@stratusagent/gateway 0.11.4 → 0.11.6

package/dist/sessions.js

@@ -0,0 +1,598 @@
+import { chmodSync, mkdirSync } from 'node:fs';
+import { lstat, readdir } from 'node:fs/promises';
+import path from 'node:path';
+import { DatabaseSync } from 'node:sqlite';
+import { agentSessionDbIn, agentStateDirIn, agentsDirIn, assertDerivedStatePathSync, assertPathSafeAgentId, fleetDbIn, } from '@stratusagent/state';
+/**
+ * Sessions live one database per agent — `agents/<id>/sessions.db` — with
+ * one fleet-wide index saying which agent's store holds a given session id.
+ *
+ * The sharding is the point (step 15's layer A): a store is opened on one
+ * agent's path, so there is no query that could return another agent's
+ * conversations. The index is what the sharding costs. Session ids are
+ * caller-chosen and the control API resolves them *without* an agent —
+ * `GET /sessions/:id`, a message to an existing session — which was
+ * unambiguous only because one shared database's primary key made a
+ * duplicate id unrepresentable. The index restores that: it is where an id
+ * is claimed, and it is what a lookup with no agent in hand consults.
+ *
+ * It also carries `status`, `created_at`, and `updated_at`, because the
+ * session surface is fleet-wide in more places than the point lookup: the
+ * health counts, the roster's per-agent activity, the unfiltered listing,
+ * and the restart sweep that resumes parked approvals and fails abandoned
+ * turns. Answering those from the index rather than by fanning out over
+ * every shard is what keeps a recovery sweep from walking only whichever
+ * store happened to be open — an agent whose parked approval never
+ * resumes.
+ */
+const SESSIONS_TABLE = `
+  CREATE TABLE IF NOT EXISTS sessions (
+    id TEXT PRIMARY KEY,
+    agent_id TEXT NOT NULL,
+    status TEXT NOT NULL,
+    body TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL
+  )
+`;
+/**
+ * The same columns minus the conversation body: the index is a routing
+ * table and a set of claimed ids, never a second copy of the transcript.
+ * Nothing about a conversation can be read out of the fleet database.
+ */
+const SESSION_INDEX_TABLE = `
+  CREATE TABLE IF NOT EXISTS session_index (
+    id TEXT PRIMARY KEY,
+    agent_id TEXT NOT NULL,
+    status TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL
+  )
+`;
+/**
+ * Sessions hold complete conversations (prompts, replies, tool output,
+ * provider replay state) — owner-only, like the credentials file. The file
+ * chmods cover databases created earlier under a looser umask too;
+ * directories the stores create are born 0700.
+ *
+ * Exported because the layout migration writes the same files from
+ * `@stratusagent/state` before any store is open, and a second hand-rolled
+ * chmod loop is how one of the two ends up leaving a sidecar readable.
+ */
+export const tightenSqliteFile = (filePath) => {
+    // The database file is tightened FIRST: SQLite derives sidecar
+    // permissions from the main file's mode, so everything created later
+    // inherits owner-only.
+    for (const sensitive of [filePath, `${filePath}-wal`, `${filePath}-shm`, `${filePath}-journal`]) {
+        try {
+            chmodSync(sensitive, 0o600);
+        }
+        catch (error) {
+            // A sidecar that does not exist has nothing to tighten; anything
+            // else means session data stays readable — refuse to run over it.
+            if (error.code !== 'ENOENT') {
+                throw error;
+            }
+        }
+    }
+};
+/**
+ * Whether a real file is there — the sweep's test for "this directory holds
+ * a shard".
+ *
+ * `lstat`, so a symlink is not one. `stat` follows it, which would classify
+ * a directory holding a linked `sessions.db` as an agent's and hand the
+ * sweep a store it then creates, indexes and tightens somewhere outside the
+ * home. The old layout reserved none of these names, so an operator's
+ * `agents/<something>/sessions.db` pointing elsewhere is theirs, not ours.
+ */
+const shardFileExists = async (filePath) => {
+    try {
+        return (await lstat(filePath)).isFile();
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return false;
+        }
+        throw error;
+    }
+};
+/**
+ * Opens the file, tightens it and its sidecars, and puts the connection in
+ * the mode every Stratus database runs in. Shared by the per-agent store,
+ * the fleet index, and the schedule store, because the posture is one rule:
+ * WAL (a DELETE journal recreates a rollback file on every write, which a
+ * one-time chmod could never cover), a busy timeout (these files have a
+ * second writer — `stratus schedules cancel` opens its own connection —
+ * and WAL serializes writers file-wide), and owner-only throughout.
+ */
+const openStratusDatabase = (filePath, options = {}) => {
+    const dir = path.dirname(filePath);
+    if (options.stateHome !== undefined) {
+        // Never through a symlink, at any component below the home — see
+        // `assertDerivedStatePath`, which owns that rule. Refused rather than
+        // quarantined, unlike the migration: at runtime there is no report to
+        // name it in, and a turn that cannot be stored must not read as stored.
+        //
+        // The file as well as its directory, and `fleet.db` as well as a shard:
+        // a link at either is followed just as readily — the table is created,
+        // the rows indexed and the mode tightened in whatever it points at, and
+        // for the index that is the session ids and the schedule rows leaving
+        // the home entirely.
+        assertDerivedStatePathSync(options.stateHome, filePath, 'file');
+    }
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    // `mkdir`'s mode applies only to what it creates, so a directory an
+    // earlier build left at `0755` keeps it without this. The home itself only
+    // when it is ours; anything below it is a name we chose.
+    // Resolved on both sides before comparing. An embedder can hand us
+    // `/srv/shared/state/` with the separator still on it, or a `.` component
+    // in the middle; `path.join` normalizes what it builds and `path.dirname`
+    // answers in that spelling, so a raw string comparison reads the home as
+    // its own child and tightens a directory that is not ours — following the
+    // link, if the home is one.
+    if (options.stateHome !== undefined
+        && (path.resolve(dir) !== path.resolve(options.stateHome) || options.ownedHome === true)) {
+        chmodSync(dir, 0o700);
+    }
+    const db = new DatabaseSync(filePath);
+    try {
+        chmodSync(filePath, 0o600);
+    }
+    catch (error) {
+        // A database that cannot be tightened must not be used: conversation
+        // bodies would stay readable by other local users for the daemon's
+        // whole lifetime, silently.
+        if (error.code !== 'ENOENT') {
+            throw error;
+        }
+    }
+    // Forced into existence here (the user_version pragma is a real page-one
+    // write) so the tightening below covers the WAL sidecars for the
+    // connection's whole lifetime.
+    db.exec('PRAGMA journal_mode = WAL');
+    db.exec('PRAGMA busy_timeout = 5000');
+    return db;
+};
+export class SqliteSessionStore {
+    db;
+    constructor(filePath, options = {}) {
+        this.db = openStratusDatabase(filePath, options);
+        this.db.exec(SESSIONS_TABLE);
+        this.db.exec('PRAGMA user_version = 0');
+        tightenSqliteFile(filePath);
+    }
+    write(session) {
+        this.db
+            .prepare('INSERT OR REPLACE INTO sessions (id, agent_id, status, body, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)')
+            .run(session.id, session.agent.id, session.status, JSON.stringify(session), session.createdAt, session.updatedAt);
+        return session;
+    }
+    async create(input) {
+        const now = new Date().toISOString();
+        return this.write({ ...input, createdAt: now, updatedAt: now });
+    }
+    async get(id) {
+        const row = this.db.prepare('SELECT body FROM sessions WHERE id = ?').get(id);
+        return row ? JSON.parse(row.body) : undefined;
+    }
+    async save(session) {
+        await this.saveReturning(session);
+    }
+    /**
+     * The same save, handing back the row as it was written.
+     *
+     * For a caller that has to mirror it: the sharded store keeps the fleet
+     * index in step, and an index holding a timestamp the store does not is
+     * drift the startup reconcile would have to clean up every boot.
+     */
+    async saveReturning(session) {
+        return this.write({ ...session, updatedAt: new Date().toISOString() });
+    }
+    /**
+     * Session ids in a state, oldest first — the index a restarting daemon
+     * sweeps for turns parked on a human. The `status` column carries it, so
+     * no conversation body is deserialized to answer the question.
+     */
+    async listIdsByStatus(status) {
+        const rows = this.db
+            .prepare('SELECT id FROM sessions WHERE status = ? ORDER BY updated_at ASC')
+            .all(status);
+        return rows.map((row) => row.id);
+    }
+    /**
+     * Every row's routing and lifecycle columns, no bodies — what the
+     * startup reconcile compares this shard against the fleet index with.
+     */
+    rows() {
+        const rows = this.db
+            .prepare('SELECT id, agent_id, status, created_at, updated_at FROM sessions')
+            .all();
+        return rows.map((row) => ({
+            id: row.id,
+            agentId: row.agent_id,
+            status: row.status,
+            createdAt: row.created_at,
+            updatedAt: row.updated_at,
+        }));
+    }
+    close() {
+        this.db.close();
+    }
+}
+/**
+ * Thrown when a session id another agent already holds is claimed.
+ *
+ * Sessions never cross agent identities — the dispatcher says so when it
+ * finds the conversation, and this is the same rule at the durable seam,
+ * where a shared database's primary key used to enforce it for free.
+ */
+export class SessionIdTakenError extends Error {
+    constructor(sessionId, heldBy, claimedBy) {
+        super(`Session ${sessionId} already belongs to agent ${heldBy}, so ${claimedBy} cannot open a conversation under that id — `
+            + 'sessions never cross agent identities. Give the new conversation an id of its own.');
+        this.name = 'SessionIdTakenError';
+    }
+}
+/**
+ * The fleet's session index, in `fleet.db` beside the schedules.
+ *
+ * Its own connection rather than a table on the schedule store, for the
+ * reason the schedule store gives for its own: `stratus schedules` opens
+ * that file from another process, and WAL is what makes two connections on
+ * one file routine.
+ */
+export class FleetSessionIndex {
+    db;
+    constructor(filePath, options = {}) {
+        this.db = openStratusDatabase(filePath, options);
+        this.db.exec(SESSION_INDEX_TABLE);
+        tightenSqliteFile(filePath);
+    }
+    /**
+     * Claim an id for an agent, or refuse it.
+     *
+     * The claim is the create's single transactional authority: it lands
+     * before the shard write, so a crash between the two leaves a claim with
+     * no conversation — which the reconcile releases — rather than a
+     * conversation no lookup can reach. Re-claiming an id this agent already
+     * holds is genuinely a no-op: `create` on an existing id is how a caller
+     * re-opens its own session, and `save` claims every id it writes.
+     *
+     * Taking the id is all this does. It deliberately does NOT write the row
+     * it was handed, because the id it is claiming may already have a
+     * conversation: overwriting that row's status and timestamps here would
+     * announce a transition the shard write has not made yet, and a write
+     * that then fails leaves the live daemon answering from a lifecycle row
+     * no store agrees with — a pending session missing from recovery until
+     * the next restart reconciles it. The row is written by the caller,
+     * after the shard write, from what the store actually stored.
+     */
+    claim(row) {
+        // The insert is what decides, not a read before it. `DO NOTHING` makes
+        // the row's creation the atomic step: two callers racing for an id no
+        // one holds cannot both find it free, because one of their inserts is
+        // the conflict. The read after it is then a question with an answer —
+        // who holds this id now — rather than a guess that a write could have
+        // overtaken. Nothing is overwritten on the way, so a claim that loses
+        // has not touched the winner's row.
+        this.db
+            .prepare('INSERT INTO session_index (id, agent_id, status, created_at, updated_at) VALUES (?, ?, ?, ?, ?) ON CONFLICT(id) DO NOTHING')
+            .run(row.id, row.agentId, row.status, row.createdAt, row.updatedAt);
+        const held = this.agentFor(row.id);
+        if (held !== undefined && held !== row.agentId) {
+            throw new SessionIdTakenError(row.id, held, row.agentId);
+        }
+    }
+    /** Write the row as it now stands. Called after every shard write. */
+    record(row) {
+        this.db
+            .prepare('INSERT OR REPLACE INTO session_index (id, agent_id, status, created_at, updated_at) VALUES (?, ?, ?, ?, ?)')
+            .run(row.id, row.agentId, row.status, row.createdAt, row.updatedAt);
+    }
+    /** Drop a claim — a reconcile releasing an id whose conversation never landed. */
+    release(id) {
+        this.db.prepare('DELETE FROM session_index WHERE id = ?').run(id);
+    }
+    agentFor(id) {
+        const row = this.db.prepare('SELECT agent_id FROM session_index WHERE id = ?').get(id);
+        return row?.agent_id;
+    }
+    rows() {
+        const rows = this.db
+            .prepare('SELECT id, agent_id, status, created_at, updated_at FROM session_index')
+            .all();
+        return rows.map((row) => ({
+            id: row.id,
+            agentId: row.agent_id,
+            status: row.status,
+            createdAt: row.created_at,
+            updatedAt: row.updated_at,
+        }));
+    }
+    idsByStatus(status) {
+        const rows = this.db
+            .prepare('SELECT id FROM session_index WHERE status = ? ORDER BY updated_at ASC')
+            .all(status);
+        return rows.map((row) => row.id);
+    }
+    countByStatus() {
+        const rows = this.db
+            .prepare('SELECT status, COUNT(*) AS total FROM session_index GROUP BY status')
+            .all();
+        const counts = {};
+        for (const row of rows) {
+            counts[row.status] = Number(row.total);
+        }
+        return counts;
+    }
+    lastActivityByAgent() {
+        const rows = this.db
+            .prepare(`
+        SELECT agent_id,
+               MAX(updated_at) AS last_active_at,
+               SUM(CASE WHEN status IN ('running', 'pending_approval') THEN 1 ELSE 0 END) AS active_sessions
+        FROM session_index
+        GROUP BY agent_id
+      `)
+            .all();
+        const activity = {};
+        for (const row of rows) {
+            activity[row.agent_id] = {
+                lastActiveAt: row.last_active_at,
+                activeSessions: Number(row.active_sessions),
+            };
+        }
+        return activity;
+    }
+    list(agentId, limit) {
+        // -1 is SQLite's "no limit", so one prepared statement serves both cases
+        // rather than four.
+        const bound = limit !== undefined && Number.isInteger(limit) && limit >= 0 ? limit : -1;
+        const rows = (agentId
+            ? this.db.prepare('SELECT id, agent_id, status, created_at, updated_at FROM session_index WHERE agent_id = ? ORDER BY updated_at DESC LIMIT ?').all(agentId, bound)
+            : this.db.prepare('SELECT id, agent_id, status, created_at, updated_at FROM session_index ORDER BY updated_at DESC LIMIT ?').all(bound));
+        return rows.map((row) => ({
+            id: row.id,
+            agentId: row.agent_id,
+            status: row.status,
+            createdAt: row.created_at,
+            updatedAt: row.updated_at,
+        }));
+    }
+    close() {
+        this.db.close();
+    }
+}
+/**
+ * The fleet's session store: one SQLite database per agent, behind the
+ * `SessionStore` every runner already takes, with the fleet-wide reads the
+ * control API and the restart sweeps need answered across all of them.
+ *
+ * A runner is handed *this* — and every write goes to the store opened on
+ * its own agent's path. What the facade adds is the set of questions that
+ * were never about one agent: which agent holds an id, how many sessions
+ * are in each state, when each agent last did anything, and which ids are
+ * parked or abandoned fleet-wide.
+ */
+export class ShardedSessionStore {
+    stateDir;
+    ownedDirectory;
+    index;
+    shards = new Map();
+    constructor(options) {
+        this.stateDir = options.stateDir;
+        this.ownedDirectory = options.ownedDirectory ?? false;
+        this.index = new FleetSessionIndex(fleetDbIn(options.stateDir), {
+            stateHome: options.stateDir,
+            ...(this.ownedDirectory ? { ownedHome: true } : {}),
+        });
+    }
+    /**
+     * One agent's store, opened on first use and kept open.
+     *
+     * Opened lazily because a roster's agents are not all busy: a daemon
+     * with forty souls should hold descriptors for the ones that have
+     * conversations, not for every id on disk.
+     */
+    shardFor(agentId) {
+        const existing = this.shards.get(agentId);
+        if (existing !== undefined) {
+            return existing;
+        }
+        // Always owner-only: a per-agent directory is state this repository
+        // creates, never a path an embedder pointed at something shared.
+        const shard = new SqliteSessionStore(agentSessionDbIn(this.stateDir, agentId), { stateHome: this.stateDir });
+        this.shards.set(agentId, shard);
+        return shard;
+    }
+    async create(input) {
+        const agentId = input.agent.id;
+        assertPathSafeAgentId(agentId);
+        const now = new Date().toISOString();
+        // The claim first, and it is what refuses a sibling's id: the store
+        // write below is only reachable for an id this agent may have.
+        this.index.claim({ id: input.id, agentId, status: input.status, createdAt: now, updatedAt: now });
+        const session = await this.shardFor(agentId).create(input);
+        this.index.record({
+            id: session.id,
+            agentId,
+            status: session.status,
+            createdAt: session.createdAt,
+            updatedAt: session.updatedAt,
+        });
+        return session;
+    }
+    async get(id) {
+        const agentId = this.index.agentFor(id);
+        // No claim, no conversation. The index is the authority for "which
+        // agent's store holds this id" precisely so a lookup never has to
+        // guess by opening stores until one answers.
+        return agentId === undefined ? undefined : this.shardFor(agentId).get(id);
+    }
+    async save(session) {
+        const agentId = session.agent.id;
+        assertPathSafeAgentId(agentId);
+        // One id belongs to one agent, and this is the path that could change
+        // that quietly. `save` takes whatever agent the session now names: a
+        // caller handing back a session whose `agent.id` has changed would
+        // write a second copy into the new agent's shard and then repoint the
+        // index at it — the original transcript still on disk but in a store
+        // nothing resolves to, and the next start refusing to serve at all,
+        // because the reconcile finds one id in two shards and says so.
+        //
+        // The same `claim` as `create`, not a read of the index. Asking who
+        // holds the id and *then* writing the shard leaves the whole file write
+        // between the question and the answer, so two callers saving an id
+        // nobody has indexed yet — different agents, the same id — both see it
+        // free and both write. Claiming takes the id in one statement before
+        // either shard write can start, so the loser is refused here, where the
+        // error can still name the agent it belongs to, instead of at the next
+        // start where it is a daemon that will not come up.
+        this.index.claim({
+            id: session.id,
+            agentId,
+            status: session.status,
+            createdAt: session.createdAt,
+            updatedAt: session.updatedAt,
+        });
+        // The conversation is the truth and the index is derived from it, so
+        // the shard write goes first: a crash in between leaves an index row
+        // one status behind, which the next start reconciles, rather than an
+        // index pointing at a turn the store never took.
+        const written = await this.shardFor(agentId).saveReturning(session);
+        this.index.record({
+            id: written.id,
+            agentId,
+            status: written.status,
+            createdAt: written.createdAt,
+            updatedAt: written.updatedAt,
+        });
+    }
+    async listIdsByStatus(status) {
+        return this.index.idsByStatus(status);
+    }
+    countByStatus() {
+        return this.index.countByStatus();
+    }
+    lastActivityByAgent() {
+        return this.index.lastActivityByAgent();
+    }
+    list(agentId, limit) {
+        return this.index.list(agentId, limit);
+    }
+    /**
+     * Put the index and the shards back in step, before anything reads
+     * either. Two durable writes stand where one atomic primary key used to,
+     * and this is what makes a crash between them resolve one way rather
+     * than leaving them to disagree:
+     *
+     * - a claim whose conversation never landed is released, freeing the id;
+     * - a conversation the index has lost — or disagrees with — is
+     *   re-indexed from the shard, which is the record;
+     * - the same id in two agents' shards is refused loudly, naming both,
+     *   because picking one would silently hand somebody else's conversation
+     *   to whoever asks for that id next.
+     */
+    async reconcile() {
+        const report = { released: [], reindexed: [] };
+        const owners = new Map();
+        for (const agentId of await this.shardedAgentIds()) {
+            // Read through a connection this reconcile owns, and let it go again
+            // unless the store was already open: a roster's every agent has a
+            // store on disk, and holding one descriptor per agent from start-up
+            // would make a big roster pay at rest for a sweep that runs once.
+            const cached = this.shards.get(agentId);
+            const shard = cached ?? new SqliteSessionStore(agentSessionDbIn(this.stateDir, agentId), { stateHome: this.stateDir });
+            try {
+                for (const row of shard.rows()) {
+                    const seen = owners.get(row.id);
+                    if (seen !== undefined) {
+                        throw new Error(`Session ${row.id} exists in both ${seen.agentId}'s and ${agentId}'s store. `
+                            + 'Two agents cannot share a session id; move or remove one of the two `agents/<id>/sessions.db` rows before starting.');
+                    }
+                    owners.set(row.id, row);
+                }
+            }
+            finally {
+                if (cached === undefined) {
+                    shard.close();
+                }
+            }
+        }
+        const indexed = new Map(this.index.rows().map((row) => [row.id, row]));
+        for (const [id] of indexed) {
+            if (!owners.has(id)) {
+                this.index.release(id);
+                report.released.push(id);
+            }
+        }
+        for (const [id, row] of owners) {
+            const claim = indexed.get(id);
+            if (claim === undefined
+                || claim.agentId !== row.agentId
+                || claim.status !== row.status
+                || claim.updatedAt !== row.updatedAt) {
+                this.index.record(row);
+                report.reindexed.push(id);
+            }
+        }
+        return report;
+    }
+    /**
+     * Which agents have a store on disk — the roster is not the answer, on
+     * purpose: the gateway keeps a missing soul's sessions when it drops the
+     * soul, and a recovery sweep that skipped those would strand exactly the
+     * conversations nobody is watching.
+     */
+    async shardedAgentIds() {
+        let entries;
+        try {
+            entries = await readdir(agentsDirIn(this.stateDir), { withFileTypes: true });
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return [];
+            }
+            throw error;
+        }
+        const named = entries
+            .filter((entry) => entry.isDirectory())
+            .map((entry) => entry.name)
+            .filter((name) => {
+            try {
+                // A directory whose name cannot key a path is not an agent's —
+                // `agentStateDirIn` is what says so, and the reason it throws
+                // rather than sanitizing.
+                agentStateDirIn(this.stateDir, name);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        });
+        // And only the ones that already hold a shard. This sweep reads what is
+        // there; opening a store *creates* the database and tightens the
+        // directory around it, so treating every well-named subdirectory as an
+        // agent means a start-up that writes `sessions.db` into whatever an
+        // operator keeps under `agents/` — a `backups/` folder, an export — and
+        // chmods it to 0700 on the way past. The old layout reserved no such
+        // names, so nothing warned them. An agent with no conversations yet has
+        // nothing to reconcile either, which is the same answer.
+        const held = [];
+        for (const name of named) {
+            if (await shardFileExists(agentSessionDbIn(this.stateDir, name))) {
+                held.push(name);
+            }
+        }
+        return held;
+    }
+    close() {
+        for (const shard of this.shards.values()) {
+            shard.close();
+        }
+        this.shards.clear();
+        this.index.close();
+    }
+}
+//# sourceMappingURL=sessions.js.map

package/dist/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,0BAA0B,EAC1B,qBAAqB,EACrB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,cAAc,GAAG;;;;;;;;;CAStB,CAAC;AAEF;;;;GAIG;AACH,MAAM,mBAAmB,GAAG;;;;;;;;CAQ3B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAQ,EAAE;IAC1D,+DAA+D;IAC/D,qEAAqE;IACrE,uBAAuB;IACvB,KAAK,MAAM,SAAS,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,MAAM,EAAE,GAAG,QAAQ,MAAM,EAAE,GAAG,QAAQ,UAAU,CAAC,EAAE,CAAC;QAChG,IAAI,CAAC;YACH,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,kEAAkE;YAClE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA6CF;;;;;;;;;GASG;AACH,MAAM,eAAe,GAAG,KAAK,EAAE,QAAgB,EAAoB,EAAE;IACnE,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,CAAC,QAAgB,EAAE,UAAqC,EAAE,EAAgB,EAAE;IACtG,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,iEAAiE;QACjE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,EAAE;QACF,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,qBAAqB;QACrB,0BAA0B,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,oEAAoE;IACpE,2EAA2E;IAC3E,yDAAyD;IACzD,mEAAmE;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,4BAA4B;IAC5B,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;WAC9B,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3F,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,mEAAmE;QACnE,4BAA4B;QAC5B,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,iEAAiE;IACjE,+BAA+B;IAC/B,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrC,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,OAAO,kBAAkB;IACZ,EAAE,CAAe;IAElC,YAAY,QAAgB,EAAE,UAAqC,EAAE;QACnE,IAAI,CAAC,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,OAAgB;QAC5B,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,gHAAgH,CAAC;aACzH,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACpH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA+C;QAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,EAAE,CAE/D,CAAC;QACd,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAgB;QACzB,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,MAAqB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,kEAAkE,CAAC;aAC3E,GAAG,CAAC,MAAM,CAA0B,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,mEAAmE,CAAC;aAC5E,GAAG,EAA4G,CAAC;QACnH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF;AAWD;;;;;;GAMG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,SAAiB,EAAE,MAAc,EAAE,SAAiB;QAC9D,KAAK,CACH,WAAW,SAAS,6BAA6B,MAAM,QAAQ,SAAS,8CAA8C;cACpH,oFAAoF,CACvF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACX,EAAE,CAAe;IAElC,YAAY,QAAgB,EAAE,UAAqC,EAAE;QACnE,IAAI,CAAC,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAClC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,GAAoB;QACxB,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,oCAAoC;QACpC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,4HAA4H,CAAC;aACrI,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/C,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,GAAoB;QACzB,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,4GAA4G,CAAC;aACrH,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;IAED,kFAAkF;IAClF,OAAO,CAAC,EAAU;QAChB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,EAAE,CAExE,CAAC;QACd,OAAO,GAAG,EAAE,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,EAA4G,CAAC;QACnH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,WAAW,CAAC,MAAqB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,uEAAuE,CAAC;aAChF,GAAG,CAAC,MAAM,CAA0B,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,aAAa;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,qEAAqE,CAAC;aAC9E,GAAG,EAA8C,CAAC;QACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mBAAmB;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC;;;;;;OAMR,CAAC;aACD,GAAG,EAAkF,CAAC;QACzF,MAAM,QAAQ,GAAqE,EAAE,CAAC;QACtF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG;gBACvB,YAAY,EAAE,GAAG,CAAC,cAAc;gBAChC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;aAC5C,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,OAAgB,EAAE,KAAc;QACnC,yEAAyE;QACzE,oBAAoB;QACpB,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,CAAC,OAAO;YACnB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4HAA4H,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;YACnK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yGAAyG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAMvI,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF;AAoBD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,mBAAmB;IACb,QAAQ,CAAS;IACjB,cAAc,CAAU;IACxB,KAAK,CAAoB;IACzB,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEhE,YAAY,OAAmC;QAC7C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;QACtD,IAAI,CAAC,KAAK,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAC9D,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,QAAQ,CAAC,OAAe;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAClC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EACxC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAC7B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA+C;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,oEAAoE;QACpE,+DAA+D;QAC/D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAClG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,mEAAmE;QACnE,kEAAkE;QAClE,6CAA6C;QAC7C,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAgB;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/B,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,gEAAgE;QAChE,EAAE;QACF,oEAAoE;QACpE,wEAAwE;QACxE,mEAAmE;QACnE,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,oDAAoD;QACpD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YACf,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,iDAAiD;QACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAqB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,OAAgB,EAAE,KAAc;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAA2B,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;QAClD,KAAK,MAAM,OAAO,IAAI,MAAM,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACnD,qEAAqE;YACrE,kEAAkE;YAClE,oEAAoE;YACpE,kEAAkE;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,IAAI,IAAI,kBAAkB,CAC5C,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EACxC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAC7B,CAAC;YACF,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,MAAM,IAAI,KAAK,CACb,WAAW,GAAG,CAAC,EAAE,mBAAmB,IAAI,CAAC,OAAO,UAAU,OAAO,YAAY;8BAC3E,qHAAqH,CACxH,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACvB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,SAAS;mBAClB,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;mBAC7B,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;mBAC3B,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,eAAe;QAC3B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,OAAO;aAClB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,IAAI,CAAC;gBACH,+DAA+D;gBAC/D,8DAA8D;gBAC9D,0BAA0B;gBAC1B,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QAEL,wEAAwE;QACxE,iEAAiE;QACjE,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,MAAM,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratusagent/gateway",
-  "version": "0.11.4",
+  "version": "0.11.6",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -18,16 +18,16 @@
     "node": ">=22.13 <23 || >=23.4"
   },
   "dependencies": {
-    "@stratusagent/core": "0.11.4",
-    "@stratusagent/agents": "0.11.4",
-    "@stratusagent/plugins": "0.11.4",
-    "@stratusagent/executor-local": "0.11.4",
-    "@stratusagent/state": "0.11.4"
+    "@stratusagent/agents": "0.11.6",
+    "@stratusagent/core": "0.11.6",
+    "@stratusagent/plugins": "0.11.6",
+    "@stratusagent/executor-local": "0.11.6",
+    "@stratusagent/state": "0.11.6"
   },
   "devDependencies": {
     "@types/node": "^24.6.0",
     "typescript": "^5.9.3",
-    "@stratusagent/permissions": "0.11.4"
+    "@stratusagent/permissions": "0.11.6"
   },
   "license": "MIT",
   "repository": {