@yadsh/dsh-qa-surface 0.15.7 → 0.17.0

package/lib/chat-sharing/transport.js

@@ -0,0 +1,329 @@
+import { SessionId } from "@deepseek-ai/dsh-session/types";
+/** Durable access is checked before and after asynchronous reads and per frame. */
+export class QaChatTransport {
+    ctx;
+    store;
+    admit;
+    participantPolicy;
+    locks = new Map();
+    constructor(ctx, store, admit, participantPolicy) {
+        this.ctx = ctx;
+        this.store = store;
+        this.admit = admit;
+        this.participantPolicy = participantPolicy;
+    }
+    async list(token, signal) {
+        const visible = this.store().visible(token);
+        const controller = this.ctx
+            .sessionController;
+        const value = controller.listForSessions === undefined
+            ? await controller.list({}, signal)
+            : await controller.listForSessions(visible.map((item) => SessionId(item.sessionId)), signal);
+        return this.filterListing(token, value);
+    }
+    filterListing(token, value) {
+        const current = this.store().visible(token);
+        const allowed = new Set(current.map((item) => item.sessionId));
+        const owned = new Set(current
+            .filter((item) => item.mode === "owner")
+            .map((item) => item.sessionId));
+        for (let count = 0; count < value.items.length; count++) {
+            let changed = false;
+            for (const item of value.items)
+                if (item.origin === "subagent" &&
+                    item.parentSessionId !== undefined &&
+                    owned.has(String(item.parentSessionId)) &&
+                    !owned.has(String(item.sessionId))) {
+                    owned.add(String(item.sessionId));
+                    allowed.add(String(item.sessionId));
+                    changed = true;
+                }
+            if (!changed)
+                break;
+        }
+        return {
+            items: value.items.filter((item) => allowed.has(String(item.sessionId))),
+        };
+    }
+    async page(token, request, signal) {
+        const access = await this.addressAccess(token, request.address, signal);
+        const value = await this.ctx.sessionController.page(request, signal);
+        this.store().revalidate(token, access);
+        return {
+            ...value,
+            records: value.records.map((record) => this.signRecord(token, access.sessionId, record)),
+        };
+    }
+    async search(token, request, signal) {
+        await this.list(token, signal);
+        const value = await this.ctx.sessionController.search(request, signal);
+        const allowed = new Set((await this.list(token, signal)).items.map((item) => String(item.sessionId)));
+        return {
+            items: value.items.filter((item) => allowed.has(String(item.sessionId))),
+            hasMore: false,
+        };
+    }
+    async projections(token, id, signal) {
+        const access = await this.sessionAccess(token, id, signal);
+        const value = await this.ctx.sessionController.projections({ sessionId: SessionId(id) }, signal);
+        this.store().revalidate(token, access);
+        return value;
+    }
+    async *follow(token, request, signal) {
+        const access = await this.addressAccess(token, request.address, signal);
+        const id = access.sessionId;
+        const abort = new AbortController();
+        const onAbort = () => abort.abort(signal.reason);
+        signal.addEventListener("abort", onAbort, { once: true });
+        if (signal.aborted)
+            onAbort();
+        const poll = setInterval(() => {
+            try {
+                this.store().revalidate(token, access);
+            }
+            catch (error) {
+                abort.abort(error);
+            }
+        }, 250);
+        poll.unref();
+        try {
+            for await (const frame of this.ctx.sessionController.follow(request, abort.signal)) {
+                this.store().revalidate(token, access);
+                yield frame.type === "snapshot"
+                    ? {
+                        ...frame,
+                        records: frame.records.map((record) => this.signRecord(token, id, record)),
+                    }
+                    : frame.type === "event"
+                        ? this.signRecord(token, id, frame)
+                        : frame;
+            }
+        }
+        finally {
+            clearInterval(poll);
+            signal.removeEventListener("abort", onAbort);
+            abort.abort();
+        }
+    }
+    async *control(token, signal) {
+        // Polling a bounded catalog also surfaces grants/revocations on idle chats.
+        // No native Host-wide baseline or delta is exposed to a QA account.
+        while (!signal.aborted) {
+            const listing = await this.list(token, signal);
+            const projections = {};
+            for (const item of listing.items) {
+                try {
+                    // Cold rows already carry bounded cache hints. Replaying every cold
+                    // history on each polling tick thrashes the prepared-session cache.
+                    const value = item.agentAvailable
+                        ? await this.projections(token, String(item.sessionId), signal)
+                        : item.projections === undefined
+                            ? null
+                            : {
+                                asOfSeq: item.projections.asOfSeq,
+                                values: item.projections.values,
+                            };
+                    if (value !== null)
+                        projections[String(item.sessionId)] = value;
+                }
+                catch {
+                    /* revoked between reads */
+                }
+            }
+            // Recheck one current principal/grant snapshot immediately before this
+            // single baseline frame. There is no await between authorization and yield.
+            const allowed = new Set(this.filterListing(token, listing).items.map((item) => String(item.sessionId)));
+            for (const id of Object.keys(projections))
+                if (!allowed.has(id))
+                    delete projections[id];
+            yield { type: "baseline", value: { projections } };
+            await new Promise((resolve) => {
+                const done = () => {
+                    clearTimeout(timer);
+                    signal.removeEventListener("abort", done);
+                    resolve();
+                };
+                const timer = setTimeout(done, 1000);
+                timer.unref();
+                signal.addEventListener("abort", done, { once: true });
+                if (signal.aborted)
+                    done();
+            });
+        }
+    }
+    /** Queue admission is serialized, rechecked after resume, and signed before insertion. */
+    async prompt(token, request, signal) {
+        return this.serial(String(request.sessionId), async () => {
+            const access = this.store().write(token, String(request.sessionId));
+            if (access.mode !== "owner" && request.mode !== "queue")
+                throw new Error("Only the owner may steer a chat.");
+            if (access.mode !== "owner" &&
+                request.content.some((part) => part.type === "text" && /^\s*\//u.test(part.text)))
+                throw new Error("Only the owner may run chat skills or commands.");
+            const prior = this.store().requestActor(access.sessionId, String(request.requestId));
+            if (prior !== undefined) {
+                if (prior.userId !== access.actorId)
+                    throw new Error("Prompt identity belongs to another participant.");
+                if (prior.revision !== null && prior.revision !== access.revision)
+                    throw new Error("Prompt access has changed.");
+            }
+            await this.admit(token, access.sessionId);
+            if (access.mode === "collaborate")
+                await this.participantPolicy?.(access.actorId, access.sessionId);
+            signal.throwIfAborted();
+            this.store().revalidate(token, access);
+            const session = this.ctx.sessions?.get(SessionId(access.sessionId));
+            const historicalRequest = session
+                ?.snapshotEvents()
+                .some((event) => event.type === "user/message" &&
+                "rpcId" in event.data.source &&
+                String(event.data.source.rpcId) === String(request.requestId));
+            const agent = this.ctx.agents?.get(SessionId(access.sessionId));
+            const pendingRequest = [
+                ...(agent?.inbox.nextTurn ?? []),
+                ...(agent?.inbox.nextStep ?? []),
+            ].some((message) => "rpcId" in message.source &&
+                String(message.source.rpcId) === String(request.requestId));
+            if (prior === undefined && (historicalRequest || pendingRequest)) {
+                if (access.mode !== "owner")
+                    throw new Error("Prompt identity belongs to the original author.");
+                return this.ctx.sessionController.prompt(request, signal);
+            }
+            if (prior === undefined)
+                this.store().recordAuthor(token, access, String(request.requestId));
+            const value = await this.ctx.sessionController.prompt(request, signal);
+            this.store().revalidate(token, access);
+            return value;
+        });
+    }
+    async attachment(token, request) {
+        const access = await this.sessionAccess(token, String(request.sessionId), new AbortController().signal);
+        const value = await this.ctx.sessionController.attachment(request);
+        this.store().revalidate(token, access);
+        return value;
+    }
+    async rename(token, request) {
+        return this.ownerOperation(token, String(request.sessionId), () => this.ctx.sessionController.rename(request));
+    }
+    async selectModel(token, request) {
+        return this.ownerOperation(token, String(request.sessionId), () => this.ctx.sessionController.selectModel(request));
+    }
+    async cancel(token, id) {
+        return this.ownerOperation(token, id, async () => {
+            const value = await this.ctx.sessionController.cancel({
+                sessionId: SessionId(id),
+            });
+            stopDelegatedWork(this.ctx, id);
+            return value;
+        });
+    }
+    async updateQueue(token, request) {
+        return this.ownerOperation(token, String(request.sessionId), () => this.ctx.sessionController.updateQueue(request));
+    }
+    async ownerOperation(token, id, operation) {
+        return this.serial(id, async () => {
+            const access = this.store().owner(token, id);
+            await this.admit(token, id);
+            this.store().revalidate(token, access);
+            return operation();
+        });
+    }
+    async serial(id, operation) {
+        const previous = this.locks.get(id) ?? Promise.resolve();
+        const next = previous.catch(() => undefined).then(operation);
+        this.locks.set(id, next);
+        try {
+            return await next;
+        }
+        finally {
+            if (this.locks.get(id) === next)
+                this.locks.delete(id);
+        }
+    }
+    async sessionAccess(token, id, signal, catalog) {
+        try {
+            return this.store().access(token, id);
+        }
+        catch {
+            // A delegated child carries no membership of its own. Resolve its
+            // authoritative lineage and require the root owner, never a participant.
+            this.store().visible(token);
+            const listing = catalog ?? (await this.list(token, signal));
+            const rows = new Map(listing.items.map((item) => [String(item.sessionId), item]));
+            const seen = new Set();
+            let current = id;
+            while (true) {
+                if (seen.has(current))
+                    throw new Error("Chat access is unavailable.");
+                seen.add(current);
+                const row = rows.get(current);
+                if (row?.origin !== "subagent" || row.parentSessionId === undefined)
+                    break;
+                current = String(row.parentSessionId);
+            }
+            if (current === id)
+                throw new Error("Chat access is unavailable.");
+            return this.store().owner(token, current);
+        }
+    }
+    async addressAccess(token, address, signal) {
+        const access = await this.sessionAccess(token, String(address.kind === "session"
+            ? address.sessionId
+            : address.parentSessionId), signal);
+        if (address.kind === "subagent" && access.mode !== "owner")
+            throw new Error("Only the root owner may inspect a delegated session.");
+        return access;
+    }
+    signRecord(token, id, record) {
+        if (record.event.type !== "user/message")
+            return record;
+        const data = record.event.data;
+        const source = data.source;
+        const author = this.store()
+            .authors(token, id)
+            .find((item) => item.requestId === source?.rpcId)?.displayName ??
+            this.store().access(token, id).ownerName;
+        if (source === undefined)
+            return record;
+        return {
+            ...record,
+            event: {
+                ...record.event,
+                data: {
+                    ...data,
+                    source: { ...source, qaAuthor: author },
+                },
+            },
+        };
+    }
+}
+/**
+ * Stop the chat's delegated work with it. Cancelling the parent agent aborts
+ * one turn; a reviewer or a delegated run is its own resident agent and keeps
+ * working through the press, so the reader watches a Stop button that appears
+ * to do nothing. The Host walks this same lineage when a session is archived;
+ * here the reader asked for it, behind the owner check the caller already made.
+ */
+function stopDelegatedWork(ctx, root) {
+    const stopped = new Set([root]);
+    const children = ctx.agents
+        .list()
+        .filter((agent) => agent.session.header.origin === "subagent" &&
+        agent.session.header.parentSession !== undefined);
+    let widened = true;
+    while (widened) {
+        widened = false;
+        for (const agent of children) {
+            const header = agent.session.header;
+            if (stopped.has(String(header.id)))
+                continue;
+            if (!stopped.has(String(header.parentSession)))
+                continue;
+            stopped.add(String(header.id));
+            if (agent.status === "running")
+                agent.cancel({ kind: "user" }, { keepInbox: true });
+            widened = true;
+        }
+    }
+}
+//# sourceMappingURL=transport.js.map

package/lib/chat-sharing/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/chat-sharing/transport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AA2B3D,mFAAmF;AACnF,MAAM,OAAO,eAAe;IAGP,GAAG;IACH,KAAK;IACL,KAAK;IACL,iBAAiB;IALnB,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC7D,YACmB,GAAY,EACZ,KAA+B,EAC/B,KAAsD,EACtD,iBAGI;mBANJ,GAAG;qBACH,KAAK;qBACL,KAAK;iCACL,iBAAiB;IAIjC,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,MAAmB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG;aACxB,iBAKF,CAAC;QACF,MAAM,KAAK,GACT,UAAU,CAAC,eAAe,KAAK,SAAS;YACtC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;YACnC,CAAC,CAAC,MAAM,UAAU,CAAC,eAAe,CAC9B,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAChD,MAAM,CACP,CAAC;QACR,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAEO,aAAa,CACnB,KAAa,EACb,KAAuB;QAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO;aACJ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;aACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CACjC,CAAC;QACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACxD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;gBAC5B,IACE,IAAI,CAAC,MAAM,KAAK,UAAU;oBAC1B,IAAI,CAAC,eAAe,KAAK,SAAS;oBAClC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBACvC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAClC,CAAC;oBACD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBACpC,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,MAAM;QACtB,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAAa,EACb,OAA2B,EAC3B,MAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO;YACL,GAAG,KAAK;YACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CACjD;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAa,EACb,OAA6B,EAC7B,MAAmB;QAEnB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CACvB,CACF,CAAC;QACF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACxE,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAa,EACb,EAAU,EACV,MAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CACxD,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,EAC5B,MAAM,CACP,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CACX,KAAa,EACb,OAA6B,EAC7B,MAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CACzD,OAAO,EACP,KAAK,CAAC,MAAM,CACb,EAAE,CAAC;gBACF,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,KAAK,CAAC,IAAI,KAAK,UAAU;oBAC7B,CAAC,CAAC;wBACE,GAAG,KAAK;wBACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CACnC;qBACF;oBACH,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;wBACtB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC;wBACnC,CAAC,CAAC,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,OAAO,CACZ,KAAa,EACb,MAAmB;QAEnB,4EAA4E;QAC5E,oEAAoE;QACpE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,WAAW,GAGb,EAAE,CAAC;YACP,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,oEAAoE;oBACpE,oEAAoE;oBACpE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc;wBAC/B,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;wBAC/D,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;4BAC9B,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC;gCACE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO;gCACjC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;6BAChC,CAAC;oBACR,IAAI,KAAK,KAAK,IAAI;wBAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC;gBAClE,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;YACH,CAAC;YACD,uEAAuE;YACvE,4EAA4E;YAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACpD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CACvB,CACF,CAAC;YACF,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;gBACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,IAAI,GAAG,GAAG,EAAE;oBAChB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBAC1C,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;gBACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,IAAI,MAAM,CAAC,OAAO;oBAAE,IAAI,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,MAAM,CACV,KAAa,EACb,OAA6B,EAC7B,MAAmB;QAEnB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBACrD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACtD,IACE,MAAM,CAAC,IAAI,KAAK,OAAO;gBACvB,OAAO,CAAC,OAAO,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5D;gBAED,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,CACrC,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CAAC;YACF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO;oBACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBAC/D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;gBAC/B,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACnE,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACpE,MAAM,iBAAiB,GAAG,OAAO;gBAC/B,EAAE,cAAc,EAAE;iBACjB,IAAI,CACH,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,cAAc;gBAC7B,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM;gBAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAChE,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG;gBACrB,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;aACjC,CAAC,IAAI,CACJ,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,IAAI,OAAO,CAAC,MAAM;gBACzB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC7D,CAAC;YACF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,iBAAiB,IAAI,cAAc,CAAC,EAAE,CAAC;gBACjE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;oBACzB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,KAAK,KAAK,SAAS;gBACrB,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvE,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAa,EACb,OAAiC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CACrC,KAAK,EACL,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EACzB,IAAI,eAAe,EAAE,CAAC,MAAM,CAC7B,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAa,EACb,OAA6B;QAE7B,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAChE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAC3C,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,WAAW,CACf,KAAa,EACb,OAAkC;QAElC,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAChE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,CAChD,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,EAAU;QACpC,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACpD,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;aACzB,CAAC,CAAC;YACH,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,WAAW,CACf,KAAa,EACb,OAAkC;QAElC,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAChE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,CAChD,CAAC;IACJ,CAAC;IACO,KAAK,CAAC,cAAc,CAC1B,KAAa,EACb,EAAU,EACV,SAA+B;QAE/B,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IACO,KAAK,CAAC,MAAM,CAAI,EAAU,EAAE,SAA2B;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACO,KAAK,CAAC,aAAa,CACzB,KAAa,EACb,EAAU,EACV,MAAmB,EACnB,OAA0B;QAE1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,yEAAyE;YACzE,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC,CAC5D,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBACtE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,GAAG,EAAE,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,eAAe,KAAK,SAAS;oBACjE,MAAM;gBACR,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,OAAO,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACO,KAAK,CAAC,aAAa,CACzB,KAAa,EACb,OAAuB,EACvB,MAAmB;QAEnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CACrC,KAAK,EACL,MAAM,CACJ,OAAO,CAAC,IAAI,KAAK,SAAS;YACxB,CAAC,CAAC,OAAO,CAAC,SAAS;YACnB,CAAC,CAAC,OAAO,CAAC,eAAe,CAC5B,EACD,MAAM,CACP,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YACxD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC;IAChB,CAAC;IACO,UAAU,CAChB,KAAa,EACb,EAAU,EACV,MAAyB;QAEzB,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,MAAM,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAEzB,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,MAAM,GACV,IAAI,CAAC,KAAK,EAAE;aACT,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;aAClB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW;YAChE,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EAAE;gBACL,GAAG,MAAM,CAAC,KAAK;gBACf,IAAI,EAAE;oBACJ,GAAG,IAAI;oBACP,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;iBACS;aACnD;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,GAAY,EAAE,IAAY;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM;SACxB,IAAI,EAAE;SACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;QAC1C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CACnD,CAAC;IACJ,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAE,SAAS;YAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBAAE,SAAS;YACzD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAC5B,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/chat-sharing/turn-guard.js

@@ -0,0 +1,154 @@
+import { SessionId } from "@deepseek-ai/dsh-session/types";
+/** A mixed batch receives the intersection, never the union, of actor rights. */
+export class QaChatTurnGuard {
+    ctx;
+    store;
+    policy;
+    enabled;
+    resourceSafe;
+    actors = new Map();
+    disposers = [];
+    constructor(ctx, store, policy, enabled = () => true, resourceSafe = () => false) {
+        this.ctx = ctx;
+        this.store = store;
+        this.policy = policy;
+        this.enabled = enabled;
+        this.resourceSafe = resourceSafe;
+        this.disposers.push(ctx.on("agent/inbox/inserted", ({ agent, message }) => {
+            if (!this.enabled())
+                return;
+            const requestId = message.source.rpcId;
+            if (requestId === undefined)
+                return;
+            const id = String(agent.session.id);
+            const actor = this.store().requestActor(id, requestId);
+            if (actor?.revision !== undefined &&
+                actor.revision !== null &&
+                !this.store().actorStillAllowed(id, actor.userId, actor.revision))
+                agent.inbox.remove(message.id);
+        }, { global: true }));
+        this.disposers.push(ctx.on("agent/pre-step", async ({ agent, turn }, next) => {
+            if (!this.enabled())
+                return next();
+            const decision = await next();
+            if (decision.kind === "reject")
+                return decision;
+            const id = String(agent.session.id);
+            const participants = this.actors.get(id)?.turn === turn
+                ? [...(this.actors.get(id)?.actors ?? [])]
+                : [];
+            const admitted = [...decision.messages];
+            for (const message of decision.messages) {
+                const source = message.source;
+                if (source.rpcId === undefined)
+                    continue;
+                const actor = this.store().requestActor(id, String(source.rpcId));
+                if (actor?.revision === null || actor === undefined)
+                    continue;
+                if (!this.store().actorStillAllowed(id, actor.userId, actor.revision)) {
+                    admitted.splice(admitted.indexOf(message), 1);
+                    continue;
+                }
+                if (participants.some((item) => item.userId === actor.userId &&
+                    item.revision === actor.revision))
+                    continue;
+                try {
+                    const ceiling = await this.policy(actor.userId, id);
+                    participants.push({
+                        userId: actor.userId,
+                        revision: actor.revision,
+                        // Grantable tools require their own activation. Sharing grants none.
+                        tools: new Set(ceiling.tools),
+                    });
+                }
+                catch {
+                    admitted.splice(admitted.indexOf(message), 1);
+                }
+            }
+            this.actors.set(id, { turn, actors: participants });
+            if (decision.messages.length > 0 && admitted.length === 0)
+                return { kind: "reject" };
+            if (participants.some((actor) => !this.store().actorStillAllowed(id, actor.userId, actor.revision)))
+                return { kind: "reject" };
+            return { ...decision, messages: admitted };
+        }, { global: true }));
+        this.disposers.push(ctx.tools.guard((execution) => {
+            if (execution.agent === undefined)
+                return undefined;
+            const actors = this.participants(execution.agent);
+            for (const actor of actors) {
+                const root = this.root(execution.agent);
+                if (!this.store().actorStillAllowed(root, actor.userId, actor.revision))
+                    return "Shared chat access was revoked.";
+                if (!actor.tools.has(execution.name))
+                    return "This tool is outside the participant's own permissions.";
+                // Personal filesystem, credentials and skill/command activation cannot
+                // be delegated just by typing a message into someone else's chat.
+                if (/^(?:read|write|edit|glob|grep|ls|bash|shell|exec|str_replace_editor|skill|skills_|command|delegate|subagent|agent_|document_|qa_file_delete)/u.test(execution.name))
+                    return "Shared participation does not grant the owner's filesystem or agent capabilities.";
+                // A tool name's permission ceiling cannot confine an arbitrary plugin
+                // body to published files. Unknown implementations fail closed until
+                // an independently audited stateless/resource-scoped adapter exists.
+                if (!this.resourceSafe(execution.name))
+                    return "This tool has no shared-chat resource boundary.";
+            }
+            return undefined;
+        }));
+        this.disposers.push(ctx.on("agent/request", async ({ agent }, next) => {
+            for (const actor of this.participants(agent)) {
+                if (!this.store().actorStillAllowed(this.root(agent), actor.userId, actor.revision))
+                    throw new Error("Shared chat access was revoked.");
+            }
+            return next();
+        }, { global: true }));
+        this.disposers.push(ctx.on("agent/disposed", ({ agent }) => this.actors.delete(String(agent.session.id)), { global: true }));
+    }
+    root(agent) {
+        let session = agent.session;
+        const seen = new Set();
+        while (session.header.origin === "subagent" &&
+            session.header.parentSession !== undefined) {
+            const id = String(session.id);
+            if (seen.has(id))
+                break;
+            seen.add(id);
+            const parent = this.ctx.sessions.get(session.header.parentSession);
+            if (parent === undefined)
+                break;
+            session = parent;
+        }
+        return String(session.id);
+    }
+    participants(agent) {
+        return this.actors.get(this.root(agent))?.actors ?? [];
+    }
+    collaborative(sessionId) {
+        return (this.actors.get(sessionId)?.actors.length ?? 0) > 0;
+    }
+    /** Called after permission mutation. Only a turn carrying stale input stops. */
+    revoke(sessionId) {
+        const agent = this.ctx.agents.get(SessionId(sessionId));
+        for (const message of [
+            ...(agent?.inbox.nextTurn ?? []),
+            ...(agent?.inbox.nextStep ?? []),
+        ]) {
+            const requestId = message.source.rpcId;
+            const actor = requestId === undefined
+                ? undefined
+                : this.store().requestActor(sessionId, requestId);
+            if (actor !== undefined &&
+                actor.revision !== null &&
+                !this.store().actorStillAllowed(sessionId, actor.userId, actor.revision))
+                agent?.inbox.remove(message.id);
+        }
+        const current = this.actors.get(sessionId);
+        if (current?.actors.some((actor) => !this.store().actorStillAllowed(sessionId, actor.userId, actor.revision)))
+            this.ctx.sessionController.cancel({ sessionId: SessionId(sessionId) });
+    }
+    dispose() {
+        for (const dispose of this.disposers.splice(0).reverse())
+            dispose();
+        this.actors.clear();
+    }
+}
+//# sourceMappingURL=turn-guard.js.map

package/lib/chat-sharing/turn-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-guard.js","sourceRoot":"","sources":["../../src/chat-sharing/turn-guard.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAO3D,iFAAiF;AACjF,MAAM,OAAO,eAAe;IAOP,GAAG;IACH,KAAK;IACL,MAAM;IAIN,OAAO;IACP,YAAY;IAbd,MAAM,GAAG,IAAI,GAAG,EAG9B,CAAC;IACa,SAAS,GAAmB,EAAE,CAAC;IAChD,YACmB,GAAY,EACZ,KAA+B,EAC/B,MAGwB,EACxB,OAAO,GAAkB,GAAG,EAAE,CAAC,IAAI,EACnC,YAAY,GAA8B,GAAG,EAAE,CAAC,KAAK;mBAPrD,GAAG;qBACH,KAAK;sBACL,MAAM;uBAIN,OAAO;4BACP,YAAY;QAE7B,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,GAAG,CAAC,EAAE,CACJ,sBAAsB,EACtB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO;YAC5B,MAAM,SAAS,GAAI,OAAO,CAAC,MAA6B,CAAC,KAAK,CAAC;YAC/D,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO;YACpC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACvD,IACE,KAAK,EAAE,QAAQ,KAAK,SAAS;gBAC7B,KAAK,CAAC,QAAQ,KAAK,IAAI;gBACvB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;gBAEjE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CACF,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,GAAG,CAAC,EAAE,CACJ,gBAAgB,EAChB,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO,IAAI,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAC9B,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAChD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,MAAM,YAAY,GAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,KAAK,IAAI;gBAChC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAA4B,CAAC;gBACpD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;oBAAE,SAAS;gBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClE,IAAI,KAAK,EAAE,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;oBAAE,SAAS;gBAC9D,IACE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EACjE,CAAC;oBACD,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC9C,SAAS;gBACX,CAAC;gBACD,IACE,YAAY,CAAC,IAAI,CACf,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBAC5B,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CACnC;oBAED,SAAS;gBACX,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACpD,YAAY,CAAC,IAAI,CAAC;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,qEAAqE;wBACrE,KAAK,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;qBAC9B,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YACpD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC5B,IACE,YAAY,CAAC,IAAI,CACf,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAC7B,EAAE,EACF,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,CACf,CACJ;gBAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC5B,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC7C,CAAC,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CACF,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;YAC5B,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAClD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACxC,IACE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;oBAEnE,OAAO,iCAAiC,CAAC;gBAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClC,OAAO,yDAAyD,CAAC;gBACnE,uEAAuE;gBACvE,kEAAkE;gBAClE,IACE,+IAA+I,CAAC,IAAI,CAClJ,SAAS,CAAC,IAAI,CACf;oBAED,OAAO,mFAAmF,CAAC;gBAC7F,sEAAsE;gBACtE,qEAAqE;gBACrE,qEAAqE;gBACrE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC;oBACpC,OAAO,iDAAiD,CAAC;YAC7D,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CACH,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,GAAG,CAAC,EAAE,CACJ,eAAe,EACf,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE;YACxB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,IACE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAC7B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAChB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,CACf;oBAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CACF,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,GAAG,CAAC,EAAE,CACJ,gBAAgB,EAChB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAC3D,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CACF,CAAC;IACJ,CAAC;IACO,IAAI,CAAC,KAAY;QACvB,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,OACE,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;YACpC,OAAO,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,EAC1C,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM;YACxB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACnE,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IACO,YAAY,CAAC,KAAY;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;IACzD,CAAC;IACD,aAAa,CAAC,SAAiB;QAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,gFAAgF;IAChF,MAAM,CAAC,SAAiB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,OAAO,IAAI;YACpB,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;SACjC,EAAE,CAAC;YACF,MAAM,SAAS,GAAI,OAAO,CAAC,MAA6B,CAAC,KAAK,CAAC;YAC/D,MAAM,KAAK,GACT,SAAS,KAAK,SAAS;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACtD,IACE,KAAK,KAAK,SAAS;gBACnB,KAAK,CAAC,QAAQ,KAAK,IAAI;gBACvB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;gBAExE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IACE,OAAO,EAAE,MAAM,CAAC,IAAI,CAClB,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,iBAAiB,CAC7B,SAAS,EACT,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,CACf,CACJ;YAED,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO;QACL,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF"}

package/lib/chat-sharing/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/chat-sharing/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/chat-sharing/types.ts"],"names":[],"mappings":""}

package/lib/chat-sharing/uploads.js

@@ -0,0 +1,55 @@
+import { SessionId } from "@deepseek-ai/dsh-session/types";
+/** Authenticate before transferring the body, and fence every uploaded chunk. */
+export function installQaChatUploads(ctx, store, admit) {
+    const connection = ctx.get("connection");
+    return connection.fetch.register({
+        path: "/api/qa-chat-upload",
+        methods: ["POST"],
+        requestBody: "streaming",
+        fetch: async (request) => {
+            try {
+                const token = request.headers.get("authorization")?.replace(/^Bearer /u, "") ?? "";
+                const url = new URL(request.url);
+                const id = url.searchParams.get("sessionId") ?? "";
+                const access = store().write(token, id);
+                await admit(token, id);
+                store().revalidate(token, access);
+                const uploads = ctx.get("fileUploads");
+                if (uploads === undefined || request.body === null)
+                    throw new Error("File upload is unavailable.");
+                const reader = request.body.getReader();
+                const data = (async function* () {
+                    try {
+                        while (true) {
+                            request.signal.throwIfAborted();
+                            store().revalidate(token, access);
+                            const next = await reader.read();
+                            if (next.done)
+                                return;
+                            store().revalidate(token, access);
+                            yield next.value;
+                        }
+                    }
+                    finally {
+                        await reader.cancel().catch(() => undefined);
+                        reader.releaseLock();
+                    }
+                })();
+                const value = await uploads.uploadStream({
+                    sessionId: SessionId(id),
+                    data,
+                    signal: request.signal,
+                    ...(url.searchParams.has("name")
+                        ? { name: url.searchParams.get("name") }
+                        : {}),
+                });
+                store().revalidate(token, access);
+                return Response.json({ ok: true, value }, { headers: { "Cache-Control": "no-store" } });
+            }
+            catch {
+                return Response.json({ ok: false, error: { message: "File upload access was refused." } }, { status: 403, headers: { "Cache-Control": "no-store" } });
+            }
+        },
+    });
+}
+//# sourceMappingURL=uploads.js.map

package/lib/chat-sharing/uploads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.js","sourceRoot":"","sources":["../../src/chat-sharing/uploads.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAoB3D,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAClC,GAAY,EACZ,KAA+B,EAC/B,KAAsD;IAEtD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAEtC,CAAC;IACF,OAAO,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC/B,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,WAAW;QACxB,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,KAAK,GACT,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;gBACvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACxC,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACvB,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAwB,CAAC;gBAC9D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;oBAChD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,CAAC,KAAK,SAAS,CAAC;oBAC3B,IAAI,CAAC;wBACH,OAAO,IAAI,EAAE,CAAC;4BACZ,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;4BAChC,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;4BAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;4BACjC,IAAI,IAAI,CAAC,IAAI;gCAAE,OAAO;4BACtB,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;4BAClC,MAAM,IAAI,CAAC,KAAK,CAAC;wBACnB,CAAC;oBACH,CAAC;4BAAS,CAAC;wBACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBAC7C,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBACL,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;oBACvC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;oBACxB,IAAI;oBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;wBAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,EAAE;wBACzC,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,KAAK,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAClC,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EACnB,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAC7C,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,EACpE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}