@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/session/steps.js

@@ -0,0 +1,592 @@
+/**
+ * Session domain-local pipeline steps — port the inline steps of
+ * pkg/domain/session/controller/ (create.go, delete.go, list.go,
+ * validate_harness_immutability.go,
+ * validate_execution_target_immutability.go,
+ * record_harness_state_history.go) and its steps/ package
+ * (filter_by_agent_instance.go, filter_by_channel.go). Shared steps stay
+ * in src/pipeline/steps/; these exist because they embody
+ * session-specific contracts: the default-agent-instance resolution, the
+ * harness/execution-target immutability sentinels, the server-owned
+ * harness-state history, the active-execution delete guard with its
+ * execution cascade, and the list filters.
+ */
+import { Code, ConnectError } from "@connectrpc/connect";
+import { create, fromBinary } from "@bufbuild/protobuf";
+import { AgentSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/api_pb";
+import { AgentStatusSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/status_pb";
+import { AgentExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { ExecutionPhase } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { SessionSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/api_pb";
+import { ExecutionTarget, Harness, } from "@stigmer/protos/ai/stigmer/agentic/session/v1/enum_pb";
+import { SessionListSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/io_pb";
+import { SessionSpecSchema } from "@stigmer/protos/ai/stigmer/agentic/session/v1/spec_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { IamPermission } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
+import { failedPreconditionError, goWrappedStatusError, internalError, invalidArgumentError, } from "../../pipeline/errors.js";
+import { restrictListByReadScope } from "../../extensions/list-read-scope.js";
+import { authorizeResolvedResource } from "../../pipeline/steps/authorize.js";
+import { notifyDefaultInstanceLinked } from "../../pipeline/steps/authorization-tuples.js";
+import { RESOURCE_ID_KEY } from "../../pipeline/steps/delete.js";
+import { compareCreatedAtDesc } from "../../pipeline/steps/helpers.js";
+import { EXISTING_RESOURCE_KEY } from "../../pipeline/steps/load-existing.js";
+import { buildDefaultInstanceRequest } from "../agentinstance/defaultinstance.js";
+import { DefaultAgentNotConfiguredError, DefaultAgentNotPublicError, findDefaultAgent, } from "../agent/defaultagent.js";
+/** Context key for the list result (Go listResultKey). */
+export const LIST_RESULT_KEY = "listResult";
+/**
+ * The session label the channel runtime stamps at create time to record
+ * which agent channel originated the conversation. Mirrors
+ * ChannelRuntimeConstants.CHANNEL_ID_METADATA_KEY in Stigmer Cloud.
+ */
+const CHANNEL_ID_LABEL_KEY = "stigmer.ai/channel-id";
+// ---------------------------------------------------------------------------
+// ResolveDefaultAgentInstance — create.go:62-182: when agent_instance_id is
+// not provided, resolve the platform default agent (shared defaultagent
+// implementation: label stigmer.ai/default-agent=true, visibility_public,
+// deterministic incumbent-wins tie-break), get or create its default
+// instance, and set agent_instance_id on the session spec. This enables the
+// session-first UX where users create a session (with workspace entries)
+// without knowing the agent instance — the backend resolves it
+// automatically.
+//
+// Runs FIRST in the create chain, before ValidateProto — resolution must
+// fill agent_instance_id before validation sees the spec.
+//
+// The id lands on ctx.newState.spec, NEVER on input: the pipeline cloned
+// input into newState at construction and Persist saves newState, so
+// mutating input does not propagate (Go's documented clone gotcha,
+// create.go:168-170).
+// ---------------------------------------------------------------------------
+export function newResolveDefaultAgentInstanceStep(store, creator, logger, authorizationLifecycle) {
+    return {
+        name: "ResolveDefaultAgentInstance",
+        async execute(ctx) {
+            if ((ctx.input.spec?.agentInstanceId ?? "") !== "") {
+                return;
+            }
+            logger.info("agent_instance_id not provided on session, resolving platform default agent");
+            // 1. Resolve the default agent. The error copy is Go WrapError's
+            // "%s: %v" — the sentinel's text RIDES the wire message, and the
+            // NotFound arm carries Go's DOUBLE wrap (fmt.Errorf("no default
+            // agent available on this platform: %w", err) inside WrapError).
+            // Byte-pinned.
+            let defaultAgent;
+            try {
+                defaultAgent = await findDefaultAgent(store, logger);
+            }
+            catch (error) {
+                if (error instanceof DefaultAgentNotConfiguredError) {
+                    logger.error("No platform default agent configured", {
+                        error: error.message,
+                    });
+                    throw new ConnectError(`No default agent available. Ensure an agent with label stigmer.ai/default-agent=true and visibility_public exists: no default agent available on this platform: ${error.message}`, Code.NotFound);
+                }
+                if (error instanceof DefaultAgentNotPublicError) {
+                    logger.error("Default agent is not visibility_public", {
+                        error: error.message,
+                    });
+                    throw new ConnectError(`Default agent exists but is not visibility_public: ${error.message}`, Code.FailedPrecondition);
+                }
+                // Store/decode failure — an internal fault, not "no default
+                // agent". InternalError keeps the cause off the wire
+                // (stigmer/stigmer#478).
+                logger.error("Failed to resolve platform default agent", {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                throw internalError(error, "failed to resolve the platform default agent");
+            }
+            const metadata = defaultAgent.metadata;
+            if (metadata === undefined) {
+                // Unreachable: findDefaultAgent only returns public-visibility
+                // candidates, whose metadata is necessarily set.
+                throw internalError(new Error("default agent metadata is nil"), "failed to resolve the platform default agent");
+            }
+            const agentId = metadata.id;
+            logger.info("Resolved platform default agent", {
+                agentId,
+                agentName: metadata.name,
+            });
+            // 2. Get or create the default instance.
+            let defaultInstanceId = defaultAgent.status?.defaultInstanceId ?? "";
+            if (defaultInstanceId === "") {
+                logger.info("Default instance missing, creating one", { agentId });
+                const instanceRequest = buildDefaultInstanceRequest(metadata);
+                // Go create.go:144-148 wraps the downstream error with fmt.Errorf
+                // ("failed to create default instance for default agent: %w") and
+                // PipelineError.GRPCStatus's errors.As branch keeps the inner
+                // CODE but rewrites the wire MESSAGE to the wrapped text —
+                // transport formatting (`rpc error: code = X desc = ...`)
+                // included. Mirrored byte-for-byte via goWrappedStatusError; the
+                // leak is stigmer/stigmer#852 (both-editions post-cutover fix).
+                // Unstatused failures fall to the pipeline's Internal fallback,
+                // exactly Go's plain-error path.
+                let createdInstance;
+                try {
+                    createdInstance = await creator().createAsCaller(instanceRequest, ctx.callerIdentity);
+                }
+                catch (error) {
+                    logger.error("Failed to create default instance", {
+                        agentId,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    if (error instanceof ConnectError) {
+                        throw goWrappedStatusError("failed to create default instance for default agent", error);
+                    }
+                    throw new Error(`failed to create default instance for default agent: ${error instanceof Error ? error.message : String(error)}`);
+                }
+                defaultInstanceId = createdInstance.metadata?.id ?? "";
+                // Persist default_instance_id on the agent — EXPLICITLY the agent
+                // kind: this pipeline's ctx kind is session (Go hardcodes
+                // ApiResourceKind_agent here too).
+                if (defaultAgent.status === undefined) {
+                    defaultAgent.status = create(AgentStatusSchema, {});
+                }
+                defaultAgent.status.defaultInstanceId = defaultInstanceId;
+                try {
+                    await store.saveResource(ApiResourceKind.agent, agentId, AgentSchema, defaultAgent);
+                }
+                catch (error) {
+                    logger.error("Failed to persist agent with default_instance_id", {
+                        agentId,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    // Go wraps as a plain error → the pipeline's Internal fallback.
+                    throw new Error(`failed to persist agent with default instance: ${error instanceof Error ? error.message : String(error)}`);
+                }
+                // The default_of invariant rides the pointer persist (C2 Stage 3).
+                await notifyDefaultInstanceLinked(authorizationLifecycle, {
+                    instanceKind: ApiResourceKind.agent_instance,
+                    instanceId: defaultInstanceId,
+                    blueprintKind: ApiResourceKind.agent,
+                    blueprintId: agentId,
+                });
+                logger.info("Created default instance for default agent", {
+                    instanceId: defaultInstanceId,
+                    agentId,
+                });
+            }
+            // 3. Set agent_instance_id on the session's newState (not input) —
+            // see the module-level clone gotcha note.
+            const newState = ctx.newState;
+            if (newState.spec === undefined) {
+                newState.spec = create(SessionSpecSchema, {});
+            }
+            newState.spec.agentInstanceId = defaultInstanceId;
+            logger.info("Set agent_instance_id on session from platform default agent", {
+                agentInstanceId: defaultInstanceId,
+            });
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// ValidateHarnessImmutability — validate_harness_immutability.go: rejects
+// session updates that attempt to change the harness after the session has
+// been used for execution. Each harness owns its conversation state
+// independently (LangGraph uses Stigmer checkpoints via harness_state_id;
+// Cursor uses a Cursor-hosted Agent via cursor_agent_id in
+// harness_state_id); switching harness mid-session would silently discard
+// conversation history. A session counts as "used" when its
+// harness_state_id is non-empty — set after the first execution completes.
+// ---------------------------------------------------------------------------
+export function newValidateHarnessImmutabilityStep() {
+    return {
+        name: "ValidateHarnessImmutability",
+        execute(ctx) {
+            const existing = ctx.get(EXISTING_RESOURCE_KEY);
+            if (existing === undefined) {
+                return;
+            }
+            const existingSpec = existing.spec;
+            if (existingSpec === undefined) {
+                return;
+            }
+            // Session has not been used yet — harness can still change.
+            if (existingSpec.harnessStateId === "") {
+                return;
+            }
+            const inputSpec = ctx.input.spec;
+            if (inputSpec === undefined) {
+                return;
+            }
+            // Treat UNSPECIFIED as NATIVE for comparison.
+            let existingHarness = existingSpec.harness;
+            let inputHarness = inputSpec.harness;
+            if (existingHarness === Harness.UNSPECIFIED) {
+                existingHarness = Harness.NATIVE;
+            }
+            if (inputHarness === Harness.UNSPECIFIED) {
+                inputHarness = Harness.NATIVE;
+            }
+            if (inputHarness !== existingHarness) {
+                throw failedPreconditionError("session harness cannot be changed after the first execution — each harness owns its conversation state independently");
+            }
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// ValidateExecutionTargetImmutability —
+// validate_execution_target_immutability.go: rejects session updates that
+// attempt to change execution_target after the session has been used for
+// execution — workspace state may not be portable between local and cloud
+// environments.
+//
+// UNSPECIFIED is compared by what dispatch would actually do with it: both
+// the existing and the input target are resolved through the same
+// deployment default dispatch uses (resolveExecutionTarget — LOCAL on OSS,
+// CLOUD on hosted deployments), so "no effective change" and "no dispatch
+// change" are the same predicate on every deployment. Hardcoding
+// UNSPECIFIED to a fixed target here would refuse round-trips that change
+// nothing on cloud-defaulting deployments and wave through updates that
+// really do move the session (oss#397).
+//
+// Uses the same sentinel as harness immutability: harness_state_id is
+// non-empty after the first execution completes.
+// ---------------------------------------------------------------------------
+/**
+ * Go's ExecutionTarget.String() names, reproduced explicitly: protobuf-es
+ * strips the shared EXECUTION_TARGET_ prefix from the TS enum members
+ * (ExecutionTarget[1] yields "LOCAL"), but the refusal copy carries the
+ * full proto value names — cross-edition wire contract.
+ */
+const EXECUTION_TARGET_GO_NAMES = {
+    [ExecutionTarget.UNSPECIFIED]: "EXECUTION_TARGET_UNSPECIFIED",
+    [ExecutionTarget.LOCAL]: "EXECUTION_TARGET_LOCAL",
+    [ExecutionTarget.CLOUD]: "EXECUTION_TARGET_CLOUD",
+};
+export function newValidateExecutionTargetImmutabilityStep(temporalConfig) {
+    return {
+        name: "ValidateExecutionTargetImmutability",
+        execute(ctx) {
+            const existing = ctx.get(EXISTING_RESOURCE_KEY);
+            if (existing === undefined) {
+                return;
+            }
+            const existingSpec = existing.spec;
+            if (existingSpec === undefined) {
+                return;
+            }
+            if (existingSpec.harnessStateId === "") {
+                return;
+            }
+            const inputSpec = ctx.input.spec;
+            if (inputSpec === undefined) {
+                return;
+            }
+            const existingTarget = temporalConfig.resolveExecutionTarget(existingSpec.executionTarget);
+            const inputTarget = temporalConfig.resolveExecutionTarget(inputSpec.executionTarget);
+            if (inputTarget !== existingTarget) {
+                throw failedPreconditionError(`session execution_target cannot be changed after the first execution (${EXECUTION_TARGET_GO_NAMES[existingTarget]} → ${EXECUTION_TARGET_GO_NAMES[inputTarget]}; unset resolves to the deployment default, ${temporalConfig.defaultExecutionTarget}) — workspace state may not be portable between local and cloud environments`);
+            }
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// RecordHarnessStateHistory — record_harness_state_history.go: maintains
+// the server-owned harness_state_id_history on the merged update state.
+//
+// A session can span multiple harness-side conversations: when the
+// cursor-runner's resume fails, it creates a fresh Cursor agent and
+// replaces harness_state_id via a normal session update. The replaced id
+// must not be destroyed — billing reconciliation joins Cursor ledger
+// events on the union of current + prior ids, and every turn that ran
+// under a replaced id would otherwise become an orphaned ledger event.
+//
+// The history is computed here, from the observed harness_state_id
+// transition, and never taken from client input: BuildUpdateState performs
+// full spec replacement, so a stale client resending an old spec would
+// silently clobber a client-writable history. Resetting it from the
+// existing record makes the server the single writer of this field.
+//
+// Must run after BuildUpdateState (it mutates the merged state) and
+// before Persist.
+// ---------------------------------------------------------------------------
+export function newRecordHarnessStateHistoryStep() {
+    return {
+        name: "RecordHarnessStateHistory",
+        execute(ctx) {
+            const mergedSpec = ctx.newState.spec;
+            if (mergedSpec === undefined) {
+                return;
+            }
+            const existing = ctx.get(EXISTING_RESOURCE_KEY);
+            if (existing === undefined || existing.spec === undefined) {
+                return;
+            }
+            const existingSpec = existing.spec;
+            // Server-owned: the merged state carries whatever the client sent
+            // for this field — discard it and rebuild from the stored history.
+            const history = [...existingSpec.harnessStateIdHistory];
+            const previousId = existingSpec.harnessStateId;
+            if (previousId !== "" &&
+                previousId !== mergedSpec.harnessStateId &&
+                !history.includes(previousId)) {
+                history.push(previousId);
+            }
+            mergedSpec.harnessStateIdHistory = history;
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// Delete guard + cascade — delete.go. Children before parent, so a
+// mid-failure retry converges (already-deleted executions are simply no
+// longer found; the reverse order would orphan executions permanently).
+// The cross-kind access to agent_execution rows (#17's kind) is RATIFIED
+// (project T01 brief) — the session owns its executions' lifecycle.
+// ---------------------------------------------------------------------------
+/**
+ * Whether an execution phase counts as active for the session-delete
+ * guard: pending, in progress, waiting for approval, or paused.
+ * WAITING_FOR_APPROVAL and PAUSED are deliberately included — the
+ * execution is logically alive and expected to resume. Mirrors the Cloud
+ * AgentExecutionRepo.countActiveBySessionId phase set (Go
+ * isActiveExecutionPhase, default-false switch).
+ */
+function isActiveExecutionPhase(phase) {
+    switch (phase) {
+        case ExecutionPhase.EXECUTION_PENDING:
+        case ExecutionPhase.EXECUTION_IN_PROGRESS:
+        case ExecutionPhase.EXECUTION_WAITING_FOR_APPROVAL:
+        case ExecutionPhase.EXECUTION_PAUSED:
+            return true;
+        default:
+            return false;
+    }
+}
+/**
+ * Loads every agent execution whose spec.session_id matches the given
+ * session; malformed rows warn and are skipped. Shared by the guard and
+ * cascade steps (Go listExecutionsBySession).
+ */
+async function listExecutionsBySession(store, logger, sessionId) {
+    let rows;
+    try {
+        rows = await store.listResources(ApiResourceKind.agent_execution);
+    }
+    catch (error) {
+        throw internalError(error, "failed to list agent executions");
+    }
+    const executions = [];
+    for (const data of rows) {
+        let execution;
+        try {
+            execution = fromBinary(AgentExecutionSchema, data);
+        }
+        catch (error) {
+            logger.warn("Failed to unmarshal execution, skipping", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            continue;
+        }
+        if ((execution.spec?.sessionId ?? "") === sessionId) {
+            executions.push(execution);
+        }
+    }
+    return executions;
+}
+/**
+ * RejectDeleteWithActiveExecutions — rejects deletion while any agent
+ * execution in the session is still active. Deleting a session mid-run
+ * would strand a live execution whose conversation no longer exists; the
+ * caller must cancel the execution or wait for it to finish. Error
+ * contract matches Stigmer Cloud's
+ * SessionDeleteHandler.RejectDeleteWithActiveExecutionsStep.
+ */
+export function newRejectDeleteWithActiveExecutionsStep(store, logger) {
+    return {
+        name: "RejectDeleteWithActiveExecutions",
+        async execute(ctx) {
+            const sessionId = requireSessionId(ctx);
+            const executions = await listExecutionsBySession(store, logger, sessionId);
+            let activeCount = 0;
+            for (const execution of executions) {
+                if (isActiveExecutionPhase(execution.status?.phase ??
+                    ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED)) {
+                    activeCount++;
+                }
+            }
+            if (activeCount > 0) {
+                throw failedPreconditionError(`session has ${activeCount} active execution(s); cancel them or wait for completion before deleting`);
+            }
+        },
+    };
+}
+/**
+ * CascadeDeleteAgentExecutions — deletes the session's agent executions
+ * before the session row itself. Billing/usage data is unaffected — usage
+ * records are immutable and carry their own copies of session/execution
+ * identifiers. Search-index removal per execution is best-effort,
+ * matching DeleteSearchIndexStep's convention.
+ */
+export function newCascadeDeleteAgentExecutionsStep(store, logger) {
+    return {
+        name: "CascadeDeleteAgentExecutions",
+        async execute(ctx) {
+            const sessionId = requireSessionId(ctx);
+            const executions = await listExecutionsBySession(store, logger, sessionId);
+            if (executions.length === 0) {
+                return;
+            }
+            for (const execution of executions) {
+                const executionId = execution.metadata?.id ?? "";
+                try {
+                    await store.deleteResource(ApiResourceKind.agent_execution, executionId);
+                }
+                catch (error) {
+                    throw internalError(error, `failed to cascade-delete execution ${executionId} of session ${sessionId}`);
+                }
+                try {
+                    await store.deleteSearchIndex(ApiResourceKind.agent_execution, executionId);
+                }
+                catch (error) {
+                    logger.warn("CascadeDeleteAgentExecutions: failed to remove search index entry (best-effort)", {
+                        executionId,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                }
+            }
+            logger.info("Cascade-deleted executions of session", {
+                sessionId,
+                count: executions.length,
+            });
+        },
+    };
+}
+/** The delete pipeline's extracted session id (ExtractResourceId runs first). */
+function requireSessionId(ctx) {
+    const sessionId = ctx.get(RESOURCE_ID_KEY);
+    if (typeof sessionId !== "string" || sessionId === "") {
+        throw internalError(new Error("session id not found in context (ExtractResourceId must run first)"), "session id not found in context (ExtractResourceId must run first)");
+    }
+    return sessionId;
+}
+// ---------------------------------------------------------------------------
+// List steps — list.go and the steps/ package. Full scans with client-side
+// filtering, exactly Go (no pagination; no scope composed = no authorization
+// filtering, the OSS single-user posture). With a composed ListReadScope
+// (20260830.01) each lane narrows to the caller's authorized sessions —
+// the Java list handlers' FGA-ids pattern, guest cookie rule included
+// driver-side; the request org is deliberately NOT intersected (the Java
+// session lanes never consult it — census lanes 1–3).
+// ---------------------------------------------------------------------------
+/**
+ * ListAllSessions — all sessions, newest first by spec-audit created_at
+ * (seconds then nanos; timestamped entries before untimestamped ones).
+ * Malformed rows warn and are skipped.
+ */
+export function newListAllSessionsStep(store, logger, listReadScope) {
+    return {
+        name: "ListAllSessions",
+        async execute(ctx) {
+            const sessions = await restrictListByReadScope(listReadScope, ctx.callerIdentity, ApiResourceKind.session, await loadAllSessions(store, logger, ctx.apiResourceKind), "");
+            sessions.sort((a, b) => compareCreatedAtDesc(a.status?.audit?.specAudit?.createdAt, b.status?.audit?.specAudit?.createdAt));
+            logger.info("Loaded sessions from database", { count: sessions.length });
+            ctx.set(LIST_RESULT_KEY, create(SessionListSchema, { entries: sessions }));
+        },
+    };
+}
+/**
+ * FilterByAgentInstance — steps/filter_by_agent_instance.go: sessions
+ * whose spec.agent_instance_id matches. No sorting (Go doesn't sort here).
+ */
+export function newFilterByAgentInstanceStep(store, logger, listReadScope) {
+    return {
+        name: "FilterByAgentInstance",
+        async execute(ctx) {
+            const agentInstanceId = ctx.input.agentInstanceId;
+            if (agentInstanceId === "") {
+                throw invalidArgumentError("agent_instance_id is required");
+            }
+            const sessions = await restrictListByReadScope(listReadScope, ctx.callerIdentity, ApiResourceKind.session, await loadAllSessions(store, logger, ctx.apiResourceKind), "");
+            const filtered = sessions.filter((session) => (session.spec?.agentInstanceId ?? "") === agentInstanceId);
+            logger.info("Filtered sessions by agent instance", {
+                agentInstanceId,
+                totalSessions: sessions.length,
+                filteredSessions: filtered.length,
+            });
+            ctx.set(LIST_RESULT_KEY, create(SessionListSchema, { entries: filtered }));
+        },
+    };
+}
+/**
+ * AuthorizeChannelAccess — the Java SessionListByChannelHandler's
+ * two-stage authorization, stage one (census lane 3's extra arm,
+ * 20260830.01 ruling Q8): an explicit can_view check on the TARGET
+ * agent_channel before any session work, so a caller without channel
+ * access learns nothing about the channel's sessions. The mid-chain
+ * resolved-id evaluation (the is_skip_authorization annotation makes the
+ * position-1 step a no-op on this lane); deny copy is the Java handler's
+ * byte-pinned "unauthorized to list channel conversations". The blank-id
+ * refusal stays FilterByChannel's (the step behind this gate) — the gate
+ * checks only a named channel.
+ */
+export function newAuthorizeChannelAccessStep(authorizer) {
+    return {
+        name: "AuthorizeChannelAccess",
+        async execute(ctx) {
+            if (ctx.input.channelId === "") {
+                return;
+            }
+            await authorizeResolvedResource(authorizer, ctx.callerIdentity, {
+                permission: IamPermission.can_view,
+                resourceKind: ApiResourceKind.agent_channel,
+                resourceId: ctx.input.channelId,
+            }, "unauthorized to list channel conversations");
+        },
+    };
+}
+/**
+ * FilterByChannel — steps/filter_by_channel.go: sessions whose
+ * metadata.labels carry the channel's stigmer.ai/channel-id stamp. No
+ * sorting. Channel sessions are created by the cloud channel runtime
+ * (Slack/WhatsApp inbound turns), which stamps the label at create time;
+ * the OSS runtime has no channel broker, so this filter typically matches
+ * nothing — the RPC exists for contract parity with Stigmer Cloud (which
+ * additionally gates on can_view of the agent_channel and intersects with
+ * FGA-authorized session IDs).
+ */
+export function newFilterByChannelStep(store, logger, listReadScope) {
+    return {
+        name: "FilterByChannel",
+        async execute(ctx) {
+            const channelId = ctx.input.channelId;
+            if (channelId === "") {
+                throw invalidArgumentError("channel_id is required");
+            }
+            const sessions = await restrictListByReadScope(listReadScope, ctx.callerIdentity, ApiResourceKind.session, await loadAllSessions(store, logger, ctx.apiResourceKind), "");
+            const filtered = sessions.filter((session) => (session.metadata?.labels ?? {})[CHANNEL_ID_LABEL_KEY] === channelId);
+            logger.info("Filtered sessions by channel", {
+                channelId,
+                totalSessions: sessions.length,
+                filteredSessions: filtered.length,
+            });
+            ctx.set(LIST_RESULT_KEY, create(SessionListSchema, { entries: filtered }));
+        },
+    };
+}
+/** Full-scan session load shared by the list steps; malformed rows warn + skip. */
+async function loadAllSessions(store, logger, kind) {
+    let rows;
+    try {
+        rows = await store.listResources(kind);
+    }
+    catch (error) {
+        throw internalError(error, "failed to list sessions");
+    }
+    const sessions = [];
+    for (const data of rows) {
+        let session;
+        try {
+            session = fromBinary(SessionSchema, data);
+        }
+        catch (error) {
+            logger.warn("Failed to unmarshal session, skipping", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            continue;
+        }
+        sessions.push(session);
+    }
+    return sessions;
+}
+//# sourceMappingURL=steps.js.map

package/dist/domain/session/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../../src/domain/session/steps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AAEjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AAEnG,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAE9F,OAAO,EAAE,aAAa,EAAE,MAAM,sDAAsD,CAAC;AAErF,OAAO,EACL,eAAe,EACf,OAAO,GACR,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qDAAqD,CAAC;AAExF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAI1E,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAE3F,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAIlC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAE5C;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AA8BrD,8EAA8E;AAC9E,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,4EAA4E;AAC5E,yEAAyE;AACzE,+DAA+D;AAC/D,iBAAiB;AACjB,EAAE;AACF,yEAAyE;AACzE,0DAA0D;AAC1D,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,mEAAmE;AACnE,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,UAAU,kCAAkC,CAChD,KAAY,EACZ,OAAqC,EACrC,MAAc,EACd,sBAAuD;IAEvD,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,CAAC,OAAO,CAAC,GAAgC;YAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CACT,6EAA6E,CAC9E,CAAC;YAEF,iEAAiE;YACjE,iEAAiE;YACjE,gEAAgE;YAChE,iEAAiE;YACjE,eAAe;YACf,IAAI,YAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,YAAY,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;oBACpD,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;wBACnD,KAAK,EAAE,KAAK,CAAC,OAAO;qBACrB,CAAC,CAAC;oBACH,MAAM,IAAI,YAAY,CACpB,mKAAmK,KAAK,CAAC,OAAO,EAAE,EAClL,IAAI,CAAC,QAAQ,CACd,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;oBAChD,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;wBACrD,KAAK,EAAE,KAAK,CAAC,OAAO;qBACrB,CAAC,CAAC;oBACH,MAAM,IAAI,YAAY,CACpB,sDAAsD,KAAK,CAAC,OAAO,EAAE,EACrE,IAAI,CAAC,kBAAkB,CACxB,CAAC;gBACJ,CAAC;gBACD,4DAA4D;gBAC5D,qDAAqD;gBACrD,yBAAyB;gBACzB,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACvD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,MAAM,aAAa,CACjB,KAAK,EACL,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;YACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,+DAA+D;gBAC/D,iDAAiD;gBACjD,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,+BAA+B,CAAC,EAC1C,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC7C,OAAO;gBACP,SAAS,EAAE,QAAQ,CAAC,IAAI;aACzB,CAAC,CAAC;YAEH,yCAAyC;YACzC,IAAI,iBAAiB,GAAG,YAAY,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC;YACrE,IAAI,iBAAiB,KAAK,EAAE,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBAEnE,MAAM,eAAe,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;gBAE9D,kEAAkE;gBAClE,kEAAkE;gBAClE,8DAA8D;gBAC9D,2DAA2D;gBAC3D,0DAA0D;gBAC1D,iEAAiE;gBACjE,gEAAgE;gBAChE,gEAAgE;gBAChE,iCAAiC;gBACjC,IAAI,eAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,eAAe,GAAG,MAAM,OAAO,EAAE,CAAC,cAAc,CAC9C,eAAe,EACf,GAAG,CAAC,cAAc,CACnB,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;wBAChD,OAAO;wBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;wBAClC,MAAM,oBAAoB,CACxB,qDAAqD,EACrD,KAAK,CACN,CAAC;oBACJ,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,wDAAwD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACjH,CAAC;gBACJ,CAAC;gBAED,iBAAiB,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;gBAEvD,kEAAkE;gBAClE,0DAA0D;gBAC1D,mCAAmC;gBACnC,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACtC,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;gBACtD,CAAC;gBACD,YAAY,CAAC,MAAM,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;gBAC1D,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,YAAY,CACtB,eAAe,CAAC,KAAK,EACrB,OAAO,EACP,WAAW,EACX,YAAY,CACb,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;wBAC/D,OAAO;wBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,gEAAgE;oBAChE,MAAM,IAAI,KAAK,CACb,kDAAkD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3G,CAAC;gBACJ,CAAC;gBAED,mEAAmE;gBACnE,MAAM,2BAA2B,CAAC,sBAAsB,EAAE;oBACxD,YAAY,EAAE,eAAe,CAAC,cAAc;oBAC5C,UAAU,EAAE,iBAAiB;oBAC7B,aAAa,EAAE,eAAe,CAAC,KAAK;oBACpC,WAAW,EAAE,OAAO;iBACrB,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;oBACxD,UAAU,EAAE,iBAAiB;oBAC7B,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAED,mEAAmE;YACnE,0CAA0C;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC9B,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,iBAAiB,CAAC;YAElD,MAAM,CAAC,IAAI,CACT,8DAA8D,EAC9D;gBACE,eAAe,EAAE,iBAAiB;aACnC,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,oEAAoE;AACpE,0EAA0E;AAC1E,2DAA2D;AAC3D,0EAA0E;AAC1E,4DAA4D;AAC5D,2EAA2E;AAC3E,8EAA8E;AAE9E,MAAM,UAAU,kCAAkC;IAChD,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,OAAO,CAAC,GAAgC;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAwB,CAAC;YACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC;YACnC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,4DAA4D;YAC5D,IAAI,YAAY,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;gBACvC,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,8CAA8C;YAC9C,IAAI,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC;YAC3C,IAAI,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC;YACrC,IAAI,eAAe,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC5C,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;YACnC,CAAC;YACD,IAAI,YAAY,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzC,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;YAChC,CAAC;YAED,IAAI,YAAY,KAAK,eAAe,EAAE,CAAC;gBACrC,MAAM,uBAAuB,CAC3B,sHAAsH,CACvH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wCAAwC;AACxC,0EAA0E;AAC1E,yEAAyE;AACzE,0EAA0E;AAC1E,gBAAgB;AAChB,EAAE;AACF,2EAA2E;AAC3E,kEAAkE;AAClE,2EAA2E;AAC3E,0EAA0E;AAC1E,iEAAiE;AACjE,0EAA0E;AAC1E,wEAAwE;AACxE,wCAAwC;AACxC,EAAE;AACF,sEAAsE;AACtE,iDAAiD;AACjD,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,yBAAyB,GAA8C;IAC3E,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,8BAA8B;IAC7D,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,wBAAwB;IACjD,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,wBAAwB;CAClD,CAAC;AAEF,MAAM,UAAU,0CAA0C,CACxD,cAA4C;IAE5C,OAAO;QACL,IAAI,EAAE,qCAAqC;QAC3C,OAAO,CAAC,GAAgC;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAwB,CAAC;YACvE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC;YACnC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,IAAI,YAAY,CAAC,cAAc,KAAK,EAAE,EAAE,CAAC;gBACvC,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAAG,cAAc,CAAC,sBAAsB,CAC1D,YAAY,CAAC,eAAe,CAC7B,CAAC;YACF,MAAM,WAAW,GAAG,cAAc,CAAC,sBAAsB,CACvD,SAAS,CAAC,eAAe,CAC1B,CAAC;YAEF,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;gBACnC,MAAM,uBAAuB,CAC3B,yEAAyE,yBAAyB,CAAC,cAAc,CAAC,MAAM,yBAAyB,CAAC,WAAW,CAAC,+CAA+C,cAAc,CAAC,sBAAsB,8EAA8E,CACjU,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,wEAAwE;AACxE,EAAE;AACF,mEAAmE;AACnE,oEAAoE;AACpE,yEAAyE;AACzE,qEAAqE;AACrE,sEAAsE;AACtE,uEAAuE;AACvE,EAAE;AACF,mEAAmE;AACnE,2EAA2E;AAC3E,uEAAuE;AACvE,oEAAoE;AACpE,oEAAoE;AACpE,EAAE;AACF,oEAAoE;AACpE,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,UAAU,gCAAgC;IAC9C,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,OAAO,CAAC,GAAgC;YACtC,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAwB,CAAC;YACvE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1D,OAAO;YACT,CAAC;YACD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC;YAEnC,kEAAkE;YAClE,mEAAmE;YACnE,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;YAExD,MAAM,UAAU,GAAG,YAAY,CAAC,cAAc,CAAC;YAC/C,IACE,UAAU,KAAK,EAAE;gBACjB,UAAU,KAAK,UAAU,CAAC,cAAc;gBACxC,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC7B,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;YAED,UAAU,CAAC,qBAAqB,GAAG,OAAO,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,oEAAoE;AACpE,8EAA8E;AAE9E;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,KAAqB;IACnD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,cAAc,CAAC,iBAAiB,CAAC;QACtC,KAAK,cAAc,CAAC,qBAAqB,CAAC;QAC1C,KAAK,cAAc,CAAC,8BAA8B,CAAC;QACnD,KAAK,cAAc,CAAC,gBAAgB;YAClC,OAAO,IAAI,CAAC;QACd;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CACpC,KAAY,EACZ,MAAc,EACd,SAAiB;IAEjB,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,SAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,SAAS,GAAG,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBACrD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;YACpD,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uCAAuC,CAErD,KAAY,EAAE,MAAc;IAC5B,OAAO;QACL,IAAI,EAAE,kCAAkC;QACxC,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAC9C,KAAK,EACL,MAAM,EACN,SAAS,CACV,CAAC;YAEF,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IACE,sBAAsB,CACpB,SAAS,CAAC,MAAM,EAAE,KAAK;oBACrB,cAAc,CAAC,2BAA2B,CAC7C,EACD,CAAC;oBACD,WAAW,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,uBAAuB,CAC3B,eAAe,WAAW,0EAA0E,CACrG,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAY,EACZ,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,uBAAuB,CAC9C,KAAK,EACL,MAAM,EACN,SAAS,CACV,CAAC;YACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,cAAc,CACxB,eAAe,CAAC,eAAe,EAC/B,WAAW,CACZ,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,aAAa,CACjB,KAAK,EACL,sCAAsC,WAAW,eAAe,SAAS,EAAE,CAC5E,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,iBAAiB,CAC3B,eAAe,CAAC,eAAe,EAC/B,WAAW,CACZ,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CACT,iFAAiF,EACjF;wBACE,WAAW;wBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;gBACnD,SAAS;gBACT,KAAK,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CACvB,GAAyB;IAEzB,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACtD,MAAM,aAAa,CACjB,IAAI,KAAK,CACP,oEAAoE,CACrE,EACD,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AACzE,sDAAsD;AACtD,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAY,EACZ,MAAc,EACd,aAAwC;IAExC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,KAAK,CAAC,OAAO,CACX,GAAoE;YAEpE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC5C,aAAa,EACb,GAAG,CAAC,cAAc,EAClB,eAAe,CAAC,OAAO,EACvB,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,EACzD,EAAE,CACH,CAAC;YAEF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrB,oBAAoB,CAClB,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EACrC,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CACtC,CACF,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAEzE,GAAG,CAAC,GAAG,CACL,eAAe,EACf,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CACjD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAY,EACZ,MAAc,EACd,aAAwC;IAIxC,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,OAAO,CACX,GAEC;YAED,MAAM,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;YAClD,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;gBAC3B,MAAM,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC5C,aAAa,EACb,GAAG,CAAC,cAAc,EAClB,eAAe,CAAC,OAAO,EACvB,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,EACzD,EAAE,CACH,CAAC;YACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC,KAAK,eAAe,CACvE,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACjD,eAAe;gBACf,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,gBAAgB,EAAE,QAAQ,CAAC,MAAM;aAClC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,CACL,eAAe,EACf,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CACjD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAsB;IAEtB,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,KAAK,CAAC,OAAO,CACX,GAEC;YAED,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM,yBAAyB,CAC7B,UAAU,EACV,GAAG,CAAC,cAAc,EAClB;gBACE,UAAU,EAAE,aAAa,CAAC,QAAQ;gBAClC,YAAY,EAAE,eAAe,CAAC,aAAa;gBAC3C,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS;aAChC,EACD,4CAA4C,CAC7C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAY,EACZ,MAAc,EACd,aAAwC;IAExC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,KAAK,CAAC,OAAO,CACX,GAEC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;YACtC,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACrB,MAAM,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC5C,aAAa,EACb,GAAG,CAAC,cAAc,EAClB,eAAe,CAAC,OAAO,EACvB,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,EACzD,EAAE,CACH,CAAC;YACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAC9B,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,oBAAoB,CAAC,KAAK,SAAS,CACvE,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC1C,SAAS;gBACT,aAAa,EAAE,QAAQ,CAAC,MAAM;gBAC9B,gBAAgB,EAAE,QAAQ,CAAC,MAAM;aAClC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,CACL,eAAe,EACf,MAAM,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CACjD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,eAAe,CAC5B,KAAY,EACZ,MAAc,EACd,IAAqB;IAErB,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;gBACnD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}