@spinabot/brigade 1.1.0 → 1.2.0

package/dist/agents/channels/sdk.js

@@ -0,0 +1,274 @@
+/**
+ * ════════════════════════════════════════════════════════════════════════════
+ *  Brigade Channel SDK — the COMPLETE surface for authoring a channel
+ * ════════════════════════════════════════════════════════════════════════════
+ *
+ * One import for everything a new channel adapter (Slack, Discord, iMessage, …)
+ * needs: the CONTRACT it implements (BOTH the single-account `ChannelAdapter`
+ * AND the multi-account `ChannelPlugin`), the SHARED HELPERS every channel
+ * reuses (the inbound pipeline, the approval router, the last-channel pin), and
+ * the central capabilities (inline-button approvals, message actions, the
+ * durable token seal, the webhook HTTP route). The goal is that the NEXT channel
+ * — including a multi-account + webhook + native-commands channel like Discord —
+ * is built ENTIRELY on this barrel: no reaching across into `whatsapp/`,
+ * `../types.*`, `../inbound-pipeline`, `../approval-router`, `../manager`, or
+ * `../../extensions/` for a stray type or helper.
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  TWO AUTHORING PATHS
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ *   A. SINGLE-ACCOUNT adapter (`ChannelAdapter`) — one live connection per
+ *      gateway, started by the legacy `startChannels` manager. Simplest path;
+ *      implement `start/stop/sendText/…` and register via `b.channel(adapter)`.
+ *
+ *   B. MULTI-ACCOUNT plugin (`ChannelPlugin`) — run N accounts of the same
+ *      channel at once (`channels.<id>.accounts: [{ id, … }, …]`). You implement
+ *      the sub-adapters (`config`/`gateway`/`outbound`/`security`/`status`/
+ *      `actions`/`secrets`/`approvalCapability`), partition per-account runtime
+ *      state in a `Map<accountId, …>`, and drive each account's inbound through
+ *      the SHARED `runChannelInboundPipeline` so every account carries the
+ *      identical ACL + debounce + abort + approval surface. Telegram's
+ *      `plugin.ts` is the reference; mirror it.
+ *
+ * Most real channels ship BOTH: the `ChannelAdapter` is the per-connection
+ * worker, and the `ChannelPlugin` wraps `createXAdapter()` once per account.
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  HOW TO AUTHOR A CHANNEL — the 8-file skeleton
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ * Mirror the `telegram/` layout (the reference token-based channel):
+ *
+ *   channels/<id>/
+ *     ├─ module.ts          register: `defineModule({ id, register(b){ b.channel(createXAdapter()) } })`
+ *     ├─ adapter.ts         implement `ChannelAdapter` (id/label/start/stop/sendText/…)
+ *     ├─ plugin.ts          implement `ChannelPlugin` (multi-account: config/gateway/outbound/…)
+ *     ├─ connection.ts      the live transport (lazy-import the heavy SDK here)
+ *     ├─ account-config.ts  resolve per-account config + token (see secret seal below)
+ *     ├─ format.ts          markdown → the channel's native markup
+ *     ├─ inbound-extras.ts  normalize provider payloads → `InboundMessage` fields
+ *     ├─ command-menu.ts    map `buildBundledCommands(adapter)` → native `/`-menu (optional)
+ *     ├─ webhook.ts         build the inbound `HttpRoute` for push transport (optional)
+ *     ├─ media.ts           in/out media (run `validateOutboundMediaPath` on send)
+ *     └─ index.ts           re-export the public surface
+ *
+ *   plus tests alongside each (`*.test.ts`).
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  REGISTRATION
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ *   1. `module.ts` calls `b.channel(createXAdapter())` inside `defineModule`.
+ *   2. Add the module to the bundled module list (`extensions/modules/index.ts`).
+ *   3. Account config lives under `~/.brigade/channels/<id>/<accountId>/`.
+ *   4. Lazy-import the heavy transport SDK inside `connection.ts` (Baileys /
+ *      grammY style) so a non-X boot never pays for it.
+ *   5. Implement reconnect with `nextBackoffDelay({ attempt, initialMs, maxMs,
+ *      factor, jitter })` (do NOT hand-roll the curve) + a capped attempt count.
+ *   6. Run inbound through dedupe (`createDedupeCache`) and outbound media
+ *      through `validateOutboundMediaPath` before uploading bytes.
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  MULTI-ACCOUNT PLUGIN PATH (`ChannelPlugin`)
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ *   1. Declare `id` / `meta` / `capabilities` / `config` (required) plus the
+ *      sub-adapters you support (`gateway`/`outbound`/`security`/`status`/
+ *      `actions`/`secrets`/`approvalCapability`). Omit a slot to opt out; the
+ *      manager pre-checks `capabilities.<flag>` before calling an adapter.
+ *   2. `config.listAccountIds(cfg)` + `config.resolveAccount(cfg, id)` drive
+ *      multi-account discovery. Make the legacy single-account `ChannelAdapter`
+ *      STEP ASIDE when >1 account is configured (its `isConfigured` returns
+ *      false for the default account) so the two paths never double-start.
+ *   3. In `gateway.startAccount`, build a per-account pipeline with
+ *      `createInboundPipelineContext({ adapter, config, agentId, runTurn,
+ *      commandMap, parentAbort })` and feed each inbound through
+ *      `runChannelInboundPipeline(pipeline, msg)` (stamp `msg.accountId`).
+ *      Build the command map from `buildBundledCommands(adapter)`.
+ *   4. Register a PER-ACCOUNT approval dispatcher with
+ *      `registerChannelApprovalDispatcher(channelId, accountId, dispatcher)` on
+ *      start and `removeChannelApprovalDispatcher(channelId, accountId)` on stop,
+ *      so an exec-gate prompt raised by a turn on (channel, accountId) replies on
+ *      that same account — not the channel default.
+ *   5. Take `runTurn` from the gateway via `StartChannelsArgs["runTurn"]`.
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  WEBHOOK / PUSH TRANSPORT (`HttpRoute`)
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ *   For channels that receive updates via an inbound POST (Telegram webhook
+ *   mode, Slack Events API, …) instead of long-polling:
+ *     • Build an `HttpRoute` (the `HttpRoute` type is re-exported here) whose
+ *       handler verifies the provider's signature / secret header FIRST (before
+ *       parsing the body), then feeds the parsed update into the started
+ *       adapter's normalize+dedupe+dispatch path.
+ *     • Register it from `module.ts` via `b.httpRoute(route)`, gated on config so
+ *       a default polling install exposes NO inbound HTTP surface.
+ *     • Set `auth: "none"` ONLY when the provider authenticates via a signed
+ *       payload the handler verifies itself (the gateway can't present operator-
+ *       auth to a third-party webhook); otherwise use `auth: "operator"`.
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  NATIVE COMMAND MENU
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ *   Brigade owns the channel command set centrally (`buildBundledCommands(adapter)`
+ *   → `/help`, `/status`, `/allowlist`, `/agent`, `/agents`, `/whoami`, `/org`,
+ *   plus module-registered `ChannelCommand`s). A channel with a native `/`-menu
+ *   (Telegram `setMyCommands`, Discord application commands) maps that set onto
+ *   the provider's shape on connect — see `telegram/command-menu.ts`. Advertise
+ *   `capabilities.nativeCommands: true`.
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  OPTING INTO CENTRAL CAPABILITIES
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ *   • Inline-button approvals: set `adapter.approvalCapability.sendApprovalPrompt`
+ *     (render `buildApprovalCallbackButtons(approvalId)` as native buttons whose
+ *     `callback_data` is each button's `.data`). Deliver the press back as
+ *     `InboundMessage.callbackQuery` — the central pipeline decodes + resolves
+ *     it. Add `authorizeApprover` to refuse non-operator pressers.
+ *   • Message actions (edit / delete / react / pin): implement
+ *     `adapter.handleAction(...)` and advertise the matching `capabilities`
+ *     flags (`edit` / `unsend` / `reactions` / `reply`). The central
+ *     `message_action` tool pre-checks the flag before calling you.
+ *   • Outbound id: return `{ messageId }` from `sendText`/`sendMedia` so the
+ *     agent can reference "my last message" via `message_action`.
+ *   • Durable token: `connect_channel` seals tokens via `sealChannelToken`;
+ *     read yours back at start with `readSealedChannelToken("<id>")` as a token
+ *     source (survives a gateway reboot when the live env is gone).
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  ENUMERATION TESTS TO UPDATE when you add a channel-related agent tool
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ *   • `agents/tools/registry.test.ts`        — the sorted tool-name list + count
+ *   • `agents/session-wiring.test.ts`        — the brigade-tool list + counts
+ *   • `agents/tools/owner-only.test.ts`      — the customTools count + name list
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ *  DESIGN NOTE — RE-EXPORT, never RELOCATE
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ * Helpers like `chunkText` physically live where they were first written
+ * (`whatsapp/chunk.js`) and WhatsApp imports them directly. Moving a file would
+ * change WhatsApp's import and risk the one channel that works perfectly, so
+ * this barrel RE-EXPORTS from where things already are — it has zero runtime
+ * behaviour of its own. The codec + the durable-seal + the backoff helper DO
+ * live in `channels/` (they are channel-neutral by design) and are re-exported
+ * here as the canonical author-facing surface.
+ */
+/* ───────────────────────── contract: register ───────────────────────── */
+export { 
+/** Register a channel through the extension seam: `defineModule({ id, register(b){ b.channel(adapter) } })`. */
+defineModule, } from "../extensions/types.js";
+/* ───────────────────────── shared helper: outbound chunking ───────────────────────── */
+export { 
+/**
+ * Split a long outbound message into provider-safe chunks WITHOUT shredding
+ * code fences / paragraphs. Lives under `whatsapp/` for history; it is
+ * channel-agnostic (Telegram reuses it with `{ limit: 4096 }`). Re-exported
+ * here so new channels don't reach across into the WhatsApp folder.
+ */
+chunkText, } from "./whatsapp/chunk.js";
+/* ───────────────────────── shared helper: inbound dedupe ───────────────────────── */
+export { 
+/** Build a per-channel inbound dedupe cache (claim-once, LRU + TTL). */
+createDedupeCache, } from "./dedupe.js";
+/* ───────────────────────── shared helper: outbound media guard ───────────────────────── */
+export { 
+/**
+ * Refuse to ATTACH a local secret / system file on outbound media — the
+ * content-exfil guard every `sendMedia` path must run before uploading
+ * a local path's bytes to a conversation.
+ */
+validateOutboundMediaPath, } from "../../security/media-path-guard.js";
+/* ───────────────────────── shared helper: structured logger ───────────────────────── */
+export { 
+/** Named JSON subsystem logger — `createSubsystemLogger("channels/<id>")`. */
+createSubsystemLogger, } from "../../logging/subsystem-logger.js";
+/* ───────────────────────── shared helper: reconnect backoff ───────────────────────── */
+export { 
+/**
+ * Jittered exponential reconnect-delay helper shared by every channel.
+ * Pass the schedule ({ attempt, initialMs, maxMs, factor, jitter }); the
+ * arithmetic is WhatsApp's proven curve. WhatsApp + Telegram both delegate
+ * to it; a new channel should too instead of hand-rolling its own.
+ */
+nextBackoffDelay, } from "./backoff.js";
+/* ───────────────────────── central: inline-button approval codec ───────────────────────── */
+export { 
+/** Encode `{ approvalId, decision }` into a <=64-byte callback payload (undefined if oversized). */
+encodeApprovalCallback, 
+/** Decode a callback payload back to `{ approvalId, decision }` (null if not ours / malformed). */
+decodeApprovalCallback, 
+/** True iff a string fits the universal 64-byte callback-data budget. */
+fitsApprovalCallback, 
+/** Build the standard Allow once / Allow always / Deny buttons (label + encoded payload). */
+buildApprovalCallbackButtons, 
+/** The universal callback-data byte ceiling (Telegram's 64). */
+APPROVAL_CALLBACK_MAX_BYTES, } from "./approval-callback-codec.js";
+/* ───────────────────────── central: durable channel-token seal ───────────────────────── */
+export { 
+/** Durably seal a channel's token into the encrypted credential store (survives reboot). */
+sealChannelToken, 
+/** Read a channel's durably-sealed token (""→ none) at start time, no agent context needed. */
+readSealedChannelToken, 
+/** Provider key a channel's token is sealed under (`channel:<id>`). */
+channelSecretProvider, } from "./channel-secrets.js";
+/* ───────────────────────── pipeline: the shared inbound engine ───────────────────────── */
+export { 
+/**
+ * Run ONE inbound message end-to-end through the shared pipeline (media + reply
+ * note synthesis → access gate → mark-read → approval-callback + approval-reply
+ * intercept → abort triggers → channel command → 8-tier route → last-channel pin
+ * → optional debounce → dispatchTurn → reply). Never throws. Both the legacy
+ * manager and every multi-account plugin call THIS so the safety surface is
+ * identical on every channel.
+ */
+runChannelInboundPipeline, 
+/** Build a fresh per-channel-instance pipeline context (per account on the plugin path). */
+createInboundPipelineContext, 
+/**
+ * Build the bundled built-in channel commands (`/help`, `/status`, `/allowlist`,
+ * `/agent`, `/agents`, `/whoami`, `/org`) an operator can DM to admin the bot.
+ * Feed the result into your `commandMap` AND into a native command menu.
+ */
+buildBundledCommands, 
+/** Disambiguating lane key for inflight + pending maps ((adapter, account, conversation, thread)). */
+laneKey, } from "./inbound-pipeline.js";
+/* ───────────────────────── approvals: the channel approval router ───────────────────────── */
+export { 
+/**
+ * Register a (per-account) dispatcher so an exec-gate approval prompt raised by
+ * a channel-routed turn lands IN that conversation. Pass `(channelId, accountId,
+ * dispatcher)` on the multi-account path so each account routes to itself.
+ */
+registerChannelApprovalDispatcher, 
+/** Drop a channel's (per-account) dispatcher + deny its in-flight prompts on stop. */
+removeChannelApprovalDispatcher, 
+/** Send an approval prompt via the channel + register the pending entry (called by the bridge). */
+dispatchChannelApproval, 
+/** Intercept a yes/no TEXT reply as the answer to a pending approval for this peer. */
+tryConsumeChannelApprovalReply, 
+/** Intercept an inline-BUTTON press (callback_query) as the answer to a pending approval. */
+tryConsumeChannelApprovalCallback, 
+/** Cancel a pending approval by request id (e.g. on session abort). */
+cancelChannelApprovalById, 
+/** Diagnostic — list registered dispatcher keys. */
+listChannelApprovalDispatchers, 
+/** Diagnostic — snapshot of pending channel approvals. */
+listPendingChannelApprovals, } from "./approval-router.js";
+/* ───────────────────────── last-channel: the announce-target pin ───────────────────────── */
+export { 
+/**
+ * Pin THIS channel as the agent's most-recently-active (called by the pipeline
+ * on every admitted inbound). A cron's announce-delivery reads it as the
+ * last-resort target when no explicit channel was set. The pipeline already
+ * calls this for you; a channel only calls it directly for a bespoke surface.
+ */
+recordLastChannelForAgent, 
+/** Read the agent's last-recorded channel (undefined when no channel activity yet). */
+getLastChannelForAgent, } from "./last-channel.js";
+//# sourceMappingURL=sdk.js.map

package/dist/agents/channels/sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../../src/agents/channels/sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgKG;AAEH,4EAA4E;AAE5E,OAAO;AACN,gHAAgH;AAChH,YAAY,GACZ,MAAM,wBAAwB,CAAC;AA+DhC,0FAA0F;AAE1F,OAAO;AACN;;;;;GAKG;AACH,SAAS,GACT,MAAM,qBAAqB,CAAC;AAE7B,uFAAuF;AAEvF,OAAO;AACN,wEAAwE;AACxE,iBAAiB,GACjB,MAAM,aAAa,CAAC;AAGrB,6FAA6F;AAE7F,OAAO;AACN;;;;GAIG;AACH,yBAAyB,GACzB,MAAM,oCAAoC,CAAC;AAG5C,0FAA0F;AAE1F,OAAO;AACN,8EAA8E;AAC9E,qBAAqB,GACrB,MAAM,mCAAmC,CAAC;AAG3C,0FAA0F;AAE1F,OAAO;AACN;;;;;GAKG;AACH,gBAAgB,GAChB,MAAM,cAAc,CAAC;AAGtB,+FAA+F;AAE/F,OAAO;AACN,oGAAoG;AACpG,sBAAsB;AACtB,mGAAmG;AACnG,sBAAsB;AACtB,yEAAyE;AACzE,oBAAoB;AACpB,6FAA6F;AAC7F,4BAA4B;AAC5B,gEAAgE;AAChE,2BAA2B,GAC3B,MAAM,8BAA8B,CAAC;AAQtC,6FAA6F;AAE7F,OAAO;AACN,4FAA4F;AAC5F,gBAAgB;AAChB,+FAA+F;AAC/F,sBAAsB;AACtB,uEAAuE;AACvE,qBAAqB,GACrB,MAAM,sBAAsB,CAAC;AAsF9B,6FAA6F;AAE7F,OAAO;AACN;;;;;;;GAOG;AACH,yBAAyB;AACzB,4FAA4F;AAC5F,4BAA4B;AAC5B;;;;GAIG;AACH,oBAAoB;AACpB,sGAAsG;AACtG,OAAO,GACP,MAAM,uBAAuB,CAAC;AAY/B,gGAAgG;AAEhG,OAAO;AACN;;;;GAIG;AACH,iCAAiC;AACjC,sFAAsF;AACtF,+BAA+B;AAC/B,mGAAmG;AACnG,uBAAuB;AACvB,uFAAuF;AACvF,8BAA8B;AAC9B,6FAA6F;AAC7F,iCAAiC;AACjC,uEAAuE;AACvE,yBAAyB;AACzB,oDAAoD;AACpD,8BAA8B;AAC9B,0DAA0D;AAC1D,2BAA2B,GAC3B,MAAM,sBAAsB,CAAC;AA2B9B,+FAA+F;AAE/F,OAAO;AACN;;;;;GAKG;AACH,yBAAyB;AACzB,uFAAuF;AACvF,sBAAsB,GACtB,MAAM,mBAAmB,CAAC"}

package/dist/agents/channels/telegram/account-config.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Telegram config-shape helpers (single-account v1; multi-account aware shape).
+ *
+ * Brigade's Telegram config is TOKEN-based (no QR/OAuth pairing — the operator
+ * pastes a Bot API token from @BotFather). Two shapes are recognised so the
+ * surface lines up with WhatsApp's `account-config.ts`:
+ *
+ *   Legacy (single-account):
+ *     channels.telegram = { enabled: true, botToken: "123:ABC", verbose?: boolean }
+ *
+ *   Multi-account (later follow-up — the shape is honoured now, v1 ships one):
+ *     channels.telegram = {
+ *       enabled: true,
+ *       accounts: [
+ *         { id: "main", botToken: "111:AAA" },
+ *         { id: "ops",  botToken: "222:BBB" },
+ *       ],
+ *     }
+ *
+ * A legacy config with no `accounts[]` reads as `[{ id: "default" }]`.
+ *
+ * Token resolution: a value of the form `${VAR}` is resolved against
+ * `process.env[VAR]` (mirrors Brigade's config secret-ref convention, so a
+ * token never has to be committed as a literal). When no token is configured
+ * at all, the `TELEGRAM_BOT_TOKEN` environment variable is the last-resort
+ * fallback. NOTE: Brigade's config loader already resolves `${VAR}` leaves on
+ * read (`resolveSecretsInPlace`), so by the time the adapter reads config the
+ * ref is usually already expanded — the explicit resolution here is defensive
+ * for callers (CLI/tests) that read raw config and for the env fallback.
+ */
+import type { BrigadeConfig } from "../../../config/io.js";
+declare const CHANNEL_ID = "telegram";
+declare const DEFAULT_ACCOUNT_ID = "default";
+/** The env var consulted as a last-resort token fallback. */
+declare const TOKEN_ENV_VAR = "TELEGRAM_BOT_TOKEN";
+/** Resolved per-account info — what the adapter runtime reads. */
+export interface ResolvedTelegramAccount {
+    accountId: string;
+    enabled: boolean;
+    /** Bot API token, fully resolved (`${VAR}` + env fallback applied), or `""` when unset. */
+    botToken: string;
+    verbose: boolean;
+}
+/** Is the Telegram channel switched on at all (any shape)? */
+export declare function telegramChannelEnabled(cfg: BrigadeConfig): boolean;
+/** List configured account ids. Legacy single-account configs surface `["default"]`. */
+export declare function listTelegramAccountIds(cfg: BrigadeConfig): string[];
+/**
+ * Resolve the Bot API token for an account. Precedence:
+ *   1. The per-account `botToken` (multi-account shape), `${VAR}`-resolved.
+ *   2. The top-level `channels.telegram.botToken` (legacy shape), `${VAR}`-resolved.
+ *   3. The DURABLE sealed channel token (written by `connect_channel`) — this is
+ *      the source that survives a gateway reboot, when the live env + `${VAR}`
+ *      ref have evaporated.
+ *   4. The `TELEGRAM_BOT_TOKEN` env var (last-resort fallback).
+ * Returns `""` when no token can be resolved.
+ *
+ * Note the sealed token is consulted AFTER the config refs: an explicit config
+ * `${VAR}` / literal that resolves in THIS process wins (so a live env set by
+ * `connect_channel` is used immediately), and the durable seal is the fallback
+ * that keeps the channel authenticated across restarts.
+ */
+export declare function resolveTelegramBotToken(cfg: BrigadeConfig, accountId?: string | null, env?: NodeJS.ProcessEnv): string;
+/** Resolve a per-account view of the config (defaults + token resolution filled in). */
+export declare function resolveTelegramAccount(cfg: BrigadeConfig, accountId?: string | null, env?: NodeJS.ProcessEnv): ResolvedTelegramAccount;
+/** Resolved Telegram transport config (mode + webhook details). */
+export interface TelegramWebhookConfig {
+    /** `"polling"` (default) or `"webhook"`. */
+    mode: "polling" | "webhook";
+    /** Public base URL Telegram POSTs to (webhook mode). `""` when unset. */
+    url: string;
+    /** Gateway route path (default `/telegram/webhook`). */
+    path: string;
+    /** Secret token verified on the inbound webhook header. `""` when unset. */
+    secretToken: string;
+}
+/**
+ * Resolve the Telegram transport config. Defaults to `polling` (Brigade is
+ * local-first); `webhook` is opt-in via `channels.telegram.mode: "webhook"`.
+ * `${VAR}` refs in the secret token are env-resolved (it's a secret).
+ */
+export declare function telegramWebhookConfig(cfg: BrigadeConfig, env?: NodeJS.ProcessEnv): TelegramWebhookConfig;
+/** True when forum-topic auto-labeling is enabled (`channels.telegram.autoLabelTopics`). */
+export declare function telegramAutoLabelTopics(cfg: BrigadeConfig): boolean;
+/**
+ * Resolve the idle-thread-session TTL in ms, or `null` when unset / disabled.
+ * Accepts a number (ms) or a duration string (`"6h"`, `"30m"`, …). The cron
+ * session-reaper uses this to age out idle Telegram thread sessions.
+ */
+export declare function telegramThreadIdleTtlMs(cfg: BrigadeConfig): number | null;
+export { CHANNEL_ID as TELEGRAM_CHANNEL_ID, DEFAULT_ACCOUNT_ID as TELEGRAM_DEFAULT_ACCOUNT_ID, TOKEN_ENV_VAR as TELEGRAM_BOT_TOKEN_ENV_VAR, };
+//# sourceMappingURL=account-config.d.ts.map

package/dist/agents/channels/telegram/account-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-config.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/account-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,QAAA,MAAM,UAAU,aAAa,CAAC;AAC9B,QAAA,MAAM,kBAAkB,YAAY,CAAC;AAErC,6DAA6D;AAC7D,QAAA,MAAM,aAAa,uBAAuB,CAAC;AAwC3C,kEAAkE;AAClE,MAAM,WAAW,uBAAuB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CACjB;AAqBD,8DAA8D;AAC9D,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAElE;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAgBnE;AAeD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,aAAa,EAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,CAWR;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,CACrC,GAAG,EAAE,aAAa,EAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,uBAAuB,CAWzB;AAOD,mEAAmE;AACnE,MAAM,WAAW,qBAAqB;IACrC,4CAA4C;IAC5C,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;IAC5B,yEAAyE;IACzE,GAAG,EAAE,MAAM,CAAC;IACZ,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACpC,GAAG,EAAE,aAAa,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,qBAAqB,CAYvB;AAED,4FAA4F;AAC5F,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAEnE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAczE;AAED,OAAO,EACN,UAAU,IAAI,mBAAmB,EACjC,kBAAkB,IAAI,2BAA2B,EACjD,aAAa,IAAI,0BAA0B,GAC3C,CAAC"}

package/dist/agents/channels/telegram/account-config.js

@@ -0,0 +1,192 @@
+/**
+ * Telegram config-shape helpers (single-account v1; multi-account aware shape).
+ *
+ * Brigade's Telegram config is TOKEN-based (no QR/OAuth pairing — the operator
+ * pastes a Bot API token from @BotFather). Two shapes are recognised so the
+ * surface lines up with WhatsApp's `account-config.ts`:
+ *
+ *   Legacy (single-account):
+ *     channels.telegram = { enabled: true, botToken: "123:ABC", verbose?: boolean }
+ *
+ *   Multi-account (later follow-up — the shape is honoured now, v1 ships one):
+ *     channels.telegram = {
+ *       enabled: true,
+ *       accounts: [
+ *         { id: "main", botToken: "111:AAA" },
+ *         { id: "ops",  botToken: "222:BBB" },
+ *       ],
+ *     }
+ *
+ * A legacy config with no `accounts[]` reads as `[{ id: "default" }]`.
+ *
+ * Token resolution: a value of the form `${VAR}` is resolved against
+ * `process.env[VAR]` (mirrors Brigade's config secret-ref convention, so a
+ * token never has to be committed as a literal). When no token is configured
+ * at all, the `TELEGRAM_BOT_TOKEN` environment variable is the last-resort
+ * fallback. NOTE: Brigade's config loader already resolves `${VAR}` leaves on
+ * read (`resolveSecretsInPlace`), so by the time the adapter reads config the
+ * ref is usually already expanded — the explicit resolution here is defensive
+ * for callers (CLI/tests) that read raw config and for the env fallback.
+ */
+import { readSealedChannelToken } from "../channel-secrets.js";
+const CHANNEL_ID = "telegram";
+const DEFAULT_ACCOUNT_ID = "default";
+/** The env var consulted as a last-resort token fallback. */
+const TOKEN_ENV_VAR = "TELEGRAM_BOT_TOKEN";
+/** `${VAR}` secret-ref form — identical to `config/io.ts`'s SECRET_REF_PATTERN. */
+const SECRET_REF_PATTERN = /^\$\{([A-Z_][A-Z0-9_]*)\}$/;
+/** Read `channels.telegram` loosely (schema keeps it open). */
+function telegramChannelConfig(cfg) {
+    return cfg.channels?.[CHANNEL_ID];
+}
+/**
+ * Resolve a single token-ish string: a `${VAR}` ref expands against
+ * `process.env`; any other non-empty string passes through verbatim; empty /
+ * missing returns "".
+ */
+function resolveTokenRef(raw, env) {
+    if (typeof raw !== "string")
+        return "";
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return "";
+    const m = SECRET_REF_PATTERN.exec(trimmed);
+    if (m && m[1])
+        return (env[m[1]] ?? "").trim();
+    return trimmed;
+}
+/** Is the Telegram channel switched on at all (any shape)? */
+export function telegramChannelEnabled(cfg) {
+    return telegramChannelConfig(cfg)?.enabled === true;
+}
+/** List configured account ids. Legacy single-account configs surface `["default"]`. */
+export function listTelegramAccountIds(cfg) {
+    const slot = telegramChannelConfig(cfg);
+    if (!slot || slot.enabled !== true)
+        return [];
+    const accounts = Array.isArray(slot.accounts) ? slot.accounts : undefined;
+    if (!accounts || accounts.length === 0)
+        return [DEFAULT_ACCOUNT_ID];
+    const ids = [];
+    const seen = new Set();
+    for (const entry of accounts) {
+        const id = typeof entry?.id === "string" ? entry.id.trim() : "";
+        if (!id || seen.has(id))
+            continue;
+        seen.add(id);
+        ids.push(id);
+    }
+    // A half-typed `accounts:[]` still degrades to the default account so the
+    // channel isn't silently disabled.
+    return ids.length === 0 ? [DEFAULT_ACCOUNT_ID] : ids;
+}
+/** Look up the raw account entry from config (or null when missing). */
+function findAccountEntry(cfg, accountId) {
+    const slot = telegramChannelConfig(cfg);
+    if (!slot)
+        return null;
+    const accounts = Array.isArray(slot.accounts) ? slot.accounts : undefined;
+    if (!accounts)
+        return null;
+    for (const entry of accounts) {
+        const id = typeof entry?.id === "string" ? entry.id.trim() : "";
+        if (id === accountId)
+            return entry;
+    }
+    return null;
+}
+/**
+ * Resolve the Bot API token for an account. Precedence:
+ *   1. The per-account `botToken` (multi-account shape), `${VAR}`-resolved.
+ *   2. The top-level `channels.telegram.botToken` (legacy shape), `${VAR}`-resolved.
+ *   3. The DURABLE sealed channel token (written by `connect_channel`) — this is
+ *      the source that survives a gateway reboot, when the live env + `${VAR}`
+ *      ref have evaporated.
+ *   4. The `TELEGRAM_BOT_TOKEN` env var (last-resort fallback).
+ * Returns `""` when no token can be resolved.
+ *
+ * Note the sealed token is consulted AFTER the config refs: an explicit config
+ * `${VAR}` / literal that resolves in THIS process wins (so a live env set by
+ * `connect_channel` is used immediately), and the durable seal is the fallback
+ * that keeps the channel authenticated across restarts.
+ */
+export function resolveTelegramBotToken(cfg, accountId, env = process.env) {
+    const id = accountId?.trim() || DEFAULT_ACCOUNT_ID;
+    const slot = telegramChannelConfig(cfg);
+    const entry = findAccountEntry(cfg, id);
+    const perAccount = resolveTokenRef(entry?.botToken, env);
+    if (perAccount)
+        return perAccount;
+    const topLevel = resolveTokenRef(slot?.botToken, env);
+    if (topLevel)
+        return topLevel;
+    const sealed = readSealedChannelToken(CHANNEL_ID);
+    if (sealed)
+        return sealed;
+    return (env[TOKEN_ENV_VAR] ?? "").trim();
+}
+/** Resolve a per-account view of the config (defaults + token resolution filled in). */
+export function resolveTelegramAccount(cfg, accountId, env = process.env) {
+    const slot = telegramChannelConfig(cfg);
+    const id = accountId?.trim() || DEFAULT_ACCOUNT_ID;
+    const entry = findAccountEntry(cfg, id);
+    const enabled = entry?.enabled !== false && slot?.enabled === true;
+    return {
+        accountId: id,
+        enabled,
+        botToken: resolveTelegramBotToken(cfg, id, env),
+        verbose: slot?.verbose === true,
+    };
+}
+/* ───────────────────────── transport / lifecycle config ───────────────────────── */
+/** Default gateway path the webhook transport registers + points `setWebhook` at. */
+const DEFAULT_WEBHOOK_PATH = "/telegram/webhook";
+/**
+ * Resolve the Telegram transport config. Defaults to `polling` (Brigade is
+ * local-first); `webhook` is opt-in via `channels.telegram.mode: "webhook"`.
+ * `${VAR}` refs in the secret token are env-resolved (it's a secret).
+ */
+export function telegramWebhookConfig(cfg, env = process.env) {
+    const slot = telegramChannelConfig(cfg);
+    const rawMode = typeof slot?.mode === "string" ? slot.mode.trim().toLowerCase() : "";
+    const mode = rawMode === "webhook" ? "webhook" : "polling";
+    const wh = slot?.webhook ?? {};
+    const path = typeof wh.path === "string" && wh.path.trim() ? wh.path.trim() : DEFAULT_WEBHOOK_PATH;
+    return {
+        mode,
+        url: typeof wh.url === "string" ? wh.url.trim() : "",
+        path: path.startsWith("/") ? path : `/${path}`,
+        secretToken: resolveTokenRef(wh.secretToken, env),
+    };
+}
+/** True when forum-topic auto-labeling is enabled (`channels.telegram.autoLabelTopics`). */
+export function telegramAutoLabelTopics(cfg) {
+    return telegramChannelConfig(cfg)?.autoLabelTopics === true;
+}
+/**
+ * Resolve the idle-thread-session TTL in ms, or `null` when unset / disabled.
+ * Accepts a number (ms) or a duration string (`"6h"`, `"30m"`, …). The cron
+ * session-reaper uses this to age out idle Telegram thread sessions.
+ */
+export function telegramThreadIdleTtlMs(cfg) {
+    const raw = telegramChannelConfig(cfg)?.threadIdleTtlMs;
+    if (typeof raw === "number")
+        return raw > 0 ? raw : null;
+    if (typeof raw !== "string")
+        return null;
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return null;
+    const m = /^(\d+)\s*(s|m|h|d|w)?$/i.exec(trimmed);
+    if (!m)
+        return null;
+    const n = Number(m[1]);
+    if (!Number.isFinite(n) || n <= 0)
+        return null;
+    const unit = (m[2] ?? "ms").toLowerCase();
+    const mult = { s: 1_000, m: 60_000, h: 3_600_000, d: 86_400_000, w: 604_800_000, ms: 1 };
+    const factor = mult[unit] ?? 1;
+    return n * factor;
+}
+export { CHANNEL_ID as TELEGRAM_CHANNEL_ID, DEFAULT_ACCOUNT_ID as TELEGRAM_DEFAULT_ACCOUNT_ID, TOKEN_ENV_VAR as TELEGRAM_BOT_TOKEN_ENV_VAR, };
+//# sourceMappingURL=account-config.js.map

package/dist/agents/channels/telegram/account-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-config.js","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/account-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAErC,6DAA6D;AAC7D,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AA8CxD,+DAA+D;AAC/D,SAAS,qBAAqB,CAAC,GAAkB;IAChD,OAAQ,GAAgE,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAuB,EAAE,GAAsB;IACvE,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,sBAAsB,CAAC,GAAkB;IACxD,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CAAC,GAAkB;IACxD,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,OAAO,KAAK,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,mCAAmC;IACnC,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACtD,CAAC;AAED,wEAAwE;AACxE,SAAS,gBAAgB,CAAC,GAAkB,EAAE,SAAiB;IAC9D,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,OAAO,KAAK,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CACtC,GAAkB,EAClB,SAAyB,EACzB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC;IACnD,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CACrC,GAAkB,EAClB,SAAyB,EACzB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC;IACnD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACnE,OAAO;QACN,SAAS,EAAE,EAAE;QACb,OAAO;QACP,QAAQ,EAAE,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI;KAC/B,CAAC;AACH,CAAC;AAED,sFAAsF;AAEtF,qFAAqF;AACrF,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAcjD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACpC,GAAkB,EAClB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,IAAI,GAA0B,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACnG,OAAO;QACN,IAAI;QACJ,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QACpD,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;QAC9C,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC;KACjD,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,uBAAuB,CAAC,GAAkB;IACzD,OAAO,qBAAqB,CAAC,GAAG,CAAC,EAAE,eAAe,KAAK,IAAI,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAkB;IACzD,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,IAAI,GAA2B,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACjH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,MAAM,CAAC;AACnB,CAAC;AAED,OAAO,EACN,UAAU,IAAI,mBAAmB,EACjC,kBAAkB,IAAI,2BAA2B,EACjD,aAAa,IAAI,0BAA0B,GAC3C,CAAC"}