@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/agent/steps.js

@@ -0,0 +1,482 @@
+/**
+ * Agent domain-local pipeline steps — port the inline steps of
+ * pkg/domain/agent/controller/ (create.go, delete_cascade.go,
+ * get_default.go, merge_mcp_env_specs.go, validate_enabled_tools.go).
+ * Shared steps stay in src/pipeline/steps/; these exist because they
+ * embody agent-specific contracts: the default-instance choreography, the
+ * cascade rules, MCP env merging, and enabled-tools validation.
+ */
+import { Code, ConnectError } from "@connectrpc/connect";
+import { create, fromBinary } from "@bufbuild/protobuf";
+import { AgentStatusSchema } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/status_pb";
+import { AgentInstanceSchema } from "@stigmer/protos/ai/stigmer/agentic/agentinstance/v1/api_pb";
+import { AgentShareSchema } from "@stigmer/protos/ai/stigmer/agentic/agentshare/v1/api_pb";
+import { EnvVarDeclarationSchema } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/spec_pb";
+import { McpServerSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { classify, isValidClassification, quoteJoin, toolNames, } from "../mcpserver/enabledtools/enabledtools.js";
+import { goWrappedStatusError, internalError, invalidArgumentError, } from "../../pipeline/errors.js";
+import { notifyDefaultInstanceLinked } from "../../pipeline/steps/authorization-tuples.js";
+import { EXISTING_RESOURCE_KEY } from "../../pipeline/steps/load-existing.js";
+import { TARGET_RESOURCE_KEY } from "../../pipeline/steps/load-target.js";
+import { findResourceBySlug } from "../../pipeline/steps/helpers.js";
+import { buildDefaultInstanceRequest } from "../agentinstance/defaultinstance.js";
+import { DefaultAgentNotConfiguredError, DefaultAgentNotPublicError, findDefaultAgent, } from "./defaultagent.js";
+/** Context key carrying the applied default instance's id (Go DefaultInstanceIDKey). */
+const DEFAULT_INSTANCE_ID_KEY = "default_instance_id";
+// ---------------------------------------------------------------------------
+// ValidateEnabledTools — validate_enabled_tools.go: rejects agent manifests
+// whose McpServerUsage.enabled_tools name tools the referenced MCP server
+// does not expose (issue #402). Runtime enforcement (runner
+// shared/mcp-enabled-tools.ts, issue #350) is deliberately lenient — warn
+// and drop — so a manifest typo silently narrows the agent's toolset; this
+// step is the apply-time half of that owner decision: reject the typo where
+// the operator can see it, with the server's real tool names in the error.
+//
+// Deliberate skips: empty enabled_tools ("use the server's
+// default_enabled_tools"); referenced server not found (ValidateReferences,
+// earlier in the pipeline, already rejects with its own actionable error);
+// server without discovered_capabilities (not yet connected — no
+// authoritative toolset; the runner's warn-and-intersect remains the safety
+// net for that window).
+//
+// Pipeline position: AFTER ValidateReferences, BEFORE Persist.
+// ---------------------------------------------------------------------------
+export function newValidateEnabledToolsStep(store) {
+    return {
+        name: "ValidateEnabledTools",
+        async execute(ctx) {
+            const agent = ctx.newState;
+            for (const usage of agent.spec?.mcpServerUsages ?? []) {
+                if (usage.enabledTools.length === 0) {
+                    continue;
+                }
+                const ref = usage.mcpServerRef;
+                const slug = ref?.slug ?? "";
+                if (slug === "") {
+                    continue;
+                }
+                let org = ref?.org ?? "";
+                if (org === "") {
+                    org = agent.metadata?.org ?? "";
+                }
+                let mcpServer;
+                try {
+                    mcpServer = await findResourceBySlug(store, ApiResourceKind.mcp_server, McpServerSchema, slug, org);
+                }
+                catch (error) {
+                    // Go wraps as a plain error → the pipeline's Internal fallback.
+                    throw new Error(`failed to look up MCP server '${slug}' (org: ${org}) for enabled_tools validation: ${error instanceof Error ? error.message : String(error)}`);
+                }
+                if (mcpServer === undefined) {
+                    continue;
+                }
+                const caps = mcpServer.status?.discoveredCapabilities;
+                if (caps === undefined) {
+                    continue;
+                }
+                const classification = classify(caps, usage.enabledTools);
+                if (!isValidClassification(classification)) {
+                    throw invalidEnabledToolsError(slug, org, classification, caps);
+                }
+            }
+        },
+    };
+}
+/**
+ * Go invalidEnabledToolsError: the operator-facing INVALID_ARGUMENT. It
+ * names the offending entries, distinguishes resource-template names from
+ * plain typos, and lists the discovered tool names so the fix is one edit
+ * away. The refresh hint covers the honest failure mode where the server's
+ * toolset changed after the last discovery. Byte-pinned copy.
+ */
+function invalidEnabledToolsError(slug, org, c, caps) {
+    const problems = [];
+    if (c.unknown.length > 0) {
+        problems.push(`enabled_tools names tool(s) the server does not expose: ${quoteJoin(c.unknown)}`);
+    }
+    if (c.resourceTemplates.length > 0) {
+        problems.push(`enabled_tools names resource template(s): ${quoteJoin(c.resourceTemplates)} — resource templates are read-only data endpoints, not callable tools, and must not appear in enabled_tools`);
+    }
+    return invalidArgumentError(`MCP server '${slug}' (org: ${org}): ${problems.join("; ")}. ` +
+        `Discovered tools: ${quoteJoin(toolNames(caps))}. ` +
+        "If the server's toolset changed, run 'stigmer connect' on it to refresh discovered capabilities.");
+}
+// ---------------------------------------------------------------------------
+// MergeMcpServerEnvSpecs — merge_mcp_env_specs.go: merges env DECLARATIONS
+// from referenced MCP servers into the agent's env at create/update time,
+// so the UI/CLI can show what the agent needs, AgentInstance configuration
+// knows which vars to supply, and execution-time validation has the
+// complete schema.
+//
+// Merge semantics: agent-declared entries always take precedence (user
+// intent is preserved); among MCP servers, first-encountered wins for
+// overlapping keys; only declaration fields (description, is_secret,
+// optional) are merged — actual values come from
+// AgentInstance.environment_refs at runtime.
+//
+// Lenient by design: a server that cannot be found (not yet created,
+// different org, …) logs a warning and is skipped. The authoritative
+// fail-fast check remains McpEnvironmentValidator at execution creation.
+//
+// Pipeline position: AFTER NormalizeReferences (needs resolved org),
+// BEFORE Persist.
+// ---------------------------------------------------------------------------
+export function newMergeMcpServerEnvSpecsStep(store, logger) {
+    return {
+        name: "MergeMcpServerEnvSpecs",
+        async execute(ctx) {
+            const agent = ctx.newState;
+            const usages = agent.spec?.mcpServerUsages ?? [];
+            if (usages.length === 0) {
+                return;
+            }
+            const mcpEnvVars = {};
+            for (const usage of usages) {
+                const ref = usage.mcpServerRef;
+                const slug = ref?.slug ?? "";
+                if (slug === "") {
+                    continue;
+                }
+                let org = ref?.org ?? "";
+                if (org === "") {
+                    org = agent.metadata?.org ?? "";
+                }
+                if (org === "") {
+                    continue;
+                }
+                let mcpServer;
+                try {
+                    mcpServer = await findResourceBySlug(store, ApiResourceKind.mcp_server, McpServerSchema, slug, org);
+                }
+                catch (error) {
+                    logger.warn("Failed to look up MCP server for env merge", {
+                        mcpServerSlug: slug,
+                        org,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    continue;
+                }
+                if (mcpServer === undefined) {
+                    logger.warn("MCP server not found — skipping env merge for this server", { mcpServerSlug: slug, org });
+                    continue;
+                }
+                const serverEnv = mcpServer.spec?.env ?? {};
+                for (const [varName, decl] of Object.entries(serverEnv)) {
+                    if (!(varName in mcpEnvVars)) {
+                        mcpEnvVars[varName] = create(EnvVarDeclarationSchema, {
+                            description: decl.description,
+                            isSecret: decl.isSecret,
+                            optional: decl.optional,
+                        });
+                    }
+                }
+            }
+            if (Object.keys(mcpEnvVars).length === 0) {
+                return;
+            }
+            const spec = agent.spec;
+            if (spec === undefined) {
+                return;
+            }
+            const existingEnv = spec.env;
+            const merged = { ...mcpEnvVars };
+            for (const [k, v] of Object.entries(existingEnv)) {
+                merged[k] = v;
+            }
+            spec.env = merged;
+            const mergedCount = Object.keys(merged).length - Object.keys(existingEnv).length;
+            if (mergedCount > 0) {
+                logger.info("Merged MCP server env declarations into agent env", {
+                    injectedCount: mergedCount,
+                    totalCount: Object.keys(merged).length,
+                    agent: agent.metadata?.slug ?? "",
+                });
+            }
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// CreateDefaultInstance + UpdateAgentStatusWithDefaultInstance — create.go's
+// post-persist choreography. Split in two so the second database persist is
+// explicit in the chain (Go's stated rationale).
+// ---------------------------------------------------------------------------
+/**
+ * Applies (not creates — idempotency) the agent's default instance through
+ * the in-process client. Agent delete cascades the default instance, so
+ * this normally routes to CREATE; the UPDATE route remains as self-heal for
+ * pre-cascade legacy orphans (self-hosters upgrading across the T08
+ * release), which Apply recovers by re-pointing agent_id at the new agent.
+ *
+ * Versus Go: no nil-client skip — the provider is a required dependency
+ * (the staged composition root eliminates the nil-then-inject window whose
+ * silent no-op the domain inventory flags).
+ */
+export function newCreateDefaultInstanceStep(applierProvider, logger) {
+    return {
+        name: "CreateDefaultInstance",
+        async execute(ctx) {
+            const agent = ctx.newState;
+            const metadata = agent.metadata;
+            if (metadata === undefined) {
+                throw internalError(new Error("agent metadata is nil after persist"), "agent metadata is nil after persist");
+            }
+            logger.info("Creating default instance for agent", {
+                agentId: metadata.id,
+                slug: metadata.slug,
+                org: metadata.org,
+            });
+            const instanceRequest = buildDefaultInstanceRequest(metadata);
+            // Go create.go:124-127 wraps the downstream error with fmt.Errorf
+            // ("failed to apply default instance: %w") and PipelineError
+            // .GRPCStatus's errors.As branch keeps the inner CODE but rewrites
+            // the wire MESSAGE to the wrapped text — transport formatting
+            // (`rpc error: code = X desc = ...`) included. Mirrored byte-for-
+            // byte via goWrappedStatusError; the leak is stigmer/stigmer#852
+            // (both-editions post-cutover fix). Unstatused failures fall to the
+            // pipeline's Internal fallback, exactly Go's plain-error path.
+            let applied;
+            try {
+                applied = await applierProvider().applyAsCaller(instanceRequest, ctx.callerIdentity);
+            }
+            catch (error) {
+                if (error instanceof ConnectError) {
+                    throw goWrappedStatusError("failed to apply default instance", error);
+                }
+                throw new Error(`failed to apply default instance: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            logger.info("Successfully applied default instance for agent", {
+                instanceId: applied.metadata?.id ?? "",
+                agentId: metadata.id,
+            });
+            ctx.set(DEFAULT_INSTANCE_ID_KEY, applied.metadata?.id ?? "");
+        },
+    };
+}
+/**
+ * Writes status.default_instance_id onto the just-persisted agent and
+ * re-persists. Reads the id from context (set by CreateDefaultInstance).
+ * Fires the driver's default-instance link event AFTER the pointer
+ * persists (C2 Stage 3 — the default_of invariant rides the pointer).
+ */
+export function newUpdateAgentStatusWithDefaultInstanceStep(store, logger, authorizationLifecycle) {
+    return {
+        name: "UpdateAgentStatusWithDefaultInstance",
+        async execute(ctx) {
+            const agent = ctx.newState;
+            const agentId = agent.metadata?.id ?? "";
+            const defaultInstanceId = ctx.get(DEFAULT_INSTANCE_ID_KEY);
+            if (typeof defaultInstanceId !== "string" || defaultInstanceId === "") {
+                // Unreachable with the required provider (Go's skip existed for its
+                // nil-client test mode); loud beats silent per the boot idiom.
+                throw internalError(new Error("no default instance id in context (CreateDefaultInstance must run first)"), "no default instance id in context (CreateDefaultInstance must run first)");
+            }
+            if (agent.status === undefined) {
+                agent.status = create(AgentStatusSchema, {});
+            }
+            agent.status.defaultInstanceId = defaultInstanceId;
+            try {
+                await store.saveResource(ctx.apiResourceKind, agentId, ctx.schema, agent);
+            }
+            catch (error) {
+                logger.error("Failed to persist agent with default_instance_id", {
+                    agentId,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                throw new Error(`failed to persist agent with default instance: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            await notifyDefaultInstanceLinked(authorizationLifecycle, {
+                instanceKind: ApiResourceKind.agent_instance,
+                instanceId: defaultInstanceId,
+                blueprintKind: ApiResourceKind.agent,
+                blueprintId: agentId,
+            });
+            ctx.setNewState(agent);
+            logger.info("Successfully updated agent status with default_instance_id", {
+                defaultInstanceId,
+                agentId,
+            });
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// Cascade steps — delete_cascade.go. Children before parent, so a
+// mid-failure retry converges. What deliberately SURVIVES an agent delete,
+// and must never be swept into this cascade: sessions and agent executions
+// (historical record, the #582 posture — they reference agent and instance
+// by immutable IDs) and resource_audit rows (surviving sessions and
+// executions render their historical state from them).
+// ---------------------------------------------------------------------------
+/**
+ * Deletes EVERY instance of the agent (row + search-index entry) before the
+ * agent is deleted — the system-managed default AND members' personal ones
+ * (owner ruling stigmer/stigmer#611, extending the workflow ruling #592:
+ * instances are configuration OF the agent, meaningless without it, and an
+ * orphan occupies its org-scoped slug forever with no UI left to delete
+ * it). Matched by spec.agent_id — a required, validated field on every
+ * instance — so a single ID sweep covers the default instance too,
+ * including legacy rows that predate the status.default_instance_id
+ * pointer.
+ */
+export function newCascadeDeleteInstancesStep(store, logger) {
+    return {
+        name: "CascadeDeleteInstances",
+        async execute(ctx) {
+            const agent = ctx.get(EXISTING_RESOURCE_KEY);
+            if (agent === undefined) {
+                throw internalError(new Error("agent not found in context (LoadExistingForDelete must run first)"), "agent not found in context (LoadExistingForDelete must run first)");
+            }
+            const agentId = agent.metadata?.id ?? "";
+            let rows;
+            try {
+                rows = await store.listResources(ApiResourceKind.agent_instance);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list agent instances for cascade delete");
+            }
+            let deleted = 0;
+            for (const data of rows) {
+                let instance;
+                try {
+                    instance = fromBinary(AgentInstanceSchema, data);
+                }
+                catch {
+                    continue;
+                }
+                if ((instance.spec?.agentId ?? "") !== agentId) {
+                    continue;
+                }
+                const instanceId = instance.metadata?.id ?? "";
+                try {
+                    await store.deleteResource(ApiResourceKind.agent_instance, instanceId);
+                }
+                catch (error) {
+                    throw internalError(error, `failed to cascade-delete instance ${instanceId} of agent ${agentId}`);
+                }
+                // Best-effort, matching DeleteSearchIndex: a stale index entry is a
+                // cosmetic search artifact, not a correctness problem.
+                try {
+                    await store.deleteSearchIndex(ApiResourceKind.agent_instance, instanceId);
+                }
+                catch (error) {
+                    logger.warn("CascadeDeleteInstances: failed to remove search index entry (best-effort)", {
+                        instanceId,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                }
+                deleted++;
+            }
+            if (deleted > 0) {
+                logger.info("Cascade-deleted instances of agent", {
+                    count: deleted,
+                    agentId,
+                });
+            }
+        },
+    };
+}
+/**
+ * Deletes the agent's SAME-ORG AgentShares before the agent is deleted.
+ * Shares reference the agent by org+slug (spec.agent_ref), so a stale share
+ * would silently rebind — audience, link token, and bound credentials
+ * included — to whatever agent is later created at that slug. Matching by
+ * spec.agent_ref finds them all regardless of each share's own slug (a
+ * renamed share stays covered). Cross-org shares (another org sharing this
+ * marketplace-public agent) are NOT cascaded: they are that org's
+ * resources, and deleting them here would make agent delete a
+ * cross-principal destructive action — they fail closed instead, via the
+ * dangling-ref check and the status.agent_id pin every share-resolution
+ * gate verifies. AgentShare is not search-indexed, so there is no index
+ * entry to clean.
+ */
+export function newCascadeDeleteSharesStep(store, logger) {
+    return {
+        name: "CascadeDeleteShares",
+        async execute(ctx) {
+            const agent = ctx.get(EXISTING_RESOURCE_KEY);
+            if (agent === undefined) {
+                throw internalError(new Error("agent not found in context (LoadExistingForDelete must run first)"), "agent not found in context (LoadExistingForDelete must run first)");
+            }
+            const agentOrg = agent.metadata?.org ?? "";
+            const agentSlug = agent.metadata?.slug ?? "";
+            let rows;
+            try {
+                rows = await store.listResources(ApiResourceKind.agent_share);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list agent shares for cascade delete");
+            }
+            let deleted = 0;
+            for (const data of rows) {
+                let share;
+                try {
+                    share = fromBinary(AgentShareSchema, data);
+                }
+                catch {
+                    continue;
+                }
+                const ref = share.spec?.agentRef;
+                if ((ref?.org ?? "") !== agentOrg || (ref?.slug ?? "") !== agentSlug) {
+                    continue;
+                }
+                if ((share.metadata?.org ?? "") !== agentOrg) {
+                    // A cross-org share — another org's resource. Fails closed via
+                    // the agent-id pin instead of being deleted here.
+                    continue;
+                }
+                const shareId = share.metadata?.id ?? "";
+                try {
+                    await store.deleteResource(ApiResourceKind.agent_share, shareId);
+                }
+                catch (error) {
+                    throw internalError(error, `failed to cascade-delete share ${shareId} of agent ${agentOrg}/${agentSlug}`);
+                }
+                deleted++;
+            }
+            if (deleted > 0) {
+                logger.info("Cascade-deleted shares of agent", {
+                    count: deleted,
+                    agent: `${agentOrg}/${agentSlug}`,
+                });
+            }
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// LoadDefaultAgent — get_default.go's step: resolve via defaultagent and
+// map its sentinels to the wire contract. Go builds the wire message with
+// WrapError ("%s: %v"), so the sentinel's text RIDES the message — both
+// strings are cross-edition conformance surface.
+// ---------------------------------------------------------------------------
+export function newLoadDefaultAgentStep(store, logger) {
+    return {
+        name: "LoadDefaultAgent",
+        async execute(ctx) {
+            logger.info("Resolving platform default agent");
+            let agent;
+            try {
+                agent = await findDefaultAgent(store, logger);
+            }
+            catch (error) {
+                if (error instanceof DefaultAgentNotConfiguredError) {
+                    throw new ConnectError(`No default agent available. Ensure an agent with label stigmer.ai/default-agent=true and visibility_public exists: ${error.message}`, Code.NotFound);
+                }
+                if (error instanceof DefaultAgentNotPublicError) {
+                    throw new ConnectError(`Default agent exists but is not visibility_public: ${error.message}`, Code.FailedPrecondition);
+                }
+                // Store/decode failure — an internal fault, not "no default agent".
+                // InternalError keeps the cause off the wire (stigmer/stigmer#478).
+                logger.error("Failed to resolve platform default agent", {
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                throw internalError(error, "failed to resolve the platform default agent");
+            }
+            logger.info("Resolved platform default agent", {
+                agentId: agent.metadata?.id ?? "",
+                agentName: agent.metadata?.name ?? "",
+            });
+            ctx.set(TARGET_RESOURCE_KEY, agent);
+        },
+    };
+}
+//# sourceMappingURL=steps.js.map

package/dist/domain/agent/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../../src/domain/agent/steps.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAC;AAM1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,yDAAyD,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,2DAA2D,CAAC;AAEpG,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AAGzF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAGtH,OAAO,EACL,QAAQ,EACR,qBAAqB,EACrB,SAAS,EACT,SAAS,GACV,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAG3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,wFAAwF;AACxF,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AA8BtD,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,4DAA4D;AAC5D,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,EAAE;AACF,2DAA2D;AAC3D,4EAA4E;AAC5E,2EAA2E;AAC3E,iEAAiE;AACjE,4EAA4E;AAC5E,wBAAwB;AACxB,EAAE;AACF,+DAA+D;AAC/D,8EAA8E;AAE9E,MAAM,UAAU,2BAA2B,CACzC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK,CAAC,OAAO,CAAC,GAA8B;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC;YAE3B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,EAAE,CAAC;gBACtD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpC,SAAS;gBACX,CAAC;gBAED,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC;gBAC/B,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;gBAC7B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBACzB,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;oBACf,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClC,CAAC;gBAED,IAAI,SAAgC,CAAC;gBACrC,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,kBAAkB,CAClC,KAAK,EACL,eAAe,CAAC,UAAU,EAC1B,eAAe,EACf,IAAI,EACJ,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,gEAAgE;oBAChE,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,WAAW,GAAG,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/I,CAAC;gBACJ,CAAC;gBACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,sBAAsB,CAAC;gBACtD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,SAAS;gBACX,CAAC;gBAED,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC1D,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC3C,MAAM,wBAAwB,CAAC,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,IAAY,EACZ,GAAW,EACX,CAA8B,EAC9B,IAA4B;IAE5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CACX,2DAA2D,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CACX,6CAA6C,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,8GAA8G,CAC1L,CAAC;IACJ,CAAC;IAED,OAAO,oBAAoB,CACzB,eAAe,IAAI,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAC5D,qBAAqB,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI;QACnD,kGAAkG,CACrG,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,oEAAoE;AACpE,mBAAmB;AACnB,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,iDAAiD;AACjD,6CAA6C;AAC7C,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AACrE,yEAAyE;AACzE,EAAE;AACF,qEAAqE;AACrE,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,UAAU,6BAA6B,CAC3C,KAAY,EACZ,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,KAAK,CAAC,OAAO,CAAC,GAA8B;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC;YAE3B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAsC,EAAE,CAAC;YACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC;gBAE/B,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;gBAC7B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;oBAChB,SAAS;gBACX,CAAC;gBAED,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBACzB,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;oBACf,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClC,CAAC;gBACD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBAED,IAAI,SAAgC,CAAC;gBACrC,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,kBAAkB,CAClC,KAAK,EACL,eAAe,CAAC,UAAU,EAC1B,eAAe,EACf,IAAI,EACJ,GAAG,CACJ,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;wBACxD,aAAa,EAAE,IAAI;wBACnB,GAAG;wBACH,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,CAAC,IAAI,CACT,2DAA2D,EAC3D,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,EAAE,CAC7B,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;gBAC5C,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxD,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;wBAC7B,UAAU,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,uBAAuB,EAAE;4BACpD,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;yBACxB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;YAC7B,MAAM,MAAM,GAAsC,EAAE,GAAG,UAAU,EAAE,CAAC;YACpE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC;YAElB,MAAM,WAAW,GACf,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;YAC/D,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;oBAC/D,aAAa,EAAE,WAAW;oBAC1B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;oBACtC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,iDAAiD;AACjD,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,4BAA4B,CAC1C,eAA6C,EAC7C,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,OAAO,CAAC,GAA8B;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAChD,qCAAqC,CACtC,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACjD,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAC;YAEH,MAAM,eAAe,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;YAE9D,kEAAkE;YAClE,6DAA6D;YAC7D,mEAAmE;YACnE,8DAA8D;YAC9D,kEAAkE;YAClE,iEAAiE;YACjE,oEAAoE;YACpE,+DAA+D;YAC/D,IAAI,OAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC,aAAa,CAC7C,eAAe,EACf,GAAG,CAAC,cAAc,CACnB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;oBAClC,MAAM,oBAAoB,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9F,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;gBAC7D,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;gBACtC,OAAO,EAAE,QAAQ,CAAC,EAAE;aACrB,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2CAA2C,CACzD,KAAY,EACZ,MAAc,EACd,sBAAuD;IAEvD,OAAO;QACL,IAAI,EAAE,sCAAsC;QAC5C,KAAK,CAAC,OAAO,CAAC,GAA8B;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YAEzC,MAAM,iBAAiB,GAAG,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAC3D,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,KAAK,EAAE,EAAE,CAAC;gBACtE,oEAAoE;gBACpE,+DAA+D;gBAC/D,MAAM,aAAa,CACjB,IAAI,KAAK,CACP,0EAA0E,CAC3E,EACD,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;YAEnD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CACtB,GAAG,CAAC,eAAe,EACnB,OAAO,EACP,GAAG,CAAC,MAAM,EACV,KAAK,CACN,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;oBAC/D,OAAO;oBACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CACb,kDAAkD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3G,CAAC;YACJ,CAAC;YAED,MAAM,2BAA2B,CAAC,sBAAsB,EAAE;gBACxD,YAAY,EAAE,eAAe,CAAC,cAAc;gBAC5C,UAAU,EAAE,iBAAiB;gBAC7B,aAAa,EAAE,eAAe,CAAC,KAAK;gBACpC,WAAW,EAAE,OAAO;aACrB,CAAC,CAAC;YAEH,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAEvB,MAAM,CAAC,IAAI,CACT,4DAA4D,EAC5D;gBACE,iBAAiB;gBACjB,OAAO;aACR,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,oEAAoE;AACpE,uDAAuD;AACvD,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAAY,EACZ,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAsB,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,aAAa,CACjB,IAAI,KAAK,CACP,mEAAmE,CACpE,EACD,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;YAEzC,IAAI,IAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YACnE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CACjB,KAAK,EACL,mDAAmD,CACpD,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,IAAI,QAAuB,CAAC;gBAC5B,IAAI,CAAC;oBACH,QAAQ,GAAG,UAAU,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBACD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,cAAc,CACxB,eAAe,CAAC,cAAc,EAC9B,UAAU,CACX,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,aAAa,CACjB,KAAK,EACL,qCAAqC,UAAU,aAAa,OAAO,EAAE,CACtE,CAAC;gBACJ,CAAC;gBAED,oEAAoE;gBACpE,uDAAuD;gBACvD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,iBAAiB,CAC3B,eAAe,CAAC,cAAc,EAC9B,UAAU,CACX,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CACT,2EAA2E,EAC3E;wBACE,UAAU;wBACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CACF,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;oBAChD,KAAK,EAAE,OAAO;oBACd,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAY,EACZ,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAsB,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,aAAa,CACjB,IAAI,KAAK,CACP,mEAAmE,CACpE,EACD,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;YAE7C,IAAI,IAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CACjB,KAAK,EACL,gDAAgD,CACjD,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,IAAI,KAAK,CAAC;gBACV,IAAI,CAAC;oBACH,KAAK,GAAG,UAAU,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACjC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;oBACrE,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC7C,+DAA+D;oBAC/D,kDAAkD;oBAClD,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBACnE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,aAAa,CACjB,KAAK,EACL,kCAAkC,OAAO,aAAa,QAAQ,IAAI,SAAS,EAAE,CAC9E,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;oBAC7C,KAAK,EAAE,OAAO;oBACd,KAAK,EAAE,GAAG,QAAQ,IAAI,SAAS,EAAE;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,iDAAiD;AACjD,8EAA8E;AAE9E,MAAM,UAAU,uBAAuB,CACrC,KAAY,EACZ,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAEhD,IAAI,KAAY,CAAC;YACjB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;oBACpD,MAAM,IAAI,YAAY,CACpB,sHAAsH,KAAK,CAAC,OAAO,EAAE,EACrI,IAAI,CAAC,QAAQ,CACd,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;oBAChD,MAAM,IAAI,YAAY,CACpB,sDAAsD,KAAK,CAAC,OAAO,EAAE,EACrE,IAAI,CAAC,kBAAkB,CACxB,CAAC;gBACJ,CAAC;gBACD,oEAAoE;gBACpE,oEAAoE;gBACpE,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACvD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,MAAM,aAAa,CACjB,KAAK,EACL,8CAA8C,CAC/C,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;gBAC7C,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;gBACjC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;aACtC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domain/agentchannel/channel-runtime.d.ts

@@ -0,0 +1,137 @@
+/**
+ * The channel-runtime driver seam — convergence program 20260826.02,
+ * DD-004's "contract OSS, delivery runtime cloud" expressed as code;
+ * ratified at C3's plan gate (20260827.11, ruling Q1, with the two hooks
+ * added by the pre-Stage-1 deep pass recorded in its T01_1_review.md).
+ * Lives in src/domain/agentchannel beside the surfaces it fronts (the
+ * ModelCatalogProvider / RunnerCredentialProvider placement precedent).
+ *
+ * OSS serves the AgentChannel CONTRACT: resource CRUD, discovery-shaped
+ * reads, and engineered refusals on every arm that would need a delivery
+ * runtime (constants.ts — the three byte-pinned "requires Stigmer Cloud"
+ * strings). A composition that HAS a delivery runtime registers ONE
+ * ChannelRuntime through the drivers registry point
+ * (extensions/drivers.ts, single-instance), and the OSS controllers
+ * delegate exactly those arms to it. With no driver composed, behavior is
+ * byte-identical to the refusal posture — proven by the four conformance
+ * rosters on every change to this seam.
+ *
+ * What stays OSS-owned on every delegated path (the driver never re-does
+ * it): Layer-1 proto validation (the transport interceptor chain — the
+ * INVALID_ARGUMENT contract holds before any delegation, exactly as it
+ * held before any refusal), and the install lane's load-then-X contract
+ * (loadChannelForInstall answers cloud's LoadChannel NOT_FOUND verbatim;
+ * the loaded channel is handed to the driver so nothing loads twice).
+ * What the driver owns: provider I/O, runtime state, and its own error
+ * semantics — including cloud's deliberate fail-closed arms (an unknown
+ * send target answers PERMISSION_DENIED, DD-002 D4: no existence leak),
+ * which is exactly why the messaging/conversation groups delegate WHOLE
+ * methods rather than tail-ends.
+ *
+ * The two hooks exist because the edition split is wider than the refused
+ * RPCs (the deep-pass findings):
+ *
+ *   - enforceWriteConstraints: the write-time rules that only make sense
+ *     where the runtime serves. The known one is the pin-REQUIRED rule —
+ *     the serving edition refuses an unpinned run_config.model_name at
+ *     create/apply/update (InvalidArgument, its copy conformance-pinned
+ *     on the cloud target) because its channel execution profile would
+ *     bill an unpinned run as Auto. The CONDITION is runtime-profile
+ *     knowledge (which harness would serve the run), so the driver owns
+ *     both condition and copy — hard-coding "driver present = pin
+ *     required" here would bake one composition's harness default into
+ *     OSS (the RunnerCredentialProvider lane-vocabulary discipline).
+ *     OSS keeps only the edition-neutral pin EXISTENCE rule (steps.ts,
+ *     stigmer/stigmer#774).
+ *   - teardownOnDelete: the delete-time cascade over runtime state OSS
+ *     never materializes (controller.ts delete header: the managed
+ *     credentials environment, the OAuth grant, pending-delivery
+ *     abandonment). Spliced teardown-BEFORE-row-delete so a failed
+ *     teardown leaves the row for an idempotent retry (the cloud#425
+ *     ordering family: dependent state dies before the row). A thrown
+ *     error fails the delete; fail-soft arms are the driver's own choice,
+ *     made per cause, never imposed here.
+ *
+ * All groups and both hooks are REQUIRED: a composition with a channel
+ * runtime implements the whole surface, and a gap is a compile error in
+ * the extension package, never a silent OSS refusal a live channel user
+ * meets in production.
+ */
+import type { AgentChannel } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/api_pb";
+import type { CompleteChannelInstallInput, InitiateChannelInstallInput, InitiateChannelInstallOutput } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/io_pb";
+import type { ChannelTemplates, ListChannelTemplatesInput, ListMessagingChannelsInput, MessagingChannels, SendChannelMessageInput, SendChannelMessageOutput } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/message_io_pb";
+import type { ChannelConversation, ChannelConversationList, ConversationControlInput, ConversationMediaDownloadUrl, ConversationTimeline, EscalateConversationInput, GetChannelConversationInput, GetConversationMediaDownloadUrlInput, GetConversationTimelineInput, ListChannelConversationsInput, ReplyToConversationInput } from "@stigmer/protos/ai/stigmer/agentic/agentchannel/v1/conversation_io_pb";
+import type { CallerIdentity } from "../../extensions/identity.js";
+/**
+ * The provider install lane (Go install.go's cloud arm). OSS has already
+ * validated the input and loaded the channel — the NOT_FOUND contract is
+ * spent before the driver runs; `channel` is that loaded resource.
+ */
+export interface ChannelRuntimeInstalls {
+    /** The OAuth-initiate arm — the driver issues the state token and the redirect. */
+    initiateInstall(channel: AgentChannel, input: InitiateChannelInstallInput, caller: CallerIdentity): Promise<InitiateChannelInstallOutput>;
+    /** The OAuth-complete arm — the driver exchanges the code and stamps install status. */
+    completeInstall(channel: AgentChannel, input: CompleteChannelInstallInput, caller: CallerIdentity): Promise<AgentChannel>;
+}
+/**
+ * The messaging runtime surface (message.ts's serving arm). The caller
+ * identity is load-bearing: the serving edition resolves
+ * listMessagingChannels from the CALLER's agent session and refuses bare
+ * direct calls (a verified, two-arm-pinned edition divergence), and
+ * sendMessage's authorization is reach-based over the caller's session —
+ * both driver-owned decisions this seam only transports.
+ */
+export interface ChannelRuntimeMessaging {
+    sendMessage(input: SendChannelMessageInput, caller: CallerIdentity): Promise<SendChannelMessageOutput>;
+    listTemplates(input: ListChannelTemplatesInput, caller: CallerIdentity): Promise<ChannelTemplates>;
+    listMessagingChannels(input: ListMessagingChannelsInput, caller: CallerIdentity): Promise<MessagingChannels>;
+}
+/**
+ * The conversation runtime surface (conversation.ts's serving arm) —
+ * queries AND commands: on the serving edition even the discovery reads
+ * are real store-backed lookups (the truthful-emptiness contract both
+ * editions share is an outcome there, not a stub), and getMediaDownloadUrl
+ * must keep the byte-pinned uniform miss across every cause (constants.ts
+ * NO_DOWNLOADABLE_MEDIA_MESSAGE — a prober cannot learn which items
+ * exist). escalate carries no channel id by design: the driver derives
+ * the conversation from the caller's session labels.
+ */
+export interface ChannelRuntimeConversations {
+    listConversations(input: ListChannelConversationsInput, caller: CallerIdentity): Promise<ChannelConversationList>;
+    getConversation(input: GetChannelConversationInput, caller: CallerIdentity): Promise<ChannelConversation>;
+    getTimeline(input: GetConversationTimelineInput, caller: CallerIdentity): Promise<ConversationTimeline>;
+    getMediaDownloadUrl(input: GetConversationMediaDownloadUrlInput, caller: CallerIdentity): Promise<ConversationMediaDownloadUrl>;
+    reply(input: ReplyToConversationInput, caller: CallerIdentity): Promise<SendChannelMessageOutput>;
+    takeOver(input: ConversationControlInput, caller: CallerIdentity): Promise<ChannelConversation>;
+    handBack(input: ConversationControlInput, caller: CallerIdentity): Promise<ChannelConversation>;
+    clearAttention(input: ConversationControlInput, caller: CallerIdentity): Promise<ChannelConversation>;
+    escalate(input: EscalateConversationInput, caller: CallerIdentity): Promise<ChannelConversation>;
+}
+/**
+ * One composition's channel delivery runtime, grouped by the surfaces it
+ * takes over (the groups mirror the OSS file seams — controller.ts's
+ * install lane, message.ts, conversation.ts — which are themselves the
+ * retired Go server's file seams).
+ */
+export interface ChannelRuntime {
+    readonly installs: ChannelRuntimeInstalls;
+    readonly messaging: ChannelRuntimeMessaging;
+    readonly conversations: ChannelRuntimeConversations;
+    /**
+     * Write-time constraints only a serving runtime can state, invoked by
+     * ResolveChannelDefaults (create/apply) and ValidateChannelUpdate
+     * (update) AFTER the edition-neutral rules pass, with the fully
+     * resolved channel. Refuses by throwing a ConnectError with the
+     * correct code and the runtime's conformance-pinned copy; returning
+     * resolves the write.
+     */
+    enforceWriteConstraints(channel: AgentChannel): Promise<void>;
+    /**
+     * The delete-time cascade over runtime state (credentials environment,
+     * OAuth grant, pending deliveries), invoked after LoadExistingForDelete
+     * and BEFORE the row delete — a thrown error fails the delete and
+     * leaves the row for an idempotent retry.
+     */
+    teardownOnDelete(channel: AgentChannel, caller: CallerIdentity): Promise<void>;
+}
+//# sourceMappingURL=channel-runtime.d.ts.map

package/dist/domain/agentchannel/channel-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-runtime.d.ts","sourceRoot":"","sources":["../../../src/domain/agentchannel/channel-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2DAA2D,CAAC;AAC9F,OAAO,KAAK,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC7B,MAAM,0DAA0D,CAAC;AAClE,OAAO,KAAK,EACV,gBAAgB,EAChB,yBAAyB,EACzB,0BAA0B,EAC1B,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,kEAAkE,CAAC;AAC1E,OAAO,KAAK,EACV,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,4BAA4B,EAC5B,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,EAC3B,oCAAoC,EACpC,4BAA4B,EAC5B,6BAA6B,EAC7B,wBAAwB,EACzB,MAAM,uEAAuE,CAAC;AAE/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,mFAAmF;IACnF,eAAe,CACb,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,2BAA2B,EAClC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACzC,wFAAwF;IACxF,eAAe,CACb,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,2BAA2B,EAClC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,YAAY,CAAC,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,CACT,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrC,aAAa,CACX,KAAK,EAAE,yBAAyB,EAChC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,qBAAqB,CACnB,KAAK,EAAE,0BAA0B,EACjC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,CACf,KAAK,EAAE,6BAA6B,EACpC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,eAAe,CACb,KAAK,EAAE,2BAA2B,EAClC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,WAAW,CACT,KAAK,EAAE,4BAA4B,EACnC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,mBAAmB,CACjB,KAAK,EAAE,oCAAoC,EAC3C,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACzC,KAAK,CACH,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrC,QAAQ,CACN,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,QAAQ,CACN,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,cAAc,CACZ,KAAK,EAAE,wBAAwB,EAC/B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,QAAQ,CACN,KAAK,EAAE,yBAAyB,EAChC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD;;;;;;;OAOG;IACH,uBAAuB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;;;OAKG;IACH,gBAAgB,CACd,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/domain/agentchannel/channel-runtime.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=channel-runtime.js.map