@spinabot/brigade 0.1.2 → 1.0.1

package/dist/agents/session-registry.js

@@ -0,0 +1,405 @@
+/**
+ * In-process live-session registry.
+ *
+ * Tracks the sessions Brigade's gateway is actively running a turn for —
+ * the orthogonal counterpart to `session-store.ts` (which persists per-
+ * session metadata to disk) and `subagent-registry.ts` (which tracks
+ * sub-agent runs spawned BY sessions).
+ *
+ * Why have a separate live registry at all: the heartbeat runner (Step 14),
+ * the channel manager (Step 16), the approval router (Step 17), and the
+ * gateway dispatcher (Step 25) all need ONE place to ask "is X live?" —
+ * and ONE place to abort it on graceful shutdown.
+ *
+ * Backing store: a `resolveGlobalSingleton`-pinned Map keyed by `runId`.
+ * Lives for the process lifetime; never persisted. A fresh process boots
+ * with an empty Map.
+ *
+ * P2#1 (Wave H) — keyed by runId, not sessionKey. A single sessionKey can
+ * host MULTIPLE live entries when, for example, a heartbeat synthetic
+ * turn fires while the operator's prompt is still streaming, or when a
+ * crash-recovery race re-registers before unregister. Previously the
+ * Map-by-sessionKey silently REPLACED the prior entry, dropping its
+ * abort controller and losing the original turn's lifecycle stamp. Now:
+ *
+ *   - Each `registerLiveSession` mints a unique entry keyed by `runId`.
+ *   - `hasLiveSession(sessionKey)` looks up by sessionKey via secondary
+ *     index (sessionKey → Set<runId>).
+ *   - `abortLiveSession(sessionKey)` aborts ALL non-terminated entries
+ *     for that sessionKey (channels can no longer leak across turn
+ *     boundaries).
+ *
+ * Hook surface:
+ *   - `onStateChange(listener)` for observers (Step 18 agent-events fan-out).
+ *   - Abort propagation: each entry carries the turn's `AbortController`,
+ *     so a graceful shutdown can call `abortAllSessions("shutdown")`
+ *     and every in-flight turn unwinds promptly.
+ */
+import { createSubsystemLogger } from "../logging/subsystem-logger.js";
+import { resolveGlobalSingleton } from "../shared/global-singleton.js";
+const log = createSubsystemLogger("agents/session-registry");
+const SESSION_REGISTRY_STATE_KEY = Symbol.for("brigade.sessionRegistry.state");
+function createState() {
+    return { byRunId: new Map(), runIdsBySessionKey: new Map(), listeners: new Set() };
+}
+function getState() {
+    return resolveGlobalSingleton(SESSION_REGISTRY_STATE_KEY, createState);
+}
+function emit(event) {
+    const { listeners } = getState();
+    for (const listener of listeners) {
+        try {
+            listener(event);
+        }
+        catch (err) {
+            log.warn("session-state listener threw", {
+                sessionKey: event.sessionKey,
+                error: err?.message,
+            });
+        }
+    }
+}
+function indexAdd(state, sessionKey, runId) {
+    let set = state.runIdsBySessionKey.get(sessionKey);
+    if (!set) {
+        set = new Set();
+        state.runIdsBySessionKey.set(sessionKey, set);
+    }
+    set.add(runId);
+}
+function indexRemove(state, sessionKey, runId) {
+    const set = state.runIdsBySessionKey.get(sessionKey);
+    if (!set)
+        return;
+    set.delete(runId);
+    if (set.size === 0)
+        state.runIdsBySessionKey.delete(sessionKey);
+}
+/**
+ * Register a fresh live session. Each call mints a distinct entry keyed by
+ * `runId`; multiple live entries for the same sessionKey are allowed (e.g.
+ * a heartbeat turn racing the operator's prompt). The dispatcher should
+ * still pass DISTINCT runIds per turn — colliding runIds replace the
+ * existing entry (logged) the same way the old Map-by-sessionKey did.
+ */
+export function registerLiveSession(params) {
+    const state = getState();
+    const now = Date.now();
+    if (!params.runId) {
+        throw new Error("registerLiveSession: runId is required");
+    }
+    const existingByRunId = state.byRunId.get(params.runId);
+    if (existingByRunId) {
+        log.debug("replacing existing live-session entry (same runId)", {
+            sessionKey: params.sessionKey,
+            runId: params.runId,
+        });
+        // Detach the old sessionKey index entry if the new entry's sessionKey
+        // differs (it shouldn't, but defend against the dispatcher mutating).
+        if (existingByRunId.sessionKey !== params.sessionKey) {
+            indexRemove(state, existingByRunId.sessionKey, params.runId);
+        }
+    }
+    const record = {
+        sessionKey: params.sessionKey,
+        sessionId: params.sessionId,
+        agentId: params.agentId,
+        runId: params.runId,
+        lane: params.lane,
+        state: "running",
+        createdAt: now,
+        lastStateChangeAt: now,
+        lastActivityAt: now,
+        abortController: params.abortController,
+        metadata: params.metadata,
+    };
+    state.byRunId.set(params.runId, record);
+    indexAdd(state, params.sessionKey, params.runId);
+    emit({
+        sessionKey: params.sessionKey,
+        previousState: "registered",
+        newState: "running",
+        timestamp: now,
+        runId: params.runId,
+    });
+    return record;
+}
+/** Lookup the newest live entry for a session key (or undefined). */
+export function getLiveSession(sessionKey) {
+    if (!sessionKey)
+        return undefined;
+    const state = getState();
+    const runIds = state.runIdsBySessionKey.get(sessionKey);
+    if (!runIds || runIds.size === 0)
+        return undefined;
+    let newest;
+    for (const runId of runIds) {
+        const rec = state.byRunId.get(runId);
+        if (!rec)
+            continue;
+        if (!newest || rec.createdAt > newest.createdAt)
+            newest = rec;
+    }
+    return newest;
+}
+/** Lookup a specific live entry by runId. */
+export function getLiveSessionByRunId(runId) {
+    if (!runId)
+        return undefined;
+    return getState().byRunId.get(runId);
+}
+/** Every live entry for a session key (every non-terminated runId). */
+export function getLiveSessionsForKey(sessionKey) {
+    if (!sessionKey)
+        return [];
+    const state = getState();
+    const runIds = state.runIdsBySessionKey.get(sessionKey);
+    if (!runIds || runIds.size === 0)
+        return [];
+    const out = [];
+    for (const runId of runIds) {
+        const rec = state.byRunId.get(runId);
+        if (rec)
+            out.push(rec);
+    }
+    return out;
+}
+/** `true` while at least one entry for the sessionKey is in a non-terminated state. */
+export function hasLiveSession(sessionKey) {
+    for (const entry of getLiveSessionsForKey(sessionKey)) {
+        if (entry.state !== "terminated")
+            return true;
+    }
+    return false;
+}
+/** Snapshot every currently registered session. */
+export function listLiveSessions() {
+    return [...getState().byRunId.values()];
+}
+/**
+ * Filter to sessions matching a predicate. Common shapes:
+ *   - by agent: `listLiveSessionsWhere((s) => s.agentId === "main")`
+ *   - by lane:  `listLiveSessionsWhere((s) => s.lane.startsWith("session:"))`
+ */
+export function listLiveSessionsWhere(predicate) {
+    return listLiveSessions().filter(predicate);
+}
+/** Count of currently-running (non-idle, non-draining, non-terminated) sessions. */
+export function countActiveLiveSessions() {
+    let n = 0;
+    for (const entry of getState().byRunId.values()) {
+        if (entry.state === "running")
+            n += 1;
+    }
+    return n;
+}
+/** Per-agent variant — only counts entries whose `agentId` matches. Wave K. */
+export function countActiveLiveSessionsForAgent(agentIdValue) {
+    if (!agentIdValue)
+        return 0;
+    let n = 0;
+    for (const entry of getState().byRunId.values()) {
+        if (entry.state === "running" && entry.agentId === agentIdValue)
+            n += 1;
+    }
+    return n;
+}
+function transitionStateByRunId(runId, newState) {
+    const state = getState();
+    const entry = state.byRunId.get(runId);
+    if (!entry)
+        return false;
+    if (entry.state === newState)
+        return false;
+    const previousState = entry.state;
+    const now = Date.now();
+    entry.state = newState;
+    entry.lastStateChangeAt = now;
+    entry.lastActivityAt = now;
+    emit({
+        sessionKey: entry.sessionKey,
+        previousState,
+        newState,
+        timestamp: now,
+        runId,
+    });
+    return true;
+}
+function transitionAllForSessionKey(sessionKey, newState) {
+    let any = false;
+    for (const entry of getLiveSessionsForKey(sessionKey)) {
+        if (transitionStateByRunId(entry.runId, newState))
+            any = true;
+    }
+    return any;
+}
+/** Mark every live entry for `sessionKey` idle (waiting on inbound). */
+export function markSessionIdle(sessionKey) {
+    return transitionAllForSessionKey(sessionKey, "idle");
+}
+/** Move every live entry for `sessionKey` into draining state. */
+export function markSessionDraining(sessionKey) {
+    return transitionAllForSessionKey(sessionKey, "draining");
+}
+/** Mark every live entry for `sessionKey` running again after an idle/draining pause. */
+export function markSessionRunning(sessionKey) {
+    return transitionAllForSessionKey(sessionKey, "running");
+}
+/** Touch `lastActivityAt` on every entry for `sessionKey` without changing state. */
+export function touchSessionActivity(sessionKey) {
+    const entries = getLiveSessionsForKey(sessionKey);
+    if (entries.length === 0)
+        return false;
+    const now = Date.now();
+    for (const entry of entries)
+        entry.lastActivityAt = now;
+    return true;
+}
+/**
+ * Abort EVERY live entry for the sessionKey (a single sessionKey may host
+ * multiple in-flight turns — heartbeat racing operator, retry races, etc.).
+ * Each matching entry's abort controller fires; each is transitioned to
+ * `terminated`. Returns `true` if at least one entry was found.
+ */
+export function abortLiveSession(sessionKey, reason) {
+    const entries = getLiveSessionsForKey(sessionKey);
+    if (entries.length === 0)
+        return false;
+    for (const entry of entries) {
+        try {
+            entry.abortController?.abort(reason ?? "session-aborted");
+        }
+        catch (err) {
+            log.warn("abortController threw on abort()", {
+                sessionKey,
+                runId: entry.runId,
+                error: err?.message,
+            });
+        }
+        transitionStateByRunId(entry.runId, "terminated");
+    }
+    return true;
+}
+/**
+ * Abort a single live entry by runId. Used when the caller knows the
+ * specific turn (not just the sessionKey) to cancel — heartbeat dispatcher
+ * cancelling its own synthetic turn, sub-agent runner cancelling a child.
+ */
+export function abortLiveSessionByRunId(runId, reason) {
+    const state = getState();
+    const entry = state.byRunId.get(runId);
+    if (!entry)
+        return false;
+    try {
+        entry.abortController?.abort(reason ?? "session-aborted");
+    }
+    catch (err) {
+        log.warn("abortController threw on abort()", {
+            runId,
+            error: err?.message,
+        });
+    }
+    transitionStateByRunId(runId, "terminated");
+    return true;
+}
+/**
+ * Remove a live entry from the registry. Resolves by runId when there's a
+ * unique entry, otherwise by sessionKey (when only one live entry exists).
+ * Does NOT call `abort()` — the caller is expected to have completed the
+ * turn (or to call `abortLiveSession` first). Returns `true` if the entry
+ * was present.
+ *
+ * Callers that hold a specific `runId` should prefer
+ * `unregisterLiveSessionByRunId` to avoid the ambiguity branch.
+ */
+export function unregisterLiveSession(sessionKey) {
+    const entries = getLiveSessionsForKey(sessionKey);
+    if (entries.length === 0)
+        return false;
+    const state = getState();
+    let any = false;
+    for (const entry of entries) {
+        const previousState = entry.state;
+        state.byRunId.delete(entry.runId);
+        indexRemove(state, entry.sessionKey, entry.runId);
+        emit({
+            sessionKey: entry.sessionKey,
+            previousState,
+            newState: "terminated",
+            timestamp: Date.now(),
+            runId: entry.runId,
+        });
+        any = true;
+    }
+    return any;
+}
+/** Remove a single live entry by runId. Returns `true` if the entry was present. */
+export function unregisterLiveSessionByRunId(runId) {
+    const state = getState();
+    const entry = state.byRunId.get(runId);
+    if (!entry)
+        return false;
+    const previousState = entry.state;
+    state.byRunId.delete(runId);
+    indexRemove(state, entry.sessionKey, runId);
+    emit({
+        sessionKey: entry.sessionKey,
+        previousState,
+        newState: "terminated",
+        timestamp: Date.now(),
+        runId,
+    });
+    return true;
+}
+/**
+ * Graceful shutdown: abort every session's turn + transition them all to
+ * `terminated`. Returns the count of sessions that received an abort.
+ * Doesn't unregister — entries linger until explicit `unregisterLiveSession`
+ * or `resetSessionRegistryForTests`.
+ */
+export function abortAllSessions(reason) {
+    const state = getState();
+    let n = 0;
+    for (const entry of state.byRunId.values()) {
+        if (entry.state === "terminated")
+            continue;
+        try {
+            entry.abortController?.abort(reason ?? "shutdown");
+        }
+        catch {
+            // best-effort
+        }
+        const previous = entry.state;
+        entry.state = "terminated";
+        entry.lastStateChangeAt = Date.now();
+        emit({
+            sessionKey: entry.sessionKey,
+            previousState: previous,
+            newState: "terminated",
+            timestamp: Date.now(),
+            runId: entry.runId,
+        });
+        n += 1;
+    }
+    return n;
+}
+/**
+ * Subscribe to lifecycle transitions. Returns a disposer that removes the
+ * listener. Listener exceptions are logged + swallowed (a misbehaving
+ * subscriber must not crash the dispatcher).
+ */
+export function onSessionStateChange(listener) {
+    const state = getState();
+    state.listeners.add(listener);
+    return () => {
+        state.listeners.delete(listener);
+    };
+}
+/** Test-only — drop every entry + every listener. */
+export function resetSessionRegistryForTests() {
+    const state = getState();
+    state.byRunId.clear();
+    state.runIdsBySessionKey.clear();
+    state.listeners.clear();
+}
+//# sourceMappingURL=session-registry.js.map

package/dist/agents/session-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-registry.js","sourceRoot":"","sources":["../../src/agents/session-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,MAAM,GAAG,GAAG,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;AAqC7D,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;AAE/E,SAAS,WAAW;IACnB,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,kBAAkB,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,QAAQ;IAChB,OAAO,sBAAsB,CAAuB,0BAA0B,EAAE,WAAW,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,IAAI,CAAC,KAA8B;IAC3C,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,CAAC;IACjC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACJ,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBACxC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,KAAK,EAAG,GAAa,EAAE,OAAO;aAC9B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,KAA2B,EAAE,UAAkB,EAAE,KAAa;IAC/E,IAAI,GAAG,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAA2B,EAAE,UAAkB,EAAE,KAAa;IAClF,MAAM,GAAG,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClB,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACjE,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA6B;IAChE,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,eAAe,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,oDAAoD,EAAE;YAC/D,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,sEAAsE;QACtE,sEAAsE;QACtE,IAAI,eAAe,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YACtD,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAsB;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,GAAG;QACd,iBAAiB,EAAE,GAAG;QACtB,cAAc,EAAE,GAAG;QACnB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KACzB,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC;QACJ,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,aAAa,EAAE,YAAY;QAC3B,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,MAAM,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AACf,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,UAAkB;IAChD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,MAAqC,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS;YAAE,MAAM,GAAG,GAAG,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,cAAc,CAAC,UAAkB;IAChD,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB;IAC/B,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACpC,SAAgD;IAEhD,OAAO,gBAAgB,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,uBAAuB;IACtC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,+BAA+B,CAAC,YAAoB;IACnE,IAAI,CAAC,YAAY;QAAE,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY;YAAE,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAE,QAA+B;IAC7E,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;IACvB,KAAK,CAAC,iBAAiB,GAAG,GAAG,CAAC;IAC9B,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC;IAC3B,IAAI,CAAC;QACJ,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa;QACb,QAAQ;QACR,SAAS,EAAE,GAAG;QACd,KAAK;KACL,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAClC,UAAkB,EAClB,QAA+B;IAE/B,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,IAAI,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,GAAG,GAAG,IAAI,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,UAAkB;IACjD,OAAO,0BAA0B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACrD,OAAO,0BAA0B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AAC3D,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACpD,OAAO,0BAA0B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAC1D,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACtD,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC;IACxD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,MAAe;IACnE,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC5C,UAAU;gBACV,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAG,GAAa,EAAE,OAAO;aAC9B,CAAC,CAAC;QACJ,CAAC;QACD,sBAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,MAAe;IACrE,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACJ,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC5C,KAAK;YACL,KAAK,EAAG,GAAa,EAAE,OAAO;SAC9B,CAAC,CAAC;IACJ,CAAC;IACD,sBAAsB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACvD,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC;QAClC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC;YACJ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa;YACb,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,GAAG,GAAG,IAAI,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACzD,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC;IAClC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC;QACJ,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa;QACb,QAAQ,EAAE,YAAY;QACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,KAAK;KACL,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC/C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY;YAAE,SAAS;QAC3C,IAAI,CAAC;YACJ,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACR,cAAc;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7B,KAAK,CAAC,KAAK,GAAG,YAAY,CAAC;QAC3B,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC;YACJ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa,EAAE,QAAQ;YACvB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,CAAC,IAAI,CAAC,CAAC;IACR,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAA8B;IAClE,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,OAAO,GAAG,EAAE;QACX,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,4BAA4B;IAC3C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;IACjC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC"}

package/dist/agents/session-wiring.d.ts

@@ -0,0 +1,214 @@
+/**
+ * Brigade session-wiring — the single source of truth for the tool surface
+ * + the `beforeToolCall` guard chain that EVERY Brigade agent session gets.
+ *
+ * History: Brigade briefly had two divergent session builders — a long-lived
+ * `buildAgent` (TUI + gateway) and the per-turn `runSingleTurn` (`brigade
+ * agent`). They drifted: the interactive path was missing the memory tools
+ * (Primitive #4), the exec-gate + loop-detector (Primitive #3), and the full
+ * tool list — so the surfaces the operator actually used ran a gutted agent
+ * loop with UNGATED bash and no memory.
+ *
+ * That divergence is gone. There is now exactly ONE construction path —
+ * `agents/agent-loop.ts:runSingleTurn` → a single `createAgentSession` — and
+ * every surface funnels through it: `brigade agent` calls it directly, and
+ * the gateway (which `brigade chat` / `brigade connect` are thin WebSocket
+ * clients of) runs it once per turn. These helpers are factored out of
+ * that one path so the tool set + guards stay legible and unit-testable;
+ * per-provider behaviour lives in the stream-fn wrappers (see
+ * `stream-wrappers.ts`), never per-model loop branching. The shape is
+ * deliberately "one loop + provider adapters".
+ */
+import type { ChannelApprovalRoute } from "./channels/approval-router.js";
+import type { MemoryCapability } from "./extensions/types.js";
+import type { SessionContext } from "./session-context.js";
+import { type BrigadeBeforeToolCallHook } from "./tool-guard.js";
+import type { AnyBrigadeTool } from "./tools/types.js";
+export interface BrigadeToolset {
+    /** Pi built-in tool names (passed to Pi's `tools` allowlist). */
+    builtinToolNames: string[];
+    /** Brigade-native custom tool names (recall_memory, read_memory, …). */
+    brigadeToolNames: string[];
+    /** builtins + brigade — the allowlist the unknown-tool guard checks against. */
+    enabledToolNames: string[];
+    /** Brigade-native tool objects (passed to Pi's `customTools`). */
+    customTools: AnyBrigadeTool[];
+    /** Capability gates for the system-prompt assembler (## Memory, etc.). */
+    capabilities: {
+        memory: boolean;
+        subAgents: boolean;
+    };
+}
+/**
+ * Assemble Brigade's full tool surface for a session. Pure + cheap — safe
+ * to call once per session build. `createBrigadeTools` constructs the
+ * memory tools rooted at `workspaceDir`.
+ *
+ * `senderIsOwner` defaults to `true` so all existing CLI / TUI / gateway
+ * callers (which today ARE the workspace owner) keep their behaviour
+ * unchanged — the moment a channel adapter routes a non-owner DM through
+ * the per-turn path it MUST pass `senderIsOwner: false` explicitly so any
+ * `ownerOnly: true` tool refuses the call with `BrigadeToolAuthorizationError`
+ * before its body runs. The wrapper is a no-op for non-ownerOnly tools so
+ * applying it to the full custom-tool list is cheap.
+ */
+export declare function assembleBrigadeToolset(opts: {
+    workspaceDir: string;
+    agentId: string;
+    cwd: string;
+    /**
+     * Whether the sender driving this turn is the workspace owner. Defaults
+     * to `true` — every direct-from-operator surface (TUI / `brigade agent` /
+     * gateway-from-CLI) is the owner. Channel-routed turns MUST pass `false`
+     * for non-owner senders so `ownerOnly` tools refuse with a 403-class
+     * `BrigadeToolAuthorizationError`.
+     */
+    senderIsOwner?: boolean;
+    /**
+     * Active memory backend for the turn. The agent loop resolves this via
+     * `resolveActiveMemoryCapability(...)` and threads it through; when
+     * omitted the tool registry builds the built-in file-based default.
+     */
+    memoryCapability?: MemoryCapability;
+    /**
+     * Sub-agent context — Primitive #6. When provided, the registry adds
+     * `spawn_agent` to the surface UNLESS the would-be child would land at
+     * leaf depth (`callerDepth + 1 >= maxDepth`), in which case it's dropped
+     * automatically. The parent session key drives child-key derivation +
+     * the concurrent-children map; the abort signal propagates cancellation.
+     */
+    subagentContext?: {
+        parentSessionKey: string;
+        callerDepth: number;
+        parentRunId?: string;
+        parentSignal?: AbortSignal;
+        /** Parent's resolved provider + modelId — child inherits unless caller
+         *  overrides via `spawn_agent`'s `model` param. */
+        parentProvider?: string;
+        parentModelId?: string;
+    };
+    /**
+     * Cron-mode tool allowlist. When set, the resulting toolset (built-ins
+     * AND brigade custom tools) is filtered down to ONLY these names.
+     * Stacks AFTER the `senderIsOwner` ownerOnly filter — both layers
+     * compose, with allowlist applied last. Empty array means "no tools";
+     * undefined means "no filter, full surface".
+     */
+    toolsAllow?: string[];
+    /**
+     * Active channel context for this turn — set when the inbound came from
+     * a channel adapter. Threaded into the cron tool so a `cron add` from
+     * mid-chat auto-routes the eventual announce back to the same chat.
+     * Undefined for TUI / direct-RPC turns (the cron's announce falls back
+     * to the operator's main session via `enqueueSystemEvent`).
+     */
+    channelContext?: ChannelApprovalRoute;
+    /**
+     * Per-turn session metadata. When provided, the cron tool resolves
+     * `sessionTarget: "current"` to `session:<sessionKey>` (otherwise it
+     * falls back to `"isolated"`); the sessions tools surface here too.
+     * The agent loop builds this from the resolved per-turn session key
+     * + agent id so a TUI operator's "remind me here in 30 mins" cron
+     * binds to THIS conversation, not a fresh isolated run.
+     */
+    sessionContext?: SessionContext;
+    /**
+     * Sandbox flag for the sessions tools — when true, `sessions_list`
+     * clamps visibility to the spawned-tree only. Forwarded to the tool
+     * registry; ignored when `sessionContext` is unset.
+     */
+    sandboxedSessionTools?: boolean;
+    /**
+     * Per-turn session-tool access guard — visibility + A2A policy +
+     * spawned-tree containment. Threaded through to `createBrigadeTools`
+     * so the four sessions tools fail-closed BEFORE dispatching when
+     * the caller is not allowed to reach the target session.
+     */
+    sessionToolAccess?: {
+        visibility?: import("./tools/sessions/shared.js").SessionToolsVisibility;
+        a2aPolicy?: import("./tools/sessions/shared.js").AgentToAgentPolicy;
+        spawnedKeys?: ReadonlySet<string>;
+    };
+}): BrigadeToolset;
+/**
+ * Per-call watchdog budget for the spawn tools. The call's own
+ * `timeoutSeconds` (per child, children run concurrently) bounds the
+ * legitimate runtime; 30s of slack covers dispatch + settle + announce.
+ * Exported for tests.
+ */
+export declare function resolveSpawnToolTimeoutMs(toolArgs: unknown): number;
+/**
+ * Per-call watchdog budget for `sessions_send`. The tool's legitimate
+ * runtime = its own wait window (`timeoutSeconds`, default 90s — the
+ * settle race in send.ts) + the 10s final-text flush poll + slack for
+ * dispatch/history reads. Without this, the blanket 60s watchdog killed
+ * every wait longer than a minute while the peer kept working.
+ * Exported for tests.
+ */
+export declare function resolveSessionsSendTimeoutMs(toolArgs: unknown): number;
+/**
+ * Per-call watchdog budget for `oauth_authorize`. The `await` action blocks
+ * until the operator clicks the authorization link — up to its own
+ * `waitSeconds` (default 240). `start` / `cancel` are fast but harmlessly
+ * inherit the same generous budget. Exported for tests.
+ */
+export declare function resolveOAuthAuthorizeTimeoutMs(toolArgs: unknown): number;
+/** Live correlation-id bag the guards read for `tool-blocked` bus events. */
+export interface GuardContextRef {
+    value: {
+        runId?: string;
+        agentId?: string;
+        sessionKey?: string;
+        /** Sub-agent attribution surfaced to approval prompts (Primitive #6). */
+        subagentDepth?: number;
+        subagentLabel?: string;
+        parentRunId?: string;
+        /** Channel routing — when set, exec-gate routes approval prompts into
+         *  the originating chat. Set per-turn by the agent loop from
+         *  `RunSingleTurnArgs.channelApprovalRoute`; cleared in `finally`. */
+        channelRoute?: ChannelApprovalRoute;
+    };
+}
+export interface ComposeGuardsOptions {
+    /** The unknown-tool guard's allowlist — builtins + brigade tools. */
+    enabledToolNames: string[];
+    /** Live runId/agentId/sessionKey bag for bus-event correlation. */
+    gateCtxRef: GuardContextRef;
+    /** Cwd label for the exec-gate's workdir-refusal message. */
+    displayCwd: string;
+    /**
+     * Optional in-place argument decoder run BEFORE the guards (e.g. xAI
+     * HTML-entity decode). Mutates `ctx.toolCall.arguments`.
+     */
+    decodeArgs?: (ctx: unknown) => void;
+    /**
+     * Optional operator/policy hook run AFTER the built-in guards pass
+     * (approval workflows, audit). Only invoked when nothing blocked first.
+     */
+    userBeforeHook?: BrigadeBeforeToolCallHook;
+}
+/**
+ * Compose Brigade's canonical `beforeToolCall` chain. Order, fixed:
+ *
+ *   decodeArgs → unknown-tool guard → path-write guard → cmd-ism guard → loop detector → exec-gate → userHook
+ *
+ * - **decodeArgs** (optional): provider arg cleanup before anything reads them.
+ * - **unknown-tool guard**: refuse hallucinated names + malformed args.
+ * - **path-write guard**: refuse `write`/`edit` to protected roots
+ *   (install dir's `skills/`, `~/.brigade/brigade.json`,
+ *   `~/.brigade/agents/<id>/agent/` internals) and redirect the model to
+ *   the right tool (`manage_skill` / `manage_agent`). Strict gate ahead
+ *   of the loop detector + exec-gate — those are downstream of "is the
+ *   destination even legal".
+ * - **cmd-ism guard**: refuse bash commands that redirect into a reserved
+ *   DOS device name (`2>nul` etc.) — in the POSIX shell those create a
+ *   real `nul` file that Windows then cannot delete.
+ * - **loop detector**: block a model stuck repeating the same call.
+ * - **exec-gate**: bash/exec/shell/sh approval + workdir/env refusal.
+ * - **userHook** (optional): operator policy, only if nothing blocked.
+ *
+ * A thrown guard/hook is converted to a block (fail-closed) so a bug never
+ * lets a destructive call through.
+ */
+export declare function composeBrigadeBeforeToolCall(opts: ComposeGuardsOptions): BrigadeBeforeToolCallHook;
+//# sourceMappingURL=session-wiring.d.ts.map

package/dist/agents/session-wiring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-wiring.d.ts","sourceRoot":"","sources":["../../src/agents/session-wiring.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAM9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,KAAK,yBAAyB,EAAwB,MAAM,iBAAiB,CAAC;AAIvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAcvD,MAAM,WAAW,cAAc;IAC9B,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gFAAgF;IAChF,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kEAAkE;IAClE,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,0EAA0E;IAC1E,YAAY,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CACtD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE;QACjB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,WAAW,CAAC;QAC3B;2DACmD;QACnD,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE;QACnB,UAAU,CAAC,EAAE,OAAO,4BAA4B,EAAE,sBAAsB,CAAC;QACzE,SAAS,CAAC,EAAE,OAAO,4BAA4B,EAAE,kBAAkB,CAAC;QACpE,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;KAClC,CAAC;CACF,GAAG,cAAc,CAuFjB;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAuBnE;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAStE;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAOxE;AAED,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,yEAAyE;QACzE,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;8EAEsE;QACtE,YAAY,CAAC,EAAE,oBAAoB,CAAC;KACpC,CAAC;CACF;AAED,MAAM,WAAW,oBAAoB;IACpC,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mEAAmE;IACnE,UAAU,EAAE,eAAe,CAAC;IAC5B,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACpC;;;OAGG;IACH,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,4BAA4B,CAC3C,IAAI,EAAE,oBAAoB,GACxB,yBAAyB,CA6C3B"}