@agenthifive/openclaw 0.1.0

package/dist/prompt-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-reference.js","sourceRoot":"","sources":["../src/prompt-reference.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAE9E,MAAM,mBAAmB,GAA2B;IAClD,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,WAAW;CACrB,CAAC;AAEF,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAE9E,MAAM,aAAa,GAAG;;;;;+GAKyF,CAAC;AAEhH,MAAM,aAAa,GAAG;;;4FAGsE,CAAC;AAE7F,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sEAkC4D;IAEpE,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kFA4CwE;IAEhF,SAAS,EAAE;;;;;;;;;;;;;;;;;;;;mEAoBsD;CAClE,CAAC;AAEF,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAmB;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,CAAC,aAAa,EAAE,GAAG,QAAQ,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CACzD,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CACpC,CAAC;AAEF,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAE9E,MAAM,cAAc,GAAG;;;;;iGAK0E,CAAC;AAElG,MAAM,aAAa,GAAG;;;;;;;;;kHAS4F,CAAC;AAEnH,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;gIA4BgG,CAAC;AAEjI,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sEAqCqC,CAAC;AAEvE,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mPAiC6N,CAAC;AAEpP,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IAC1D,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+GAkFqG;IAE7G,KAAK,EAAE,EAAE,EAAE,sBAAsB;IAEjC,SAAS,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2DAuE8C;IAEzD,OAAO,EAAE,EAAE,EAAE,yBAAyB;IAEtC,KAAK,EAAE;;;;;;;;;;;;;;;;;;;;;;;6GAuBoG;IAE3G,QAAQ,EAAE;;;;;;;;;;;;;;;iFAeqE;IAE/E,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAkCyB;IAEjC,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;oFA2B0E;IAElF,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;2DAqBmD;CAC1D,CAAC;AAEF,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,MAAgD;IAKhD,iDAAiD;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG;QAClB,cAAc;QACd,aAAa;QACb,uBAAuB;QACvB,wBAAwB;QACxB,aAAa;KACd,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,EAAE,IAAI,EAAE,CAAC,2BAA2B,QAAQ,KAAK,WAAW,CAAC,MAAM,SAAS,CAAC,CAAC;IAEpF,gDAAgD;IAChD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAElB,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,WAAW,KAAK,CAAC,CAAC;QAC/D,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,EAAE,IAAI,EAAE,CAAC,8BAA8B,QAAQ,KAAK,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC;IACrF,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,YAAsB;IACzE,MAAM,YAAY,GAAG;QACnB,mGAAmG;QACnG,qJAAqJ;QACrJ,0DAA0D,QAAQ,EAAE;QACpE,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC;gBACE,8EAA8E;gBAC9E,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;aACvC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,4TAA4T;QAC5T,wGAAwG;QACxG,wGAAwG;QACxG,gFAAgF;QAChF,4WAA4W;KAC7W,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,kCAAkC,YAAY,oBAAoB,CAAC;AAC5E,CAAC"}

package/dist/register.d.ts

@@ -0,0 +1,20 @@
+/**
+ * OpenClaw plugin entry point.
+ *
+ * This file is referenced by the `openclaw.extensions` field in package.json.
+ * OpenClaw's plugin loader calls `register(api)` at startup.
+ *
+ * We deliberately avoid importing any OpenClaw types at compile time —
+ * the `api` parameter is typed loosely so this package has zero dependency
+ * on OpenClaw internals. This keeps it publishable as a standalone npm package.
+ */
+declare function register(api: any): void;
+declare const _default: {
+    id: string;
+    name: string;
+    version: string;
+    description: string;
+    register: typeof register;
+};
+export default _default;
+//# sourceMappingURL=register.d.ts.map

package/dist/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA2hBH,iBAAS,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CA6HhC;;;;;;;;AAMD,wBAOE"}

package/dist/register.js

@@ -0,0 +1,551 @@
+/**
+ * OpenClaw plugin entry point.
+ *
+ * This file is referenced by the `openclaw.extensions` field in package.json.
+ * OpenClaw's plugin loader calls `register(api)` at startup.
+ *
+ * We deliberately avoid importing any OpenClaw types at compile time —
+ * the `api` parameter is typed loosely so this package has zero dependency
+ * on OpenClaw internals. This keeps it publishable as a standalone npm package.
+ */
+import { VaultClient } from "./client.js";
+import { execute, approvalRequest, approvalCommit, connectionsList, connectionRevoke, } from "./tools.js";
+import { writeReferenceFiles, buildChunkedPrompt, buildApiReferencePrompt } from "./prompt-reference.js";
+import { VaultTokenManager } from "./vault-token-manager.js";
+import { VaultActionProxy } from "./vault-action-proxy.js";
+import { initPendingApprovals, loadPendingApprovals, savePendingApprovals, loadFallbackNotifications, saveFallbackNotifications, } from "./pending-approvals.js";
+import { parseSessionKey, setCurrentSessionContext } from "./session-context.js";
+import { VaultCredentialProvider } from "./vault-provider.js";
+import { setVaultBearerToken, setCredentialProvider, setProxiedProviders } from "./runtime.js";
+import { verifyPatches } from "./patch-verify.js";
+import { runSetupWizard, parseSetupArgs } from "./setup-wizard.js";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const DEFAULT_BASE_URL = "https://app.agenthifive.com";
+const PLUGIN_ID = "agenthifive";
+const PLUGIN_VERSION = "0.1.0";
+// ---------------------------------------------------------------------------
+// Module-scoped singletons (lifecycle managed by register/stop)
+// ---------------------------------------------------------------------------
+let _tokenManager = null;
+let _actionProxy = null;
+/** Shared mutable auth object — updated in-place by token manager's onRefresh callback */
+let _managedAuth = null;
+// ---------------------------------------------------------------------------
+// Config helpers
+// ---------------------------------------------------------------------------
+/**
+ * Build an OpenClawPluginConfig from the raw pluginConfig provided by OpenClaw.
+ * Applies defaults and normalizes the auth config.
+ */
+function buildConfig(raw) {
+    const baseUrl = raw.baseUrl || DEFAULT_BASE_URL;
+    const authRaw = (raw.auth ?? {});
+    const mode = authRaw.mode;
+    let auth;
+    if (mode === "bearer") {
+        auth = { mode: "bearer", token: authRaw.token };
+    }
+    else {
+        // Default to agent mode
+        const privateKeyRaw = authRaw.privateKey;
+        let privateKey;
+        if (privateKeyRaw) {
+            try {
+                // Accept both raw JSON and base64-encoded JWK
+                privateKey = JSON.parse(privateKeyRaw);
+            }
+            catch {
+                privateKey = JSON.parse(Buffer.from(privateKeyRaw, "base64").toString("utf-8"));
+            }
+        }
+        else {
+            throw new Error("AgentHiFive plugin: auth.privateKey is required for agent mode");
+        }
+        // Validate key type — only ES256 (EC P-256) is supported
+        if (privateKey.kty !== "EC") {
+            throw new Error(`AgentHiFive plugin: private key must be EC type (got "${privateKey.kty ?? "unknown"}")`);
+        }
+        if (privateKey.crv && privateKey.crv !== "P-256") {
+            throw new Error(`AgentHiFive plugin: private key must use P-256 curve for ES256 (got "${privateKey.crv}")`);
+        }
+        auth = {
+            mode: "agent",
+            agentId: authRaw.agentId,
+            privateKey,
+            ...(authRaw.tokenAudience ? { tokenAudience: authRaw.tokenAudience } : {}),
+        };
+    }
+    return {
+        baseUrl,
+        auth,
+        pollTimeoutMs: raw.pollTimeoutMs ?? 300_000,
+        pollIntervalMs: raw.pollIntervalMs ?? 3_000,
+    };
+}
+// ---------------------------------------------------------------------------
+// Tool builders — convert our tool definitions to OpenClaw's AgentTool format
+// ---------------------------------------------------------------------------
+/**
+ * Build all 5 vault tools as OpenClaw AgentTool objects.
+ *
+ * OpenClaw uses @mariozechner/pi-agent-core's AgentTool interface:
+ *   { name, label, description, parameters (TypeBox TSchema), execute }
+ *
+ * We use the `registerTool` factory form which receives a context object
+ * and returns tool(s). This avoids importing pi-agent-core at compile time.
+ * Instead we build plain objects that match the expected shape — OpenClaw's
+ * loader coerces them via its own adapter.
+ */
+function buildVaultTools(client, config) {
+    return [
+        {
+            name: "agenthifive_execute",
+            label: "AgentHiFive Execute",
+            description: "Execute an HTTP request through the AgentHiFive Vault proxy (Model B). The Vault handles authentication and policy enforcement. Returns the provider API response or an approval requirement.",
+            parameters: {
+                type: "object",
+                properties: {
+                    connectionId: {
+                        type: "string",
+                        description: "The connection ID to use for this request",
+                    },
+                    service: {
+                        type: "string",
+                        description: "Service name (alternative to connectionId for single-connection services)",
+                    },
+                    method: {
+                        type: "string",
+                        description: "HTTP method",
+                        enum: ["GET", "POST", "PUT", "DELETE", "PATCH"],
+                    },
+                    url: {
+                        type: "string",
+                        description: "Target URL for the provider API",
+                    },
+                    query: {
+                        type: "object",
+                        description: "Query parameters as key-value pairs",
+                    },
+                    headers: {
+                        type: "object",
+                        description: "Additional headers (Authorization is injected by Vault)",
+                    },
+                    body: {
+                        description: "Request body (for POST, PUT, PATCH)",
+                    },
+                    approvalId: {
+                        type: "string",
+                        description: "Approval request ID to bypass a require_approval guard",
+                    },
+                },
+                required: ["method", "url"],
+            },
+            execute: async (_toolCallId, params) => {
+                const input = {
+                    method: params.method,
+                    url: params.url,
+                };
+                if (params.connectionId)
+                    input.connectionId = params.connectionId;
+                if (params.service)
+                    input.service = params.service;
+                if (params.query)
+                    input.query = params.query;
+                if (params.headers)
+                    input.headers = params.headers;
+                if (params.body !== undefined)
+                    input.body = params.body;
+                if (params.approvalId)
+                    input.approvalId = params.approvalId;
+                const result = await execute(client, input);
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            },
+        },
+        {
+            name: "agenthifive_approval_request",
+            label: "AgentHiFive Approval Request",
+            description: "Create a step-up approval request for a sensitive action. The user must approve via the AgentHiFive dashboard before the action executes.",
+            parameters: {
+                type: "object",
+                properties: {
+                    connectionId: {
+                        type: "string",
+                        description: "The connection ID for this action",
+                    },
+                    actionDescription: {
+                        type: "string",
+                        description: "Human-readable description of the action",
+                    },
+                    method: {
+                        type: "string",
+                        description: "HTTP method for the action",
+                        enum: ["GET", "POST", "PUT", "DELETE", "PATCH"],
+                    },
+                    url: {
+                        type: "string",
+                        description: "Target URL for the action",
+                    },
+                    body: {
+                        description: "Request body for the action",
+                    },
+                },
+                required: ["connectionId", "actionDescription", "method", "url"],
+            },
+            execute: async (_toolCallId, params) => {
+                const input = {
+                    connectionId: params.connectionId,
+                    actionDescription: params.actionDescription,
+                    method: params.method,
+                    url: params.url,
+                };
+                if (params.body !== undefined)
+                    input.body = params.body;
+                const result = await approvalRequest(client, input);
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            },
+        },
+        {
+            name: "agenthifive_approval_commit",
+            label: "AgentHiFive Approval Commit",
+            description: "Wait for a step-up approval request to be resolved. Blocks until the user approves, denies, or the request expires.",
+            parameters: {
+                type: "object",
+                properties: {
+                    approvalRequestId: {
+                        type: "string",
+                        description: "The approval request ID from approval_request or execute",
+                    },
+                    timeoutMs: {
+                        type: "number",
+                        description: "Timeout in milliseconds (default: 300000 = 5 min)",
+                    },
+                },
+                required: ["approvalRequestId"],
+            },
+            execute: async (_toolCallId, params) => {
+                const input = {
+                    approvalRequestId: params.approvalRequestId,
+                };
+                if (typeof params.timeoutMs === "number")
+                    input.timeoutMs = params.timeoutMs;
+                const result = await approvalCommit(client, input, config.pollTimeoutMs, config.pollIntervalMs);
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            },
+        },
+        {
+            name: "agenthifive_connections_list",
+            label: "AgentHiFive Connections List",
+            description: "List all connections available to this agent. Shows provider, status, and granted scopes for each connection.",
+            parameters: {
+                type: "object",
+                properties: {},
+            },
+            execute: async () => {
+                const result = await connectionsList(client);
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            },
+        },
+        {
+            name: "agenthifive_connection_revoke",
+            label: "AgentHiFive Connection Revoke",
+            description: "Immediately revoke a connection. This blocks all future token vending and execution through this connection.",
+            parameters: {
+                type: "object",
+                properties: {
+                    connectionId: {
+                        type: "string",
+                        description: "The connection ID to revoke",
+                    },
+                },
+                required: ["connectionId"],
+            },
+            execute: async (_toolCallId, params) => {
+                const result = await connectionRevoke(client, {
+                    connectionId: params.connectionId,
+                });
+                return { content: [{ type: "text", text: JSON.stringify(result) }] };
+            },
+        },
+    ];
+}
+// ---------------------------------------------------------------------------
+// Approval notification — polls pending approvals, injects resolved ones
+// ---------------------------------------------------------------------------
+async function checkPendingApprovals(config, logger) {
+    const pending = loadPendingApprovals();
+    if (pending.length === 0) {
+        return null;
+    }
+    if (!_actionProxy) {
+        return null;
+    }
+    const notifications = [];
+    const stillPending = [];
+    for (const approval of pending) {
+        // Skip expired approvals
+        if (approval.expiresAt && new Date(approval.expiresAt) < new Date()) {
+            notifications.push(`- Your request "${approval.summary}" has EXPIRED. Submit a new request without approvalId.`);
+            continue;
+        }
+        try {
+            const response = await fetch(`${config.baseUrl}/v1/approvals/${approval.approvalRequestId}`, {
+                method: "GET",
+                headers: _actionProxy.buildAuthHeader(),
+                signal: AbortSignal.timeout(5_000),
+            });
+            if (!response.ok) {
+                stillPending.push(approval);
+                continue;
+            }
+            const body = (await response.json());
+            const status = body.approval?.status ?? body.status;
+            if (status === "approved") {
+                notifications.push(`- Your request "${approval.summary}" was APPROVED. ` +
+                    `Re-submit the exact same vault_execute call with approvalId: "${approval.approvalRequestId}"`);
+            }
+            else if (status === "denied") {
+                notifications.push(`- Your request "${approval.summary}" was DENIED by the workspace owner.`);
+            }
+            else if (status === "expired" || status === "consumed") {
+                notifications.push(`- Your request "${approval.summary}" is ${status}. Submit a new request if needed.`);
+            }
+            else {
+                stillPending.push(approval);
+            }
+        }
+        catch {
+            stillPending.push(approval);
+        }
+    }
+    savePendingApprovals(stillPending);
+    // Consume fallback notifications from approval watcher
+    const fallbacks = loadFallbackNotifications();
+    if (fallbacks.length > 0) {
+        for (const fb of fallbacks) {
+            notifications.push(fb.notificationText);
+        }
+        saveFallbackNotifications([]);
+    }
+    if (notifications.length === 0) {
+        return null;
+    }
+    return [
+        `<vault-approval-updates>`,
+        `The following step-up approval requests have been resolved since your last turn:`,
+        ...notifications,
+        `</vault-approval-updates>`,
+    ].join("\n");
+}
+// ---------------------------------------------------------------------------
+// Agent auth initialization (ES256 token management)
+// ---------------------------------------------------------------------------
+async function initAgentAuth(config, pluginConfig, logger) {
+    if (config.auth.mode !== "agent") {
+        // Bearer mode — set up directly without token manager
+        _managedAuth = { mode: "bearer", token: config.auth.token };
+        _actionProxy = new VaultActionProxy({
+            baseUrl: config.baseUrl,
+            auth: _managedAuth,
+            timeoutMs: 65_000,
+        });
+        // Set runtime state for patch consumers
+        setVaultBearerToken(config.auth.token);
+        initRuntimeProvider(config, pluginConfig, logger);
+        return;
+    }
+    // Agent mode — ES256 JWT-based auth with background token refresh
+    _managedAuth = { mode: "bearer", token: "" };
+    _tokenManager = new VaultTokenManager({
+        baseUrl: config.baseUrl,
+        agentId: config.auth.agentId,
+        privateKey: config.auth.privateKey,
+        ...(config.auth.tokenAudience ? { tokenAudience: config.auth.tokenAudience } : {}),
+    });
+    _tokenManager.onRefresh = (newToken) => {
+        if (_managedAuth) {
+            _managedAuth.token = newToken;
+        }
+    };
+    _tokenManager.onAuthFailure = () => {
+        logger.error?.("AgentHiFive: agent key pair rejected (401). Generate a new bootstrap secret " +
+            "from the AgentHiFive dashboard, then reconfigure.");
+    };
+    // Initial token exchange with retries
+    const retryDelays = [5_000, 10_000, 30_000, 60_000];
+    let lastError;
+    for (let attempt = 0; attempt <= retryDelays.length; attempt++) {
+        try {
+            await _tokenManager.init();
+            logger.info?.("AgentHiFive: agent auth initialized successfully");
+            _actionProxy = new VaultActionProxy({
+                baseUrl: config.baseUrl,
+                auth: _managedAuth,
+                timeoutMs: 65_000,
+                onTokenRefresh: () => _tokenManager?.forceRefresh() ?? Promise.resolve(false),
+            });
+            // Set runtime state for patch consumers
+            setVaultBearerToken(_managedAuth.token);
+            // Keep runtime token in sync with background refresh
+            const prevOnRefresh = _tokenManager.onRefresh;
+            _tokenManager.onRefresh = (newToken) => {
+                prevOnRefresh?.(newToken);
+                setVaultBearerToken(newToken);
+            };
+            initRuntimeProvider(config, pluginConfig, logger);
+            return;
+        }
+        catch (err) {
+            lastError = err;
+            if (attempt < retryDelays.length) {
+                const delay = retryDelays[attempt];
+                logger.error?.(`AgentHiFive: token exchange failed (attempt ${attempt + 1}/${retryDelays.length + 1}), ` +
+                    `retrying in ${delay / 1000}s: ${err instanceof Error ? err.message : String(err)}`);
+                await new Promise((resolve) => setTimeout(resolve, delay));
+            }
+        }
+    }
+    logger.error?.(`AgentHiFive: agent auth failed after ${retryDelays.length + 1} attempts. ` +
+        `Tools will still work via VaultClient but action proxy is unavailable. ` +
+        `Last error: ${lastError instanceof Error ? lastError.message : String(lastError)}`);
+}
+// ---------------------------------------------------------------------------
+// Runtime provider initialization (for patch consumers)
+// ---------------------------------------------------------------------------
+function initRuntimeProvider(config, pluginConfig, logger) {
+    // Set proxied providers list
+    const proxied = (pluginConfig.proxiedProviders ?? []);
+    setProxiedProviders(proxied);
+    // Set credential provider (currently a stub that returns null —
+    // all access goes through Model B. When credential vending is
+    // implemented, this will resolve real API keys from the vault.)
+    if (!_managedAuth)
+        return;
+    const provider = new VaultCredentialProvider({
+        baseUrl: config.baseUrl,
+        auth: _managedAuth,
+        timeoutMs: 30_000,
+        cacheTtlMs: 300_000,
+    });
+    setCredentialProvider(provider);
+    if (proxied.length > 0) {
+        logger.info?.(`AgentHiFive: proxied providers: ${proxied.join(", ")}`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Plugin registration
+// ---------------------------------------------------------------------------
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function register(api) {
+    const pluginConfig = (api.pluginConfig ?? {});
+    const config = buildConfig(pluginConfig);
+    const client = new VaultClient(config);
+    const logger = api.logger ?? console;
+    logger.info?.(`AgentHiFive plugin v${PLUGIN_VERSION} initializing (${config.baseUrl})`);
+    // ── Initialize agent auth (token manager + action proxy) ─────────────
+    // Fire-and-forget — tools work via VaultClient regardless; action proxy
+    // is only needed for approval polling.
+    initAgentAuth(config, pluginConfig, logger).catch((err) => {
+        logger.error?.(`AgentHiFive: auth init failed: ${err instanceof Error ? err.message : String(err)}`);
+    });
+    // ── Verify patches (non-blocking) ──────────────────────────────────────
+    verifyPatches(logger).catch(() => {
+        // Verification failure is non-fatal
+    });
+    // ── Initialize pending approvals state ───────────────────────────────
+    const stateDir = (api.stateDir ?? api.dataDir);
+    if (stateDir) {
+        initPendingApprovals(stateDir, logger);
+    }
+    // ── Register tools ──────────────────────────────────────────────────────
+    const tools = buildVaultTools(client, config);
+    for (const tool of tools) {
+        api.registerTool(tool);
+    }
+    // ── Register prompt injection hook ──────────────────────────────────────
+    const connectedProviders = (pluginConfig.connectedProviders ?? []);
+    if (stateDir) {
+        // Chunked mode — write reference files and inject lean pointer
+        try {
+            const { basePath, serviceFiles } = writeReferenceFiles(stateDir, logger);
+            const prompt = buildChunkedPrompt(basePath, serviceFiles);
+            api.on("before_agent_start", (_event, ctx) => {
+                // Track session context for approval routing
+                if (ctx?.sessionKey) {
+                    const parsed = parseSessionKey(ctx.sessionKey);
+                    const sessionCtx = {
+                        sessionKey: ctx.sessionKey,
+                    };
+                    if (parsed.channel)
+                        sessionCtx.channel = parsed.channel;
+                    if (parsed.peerId)
+                        sessionCtx.peerId = parsed.peerId;
+                    if (parsed.peerKind)
+                        sessionCtx.peerKind = parsed.peerKind;
+                    setCurrentSessionContext(sessionCtx);
+                }
+                return { prependContext: prompt };
+            }, { priority: 10 });
+            logger.info?.(`Chunked prompt injection enabled (${serviceFiles.length} service files)`);
+        }
+        catch (err) {
+            logger.warn?.(`Chunked reference write failed, falling back to inline mode: ${err instanceof Error ? err.stack : String(err)}`);
+            // Fall back to inline mode
+            if (connectedProviders.length > 0) {
+                api.on("before_prompt_build", () => {
+                    const prompt = buildApiReferencePrompt(connectedProviders);
+                    if (prompt) {
+                        return { prependContext: prompt };
+                    }
+                }, { priority: 10 });
+            }
+        }
+    }
+    else if (connectedProviders.length > 0) {
+        // No state dir — use inline mode
+        api.on("before_prompt_build", () => {
+            const prompt = buildApiReferencePrompt(connectedProviders);
+            if (prompt) {
+                return { prependContext: prompt };
+            }
+        }, { priority: 10 });
+        logger.info?.(`Inline prompt injection enabled for providers: ${connectedProviders.join(", ")}`);
+    }
+    // ── Register approval notification hook ─────────────────────────────────
+    api.on("before_agent_start", async () => {
+        if (!stateDir)
+            return undefined;
+        try {
+            const notification = await checkPendingApprovals(config, logger);
+            return notification ? { prependContext: notification } : undefined;
+        }
+        catch (err) {
+            logger.error?.(`Approval notification check failed: ${err instanceof Error ? err.stack : String(err)}`);
+            return undefined;
+        }
+    }, { priority: 5 });
+    // ── Register setup-vault command ─────────────────────────────────────────
+    if (typeof api.registerCommand === "function") {
+        api.registerCommand({
+            name: "setup-vault",
+            description: "Set up AgentHiFive vault integration (bootstrap agent, discover capabilities)",
+            handler: async (args) => {
+                const opts = parseSetupArgs(args);
+                await runSetupWizard(opts);
+            },
+        });
+    }
+    logger.info?.("AgentHiFive plugin registered successfully");
+}
+// ---------------------------------------------------------------------------
+// Default export — OpenClaw plugin definition
+// ---------------------------------------------------------------------------
+export default {
+    id: PLUGIN_ID,
+    name: "AgentHiFive Vault",
+    version: PLUGIN_VERSION,
+    description: "Vault-managed credentials, brokered API proxy, and policy-governed access for AI agents",
+    register,
+};
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,OAAO,EACP,eAAe,EACf,cAAc,EACd,eAAe,EACf,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACzG,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQnE,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AACvD,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E,IAAI,aAAa,GAA6B,IAAI,CAAC;AACnD,IAAI,YAAY,GAA4B,IAAI,CAAC;AACjD,0FAA0F;AAC1F,IAAI,YAAY,GAA6C,IAAI,CAAC;AAElE,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,WAAW,CAAC,GAA4B;IAC/C,MAAM,OAAO,GAAI,GAAG,CAAC,OAAkB,IAAI,gBAAgB,CAAC;IAC5D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAc,CAAC;IAEpC,IAAI,IAAkC,CAAC;IACvC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAe,EAAE,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,wBAAwB;QACxB,MAAM,aAAa,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC/D,IAAI,UAAsB,CAAC;QAC3B,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,8CAA8C;gBAC9C,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAe,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,IAAI,CAAC,KAAK,CACrB,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACzC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,yDAAyD;QACzD,IAAI,UAAU,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,yDAAyD,UAAU,CAAC,GAAG,IAAI,SAAS,IAAI,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,wEAAwE,UAAU,CAAC,GAAG,IAAI,CAC3F,CAAC;QACJ,CAAC;QACD,IAAI,GAAG;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO,CAAC,OAAiB;YAClC,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,IAAI;QACJ,aAAa,EAAG,GAAG,CAAC,aAAwB,IAAI,OAAO;QACvD,cAAc,EAAG,GAAG,CAAC,cAAyB,IAAI,KAAK;KACxD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,MAAmB,EAAE,MAA4B;IACxE,OAAO;QACL;YACE,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EACT,+LAA+L;YACjM,UAAU,EAAE;gBACV,IAAI,EAAE,QAAiB;gBACvB,UAAU,EAAE;oBACV,YAAY,EAAE;wBACZ,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,2CAA2C;qBACzD;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,QAAiB;wBACvB,WAAW,EACT,2EAA2E;qBAC9E;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,aAAa;wBAC1B,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;qBAChD;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,iCAAiC;qBAC/C;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,qCAAqC;qBACnD;oBACD,OAAO,EAAE;wBACP,IAAI,EAAE,QAAiB;wBACvB,WAAW,EACT,yDAAyD;qBAC5D;oBACD,IAAI,EAAE;wBACJ,WAAW,EAAE,qCAAqC;qBACnD;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,QAAiB;wBACvB,WAAW,EACT,wDAAwD;qBAC3D;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;aAC5B;YACD,OAAO,EAAE,KAAK,EACZ,WAAmB,EACnB,MAA+B,EAC/B,EAAE;gBACF,MAAM,KAAK,GAAiB;oBAC1B,MAAM,EAAE,MAAM,CAAC,MAAgC;oBAC/C,GAAG,EAAE,MAAM,CAAC,GAAa;iBAC1B,CAAC;gBACF,IAAI,MAAM,CAAC,YAAY;oBACrB,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,YAAsB,CAAC;gBACrD,IAAI,MAAM,CAAC,OAAO;oBAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAiB,CAAC;gBAC7D,IAAI,MAAM,CAAC,KAAK;oBACd,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAA+B,CAAC;gBACvD,IAAI,MAAM,CAAC,OAAO;oBAChB,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAiC,CAAC;gBAC3D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;oBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBACxD,IAAI,MAAM,CAAC,UAAU;oBACnB,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAoB,CAAC;gBAEjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACvE,CAAC;SACF;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,KAAK,EAAE,8BAA8B;YACrC,WAAW,EACT,2IAA2I;YAC7I,UAAU,EAAE;gBACV,IAAI,EAAE,QAAiB;gBACvB,UAAU,EAAE;oBACV,YAAY,EAAE;wBACZ,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,mCAAmC;qBACjD;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,0CAA0C;qBACxD;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,4BAA4B;wBACzC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;qBAChD;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,2BAA2B;qBACzC;oBACD,IAAI,EAAE;wBACJ,WAAW,EAAE,6BAA6B;qBAC3C;iBACF;gBACD,QAAQ,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,CAAC;aACjE;YACD,OAAO,EAAE,KAAK,EACZ,WAAmB,EACnB,MAA+B,EAC/B,EAAE;gBACF,MAAM,KAAK,GAAyB;oBAClC,YAAY,EAAE,MAAM,CAAC,YAAsB;oBAC3C,iBAAiB,EAAE,MAAM,CAAC,iBAA2B;oBACrD,MAAM,EAAE,MAAM,CAAC,MAAwC;oBACvD,GAAG,EAAE,MAAM,CAAC,GAAa;iBAC1B,CAAC;gBACF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;oBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBAExD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACpD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACvE,CAAC;SACF;QACD;YACE,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,6BAA6B;YACpC,WAAW,EACT,qHAAqH;YACvH,UAAU,EAAE;gBACV,IAAI,EAAE,QAAiB;gBACvB,UAAU,EAAE;oBACV,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAiB;wBACvB,WAAW,EACT,0DAA0D;qBAC7D;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,QAAiB;wBACvB,WAAW,EACT,mDAAmD;qBACtD;iBACF;gBACD,QAAQ,EAAE,CAAC,mBAAmB,CAAC;aAChC;YACD,OAAO,EAAE,KAAK,EACZ,WAAmB,EACnB,MAA+B,EAC/B,EAAE;gBACF,MAAM,KAAK,GAAwB;oBACjC,iBAAiB,EAAE,MAAM,CAAC,iBAA2B;iBACtD,CAAC;gBACF,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;oBACtC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,EACN,KAAK,EACL,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,cAAc,CACtB,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACvE,CAAC;SACF;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,KAAK,EAAE,8BAA8B;YACrC,WAAW,EACT,+GAA+G;YACjH,UAAU,EAAE;gBACV,IAAI,EAAE,QAAiB;gBACvB,UAAU,EAAE,EAAE;aACf;YACD,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;gBAC7C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACvE,CAAC;SACF;QACD;YACE,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE,+BAA+B;YACtC,WAAW,EACT,8GAA8G;YAChH,UAAU,EAAE;gBACV,IAAI,EAAE,QAAiB;gBACvB,UAAU,EAAE;oBACV,YAAY,EAAE;wBACZ,IAAI,EAAE,QAAiB;wBACvB,WAAW,EAAE,6BAA6B;qBAC3C;iBACF;gBACD,QAAQ,EAAE,CAAC,cAAc,CAAC;aAC3B;YACD,OAAO,EAAE,KAAK,EACZ,WAAmB,EACnB,MAA+B,EAC/B,EAAE;gBACF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE;oBAC5C,YAAY,EAAE,MAAM,CAAC,YAAsB;iBAC5C,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACvE,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,KAAK,UAAU,qBAAqB,CAClC,MAA4B,EAC5B,MAAoB;IAEpB,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,EAAE,CAAC;IAExB,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,yBAAyB;QACzB,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACpE,aAAa,CAAC,IAAI,CAChB,mBAAmB,QAAQ,CAAC,OAAO,yDAAyD,CAC7F,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,iBAAiB,QAAQ,CAAC,iBAAiB,EAAE,EAAE;gBAC3F,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,YAAY,CAAC,eAAe,EAAE;gBACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;aACnC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwD,CAAC;YAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;YAEpD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC1B,aAAa,CAAC,IAAI,CAChB,mBAAmB,QAAQ,CAAC,OAAO,kBAAkB;oBACnD,iEAAiE,QAAQ,CAAC,iBAAiB,GAAG,CACjG,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,aAAa,CAAC,IAAI,CAChB,mBAAmB,QAAQ,CAAC,OAAO,sCAAsC,CAC1E,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBACzD,aAAa,CAAC,IAAI,CAChB,mBAAmB,QAAQ,CAAC,OAAO,QAAQ,MAAM,mCAAmC,CACrF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAEnC,uDAAuD;IACvD,MAAM,SAAS,GAAG,yBAAyB,EAAE,CAAC;IAC9C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;QAC1C,CAAC;QACD,yBAAyB,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,0BAA0B;QAC1B,kFAAkF;QAClF,GAAG,aAAa;QAChB,2BAA2B;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,qDAAqD;AACrD,8EAA8E;AAE9E,KAAK,UAAU,aAAa,CAC1B,MAA4B,EAC5B,YAAqC,EACrC,MAAoB;IAEpB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,sDAAsD;QACtD,YAAY,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5D,YAAY,GAAG,IAAI,gBAAgB,CAAC;YAClC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,wCAAwC;QACxC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,kEAAkE;IAClE,YAAY,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAE7C,aAAa,GAAG,IAAI,iBAAiB,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU;QAClC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC,CAAC;IAEH,aAAa,CAAC,SAAS,GAAG,CAAC,QAAgB,EAAE,EAAE;QAC7C,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,KAAK,GAAG,QAAQ,CAAC;QAChC,CAAC;IACH,CAAC,CAAC;IAEF,aAAa,CAAC,aAAa,GAAG,GAAG,EAAE;QACjC,MAAM,CAAC,KAAK,EAAE,CACZ,8EAA8E;YAC5E,mDAAmD,CACtD,CAAC;IACJ,CAAC,CAAC;IAEF,sCAAsC;IACtC,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,EAAE,CAAC,kDAAkD,CAAC,CAAC;YAElE,YAAY,GAAG,IAAI,gBAAgB,CAAC;gBAClC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,YAAY;gBAClB,SAAS,EAAE,MAAM;gBACjB,cAAc,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;aAC9E,CAAC,CAAC;YAEH,wCAAwC;YACxC,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,qDAAqD;YACrD,MAAM,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC;YAC9C,aAAa,CAAC,SAAS,GAAG,CAAC,QAAgB,EAAE,EAAE;gBAC7C,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAC1B,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC,CAAC;YACF,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,CAAC;YAChB,IAAI,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAE,CAAC;gBACpC,MAAM,CAAC,KAAK,EAAE,CACZ,+CAA+C,OAAO,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,KAAK;oBACvF,eAAe,KAAK,GAAG,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;gBACF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,CACZ,wCAAwC,WAAW,CAAC,MAAM,GAAG,CAAC,aAAa;QACzE,yEAAyE;QACzE,eAAe,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CACtF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,SAAS,mBAAmB,CAC1B,MAA4B,EAC5B,YAAqC,EACrC,MAAoB;IAEpB,6BAA6B;IAC7B,MAAM,OAAO,GAAG,CAAC,YAAY,CAAC,gBAAgB,IAAI,EAAE,CAAa,CAAC;IAClE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,gEAAgE;IAChE,8DAA8D;IAC9D,gEAAgE;IAChE,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC;QAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,OAAO;KACpB,CAAC,CAAC;IACH,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAEhC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,EAAE,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,8DAA8D;AAC9D,SAAS,QAAQ,CAAC,GAAQ;IACxB,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAA4B,CAAC;IACzE,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC;IAErC,MAAM,CAAC,IAAI,EAAE,CAAC,uBAAuB,cAAc,kBAAkB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAExF,wEAAwE;IACxE,wEAAwE;IACxE,uCAAuC;IACvC,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACxD,MAAM,CAAC,KAAK,EAAE,CAAC,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAC/B,oCAAoC;IACtC,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAuB,CAAC;IACrE,IAAI,QAAQ,EAAE,CAAC;QACb,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,2EAA2E;IAC3E,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,2EAA2E;IAC3E,MAAM,kBAAkB,GAAG,CAAC,YAAY,CAAC,kBAAkB,IAAI,EAAE,CAAa,CAAC;IAE/E,IAAI,QAAQ,EAAE,CAAC;QACb,+DAA+D;QAC/D,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAE1D,GAAG,CAAC,EAAE,CACJ,oBAAoB,EACpB,CAAC,MAAe,EAAE,GAA6B,EAAE,EAAE;gBACjD,6CAA6C;gBAC7C,IAAI,GAAG,EAAE,UAAU,EAAE,CAAC;oBACpB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC/C,MAAM,UAAU,GAAkD;wBAChE,UAAU,EAAE,GAAG,CAAC,UAAU;qBAC3B,CAAC;oBACF,IAAI,MAAM,CAAC,OAAO;wBAAE,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;oBACxD,IAAI,MAAM,CAAC,MAAM;wBAAE,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;oBACrD,IAAI,MAAM,CAAC,QAAQ;wBAAE,UAAU,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAC3D,wBAAwB,CAAC,UAAU,CAAC,CAAC;gBACvC,CAAC;gBACD,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;YACpC,CAAC,EACD,EAAE,QAAQ,EAAE,EAAE,EAAE,CACjB,CAAC;YAEF,MAAM,CAAC,IAAI,EAAE,CACX,qCAAqC,YAAY,CAAC,MAAM,iBAAiB,CAC1E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,EAAE,CAAC,gEAAgE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChI,2BAA2B;YAC3B,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,GAAG,CAAC,EAAE,CACJ,qBAAqB,EACrB,GAAG,EAAE;oBACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;oBAC3D,IAAI,MAAM,EAAE,CAAC;wBACX,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;oBACpC,CAAC;gBACH,CAAC,EACD,EAAE,QAAQ,EAAE,EAAE,EAAE,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,iCAAiC;QACjC,GAAG,CAAC,EAAE,CACJ,qBAAqB,EACrB,GAAG,EAAE;YACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;YAC3D,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;YACpC,CAAC;QACH,CAAC,EACD,EAAE,QAAQ,EAAE,EAAE,EAAE,CACjB,CAAC;QACF,MAAM,CAAC,IAAI,EAAE,CACX,kDAAkD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,GAAG,CAAC,EAAE,CACJ,oBAAoB,EACpB,KAAK,IAAI,EAAE;QACT,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjE,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,EAAE,CAAC,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxG,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,EACD,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;IAEF,4EAA4E;IAC5E,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAC9C,GAAG,CAAC,eAAe,CAAC;YAClB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,+EAA+E;YAC5F,OAAO,EAAE,KAAK,EAAE,IAAc,EAAE,EAAE;gBAChC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,CAAC,4CAA4C,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E,eAAe;IACb,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,mBAAmB;IACzB,OAAO,EAAE,cAAc;IACvB,WAAW,EACT,yFAAyF;IAC3F,QAAQ;CACT,CAAC"}