@spinabot/brigade 0.1.2 → 1.0.0

package/dist/storage/config-cache.js

@@ -0,0 +1,58 @@
+// src/storage/config-cache.ts
+//
+// In-process config cache for convex mode. Pi SDK boot paths and the per-turn
+// loop read config SYNCHRONOUSLY (readConfigOrInit), which a network-backed
+// store cannot serve directly. In convex mode the boot sequence primes this
+// cache from `store.config.read()`; long-lived processes (the gateway) also
+// subscribe to the config live-query and re-prime on every server-side change.
+//
+// The cache holds the RAW form — `${VAR}` secret references intact, exactly
+// as the bytes sit in the brigadeConfig row. `readConfigOrInit`'s convex
+// branch clones it and resolves secrets per call, mirroring the disk path's
+// read-parse-resolve sequence byte-for-semantically.
+//
+// Filesystem mode never touches this module.
+let _raw;
+const _listeners = new Set();
+/** Install/replace the cached raw config. Deep-clones so later caller
+ *  mutations can't corrupt the cache. Notifies listeners AFTER the swap —
+ *  in filesystem mode the gateway hot-reloads agents off an fs.watch on
+ *  brigade.json, but convex-mode config writes never touch disk, so a
+ *  mid-session `manage_agent add` / org init left the gateway's
+ *  perAgentRuntime stale: 20 agents in config, `agents on the gateway:
+ *  main` only, `/agent <id>` refusing every new id until restart. This
+ *  notification is the convex-mode equivalent of that fs.watch — fired by
+ *  BOTH the in-process write path (io.ts) and the cross-process live
+ *  subscription (boot.ts enableConfigLiveRefresh). */
+export function primeConfigCache(cfg) {
+    _raw = structuredClone(cfg);
+    for (const cb of _listeners) {
+        try {
+            cb();
+        }
+        catch {
+            // A listener error must never poison the config write path.
+        }
+    }
+}
+/** Subscribe to cache re-primes (= every convex-mode config change, local or
+ *  remote). Returns the unsubscribe. Listeners should debounce themselves —
+ *  a burst of writes fires once per write. */
+export function onConfigCachePrimed(cb) {
+    _listeners.add(cb);
+    return () => _listeners.delete(cb);
+}
+/** The cached raw (secret-refs-intact) config, or undefined when boot has
+ *  not primed it. Callers MUST clone before mutating or resolving. */
+export function getCachedConfigRaw() {
+    return _raw;
+}
+export function isConfigCachePrimed() {
+    return _raw !== undefined;
+}
+/** Test-only. */
+export function __resetConfigCacheForTests() {
+    _raw = undefined;
+    _listeners.clear();
+}
+//# sourceMappingURL=config-cache.js.map

package/dist/storage/config-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-cache.js","sourceRoot":"","sources":["../../src/storage/config-cache.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,qDAAqD;AACrD,EAAE;AACF,6CAA6C;AAI7C,IAAI,IAA+B,CAAC;AACpC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAc,CAAC;AAEzC;;;;;;;;;sDASsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,GAAkB;IAClD,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,EAAE,EAAE,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACR,4DAA4D;QAC7D,CAAC;IACF,CAAC;AACF,CAAC;AAED;;8CAE8C;AAC9C,MAAM,UAAU,mBAAmB,CAAC,EAAc;IACjD,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnB,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,kBAAkB;IACjC,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,IAAI,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,0BAA0B;IACzC,IAAI,GAAG,SAAS,CAAC;IACjB,UAAU,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC"}

package/dist/storage/convex/auth-store.d.ts

@@ -0,0 +1,52 @@
+import type { ConvexHttpClient } from "convex/browser";
+import type { AuthProfile, AuthStore, Encrypted, ProfileStateSnapshot, RetryReason } from "../store.js";
+interface Deps {
+    client: ConvexHttpClient;
+    ownerId: string;
+}
+export declare class ConvexAuthStore implements AuthStore {
+    private readonly deps;
+    constructor(deps: Deps);
+    init(agentId: string): Promise<void>;
+    listProfiles(agentId: string): Promise<AuthProfile[]>;
+    getProfile(agentId: string, profileId: string): Promise<AuthProfile | null>;
+    upsertProfile(agentId: string, profile: Encrypted<AuthProfile>): Promise<string>;
+    deleteProfile(agentId: string, profileId: string): Promise<void>;
+    buildCredentialMap(agentId: string, _opts?: {
+        provider?: string;
+        modelId?: string;
+        cooldownState?: ProfileStateSnapshot;
+    }): Promise<{
+        credentials: Record<string, {
+            type: "api_key";
+            key: string;
+        }>;
+        selectedProfileId?: string;
+    }>;
+    getCachedCredentialSnapshot(agentId: string): {
+        credentials: Record<string, {
+            type: "api_key";
+            key: string;
+        }>;
+    } | undefined;
+    loadProfileState(agentId: string): Promise<ProfileStateSnapshot>;
+    recordSuccess(args: {
+        agentId: string;
+        profileId: string;
+        provider: string;
+    }): Promise<ProfileStateSnapshot>;
+    recordFailure(args: {
+        agentId: string;
+        profileId: string;
+        reason: RetryReason;
+        modelId?: string;
+    }): Promise<ProfileStateSnapshot>;
+    setExplicitOrder(agentId: string, provider: string, order: string[]): Promise<void>;
+    withProfileLock<T>(_agentId: string, fn: () => Promise<T>): Promise<T>;
+    readAuthFileBlob(agentId: string, kind: "auth-state" | "profile-state" | "models"): Promise<Record<string, unknown> | undefined>;
+    writeAuthFileBlob(agentId: string, kind: "auth-state" | "profile-state" | "models", payload: Record<string, unknown>): Promise<void>;
+    private _rowToProfile;
+    private _buildSnapshot;
+}
+export {};
+//# sourceMappingURL=auth-store.d.ts.map

package/dist/storage/convex/auth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.d.ts","sourceRoot":"","sources":["../../../src/storage/convex/auth-store.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAKvD,OAAO,KAAK,EACX,WAAW,EACX,SAAS,EACT,SAAS,EACT,oBAAoB,EACpB,WAAW,EACX,MAAM,aAAa,CAAC;AAErB,UAAU,IAAI;IACb,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CAChB;AAoCD,qBAAa,eAAgB,YAAW,SAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,IAAI;IAEjC,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpC,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAQrD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAS3E,aAAa,CAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS,CAAC,WAAW,CAAC,GAC7B,OAAO,CAAC,MAAM,CAAC;IAoDZ,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYhE,kBAAkB,CACvB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,oBAAoB,CAAA;KAAE,GACnF,OAAO,CAAC;QACV,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,SAAS,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IAMF,2BAA2B,CAC1B,OAAO,EAAE,MAAM,GACb;QAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,SAAS,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,GAAG,SAAS;IAK1E,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BhE,aAAa,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY3B,aAAa,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,WAAW,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkB3B,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBnF,eAAe,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAOtE,gBAAgB,CACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,GAAG,eAAe,GAAG,QAAQ,GAC7C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAUzC,iBAAiB,CACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,GAAG,eAAe,GAAG,QAAQ,EAC/C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC;IAahB,OAAO,CAAC,aAAa;YAsBP,cAAc;CA8B5B"}

package/dist/storage/convex/auth-store.js

@@ -0,0 +1,282 @@
+// src/storage/convex/auth-store.ts
+//
+// ConvexAuthStore — convex-mode adapter for authProfiles + profileState.
+//
+// Encryption is the load-bearing concern here. Each AuthProfile carries a
+// literal `key` / `token` / `access` / `refresh` value at the interface
+// boundary, but the schema columns are `keyEnc` / `tokenEnc` / etc — raw
+// bytes. The DEK wrap/unwrap is implemented in a follow-up PR that adds
+// the `brigadeKmsDekRegistry` table + libsodium seal/open helpers. PR16
+// SHIPS WITHOUT ENCRYPTION — values land in the byte columns unencrypted
+// (so the schema's typed contract is satisfied). The follow-up swaps the
+// bytes for ciphertext with no interface change.
+//
+// Sync `getCachedCredentialSnapshot` — Pi SDK's `AuthStorage.inMemory()`
+// expects a synchronous snapshot at gateway boot. Convex reads are async
+// RPC, so this method returns the snapshot from a process-local cache
+// that's hydrated by `init(agentId)`. If `init` hasn't run, returns
+// `undefined` and the caller must wait for `buildCredentialMap` instead.
+import { api } from "../../../convex/_generated/api.js";
+// AT-REST ENCRYPTION — when BRIGADE_ENCRYPTION_KEY is set, every value going
+// into a `*Enc` column gets AES-256-GCM sealed. Read path decrypts
+// transparently. When the key is absent, payloads pass through as plain
+// bytes (no behaviour change). See [encryption.ts](../encryption.ts).
+import { open, openJson, sealJson, sealString } from "../encryption.js";
+// AAD binds each secret to its column — a row copied into a different
+// column/table fails to decrypt even with the right key (GCM-native).
+function plaintextToBytes(value, field) {
+    if (value === undefined || value === "")
+        return undefined;
+    return sealString(value, field ? `authProfiles|${field}` : undefined);
+}
+function bytesToPlaintext(value, field) {
+    if (!value)
+        return undefined;
+    try {
+        return open(value, field ? `authProfiles|${field}` : undefined).toString("utf8");
+    }
+    catch {
+        // Pre-AAD rows (sealed before this hardening landed) open without
+        // the context — try once more so older data keeps working.
+        return open(value).toString("utf8");
+    }
+}
+/** Process-local cache for the sync getCachedCredentialSnapshot path. */
+const credentialCache = new Map();
+function cacheKey(ownerId, agentId) {
+    return `${ownerId}::${agentId}`;
+}
+export class ConvexAuthStore {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async init(agentId) {
+        // Hydrate the sync snapshot so Pi SDK's AuthStorage.inMemory() boot
+        // path can read it without an async RPC.
+        const snap = await this._buildSnapshot(agentId);
+        credentialCache.set(cacheKey(this.deps.ownerId, agentId), snap);
+    }
+    async listProfiles(agentId) {
+        const rows = (await this.deps.client.query(api.auth.listProfiles, {
+            ownerId: this.deps.ownerId,
+            agentId,
+        }));
+        return rows.map((row) => this._rowToProfile(row));
+    }
+    async getProfile(agentId, profileId) {
+        const row = (await this.deps.client.query(api.auth.getProfile, {
+            ownerId: this.deps.ownerId,
+            agentId,
+            profileId,
+        }));
+        return row ? this._rowToProfile(row) : null;
+    }
+    async upsertProfile(agentId, profile) {
+        const p = profile;
+        const provider = p.provider;
+        if (typeof provider !== "string" || provider.length === 0) {
+            throw new Error("ConvexAuthStore.upsertProfile: profile.provider is required");
+        }
+        const profileId = p.profileId ?? `${provider}:${p.alias ?? "default"}`;
+        await this.deps.client.mutation(api.auth.upsertProfile, {
+            ownerId: this.deps.ownerId,
+            agentId,
+            profileId,
+            provider,
+            ...(p.alias !== undefined ? { alias: p.alias } : {}),
+            type: p.type ?? "api_key",
+            ...(plaintextToBytes(p.key, "keyEnc") !== undefined
+                ? { keyEnc: plaintextToBytes(p.key, "keyEnc") }
+                : {}),
+            ...(p.keyRef !== undefined ? { keyRef: p.keyRef } : {}),
+            ...(plaintextToBytes(p.token, "tokenEnc") !== undefined
+                ? { tokenEnc: plaintextToBytes(p.token, "tokenEnc") }
+                : {}),
+            ...(p.tokenRef !== undefined ? { tokenRef: p.tokenRef } : {}),
+            ...(plaintextToBytes(p.access, "accessEnc") !== undefined
+                ? { accessEnc: plaintextToBytes(p.access, "accessEnc") }
+                : {}),
+            ...(plaintextToBytes(p.refresh, "refreshEnc") !== undefined
+                ? { refreshEnc: plaintextToBytes(p.refresh, "refreshEnc") }
+                : {}),
+            ...(p.expires !== undefined ? { expires: p.expires } : {}),
+            ...(p.metadata !== undefined ? { metadata: p.metadata } : {}),
+        });
+        // Refresh the sync cache so Pi sees the new credential immediately.
+        credentialCache.set(cacheKey(this.deps.ownerId, agentId), await this._buildSnapshot(agentId));
+        return profileId;
+    }
+    async deleteProfile(agentId, profileId) {
+        await this.deps.client.mutation(api.auth.deleteProfile, {
+            ownerId: this.deps.ownerId,
+            agentId,
+            profileId,
+        });
+        credentialCache.set(cacheKey(this.deps.ownerId, agentId), await this._buildSnapshot(agentId));
+    }
+    async buildCredentialMap(agentId, _opts) {
+        const credentials = await this._buildSnapshot(agentId);
+        credentialCache.set(cacheKey(this.deps.ownerId, agentId), credentials);
+        return { credentials };
+    }
+    getCachedCredentialSnapshot(agentId) {
+        const cached = credentialCache.get(cacheKey(this.deps.ownerId, agentId));
+        return cached ? { credentials: cached } : undefined;
+    }
+    async loadProfileState(agentId) {
+        const rows = (await this.deps.client.query(api.auth.loadState, {
+            ownerId: this.deps.ownerId,
+            agentId,
+        }));
+        // Reshape into the same `ProfileStateFile` shape filesystem mode
+        // returns — `{ version: 1, usageStats: Record<profileId, stats> }`.
+        const usageStats = {};
+        const order = {};
+        const lastGood = {};
+        for (const row of rows) {
+            const profileId = row.profileId;
+            usageStats[profileId] = {
+                ...(row.lastUsed !== undefined ? { lastUsed: row.lastUsed } : {}),
+                ...(row.cooldownUntil !== undefined ? { cooldownUntil: row.cooldownUntil } : {}),
+                ...(row.cooldownReason !== undefined ? { cooldownReason: row.cooldownReason } : {}),
+                ...(row.cooldownModel !== undefined ? { cooldownModel: row.cooldownModel } : {}),
+                ...(row.disabledUntil !== undefined ? { disabledUntil: row.disabledUntil } : {}),
+                ...(row.disabledReason !== undefined ? { disabledReason: row.disabledReason } : {}),
+                ...(row.errorCount !== undefined ? { errorCount: row.errorCount } : {}),
+                ...(row.failureCounts !== undefined ? { failureCounts: row.failureCounts } : {}),
+                ...(row.lastFailureAt !== undefined ? { lastFailureAt: row.lastFailureAt } : {}),
+            };
+            if (row.isLastGood) {
+                const provider = row.provider;
+                lastGood[provider] = profileId;
+            }
+        }
+        return { version: 1, usageStats, order, lastGood };
+    }
+    async recordSuccess(args) {
+        await this.deps.client.mutation(api.auth.upsertState, {
+            ownerId: this.deps.ownerId,
+            agentId: args.agentId,
+            profileId: args.profileId,
+            provider: args.provider,
+            lastUsed: Date.now(),
+            isLastGood: true,
+        });
+        return this.loadProfileState(args.agentId);
+    }
+    async recordFailure(args) {
+        // Convex-mode failure recording — PR16 is a thin wrapper. Cooldown
+        // ladder calculations + per-reason tier mapping land in the
+        // follow-up that ports `markProfileFailure` (the heavy filesystem
+        // logic) into a Convex-side helper.
+        await this.deps.client.mutation(api.auth.upsertState, {
+            ownerId: this.deps.ownerId,
+            agentId: args.agentId,
+            profileId: args.profileId,
+            provider: "unknown",
+            lastFailureAt: Date.now(),
+            cooldownReason: args.reason,
+            ...(args.modelId !== undefined ? { cooldownModel: args.modelId } : {}),
+            isLastGood: false,
+        });
+        return this.loadProfileState(args.agentId);
+    }
+    async setExplicitOrder(agentId, provider, order) {
+        // The failover order array lives VERBATIM inside the auth-state blob —
+        // read-modify-write it there. (The per-row `explicitOrder` rank column
+        // could not represent a per-provider array; this closes that gap.)
+        const current = (await this.readAuthFileBlob(agentId, "auth-state")) ?? {
+            version: 1,
+            order: {},
+            lastGood: {},
+            usageStats: {},
+        };
+        const orderMap = current.order ?? {};
+        orderMap[provider] = [...order];
+        current.order = orderMap;
+        await this.writeAuthFileBlob(agentId, "auth-state", current);
+    }
+    async withProfileLock(_agentId, fn) {
+        // Convex transactions are linearised by the backend — no in-process
+        // lock needed. Filesystem mode uses an explicit FIFO mutex; convex
+        // mode achieves the same property via the mutation's OCC.
+        return fn();
+    }
+    async readAuthFileBlob(agentId, kind) {
+        const row = (await this.deps.client.query(api.auth.readAuthFile, {
+            ownerId: this.deps.ownerId,
+            agentId,
+            kind,
+        }));
+        if (!row?.payload)
+            return undefined;
+        return openJson(row.payload);
+    }
+    async writeAuthFileBlob(agentId, kind, payload) {
+        await this.deps.client.mutation(api.auth.writeAuthFile, {
+            ownerId: this.deps.ownerId,
+            agentId,
+            kind,
+            payload: sealJson(payload),
+        });
+    }
+    // =================================================================
+    // Internals
+    // =================================================================
+    _rowToProfile(row) {
+        const out = {
+            profileId: row.profileId,
+            provider: row.provider,
+            type: row.type,
+        };
+        if (row.alias !== undefined)
+            out.alias = row.alias;
+        const keyPlain = bytesToPlaintext(row.keyEnc, "keyEnc");
+        if (keyPlain !== undefined)
+            out.key = keyPlain;
+        if (row.keyRef !== undefined)
+            out.keyRef = row.keyRef;
+        const tokenPlain = bytesToPlaintext(row.tokenEnc, "tokenEnc");
+        if (tokenPlain !== undefined)
+            out.token = tokenPlain;
+        if (row.tokenRef !== undefined)
+            out.tokenRef = row.tokenRef;
+        const accessPlain = bytesToPlaintext(row.accessEnc, "accessEnc");
+        if (accessPlain !== undefined)
+            out.access = accessPlain;
+        const refreshPlain = bytesToPlaintext(row.refreshEnc, "refreshEnc");
+        if (refreshPlain !== undefined)
+            out.refresh = refreshPlain;
+        if (row.expires !== undefined)
+            out.expires = row.expires;
+        if (row.metadata !== undefined)
+            out.metadata = row.metadata;
+        return out;
+    }
+    async _buildSnapshot(agentId) {
+        const profiles = await this.listProfiles(agentId);
+        const out = {};
+        for (const profile of profiles) {
+            const p = profile;
+            if (p.type !== "api_key")
+                continue;
+            if (typeof p.key === "string" && p.key.length > 0) {
+                if (out[p.provider] === undefined) {
+                    out[p.provider] = { type: "api_key", key: p.key };
+                }
+                continue;
+            }
+            if (p.keyRef?.source === "env" && p.keyRef.id) {
+                const envValue = process.env[p.keyRef.id];
+                if (envValue) {
+                    if (out[p.provider] === undefined) {
+                        out[p.provider] = { type: "api_key", key: envValue };
+                    }
+                }
+            }
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=auth-store.js.map

package/dist/storage/convex/auth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../../../src/storage/convex/auth-store.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,yEAAyE;AACzE,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,iDAAiD;AACjD,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,sEAAsE;AACtE,oEAAoE;AACpE,yEAAyE;AAIzE,OAAO,EAAE,GAAG,EAAE,MAAM,mCAAmC,CAAC;AAgBxD,6EAA6E;AAC7E,mEAAmE;AACnE,wEAAwE;AACxE,sEAAsE;AACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAExE,sEAAsE;AACtE,sEAAsE;AACtE,SAAS,gBAAgB,CAAC,KAAyB,EAAE,KAAc;IAClE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,gBAAgB,CACxB,KAAqC,EACrC,KAAc;IAEd,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACR,kEAAkE;QAClE,2DAA2D;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;AACF,CAAC;AAED,yEAAyE;AACzE,MAAM,eAAe,GAAG,IAAI,GAAG,EAA4D,CAAC;AAE5F,SAAS,QAAQ,CAAC,OAAe,EAAE,OAAe;IACjD,OAAO,GAAG,OAAO,KAAK,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,OAAO,eAAe;IACE;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,IAAI,CAAC,OAAe;QACzB,oEAAoE;QACpE,yCAAyC;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAChD,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;YACjE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO;SACP,CAAC,CAAmC,CAAC;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,SAAiB;QAClD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE;YAC9D,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO;YACP,SAAS;SACT,CAAC,CAAmC,CAAC;QACtC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,OAAe,EACf,OAA+B;QAE/B,MAAM,CAAC,GAAG,OAaT,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC5B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,GAAG,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;YACvD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO;YACP,SAAS;YACT,QAAQ;YACR,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS;YACzB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,SAAS;gBACtD,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,SAAS;gBACxD,CAAC,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,SAAS;gBAC1D,CAAC,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;QACH,oEAAoE;QACpE,eAAe,CAAC,GAAG,CAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EACpC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAClC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,SAAiB;QACrD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;YACvD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO;YACP,SAAS;SACT,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,CAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EACpC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAClC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CACvB,OAAe,EACf,KAAqF;QAKrF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACvD,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;QACvE,OAAO,EAAE,WAAW,EAAE,CAAC;IACxB,CAAC;IAED,2BAA2B,CAC1B,OAAe;QAEf,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACrC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE;YAC9D,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO;SACP,CAAC,CAAmC,CAAC;QACtC,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,UAAU,GAA4C,EAAE,CAAC;QAC/D,MAAM,KAAK,GAA6B,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,GAAG,CAAC,SAAmB,CAAC;YAC1C,UAAU,CAAC,SAAS,CAAC,GAAG;gBACvB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC;YACF,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAkB,CAAC;gBACxC,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;YAChC,CAAC;QACF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAqC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAInB;QACA,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE;YACrD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,UAAU,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAKnB;QACA,mEAAmE;QACnE,4DAA4D;QAC5D,kEAAkE;QAClE,oCAAoC;QACpC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE;YACrD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,SAAS;YACnB,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,cAAc,EAAE,IAAI,CAAC,MAAM;YAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,UAAU,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,QAAgB,EAAE,KAAe;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,IAAI;YACvE,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;SACd,CAAC;QACF,MAAM,QAAQ,GAAI,OAAO,CAAC,KAA8C,IAAI,EAAE,CAAC;QAC/E,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;QACzB,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,eAAe,CAAI,QAAgB,EAAE,EAAoB;QAC9D,oEAAoE;QACpE,mEAAmE;QACnE,0DAA0D;QAC1D,OAAO,EAAE,EAAE,CAAC;IACb,CAAC;IAED,KAAK,CAAC,gBAAgB,CACrB,OAAe,EACf,IAA+C;QAE/C,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;YAChE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO;YACP,IAAI;SACJ,CAAC,CAAqC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,OAAO;YAAE,OAAO,SAAS,CAAC;QACpC,OAAO,QAAQ,CAA0B,GAAG,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,OAAe,EACf,IAA+C,EAC/C,OAAgC;QAEhC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;YACvD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,OAAO;YACP,IAAI;YACJ,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;SAC1B,CAAC,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,YAAY;IACZ,oEAAoE;IAE5D,aAAa,CAAC,GAA4B;QACjD,MAAM,GAAG,GAA4B;YACpC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;SACd,CAAC;QACF,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAiC,EAAE,QAAQ,CAAC,CAAC;QACnF,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACtD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAmC,EAAE,UAAU,CAAC,CAAC;QACzF,IAAI,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC;QACrD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC5D,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAoC,EAAE,WAAW,CAAC,CAAC;QAC5F,IAAI,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC;QACxD,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAqC,EAAE,YAAY,CAAC,CAAC;QAC/F,IAAI,YAAY,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,YAAY,CAAC;QAC3D,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACzD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC5D,OAAO,GAA6B,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,cAAc,CAC3B,OAAe;QAEf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAqD,EAAE,CAAC;QACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,OAKT,CAAC;YACF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACnC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,IAAI,GAAG,CAAC,CAAC,CAAC,QAAS,CAAC,KAAK,SAAS,EAAE,CAAC;oBACpC,GAAG,CAAC,CAAC,CAAC,QAAS,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;gBACpD,CAAC;gBACD,SAAS;YACV,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1C,IAAI,QAAQ,EAAE,CAAC;oBACd,IAAI,GAAG,CAAC,CAAC,CAAC,QAAS,CAAC,KAAK,SAAS,EAAE,CAAC;wBACpC,GAAG,CAAC,CAAC,CAAC,QAAS,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;oBACvD,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;CACD"}

package/dist/storage/convex/blob-store.d.ts

@@ -0,0 +1,20 @@
+import type { ConvexHttpClient } from "convex/browser";
+import type { BlobStore } from "../store.js";
+interface Deps {
+    client: ConvexHttpClient;
+    ownerId: string;
+}
+export declare class ConvexBlobStore implements BlobStore {
+    private readonly deps;
+    constructor(deps: Deps);
+    put(bytes: Uint8Array, opts?: {
+        contentType?: string;
+    }): Promise<{
+        sha256: string;
+        url: string;
+    }>;
+    get(sha256: string): Promise<Uint8Array | null>;
+    delete(sha256: string): Promise<void>;
+}
+export {};
+//# sourceMappingURL=blob-store.d.ts.map

package/dist/storage/convex/blob-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store.d.ts","sourceRoot":"","sources":["../../../src/storage/convex/blob-store.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,UAAU,IAAI;IAAG,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE5D,qBAAa,eAAgB,YAAW,SAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,IAAI;IAEjC,GAAG,CACR,KAAK,EAAE,UAAU,EACjB,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IA4CrC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAc/C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3C"}

package/dist/storage/convex/blob-store.js

@@ -0,0 +1,74 @@
+// src/storage/convex/blob-store.ts
+//
+// Convex File Storage integration. Upload flow:
+//   1. Call `generateUploadUrl(sha256)` mutation → returns a one-time URL
+//      (or `existed: true` if the sha is already stored).
+//   2. HTTP PUT the bytes to that URL — Convex serves the byte channel.
+//   3. Call `recordUpload(sha256, storageId, ...)` to insert/refcount the
+//      brigadeBlobs metadata row.
+//
+// Download is `storage.getUrl(storageId)` via the `getDownloadUrl` query;
+// callers HTTP GET the resulting short-lived URL.
+import { createHash } from "node:crypto";
+import { api } from "../../../convex/_generated/api.js";
+export class ConvexBlobStore {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async put(bytes, opts) {
+        const sha256 = createHash("sha256").update(bytes).digest("hex");
+        const uploadInfo = (await this.deps.client.mutation(api.blobs.generateUploadUrl, {
+            ownerId: this.deps.ownerId,
+            sha256,
+        }));
+        if (uploadInfo.existed && uploadInfo.storageId) {
+            // Bump refcount on the existing row.
+            await this.deps.client.mutation(api.blobs.recordUpload, {
+                ownerId: this.deps.ownerId,
+                sha256,
+                storageId: uploadInfo.storageId,
+                ...(opts?.contentType !== undefined ? { contentType: opts.contentType } : {}),
+                size: bytes.byteLength,
+            });
+            return { sha256, url: `convex-file:${sha256}` };
+        }
+        // Upload the bytes to the signed URL.
+        const buf = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+        const res = await fetch(uploadInfo.uploadUrl, {
+            method: "POST",
+            headers: { "Content-Type": opts?.contentType ?? "application/octet-stream" },
+            body: buf,
+        });
+        if (!res.ok) {
+            throw new Error(`ConvexBlobStore.put: upload failed (HTTP ${res.status} ${res.statusText})`);
+        }
+        const { storageId } = (await res.json());
+        // Record the metadata row.
+        await this.deps.client.mutation(api.blobs.recordUpload, {
+            ownerId: this.deps.ownerId,
+            sha256,
+            storageId: storageId,
+            ...(opts?.contentType !== undefined ? { contentType: opts.contentType } : {}),
+            size: bytes.byteLength,
+        });
+        return { sha256, url: `convex-file:${sha256}` };
+    }
+    async get(sha256) {
+        const url = (await this.deps.client.query(api.blobs.getDownloadUrl, { sha256 }));
+        if (!url)
+            return null;
+        const res = await fetch(url);
+        if (!res.ok) {
+            if (res.status === 404)
+                return null;
+            throw new Error(`ConvexBlobStore.get: HTTP ${res.status} ${res.statusText}`);
+        }
+        const ab = await res.arrayBuffer();
+        return new Uint8Array(ab);
+    }
+    async delete(sha256) {
+        await this.deps.client.mutation(api.blobs.remove, { sha256 });
+    }
+}
+//# sourceMappingURL=blob-store.js.map

package/dist/storage/convex/blob-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store.js","sourceRoot":"","sources":["../../../src/storage/convex/blob-store.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,gDAAgD;AAChD,0EAA0E;AAC1E,0DAA0D;AAC1D,wEAAwE;AACxE,0EAA0E;AAC1E,kCAAkC;AAClC,EAAE;AACF,0EAA0E;AAC1E,kDAAkD;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,GAAG,EAAE,MAAM,mCAAmC,CAAC;AAMxD,MAAM,OAAO,eAAe;IACE;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,GAAG,CACR,KAAiB,EACjB,IAA+B;QAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE;YAChF,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,MAAM;SACN,CAAC,CAAsE,CAAC;QAEzE,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YAChD,qCAAqC;YACrC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE;gBACvD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;gBAC1B,MAAM;gBACN,SAAS,EAAE,UAAU,CAAC,SAAkB;gBACxC,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,IAAI,EAAE,KAAK,CAAC,UAAU;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,MAAM,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,sCAAsC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB,CAAC;QACrG,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,IAAI,0BAA0B,EAAE;YAC5E,IAAI,EAAE,GAAG;SACT,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACd,4CAA4C,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,GAAG,CAC3E,CAAC;QACH,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;QAElE,2BAA2B;QAC3B,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE;YACvD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAC1B,MAAM;YACN,SAAS,EAAE,SAAkB;YAC7B,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,IAAI,EAAE,KAAK,CAAC,UAAU;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,MAAM,EAAE,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAc;QACvB,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAExE,CAAC;QACR,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,CAAC;CACD"}

package/dist/storage/convex/channel-store.d.ts

@@ -0,0 +1,112 @@
+import type { ConvexHttpClient } from "convex/browser";
+import type { ChannelStore, PairingRequest, WhatsAppAuthHandle } from "../store.js";
+interface Deps {
+    client: ConvexHttpClient;
+    ownerId: string;
+    stateDir: string;
+}
+export declare class ConvexChannelStore implements ChannelStore {
+    private readonly deps;
+    constructor(deps: Deps);
+    listAllowedSenders(args: {
+        channelId: string;
+        accountId?: string | null;
+        group?: boolean;
+    }): Promise<string[]>;
+    addAllowedSender(args: {
+        channelId: string;
+        accountId?: string | null;
+        senderId: string;
+        group?: boolean;
+    }): Promise<boolean>;
+    removeAllowedSender(args: {
+        channelId: string;
+        accountId?: string | null;
+        senderId: string;
+        group?: boolean;
+    }): Promise<boolean>;
+    listAllAccessRows(): Promise<Array<{
+        channelId: string;
+        accountId: string;
+        kind: "allow-from" | "group-allow-from" | "pairing";
+        senderId: string;
+        senderName?: string;
+        code?: string;
+        createdAt: string;
+        lastSeenAt: string;
+    }>>;
+    reconcileAccessRows(args: {
+        channelId: string;
+        accountId?: string | null;
+        kind: "allow-from" | "group-allow-from" | "pairing";
+        rows: Array<{
+            senderId: string;
+            senderName?: string;
+            code?: string;
+            createdAt: string;
+            lastSeenAt: string;
+        }>;
+    }): Promise<void>;
+    listPendingPairings(_args: {
+        channelId: string;
+        accountId?: string | null;
+    }): Promise<PairingRequest[]>;
+    upsertPairingRequest(args: {
+        channelId: string;
+        accountId?: string | null;
+        senderId: string;
+        senderName?: string;
+    }): Promise<{
+        code: string;
+        isNew: boolean;
+    }>;
+    approvePairing(args: {
+        channelId: string;
+        accountId?: string | null;
+        code: string;
+    }): Promise<PairingRequest | null>;
+    revokePairing(args: {
+        channelId: string;
+        accountId?: string | null;
+        code: string;
+    }): Promise<boolean>;
+    openWhatsAppAuthDir(args: {
+        accountId: string;
+    }): Promise<WhatsAppAuthHandle>;
+    readLidReverseMapping(_args: {
+        accountId: string;
+        lidDigits: string;
+    }): Promise<string | null>;
+    putInboundMedia(args: {
+        channelId: string;
+        accountId?: string;
+        messageId: string;
+        index: number;
+        mimeType: string;
+        bytes: Buffer;
+    }): Promise<{
+        ref: string;
+        size: number;
+    }>;
+    /** ~900 KB is comfortably under the mutation arg cap with sealing
+     *  overhead; bigger values (LTHashState) spill to File Storage. */
+    private static readonly AUTH_INLINE_CAP;
+    loadWhatsAppAuth(accountId: string): Promise<{
+        creds: string | null;
+        keys: Array<{
+            keyType: string;
+            keyId: string;
+            valueJson: string;
+        }>;
+    }>;
+    writeWhatsAppCreds(accountId: string, credsJson: string): Promise<void>;
+    writeWhatsAppKeys(accountId: string, entries: Array<{
+        keyType: string;
+        keyId: string;
+        valueJson: string | null;
+    }>): Promise<void>;
+    clearWhatsAppAuth(accountId: string): Promise<void>;
+    eraseAccount(channelId: string, accountId: string): Promise<void>;
+}
+export {};
+//# sourceMappingURL=channel-store.d.ts.map

package/dist/storage/convex/channel-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-store.d.ts","sourceRoot":"","sources":["../../../src/storage/convex/channel-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAKvD,OAAO,KAAK,EACX,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,MAAM,aAAa,CAAC;AAErB,UAAU,IAAI;IAAG,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAY9E,qBAAa,kBAAmB,YAAW,YAAY;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,IAAI;IAEjC,kBAAkB,CAAC,IAAI,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAmBf,gBAAgB,CAAC,IAAI,EAAE;QAC5B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAkBd,mBAAmB,CAAC,IAAI,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgBd,iBAAiB,IAAI,OAAO,CACjC,KAAK,CAAC;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,YAAY,GAAG,kBAAkB,GAAG,SAAS,CAAC;QACpD,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACnB,CAAC,CACF;IAgBK,mBAAmB,CAAC,IAAI,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,EAAE,YAAY,GAAG,kBAAkB,GAAG,SAAS,CAAC;QACpD,IAAI,EAAE,KAAK,CAAC;YACX,QAAQ,EAAE,MAAM,CAAC;YACjB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,SAAS,EAAE,MAAM,CAAC;YAClB,UAAU,EAAE,MAAM,CAAC;SACnB,CAAC,CAAC;KACH,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBX,mBAAmB,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAgBvG,oBAAoB,CAAC,IAAI,EAAE;QAChC,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAUvC,cAAc,CAAC,IAAI,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAS5B,aAAa,CAAC,IAAI,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CAAC,OAAO,CAAC;IASd,mBAAmB,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAa7E,qBAAqB,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI9F,eAAe,CAAC,IAAI,EAAE;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAwC1C;uEACmE;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAc;IAE/C,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAClD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACnE,CAAC;IAiCI,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvE,iBAAiB,CACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,GAC1E,OAAO,CAAC,IAAI,CAAC;IAuCV,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnD,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAOvE"}