@stratusagent/gateway 0.13.6 → 0.14.0

package/dist/events.js

@@ -0,0 +1,467 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { MAX_IDEMPOTENCY_KEY_LENGTH } from '@stratusagent/core';
+import { openFleetDatabase, SCHEDULE_SESSION_ID_PREFIX } from "./schedules.js";
+// Event triggers' durable half (card 590, agent-plans
+// roadmap/590-event-triggers.md): deliveries, dedup tombstones and firings,
+// in fleet.db next to the schedules a trigger is. The listener decides what a
+// request is and which triggers it matches; the dispatch side decides when a
+// firing goes out. This file owns only what must survive a crash between
+// those steps, and the keys that make a firing run at most once.
+/** Accepted ids are remembered this long: longer than GitHub's 3-day manual redelivery. */
+export const EVENT_DEDUP_WINDOW_MS = 7 * 24 * 60 * 60 * 1_000;
+/** Delivery rows listed at most: the newest this many, within the dedup window. */
+export const EVENT_DELIVERY_ROW_CAP = 10_000;
+/** A firing's rendered event block, and so the event text a turn sees, is at most this many bytes. */
+export const EVENT_BLOCK_MAX_BYTES = 16 * 1_024;
+const OPEN_STATUSES = ['pending', 'held', 'rate_limited', 'firing'];
+const OPEN_SQL = OPEN_STATUSES.map((status) => `'${status}'`).join(', ');
+const sha256 = (text) => createHash('sha256').update(text).digest('hex');
+/**
+ * What sessions, holds and rate limits group by: source + subject when the
+ * event has one, so every Codex round on one PR is one conversation, and
+ * source + id when it doesn't, so subjectless events never share a bucket.
+ * JSON, so no subject can be spelled to collide with an id key.
+ */
+export const eventCoalescingKey = (sourceId, event) => {
+    const subject = event.attributes.subject;
+    return subject !== undefined && subject.length > 0
+        ? JSON.stringify([sourceId, 'subject', subject])
+        : JSON.stringify([sourceId, 'id', event.attributes.id ?? '']);
+};
+/**
+ * A trigger's session for one coalescing key. In the reserved `schedule:`
+ * namespace, which the gateway refuses to dispatch into from outside, so the
+ * only turns on it are the trigger's own firings.
+ */
+export const eventSessionId = (triggerId, coalescingKey) => `${SCHEDULE_SESSION_ID_PREFIX}${triggerId}:event-${sha256(coalescingKey).slice(0, 32)}`;
+/**
+ * The gateway idempotency key for one trigger's firing on one event: a
+ * repeat never starts a second turn, and a turn whose process died continues
+ * once. Hashed when over the gateway's bound, as channel-slack does, because
+ * a sender picks the event id's length.
+ */
+export const eventDispatchKey = (triggerId, sourceId, eventId) => {
+    const key = `event:${triggerId}:${sourceId}:${eventId}`;
+    return key.length <= MAX_IDEMPOTENCY_KEY_LENGTH ? key : `event-sha256:${sha256(key)}`;
+};
+const ATTRIBUTE_ORDER = ['id', 'source', 'type', 'subject', 'time'];
+/** The longest prefix of `text` that fits in `bytes` of UTF-8, never splitting a character. */
+const utf8Prefix = (text, bytes) => {
+    const { read } = new TextEncoder().encodeInto(text, new Uint8Array(Math.max(0, bytes)));
+    return text.slice(0, read);
+};
+/**
+ * What a firing's turn sees after the trigger's prompt. Rendered when the
+ * delivery is matched and stored with the firing, so a firing that goes out
+ * hours later needs neither the request body nor a second match. Attributes
+ * and data are JSON, so a newline in a sender's subject or comment can't pass
+ * for a line of the block. Capped at `EVENT_BLOCK_MAX_BYTES` with a note: the
+ * agent fetches the rest with its own tools (`gh` for a PR).
+ */
+export const renderEventBlock = (sourceId, event) => {
+    const attributes = {};
+    for (const name of ATTRIBUTE_ORDER) {
+        const value = event.attributes[name];
+        if (value !== undefined) {
+            attributes[name] = value;
+        }
+    }
+    for (const name of Object.keys(event.attributes).sort()) {
+        if (name !== 'specversion' && !ATTRIBUTE_ORDER.includes(name)) {
+            attributes[name] = event.attributes[name];
+        }
+    }
+    const full = [
+        `Event from source "${sourceId}":`,
+        JSON.stringify(attributes),
+        'data:',
+        ...(event.data !== undefined ? [JSON.stringify(event.data)] : []),
+    ].join('\n');
+    const size = Buffer.byteLength(full);
+    if (size <= EVENT_BLOCK_MAX_BYTES) {
+        return full;
+    }
+    const note = `\n[cut at ${Math.round(EVENT_BLOCK_MAX_BYTES / 1_024)} KB of ${Math.round(size / 1_024)} KB; fetch the rest with your own tools]`;
+    return utf8Prefix(full, EVENT_BLOCK_MAX_BYTES - Buffer.byteLength(note)) + note;
+};
+const deliveryFrom = (row) => ({
+    seq: row.seq,
+    source: row.source,
+    eventId: row.event_id,
+    type: row.type,
+    ...(row.subject !== '' ? { subject: row.subject } : {}),
+    status: row.status,
+    ...(row.reason !== '' ? { reason: row.reason } : {}),
+    receivedAt: row.received_at,
+});
+const firingFrom = (row) => ({
+    id: row.id,
+    deliverySeq: row.delivery_seq,
+    triggerId: row.trigger_id,
+    agentId: row.agent_id,
+    source: row.source,
+    eventId: row.event_id,
+    coalescingKey: row.coalescing_key,
+    sessionId: row.session_id,
+    dispatchKey: row.dispatch_key,
+    ...(row.batch_key !== '' ? { batchKey: row.batch_key } : {}),
+    status: row.status,
+    ...(row.started_at !== '' ? { startedAt: row.started_at } : {}),
+    ...(row.block !== null ? { block: row.block } : {}),
+    ...(row.reason !== '' ? { reason: row.reason } : {}),
+    createdAt: row.created_at,
+    updatedAt: row.updated_at,
+});
+const minus = (iso, ms) => new Date(Date.parse(iso) - ms).toISOString();
+/**
+ * Deliveries, dedup tombstones and firings, durable in `fleet.db`. Its own
+ * connection, like the schedule store's. `stratus events` reads through the
+ * running daemon instead of this file, because the requests refused before
+ * a row are counted only in the listener.
+ *
+ * Every method that changes more than one row does it in one transaction,
+ * and every one that moves a firing between statuses is all-or-nothing and
+ * conditional on the statuses it expects: a delivery and its firings are
+ * committed together before the sender hears 2xx, a batch is claimed whole
+ * before its dispatch, and a refused transition changes nothing.
+ */
+export class SqliteEventStore {
+    db;
+    constructor(filePath, options = {}) {
+        this.db = openFleetDatabase(filePath, options, `
+      CREATE TABLE IF NOT EXISTS event_deliveries (
+        seq INTEGER PRIMARY KEY AUTOINCREMENT,
+        source TEXT NOT NULL,
+        event_id TEXT NOT NULL,
+        type TEXT NOT NULL,
+        subject TEXT NOT NULL,
+        status TEXT NOT NULL,
+        reason TEXT NOT NULL,
+        received_at TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS event_deliveries_received ON event_deliveries (received_at);
+      CREATE TABLE IF NOT EXISTS event_seen (
+        source TEXT NOT NULL,
+        id_hash TEXT NOT NULL,
+        seen_at TEXT NOT NULL,
+        PRIMARY KEY (source, id_hash)
+      ) WITHOUT ROWID;
+      CREATE TABLE IF NOT EXISTS event_firings (
+        id TEXT PRIMARY KEY,
+        delivery_seq INTEGER NOT NULL,
+        trigger_id TEXT NOT NULL,
+        agent_id TEXT NOT NULL,
+        source TEXT NOT NULL,
+        event_id TEXT NOT NULL,
+        coalescing_key TEXT NOT NULL,
+        session_id TEXT NOT NULL,
+        dispatch_key TEXT NOT NULL,
+        batch_key TEXT NOT NULL,
+        status TEXT NOT NULL,
+        started_at TEXT NOT NULL DEFAULT '',
+        block TEXT,
+        reason TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        updated_at TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS event_firings_status ON event_firings (status, created_at);
+      CREATE INDEX IF NOT EXISTS event_firings_trigger ON event_firings (trigger_id, status, updated_at);
+      CREATE INDEX IF NOT EXISTS event_firings_batch ON event_firings (batch_key);
+    `);
+        // A table made before `started_at` existed (an unreleased build of
+        // this feature) gains it; rows claimed then count from their update.
+        const columns = this.db.prepare('PRAGMA table_info(event_firings)').all();
+        if (!columns.some((column) => column.name === 'started_at')) {
+            this.db.exec("ALTER TABLE event_firings ADD COLUMN started_at TEXT NOT NULL DEFAULT ''");
+        }
+    }
+    transaction(work) {
+        // IMMEDIATE takes the write lock up front, so the dedup check and the
+        // insert it guards can't interleave with another writer's.
+        this.db.exec('BEGIN IMMEDIATE');
+        try {
+            const result = work();
+            this.db.exec('COMMIT');
+            return result;
+        }
+        catch (error) {
+            this.db.exec('ROLLBACK');
+            throw error;
+        }
+    }
+    insertDelivery(delivery, status, reason = '') {
+        const result = this.db
+            .prepare('INSERT INTO event_deliveries (source, event_id, type, subject, status, reason, received_at) VALUES (?, ?, ?, ?, ?, ?, ?)')
+            .run(delivery.source, delivery.eventId, delivery.type ?? '', delivery.subject ?? '', status, reason, delivery.receivedAt);
+        return Number(result.lastInsertRowid);
+    }
+    /**
+     * Record a delivery whose signature checked out and whose body parsed:
+     * `duplicate` when its (source, id) was accepted within the dedup window,
+     * else `matched` with one `pending` firing per match, or `unmatched`. One
+     * write, made before the sender hears 2xx. Accepted deliveries leave a
+     * tombstone that outlives the row cap, so dedup never depends on it.
+     */
+    accept(delivery) {
+        return this.transaction(() => {
+            // Insert, or revive a tombstone older than the window; zero changes
+            // means a live tombstone, so the id was seen.
+            const fresh = this.db
+                .prepare(`
+          INSERT INTO event_seen (source, id_hash, seen_at) VALUES (?, ?, ?)
+          ON CONFLICT (source, id_hash) DO UPDATE SET seen_at = excluded.seen_at WHERE seen_at < ?
+        `)
+                .run(delivery.source, sha256(delivery.eventId), delivery.receivedAt, minus(delivery.receivedAt, EVENT_DEDUP_WINDOW_MS))
+                .changes > 0;
+            if (!fresh) {
+                return { status: 'duplicate', seq: this.insertDelivery(delivery, 'duplicate'), firings: [] };
+            }
+            const status = delivery.firings.length > 0 ? 'matched' : 'unmatched';
+            const seq = this.insertDelivery(delivery, status);
+            const insert = this.db.prepare(`
+        INSERT INTO event_firings (id, delivery_seq, trigger_id, agent_id, source, event_id, coalescing_key,
+          session_id, dispatch_key, batch_key, status, block, reason, created_at, updated_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, '', 'pending', ?, '', ?, ?)
+      `);
+            const firings = delivery.firings.map((firing) => {
+                const id = randomUUID();
+                insert.run(id, seq, firing.triggerId, firing.agentId, delivery.source, delivery.eventId, firing.coalescingKey, firing.sessionId, firing.dispatchKey, firing.block, delivery.receivedAt, delivery.receivedAt);
+                return {
+                    id,
+                    deliverySeq: seq,
+                    triggerId: firing.triggerId,
+                    agentId: firing.agentId,
+                    source: delivery.source,
+                    eventId: delivery.eventId,
+                    coalescingKey: firing.coalescingKey,
+                    sessionId: firing.sessionId,
+                    dispatchKey: firing.dispatchKey,
+                    status: 'pending',
+                    block: firing.block,
+                    createdAt: delivery.receivedAt,
+                    updatedAt: delivery.receivedAt,
+                };
+            });
+            return { status, seq, firings };
+        });
+    }
+    /**
+     * Record a signed delivery the listener refused (a form-encoded body, a
+     * malformed event). No tombstone: the sender can fix it and retry with the
+     * same id. Unsigned requests never reach here; they leave no row at all.
+     */
+    refuse(delivery) {
+        const seq = this.insertDelivery(delivery, 'refused', delivery.reason);
+        return deliveryFrom(this.db.prepare('SELECT * FROM event_deliveries WHERE seq = ?').get(seq));
+    }
+    /** Delivery rows, newest first. */
+    deliveries(options = {}) {
+        const limit = options.limit ?? 100;
+        const rows = (options.source !== undefined
+            ? this.db.prepare('SELECT * FROM event_deliveries WHERE source = ? ORDER BY seq DESC LIMIT ?').all(options.source, limit)
+            : this.db.prepare('SELECT * FROM event_deliveries ORDER BY seq DESC LIMIT ?').all(limit));
+        return rows.map(deliveryFrom);
+    }
+    /**
+     * Per source with any row: its last delivery, its last refused one, and
+     * counts since `sinceIso` (`stratus events`, `/health`). Grouped in the
+     * database, so the cost doesn't grow with the 7 days of rows kept.
+     */
+    activity(sinceIso) {
+        const result = {};
+        const entry = (source) => (result[source] ??= { deliveries: {}, firings: {} });
+        const latest = this.db.prepare(`
+      SELECT d.* FROM event_deliveries d
+      JOIN (SELECT source, MAX(seq) AS seq FROM event_deliveries GROUP BY source) newest ON newest.seq = d.seq
+    `).all();
+        for (const row of latest) {
+            entry(row.source).lastDelivery = {
+                at: row.received_at,
+                type: row.type,
+                ...(row.subject !== '' ? { subject: row.subject } : {}),
+                status: row.status,
+            };
+        }
+        const refused = this.db.prepare(`
+      SELECT d.* FROM event_deliveries d
+      JOIN (SELECT source, MAX(seq) AS seq FROM event_deliveries WHERE status = 'refused' GROUP BY source) newest ON newest.seq = d.seq
+    `).all();
+        for (const row of refused) {
+            entry(row.source).lastRefused = { at: row.received_at, reason: row.reason };
+        }
+        const deliveries = this.db.prepare(`
+      SELECT source, status, COUNT(*) AS n FROM event_deliveries WHERE received_at >= ? GROUP BY source, status
+    `).all(sinceIso);
+        for (const row of deliveries) {
+            entry(row.source).deliveries[row.status] = Number(row.n);
+        }
+        const firings = this.db.prepare(`
+      SELECT source, status, COUNT(*) AS n FROM event_firings
+      WHERE status IN (${OPEN_SQL}) OR updated_at >= ? GROUP BY source, status
+    `).all(sinceIso);
+        for (const row of firings) {
+            entry(row.source).firings[row.status] = Number(row.n);
+        }
+        return result;
+    }
+    firing(id) {
+        const row = this.db.prepare('SELECT * FROM event_firings WHERE id = ?').get(id);
+        return row ? firingFrom(row) : undefined;
+    }
+    /**
+     * Every open firing (`pending`, `held`, `rate_limited`, `firing`), oldest
+     * first, with its block and batch key: what the startup sweep recovers and
+     * what a hold releases. A `firing` row is a claim whose dispatch may or may
+     * not have reached the gateway; its batch goes out again as stored, and the
+     * idempotency key decides whether that starts or continues a turn.
+     */
+    open() {
+        return this.db
+            .prepare(`SELECT * FROM event_firings WHERE status IN (${OPEN_SQL}) ORDER BY created_at ASC, delivery_seq ASC, rowid ASC`)
+            .all().map(firingFrom);
+    }
+    /**
+     * Run `update` on exactly `ids`, all or nothing: false, with nothing
+     * changed, unless `precheck` (inside the same transaction) passes and
+     * every row matched the update's own conditions.
+     */
+    allOrNothing(ids, update, precheck = () => true) {
+        if (ids.length === 0 || new Set(ids).size !== ids.length) {
+            return false;
+        }
+        try {
+            return this.transaction(() => {
+                if (!precheck()) {
+                    throw new RefusedTransition();
+                }
+                for (const id of ids) {
+                    if (update(id) === 0) {
+                        throw new RefusedTransition();
+                    }
+                }
+                return true;
+            });
+        }
+        catch (error) {
+            if (error instanceof RefusedTransition) {
+                return false;
+            }
+            throw error;
+        }
+    }
+    /**
+     * Claim firings to go out as one turn under `batchKey`, in one write
+     * before the dispatch. Either every row is free and they become a new
+     * batch, or `ids` is exactly an existing batch under exactly its key,
+     * which is how recovery resends one. A batch is fixed once claimed: no
+     * row joins it later, and it never changes key. False, with nothing
+     * changed, for anything else, or if any row is finished.
+     *
+     * With `triggerId`, also false unless that schedule row still exists, in
+     * the same transaction: `stratus schedules cancel` deletes from another
+     * process, and a trigger cancelled after the scan read it must not fire,
+     * as a timed schedule's conditional slot claim already guarantees.
+     */
+    claim(ids, batchKey, nowIso, options = {}) {
+        const members = this.db.prepare('SELECT id FROM event_firings WHERE batch_key = ?');
+        const update = this.db.prepare(`
+      UPDATE event_firings
+      SET status = 'firing', batch_key = ?, updated_at = ?,
+        started_at = CASE WHEN started_at = '' THEN ? ELSE started_at END
+      WHERE id = ? AND status IN (${OPEN_SQL}) AND (batch_key = '' OR batch_key = ?)
+    `);
+        const wanted = new Set(ids);
+        return this.allOrNothing(ids, (id) => Number(update.run(batchKey, nowIso, nowIso, id, batchKey).changes), () => {
+            if (options.triggerId !== undefined
+                && this.db.prepare('SELECT 1 FROM schedules WHERE id = ?').get(options.triggerId) === undefined) {
+                return false;
+            }
+            const existing = members.all(batchKey).map((row) => row.id);
+            return existing.length === 0 || (existing.length === wanted.size && existing.every((id) => wanted.has(id)));
+        });
+    }
+    /**
+     * Hold open firings for quiet hours or paused intake (`held`) or over the
+     * trigger's hourly limit (`rate_limited`). The block and any batch key
+     * stay, so a held batch still goes out only as itself.
+     */
+    hold(ids, status, nowIso) {
+        const update = this.db.prepare(`UPDATE event_firings SET status = ?, updated_at = ? WHERE id = ? AND status IN (${OPEN_SQL})`);
+        return this.allOrNothing(ids, (id) => Number(update.run(status, nowIso, id).changes));
+    }
+    /**
+     * Finish claimed firings after their dispatch, clearing the block in the
+     * same write: from here the payload lives only in the session it fired.
+     * Only a `firing` row can finish, so nothing is marked fired that wasn't
+     * claimed first.
+     */
+    finish(ids, outcome, nowIso) {
+        const reason = outcome.status === 'failed' ? outcome.reason : '';
+        const update = this.db.prepare(`
+      UPDATE event_firings SET status = ?, reason = ?, block = NULL, updated_at = ?
+      WHERE id = ? AND status = 'firing'
+    `);
+        return this.allOrNothing(ids, (id) => Number(update.run(outcome.status, reason, nowIso, id).changes));
+    }
+    /**
+     * Retire open firings that will never go out: `superseded` by newer ones
+     * for the same key, or `expired` (held over 24 hours, or their trigger was
+     * cancelled). Clears their blocks. Returns how many were retired; a
+     * finished firing is left as it is.
+     */
+    retire(ids, status, reason, nowIso) {
+        const update = this.db.prepare(`
+      UPDATE event_firings SET status = ?, reason = ?, block = NULL, updated_at = ?
+      WHERE id = ? AND status IN (${OPEN_SQL})
+    `);
+        return this.transaction(() => ids.reduce((count, id) => count + Number(update.run(status, reason, nowIso, id).changes), 0));
+    }
+    /**
+     * Turns a trigger has started since `sinceIso`, for its hourly limit,
+     * counted from when each batch was first claimed (a two-hour turn doesn't
+     * hold the hour for two more): a batch running now, one that finished,
+     * and one that failed all count,
+     * since each was a turn started unattended. A failing provider would
+     * otherwise let every new event start another. A batch is one turn, so
+     * this counts batch keys, not rows; `exceptBatchKey` leaves out a batch
+     * being re-sent after a restart, which must not count against itself.
+     */
+    turnsStartedSince(triggerId, sinceIso, exceptBatchKey = '') {
+        const row = this.db
+            .prepare(`
+        SELECT COUNT(DISTINCT batch_key) AS turns FROM event_firings
+        WHERE trigger_id = ? AND status IN ('firing', 'fired', 'failed')
+          AND (CASE WHEN started_at = '' THEN updated_at ELSE started_at END) >= ? AND batch_key != ?
+      `)
+            .get(triggerId, sinceIso, exceptBatchKey);
+        return row.turns;
+    }
+    /**
+     * Drop what the dedup window and the row cap no longer cover: tombstones
+     * and delivery rows past 7 days, delivery rows past the newest 10,000, and
+     * finished firings past 7 days. An open firing is never pruned: it holds
+     * the only copy of an event that hasn't gone out.
+     */
+    prune(nowIso) {
+        const cutoff = minus(nowIso, EVENT_DEDUP_WINDOW_MS);
+        this.transaction(() => {
+            this.db.prepare('DELETE FROM event_seen WHERE seen_at < ?').run(cutoff);
+            this.db.prepare('DELETE FROM event_deliveries WHERE received_at < ?').run(cutoff);
+            this.db
+                .prepare('DELETE FROM event_deliveries WHERE seq <= (SELECT seq FROM event_deliveries ORDER BY seq DESC LIMIT 1 OFFSET ?)')
+                .run(EVENT_DELIVERY_ROW_CAP);
+            this.db.prepare(`DELETE FROM event_firings WHERE status NOT IN (${OPEN_SQL}) AND updated_at < ?`).run(cutoff);
+        });
+    }
+    close() {
+        this.db.close();
+    }
+}
+/** Unwinds an all-or-nothing transition's transaction; never escapes the store. */
+class RefusedTransition extends Error {
+    constructor() {
+        super('refused transition');
+        this.name = 'RefusedTransition';
+    }
+}
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAGhE,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAmC,MAAM,gBAAgB,CAAC;AAEhH,sDAAsD;AACtD,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,iEAAiE;AAEjE,2FAA2F;AAC3F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAE9D,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,sGAAsG;AACtG,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,KAAK,CAAC;AA0GhD,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAU,CAAC;AAC7E,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEzE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAE,KAAuC,EAAU,EAAE;IACtG,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;IACzC,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,aAAqB,EAAU,EAAE,CACjF,GAAG,0BAA0B,GAAG,SAAS,UAAU,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAE,QAAgB,EAAE,OAAe,EAAU,EAAE;IAC/F,MAAM,GAAG,GAAG,SAAS,SAAS,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;IACxD,OAAO,GAAG,CAAC,MAAM,IAAI,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACxF,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAEpE,+FAA+F;AAC/F,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE;IACzD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,KAAmB,EAAU,EAAE;IAChF,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,IAAI,IAAI,KAAK,aAAa,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG;QACX,sBAAsB,QAAQ,IAAI;QAClC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QAC1B,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,IAAI,qBAAqB,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,0CAA0C,CAAC;IAChJ,OAAO,UAAU,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;AAClF,CAAC,CAAC;AAgCF,MAAM,YAAY,GAAG,CAAC,GAAmB,EAAoB,EAAE,CAAC,CAAC;IAC/D,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,OAAO,EAAE,GAAG,CAAC,QAAQ;IACrB,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,UAAU,EAAE,GAAG,CAAC,WAAW;CAC5B,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAkB,EAAE,CAAC,CAAC;IACzD,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,WAAW,EAAE,GAAG,CAAC,YAAY;IAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;IACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;IACrB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,OAAO,EAAE,GAAG,CAAC,QAAQ;IACrB,aAAa,EAAE,GAAG,CAAC,cAAc;IACjC,SAAS,EAAE,GAAG,CAAC,UAAU;IACzB,WAAW,EAAE,GAAG,CAAC,YAAY;IAC7B,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,SAAS,EAAE,GAAG,CAAC,UAAU;IACzB,SAAS,EAAE,GAAG,CAAC,UAAU;CAC1B,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAU,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAEhG;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gBAAgB;IACV,EAAE,CAAe;IAElC,YAAY,QAAgB,EAAE,UAAsC,EAAE;QACpE,IAAI,CAAC,EAAE,GAAG,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAuC9C,CAAC,CAAC;QACH,mEAAmE;QACnE,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAA6B,CAAC;QACrG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAEO,WAAW,CAAI,IAAa;QAClC,sEAAsE;QACtE,2DAA2D;QAC3D,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,QAAkG,EAClG,MAA2B,EAC3B,MAAM,GAAG,EAAE;QAEX,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,0HAA0H,CAAC;aACnI,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5H,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAA+B;QACpC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YAC3B,oEAAoE;YACpE,8CAA8C;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;iBAClB,OAAO,CAAC;;;SAGR,CAAC;iBACD,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;iBACtH,OAAO,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,WAAoB,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACxG,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,WAAoB,CAAC;YACvF,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;OAI9B,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAkB,EAAE;gBAC9D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CACR,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAClG,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAC7F,CAAC;gBACF,OAAO;oBACL,EAAE;oBACF,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,MAAM,EAAE,SAAS;oBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,QAAQ,CAAC,UAAU;oBAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;iBAC/B,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAA8B;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,GAAG,CAA8B,CAAC,CAAC;IAC7H,CAAC;IAED,mCAAmC;IACnC,UAAU,CAAC,UAA+C,EAAE;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACxC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2EAA2E,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;YACzH,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAgC,CAAC;QAC3H,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,QAAgB;QACvB,MAAM,MAAM,GAAwC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,CAAC,MAAc,EAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAG9B,CAAC,CAAC,GAAG,EAAiC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG;gBAC/B,EAAE,EAAE,GAAG,CAAC,WAAW;gBACnB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAG/B,CAAC,CAAC,GAAG,EAAiC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAElC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAiF,CAAC;QACjG,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;yBAEX,QAAQ;KAC5B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAA+E,CAAC;QAC/F,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAwC,CAAC;QACvH,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,IAAI;QACF,OAAQ,IAAI,CAAC,EAAE;aACZ,OAAO,CAAC,gDAAgD,QAAQ,wDAAwD,CAAC;aACzH,GAAG,EAAgC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,GAAsB,EAAE,MAA8B,EAAE,WAAW,GAAY,EAAE,CAAC,IAAI;QACzG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC3B,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBAChC,CAAC;gBACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;oBACrB,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;wBACrB,MAAM,IAAI,iBAAiB,EAAE,CAAC;oBAChC,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,GAAsB,EAAE,QAAgB,EAAE,MAAc,EAAE,UAAkC,EAAE;QAClG,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;oCAIC,QAAQ;KACvC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,YAAY,CACtB,GAAG,EACH,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,EAC1E,GAAG,EAAE;YACH,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;mBAC9B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClG,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,QAAQ,GAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAA2B,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9G,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,GAAsB,EAAE,MAA+B,EAAE,MAAc;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mFAAmF,QAAQ,GAAG,CAAC,CAAC;QAC/H,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,CAAC;IAED;;;;;OAKG;IACH,MAAM,CACJ,GAAsB,EACtB,OAAmE,EACnE,MAAc;QAEd,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAG9B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxG,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,GAAsB,EAAE,MAAgC,EAAE,MAAc,EAAE,MAAc;QAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;oCAEC,QAAQ;KACvC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9H,CAAC;IAED;;;;;;;;;OASG;IACH,iBAAiB,CAAC,SAAiB,EAAE,QAAgB,EAAE,cAAc,GAAG,EAAE;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC;;;;OAIR,CAAC;aACD,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAsB,CAAC;QACjE,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAc;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACpB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClF,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,iHAAiH,CAAC;iBAC1H,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kDAAkD,QAAQ,sBAAsB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,iBAAkB,SAAQ,KAAK;IACnC;QACE,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,10 +1,14 @@
 import { EventBus, type AgentDefinition, type CredentialScope, type AlwaysMeans, type ApprovalDelegationOrigin, type ApprovalScheduleDestination, type ApprovalAnswer, type ApprovalOutcome, type ApprovalPolicy, type ImageAttachment, type ObserveEntry, type JsonObject, type Session, type ToolRisk, type TrustLevel } from '@stratusagent/core';
-import { type ConversationReader, type ParsedSoul, type ScheduleRecord } from '@stratusagent/agents';
+import { type ConversationReader, type ConversationCreator, type ParsedSoul, type ScheduleRecord } from '@stratusagent/agents';
+import { type EventIntakeRequest, type EventIntakeResponse, type EventSourceConfig, type EventsSummary } from './event-intake.ts';
+import { type EventDeliveryRow } from './events.ts';
 import { type SchedulerLimits } from './schedules.ts';
 import { ShardedSessionStore } from './sessions.ts';
 export { claimHome, homeLockPath, HomeClaimedError, type HomeClaim, } from './lock.ts';
 export { SqliteSessionStore, ShardedSessionStore, FleetSessionIndex, SessionIdTakenError, tightenSqliteFile, type SqliteSessionStoreOptions, type ShardedSessionStoreOptions, type SessionIndexRow, type SessionReconcileReport, } from './sessions.ts';
 export { SqliteScheduleStore, createSchedulerRuntime, isScheduleSessionId, SCHEDULE_SESSION_ID_PREFIX, type ScheduleStoreLike, type SchedulerLimits, type SchedulerRuntime, type SchedulerRuntimeOptions, } from './schedules.ts';
+export { SqliteEventStore, EVENT_BLOCK_MAX_BYTES, EVENT_DEDUP_WINDOW_MS, EVENT_DELIVERY_ROW_CAP, eventCoalescingKey, eventDispatchKey, eventSessionId, renderEventBlock, type AcceptedEventDelivery, type EventDeliveryRow, type EventDeliveryStatus, type EventFiringRow, type EventFiringStatus, type EventSourceActivity, type NewEventFiring, type RefusedEventDelivery, } from './events.ts';
+export { createEventIntake, mapGithubDelivery, parseStandardWebhookEvent, verifyGithubSignature, verifyStandardWebhookSignature, DEFAULT_EVENT_MAX_BODY_BYTES, EVENT_SOURCE_REQUESTS_PER_MINUTE, type EventIntake, type EventIntakeCounters, type EventIntakeOptions, type EventIntakeRequest, type EventIntakeResponse, type EventSourceConfig, type EventSourceCounters, type EventSourceSummary, type EventsSummary, type EventTrigger, } from './event-intake.ts';
 import { type OptionalModuleHost } from '@stratusagent/plugins';
 import { type PluginsConfig, type RuntimeSelection, type StateEnvironment } from '@stratusagent/state';
 /**
@@ -20,8 +24,9 @@ export { applySoulPins, type SoulPinContext } from '@stratusagent/state';
 /**
  * A channel adapter as the gateway sees it: started after the roster
  * loads, stopped before the store drains. Structurally identical to
- * @stratusagent/channels' ChannelAdapter — kept structural here so the
- * gateway does not depend on the channels package.
+ * `ChannelAdapter` in @stratusagent/core, declared here because it
+ * predates the channel contract moving into core, when the gateway could
+ * not import it without depending on the channels package.
  */
 export interface GatewayChannelAdapter {
     name: string;
@@ -50,9 +55,8 @@ export interface GatewayChannelAdapter {
      */
     servesWhileHeld?: boolean;
     /**
-     * The addressable outbound seam, mirroring
-     * `@stratusagent/channels`' `ChannelAdapter.resolveOutbound` structurally
-     * for the same reason the rest of this interface does. Optional: an
+     * The addressable outbound seam, mirroring `ChannelAdapter.resolveOutbound`
+     * structurally for the same reason the rest of this interface does. Optional: an
      * adapter with no concept of a destination simply lacks it, and the
      * gateway treats absence as "this channel cannot be spoken through".
      * Implementations MUST reject a destination they could not deliver to,
@@ -71,7 +75,7 @@ export interface GatewayChannelAdapter {
     }>;
     /**
      * The read side of an addressable conversation, mirroring
-     * `@stratusagent/channels`' `ChannelAdapter.readConversation`. Optional:
+     * `ChannelAdapter.readConversation`. Optional:
      * an adapter without it cannot be read through `message.read`.
      * Implementations MUST reject a conversation their app may not read,
      * with a sentence for the agent.
@@ -83,14 +87,25 @@ export interface GatewayChannelAdapter {
         after?: string;
         before?: string;
         limit: number;
+        sessionId?: string;
     }): ReturnType<ConversationReader>;
-    /** See `@stratusagent/channels`' `ChannelAdapter.accountFor`. */
+    /**
+     * Creates a conversation with the agent's own app, mirroring
+     * `ChannelAdapter.createConversation`. Optional: an adapter without it
+     * cannot serve `channel.create`. Implementations MUST reject what they
+     * can tell is invalid before creating anything, and MUST resolve once
+     * the conversation exists, reporting what did not happen after it.
+     */
+    createConversation?(request: Omit<Parameters<ConversationCreator>[0], 'channel'>): ReturnType<ConversationCreator>;
+    /** See `ChannelAdapter.accountFor`. */
     accountFor?(agentId: string): string | undefined;
-    /** See `@stratusagent/channels`' `ChannelAdapter.conversationKindFor`. */
+    /** See `ChannelAdapter.conversationKindFor`. */
     conversationKindFor?(agentId: string, conversation: string): Promise<'channel' | 'direct' | undefined>;
+    /** See `ChannelAdapter.sessionConversation`. */
+    sessionConversation?(agentId: string, sessionId: string): string | undefined;
     /**
      * Shows a person a form for a credential an agent asked for, mirroring
-     * `@stratusagent/channels`' `ChannelAdapter.requestCredential`. Optional:
+     * `ChannelAdapter.requestCredential`. Optional:
      * a channel without it cannot take credentials, and a request made in
      * its conversations is refused instead of announced. Implementations
      * MUST reject when the form reached nobody who can answer it, with a
@@ -104,10 +119,13 @@ export interface GatewayChannelAdapter {
         scope: CredentialScope;
         reason?: string;
         replace?: boolean;
+        env?: string;
         metadata: JsonObject;
     }): Promise<void>;
-    /** See `@stratusagent/channels`' `ChannelAdapter.credentialReplaceForms`. */
+    /** See `ChannelAdapter.credentialReplaceForms`. */
     credentialReplaceForms?: boolean;
+    /** See `ChannelAdapter.credentialEnvForms`. */
+    credentialEnvForms?: boolean;
     /**
      * Issues a one-time link to a form for a credential request, for the
      * agent to pass on: what a request falls back to when its conversation
@@ -127,6 +145,8 @@ export interface GatewayChannelAdapter {
         name: string;
         scope: CredentialScope;
         reason?: string;
+        /** The variable the agent's shell will read the key from; the page must say so. */
+        env?: string;
     }): Promise<{
         url: string;
         expiresAt: string;
@@ -136,9 +156,8 @@ export interface GatewayChannelAdapter {
 }
 /**
  * Where a session came from, as the gateway reports it. Structural for the
- * same reason as the adapter above — @stratusagent/channels declares the
- * matching shape for adapters to consume, and neither package imports the
- * other to agree on it.
+ * same reason as the adapter above: core's channel contract declares the
+ * matching shape (`SessionRouting`) for adapters to consume.
  */
 export interface SessionRouting {
     /** Whose app must do the talking. */
@@ -148,12 +167,12 @@ export interface SessionRouting {
     /**
      * When this agent last spoke, ISO-8601 — its newest reply's timestamp,
      * absent when it has never produced one. Not the session's modification
-     * time, which a mid-turn save moves; see `@stratusagent/channels`.
+     * time, which a mid-turn save moves; see `SessionRouting` in @stratusagent/core.
      */
     lastSpokeAt?: string;
-    /** The latest turn's text (`latestTurnReply`), when it produced any — see `@stratusagent/channels`. */
+    /** The latest turn's text (`latestTurnReply`), when it produced any — see `SessionRouting` in @stratusagent/core. */
     reply?: string;
-    /** Whether the turn the session is on is one nobody asked for (`isUnaddressedTurn`) — see `@stratusagent/channels`. */
+    /** Whether the turn the session is on is one nobody asked for (`isUnaddressedTurn`) — see `SessionRouting` in @stratusagent/core. */
     unaddressed?: boolean;
 }
 /**
@@ -510,6 +529,15 @@ export interface GatewayOptions {
      * event, or response resets it. 0 disables. Default 120s.
      */
     idleTimeoutMs?: number;
+    /**
+     * The events listener's sources and body limit (card 590), from the
+     * trusted config's `events` block. With no sources the event store is
+     * never opened, and every delivery is to an unknown source.
+     */
+    events?: {
+        sources?: Record<string, EventSourceConfig>;
+        maxBodyBytes?: number;
+    };
     /**
      * Where the per-agent session stores (`agents/<id>/sessions.db`) and the
      * fleet database (`fleet.db`, holding the schedules and the session
@@ -837,6 +865,24 @@ export interface Gateway {
      * such schedule exists.
      */
     cancelSchedule(scheduleId: string): boolean;
+    /**
+     * One request to the events port (card 590): verified, deduplicated,
+     * matched against event triggers and recorded, all before the answer.
+     * The listener in control-api calls this with the raw body.
+     */
+    receiveEvent(request: EventIntakeRequest): Promise<EventIntakeResponse>;
+    /**
+     * Per configured event source: the last delivery, the last refusal and
+     * why, and the last 24 hours by status, with the requests refused before
+     * they could leave a row (`stratus events`, `/health`). No sources when
+     * none is configured.
+     */
+    eventSummary(): EventsSummary;
+    /** Delivery rows, newest first; a row never holds the body. Empty when no source is configured. */
+    eventDeliveries(options?: {
+        source?: string;
+        limit?: number;
+    }): EventDeliveryRow[];
     /**
      * Every registered tool, with the risk it will actually be judged at and
      * the package it came from.