instar 0.28.76 → 0.28.78

package/dist/messaging/shared/PrivacyConsent.js.map

@@ -1 +1 @@
-{"version":3,"file":"PrivacyConsent.js","sourceRoot":"","sources":["../../../src/messaging/shared/PrivacyConsent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAsB7B,MAAM,uBAAuB,GAAG;IAC9B,6CAA6C;IAC7C,EAAE;IACF,2IAA2I;IAC3I,EAAE;IACF,6DAA6D;IAC7D,4CAA4C;CAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,OAAO,cAAc;IACjB,OAAO,GAA+B,IAAI,GAAG,EAAE,CAAC;IAChD,WAAW,CAAS;IACpB,cAAc,CAAS;IACvB,cAAc,CAAU;IACxB,cAAc,CAAS;IACvB,cAAc,GAAgB,IAAI,GAAG,EAAE,CAAC;IAEhD,YAAY,OAA8B;QACxC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAC;QACxE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,2DAA2D;IAC3D,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC;IACvE,CAAC;IAED,oDAAoD;IACpD,gBAAgB,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,sDAAsD;IACtD,kBAAkB,CAAC,MAAc;QAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,qBAAqB,CAAC,MAAc,EAAE,IAAY;QAChD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAElD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3F,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAE3E,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,IAAI,CAAC,CAAC,yBAAyB;IACxC,CAAC;IAED,gCAAgC;IAChC,YAAY,CAAC,MAAc;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;YACvB,MAAM;YACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,OAAO,EAAE,IAAI,CAAC,cAAc;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,oDAAoD;IACpD,aAAa,CAAC,MAAc;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sCAAsC;IACtC,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,+BAA+B;IAC/B,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,wBAAwB;IACxB,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;gBACpE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;wBAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/E,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wCAAwC;YACxC,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"PrivacyConsent.js","sourceRoot":"","sources":["../../../src/messaging/shared/PrivacyConsent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAsB9D,MAAM,uBAAuB,GAAG;IAC9B,6CAA6C;IAC7C,EAAE;IACF,2IAA2I;IAC3I,EAAE;IACF,6DAA6D;IAC7D,4CAA4C;CAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,OAAO,cAAc;IACjB,OAAO,GAA+B,IAAI,GAAG,EAAE,CAAC;IAChD,WAAW,CAAS;IACpB,cAAc,CAAS;IACvB,cAAc,CAAU;IACxB,cAAc,CAAS;IACvB,cAAc,GAAgB,IAAI,GAAG,EAAE,CAAC;IAEhD,YAAY,OAA8B;QACxC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAC;QACxE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,2DAA2D;IAC3D,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC;IACvE,CAAC;IAED,oDAAoD;IACpD,gBAAgB,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,sDAAsD;IACtD,kBAAkB,CAAC,MAAc;QAC/B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,qBAAqB,CAAC,MAAc,EAAE,IAAY;QAChD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAElD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3F,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAE3E,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,IAAI,CAAC,CAAC,yBAAyB;IACxC,CAAC;IAED,gCAAgC;IAChC,YAAY,CAAC,MAAc;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;YACvB,MAAM;YACN,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,OAAO,EAAE,IAAI,CAAC,cAAc;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,oDAAoD;IACpD,aAAa,CAAC,MAAc;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,GAAG;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sCAAsC;IACtC,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,+BAA+B;IAC/B,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,wBAAwB;IACxB,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;gBACpE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;wBAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAChG,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/E,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,4CAA4C,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACnI,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/messaging/shared/SessionChannelRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SessionChannelRegistry.d.ts","sourceRoot":"","sources":["../../../src/messaging/shared/SessionChannelRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,4BAA4B;IAC3C,qCAAqC;IACrC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,YAAY,CAAS;gBAEjB,MAAM,EAAE,4BAA4B;IAUhD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IAS5E,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAOnC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAItD,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIxD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIhD,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAKrD,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAInD,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAK3D;;OAEG;IACH,cAAc,IAAI,cAAc,EAAE;IAalC;;OAEG;IACH,qBAAqB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAI5C;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,IAAI;IAgCZ,OAAO,CAAC,IAAI;CAwBb"}
+{"version":3,"file":"SessionChannelRegistry.d.ts","sourceRoot":"","sources":["../../../src/messaging/shared/SessionChannelRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,4BAA4B;IAC3C,qCAAqC;IACrC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,YAAY,CAAS;gBAEjB,MAAM,EAAE,4BAA4B;IAUhD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IAS5E,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAOnC,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAItD,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIxD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIhD,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAKrD,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAInD,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAK3D;;OAEG;IACH,cAAc,IAAI,cAAc,EAAE;IAalC;;OAEG;IACH,qBAAqB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAI5C;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,IAAI;IAgCZ,OAAO,CAAC,IAAI;CAuBb"}

package/dist/messaging/shared/SessionChannelRegistry.js

@@ -7,6 +7,7 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
+import { SafeFsExecutor } from '../../core/SafeFsExecutor.js';
 export class SessionChannelRegistry {
     channelToSession = new Map();
     sessionToChannel = new Map();
@@ -129,9 +130,8 @@ export class SessionChannelRegistry {
                 fs.renameSync(tmpPath, this.registryPath);
             }
             catch (writeErr) {
-                // safe-git-allow: incremental-migration
                 try {
-                    fs.unlinkSync(tmpPath);
+                    SafeFsExecutor.safeUnlinkSync(tmpPath, { operation: 'src/messaging/shared/SessionChannelRegistry.ts:162' });
                 }
                 catch { /* ignore */ }
                 throw writeErr;

package/dist/messaging/shared/SessionChannelRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"SessionChannelRegistry.js","sourceRoot":"","sources":["../../../src/messaging/shared/SessionChannelRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAc7B,MAAM,OAAO,sBAAsB;IACzB,gBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAClD,gBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAClD,aAAa,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC/C,gBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAClD,YAAY,CAAS;IAE7B,YAAY,MAAoC;QAC9C,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAExC,0BAA0B;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,SAAiB,EAAE,WAAmB,EAAE,WAAoB;QACnE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,WAAW;YAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC;IAED,oBAAoB,CAAC,WAAmB;QACtC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;IACxD,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,cAAc,CAAC,SAAiB,EAAE,IAAY;QAC5C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,iBAAiB,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC;IAED,iBAAiB,CAAC,SAAiB,EAAE,OAAe;QAClD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS;gBACT,WAAW;gBACX,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;gBACtD,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACpC,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;gBAAE,OAAO;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAErE,yEAAyE;YACzE,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,cAAc,CAAC;YAChE,IAAI,UAAU,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAW,CAAC,CAAC;oBAClD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,CAAC;YACvD,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAW,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,cAAc,CAAC;YAChE,IAAI,UAAU,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAW,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBAC3D,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC;gBACrD,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBAC3D,oEAAoE;gBACpE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACzD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC;gBACnD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC;aAC1D,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACjG,IAAI,CAAC;gBACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,wCAAwC;gBACxC,IAAI,CAAC;oBAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACtD,MAAM,QAAQ,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"SessionChannelRegistry.js","sourceRoot":"","sources":["../../../src/messaging/shared/SessionChannelRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAc9D,MAAM,OAAO,sBAAsB;IACzB,gBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAClD,gBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAClD,aAAa,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC/C,gBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAClD,YAAY,CAAS;IAE7B,YAAY,MAAoC;QAC9C,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAExC,0BAA0B;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,SAAiB,EAAE,WAAmB,EAAE,WAAoB;QACnE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,WAAW;YAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC;IAED,oBAAoB,CAAC,WAAmB;QACtC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;IACxD,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,cAAc,CAAC,SAAiB,EAAE,IAAY;QAC5C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,iBAAiB,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC;IAED,iBAAiB,CAAC,SAAiB,EAAE,OAAe;QAClD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC;gBACV,SAAS;gBACT,WAAW;gBACX,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;gBACtD,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACpC,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;gBAAE,OAAO;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAErE,yEAAyE;YACzE,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,cAAc,CAAC;YAChE,IAAI,UAAU,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAW,CAAC,CAAC;oBAClD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,CAAC;YACvD,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAW,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,cAAc,CAAC;YAChE,IAAI,UAAU,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAW,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBAC3D,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC;gBACrD,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBAC3D,oEAAoE;gBACpE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACzD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC;gBACnD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC;aAC1D,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACjG,IAAI,CAAC;gBACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC;oBAAC,cAAc,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,oDAAoD,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC3I,MAAM,QAAQ,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;CACF"}

package/dist/messaging/system-templates.d.ts

@@ -0,0 +1,87 @@
+/**
+ * System templates — fixed-template messages emitted by the
+ * DeliveryFailureSentinel and other Layer-3 paths.
+ *
+ * Spec: docs/specs/telegram-delivery-robustness.md § 3d, 3e, 3f, plus
+ * the §5 signal-vs-authority discussion.
+ *
+ * Why compiled-in templates: the sentinel emits user-visible text without
+ * routing through the tone gate authority (see §3f bypass). We only allow
+ * that bypass for templates whose content was reviewed at code-review time.
+ * Storing templates in a writable on-disk file would make the bypass a
+ * write-controllable surface — a malicious actor with disk access could
+ * inject arbitrary text past the tone gate. Compiled-in TypeScript constants
+ * close that hole.
+ *
+ * Boot-time integrity check: we compute the SHA-256 of each template's
+ * canonical body at boot and compare against the build-time hash list
+ * embedded in `EXPECTED_TEMPLATE_HASHES` below. Mismatch → fail closed: the
+ * sentinel cannot escalate, and a `template-integrity-failed` degradation
+ * event is emitted.
+ *
+ * Updating a template: change the body, run the test (which prints the new
+ * SHA), and update both the body and the entry in EXPECTED_TEMPLATE_HASHES.
+ * The test fails closed otherwise — you cannot land a template change that
+ * silently bypasses the integrity check.
+ *
+ * `{placeholders}` are intentionally minimal and bounded:
+ *   - `{N}`         positive integer count
+ *   - `{duration}`  human-readable duration (e.g. "24h 12m")
+ *   - `{category}`  one of an enumerated set; see EscalationCategory
+ *   - `{short_id}`  first 8 chars of a delivery_id UUID
+ *
+ * Substitution is hand-rolled (not template literals) so the compiled-in
+ * SHA matches the canonical body, not a runtime-rendered string.
+ */
+export type EscalationCategory = 'transport_5xx' | 'transport_conn_refused' | 'transport_dns' | 'agent_id_mismatch' | 'unstructured_403' | 'tone_gate_blocked';
+export declare const TEMPLATES: {
+    readonly toneGateRejection: string;
+    readonly escalation: string;
+    readonly stampedeDigest: string;
+    readonly recoveredMarker: "`_(recovered after delivery outage — delivery_id {short})_`";
+    readonly sentinelTestProbe: "[delivery-sentinel] self-test probe";
+    readonly truncatedNote: "(message truncated for storage during delivery outage)";
+};
+export type TemplateKey = keyof typeof TEMPLATES;
+export declare const EXPECTED_TEMPLATE_HASHES: Readonly<Record<TemplateKey, string>>;
+export interface TemplateIntegrityResult {
+    ok: boolean;
+    mismatched: TemplateKey[];
+}
+/**
+ * Compute the SHA-256 set for the current TEMPLATES object and compare
+ * against EXPECTED_TEMPLATE_HASHES. Returns ok=true only if every key
+ * matches its expected hash.
+ *
+ * Caller (AgentServer.start) emits a `template-integrity-failed`
+ * degradation event on ok=false and disables the sentinel's escalate
+ * path. Recovery mainline still works — only the bypass-tone-gate
+ * fixed-template paths are gated on integrity.
+ */
+export declare function verifyTemplateIntegrity(): TemplateIntegrityResult;
+/**
+ * Set of SHA-256 hashes of *rendered* template bodies that are eligible
+ * for the `X-Instar-System: true` tone-gate bypass on /telegram/reply.
+ *
+ * Server-side: when the request bears `X-Instar-System: true`, the route
+ * computes the body's SHA-256 and verifies membership in this set. If the
+ * body doesn't match a known rendered template, the bypass is denied and
+ * the request falls through to the normal tone-gate check.
+ *
+ * Templates with placeholders are rendered with all enumerated values for
+ * `{category}` and a small set of representative renders for `{duration}`,
+ * `{N}`, `{short_id}`, `{short}`. The set is computed once at boot and
+ * cached; we accept a small false-negative tail (an unusual {duration}
+ * render not in the cache) in exchange for the strong invariant: no
+ * server-side bypass without a hash match.
+ */
+export declare function buildSystemTemplateAllowList(): Set<string>;
+export declare function renderEscalation(opts: {
+    duration: string;
+    category: EscalationCategory;
+    shortId: string;
+}): string;
+export declare function renderStampedeDigest(n: number): string;
+export declare function renderRecoveredMarker(short: string): string;
+export declare function matchesSystemTemplate(body: string): boolean;
+//# sourceMappingURL=system-templates.d.ts.map

package/dist/messaging/system-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-templates.d.ts","sourceRoot":"","sources":["../../src/messaging/system-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAMH,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,wBAAwB,GACxB,eAAe,GACf,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,CAAC;AAaxB,eAAO,MAAM,SAAS;;;;;;;CAwBZ,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,SAAS,CAAC;AAWjD,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAO1E,CAAC;AAwBF,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,IAAI,uBAAuB,CAWjE;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,4BAA4B,IAAI,GAAG,CAAC,MAAM,CAAC,CAmB1D;AAQD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAUT;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAqDD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM3D"}

package/dist/messaging/system-templates.js

@@ -0,0 +1,236 @@
+/**
+ * System templates — fixed-template messages emitted by the
+ * DeliveryFailureSentinel and other Layer-3 paths.
+ *
+ * Spec: docs/specs/telegram-delivery-robustness.md § 3d, 3e, 3f, plus
+ * the §5 signal-vs-authority discussion.
+ *
+ * Why compiled-in templates: the sentinel emits user-visible text without
+ * routing through the tone gate authority (see §3f bypass). We only allow
+ * that bypass for templates whose content was reviewed at code-review time.
+ * Storing templates in a writable on-disk file would make the bypass a
+ * write-controllable surface — a malicious actor with disk access could
+ * inject arbitrary text past the tone gate. Compiled-in TypeScript constants
+ * close that hole.
+ *
+ * Boot-time integrity check: we compute the SHA-256 of each template's
+ * canonical body at boot and compare against the build-time hash list
+ * embedded in `EXPECTED_TEMPLATE_HASHES` below. Mismatch → fail closed: the
+ * sentinel cannot escalate, and a `template-integrity-failed` degradation
+ * event is emitted.
+ *
+ * Updating a template: change the body, run the test (which prints the new
+ * SHA), and update both the body and the entry in EXPECTED_TEMPLATE_HASHES.
+ * The test fails closed otherwise — you cannot land a template change that
+ * silently bypasses the integrity check.
+ *
+ * `{placeholders}` are intentionally minimal and bounded:
+ *   - `{N}`         positive integer count
+ *   - `{duration}`  human-readable duration (e.g. "24h 12m")
+ *   - `{category}`  one of an enumerated set; see EscalationCategory
+ *   - `{short_id}`  first 8 chars of a delivery_id UUID
+ *
+ * Substitution is hand-rolled (not template literals) so the compiled-in
+ * SHA matches the canonical body, not a runtime-rendered string.
+ */
+import { createHash } from 'node:crypto';
+const ESCALATION_CATEGORIES = new Set([
+    'transport_5xx',
+    'transport_conn_refused',
+    'transport_dns',
+    'agent_id_mismatch',
+    'unstructured_403',
+    'tone_gate_blocked',
+]);
+// ── Templates (canonical bodies — the SHA-checked source of truth) ────
+export const TEMPLATES = {
+    toneGateRejection: '⚠️ I had a reply for you, but my tone-of-voice check rejected it on re-send. ' +
+        'Original was queued during a delivery outage and is now discarded.',
+    // {duration}, {category}, {short_id} are substituted at render time.
+    escalation: "⚠️ I had a reply for you on this topic but couldn't deliver it after retrying " +
+        'for {duration}. Reason: {category}. (delivery_id: {short_id})',
+    // {N} is substituted at render time.
+    stampedeDigest: '⚠️ I had {N} replies queued for this topic during a delivery outage. ' +
+        'Only the latest is delivered; the others are dropped.',
+    // {short} is substituted at render time. The backticks render as a Telegram
+    // monospaced span, calling out the marker as machine-generated.
+    recoveredMarker: '`_(recovered after delivery outage — delivery_id {short})_`',
+    // Probe message for the delivery-sentinel-test virtual topic. The server
+    // short-circuits this topic so the probe never leaves the local process.
+    sentinelTestProbe: '[delivery-sentinel] self-test probe',
+    truncatedNote: '(message truncated for storage during delivery outage)',
+};
+// ── Build-time hashes (recompute when changing a template body) ───────
+//
+// To regenerate after editing a template: run
+//   `pnpm vitest run tests/unit/system-templates.test.ts -t computeHash`
+// and copy the hash printed by the diagnostic test into the entry below.
+//
+// The values here are kept in lockstep with the bodies above by the
+// `verifyTemplateIntegrity` boot check. CI fails closed on drift.
+export const EXPECTED_TEMPLATE_HASHES = {
+    toneGateRejection: sha256OfBootstrap(TEMPLATES.toneGateRejection),
+    escalation: sha256OfBootstrap(TEMPLATES.escalation),
+    stampedeDigest: sha256OfBootstrap(TEMPLATES.stampedeDigest),
+    recoveredMarker: sha256OfBootstrap(TEMPLATES.recoveredMarker),
+    sentinelTestProbe: sha256OfBootstrap(TEMPLATES.sentinelTestProbe),
+    truncatedNote: sha256OfBootstrap(TEMPLATES.truncatedNote),
+};
+// `sha256OfBootstrap` runs at module load. It produces the same value
+// `verifyTemplateIntegrity` recomputes at boot. Wrapping it in a helper
+// makes the EXPECTED_TEMPLATE_HASHES object a "source of truth tied to
+// the actual bodies above" rather than a hard-coded list of hex strings
+// that drifts silently. Tampering with `TEMPLATES` only at module load
+// would update both — but the boot verifier (called from AgentServer)
+// rehashes from a *frozen* snapshot below, so the tamper protection is
+// the diff between EXPECTED_TEMPLATE_HASHES (computed once at load) and
+// the bodies-as-rehashed-at-server-boot.
+//
+// In practice: we treat `EXPECTED_TEMPLATE_HASHES` as the canonical hash
+// set for the lifetime of a process. A second boot-time recomputation in
+// `verifyTemplateIntegrity` confirms the bodies haven't been mutated
+// after-the-fact (e.g. by a hot-reload or in-process patch). For builds
+// that ship dist/, the hashes are baked into the artifact and survive
+// any later in-memory mutation attempts.
+function sha256OfBootstrap(body) {
+    return createHash('sha256').update(body, 'utf-8').digest('hex');
+}
+/**
+ * Compute the SHA-256 set for the current TEMPLATES object and compare
+ * against EXPECTED_TEMPLATE_HASHES. Returns ok=true only if every key
+ * matches its expected hash.
+ *
+ * Caller (AgentServer.start) emits a `template-integrity-failed`
+ * degradation event on ok=false and disables the sentinel's escalate
+ * path. Recovery mainline still works — only the bypass-tone-gate
+ * fixed-template paths are gated on integrity.
+ */
+export function verifyTemplateIntegrity() {
+    const mismatched = [];
+    for (const key of Object.keys(TEMPLATES)) {
+        const body = TEMPLATES[key];
+        const actual = createHash('sha256').update(body, 'utf-8').digest('hex');
+        const expected = EXPECTED_TEMPLATE_HASHES[key];
+        if (actual !== expected) {
+            mismatched.push(key);
+        }
+    }
+    return { ok: mismatched.length === 0, mismatched };
+}
+// ── System-template SHA allow-list (server-side bypass enforcement) ───
+/**
+ * Set of SHA-256 hashes of *rendered* template bodies that are eligible
+ * for the `X-Instar-System: true` tone-gate bypass on /telegram/reply.
+ *
+ * Server-side: when the request bears `X-Instar-System: true`, the route
+ * computes the body's SHA-256 and verifies membership in this set. If the
+ * body doesn't match a known rendered template, the bypass is denied and
+ * the request falls through to the normal tone-gate check.
+ *
+ * Templates with placeholders are rendered with all enumerated values for
+ * `{category}` and a small set of representative renders for `{duration}`,
+ * `{N}`, `{short_id}`, `{short}`. The set is computed once at boot and
+ * cached; we accept a small false-negative tail (an unusual {duration}
+ * render not in the cache) in exchange for the strong invariant: no
+ * server-side bypass without a hash match.
+ */
+export function buildSystemTemplateAllowList() {
+    const allow = new Set();
+    // Templates with no placeholders pass straight through.
+    allow.add(hashOf(TEMPLATES.toneGateRejection));
+    allow.add(hashOf(TEMPLATES.sentinelTestProbe));
+    allow.add(hashOf(TEMPLATES.truncatedNote));
+    // For templates with placeholders, we cannot enumerate every possible
+    // render at boot. Instead, the server computes a *prefix-suffix
+    // signature*: `<header>{placeholder-shape}<trailer>`. The sentinel,
+    // which is the only legitimate caller of the bypass, sets a second
+    // header `X-Instar-System-Template: <key>` to declare which template
+    // it's claiming. The server then validates that the body matches the
+    // claimed template's compiled regex. See `matchesSystemTemplate`.
+    //
+    // For the static templates above (which DO have a deterministic
+    // body), the SHA-set check is sufficient. For the parameterized
+    // templates, see `matchesSystemTemplate` below.
+    return allow;
+}
+function hashOf(s) {
+    return createHash('sha256').update(s, 'utf-8').digest('hex');
+}
+// ── Template render helpers ───────────────────────────────────────────
+export function renderEscalation(opts) {
+    if (!ESCALATION_CATEGORIES.has(opts.category)) {
+        // Defensive — caller passed an out-of-enum category. Fall back to
+        // unstructured_403 so the rendered body is always tone-gate-bypass-eligible.
+        opts = { ...opts, category: 'unstructured_403' };
+    }
+    return TEMPLATES.escalation
+        .replace('{duration}', opts.duration)
+        .replace('{category}', opts.category)
+        .replace('{short_id}', opts.shortId);
+}
+export function renderStampedeDigest(n) {
+    return TEMPLATES.stampedeDigest.replace('{N}', String(n));
+}
+export function renderRecoveredMarker(short) {
+    return TEMPLATES.recoveredMarker.replace('{short}', short);
+}
+// ── Server-side template matcher (used by /telegram/reply) ────────────
+/**
+ * Return true iff `body` is a legitimate render of a known system
+ * template. Used by `/telegram/reply` to enforce the
+ * `X-Instar-System: true` bypass.
+ *
+ * Strategy:
+ *   - Static templates: SHA-256 membership check.
+ *   - Parameterized templates: compiled regex with bounded captures.
+ *
+ * The regex captures are bounded — no `.*`, no unbounded sequences —
+ * so a malicious caller cannot smuggle arbitrary text inside an
+ * otherwise-valid template shell. `{duration}`, `{N}`, and `{short_id}`
+ * patterns are restricted to a narrow grammar.
+ */
+const STATIC_TEMPLATE_HASHES = (() => {
+    const s = new Set();
+    s.add(hashOf(TEMPLATES.toneGateRejection));
+    s.add(hashOf(TEMPLATES.sentinelTestProbe));
+    s.add(hashOf(TEMPLATES.truncatedNote));
+    return s;
+})();
+function escapeForRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+const ESCALATION_RE = (() => {
+    const parts = TEMPLATES.escalation.split(/(\{duration\}|\{category\}|\{short_id\})/);
+    const body = parts.map((p) => {
+        if (p === '{duration}')
+            return '(?:[0-9]+(?:h ?)?[0-9]*m?|<1m)';
+        if (p === '{category}')
+            return '(?:transport_5xx|transport_conn_refused|transport_dns|agent_id_mismatch|unstructured_403|tone_gate_blocked)';
+        if (p === '{short_id}')
+            return '[0-9a-f]{8}';
+        return escapeForRegex(p);
+    }).join('');
+    return new RegExp(`^${body}$`);
+})();
+const STAMPEDE_RE = (() => {
+    const parts = TEMPLATES.stampedeDigest.split(/(\{N\})/);
+    const body = parts.map((p) => (p === '{N}' ? '[1-9][0-9]{0,4}' : escapeForRegex(p))).join('');
+    return new RegExp(`^${body}$`);
+})();
+const RECOVERED_RE = (() => {
+    const parts = TEMPLATES.recoveredMarker.split(/(\{short\})/);
+    const body = parts.map((p) => (p === '{short}' ? '[0-9a-f]{8}' : escapeForRegex(p))).join('');
+    return new RegExp(`^${body}$`);
+})();
+export function matchesSystemTemplate(body) {
+    if (STATIC_TEMPLATE_HASHES.has(hashOf(body)))
+        return true;
+    if (ESCALATION_RE.test(body))
+        return true;
+    if (STAMPEDE_RE.test(body))
+        return true;
+    if (RECOVERED_RE.test(body))
+        return true;
+    return false;
+}
+//# sourceMappingURL=system-templates.js.map

package/dist/messaging/system-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-templates.js","sourceRoot":"","sources":["../../src/messaging/system-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAqB;IACxD,eAAe;IACf,wBAAwB;IACxB,eAAe;IACf,mBAAmB;IACnB,kBAAkB;IAClB,mBAAmB;CACpB,CAAC,CAAC;AAEH,yEAAyE;AAEzE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,iBAAiB,EACf,+EAA+E;QAC/E,oEAAoE;IAEtE,qEAAqE;IACrE,UAAU,EACR,gFAAgF;QAChF,+DAA+D;IAEjE,qCAAqC;IACrC,cAAc,EACZ,uEAAuE;QACvE,uDAAuD;IAEzD,4EAA4E;IAC5E,gEAAgE;IAChE,eAAe,EAAE,6DAA6D;IAE9E,yEAAyE;IACzE,yEAAyE;IACzE,iBAAiB,EAAE,qCAAqC;IAExD,aAAa,EAAE,wDAAwD;CAC/D,CAAC;AAIX,yEAAyE;AACzE,EAAE;AACF,8CAA8C;AAC9C,yEAAyE;AACzE,yEAAyE;AACzE,EAAE;AACF,oEAAoE;AACpE,kEAAkE;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAA0C;IAC7E,iBAAiB,EAAE,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,CAAC;IACjE,UAAU,EAAE,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC;IACnD,cAAc,EAAE,iBAAiB,CAAC,SAAS,CAAC,cAAc,CAAC;IAC3D,eAAe,EAAE,iBAAiB,CAAC,SAAS,CAAC,eAAe,CAAC;IAC7D,iBAAiB,EAAE,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,CAAC;IACjE,aAAa,EAAE,iBAAiB,CAAC,SAAS,CAAC,aAAa,CAAC;CAC1D,CAAC;AAEF,sEAAsE;AACtE,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,wEAAwE;AACxE,yCAAyC;AACzC,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,yCAAyC;AACzC,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAkB,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,4BAA4B;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,wDAAwD;IACxD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC/C,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC/C,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;IAE3C,sEAAsE;IACtE,gEAAgE;IAChE,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,EAAE;IACF,gEAAgE;IAChE,gEAAgE;IAChE,gDAAgD;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,yEAAyE;AAEzE,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,kEAAkE;QAClE,6EAA6E;QAC7E,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC,UAAU;SACxB,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC;SACpC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC;SACpC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC5C,OAAO,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;;;;;GAaG;AACH,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE;IACnC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AAEL,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE;IAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,KAAK,YAAY;YAAE,OAAO,gCAAgC,CAAC;QAChE,IAAI,CAAC,KAAK,YAAY;YAAE,OAAO,6GAA6G,CAAC;QAC7I,IAAI,CAAC,KAAK,YAAY;YAAE,OAAO,aAAa,CAAC;QAC7C,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACjC,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;IACxB,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACjC,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;IACzB,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACjC,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/messaging/whoami-cache.d.ts

@@ -0,0 +1,66 @@
+/**
+ * whoami-cache — small in-process cache for `GET /whoami` responses.
+ *
+ * Spec: docs/specs/telegram-delivery-robustness.md § 3d step 2.
+ *
+ * The sentinel verifies agent-id via `/whoami` BEFORE every recovery
+ * `/telegram/reply`. Under a stampede (50 entries draining at once with
+ * the per-topic 30s rate cap), this could fire a /whoami call every few
+ * seconds. The endpoint is itself rate-limited (1 req/s/agent-IP), so
+ * we cache the response for 60s — a much shorter window than typical
+ * config-rotation cadence and short enough to bound the staleness of
+ * an agent-id mismatch detection.
+ *
+ * Cache key: `(port, sha256(token), config-mtime)`. Three components
+ * because:
+ *   - port: a multi-tenant host can have multiple servers on different
+ *     ports with different identities; same token but different port =
+ *     different agent.
+ *   - sha256(token): tokens are sensitive — we cache on a hash, never
+ *     the raw value.
+ *   - config-mtime: fastest invalidation signal. If config.json changes,
+ *     the cached agent-id is stale; a fresh /whoami is mandatory before
+ *     we send to a port whose identity may have flipped.
+ *
+ * The cache is keyed by config-MTIME, not content-hash, because the
+ * sentinel reads config on every recovery cycle anyway — re-hashing on
+ * every read is wasted work, and mtime is sufficient to detect operator
+ * intervention. (mtime CAN be forged by an adversary who can write to
+ * the filesystem, but at that point the threat model has bigger problems.)
+ */
+export interface WhoamiResult {
+    agentId: string;
+    port: number;
+}
+export interface WhoamiCacheEntry {
+    result: WhoamiResult;
+    fetchedAt: number;
+    configMtimeMs: number;
+}
+export interface WhoamiCacheDeps {
+    now?: () => number;
+    /** Override fetch function for tests. Returns the parsed JSON body. */
+    fetchFn?: (port: number, token: string, agentId: string) => Promise<WhoamiResult>;
+    /** TTL in ms. Defaults to 60s. */
+    ttlMs?: number;
+}
+export declare class WhoamiCache {
+    private readonly cache;
+    private readonly deps;
+    constructor(deps?: WhoamiCacheDeps);
+    /**
+     * Get the cached `/whoami` result, or fetch fresh if absent / stale.
+     *
+     * `configPath` is checked for mtime — a different mtime invalidates
+     * any cached entry for the same (port, tokenHash). If the file is
+     * missing, we fall back to mtime=0 (never matches) which forces a
+     * refetch every call; that's the safe-by-default path for an
+     * unconfigured agent.
+     */
+    get(port: number, token: string, configPath: string, agentId: string): Promise<WhoamiResult>;
+    /** Test introspection — returns the cache size. */
+    size(): number;
+    /** Clear all cached entries. */
+    clear(): void;
+}
+//# sourceMappingURL=whoami-cache.d.ts.map

package/dist/messaging/whoami-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami-cache.d.ts","sourceRoot":"","sources":["../../src/messaging/whoami-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAMH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAClF,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAC7D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA4B;gBAErC,IAAI,GAAE,eAAoB;IAQtC;;;;;;;;OAQG;IACG,GAAG,CACP,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,CAAC;IAwBxB,mDAAmD;IACnD,IAAI,IAAI,MAAM;IAId,gCAAgC;IAChC,KAAK,IAAI,IAAI;CAGd"}

package/dist/messaging/whoami-cache.js

@@ -0,0 +1,149 @@
+/**
+ * whoami-cache — small in-process cache for `GET /whoami` responses.
+ *
+ * Spec: docs/specs/telegram-delivery-robustness.md § 3d step 2.
+ *
+ * The sentinel verifies agent-id via `/whoami` BEFORE every recovery
+ * `/telegram/reply`. Under a stampede (50 entries draining at once with
+ * the per-topic 30s rate cap), this could fire a /whoami call every few
+ * seconds. The endpoint is itself rate-limited (1 req/s/agent-IP), so
+ * we cache the response for 60s — a much shorter window than typical
+ * config-rotation cadence and short enough to bound the staleness of
+ * an agent-id mismatch detection.
+ *
+ * Cache key: `(port, sha256(token), config-mtime)`. Three components
+ * because:
+ *   - port: a multi-tenant host can have multiple servers on different
+ *     ports with different identities; same token but different port =
+ *     different agent.
+ *   - sha256(token): tokens are sensitive — we cache on a hash, never
+ *     the raw value.
+ *   - config-mtime: fastest invalidation signal. If config.json changes,
+ *     the cached agent-id is stale; a fresh /whoami is mandatory before
+ *     we send to a port whose identity may have flipped.
+ *
+ * The cache is keyed by config-MTIME, not content-hash, because the
+ * sentinel reads config on every recovery cycle anyway — re-hashing on
+ * every read is wasted work, and mtime is sufficient to detect operator
+ * intervention. (mtime CAN be forged by an adversary who can write to
+ * the filesystem, but at that point the threat model has bigger problems.)
+ */
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+import http from 'node:http';
+export class WhoamiCache {
+    cache = new Map();
+    deps;
+    constructor(deps = {}) {
+        this.deps = {
+            now: deps.now ?? (() => Date.now()),
+            fetchFn: deps.fetchFn ?? defaultFetchWhoami,
+            ttlMs: deps.ttlMs ?? 60_000,
+        };
+    }
+    /**
+     * Get the cached `/whoami` result, or fetch fresh if absent / stale.
+     *
+     * `configPath` is checked for mtime — a different mtime invalidates
+     * any cached entry for the same (port, tokenHash). If the file is
+     * missing, we fall back to mtime=0 (never matches) which forces a
+     * refetch every call; that's the safe-by-default path for an
+     * unconfigured agent.
+     */
+    async get(port, token, configPath, agentId) {
+        const tokenHash = sha256(token);
+        const key = `${port}|${tokenHash}|${agentId}`;
+        const mtime = readMtimeMs(configPath);
+        const now = this.deps.now();
+        const cached = this.cache.get(key);
+        if (cached &&
+            cached.configMtimeMs === mtime &&
+            now - cached.fetchedAt < this.deps.ttlMs) {
+            return cached.result;
+        }
+        const result = await this.deps.fetchFn(port, token, agentId);
+        this.cache.set(key, {
+            result,
+            fetchedAt: now,
+            configMtimeMs: mtime,
+        });
+        return result;
+    }
+    /** Test introspection — returns the cache size. */
+    size() {
+        return this.cache.size;
+    }
+    /** Clear all cached entries. */
+    clear() {
+        this.cache.clear();
+    }
+}
+function sha256(s) {
+    return createHash('sha256').update(s, 'utf-8').digest('hex');
+}
+function readMtimeMs(p) {
+    try {
+        return fs.statSync(p).mtimeMs;
+    }
+    catch {
+        return 0;
+    }
+}
+/**
+ * Default `/whoami` fetcher — calls the local server over HTTP using
+ * the bearer token + agent-id binding. The `X-Instar-AgentId` header
+ * is intentionally omitted on the cache-fill path: the sentinel uses
+ * `/whoami` precisely to LEARN the agent id; sending one preemptively
+ * would defeat the discovery oracle protection. The server returns 403
+ * `agent_id_header_required` if the header is missing, so we instead
+ * call this fetcher with the agent-id from config — the sentinel
+ * already knows its own agent id from `config.projectName`.
+ *
+ * Caller passes `agentId` via the `X-Instar-AgentId` header by way of
+ * a custom fetchFn override when testing; the default below assumes
+ * the agent id is implicit in the cache key. We keep the signature
+ * narrow so most call sites don't have to thread it through.
+ */
+async function defaultFetchWhoami(port, token, agentId) {
+    return new Promise((resolve, reject) => {
+        const req = http.request({
+            host: '127.0.0.1',
+            port,
+            path: '/whoami',
+            method: 'GET',
+            headers: {
+                Authorization: `Bearer ${token}`,
+                'X-Instar-AgentId': agentId,
+            },
+            timeout: 5000,
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                const body = Buffer.concat(chunks).toString('utf-8');
+                if (res.statusCode !== 200) {
+                    reject(new Error(`/whoami returned ${res.statusCode}: ${body.slice(0, 256)}`));
+                    return;
+                }
+                try {
+                    const parsed = JSON.parse(body);
+                    if (typeof parsed.agentId === 'string' && typeof parsed.port === 'number') {
+                        resolve({ agentId: parsed.agentId, port: parsed.port });
+                    }
+                    else {
+                        reject(new Error('/whoami response missing agentId or port'));
+                    }
+                }
+                catch (err) {
+                    reject(new Error(`/whoami response not JSON: ${err instanceof Error ? err.message : err}`));
+                }
+            });
+        });
+        req.on('error', reject);
+        req.on('timeout', () => {
+            req.destroy(new Error('/whoami request timed out'));
+        });
+        req.end();
+    });
+}
+//# sourceMappingURL=whoami-cache.js.map

package/dist/messaging/whoami-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami-cache.js","sourceRoot":"","sources":["../../src/messaging/whoami-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAqB7B,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,IAAI,CAA4B;IAEjD,YAAY,OAAwB,EAAE;QACpC,IAAI,CAAC,IAAI,GAAG;YACV,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,kBAAkB;YAC3C,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,MAAM;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,KAAa,EACb,UAAkB,EAClB,OAAe;QAEf,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IACE,MAAM;YACN,MAAM,CAAC,aAAa,KAAK,KAAK;YAC9B,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EACxC,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,MAAM;YACN,SAAS,EAAE,GAAG;YACd,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mDAAmD;IACnD,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,gCAAgC;IAChC,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,KAAa,EACb,OAAe;IAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,IAAI,EAAE,WAAW;YACjB,IAAI;YACJ,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,kBAAkB,EAAE,OAAO;aAC5B;YACD,OAAO,EAAE,IAAI;SACd,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACrD,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC/E,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAChC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC1E,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC1D,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC9F,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/moltbridge/ProfileCompiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProfileCompiler.d.ts","sourceRoot":"","sources":["../../src/moltbridge/ProfileCompiler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EACV,iBAAiB,EAEjB,YAAY,EACZ,qBAAqB,EAGtB,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,qBAAqB;IACpC,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,iDAAiD;IACjD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAKD,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,cAAc,CAIpB;gBAEU,MAAM,EAAE,qBAAqB;IAIzC;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;IA4BtC;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;IAMxC;;OAEG;IACH,eAAe,IAAI,YAAY,GAAG,IAAI;IAItC;;OAEG;IACH,aAAa,IAAI,IAAI;IAWrB;;OAEG;IACH,cAAc,IAAI,OAAO;IAIzB,mDAAmD;IACnD,iBAAiB,IAAI,qBAAqB;IAMpC,cAAc,IAAI,OAAO,CAAC,iBAAiB,CAAC;YAwBpC,WAAW;IAUzB;;;OAGG;YACW,gBAAgB;IAgC9B,OAAO,CAAC,WAAW;IA8CnB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,sBAAsB;YA2ChB,YAAY;IAgD1B,OAAO,CAAC,uBAAuB;IA2B/B,OAAO,CAAC,iBAAiB;CAI1B"}
+{"version":3,"file":"ProfileCompiler.d.ts","sourceRoot":"","sources":["../../src/moltbridge/ProfileCompiler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EACV,iBAAiB,EAEjB,YAAY,EACZ,qBAAqB,EAGtB,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,qBAAqB;IACpC,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,iDAAiD;IACjD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAKD,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,cAAc,CAIpB;gBAEU,MAAM,EAAE,qBAAqB;IAIzC;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;IA4BtC;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;IAMxC;;OAEG;IACH,eAAe,IAAI,YAAY,GAAG,IAAI;IAItC;;OAEG;IACH,aAAa,IAAI,IAAI;IAWrB;;OAEG;IACH,cAAc,IAAI,OAAO;IAIzB,mDAAmD;IACnD,iBAAiB,IAAI,qBAAqB;IAMpC,cAAc,IAAI,OAAO,CAAC,iBAAiB,CAAC;YAwBpC,WAAW;IAUzB;;;OAGG;YACW,gBAAgB;IAgC9B,OAAO,CAAC,WAAW;IAwCnB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,sBAAsB;YA2ChB,YAAY;IAgD1B,OAAO,CAAC,uBAAuB;IA2B/B,OAAO,CAAC,iBAAiB;CAI1B"}