B;AAC/B,MAAM,UAAU,oBAAoB,CACnC,SAAiB,EACjB,OAAe,EACf,SAAyB;IAEzB,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IAC7D,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClC,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,eAAe,CAAC,QAAQ,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAClB,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,SAAyB;IAC9E,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAgB,kBAAkB,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClF,IAAI,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAgB,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3G,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,SAAS,CAAC,SAAiB,EAAE,QAAgB,EAAE,SAAyB;IACvF,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,OAAO,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACzD,CAAC;AASD,8EAA8E;AAC9E,SAAS,WAAW,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AACD,SAAS,aAAa,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACnD,CAAC;AAED,kFAAkF;AAClF,SAAS,kBAAkB,CAAC,QAA0B;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE;YAAE,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;AACvF,CAAC;AAED,wFAAwF;AACxF,SAAS,aAAa,CAAC,QAA0B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,IAAI,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACtD,yEAAyE;IACzE,mEAAmE;IACnE,OAAO,KAAK;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SACzB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACpF,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC;SAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,SAAyB;IAC/E,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACtD,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAc,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAClD,uEAAuE;QACvE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACpD,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAwB,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACA,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IAC3D,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAc,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC5D,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,IAAI,IAAI,CAAC,UAAU;gBAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YAC3D,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAwB,CAAC,CAAC;YACjF,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAmB;YAC5B,QAAQ;YACR,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,IAAI;YACJ,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,GAAG;SACf,CAAC;QACF,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACjD,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAwB,CAAC,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,IAAY,EAAE,SAAyB;IAC5F,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,GAA0B,EAAE;QACnE,MAAM,IAAI,GAAG,QAAQ,CAAc,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACtD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAmB,CAAC;QACvC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAwB,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ;QAAE,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACvE,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,IAAY,EAAE,SAAyB;IAC3F,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACtD,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAc,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QACtD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAwB,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,0EAA0E;AAE1E,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IACjD,MAAM,GAAG,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC9C,2EAA2E;IAC3E,6EAA6E;IAC7E,yDAAyD;IACzD,KAAK,GAAG,CAAC;AACV,CAAC"}

package/dist/agents/channels/access-control/types.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Channel access control — types.
+ *
+ * Brigade's WhatsApp (and any future messaging channel) gates inbound messages
+ * BEFORE the LLM runs. Without this, anyone who knows the linked phone number
+ * can DM the agent and get full access — a B2B blocker.
+ *
+ * Policies (`channels.<id>.dmPolicy`):
+ *
+ *   - `pairing` (default): strangers get an 8-char pairing code in the reply
+ *     and must be approved out-of-band by the operator (`brigade pairing
+ *     approve <CODE>`), which adds them to the allow-from list. The operator's
+ *     own linked-self number is always allowed (self-chat).
+ *   - `allowlist`: only senders explicitly added via
+ *     `brigade channels allow add <id>` get through. No automatic challenge.
+ *   - `open`: anyone can DM (dangerous default for B2B — explicit opt-in).
+ *   - `disabled`: every DM is silently dropped (lock down).
+ */
+/** The four DM-policy modes. Default is `pairing`. */
+export type DmPolicy = "pairing" | "allowlist" | "open" | "disabled";
+/** A pending pairing code issued to a sender; expires after PAIRING_TTL_MS. */
+export interface PairingRequest {
+    /** Stable sender id on the channel (e.g. WhatsApp E.164 like `15551234567`). */
+    senderId: string;
+    /** Channel-display name when known (push name on WhatsApp). */
+    senderName?: string;
+    /** The 8-char one-shot code the operator approves. */
+    code: string;
+    /** ISO timestamp of issuance. */
+    createdAt: string;
+    /** ISO timestamp of the last DM that re-prompted this code. */
+    lastSeenAt: string;
+}
+/** Decision returned by the policy evaluator for one inbound message. */
+export type AccessDecision = 
+/** Allow the message through; the manager runs an agent turn. */
+{
+    kind: "allow";
+    reason: string;
+}
+/** Silently drop the message; no reply, no turn. */
+ | {
+    kind: "block";
+    reason: string;
+}
+/** Block this message, but reply to the sender with an issued pairing code. */
+ | {
+    kind: "challenge";
+    code: string;
+    reason: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/agents/channels/access-control/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/access-control/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,sDAAsD;AACtD,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,UAAU,CAAC;AAErE,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC9B,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,yEAAyE;AACzE,MAAM,MAAM,cAAc;AACzB,iEAAiE;AAC/D;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACnC,oDAAoD;GAClD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACnC,+EAA+E;GAC7E;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/agents/channels/access-control/types.js

@@ -0,0 +1,20 @@
+/**
+ * Channel access control — types.
+ *
+ * Brigade's WhatsApp (and any future messaging channel) gates inbound messages
+ * BEFORE the LLM runs. Without this, anyone who knows the linked phone number
+ * can DM the agent and get full access — a B2B blocker.
+ *
+ * Policies (`channels.<id>.dmPolicy`):
+ *
+ *   - `pairing` (default): strangers get an 8-char pairing code in the reply
+ *     and must be approved out-of-band by the operator (`brigade pairing
+ *     approve <CODE>`), which adds them to the allow-from list. The operator's
+ *     own linked-self number is always allowed (self-chat).
+ *   - `allowlist`: only senders explicitly added via
+ *     `brigade channels allow add <id>` get through. No automatic challenge.
+ *   - `open`: anyone can DM (dangerous default for B2B — explicit opt-in).
+ *   - `disabled`: every DM is silently dropped (lock down).
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/agents/channels/access-control/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/agents/channels/access-control/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/agents/channels/active-manager.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Process-wide channel-manager singleton accessor.
+ *
+ * The gateway boots exactly ONE `ChannelManager` instance at startup
+ * (`server.ts` → `startChannels`) which owns every started adapter. Agent
+ * tools that need to reach those adapters mid-turn — chiefly `send_message`,
+ * but also future `react`, `poll`, `edit` actions — call
+ * `getActiveChannelManager()` to find them.
+ *
+ * Following the same pattern as `cron/active-service.ts` (singleton mounted
+ * at boot, accessor returns `null` when no gateway is running). Tools that
+ * find a null accessor refuse politely so unit tests + standalone CLI
+ * invocations get a clear error instead of a confusing exception.
+ *
+ * P1#9 (Wave H) — pinned via `resolveGlobalSingleton` so dual-loaded
+ * Brigade modules (test harness + runtime in one process; hot-reload in
+ * dev) share ONE slot. Without the pin, an agent tool importing a
+ * different copy of this module than the boot path would silently see
+ * `null` even after the gateway started.
+ */
+import type { ChannelManager } from "./manager.js";
+/**
+ * Mount the gateway's channel manager so process-wide tools can reach it.
+ * Called by `server.ts` immediately after `startChannels` resolves so a
+ * cron job firing during boot (rare but possible) can still dispatch.
+ * Tests pass `null` in afterEach to clear leakage between cases.
+ */
+export declare function setActiveChannelManager(manager: ChannelManager | null): void;
+/** Read the active channel manager. Returns `null` when none is mounted. */
+export declare function getActiveChannelManager(): ChannelManager | null;
+//# sourceMappingURL=active-manager.d.ts.map

package/dist/agents/channels/active-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-manager.d.ts","sourceRoot":"","sources":["../../../src/agents/channels/active-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAYnD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAE5E;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,IAAI,cAAc,GAAG,IAAI,CAE/D"}