@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/agentchannel/conversation.d.ts

@@ -0,0 +1,45 @@
+/**
+ * ChannelConversation controllers — ports pkg/domain/agentchannel/
+ * controller/conversation.go: the conversation surface beside the channel
+ * messaging controllers, on the same runtime side of the resource/runtime
+ * split. Stateless on the storing edition — no store.
+ *
+ * The whole surface is posture-split at REGISTRATION (channel-runtime.ts,
+ * C3 ruling Q1): with no ChannelRuntime composed the storing bodies below
+ * serve byte-identically to before the seam existed; with one composed,
+ * EVERY method delegates — on the serving edition even the discovery
+ * reads are real store-backed lookups (truthful emptiness is an OUTCOME
+ * there, not a stub), and the uniform-miss reads must cover every cause
+ * identically, which only the runtime can do.
+ *
+ * Storing posture — queries answer EMPTY and commands refuse
+ * FailedPrecondition, the two established postures side by side
+ * (channel-conversations DD-003 D-f): a conversation list is a
+ * discovery-shaped read whose truthful storing answer is "none"
+ * (conversations are created by the serving channel runtime, which does
+ * not run here), while every command asks to DO a cloud-only thing. The
+ * single-row reads cannot answer "empty" — getConversation answers
+ * NotFound unconditionally, and getMediaDownloadUrl answers the
+ * byte-pinned uniform miss (raw copy — the "%s not found: %s" helper
+ * shape cannot say it). As in message.ts, there is deliberately NO
+ * load-then-NOT_FOUND: probing local stores for conversations this
+ * posture never materializes would create an edition divergence, not
+ * prevent one.
+ *
+ * Input validation is Layer-1: the transport interceptor chain validates
+ * every request (matching Go's explicit SharedValidator calls), so the
+ * INVALID_ARGUMENT contract holds before every refusal AND before every
+ * delegation.
+ *
+ * Proven by agentchannel.conformance.test.ts (CONFORMANCE_TARGET=local)
+ * and __tests__/agentchannel.test.ts.
+ */
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { ChannelRuntime } from "./channel-runtime.js";
+/**
+ * Registers both channel-conversation services on the router, in the
+ * posture the composition declares: storing bodies with no runtime,
+ * whole-method delegation with one.
+ */
+export declare function registerChannelConversationServices(router: ConnectRouter, channelRuntime: ChannelRuntime | undefined): void;
+//# sourceMappingURL=conversation.d.ts.map

package/dist/domain/agentchannel/conversation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../../src/domain/agentchannel/conversation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAqBzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAM3D;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,aAAa,EACrB,cAAc,EAAE,cAAc,GAAG,SAAS,GACzC,IAAI,CA2EN"}

package/dist/domain/agentchannel/conversation.js

@@ -0,0 +1,69 @@
+import { create } from "@bufbuild/protobuf";
+import { Code, ConnectError } from "@connectrpc/connect";
+import { ChannelConversationCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/conversation_command_pb";
+import { ChannelConversationQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/conversation_query_pb";
+import { ChannelConversationListSchema, ConversationTimelineSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/conversation_io_pb";
+import { failedPreconditionError, notFoundError, } from "../../pipeline/errors.js";
+import { callerIdentityOf } from "../../pipeline/interceptors/auth.js";
+import { CONVERSATION_PARTICIPATION_UNAVAILABLE_MESSAGE, NO_DOWNLOADABLE_MEDIA_MESSAGE, } from "./constants.js";
+/**
+ * Registers both channel-conversation services on the router, in the
+ * posture the composition declares: storing bodies with no runtime,
+ * whole-method delegation with one.
+ */
+export function registerChannelConversationServices(router, channelRuntime) {
+    if (channelRuntime === undefined) {
+        router.service(ChannelConversationQueryController, {
+            // Discovery-shaped reads answer truthful emptiness.
+            listConversations: () => create(ChannelConversationListSchema),
+            getTimeline: () => create(ConversationTimelineSchema),
+            // Single-row reads answer the uniform miss, with no local probing.
+            getConversation: (input) => {
+                throw notFoundError("channel conversation", input.conversationKey);
+            },
+            getMediaDownloadUrl: () => {
+                // Byte-identical with the serving handler's uniform miss (which
+                // covers every cause the same way so a prober cannot learn which
+                // items exist) — a raw ConnectError because notFoundError's
+                // "%s not found: %s" shape cannot express this copy.
+                throw new ConnectError(NO_DOWNLOADABLE_MEDIA_MESSAGE, Code.NotFound);
+            },
+        });
+        router.service(ChannelConversationCommandController, {
+            // Every command asks to DO a cloud-only thing: staff replies ride the
+            // outbound delivery lane; take-over/hand-back/attention are the
+            // participation state machine; escalation is ingest — all cloud-only.
+            reply: () => {
+                throw failedPreconditionError(CONVERSATION_PARTICIPATION_UNAVAILABLE_MESSAGE);
+            },
+            takeOver: () => {
+                throw failedPreconditionError(CONVERSATION_PARTICIPATION_UNAVAILABLE_MESSAGE);
+            },
+            handBack: () => {
+                throw failedPreconditionError(CONVERSATION_PARTICIPATION_UNAVAILABLE_MESSAGE);
+            },
+            clearAttention: () => {
+                throw failedPreconditionError(CONVERSATION_PARTICIPATION_UNAVAILABLE_MESSAGE);
+            },
+            escalate: () => {
+                throw failedPreconditionError(CONVERSATION_PARTICIPATION_UNAVAILABLE_MESSAGE);
+            },
+        });
+        return;
+    }
+    const { conversations } = channelRuntime;
+    router.service(ChannelConversationQueryController, {
+        listConversations: (input, ctx) => conversations.listConversations(input, callerIdentityOf(ctx)),
+        getConversation: (input, ctx) => conversations.getConversation(input, callerIdentityOf(ctx)),
+        getTimeline: (input, ctx) => conversations.getTimeline(input, callerIdentityOf(ctx)),
+        getMediaDownloadUrl: (input, ctx) => conversations.getMediaDownloadUrl(input, callerIdentityOf(ctx)),
+    });
+    router.service(ChannelConversationCommandController, {
+        reply: (input, ctx) => conversations.reply(input, callerIdentityOf(ctx)),
+        takeOver: (input, ctx) => conversations.takeOver(input, callerIdentityOf(ctx)),
+        handBack: (input, ctx) => conversations.handBack(input, callerIdentityOf(ctx)),
+        clearAttention: (input, ctx) => conversations.clearAttention(input, callerIdentityOf(ctx)),
+        escalate: (input, ctx) => conversations.escalate(input, callerIdentityOf(ctx)),
+    });
+}
+//# sourceMappingURL=conversation.js.map

package/dist/domain/agentchannel/conversation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.js","sourceRoot":"","sources":["../../../src/domain/agentchannel/conversation.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,4EAA4E,CAAC;AAClI,OAAO,EAAE,kCAAkC,EAAE,MAAM,0EAA0E,CAAC;AAC9H,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,uEAAuE,CAAC;AAO/E,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,OAAO,EACL,8CAA8C,EAC9C,6BAA6B,GAC9B,MAAM,gBAAgB,CAAC;AAExB;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAAqB,EACrB,cAA0C;IAE1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,kCAAkC,EAAE;YACjD,oDAAoD;YACpD,iBAAiB,EAAE,GAA4B,EAAE,CAC/C,MAAM,CAAC,6BAA6B,CAAC;YACvC,WAAW,EAAE,GAAyB,EAAE,CACtC,MAAM,CAAC,0BAA0B,CAAC;YACpC,mEAAmE;YACnE,eAAe,EAAE,CAAC,KAAkC,EAAE,EAAE;gBACtD,MAAM,aAAa,CAAC,sBAAsB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;YACrE,CAAC;YACD,mBAAmB,EAAE,GAAG,EAAE;gBACxB,gEAAgE;gBAChE,iEAAiE;gBACjE,4DAA4D;gBAC5D,qDAAqD;gBACrD,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvE,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE;YACnD,sEAAsE;YACtE,gEAAgE;YAChE,sEAAsE;YACtE,KAAK,EAAE,GAAG,EAAE;gBACV,MAAM,uBAAuB,CAC3B,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,QAAQ,EAAE,GAAG,EAAE;gBACb,MAAM,uBAAuB,CAC3B,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,QAAQ,EAAE,GAAG,EAAE;gBACb,MAAM,uBAAuB,CAC3B,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,uBAAuB,CAC3B,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,QAAQ,EAAE,GAAG,EAAE;gBACb,MAAM,uBAAuB,CAC3B,8CAA8C,CAC/C,CAAC;YACJ,CAAC;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC;IACzC,MAAM,CAAC,OAAO,CAAC,kCAAkC,EAAE;QACjD,iBAAiB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAChC,aAAa,CAAC,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC/D,eAAe,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAC9B,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7D,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAC1B,aAAa,CAAC,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACzD,mBAAmB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAClC,aAAa,CAAC,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;KAClE,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE;QACnD,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxE,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CACvB,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtD,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CACvB,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtD,cAAc,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAC7B,aAAa,CAAC,cAAc,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC5D,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CACvB,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;KACvD,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/agentchannel/message.d.ts

@@ -0,0 +1,48 @@
+/**
+ * ChannelMessage controllers — ports pkg/domain/agentchannel/controller/
+ * message.go: the runtime messaging surface beside the AgentChannel
+ * resource controllers, kept off the resource CRUD surface. Stateless on
+ * the storing edition — no store.
+ *
+ * The whole surface is posture-split at REGISTRATION (channel-runtime.ts,
+ * C3 ruling Q1): with no ChannelRuntime composed the storing bodies below
+ * serve byte-identically to before the seam existed; with one composed,
+ * EVERY method delegates — the driver owns runtime state and its own
+ * error semantics, including the fail-closed arms this module's storing
+ * bodies deliberately do not probe for (see below). Tail-end delegation
+ * would force the storing refusals to run first and break exactly those
+ * semantics, which is why the split is per-service, not per-line.
+ *
+ * Storing posture — both command-shaped RPCs are cloud-only runtime and
+ * refuse with FailedPrecondition. Unlike the install refusal
+ * (controller.ts), there is deliberately NO load-then-NOT_FOUND here: the
+ * serving send handler fails closed with PERMISSION_DENIED for an unknown
+ * channel (DD-002 D4's error table, no existence leak), so probing the
+ * store first would CREATE an edition divergence rather than prevent one.
+ *
+ * listMessagingChannels answers an EMPTY list — a deliberate divergence
+ * from its refusing siblings (proactive-messaging DD-006 D3): it is a
+ * capability-DISCOVERY read the runner issues on every agent execution to
+ * decide whether to attach the send_channel_message tool. The truthful
+ * storing answer is "none", and an expected-error path in that hot loop
+ * would be noise; the empty list produces the identical, honest outcome.
+ * (The serving edition resolves this read from the caller's agent session
+ * and refuses bare direct calls — the two-armed conformance pin.)
+ *
+ * Input validation is Layer-1: the transport interceptor chain validates
+ * every request (matching Go's explicit SharedValidator calls), so the
+ * INVALID_ARGUMENT contract holds before every refusal AND before every
+ * delegation.
+ *
+ * Proven by agentchannel.conformance.test.ts (CONFORMANCE_TARGET=local)
+ * and __tests__/agentchannel.test.ts.
+ */
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { ChannelRuntime } from "./channel-runtime.js";
+/**
+ * Registers both channel-message services on the router (routes stage),
+ * in the posture the composition declares: storing bodies with no
+ * runtime, whole-method delegation with one.
+ */
+export declare function registerChannelMessageServices(router: ConnectRouter, channelRuntime: ChannelRuntime | undefined): void;
+//# sourceMappingURL=message.d.ts.map

package/dist/domain/agentchannel/message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../../src/domain/agentchannel/message.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,aAAa,EACrB,cAAc,EAAE,cAAc,GAAG,SAAS,GACzC,IAAI,CA+BN"}

package/dist/domain/agentchannel/message.js

@@ -0,0 +1,40 @@
+import { create } from "@bufbuild/protobuf";
+import { ChannelMessageCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/message_command_pb";
+import { ChannelMessageQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/message_query_pb";
+import { MessagingChannelsSchema } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/message_io_pb";
+import { failedPreconditionError } from "../../pipeline/errors.js";
+import { callerIdentityOf } from "../../pipeline/interceptors/auth.js";
+import { PROACTIVE_MESSAGING_UNAVAILABLE_MESSAGE } from "./constants.js";
+/**
+ * Registers both channel-message services on the router (routes stage),
+ * in the posture the composition declares: storing bodies with no
+ * runtime, whole-method delegation with one.
+ */
+export function registerChannelMessageServices(router, channelRuntime) {
+    if (channelRuntime === undefined) {
+        router.service(ChannelMessageCommandController, {
+            // Business-initiated channel messaging is cloud-only runtime.
+            sendMessage: () => {
+                throw failedPreconditionError(PROACTIVE_MESSAGING_UNAVAILABLE_MESSAGE);
+            },
+        });
+        router.service(ChannelMessageQueryController, {
+            // Provider registry reads are cloud-only runtime; consumers degrade
+            // to honest absence (no template section, typed console error state).
+            listTemplates: () => {
+                throw failedPreconditionError(PROACTIVE_MESSAGING_UNAVAILABLE_MESSAGE);
+            },
+            listMessagingChannels: () => create(MessagingChannelsSchema),
+        });
+        return;
+    }
+    const { messaging } = channelRuntime;
+    router.service(ChannelMessageCommandController, {
+        sendMessage: (input, ctx) => messaging.sendMessage(input, callerIdentityOf(ctx)),
+    });
+    router.service(ChannelMessageQueryController, {
+        listTemplates: (input, ctx) => messaging.listTemplates(input, callerIdentityOf(ctx)),
+        listMessagingChannels: (input, ctx) => messaging.listMessagingChannels(input, callerIdentityOf(ctx)),
+    });
+}
+//# sourceMappingURL=message.js.map

package/dist/domain/agentchannel/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../../src/domain/agentchannel/message.ts"],"names":[],"mappings":"AAwCA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,+BAA+B,EAAE,MAAM,uEAAuE,CAAC;AACxH,OAAO,EAAE,6BAA6B,EAAE,MAAM,qEAAqE,CAAC;AACpH,OAAO,EAAE,uBAAuB,EAAE,MAAM,kEAAkE,CAAC;AAG3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,OAAO,EAAE,uCAAuC,EAAE,MAAM,gBAAgB,CAAC;AAEzE;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,MAAqB,EACrB,cAA0C;IAE1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,+BAA+B,EAAE;YAC9C,8DAA8D;YAC9D,WAAW,EAAE,GAAG,EAAE;gBAChB,MAAM,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;YACzE,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;YAC5C,oEAAoE;YACpE,sEAAsE;YACtE,aAAa,EAAE,GAAG,EAAE;gBAClB,MAAM,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;YACzE,CAAC;YACD,qBAAqB,EAAE,GAAsB,EAAE,CAC7C,MAAM,CAAC,uBAAuB,CAAC;SAClC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC;IACrC,MAAM,CAAC,OAAO,CAAC,+BAA+B,EAAE;QAC9C,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAC1B,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;KACtD,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;QAC5C,aAAa,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAC5B,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACvD,qBAAqB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CACpC,SAAS,CAAC,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;KAChE,CAAC,CAAC;AACL,CAAC"}

package/dist/domain/agentchannel/steps.d.ts

@@ -0,0 +1,79 @@
+import type { DescMessage } from "@bufbuild/protobuf";
+import { AgentChannelSchema } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/api_pb";
+import type { AgentChannelSpec } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/spec_pb";
+import type { PipelineStep } from "../../pipeline/pipeline.js";
+import type { Store } from "../../store/interface.js";
+import type { ModelCatalogProvider } from "../workflow/registry/model-catalog-provider.js";
+import type { ChannelRuntime } from "./channel-runtime.js";
+type AgentChannelDesc = typeof AgentChannelSchema;
+/**
+ * ResolveChannelDefaults — Go resolveChannelDefaultsStep, the cloud
+ * AgentChannelDefaultsResolver mirror whose error contracts this step
+ * replicates byte-identically:
+ *   1. Requires metadata.org (billing + credentials org, never inferred).
+ *   2. Requires spec.agent_ref.slug; normalizes agent_ref.org (empty
+ *      means same-org).
+ *   3. Enforces the same-org invariant BEFORE the agent load, so a
+ *      cross-org request cannot probe another org's slugs through this
+ *      path.
+ *   4. Validates the model pin and the WhatsApp BYO app_ref rules.
+ *   5. Loads the referenced agent — a nonexistent agent is refused with
+ *      the same NOT_FOUND a direct agent lookup would produce (T09).
+ *
+ * Deliberately NO slug default from the agent (unlike the share's
+ * canonical-slug rule): channels are N-per-agent across providers, so no
+ * single channel is "the" canonical one. Resolution is idempotent, so the
+ * apply pipeline running it before the create pipeline re-runs it is
+ * harmless.
+ */
+export declare function newResolveChannelDefaultsStep(store: Store, registry: ModelCatalogProvider, channelRuntime: ChannelRuntime | undefined): PipelineStep<AgentChannelDesc>;
+/**
+ * InitInstallState — Go initInstallStateStep: writes
+ * status.install_state = pending_install; the channel exists but serves
+ * no traffic until the provider install completes — which in this edition
+ * never happens (the §0-b refusal is the only install surface).
+ *
+ * Runs AFTER BuildNewState, which clears client-provided status — the
+ * install state is system-managed and must survive that wipe, exactly
+ * like the audit fields (the agentshare StampAgentPin positioning).
+ */
+export declare function newInitInstallStateStep(): PipelineStep<AgentChannelDesc>;
+/**
+ * The manifest vocabulary for the channel's provider arm — Go
+ * providerFieldName resolves the populated oneof member's PROTO field
+ * name through reflection (what users declared in YAML), and that name is
+ * interpolated into byte-pinned error copy. protobuf-es surfaces the
+ * arm's camelCased localName as the oneof `case`, which coincides with
+ * the proto name for `slack`/`whatsapp` but would diverge for a future
+ * snake_case arm (e.g. `ms_teams` → case "msTeams") — so the proto name
+ * is resolved through the schema descriptor, not read off the case.
+ * Exported for the unit pin (Go TestProviderFieldName).
+ */
+export declare function providerFieldName(spec: AgentChannelSpec | undefined): string;
+/**
+ * ValidateChannelUpdate — Go validateChannelUpdateStep: spec.agent_ref
+ * must keep referencing the same agent; the provider arm must not change
+ * (install state, credentials, and delivery records are all
+ * provider-shaped); the model pin is re-validated; then the app_ref rules
+ * (validateAppRefUpdate). Runs after LoadExisting. metadata.slug/org and
+ * status (install facts, credentials reference) need no step — the
+ * generic BuildUpdateState preserves them wholesale.
+ */
+export declare function newValidateChannelUpdateStep(registry: ModelCatalogProvider, channelRuntime: ChannelRuntime | undefined): PipelineStep<AgentChannelDesc>;
+/**
+ * TeardownChannelRuntime — the serving runtime's delete-time cascade
+ * (channel-runtime.ts: credentials environment, OAuth grant, pending
+ * deliveries). Spliced into the delete chain ONLY when a runtime is
+ * composed, after LoadExistingForDelete and before DeleteResource —
+ * dependent runtime state dies before the row (the cloud#425 ordering
+ * family), and a thrown teardown error leaves the row for an idempotent
+ * retry. The storing edition's delete chain is byte-identical to before
+ * this seam existed.
+ *
+ * Generic over the chain desc: the delete chain is typed on the delete
+ * INPUT (AgentChannelId), and this step reads the loaded resource from
+ * EXISTING_RESOURCE_KEY exactly as the controller's post-chain read does.
+ */
+export declare function newTeardownChannelRuntimeStep<Desc extends DescMessage>(channelRuntime: ChannelRuntime): PipelineStep<Desc>;
+export {};
+//# sourceMappingURL=steps.d.ts.map

package/dist/domain/agentchannel/steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.d.ts","sourceRoot":"","sources":["../../../src/domain/agentchannel/steps.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2DAA2D,CAAC;AAG/F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4DAA4D,CAAC;AAcnG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAI/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAY3D,KAAK,gBAAgB,GAAG,OAAO,kBAAkB,CAAC;AA4BlD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,oBAAoB,EAC9B,cAAc,EAAE,cAAc,GAAG,SAAS,GACzC,YAAY,CAAC,gBAAgB,CAAC,CAwEhC;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAUxE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAS5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,oBAAoB,EAC9B,cAAc,EAAE,cAAc,GAAG,SAAS,GACzC,YAAY,CAAC,gBAAgB,CAAC,CAyDhC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,SAAS,WAAW,EACpE,cAAc,EAAE,cAAc,GAC7B,YAAY,CAAC,IAAI,CAAC,CAgBpB"}

package/dist/domain/agentchannel/steps.js

@@ -0,0 +1,264 @@
+/**
+ * AgentChannel domain steps — ports pkg/domain/agentchannel/controller/
+ * steps.go: channel defaults with the anti-probing ordering (same-org
+ * invariant BEFORE the agent load), the write-time model-pin existence
+ * rule (stigmer/stigmer#774), the WhatsApp BYO app_ref rules (DD-WA-2 /
+ * T04 item 2), the install-state stamp, and the update immutability
+ * rules.
+ *
+ * Proven by agentchannel.conformance.test.ts (CONFORMANCE_TARGET=local)
+ * and __tests__/agentchannel.test.ts.
+ */
+import { create } from "@bufbuild/protobuf";
+import { AgentChannelSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/spec_pb";
+import { AgentChannelInstallState, AgentChannelStatusSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/status_pb";
+import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { failedPreconditionError, internalError, invalidArgumentError, notFoundError, } from "../../pipeline/errors.js";
+import { findResourceBySlug } from "../../pipeline/steps/helpers.js";
+import { EXISTING_RESOURCE_KEY } from "../../pipeline/steps/load-existing.js";
+import { unknownModelPinRefusal } from "../workflow/registry/pin-validation.js";
+import { AGENT_REF_SLUG_REQUIRED_MESSAGE, APP_REF_FROZEN_WHILE_INSTALLED_MESSAGE, APP_REF_REQUIRED_FOR_WHATSAPP_MESSAGE, APP_REF_SAME_ORG_MESSAGE, ORG_REQUIRED_MESSAGE, agentRefImmutableMessage, providerImmutableMessage, sameOrgInvariantMessage, } from "./constants.js";
+/**
+ * The write-time model-pin EXISTENCE rule (stigmer/stigmer#774) on a
+ * channel's run_config — Go validateChannelModelPin: a typo'd pin used to
+ * ride through opaquely and silently run (and bill) as Auto wherever the
+ * channel serves. Validated against EVERY registry harness section (the
+ * "" harness mode) because this edition stores channel specs without a
+ * serving runtime (the DD-015 divergence posture). Go reads a
+ * package-level registry; here the composed ModelCatalogProvider (DD-008,
+ * workflow-family DD-A) is passed explicitly. Shared by create
+ * (ResolveChannelDefaults) and update (ValidateChannelUpdate).
+ */
+function validateChannelModelPin(registry, spec) {
+    const reason = unknownModelPinRefusal(registry, "spec.run_config.model_name", "", spec?.runConfig?.modelName ?? "");
+    if (reason !== "") {
+        throw invalidArgumentError(reason);
+    }
+}
+/**
+ * ResolveChannelDefaults — Go resolveChannelDefaultsStep, the cloud
+ * AgentChannelDefaultsResolver mirror whose error contracts this step
+ * replicates byte-identically:
+ *   1. Requires metadata.org (billing + credentials org, never inferred).
+ *   2. Requires spec.agent_ref.slug; normalizes agent_ref.org (empty
+ *      means same-org).
+ *   3. Enforces the same-org invariant BEFORE the agent load, so a
+ *      cross-org request cannot probe another org's slugs through this
+ *      path.
+ *   4. Validates the model pin and the WhatsApp BYO app_ref rules.
+ *   5. Loads the referenced agent — a nonexistent agent is refused with
+ *      the same NOT_FOUND a direct agent lookup would produce (T09).
+ *
+ * Deliberately NO slug default from the agent (unlike the share's
+ * canonical-slug rule): channels are N-per-agent across providers, so no
+ * single channel is "the" canonical one. Resolution is idempotent, so the
+ * apply pipeline running it before the create pipeline re-runs it is
+ * harmless.
+ */
+export function newResolveChannelDefaultsStep(store, registry, channelRuntime) {
+    return {
+        name: "ResolveChannelDefaults",
+        async execute(ctx) {
+            const channel = ctx.newState;
+            const metadata = channel.metadata;
+            if ((metadata?.org ?? "") === "") {
+                throw invalidArgumentError(ORG_REQUIRED_MESSAGE);
+            }
+            const agentRef = channel.spec?.agentRef;
+            if ((agentRef?.slug ?? "") === "") {
+                throw invalidArgumentError(AGENT_REF_SLUG_REQUIRED_MESSAGE);
+            }
+            const refOrg = agentRef.org !== "" ? agentRef.org : metadata.org;
+            if (refOrg !== metadata.org) {
+                throw failedPreconditionError(sameOrgInvariantMessage(refOrg));
+            }
+            validateChannelModelPin(registry, channel.spec);
+            const appRef = channel.spec?.appRef;
+            const isWhatsApp = channel.spec?.providerConfig.case === "whatsapp";
+            if (isWhatsApp && (appRef?.slug ?? "") === "") {
+                throw invalidArgumentError(APP_REF_REQUIRED_FOR_WHATSAPP_MESSAGE);
+            }
+            // The BYO app must be the channel's own org's; normalized and
+            // checked before the agent load for the same no-probing reason.
+            // Deliberately NO existence or provider-match check: like
+            // environment_refs, enforcement lives at resolution time (the cloud
+            // install flow fails closed; OSS has no install flow).
+            if ((appRef?.slug ?? "") !== "") {
+                const appRefOrg = appRef.org !== "" ? appRef.org : metadata.org;
+                if (appRefOrg !== metadata.org) {
+                    throw failedPreconditionError(APP_REF_SAME_ORG_MESSAGE);
+                }
+                appRef.org = appRefOrg;
+            }
+            let agent;
+            try {
+                agent = await findResourceBySlug(store, ApiResourceKind.agent, AgentSchema, agentRef.slug, refOrg);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list agent resources");
+            }
+            if (agent === undefined) {
+                // Byte-identical with the direct agent lookup's refusal (T09).
+                throw notFoundError("Agent", agentRef.slug);
+            }
+            agentRef.org = refOrg;
+            // Write-time constraints only a serving runtime can state (the
+            // pin-REQUIRED rule and its successors — channel-runtime.ts).
+            // AFTER every edition-neutral rule so a composed runtime never
+            // changes their order or copy; absent runtime = the storing
+            // edition's posture, unchanged.
+            if (channelRuntime !== undefined) {
+                await channelRuntime.enforceWriteConstraints(ctx.newState);
+            }
+        },
+    };
+}
+/**
+ * InitInstallState — Go initInstallStateStep: writes
+ * status.install_state = pending_install; the channel exists but serves
+ * no traffic until the provider install completes — which in this edition
+ * never happens (the §0-b refusal is the only install surface).
+ *
+ * Runs AFTER BuildNewState, which clears client-provided status — the
+ * install state is system-managed and must survive that wipe, exactly
+ * like the audit fields (the agentshare StampAgentPin positioning).
+ */
+export function newInitInstallStateStep() {
+    return {
+        name: "InitInstallState",
+        execute(ctx) {
+            const channel = ctx.newState;
+            const status = channel.status ?? create(AgentChannelStatusSchema);
+            status.installState = AgentChannelInstallState.pending_install;
+            channel.status = status;
+        },
+    };
+}
+/**
+ * The manifest vocabulary for the channel's provider arm — Go
+ * providerFieldName resolves the populated oneof member's PROTO field
+ * name through reflection (what users declared in YAML), and that name is
+ * interpolated into byte-pinned error copy. protobuf-es surfaces the
+ * arm's camelCased localName as the oneof `case`, which coincides with
+ * the proto name for `slack`/`whatsapp` but would diverge for a future
+ * snake_case arm (e.g. `ms_teams` → case "msTeams") — so the proto name
+ * is resolved through the schema descriptor, not read off the case.
+ * Exported for the unit pin (Go TestProviderFieldName).
+ */
+export function providerFieldName(spec) {
+    const arm = spec?.providerConfig.case;
+    if (arm === undefined) {
+        return "";
+    }
+    const oneof = AgentChannelSpecSchema.oneofs.find((o) => o.name === "provider_config");
+    return oneof?.fields.find((f) => f.localName === arm)?.name ?? arm;
+}
+/**
+ * ValidateChannelUpdate — Go validateChannelUpdateStep: spec.agent_ref
+ * must keep referencing the same agent; the provider arm must not change
+ * (install state, credentials, and delivery records are all
+ * provider-shaped); the model pin is re-validated; then the app_ref rules
+ * (validateAppRefUpdate). Runs after LoadExisting. metadata.slug/org and
+ * status (install facts, credentials reference) need no step — the
+ * generic BuildUpdateState preserves them wholesale.
+ */
+export function newValidateChannelUpdateStep(registry, channelRuntime) {
+    return {
+        name: "ValidateChannelUpdate",
+        async execute(ctx) {
+            const existing = ctx.get(EXISTING_RESOURCE_KEY);
+            if (existing === undefined) {
+                throw internalError(new Error("existing agent channel not found in context"), "existing agent channel not found in context");
+            }
+            const inputRef = ctx.input.spec?.agentRef;
+            const existingRef = existing.spec?.agentRef;
+            // Normalize the input ref's org the same way create does (empty
+            // means the channel's own org) before comparing.
+            const inputOrg = (inputRef?.org ?? "") !== ""
+                ? inputRef.org
+                : (existing.metadata?.org ?? "");
+            if ((inputRef?.slug ?? "") !== (existingRef?.slug ?? "") ||
+                inputOrg !== (existingRef?.org ?? "")) {
+                throw failedPreconditionError(agentRefImmutableMessage(existingRef?.org ?? "", existingRef?.slug ?? ""));
+            }
+            const inputProvider = providerFieldName(ctx.input.spec);
+            const existingProvider = providerFieldName(existing.spec);
+            if (inputProvider !== existingProvider) {
+                throw failedPreconditionError(providerImmutableMessage(existingProvider));
+            }
+            validateChannelModelPin(registry, ctx.input.spec);
+            validateAppRefUpdate(ctx, existing);
+            // The serving runtime's write constraints, on the spec that would
+            // be written (ctx.input carries it here — BuildUpdateState runs
+            // after this step). Same posture as ResolveChannelDefaults: last,
+            // and only when composed.
+            if (channelRuntime !== undefined) {
+                await channelRuntime.enforceWriteConstraints(ctx.input);
+            }
+        },
+    };
+}
+/**
+ * TeardownChannelRuntime — the serving runtime's delete-time cascade
+ * (channel-runtime.ts: credentials environment, OAuth grant, pending
+ * deliveries). Spliced into the delete chain ONLY when a runtime is
+ * composed, after LoadExistingForDelete and before DeleteResource —
+ * dependent runtime state dies before the row (the cloud#425 ordering
+ * family), and a thrown teardown error leaves the row for an idempotent
+ * retry. The storing edition's delete chain is byte-identical to before
+ * this seam existed.
+ *
+ * Generic over the chain desc: the delete chain is typed on the delete
+ * INPUT (AgentChannelId), and this step reads the loaded resource from
+ * EXISTING_RESOURCE_KEY exactly as the controller's post-chain read does.
+ */
+export function newTeardownChannelRuntimeStep(channelRuntime) {
+    return {
+        name: "TeardownChannelRuntime",
+        async execute(ctx) {
+            const existing = ctx.get(EXISTING_RESOURCE_KEY);
+            if (existing === undefined) {
+                throw internalError(new Error("existing agent channel not found in context"), "existing agent channel not found in context");
+            }
+            await channelRuntime.teardownOnDelete(existing, ctx.callerIdentity);
+        },
+    };
+}
+/**
+ * The app_ref rules on update (T04 item 2) — Go validateAppRefUpdate,
+ * byte-identical with the cloud edition's ValidateChannelUpdate:
+ *   - required for whatsapp (repeated here because update does not run
+ *     the defaults resolver; provider immutability above guarantees the
+ *     existing channel is also whatsapp);
+ *   - same-org always;
+ *   - frozen while installed — pending and revoked channels rebind
+ *     freely (on OSS only the rebind-while-pending half is reachable:
+ *     install_state never reaches `installed` here).
+ */
+function validateAppRefUpdate(ctx, existing) {
+    const inputAppRef = ctx.input.spec?.appRef;
+    const existingAppRef = existing.spec?.appRef;
+    const isWhatsApp = ctx.input.spec?.providerConfig.case === "whatsapp";
+    if (isWhatsApp && (inputAppRef?.slug ?? "") === "") {
+        throw invalidArgumentError(APP_REF_REQUIRED_FOR_WHATSAPP_MESSAGE);
+    }
+    let inputAppOrg = "";
+    if ((inputAppRef?.slug ?? "") !== "") {
+        inputAppOrg =
+            inputAppRef.org !== ""
+                ? inputAppRef.org
+                : (existing.metadata?.org ?? "");
+    }
+    if (inputAppOrg !== "" && inputAppOrg !== (existing.metadata?.org ?? "")) {
+        throw failedPreconditionError(APP_REF_SAME_ORG_MESSAGE);
+    }
+    const installed = existing.status?.installState === AgentChannelInstallState.installed;
+    const changed = (inputAppRef?.slug ?? "") !== (existingAppRef?.slug ?? "") ||
+        ((inputAppRef?.slug ?? "") !== "" &&
+            inputAppOrg !== (existingAppRef?.org ?? ""));
+    if (installed && changed) {
+        throw failedPreconditionError(APP_REF_FROZEN_WHILE_INSTALLED_MESSAGE);
+    }
+}
+//# sourceMappingURL=steps.js.map

package/dist/domain/agentchannel/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../../src/domain/agentchannel/steps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAK5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,4DAA4D,CAAC;AAEpG,OAAO,EACL,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,8DAA8D,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAGhF,OAAO,EACL,+BAA+B,EAC/B,sCAAsC,EACtC,qCAAqC,EACrC,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAIxB;;;;;;;;;;GAUG;AACH,SAAS,uBAAuB,CAC9B,QAA8B,EAC9B,IAAkC;IAElC,MAAM,MAAM,GAAG,sBAAsB,CACnC,QAAQ,EACR,4BAA4B,EAC5B,EAAE,EACF,IAAI,EAAE,SAAS,EAAE,SAAS,IAAI,EAAE,CACjC,CAAC;IACF,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAAY,EACZ,QAA8B,EAC9B,cAA0C;IAE1C,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,KAAK,CAAC,OAAO,CAAC,GAAqC;YACjD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;YAElC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBACjC,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;YACnD,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;YACxC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,MAAM,GAAG,QAAS,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,QAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAS,CAAC,GAAG,CAAC;YAEpE,IAAI,MAAM,KAAK,QAAS,CAAC,GAAG,EAAE,CAAC;gBAC7B,MAAM,uBAAuB,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;YACjE,CAAC;YAED,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAEhD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;YACpC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,KAAK,UAAU,CAAC;YACpE,IAAI,UAAU,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC9C,MAAM,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;YACpE,CAAC;YAED,8DAA8D;YAC9D,gEAAgE;YAChE,0DAA0D;YAC1D,oEAAoE;YACpE,uDAAuD;YACvD,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,MAAO,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,MAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAS,CAAC,GAAG,CAAC;gBACnE,IAAI,SAAS,KAAK,QAAS,CAAC,GAAG,EAAE,CAAC;oBAChC,MAAM,uBAAuB,CAAC,wBAAwB,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAO,CAAC,GAAG,GAAG,SAAS,CAAC;YAC1B,CAAC;YAED,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,kBAAkB,CAC9B,KAAK,EACL,eAAe,CAAC,KAAK,EACrB,WAAW,EACX,QAAS,CAAC,IAAI,EACd,MAAM,CACP,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,+DAA+D;gBAC/D,MAAM,aAAa,CAAC,OAAO,EAAE,QAAS,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;YAED,QAAS,CAAC,GAAG,GAAG,MAAM,CAAC;YAEvB,+DAA+D;YAC/D,8DAA8D;YAC9D,+DAA+D;YAC/D,4DAA4D;YAC5D,gCAAgC;YAChC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,cAAc,CAAC,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,OAAO,CAAC,GAAqC;YAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,wBAAwB,CAAC,CAAC;YAClE,MAAM,CAAC,YAAY,GAAG,wBAAwB,CAAC,eAAe,CAAC;YAC/D,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QAC1B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkC;IAClE,MAAM,GAAG,GAAG,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC;IACtC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CACpC,CAAC;IACF,OAAO,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC;AACrE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAA8B,EAC9B,cAA0C;IAE1C,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,OAAO,CAAC,GAAqC;YACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAEjC,CAAC;YACd,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,6CAA6C,CAAC,EACxD,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;YAE5C,gEAAgE;YAChE,iDAAiD;YACjD,MAAM,QAAQ,GACZ,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,EAAE;gBAC1B,CAAC,CAAC,QAAS,CAAC,GAAG;gBACf,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YAErC,IACE,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;gBACpD,QAAQ,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,EACrC,CAAC;gBACD,MAAM,uBAAuB,CAC3B,wBAAwB,CACtB,WAAW,EAAE,GAAG,IAAI,EAAE,EACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CACxB,CACF,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,aAAa,KAAK,gBAAgB,EAAE,CAAC;gBACvC,MAAM,uBAAuB,CAC3B,wBAAwB,CAAC,gBAAgB,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,uBAAuB,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElD,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAEpC,kEAAkE;YAClE,gEAAgE;YAChE,kEAAkE;YAClE,0BAA0B;YAC1B,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,cAAc,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAA8B;IAE9B,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAEjC,CAAC;YACd,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,6CAA6C,CAAC,EACxD,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,CAAC,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,oBAAoB,CAC3B,GAAqC,EACrC,QAAsB;IAEtB,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;IAC3C,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE7C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,KAAK,UAAU,CAAC;IACtE,IAAI,UAAU,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACrC,WAAW;YACT,WAAY,CAAC,GAAG,KAAK,EAAE;gBACrB,CAAC,CAAC,WAAY,CAAC,GAAG;gBAClB,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,WAAW,KAAK,EAAE,IAAI,WAAW,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,uBAAuB,CAAC,wBAAwB,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,EAAE,YAAY,KAAK,wBAAwB,CAAC,SAAS,CAAC;IACvE,MAAM,OAAO,GACX,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC;QAC1D,CAAC,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE;YAC/B,WAAW,KAAK,CAAC,cAAc,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAEjD,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,uBAAuB,CAAC,sCAAsC,CAAC,CAAC;IACxE,CAAC;AACH,CAAC"}