@spinabot/brigade 0.1.2 → 1.0.1

package/dist/auth/profile-cooldown.js

@@ -0,0 +1,466 @@
+// Auth-profile cooldown + ordering.
+//
+// Tracks per-profile failure state in `<authDir>/profile-state.json` so that:
+//
+//   • A profile that hit a transient failure (rate_limit / overloaded /
+//     timeout) goes on cooldown for an escalating duration (30s → 1m → 5m)
+//     based on its recent error count, and is skipped during selection
+//     until the cooldown expires.
+//
+//   • A profile that hit a permanent failure (billing / auth_permanent) goes
+//     on a longer "disabled" backoff (10m base for auth_permanent, 5h base
+//     for billing, doubling per repeated failure, capped at 60m / 24h).
+//
+//   • Profile selection prefers most-recently-successful (`lastUsed`-asc
+//     round-robin) and pushes cooled / disabled profiles to the bottom of
+//     the order, sorted by soonest-expiry first (so a probe at expiry has
+//     a fresh slot).
+//
+//   • Error counts decay: if a profile hasn't failed in 24h, the next failure
+//     starts the count fresh rather than escalating off the old number. A
+//     profile with one failure last week shouldn't be treated like one with
+//     ten failures in the last hour.
+//
+// The state file is JSON, atomically written via PID-suffixed tmp + rename.
+// Failure to read or write the state file is a soft failure — profile
+// selection falls back to "pick first matching" (current Brigade behaviour)
+// rather than blocking the run on observability state.
+import fs from "node:fs";
+import path from "node:path";
+import { ensureDir, resolveAuthDir } from "../config/paths.js";
+import { createSubsystemLogger } from "../logging/subsystem-logger.js";
+import { resolveGlobalSingleton } from "../shared/global-singleton.js";
+import { tryGetRuntimeContext } from "../storage/runtime-context.js";
+const log = createSubsystemLogger("auth/cooldown");
+// ─────────────────────────────────────────────────────────────────────────────
+// Constants. The established defaults are configurable here so
+// brigade.json can override later without an API change.
+// ─────────────────────────────────────────────────────────────────────────────
+const COOLDOWN_MS_TIER_1 = 30_000; // first transient failure
+const COOLDOWN_MS_TIER_2 = 60_000; // second
+const COOLDOWN_MS_TIER_MAX = 5 * 60_000; // third+
+const DISABLED_BACKOFF_AUTH_BASE_MS = 10 * 60_000;
+const DISABLED_BACKOFF_AUTH_MAX_MS = 60 * 60_000;
+const DISABLED_BACKOFF_BILLING_BASE_MS = 5 * 60 * 60_000;
+const DISABLED_BACKOFF_BILLING_MAX_MS = 24 * 60 * 60_000;
+const FAILURE_WINDOW_MS = 24 * 60 * 60_000;
+const TRANSIENT_REASONS = new Set([
+    "rate_limit",
+    "overloaded",
+    "timeout",
+    "unknown",
+]);
+const DISABLED_REASONS = new Set([
+    "billing",
+    "auth_permanent",
+]);
+// Per-key jitter (±10% of the base, uniform) so N profiles that hit a
+// quota cap in the same second don't all expire their cooldowns at exactly
+// the same future second and stampede the provider again. Without this, 5
+// keys behind a single quota retry-storm on every cooldown boundary.
+const COOLDOWN_JITTER_RATIO = 0.20; // 20% range = ±10% from base
+export function calculateCooldownMs(errorCount) {
+    const n = Math.max(1, errorCount);
+    let base;
+    if (n <= 1)
+        base = COOLDOWN_MS_TIER_1;
+    else if (n <= 2)
+        base = COOLDOWN_MS_TIER_2;
+    else
+        base = COOLDOWN_MS_TIER_MAX;
+    // (random - 0.5) * 0.20 → uniform on [-0.10, +0.10) of base. Floor the
+    // multiplied milliseconds so we don't return fractional ms.
+    const jitter = Math.floor((Math.random() - 0.5) * base * COOLDOWN_JITTER_RATIO);
+    return base + jitter;
+}
+export function calculateDisabledMs(reason, errorCount) {
+    const base = reason === "billing" ? DISABLED_BACKOFF_BILLING_BASE_MS : DISABLED_BACKOFF_AUTH_BASE_MS;
+    const max = reason === "billing" ? DISABLED_BACKOFF_BILLING_MAX_MS : DISABLED_BACKOFF_AUTH_MAX_MS;
+    const exp = Math.min(15, Math.max(0, errorCount - 1));
+    return Math.min(max, base * 2 ** exp);
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// State file IO. Soft failures everywhere — we never want a corrupted state
+// file to block a real `brigade agent` run.
+// ─────────────────────────────────────────────────────────────────────────────
+// Per-agentId FIFO lock chain. Protects the read-modify-write sequence that
+// `markProfileFailure` / `markProfileSuccess` perform — two concurrent
+// `brigade agent` turns for the same agent would otherwise interleave their
+// in-memory snapshots and clobber each other's mark on save. Same shape as
+// `withCronStoreLock`: a per-key promise chain that each holder awaits before
+// running. Process-local — across processes, the file's PID-tagged atomic
+// rename keeps the rename itself safe but cannot prevent the inner snapshot
+// drift; the wave-c counterpart is a future file lock if we ever see
+// gateway+cron contend on the same agent.
+/** Pinned via global-singleton so hot-reload / dual-build keep one chain per agentId. */
+const COOLDOWN_LOCKS_KEY = Symbol.for("brigade.profileCooldown.locks");
+const cooldownLocks = resolveGlobalSingleton(COOLDOWN_LOCKS_KEY, () => new Map());
+/**
+ * Run `work` under the per-agent cooldown lock. The lock is process-local
+ * and FIFO; callers within the same process serialise per agentId. Returns
+ * the work's result. A previous holder's rejection does not block us — the
+ * chain swallows the error so the next holder runs.
+ */
+export function withProfileCooldownLock(agentId, work) {
+    const key = agentId || "main";
+    const previous = (cooldownLocks.get(key) ?? Promise.resolve());
+    const next = previous.catch(() => undefined).then(() => work());
+    cooldownLocks.set(key, next.catch(() => undefined));
+    return next;
+}
+/** Test-only — clear every per-agent cooldown lock chain. */
+export function clearProfileCooldownLocksForTests() {
+    cooldownLocks.clear();
+}
+export function resolveProfileStatePath(agentId) {
+    return path.join(resolveAuthDir(agentId), "profile-state.json");
+}
+// Convex-mode cache + flush for profile-state.json. The whole file rides
+// the authFiles blob table VERBATIM (sealed) so cooldown stats, failure
+// histograms, and the failover order array round-trip without semantic
+// drift. The per-agent FIFO lock above still serialises read-modify-write
+// in-process; Convex linearises across processes.
+const convexProfileStateCache = new Map();
+let profileStateFlushChain = Promise.resolve();
+/** Convex-mode boot hydration — install an agent's profile-state blob. */
+export function primeProfileStateCache(agentId, state) {
+    convexProfileStateCache.set(agentId, structuredClone(state));
+}
+/** Resolves when every profile-state write enqueued so far reached the
+ *  backend (convex mode). */
+export function awaitProfileStateFlush() {
+    return profileStateFlushChain;
+}
+/** Test-only. */
+export function __resetProfileStateCacheForTests() {
+    convexProfileStateCache.clear();
+    profileStateFlushChain = Promise.resolve();
+}
+export function loadProfileState(agentId) {
+    const rctx = tryGetRuntimeContext();
+    if (rctx?.mode === "convex") {
+        const cached = convexProfileStateCache.get(agentId);
+        if (cached)
+            return structuredClone(cached);
+        const empty = { version: 1, usageStats: {} };
+        convexProfileStateCache.set(agentId, empty);
+        return structuredClone(empty);
+    }
+    const p = resolveProfileStatePath(agentId);
+    if (!fs.existsSync(p))
+        return { version: 1, usageStats: {} };
+    try {
+        const raw = fs.readFileSync(p, "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === "object" && parsed.version === 1) {
+            return { ...parsed, version: 1 };
+        }
+    }
+    catch (err) {
+        log.warn("failed to load profile state; falling back to empty", {
+            path: p,
+            error: err.message,
+        });
+    }
+    return { version: 1, usageStats: {} };
+}
+export function saveProfileState(agentId, state) {
+    const rctx = tryGetRuntimeContext();
+    if (rctx?.mode === "convex") {
+        convexProfileStateCache.set(agentId, structuredClone(state));
+        const store = rctx.store;
+        const frozen = structuredClone(state);
+        profileStateFlushChain = profileStateFlushChain
+            .then(() => store.auth.writeAuthFileBlob(agentId, "profile-state", frozen))
+            .catch((err) => {
+            log.warn("profile state write to convex failed", {
+                agentId,
+                error: err.message,
+            });
+        });
+        return;
+    }
+    const p = resolveProfileStatePath(agentId);
+    ensureDir(path.dirname(p));
+    const tmp = `${p}.tmp-${process.pid}-${Date.now().toString(36)}`;
+    try {
+        fs.writeFileSync(tmp, JSON.stringify(state, null, 2), "utf8");
+        fs.renameSync(tmp, p);
+    }
+    catch (err) {
+        try {
+            fs.rmSync(tmp, { force: true });
+        }
+        catch {
+            // best-effort
+        }
+        log.warn("failed to save profile state", { path: p, error: err.message });
+    }
+}
+export function getCooldownStatus(stats, options = {}) {
+    const now = options.now ?? Date.now();
+    if (!stats)
+        return { cooled: false, disabled: false };
+    const status = { cooled: false, disabled: false };
+    if (typeof stats.disabledUntil === "number" && stats.disabledUntil > now) {
+        status.disabled = true;
+        status.disabledUntil = stats.disabledUntil;
+        status.reason = stats.disabledReason;
+    }
+    if (typeof stats.cooldownUntil === "number" && stats.cooldownUntil > now) {
+        // Model-scoped rate limit only counts when we're asking about that model.
+        if (stats.cooldownModel &&
+            options.forModel &&
+            stats.cooldownModel !== options.forModel) {
+            // Different model — cooldown doesn't apply.
+        }
+        else {
+            status.cooled = true;
+            status.cooldownUntil = stats.cooldownUntil;
+            status.reason = stats.cooldownReason;
+        }
+    }
+    return status;
+}
+export function isProfileEligible(state, profileId, options = {}) {
+    const stats = state.usageStats?.[profileId];
+    const status = getCooldownStatus(stats, options);
+    return !status.cooled && !status.disabled;
+}
+// Sort profileIds: eligible first (lastUsed asc — fairer round-robin), then
+// cooled/disabled appended in soonest-expiry-first order so a probe can
+// hit a profile right at its cooldown boundary.
+export function orderProfilesForSelection(args) {
+    const now = args.now ?? Date.now();
+    const usageStats = args.state.usageStats ?? {};
+    const explicitOrder = args.state.order?.[args.provider];
+    const seen = new Set();
+    const eligible = [];
+    const cooled = [];
+    // Honour preferredProfile by floating it to the head of its bucket.
+    const orderedSource = [];
+    if (args.preferredProfile && args.profileIds.includes(args.preferredProfile)) {
+        orderedSource.push(args.preferredProfile);
+    }
+    if (explicitOrder) {
+        for (const id of explicitOrder) {
+            if (args.profileIds.includes(id))
+                orderedSource.push(id);
+        }
+    }
+    for (const id of args.profileIds)
+        orderedSource.push(id);
+    for (const id of orderedSource) {
+        if (seen.has(id))
+            continue;
+        seen.add(id);
+        if (isProfileEligible(args.state, id, { now, forModel: args.forModel })) {
+            eligible.push(id);
+        }
+        else {
+            cooled.push(id);
+        }
+    }
+    // Round-robin: eligible profiles sorted by lastUsed asc (oldest first) so
+    // we don't keep hammering the same profile turn after turn. The
+    // preferredProfile, when supplied AND eligible, is pulled to the head
+    // *after* the sort so the caller's preference wins over rotation.
+    eligible.sort((a, b) => {
+        const aUsed = usageStats[a]?.lastUsed ?? 0;
+        const bUsed = usageStats[b]?.lastUsed ?? 0;
+        return aUsed - bUsed;
+    });
+    if (args.preferredProfile) {
+        const idx = eligible.indexOf(args.preferredProfile);
+        if (idx > 0) {
+            eligible.splice(idx, 1);
+            eligible.unshift(args.preferredProfile);
+        }
+    }
+    // Cooled: soonest-expiry first.
+    cooled.sort((a, b) => {
+        const ax = expiryOf(usageStats[a], now);
+        const bx = expiryOf(usageStats[b], now);
+        return ax - bx;
+    });
+    return [...eligible, ...cooled];
+}
+function expiryOf(stats, now) {
+    if (!stats)
+        return now;
+    const c = typeof stats.cooldownUntil === "number" && stats.cooldownUntil > now ? stats.cooldownUntil : Infinity;
+    const d = typeof stats.disabledUntil === "number" && stats.disabledUntil > now ? stats.disabledUntil : Infinity;
+    const e = Math.min(c, d);
+    return e === Infinity ? now : e;
+}
+export function markProfileSuccess(args) {
+    const next = cloneState(args.state);
+    const stats = readStats(next, args.profileId);
+    stats.lastUsed = Date.now();
+    // Clear ALL failure state on success. The profile is healthy.
+    delete stats.cooldownUntil;
+    delete stats.cooldownReason;
+    delete stats.cooldownModel;
+    delete stats.disabledUntil;
+    delete stats.disabledReason;
+    delete stats.errorCount;
+    delete stats.failureCounts;
+    delete stats.lastFailureAt;
+    writeStats(next, args.profileId, stats);
+    next.lastGood = { ...(next.lastGood ?? {}), [args.provider]: args.profileId };
+    if (args.save !== false)
+        saveProfileState(args.agentId, next);
+    return next;
+}
+export function markProfileFailure(args) {
+    const next = cloneState(args.state);
+    const stats = readStats(next, args.profileId);
+    const now = Date.now();
+    // Decay error count if the last failure was outside the rolling window.
+    const lastFailureAt = stats.lastFailureAt ?? 0;
+    const decay = lastFailureAt > 0 && now - lastFailureAt > FAILURE_WINDOW_MS;
+    const baseErrorCount = decay ? 0 : stats.errorCount ?? 0;
+    const nextErrorCount = baseErrorCount + 1;
+    stats.errorCount = nextErrorCount;
+    stats.lastFailureAt = now;
+    stats.failureCounts = {
+        ...(decay ? {} : stats.failureCounts ?? {}),
+        [args.reason]: ((decay ? 0 : stats.failureCounts?.[args.reason]) ?? 0) + 1,
+    };
+    if (DISABLED_REASONS.has(args.reason)) {
+        const dur = calculateDisabledMs(args.reason, nextErrorCount);
+        stats.disabledUntil = now + dur;
+        stats.disabledReason = args.reason;
+        log.warn("profile disabled", {
+            profileId: args.profileId,
+            reason: args.reason,
+            disabledForMs: dur,
+            errorCount: nextErrorCount,
+        });
+    }
+    else if (TRANSIENT_REASONS.has(args.reason)) {
+        const dur = calculateCooldownMs(nextErrorCount);
+        stats.cooldownUntil = now + dur;
+        stats.cooldownReason = args.reason;
+        if (args.modelId && args.reason === "rate_limit") {
+            stats.cooldownModel = args.modelId;
+        }
+        else {
+            delete stats.cooldownModel;
+        }
+        log.info("profile cooled", {
+            profileId: args.profileId,
+            reason: args.reason,
+            cooldownMs: dur,
+            modelId: args.modelId,
+            errorCount: nextErrorCount,
+        });
+    }
+    else {
+        // format / model_not_found / auth / session_expired — record but no cooldown.
+        log.debug("profile failure recorded (no cooldown)", {
+            profileId: args.profileId,
+            reason: args.reason,
+            errorCount: nextErrorCount,
+        });
+    }
+    writeStats(next, args.profileId, stats);
+    if (args.save !== false)
+        saveProfileState(args.agentId, next);
+    return next;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Transactional wrappers — load FRESH from disk under the lock, apply the
+// mark, then save. Use these on every concurrent surface (agent-loop +
+// cron). The non-transactional `markProfileFailure` / `markProfileSuccess`
+// still exist for callers that hold the state already (tests, single-shot
+// flows) — they remain race-prone if called concurrently.
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Apply a profile-failure mark transactionally: under the per-agent cooldown
+ * lock, re-load fresh state from disk, merge `markProfileFailure` against
+ * THAT snapshot, then save. Returns the merged state so the caller can keep
+ * its in-memory copy aligned with what just landed on disk.
+ *
+ * `args.state` is the caller's last-known snapshot — used only to satisfy
+ * the function signature; the merged result is built from disk to defeat
+ * cross-process drift.
+ */
+export async function recordProfileFailureLocked(args) {
+    return withProfileCooldownLock(args.agentId, async () => {
+        const fresh = loadProfileState(args.agentId);
+        return markProfileFailure({ ...args, state: fresh });
+    });
+}
+/**
+ * Apply a profile-success mark transactionally — same shape as
+ * `recordProfileFailureLocked`. Used on every successful turn so a sibling
+ * write that flipped the profile into cooldown 50ms ago doesn't get
+ * silently overwritten by our stale "everything's fine" snapshot.
+ */
+export async function recordProfileSuccessLocked(args) {
+    return withProfileCooldownLock(args.agentId, async () => {
+        const fresh = loadProfileState(args.agentId);
+        return markProfileSuccess({ ...args, state: fresh });
+    });
+}
+/**
+ * Load + sweep expired windows transactionally. Used at turn start so the
+ * read isn't racing against a concurrent peer's success-save.
+ */
+export async function loadProfileStateLocked(agentId) {
+    return withProfileCooldownLock(agentId, async () => {
+        const fresh = loadProfileState(agentId);
+        return clearExpiredCooldowns(fresh);
+    });
+}
+// Sweep expired cooldowns/disabled windows in-place. Cheap to call before
+// a selection so the order computed above doesn't include slots that have
+// already aged out.
+export function clearExpiredCooldowns(state, now = Date.now()) {
+    let mutated = false;
+    const next = cloneState(state);
+    const stats = next.usageStats ?? {};
+    for (const id of Object.keys(stats)) {
+        const s = stats[id];
+        if (!s)
+            continue;
+        if (typeof s.cooldownUntil === "number" && s.cooldownUntil <= now) {
+            delete s.cooldownUntil;
+            delete s.cooldownReason;
+            delete s.cooldownModel;
+            // Cooldown expired — half-open the breaker by zeroing recent error count.
+            s.errorCount = 0;
+            mutated = true;
+        }
+        if (typeof s.disabledUntil === "number" && s.disabledUntil <= now) {
+            delete s.disabledUntil;
+            delete s.disabledReason;
+            mutated = true;
+        }
+    }
+    return mutated ? next : state;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Tiny helpers.
+// ─────────────────────────────────────────────────────────────────────────────
+function cloneState(state) {
+    return {
+        version: 1,
+        order: state.order ? { ...state.order } : undefined,
+        lastGood: state.lastGood ? { ...state.lastGood } : undefined,
+        usageStats: state.usageStats
+            ? Object.fromEntries(Object.entries(state.usageStats).map(([k, v]) => [k, { ...v }]))
+            : {},
+    };
+}
+function readStats(state, profileId) {
+    state.usageStats = state.usageStats ?? {};
+    state.usageStats[profileId] = state.usageStats[profileId] ?? {};
+    return { ...state.usageStats[profileId] };
+}
+function writeStats(state, profileId, stats) {
+    state.usageStats = state.usageStats ?? {};
+    state.usageStats[profileId] = stats;
+}
+//# sourceMappingURL=profile-cooldown.js.map

package/dist/auth/profile-cooldown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-cooldown.js","sourceRoot":"","sources":["../../src/auth/profile-cooldown.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,kCAAkC;AAClC,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,qBAAqB;AACrB,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,qCAAqC;AACrC,EAAE;AACF,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,uDAAuD;AAEvD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE,MAAM,GAAG,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;AA2BnD,gFAAgF;AAChF,+DAA+D;AAC/D,yDAAyD;AACzD,gFAAgF;AAEhF,MAAM,kBAAkB,GAAG,MAAM,CAAC,CAAQ,0BAA0B;AACpE,MAAM,kBAAkB,GAAG,MAAM,CAAC,CAAQ,SAAS;AACnD,MAAM,oBAAoB,GAAG,CAAC,GAAG,MAAM,CAAC,CAAE,SAAS;AACnD,MAAM,6BAA6B,GAAG,EAAE,GAAG,MAAM,CAAC;AAClD,MAAM,4BAA4B,GAAG,EAAE,GAAG,MAAM,CAAC;AACjD,MAAM,gCAAgC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;AACzD,MAAM,+BAA+B,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AACzD,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAE3C,MAAM,iBAAiB,GAA6B,IAAI,GAAG,CAAc;IACvE,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AACH,MAAM,gBAAgB,GAA6B,IAAI,GAAG,CAAc;IACtE,SAAS;IACT,gBAAgB;CACjB,CAAC,CAAC;AAEH,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,qEAAqE;AACrE,MAAM,qBAAqB,GAAG,IAAI,CAAC,CAAC,6BAA6B;AAEjE,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAClC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,kBAAkB,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,kBAAkB,CAAC;;QACtC,IAAI,GAAG,oBAAoB,CAAC;IACjC,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,qBAAqB,CAAC,CAAC;IAChF,OAAO,IAAI,GAAG,MAAM,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAmB,EAAE,UAAkB;IACzE,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,6BAA6B,CAAC;IACrG,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,4BAA4B,CAAC;IAClG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,gFAAgF;AAChF,4EAA4E;AAC5E,4CAA4C;AAC5C,gFAAgF;AAEhF,4EAA4E;AAC5E,uEAAuE;AACvE,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,0CAA0C;AAC1C,yFAAyF;AACzF,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;AACvE,MAAM,aAAa,GAAG,sBAAsB,CAC1C,kBAAkB,EAClB,GAAG,EAAE,CAAC,IAAI,GAAG,EAA4B,CAC1C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,IAAsB;IAEtB,MAAM,GAAG,GAAG,OAAO,IAAI,MAAM,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAqB,CAAC;IACnF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,GAAG,CACf,GAAG,EACH,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAC5B,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,iCAAiC;IAC/C,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC;AAClE,CAAC;AAED,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,0EAA0E;AAC1E,kDAAkD;AAClD,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAA4B,CAAC;AACpE,IAAI,sBAAsB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAE9D,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,KAAuB;IAC7E,uBAAuB,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;6BAC6B;AAC7B,MAAM,UAAU,sBAAsB;IACpC,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,gCAAgC;IAC9C,uBAAuB,CAAC,KAAK,EAAE,CAAC;IAChC,sBAAsB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,MAAM;YAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAqB,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC/D,uBAAuB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACnD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;YAC9D,IAAI,EAAE,CAAC;YACP,KAAK,EAAG,GAAa,CAAC,OAAO;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAuB;IACvE,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,uBAAuB,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAuC,CAAC;QAC5E,sBAAsB,GAAG,sBAAsB;aAC5C,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;aAC1E,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBAC/C,OAAO;gBACP,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACL,OAAO;IACT,CAAC;IAED,MAAM,CAAC,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC3C,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAcD,MAAM,UAAU,iBAAiB,CAC/B,KAAoC,EACpC,UAA+C,EAAE;IAEjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtD,MAAM,MAAM,GAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAElE,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;QACzE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC3C,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;QACzE,0EAA0E;QAC1E,IACE,KAAK,CAAC,aAAa;YACnB,OAAO,CAAC,QAAQ;YAChB,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,QAAQ,EACxC,CAAC;YACD,4CAA4C;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YAC3C,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAuB,EACvB,SAAiB,EACjB,UAA+C,EAAE;IAEjD,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;AAC5C,CAAC;AAWD,4EAA4E;AAC5E,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,UAAU,yBAAyB,CAAC,IAAsB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAExD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,oEAAoE;IACpE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU;QAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEzD,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YACxE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,gEAAgE;IAChE,sEAAsE;IACtE,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;QAC3C,OAAO,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACxB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxC,OAAO,EAAE,GAAG,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAoC,EAAE,GAAW;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChH,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChH,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAgBD,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,8DAA8D;IAC9D,OAAO,KAAK,CAAC,aAAa,CAAC;IAC3B,OAAO,KAAK,CAAC,cAAc,CAAC;IAC5B,OAAO,KAAK,CAAC,aAAa,CAAC;IAC3B,OAAO,KAAK,CAAC,aAAa,CAAC;IAC3B,OAAO,KAAK,CAAC,cAAc,CAAC;IAC5B,OAAO,KAAK,CAAC,UAAU,CAAC;IACxB,OAAO,KAAK,CAAC,aAAa,CAAC;IAC3B,OAAO,KAAK,CAAC,aAAa,CAAC;IAC3B,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,wEAAwE;IACxE,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,aAAa,GAAG,CAAC,IAAI,GAAG,GAAG,aAAa,GAAG,iBAAiB,CAAC;IAC3E,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,cAAc,GAAG,CAAC,CAAC;IAE1C,KAAK,CAAC,UAAU,GAAG,cAAc,CAAC;IAClC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC;IAC1B,KAAK,CAAC,aAAa,GAAG;QACpB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;QAC3C,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;KAC3E,CAAC;IAEF,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC7D,KAAK,CAAC,aAAa,GAAG,GAAG,GAAG,GAAG,CAAC;QAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,GAAG;YAClB,UAAU,EAAE,cAAc;SAC3B,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;QAChD,KAAK,CAAC,aAAa,GAAG,GAAG,GAAG,GAAG,CAAC;QAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACjD,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,OAAO,KAAK,CAAC,aAAa,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,cAAc;SAC3B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,8EAA8E;QAC9E,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE;YAClD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,cAAc;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,0EAA0E;AAC1E,uEAAuE;AACvE,2EAA2E;AAC3E,0EAA0E;AAC1E,0DAA0D;AAC1D,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAqB;IACpE,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,kBAAkB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAqB;IACpE,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,kBAAkB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe;IAC1D,OAAO,uBAAuB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,0EAA0E;AAC1E,oBAAoB;AACpB,MAAM,UAAU,qBAAqB,CAAC,KAAuB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACrF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC;YAClE,OAAO,CAAC,CAAC,aAAa,CAAC;YACvB,OAAO,CAAC,CAAC,cAAc,CAAC;YACxB,OAAO,CAAC,CAAC,aAAa,CAAC;YACvB,0EAA0E;YAC1E,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG,EAAE,CAAC;YAClE,OAAO,CAAC,CAAC,aAAa,CAAC;YACvB,OAAO,CAAC,CAAC,cAAc,CAAC;YACxB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,SAAS,UAAU,CAAC,KAAuB;IACzC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;QAC5D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC1B,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAChE;YACH,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAuB,EAAE,SAAiB;IAC3D,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAChE,OAAO,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,KAAuB,EAAE,SAAiB,EAAE,KAAwB;IACtF,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;AACtC,CAAC"}

package/dist/auth/profiles.d.ts

@@ -0,0 +1,93 @@
+export interface AuthProfilesFile {
+    version: number;
+    profiles: Record<string, AuthProfile>;
+}
+export interface BrigadeSecretRef {
+    source: "env" | "file" | "exec";
+    provider: string;
+    id: string;
+}
+export interface AuthProfile {
+    provider: string;
+    alias?: string;
+    type: "api_key" | "oauth" | "token";
+    key?: string;
+    keyRef?: BrigadeSecretRef;
+    access?: string;
+    accessRef?: BrigadeSecretRef;
+    refresh?: string;
+    refreshRef?: BrigadeSecretRef;
+    expires?: number;
+    token?: string;
+    tokenRef?: BrigadeSecretRef;
+    metadata?: Record<string, unknown>;
+}
+export interface AuthStateFile {
+    version: number;
+    order?: Record<string, string[]>;
+    lastGood?: Record<string, string>;
+    usageStats?: Record<string, ProfileUsageStats>;
+}
+export interface ProfileUsageStats {
+    lastUsedAt?: number;
+    successCount?: number;
+    failureCount?: number;
+    cooldownUntil?: number;
+    cooldownReason?: string;
+    disabledUntil?: number;
+}
+export declare function profileId(provider: string, alias?: string): string;
+/** Convex-mode boot hydration — install an agent's profiles + auth state
+ *  into the in-process caches. Called from storage/boot.ts. */
+export declare function primeAuthCaches(agentId: string, profiles: AuthProfilesFile, state: AuthStateFile): void;
+/** Resolves when every auth mutation enqueued so far reached the backend. */
+export declare function awaitAuthFlush(): Promise<void>;
+/** Test-only. */
+export declare function __resetAuthCachesForTests(): void;
+export declare function initAuthProfiles(agentId: string): void;
+export declare function readProfiles(agentId: string): AuthProfilesFile;
+export declare function writeProfiles(agentId: string, file: AuthProfilesFile): void;
+export declare function readState(agentId: string): AuthStateFile;
+export declare function writeState(agentId: string, file: AuthStateFile): void;
+export declare function upsertApiKeyProfile(agentId: string, args: {
+    provider: string;
+    alias?: string;
+    key: string;
+    metadata?: Record<string, unknown>;
+}): string;
+export declare function upsertOAuthProfile(agentId: string, args: {
+    provider: string;
+    alias?: string;
+    access?: string;
+    refresh?: string;
+    /** Absolute epoch-ms (or seconds — caller's convention) the access token expires. */
+    expires?: number;
+    /**
+     * OAuth client secret — needed (with the refresh token) to mint a fresh
+     * access token when this one expires. Stored in the SEALED `key` column
+     * (keyEnc in convex; the api-key readers all gate on `type === "api_key"`,
+     * so reusing it for an oauth profile's secret is safe + avoids a schema
+     * change). Never returned to the model.
+     */
+    clientSecret?: string;
+    metadata?: Record<string, unknown>;
+}): string;
+export declare function upsertApiKeyRefProfile(agentId: string, args: {
+    provider: string;
+    alias?: string;
+    keyRef: BrigadeSecretRef;
+    metadata?: Record<string, unknown>;
+}): string;
+export declare function upsertTokenProfile(agentId: string, args: {
+    provider: string;
+    alias?: string;
+    token: string;
+    metadata?: Record<string, unknown>;
+}): string;
+export declare function upsertTokenRefProfile(agentId: string, args: {
+    provider: string;
+    alias?: string;
+    tokenRef: BrigadeSecretRef;
+    metadata?: Record<string, unknown>;
+}): string;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/auth/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/auth/profiles.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAEhB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACvC;AAkBD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IAIpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAE1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAE5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAEjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAElE;AAqBD;+DAC+D;AAC/D,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,aAAa,GACnB,IAAI,CAGN;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAE9C;AAED,iBAAiB;AACjB,wBAAgB,yBAAyB,IAAI,IAAI,CAIhD;AA4CD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAiDtD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAmB9D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAW3E;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAuBxD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,CAOrE;AASD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAC1F,MAAM,CAYR;AAQD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,GACA,MAAM,CAeR;AAKD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACvG,MAAM,CAYR;AAID,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAC5F,MAAM,CAYR;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACzG,MAAM,CAYR"}