@agenthifive/openclaw-setup 0.1.0

package/dist/setup-wizard.js

@@ -0,0 +1,515 @@
+/**
+ * AgentHiFive standalone setup CLI.
+ *
+ * Orchestrates the full setup flow in one command:
+ * 1. Checks OpenClaw is installed
+ * 2. Runs `openclaw onboard` if needed
+ * 3. Installs the @agenthifive/openclaw plugin
+ * 4. Bootstraps agent auth (key pair + token exchange)
+ * 5. Fetches vault capabilities
+ * 6. Writes plugin config to openclaw.json
+ * 7. Patches OpenClaw for credential proxying
+ * 8. Launches `openclaw model` for default model selection
+ */
+import { execSync } from "node:child_process";
+import { mkdirSync, writeFileSync, existsSync, readdirSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { generateKeyPair, exportJWK } from "jose";
+import { VaultTokenManager } from "./vault-token-manager.js";
+import { resolveOpenClawConfigPath, defaultConfigPath, readExistingConfig, mergePluginConfig, } from "./config-discovery.js";
+import { findOpenClawInstallDir, validateOpenClawDir, applyPatch, } from "./auto-patch.js";
+// ---------------------------------------------------------------------------
+// Readline helpers
+// ---------------------------------------------------------------------------
+async function prompt(question, defaultValue) {
+    const { createInterface } = await import("node:readline");
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const suffix = defaultValue ? ` [${defaultValue}]` : "";
+    return new Promise((resolve) => {
+        rl.question(`${question}${suffix}: `, (answer) => {
+            rl.close();
+            resolve(answer.trim() || defaultValue || "");
+        });
+    });
+}
+// ---------------------------------------------------------------------------
+// Shell helpers
+// ---------------------------------------------------------------------------
+function isOpenClawInstalled() {
+    try {
+        execSync("openclaw --version", { stdio: "pipe" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isOnboarded() {
+    // Check for existing config file
+    const configPath = resolveOpenClawConfigPath();
+    if (configPath)
+        return true;
+    // Check if state directory at least exists
+    const stateDir = path.join(os.homedir(), ".openclaw");
+    return existsSync(stateDir);
+}
+function isPluginInstalled() {
+    const extensionsDir = path.join(os.homedir(), ".openclaw", "extensions");
+    if (!existsSync(extensionsDir))
+        return false;
+    // Check for agenthifive directory in extensions
+    try {
+        const entries = readdirSync(extensionsDir);
+        return entries.some((e) => e === "agenthifive" || e === "@agenthifive");
+    }
+    catch {
+        return false;
+    }
+}
+function hasDefaultModel() {
+    const configPath = resolveOpenClawConfigPath();
+    if (!configPath)
+        return false;
+    try {
+        const config = readExistingConfig(configPath);
+        const agents = config.agents;
+        const defaults = agents?.defaults;
+        const model = defaults?.model;
+        if (!model)
+            return false;
+        if (typeof model === "string")
+            return true;
+        if (typeof model === "object" && model !== null) {
+            return !!model.primary;
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// Vault API helpers
+// ---------------------------------------------------------------------------
+async function bootstrapAgent(baseUrl, bootstrapSecret) {
+    const { publicKey, privateKey } = await generateKeyPair("ES256");
+    const publicJWK = await exportJWK(publicKey);
+    const privateJWK = await exportJWK(privateKey);
+    const response = await fetch(`${baseUrl}/v1/agents/bootstrap`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            bootstrapSecret: bootstrapSecret.trim(),
+            publicKey: publicJWK,
+        }),
+        signal: AbortSignal.timeout(10_000),
+    });
+    if (!response.ok) {
+        const body = await response.text().catch(() => "");
+        throw new Error(`Bootstrap failed (${response.status}): ${body || "check that the secret is valid and not expired"}`);
+    }
+    const result = (await response.json());
+    return { ...result, privateKey: privateJWK };
+}
+async function fetchCapabilities(baseUrl, token) {
+    const response = await fetch(`${baseUrl}/v1/capabilities/me`, {
+        method: "GET",
+        headers: { Authorization: `Bearer ${token}` },
+        signal: AbortSignal.timeout(5_000),
+    });
+    if (!response.ok) {
+        throw new Error(`Capabilities fetch failed (${response.status})`);
+    }
+    const body = (await response.json());
+    return body.activeConnections ?? [];
+}
+// ---------------------------------------------------------------------------
+// Service mapping
+// ---------------------------------------------------------------------------
+const SUPPORTED_SERVICES = {
+    telegram: "telegram",
+    slack: "slack",
+    "microsoft-teams": "msteams",
+    "anthropic-messages": "anthropic",
+    openai: "openai",
+    gemini: "gemini",
+};
+function integrationLabel(conn) {
+    if (conn.category === "llm")
+        return "LLM proxy";
+    if (conn.credentialType === "bot_token")
+        return "brokered API proxy";
+    if (conn.credentialType === "oauth")
+        return "brokered API proxy";
+    return "auth managed";
+}
+// ---------------------------------------------------------------------------
+// Config output builder
+// ---------------------------------------------------------------------------
+export function buildConfigOutput(params) {
+    return {
+        plugins: {
+            enabled: true,
+            allow: ["agenthifive"],
+            load: {
+                paths: ["@agenthifive/openclaw"],
+            },
+            entries: {
+                agenthifive: {
+                    enabled: true,
+                    hooks: { allowPromptInjection: true },
+                    config: {
+                        baseUrl: params.baseUrl,
+                        auth: {
+                            mode: "agent",
+                            agentId: params.agentId,
+                            privateKey: Buffer.from(JSON.stringify(params.privateKey)).toString("base64"),
+                        },
+                        connectedProviders: params.connectedProviders,
+                        proxiedProviders: params.proxiedProviders,
+                    },
+                },
+            },
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// Main setup flow
+// ---------------------------------------------------------------------------
+export async function runSetup(opts = {}) {
+    const log = (msg) => process.stdout.write(`${msg}\n`);
+    log("");
+    log("  AgentHiFive Setup");
+    log("  " + "=".repeat(40));
+    log("");
+    // -----------------------------------------------------------------------
+    // Step 0: Check OpenClaw is installed
+    // -----------------------------------------------------------------------
+    if (!isOpenClawInstalled()) {
+        throw new Error("OpenClaw is not installed. Install it first:\n\n" +
+            "  npm install -g openclaw@latest\n");
+    }
+    log("  [1/7] OpenClaw installed");
+    // -----------------------------------------------------------------------
+    // Step 1: Auto-onboard if needed
+    // -----------------------------------------------------------------------
+    if (!opts.skipOnboard && !isOnboarded()) {
+        log("  [2/7] Running OpenClaw onboard...");
+        log("");
+        try {
+            execSync("openclaw onboard --non-interactive --accept-risk --auth-choice skip " +
+                "--install-daemon --skip-channels --skip-skills --skip-search --skip-health --skip-ui", { stdio: "inherit" });
+        }
+        catch {
+            throw new Error("OpenClaw onboard failed. Run it manually first:\n\n" +
+                "  openclaw onboard --non-interactive --accept-risk --auth-choice skip " +
+                "--install-daemon --skip-channels --skip-skills --skip-search --skip-health --skip-ui\n");
+        }
+        log("");
+    }
+    else {
+        log("  [2/7] OpenClaw onboarded");
+    }
+    // -----------------------------------------------------------------------
+    // Step 2: Install plugin if needed
+    // -----------------------------------------------------------------------
+    if (!opts.skipPluginInstall && !isPluginInstalled()) {
+        log("  [3/7] Installing AgentHiFive plugin...");
+        log("");
+        try {
+            execSync("openclaw plugins install @agenthifive/openclaw", {
+                stdio: "inherit",
+            });
+        }
+        catch {
+            throw new Error("Plugin installation failed. Try manually:\n\n" +
+                "  openclaw plugins install @agenthifive/openclaw\n");
+        }
+        log("");
+    }
+    else {
+        log("  [3/7] AgentHiFive plugin installed");
+    }
+    // -----------------------------------------------------------------------
+    // Step 3: Base URL
+    // -----------------------------------------------------------------------
+    let baseUrl = opts.baseUrl;
+    if (!baseUrl) {
+        if (opts.nonInteractive) {
+            throw new Error("--base-url is required in non-interactive mode");
+        }
+        baseUrl = await prompt("  AgentHiFive base URL", "https://app.agenthifive.com");
+    }
+    baseUrl = baseUrl.replace(/\/+$/, "");
+    // -----------------------------------------------------------------------
+    // Step 4: Bootstrap secret + agent auth
+    // -----------------------------------------------------------------------
+    let bootstrapSecret = opts.bootstrapSecret;
+    if (!bootstrapSecret) {
+        if (opts.nonInteractive) {
+            throw new Error("--bootstrap-secret is required in non-interactive mode");
+        }
+        log("");
+        log("  Generate a bootstrap secret from the AgentHiFive dashboard:");
+        log("    Dashboard -> Agents -> [your agent] -> Bootstrap Secret");
+        log("  The secret expires in 1 hour.");
+        log("");
+        bootstrapSecret = await prompt("  Bootstrap secret (ah5b_...)");
+    }
+    if (!bootstrapSecret.startsWith("ah5b_")) {
+        throw new Error("Bootstrap secrets must start with ah5b_");
+    }
+    log("");
+    log("  [4/7] Bootstrapping agent...");
+    const { agentId, name, status, privateKey } = await bootstrapAgent(baseUrl, bootstrapSecret);
+    log(`        Agent "${name}" bootstrapped (${agentId.slice(0, 8)}..., status: ${status})`);
+    // Verify token exchange
+    log("        Verifying token exchange...");
+    const tokenManager = new VaultTokenManager({
+        baseUrl,
+        agentId,
+        privateKey,
+        tokenAudience: baseUrl,
+    });
+    try {
+        await tokenManager.init();
+        log("        Token exchange successful");
+    }
+    catch (err) {
+        log(`  WARNING: Token exchange failed: ${err instanceof Error ? err.message : String(err)}`);
+        log("  Config will still be generated — you may need to fix auth settings.");
+        tokenManager.stop();
+        outputMinimalConfig(log, baseUrl, agentId, privateKey);
+        return;
+    }
+    // -----------------------------------------------------------------------
+    // Step 5: Fetch capabilities
+    // -----------------------------------------------------------------------
+    log("  [5/7] Fetching capabilities...");
+    let vaultConnections = [];
+    try {
+        vaultConnections = await fetchCapabilities(baseUrl, tokenManager.getToken());
+    }
+    catch (err) {
+        log(`  WARNING: Could not fetch capabilities: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    tokenManager.stop();
+    // Show connection status
+    const connections = {};
+    const connectedProviders = [];
+    const proxiedProviders = [];
+    const seenServices = new Set();
+    log("");
+    log("  Connected Services:");
+    log("  " + "-".repeat(50));
+    for (const conn of vaultConnections) {
+        const openclawName = SUPPORTED_SERVICES[conn.service] ?? conn.service;
+        connections[openclawName] = conn.connectionId ?? "vault-managed";
+        if (seenServices.has(conn.service))
+            continue;
+        seenServices.add(conn.service);
+        const displayLabel = conn.displayName || openclawName;
+        log(`  + ${displayLabel.padEnd(20)} - connected (${integrationLabel(conn)})`);
+        connectedProviders.push(openclawName);
+        if (conn.category === "llm") {
+            proxiedProviders.push(openclawName);
+        }
+    }
+    for (const [serviceId, openclawName] of Object.entries(SUPPORTED_SERVICES)) {
+        if (!seenServices.has(serviceId)) {
+            log(`  - ${openclawName.padEnd(20)} - not connected`);
+        }
+    }
+    if (vaultConnections.length === 0) {
+        log("  No connections found. Add connections in the AgentHiFive dashboard.");
+    }
+    // -----------------------------------------------------------------------
+    // Step 6: Build + write config
+    // -----------------------------------------------------------------------
+    log("");
+    log("  [6/7] Writing config...");
+    const configBlock = buildConfigOutput({
+        baseUrl,
+        agentId,
+        privateKey,
+        connections,
+        connectedProviders,
+        proxiedProviders,
+    });
+    let configPath = opts.configPath ?? resolveOpenClawConfigPath();
+    if (configPath) {
+        log(`        Found config: ${configPath}`);
+    }
+    if (!configPath && !opts.nonInteractive) {
+        const suggested = defaultConfigPath();
+        configPath = await prompt("  OpenClaw config path", suggested);
+        if (!configPath)
+            configPath = null;
+    }
+    if (!configPath) {
+        configPath = defaultConfigPath();
+    }
+    try {
+        const existing = readExistingConfig(configPath);
+        const merged = mergePluginConfig(existing, configBlock);
+        mkdirSync(path.dirname(configPath), { recursive: true });
+        writeFileSync(configPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
+        log(`        Config written to: ${configPath}`);
+        log("");
+        log("  Plugin config (agenthifive):");
+        log("  " + "-".repeat(40));
+        const ah5Entry = configBlock.plugins;
+        const entries = ah5Entry.entries;
+        const lines = JSON.stringify(entries.agenthifive, null, 2).split("\n");
+        for (const line of lines) {
+            log(`  ${line}`);
+        }
+    }
+    catch (err) {
+        log(`  WARNING: Could not write config: ${err instanceof Error ? err.message : String(err)}`);
+        log("");
+        log("  Add this to your openclaw.json manually:");
+        log(JSON.stringify(configBlock, null, 2));
+    }
+    // -----------------------------------------------------------------------
+    // Step 7: Auto-patch + model selection
+    // -----------------------------------------------------------------------
+    log("");
+    log("  [7/7] Applying credential proxying patch...");
+    let openclawInstall = opts.openclawDir
+        ? validateOpenClawDir(opts.openclawDir)
+        : findOpenClawInstallDir();
+    if (!openclawInstall && !opts.nonInteractive) {
+        const userPath = await prompt("  OpenClaw installation path (press Enter to skip)");
+        if (userPath) {
+            openclawInstall = validateOpenClawDir(userPath);
+            if (!openclawInstall) {
+                log(`  WARNING: "${userPath}" does not appear to be an OpenClaw installation.`);
+            }
+        }
+    }
+    if (openclawInstall) {
+        try {
+            const result = applyPatch(openclawInstall);
+            if (result.applied) {
+                log(`        ${result.message}`);
+            }
+            else {
+                log(`  WARNING: ${result.message}`);
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes("EACCES") || msg.includes("permission denied")) {
+                log("  ERROR: Permission denied. Try running with sudo:");
+                log("    sudo ah5-setup ...");
+            }
+            else {
+                log(`  WARNING: Auto-patch failed: ${msg}`);
+            }
+        }
+    }
+    else {
+        log("  WARNING: Could not find OpenClaw installation. Skipping auto-patch.");
+        log("  Run 'ah5-setup --openclaw-dir /path/to/openclaw' to patch manually.");
+    }
+    // -----------------------------------------------------------------------
+    // Model selection via openclaw model
+    // -----------------------------------------------------------------------
+    if (!opts.skipModel && !hasDefaultModel()) {
+        log("");
+        log("  " + "-".repeat(50));
+        log("  Select a default LLM model for the agent.");
+        log("  (The vault will provide the API key)");
+        log("");
+        if (opts.nonInteractive) {
+            log("  Skipping model selection in non-interactive mode.");
+            log("  Run 'openclaw model' to set a default model.");
+        }
+        else {
+            try {
+                execSync("openclaw model", { stdio: "inherit" });
+            }
+            catch {
+                log("  WARNING: Could not launch model picker.");
+                log("  Run 'openclaw model' manually to set a default model.");
+            }
+        }
+    }
+    log("");
+    log("  " + "=".repeat(50));
+    log("  Setup complete!");
+    log("");
+    log("  To change the default model: openclaw model");
+    log("  To manage connections: https://app.agenthifive.com");
+    log("");
+}
+// ---------------------------------------------------------------------------
+// Fallback: minimal config when token exchange fails
+// ---------------------------------------------------------------------------
+function outputMinimalConfig(log, baseUrl, agentId, privateKey) {
+    const configBlock = buildConfigOutput({
+        baseUrl,
+        agentId,
+        privateKey,
+        connections: {},
+        connectedProviders: [],
+        proxiedProviders: [],
+    });
+    log("");
+    log("  " + "=".repeat(50));
+    log("  Add this to your openclaw.json manually:");
+    log("  (capabilities could not be fetched - update manually)");
+    log("  " + "=".repeat(50));
+    log("");
+    log(JSON.stringify(configBlock, null, 2));
+    log("");
+}
+// ---------------------------------------------------------------------------
+// CLI argument parser
+// ---------------------------------------------------------------------------
+export function parseSetupArgs(args) {
+    const opts = {};
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--base-url" && args[i + 1]) {
+            const val = args[++i];
+            if (val)
+                opts.baseUrl = val;
+        }
+        else if (arg === "--bootstrap-secret" && args[i + 1]) {
+            const val = args[++i];
+            if (val)
+                opts.bootstrapSecret = val;
+        }
+        else if (arg === "--config-path" && args[i + 1]) {
+            const val = args[++i];
+            if (val)
+                opts.configPath = val;
+        }
+        else if (arg === "--openclaw-dir" && args[i + 1]) {
+            const val = args[++i];
+            if (val)
+                opts.openclawDir = val;
+        }
+        else if (arg === "--non-interactive") {
+            opts.nonInteractive = true;
+        }
+        else if (arg === "--skip-onboard") {
+            opts.skipOnboard = true;
+        }
+        else if (arg === "--skip-plugin-install") {
+            opts.skipPluginInstall = true;
+        }
+        else if (arg === "--skip-model") {
+            opts.skipModel = true;
+        }
+    }
+    // Auto-enable non-interactive if both required args are provided
+    if (opts.baseUrl && opts.bootstrapSecret) {
+        opts.nonInteractive = true;
+    }
+    return opts;
+}
+//# sourceMappingURL=setup-wizard.js.map

package/dist/setup-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,UAAU,GACX,MAAM,iBAAiB,CAAC;AA6BzB,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,KAAK,UAAU,MAAM,CAAC,QAAgB,EAAE,YAAqB;IAC3D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,QAAQ,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,iCAAiC;IACjC,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;IAC/C,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAE5B,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAE7C,gDAAgD;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,cAAc,CACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6C,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,EAAE,QAA+C,CAAC;QACzE,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,CAAC,CAAE,KAAiC,CAAC,OAAO,CAAC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,eAAuB;IAOvB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,sBAAsB,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,eAAe,EAAE,eAAe,CAAC,IAAI,EAAE;YACvC,SAAS,EAAE,SAAS;SACrB,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,CAAC,MAAM,MAAM,IAAI,IAAI,gDAAgD,EAAE,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIpC,CAAC;IAEF,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EACf,KAAa;IAEb,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,qBAAqB,EAAE;QAC5D,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;QAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;IAEF,OAAO,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,kBAAkB,GAA2B;IACjD,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,iBAAiB,EAAE,SAAS;IAC5B,oBAAoB,EAAE,WAAW;IACjC,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,SAAS,gBAAgB,CAAC,IAAqB;IAC7C,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IAChD,IAAI,IAAI,CAAC,cAAc,KAAK,WAAW;QAAE,OAAO,oBAAoB,CAAC;IACrE,IAAI,IAAI,CAAC,cAAc,KAAK,OAAO;QAAE,OAAO,oBAAoB,CAAC;IACjE,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,UAAU,iBAAiB,CAAC,MAOjC;IACC,OAAO;QACL,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE;gBACJ,KAAK,EAAE,CAAC,uBAAuB,CAAC;aACjC;YACD,OAAO,EAAE;gBACP,WAAW,EAAE;oBACX,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE;oBACrC,MAAM,EAAE;wBACN,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,IAAI,EAAE;4BACJ,IAAI,EAAE,OAAO;4BACb,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,UAAU,EAAE,MAAM,CAAC,IAAI,CACrB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAClC,CAAC,QAAQ,CAAC,QAAQ,CAAC;yBACrB;wBACD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;wBAC7C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;qBAC1C;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAqB,EAAE;IACpD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAE9D,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC3B,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,EAAE,CAAC,CAAC;IAER,0EAA0E;IAC1E,sCAAsC;IACtC,0EAA0E;IAE1E,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kDAAkD;YAChD,oCAAoC,CACvC,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAElC,0EAA0E;IAC1E,iCAAiC;IACjC,0EAA0E;IAE1E,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,IAAI,CAAC;YACH,QAAQ,CACN,sEAAsE;gBACpE,sFAAsF,EACxF,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,qDAAqD;gBACnD,wEAAwE;gBACxE,wFAAwF,CAC3F,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,mCAAmC;IACnC,0EAA0E;IAE1E,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACpD,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAChD,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,IAAI,CAAC;YACH,QAAQ,CAAC,gDAAgD,EAAE;gBACzD,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,+CAA+C;gBAC7C,oDAAoD,CACvD,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC9C,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,GAAG,MAAM,MAAM,CACpB,wBAAwB,EACxB,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEtC,0EAA0E;IAC1E,wCAAwC;IACxC,0EAA0E;IAE1E,IAAI,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC3C,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,+DAA+D,CAAC,CAAC;QACrE,GAAG,CAAC,6DAA6D,CAAC,CAAC;QACnE,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACvC,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,eAAe,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACtC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,cAAc,CAChE,OAAO,EACP,eAAe,CAChB,CAAC;IACF,GAAG,CACD,kBAAkB,IAAI,mBAAmB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,MAAM,GAAG,CACtF,CAAC;IAEF,wBAAwB;IACxB,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,iBAAiB,CAAC;QACzC,OAAO;QACP,OAAO;QACP,UAAU;QACV,aAAa,EAAE,OAAO;KACvB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QAC1B,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxF,CAAC;QACF,GAAG,CAAC,uEAAuE,CAAC,CAAC;QAC7E,YAAY,CAAC,IAAI,EAAE,CAAC;QACpB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,0EAA0E;IAC1E,6BAA6B;IAC7B,0EAA0E;IAE1E,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACxC,IAAI,gBAAgB,GAAsB,EAAE,CAAC;IAC7C,IAAI,CAAC;QACH,gBAAgB,GAAG,MAAM,iBAAiB,CACxC,OAAO,EACP,YAAY,CAAC,QAAQ,EAAE,CACxB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,YAAY,CAAC,IAAI,EAAE,CAAC;IAEpB,yBAAyB;IACzB,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC7B,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC;QACtE,WAAW,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC;QAEjE,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAC7C,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC;QACtD,GAAG,CACD,OAAO,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,iBAAiB,gBAAgB,CAAC,IAAI,CAAC,GAAG,CACzE,CAAC;QAEF,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,OAAO,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IAC/E,CAAC;IAED,0EAA0E;IAC1E,+BAA+B;IAC/B,0EAA0E;IAE1E,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAEjC,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,OAAO;QACP,OAAO;QACP,UAAU;QACV,WAAW;QACX,kBAAkB;QAClB,gBAAgB;KACjB,CAAC,CAAC;IAEH,IAAI,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,yBAAyB,EAAE,CAAC;IAEhE,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,yBAAyB,UAAU,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,UAAU,GAAG,MAAM,MAAM,CACvB,wBAAwB,EACxB,SAAS,CACV,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,UAAU,GAAG,IAAI,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,WAAsC,CAAC,CAAC;QAEnF,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAE3E,GAAG,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAC;QAChD,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,gCAAgC,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAI,WAAuC,CAAC,OAAkC,CAAC;QAC7F,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAkC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,0EAA0E;IAC1E,uCAAuC;IACvC,0EAA0E;IAE1E,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAErD,IAAI,eAAe,GAAG,IAAI,CAAC,WAAW;QACpC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC;QACvC,CAAC,CAAC,sBAAsB,EAAE,CAAC;IAE7B,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,oDAAoD,CACrD,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,eAAe,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,GAAG,CAAC,eAAe,QAAQ,mDAAmD,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,GAAG,CAAC,WAAW,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,oDAAoD,CAAC,CAAC;gBAC1D,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,uEAAuE,CAAC,CAAC;QAC7E,GAAG,CAAC,uEAAuE,CAAC,CAAC;IAC/E,CAAC;IAED,0EAA0E;IAC1E,qCAAqC;IACrC,0EAA0E;IAE1E,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAC1C,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACnD,GAAG,CAAC,wCAAwC,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,CAAC;QAER,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,GAAG,CAAC,qDAAqD,CAAC,CAAC;YAC3D,GAAG,CAAC,gDAAgD,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,QAAQ,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,2CAA2C,CAAC,CAAC;gBACjD,GAAG,CAAC,yDAAyD,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,+CAA+C,CAAC,CAAC;IACrD,GAAG,CAAC,sDAAsD,CAAC,CAAC;IAC5D,GAAG,CAAC,EAAE,CAAC,CAAC;AACV,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E,SAAS,mBAAmB,CAC1B,GAA0B,EAC1B,OAAe,EACf,OAAe,EACf,UAAsB;IAEtB,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,OAAO;QACP,OAAO;QACP,UAAU;QACV,WAAW,EAAE,EAAE;QACf,kBAAkB,EAAE,EAAE;QACtB,gBAAgB,EAAE,EAAE;KACrB,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAClD,GAAG,CAAC,yDAAyD,CAAC,CAAC;IAC/D,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,EAAE,CAAC,CAAC;AACV,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,MAAM,IAAI,GAAiB,EAAE,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,YAAY,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG;gBAAE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QAC9B,CAAC;aAAM,IAAI,GAAG,KAAK,oBAAoB,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG;gBAAE,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QACtC,CAAC;aAAM,IAAI,GAAG,KAAK,eAAe,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG;gBAAE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACjC,CAAC;aAAM,IAAI,GAAG,KAAK,gBAAgB,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG;gBAAE,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QAClC,CAAC;aAAM,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YACvC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;aAAM,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;aAAM,IAAI,GAAG,KAAK,uBAAuB,EAAE,CAAC;YAC3C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/vault-token-manager.d.ts

@@ -0,0 +1,42 @@
+export type VaultTokenManagerConfig = {
+    baseUrl: string;
+    agentId: string;
+    privateKey: JsonWebKey;
+    tokenAudience?: string;
+};
+export declare class VaultTokenManager {
+    private readonly baseUrl;
+    private readonly agentId;
+    private readonly privateKeyJWK;
+    private readonly tokenAudience;
+    private privateKeyObj;
+    private accessToken;
+    private tokenExpiresAt;
+    private refreshTimer;
+    private refreshInFlight;
+    /** Called after every successful token refresh with the new token. */
+    onRefresh: ((newToken: string) => void) | null;
+    /** Called when token refresh fails with 401 — indicates the agent's key is no longer valid. */
+    onAuthFailure: (() => void) | null;
+    constructor(config: VaultTokenManagerConfig);
+    /**
+     * Perform the initial token exchange and start the background refresh timer.
+     * Must be called (and awaited) before getToken().
+     */
+    init(): Promise<void>;
+    /**
+     * Get the current bearer token. Synchronous — relies on background refresh.
+     * Throws if init() hasn't been called.
+     */
+    getToken(): string;
+    /** Stop the background refresh timer. */
+    stop(): void;
+    /**
+     * Force an immediate token refresh. Called on-demand when a 401 is received.
+     * Coalesces concurrent requests — if a refresh is already in flight, callers
+     * wait for the same promise instead of hammering the token endpoint.
+     */
+    forceRefresh(): Promise<boolean>;
+    private refreshToken;
+}
+//# sourceMappingURL=vault-token-manager.d.ts.map

package/dist/vault-token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-token-manager.d.ts","sourceRoot":"","sources":["../src/vault-token-manager.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAa;IAC3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,YAAY,CAA+C;IACnE,OAAO,CAAC,eAAe,CAA8B;IAErD,sEAAsE;IACtE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAQ;IAEtD,+FAA+F;IAC/F,aAAa,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,CAAQ;gBAE9B,MAAM,EAAE,uBAAuB;IAO3C;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B3B;;;OAGG;IACH,QAAQ,IAAI,MAAM;IAOlB,yCAAyC;IACzC,IAAI,IAAI,IAAI;IAOZ;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC;YAsBxB,YAAY;CAqC3B"}