@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/agentshare/controller.d.ts

@@ -0,0 +1,42 @@
+/**
+ * AgentShare controller — ports pkg/domain/agentshare/controller (command +
+ * query sides): the first-class sharing channel promoted out of
+ * Agent.spec.sharing (decision 011). A share carries everything a hosted
+ * chat link needs — audience, embed origins, visitor-facing messages,
+ * guest tool credentials (environment_refs), and the rotatable link token.
+ * Share operations never modify the referenced agent.
+ *
+ * Pipeline per RPC mirrors the Go step chains character-for-character. NOT
+ * search-indexed by design (the kind declares not_search_indexed — a share
+ * is channel configuration reached through its agent, not a library
+ * artifact), so no index steps appear in any chain. The agent-delete
+ * cascade of same-org shares lives in the AGENT domain (ported with #6);
+ * share delete itself cascades nothing.
+ *
+ * Authorization posture (OSS): single-user and local, so handlers perform
+ * no authorization — a documented no-op, not a silent divergence. The
+ * cloud edition enforces the same contracts via FGA plus app-level gates
+ * for the anonymous resolution paths.
+ *
+ * Proven by agentshare.conformance.test.ts (CONFORMANCE_TARGET=local)
+ * and __tests__/agentshare.test.ts.
+ */
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { ListReadScope } from "../../extensions/list-read-scope.js";
+import type { ResourceAuthorizationLifecycle } from "../../extensions/resource-authorization.js";
+import type { Store } from "../../store/interface.js";
+export interface AgentShareControllerDeps {
+    readonly store: Store;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+    /** The composed tuple-lifecycle driver — undefined = the shared steps no-op (C2). */
+    readonly authorizationLifecycle: ResourceAuthorizationLifecycle | undefined;
+    /** The composed list read scope — list/getByAgent narrow through it; undefined = the OSS full scan (20260830.01). */
+    readonly listReadScope: ListReadScope | undefined;
+}
+/** Registers both agentshare services on the router (routes stage). */
+export declare function registerAgentShareServices(router: ConnectRouter, deps: AgentShareControllerDeps): void;
+//# sourceMappingURL=controller.d.ts.map

package/dist/domain/agentshare/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../src/domain/agentshare/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AAuBzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AAkDjG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAatD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,qFAAqF;IACrF,QAAQ,CAAC,sBAAsB,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC5E,qHAAqH;IACrH,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;CACnD;AAED,uEAAuE;AACvE,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,wBAAwB,GAC7B,IAAI,CAiBN"}

package/dist/domain/agentshare/controller.js

@@ -0,0 +1,535 @@
+import { create, fromBinary } from "@bufbuild/protobuf";
+import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { AgentShareSchema } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/api_pb";
+import { AgentShareStatusSchema } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/status_pb";
+import { AgentShareCommandController } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/command_pb";
+import { AgentShareQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/query_pb";
+import { AgentShareListSchema } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/io_pb";
+import { AgentShareAudience } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/spec_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { restrictListByReadScope } from "../../extensions/list-read-scope.js";
+import { apiResourceKindKey } from "../../pipeline/interceptors/apiresource.js";
+import { internalError, invalidArgumentError, notFoundError, } from "../../pipeline/errors.js";
+import { newPipeline } from "../../pipeline/pipeline.js";
+import { callerIdentityOf } from "../../pipeline/interceptors/auth.js";
+import { RequestContext } from "../../pipeline/request-context.js";
+import { newAuthorizeStep } from "../../pipeline/steps/authorize.js";
+import { newGuardReservedLabelsStep } from "../../pipeline/steps/guard-reserved-labels.js";
+import { newBuildNewStateStep, setAuditFieldsForUpdate, } from "../../pipeline/steps/defaults.js";
+import { newBuildUpdateStateStep } from "../../pipeline/steps/build-update-state.js";
+import { newCheckDuplicateStep } from "../../pipeline/steps/duplicate.js";
+import { newDeleteResourceStep, newExtractResourceIdStep, newLoadExistingForDeleteStep, } from "../../pipeline/steps/delete.js";
+import { compareCreatedAtDesc, matchesAllLabels, } from "../../pipeline/steps/helpers.js";
+import { EXISTING_RESOURCE_KEY, newLoadExistingStep, } from "../../pipeline/steps/load-existing.js";
+import { SHOULD_CREATE_KEY, newLoadForApplyStep, } from "../../pipeline/steps/load-for-apply.js";
+import { newLoadByReferenceStep } from "../../pipeline/steps/load-by-reference.js";
+import { TARGET_RESOURCE_KEY, newLoadTargetStep, } from "../../pipeline/steps/load-target.js";
+import { newNormalizeReferencesStep } from "../../pipeline/steps/references.js";
+import { newCleanupIamPoliciesStep, newCreateAuthorizationTuplesStep, } from "../../pipeline/steps/authorization-tuples.js";
+import { newPersistStep } from "../../pipeline/steps/persist.js";
+import { newResolveSlugStep } from "../../pipeline/steps/slug.js";
+import { newValidateProtoStep } from "../../pipeline/steps/validation.js";
+import { newValidateVisibilityStep } from "../../pipeline/steps/validate-visibility.js";
+import { ORG_REQUIRED_FOR_LOOKUP_MESSAGE } from "./constants.js";
+import { buildSharedAgentProfile, findShareByOrgAndSlug, generateShareLinkToken, newResolveShareDefaultsStep, newStampAgentPinStep, newValidateShareUpdateStep, sharedNotFound, sharingLinkTokenAllowed, } from "./steps.js";
+/** Registers both agentshare services on the router (routes stage). */
+export function registerAgentShareServices(router, deps) {
+    router.service(AgentShareCommandController, {
+        apply: (share, ctx) => apply(deps, share, ctx),
+        create: (share, ctx) => createShare(deps, share, ctx),
+        update: (share, ctx) => update(deps, share, ctx),
+        rotateShareLink: (input, ctx) => rotateShareLink(deps, input, ctx),
+        delete: (shareId, ctx) => deleteShare(deps, shareId, ctx),
+    });
+    router.service(AgentShareQueryController, {
+        get: (shareId, ctx) => get(deps, shareId, ctx),
+        getByReference: (ref, ctx) => getByReference(deps, ref, ctx),
+        getByAgent: (req, ctx) => getByAgent(deps, req, ctx),
+        list: (req, ctx) => list(deps, req, ctx),
+        getSharedProfile: (req, ctx) => getSharedProfile(deps, req, ctx),
+        getSharedProfileForMember: (ref, ctx) => getSharedProfileForMember(deps, ref, ctx),
+    });
+}
+function kindOf(ctx) {
+    return ctx.values.get(apiResourceKindKey);
+}
+/**
+ * Create — chain per Go buildCreatePipeline. StampAgentPin runs AFTER
+ * BuildNewState so the wipe of client-provided status cannot erase the
+ * rebind pin; with the agent-slug default, CheckDuplicate structurally
+ * caps shares at one canonical link per agent per org.
+ */
+async function createShare(deps, share, ctx) {
+    const reqCtx = new RequestContext(AgentShareSchema, share, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-create", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareCommandController.method.create, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newValidateVisibilityStep())
+        .addStep(newResolveShareDefaultsStep(deps.store))
+        .addStep(newResolveSlugStep())
+        .addStep(newCheckDuplicateStep(deps.store))
+        .addStep(newBuildNewStateStep())
+        .addStep(newGuardReservedLabelsStep(deps.authorizer))
+        .addStep(newStampAgentPinStep())
+        .addStep(newNormalizeReferencesStep())
+        .addStep(newPersistStep(deps.store))
+        .addStep(newCreateAuthorizationTuplesStep(deps.authorizationLifecycle, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.newState;
+}
+/**
+ * Update — chain per Go buildUpdatePipeline. The spec is replaced
+ * wholesale (declarative semantics); status is preserved verbatim from the
+ * existing share, which is the guarantee that keeps
+ * status.share_link_token immune to declarative clobber (rotateShareLink
+ * is its sole writer).
+ */
+async function update(deps, share, ctx) {
+    const reqCtx = new RequestContext(AgentShareSchema, share, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-update", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareCommandController.method.update, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadExistingStep(deps.store))
+        .addStep(newValidateShareUpdateStep())
+        .addStep(newBuildUpdateStateStep())
+        .addStep(newGuardReservedLabelsStep(deps.authorizer))
+        .addStep(newNormalizeReferencesStep())
+        .addStep(newPersistStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.newState;
+}
+/**
+ * Apply — kubectl-style create-or-update. Delegates with the pipeline's
+ * CLONED state (Go delegates reqCtx.NewState(), NOT the original input —
+ * unlike channelapp/session): the canonical-share manifest legitimately
+ * omits both name and slug, and the defaulted slug/name (from
+ * ResolveShareDefaults) and the populated id (from LoadForApply) live only
+ * on the clone.
+ */
+async function apply(deps, share, ctx) {
+    const reqCtx = new RequestContext(AgentShareSchema, share, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-apply", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareCommandController.method.apply, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveShareDefaultsStep(deps.store))
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadForApplyStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    const shouldCreate = reqCtx.get(SHOULD_CREATE_KEY);
+    if (typeof shouldCreate !== "boolean") {
+        throw internalError(new Error("apply pipeline did not set shouldCreate flag"), "apply operation failed to determine create vs update");
+    }
+    const resolved = reqCtx.newState;
+    return shouldCreate
+        ? createShare(deps, resolved, ctx)
+        : update(deps, resolved, ctx);
+}
+// ---------------------------------------------------------------------------
+// rotateShareLink — Go rotate_share_link.go: this handler is the token's
+// SOLE writer; clients never supply it. The token lives in STATUS — not
+// spec — so manifest applies can never wipe it and silently fail open to
+// the plain guessable URL.
+// ---------------------------------------------------------------------------
+const ROTATE_SHARE_KEY = "rotateShareLinkShare";
+async function rotateShareLink(deps, input, ctx) {
+    const reqCtx = new RequestContext(AgentShareCommandController.method.rotateShareLink.input, input, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-rotate-share-link", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareCommandController.method.rotateShareLink, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadShareForLinkRotationStep(deps.store))
+        .addStep(newRotateShareLinkTokenStep())
+        .addStep(newPersistShareForLinkRotationStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(ROTATE_SHARE_KEY);
+}
+/** Loads the share by resource_id; ANY load failure → NotFound (Go). */
+function newLoadShareForLinkRotationStep(store) {
+    return {
+        name: "LoadShareForLinkRotation",
+        async execute(ctx) {
+            let share;
+            try {
+                share = await store.getResource(ctx.apiResourceKind, ctx.input.resourceId, AgentShareSchema);
+            }
+            catch {
+                throw notFoundError("AgentShare", ctx.input.resourceId);
+            }
+            ctx.set(ROTATE_SHARE_KEY, share);
+        },
+    };
+}
+/**
+ * Sets status.share_link_token to fresh entropy, preserving the rest of
+ * status and stamping the StatusAudit slot — the same status-preserving
+ * discipline as the update pipeline. Go wraps a stamping failure as a
+ * PLAIN error (not grpclib) — the wire then carries the sanitized
+ * "internal server error", exactly what the pipeline's non-Connect
+ * fallback produces here.
+ */
+function newRotateShareLinkTokenStep() {
+    return {
+        name: "RotateShareLinkToken",
+        execute(ctx) {
+            const share = ctx.get(ROTATE_SHARE_KEY);
+            // Go wraps an entropy failure as Internal "failed to rotate share
+            // link" (practically unreachable, but the arm's copy is contract).
+            let token;
+            try {
+                token = generateShareLinkToken();
+            }
+            catch (error) {
+                throw internalError(error, "failed to rotate share link");
+            }
+            const status = share.status ?? create(AgentShareStatusSchema);
+            status.shareLinkToken = token;
+            share.status = status;
+            setAuditFieldsForUpdate(AgentShareSchema, share, "status_audit", ctx.callerIdentity);
+        },
+    };
+}
+/** Saves the rotated share. */
+function newPersistShareForLinkRotationStep(store) {
+    return {
+        name: "PersistShareForLinkRotation",
+        async execute(ctx) {
+            const share = ctx.get(ROTATE_SHARE_KEY);
+            try {
+                await store.saveResource(ctx.apiResourceKind, share.metadata?.id ?? "", AgentShareSchema, share);
+            }
+            catch (error) {
+                throw internalError(error, "failed to save agent share");
+            }
+        },
+    };
+}
+/**
+ * Delete — the channel's full teardown: the hosted link stops resolving
+ * and the share's configuration is gone (disable via update is the
+ * config-preserving pause). The referenced agent is untouched; share
+ * delete cascades nothing.
+ */
+async function deleteShare(deps, shareId, ctx) {
+    const reqCtx = new RequestContext(AgentShareCommandController.method.delete.input, shareId, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-delete", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareCommandController.method.delete, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newExtractResourceIdStep())
+        .addStep(newLoadExistingForDeleteStep(deps.store, AgentShareSchema))
+        .addStep(newDeleteResourceStep(deps.store))
+        .addStep(newCleanupIamPoliciesStep(deps.authorizationLifecycle, deps.logger))
+        .build()
+        .execute(reqCtx);
+    const deleted = reqCtx.get(EXISTING_RESOURCE_KEY);
+    if (deleted === undefined) {
+        throw internalError(new Error("deleted agent share not found in context"), "deleted agent share not found in context");
+    }
+    return deleted;
+}
+/** Get — LoadTarget by id-wrapper input (AgentShareId). */
+async function get(deps, shareId, ctx) {
+    const reqCtx = new RequestContext(AgentShareQueryController.method.get.input, shareId, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-get", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareQueryController.method.get, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadTargetStep(deps.store, AgentShareSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+/** GetByReference — org/slug lookup. */
+async function getByReference(deps, ref, ctx) {
+    const reqCtx = new RequestContext(AgentShareQueryController.method.getByReference.input, ref, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-get-by-reference", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareQueryController.method.getByReference, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadByReferenceStep(deps.store, AgentShareSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+const SHARE_LIST_KEY = "agentShareList";
+/**
+ * GetByAgent — all shares of one agent, optionally org-scoped. This is how
+ * the Share dialog and CLI resolve an agent's existing share regardless of
+ * its slug (rename-by-recreate, decision 011 D2). A nonexistent agent
+ * yields an EMPTY list, not an error — "no shares" is the useful answer
+ * either way. The org filter is contract parity, not authorization: a
+ * multi-org caller asking for one org's channels must not see another
+ * org's cross-org shares of the same agent.
+ */
+async function getByAgent(deps, req, ctx) {
+    const reqCtx = new RequestContext(AgentShareQueryController.method.getByAgent.input, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-get-by-agent", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareQueryController.method.getByAgent, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadSharesByAgentStep(deps.store, deps.listReadScope))
+        .build()
+        .execute(reqCtx);
+    const result = reqCtx.get(SHARE_LIST_KEY);
+    if (result === undefined) {
+        throw internalError(new Error("agent share list not found in context"), "agent share list not found in context");
+    }
+    return result;
+}
+/**
+ * LoadSharesByAgent — Go loadSharesByAgentStep: resolves the agent by ID
+ * to its org+slug identity (shares reference agents by org+slug while
+ * this RPC is keyed on the stable agent ID), then filters shares whose
+ * spec.agent_ref matches.
+ */
+function newLoadSharesByAgentStep(store, listReadScope) {
+    return {
+        name: "LoadSharesByAgent",
+        async execute(ctx) {
+            const req = ctx.input;
+            const emptyList = create(AgentShareListSchema, {
+                totalCount: 0,
+                items: [],
+            });
+            let agentOrg;
+            let agentSlug;
+            try {
+                const agent = await store.getResource(ApiResourceKind.agent, req.agentId, AgentSchema);
+                agentOrg = agent.metadata?.org ?? "";
+                agentSlug = agent.metadata?.slug ?? "";
+            }
+            catch {
+                ctx.set(SHARE_LIST_KEY, emptyList);
+                return;
+            }
+            let rows;
+            try {
+                rows = await store.listResources(ApiResourceKind.agent_share);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list agent shares");
+            }
+            const decoded = [];
+            for (const bytes of rows) {
+                try {
+                    decoded.push(fromBinary(AgentShareSchema, bytes));
+                }
+                catch {
+                    continue;
+                }
+            }
+            // 20260830.01 census lane 17: the scope narrows the decoded scan;
+            // the org/agent filters below are contract parity in both editions.
+            const visible = await restrictListByReadScope(listReadScope, ctx.callerIdentity, ApiResourceKind.agent_share, decoded, "");
+            const shares = [];
+            for (const share of visible) {
+                const ref = share.spec?.agentRef;
+                if ((ref?.org ?? "") !== agentOrg || (ref?.slug ?? "") !== agentSlug) {
+                    continue;
+                }
+                if (req.org !== "" && (share.metadata?.org ?? "") !== req.org) {
+                    continue;
+                }
+                shares.push(share);
+            }
+            ctx.set(SHARE_LIST_KEY, create(AgentShareListSchema, {
+                totalCount: shares.length,
+                items: shares,
+            }));
+        },
+    };
+}
+const LIST_RESULT_KEY = "listResult";
+/**
+ * List — org + labels filter (AND semantics), newest first. Versus Cloud,
+ * OSS excludes authorization filtering AND pagination, exactly as Go's
+ * list.go records.
+ */
+async function list(deps, req, ctx) {
+    const reqCtx = new RequestContext(AgentShareQueryController.method.list.input, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-list", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareQueryController.method.list, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newListByOrgAndLabelsStep(deps.store, deps.logger, deps.listReadScope))
+        .build()
+        .execute(reqCtx);
+    const result = reqCtx.get(LIST_RESULT_KEY);
+    if (result === undefined) {
+        throw internalError(new Error("agent share list not found in context"), "agent share list not found in context");
+    }
+    return result;
+}
+/** ListByOrgAndLabels — Go listByOrgAndLabelsStep, warn-and-skip rows. */
+function newListByOrgAndLabelsStep(store, logger, listReadScope) {
+    return {
+        name: "ListByOrgAndLabels",
+        async execute(ctx) {
+            const { org, labels: filterLabels } = ctx.input;
+            let rows;
+            try {
+                rows = await store.listResources(ctx.apiResourceKind);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list agent shares");
+            }
+            const decoded = [];
+            for (const bytes of rows) {
+                try {
+                    decoded.push(fromBinary(AgentShareSchema, bytes));
+                }
+                catch {
+                    logger.warn("Failed to unmarshal agent share, skipping");
+                    continue;
+                }
+            }
+            // 20260830.01 census lane 16: the scope narrows the decoded scan;
+            // the org equality below already serves the Java handler's org arm.
+            const visible = await restrictListByReadScope(listReadScope, ctx.callerIdentity, ApiResourceKind.agent_share, decoded, "");
+            const shares = [];
+            for (const share of visible) {
+                if ((share.metadata?.org ?? "") !== org) {
+                    continue;
+                }
+                if (!matchesAllLabels(share.metadata?.labels ?? {}, filterLabels)) {
+                    continue;
+                }
+                shares.push(share);
+            }
+            shares.sort((a, b) => compareCreatedAtDesc(a.status?.audit?.specAudit?.createdAt, b.status?.audit?.specAudit?.createdAt));
+            ctx.set(LIST_RESULT_KEY, create(AgentShareListSchema, {
+                totalCount: shares.length,
+                items: shares,
+            }));
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// The profile lanes — Go get_shared_profile.go. GetSharedProfile is the
+// ANONYMOUS resolution path for the hosted chat page; visitors resolve a
+// shared link to the trimmed SharedAgentProfile — never the full Agent,
+// whose spec carries the system prompt. GetSharedProfileForMember is the
+// tokenless authenticated twin: in OSS the one principal IS the
+// organization, so membership always holds and it resolves any enabled
+// share — with ONE exception mirrored from cloud (see below).
+// ---------------------------------------------------------------------------
+const RESOLVED_SHARE_KEY = "resolvedAgentShare";
+const SHARED_PROFILE_KEY = "sharedAgentProfile";
+async function getSharedProfile(deps, req, ctx) {
+    const reqCtx = new RequestContext(AgentShareQueryController.method.getSharedProfile.input, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-get-shared-profile", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareQueryController.method.getSharedProfile, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadShareForProfileStep(deps.store))
+        .addStep(newProjectSharedProfileStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(SHARED_PROFILE_KEY);
+}
+async function getSharedProfileForMember(deps, ref, ctx) {
+    const reqCtx = new RequestContext(AgentShareQueryController.method.getSharedProfileForMember.input, ref, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("agent-share-get-shared-profile-for-member", deps.logger)
+        .addStep(newAuthorizeStep(AgentShareQueryController.method.getSharedProfileForMember, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadShareForMemberProfileStep(deps.store))
+        .addStep(newProjectMemberSharedProfileStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(SHARED_PROFILE_KEY);
+}
+/**
+ * Loads the share by org+slug for the anonymous path. Org is required —
+ * an empty org would mean "match slug across all orgs", an enumeration
+ * hazard on this public endpoint.
+ */
+function newLoadShareForProfileStep(store) {
+    return {
+        name: "LoadShareForProfile",
+        async execute(ctx) {
+            const req = ctx.input;
+            if (req.org === "") {
+                throw invalidArgumentError(ORG_REQUIRED_FOR_LOOKUP_MESSAGE);
+            }
+            const share = await findShareByOrgAndSlug(store, req.org, req.slug);
+            if (share === undefined) {
+                throw sharedNotFound(req.slug);
+            }
+            ctx.set(RESOLVED_SHARE_KEY, share);
+        },
+    };
+}
+/** The member path's loader — same org-required contract, same refusal. */
+function newLoadShareForMemberProfileStep(store) {
+    return {
+        name: "LoadShareForMemberProfile",
+        async execute(ctx) {
+            const ref = ctx.input;
+            if (ref.org === "") {
+                throw invalidArgumentError(ORG_REQUIRED_FOR_LOOKUP_MESSAGE);
+            }
+            const share = await findShareByOrgAndSlug(store, ref.org, ref.slug);
+            if (share === undefined) {
+                throw sharedNotFound(ref.slug);
+            }
+            ctx.set(RESOLVED_SHARE_KEY, share);
+        },
+    };
+}
+/**
+ * Gates on spec.enabled, the audience, and the live link token, then
+ * projects the trimmed public profile. A disabled share, an org-audience
+ * share, and a locked link with a wrong or absent token are ALL
+ * indistinguishable from a nonexistent share — a rotated (killed) link
+ * must look exactly like one that never existed, and a members-only
+ * share URL must leak nothing to non-members (they resolve via
+ * getSharedProfileForMember instead). Check order mirrors the cloud
+ * AgentShareGetSharedProfileHandler: exists → enabled → audience → token.
+ */
+function newProjectSharedProfileStep(store) {
+    return {
+        name: "ProjectSharedProfile",
+        async execute(ctx) {
+            const share = ctx.get(RESOLVED_SHARE_KEY);
+            const req = ctx.input;
+            if (share.spec?.enabled !== true) {
+                throw sharedNotFound(req.slug);
+            }
+            // The audience arm (SharingAudiencePolicy.admitsGuests): only an
+            // EXPLICIT org audience refuses — unspecified means public by
+            // contract (shares created before the audience field existed are
+            // anyone-with-link shares). Closes the recorded C2 close-out gap:
+            // this anonymous lane resolved org-audience shares the proto
+            // contract says must collapse.
+            if (share.spec.audience === AgentShareAudience.org) {
+                throw sharedNotFound(req.slug);
+            }
+            if (!sharingLinkTokenAllowed(req.linkToken, share.status?.shareLinkToken ?? "")) {
+                throw sharedNotFound(req.slug);
+            }
+            ctx.set(SHARED_PROFILE_KEY, await buildSharedAgentProfile(store, share));
+        },
+    };
+}
+/**
+ * The member path's projection: gates on spec.enabled and refuses
+ * token-locked PUBLIC-audience shares — this tokenless path must not
+ * reveal a killed (rotated) link's profile; such shares resolve only
+ * through GetSharedProfile with the matching token. Org-audience shares
+ * are unaffected — their gate is membership, not the link token.
+ */
+function newProjectMemberSharedProfileStep(store) {
+    return {
+        name: "ProjectMemberSharedProfile",
+        async execute(ctx) {
+            const share = ctx.get(RESOLVED_SHARE_KEY);
+            if (share.spec?.enabled !== true) {
+                throw sharedNotFound(ctx.input.slug);
+            }
+            const isOrgAudience = share.spec.audience === AgentShareAudience.org;
+            if (!isOrgAudience && (share.status?.shareLinkToken ?? "") !== "") {
+                throw sharedNotFound(ctx.input.slug);
+            }
+            ctx.set(SHARED_PROFILE_KEY, await buildSharedAgentProfile(store, share));
+        },
+    };
+}
+//# sourceMappingURL=controller.js.map

package/dist/domain/agentshare/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../src/domain/agentshare/controller.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,4DAA4D,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,2DAA2D,CAAC;AACtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,wDAAwD,CAAC;AAU9F,OAAO,EAAE,kBAAkB,EAAE,MAAM,0DAA0D,CAAC;AAE9F,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAKtH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACnF,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAExF,OAAO,EAAE,+BAA+B,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAapB,uEAAuE;AACvE,MAAM,UAAU,0BAA0B,CACxC,MAAqB,EACrB,IAA8B;IAE9B,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE;QAC1C,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAC9C,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QACrD,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAChD,eAAe,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAClE,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC;KAC1D,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE;QACxC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC;QAC9C,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QAC5D,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QACpD,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QACxC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QAChE,yBAAyB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACtC,yBAAyB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAmB;IACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,IAA8B,EAC9B,KAAiB,EACjB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,gBAAgB,EAChB,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAA0B,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC;SAC1E,OAAO,CACN,gBAAgB,CACd,2BAA2B,CAAC,MAAM,CAAC,MAAM,EACzC,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,yBAAyB,EAAE,CAAC;SACpC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAChD,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpD,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,0BAA0B,EAAE,CAAC;SACrC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACnC,OAAO,CACN,gCAAgC,CAC9B,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,MAAM,CACZ,CACF;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,MAAM,CACnB,IAA8B,EAC9B,KAAiB,EACjB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,gBAAgB,EAChB,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAA0B,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC;SAC1E,OAAO,CACN,gBAAgB,CACd,2BAA2B,CAAC,MAAM,CAAC,MAAM,EACzC,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxC,OAAO,CAAC,0BAA0B,EAAE,CAAC;SACrC,OAAO,CAAC,uBAAuB,EAAE,CAAC;SAClC,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpD,OAAO,CAAC,0BAA0B,EAAE,CAAC;SACrC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACnC,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,KAAK,CAClB,IAA8B,EAC9B,KAAiB,EACjB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,gBAAgB,EAChB,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAA0B,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC;SACzE,OAAO,CACN,gBAAgB,CACd,2BAA2B,CAAC,MAAM,CAAC,KAAK,EACxC,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAChD,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxC,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,8CAA8C,CAAC,EACzD,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,OAAO,YAAY;QACjB,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;QAClC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,2BAA2B;AAC3B,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAKhD,KAAK,UAAU,eAAe,CAC5B,IAA8B,EAC9B,KAA2B,EAC3B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,2BAA2B,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EACxD,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAAa,+BAA+B,EAAE,IAAI,CAAC,MAAM,CAAC;SACxE,OAAO,CACN,gBAAgB,CACd,2BAA2B,CAAC,MAAM,CAAC,eAAe,EAClD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACpD,OAAO,CAAC,2BAA2B,EAAE,CAAC;SACtC,OAAO,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACvD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAe,CAAC;AACpD,CAAC;AAED,wEAAwE;AACxE,SAAS,+BAA+B,CACtC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,KAAK,CAAC,OAAO,CAAC,GAA+B;YAC3C,IAAI,KAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAC7B,GAAG,CAAC,eAAe,EACnB,GAAG,CAAC,KAAK,CAAC,UAAU,EACpB,gBAAgB,CACjB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,aAAa,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC1D,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,2BAA2B;IAClC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,OAAO,CAAC,GAA+B;YACrC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAe,CAAC;YACtD,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,sBAAsB,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC9D,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC;YAC9B,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YACtB,uBAAuB,CACrB,gBAAgB,EAChB,KAAK,EACL,cAAc,EACd,GAAG,CAAC,cAAc,CACnB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+BAA+B;AAC/B,SAAS,kCAAkC,CACzC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,CAAC,OAAO,CAAC,GAA+B;YAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAe,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CACtB,GAAG,CAAC,eAAe,EACnB,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EACxB,gBAAgB,EAChB,KAAK,CACN,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,IAA8B,EAC9B,OAAqB,EACrB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAC/C,OAAO,EACP,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,oBAAoB,EACpB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,2BAA2B,CAAC,MAAM,CAAC,MAAM,EACzC,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,wBAAwB,EAAE,CAAC;SACnC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;SACnE,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,OAAO,CACN,yBAAyB,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,MAAM,CAAC,CACpE;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,0CAA0C,CAAC,EACrD,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,OAAqB,CAAC;AAC/B,CAAC;AAED,2DAA2D;AAC3D,KAAK,UAAU,GAAG,CAChB,IAA8B,EAC9B,OAAqB,EACrB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAC1C,OAAO,EACP,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,iBAAiB,EACjB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CAAC,yBAAyB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CACxE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;SACxD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAe,CAAC;AACvD,CAAC;AAED,wCAAwC;AACxC,KAAK,UAAU,cAAc,CAC3B,IAA8B,EAC9B,GAAyB,EACzB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,yBAAyB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EACrD,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAEf,8BAA8B,EAAE,IAAI,CAAC,MAAM,CAAC;SAC3C,OAAO,CACN,gBAAgB,CACd,yBAAyB,CAAC,MAAM,CAAC,cAAc,EAC/C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;SAC7D,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAe,CAAC;AACvD,CAAC;AAED,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CACvB,IAA8B,EAC9B,GAAiC,EACjC,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,yBAAyB,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EACjD,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,0BAA0B,EAC1B,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,yBAAyB,CAAC,MAAM,CAAC,UAAU,EAC3C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;SACjE,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,uCAAuC,CAAC,EAClD,uCAAuC,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,MAAwB,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAC/B,KAAY,EACZ,aAAwC;IAExC,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,KAAK,CAAC,OAAO,CACX,GAEC;YAED,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,EAAE;gBAC7C,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,EAAE;aACV,CAAC,CAAC;YAEH,IAAI,QAAgB,CAAC;YACrB,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CACnC,eAAe,CAAC,KAAK,EACrB,GAAG,CAAC,OAAO,EACX,WAAW,CACZ,CAAC;gBACF,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;gBACrC,SAAS,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YAED,IAAI,IAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;YAC5D,CAAC;YAED,MAAM,OAAO,GAAiB,EAAE,CAAC;YACjC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;gBACpD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;YACD,kEAAkE;YAClE,oEAAoE;YACpE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,aAAa,EACb,GAAG,CAAC,cAAc,EAClB,eAAe,CAAC,WAAW,EAC3B,OAAO,EACP,EAAE,CACH,CAAC;YAEF,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACjC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;oBACrE,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;oBAC9D,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,GAAG,CAAC,GAAG,CACL,cAAc,EACd,MAAM,CAAC,oBAAoB,EAAE;gBAC3B,UAAU,EAAE,MAAM,CAAC,MAAM;gBACzB,KAAK,EAAE,MAAM;aACd,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC;;;;GAIG;AACH,KAAK,UAAU,IAAI,CACjB,IAA8B,EAC9B,GAA2B,EAC3B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAC3C,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,kBAAkB,EAClB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CACzE;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CACN,yBAAyB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CACvE;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,uCAAuC,CAAC,EAClD,uCAAuC,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,MAAwB,CAAC;AAClC,CAAC;AAED,0EAA0E;AAC1E,SAAS,yBAAyB,CAChC,KAAY,EACZ,MAAc,EACd,aAAwC;IAExC,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK,CAAC,OAAO,CACX,GAAuE;YAEvE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YAEhD,IAAI,IAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;YAC5D,CAAC;YAED,MAAM,OAAO,GAAiB,EAAE,CAAC;YACjC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;gBACpD,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;oBACzD,SAAS;gBACX,CAAC;YACH,CAAC;YACD,kEAAkE;YAClE,oEAAoE;YACpE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAC3C,aAAa,EACb,GAAG,CAAC,cAAc,EAClB,eAAe,CAAC,WAAW,EAC3B,OAAO,EACP,EAAE,CACH,CAAC;YAEF,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxC,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;oBAClE,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACnB,oBAAoB,CAClB,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EACrC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CACtC,CACF,CAAC;YAEF,GAAG,CAAC,GAAG,CACL,eAAe,EACf,MAAM,CAAC,oBAAoB,EAAE;gBAC3B,UAAU,EAAE,MAAM,CAAC,MAAM;gBACzB,KAAK,EAAE,MAAM;aACd,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,yEAAyE;AACzE,gEAAgE;AAChE,uEAAuE;AACvE,8DAA8D;AAC9D,8EAA8E;AAE9E,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAOhD,KAAK,UAAU,gBAAgB,CAC7B,IAA8B,EAC9B,GAA4B,EAC5B,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EACvD,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAAc,gCAAgC,EAAE,IAAI,CAAC,MAAM,CAAC;SAC1E,OAAO,CACN,gBAAgB,CACd,yBAAyB,CAAC,MAAM,CAAC,gBAAgB,EACjD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC/C,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAChD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAuB,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,IAA8B,EAC9B,GAAyB,EACzB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,yBAAyB,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,EAChE,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,2CAA2C,EAC3C,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,yBAAyB,CAAC,MAAM,CAAC,yBAAyB,EAC1D,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACrD,OAAO,CAAC,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACtD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAuB,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAS,0BAA0B,CAAC,KAAY;IAC9C,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,CAAC,OAAO,CAAC,GAAgC;YAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YACtB,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,gCAAgC,CACvC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,KAAK,CAAC,OAAO,CAAC,GAAsC;YAClD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YACtB,IAAI,GAAG,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,2BAA2B,CAAC,KAAY;IAC/C,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK,CAAC,OAAO,CAAC,GAAgC;YAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAe,CAAC;YACxD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YAEtB,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;gBACjC,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YACD,iEAAiE;YACjE,8DAA8D;YAC9D,iEAAiE;YACjE,kEAAkE;YAClE,6DAA6D;YAC7D,+BAA+B;YAC/B,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,kBAAkB,CAAC,GAAG,EAAE,CAAC;gBACnD,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YACD,IACE,CAAC,uBAAuB,CACtB,GAAG,CAAC,SAAS,EACb,KAAK,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE,CACnC,EACD,CAAC;gBACD,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iCAAiC,CACxC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,KAAK,CAAC,OAAO,CAAC,GAAsC;YAClD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAe,CAAC;YAExD,IAAI,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;gBACjC,MAAM,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YAED,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,kBAAkB,CAAC,GAAG,CAAC;YACrE,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBAClE,MAAM,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC"}