@commit451/salamander 1.1.1 → 1.2.1

package/dist/services/crypto.js

@@ -1,104 +0,0 @@
-import * as crypto from 'node:crypto';
-export class CryptoService {
-    static ALGORITHM = 'aes-256-gcm';
-    static IV_LENGTH = 16;
-    static TAG_LENGTH = 16;
-    static KEY_LENGTH = 32;
-    /**
-     * Generate an ECDH key pair for key exchange
-     */
-    static generateECDHKeyPair() {
-        const ecdh = crypto.createECDH('secp256k1');
-        ecdh.generateKeys();
-        return {
-            publicKey: ecdh.getPublicKey('base64'),
-            privateKey: ecdh.getPrivateKey('base64')
-        };
-    }
-    /**
-     * Derive a shared secret from ECDH key exchange
-     */
-    static deriveSharedSecret(privateKey, publicKey) {
-        const ecdh = crypto.createECDH('secp256k1');
-        ecdh.setPrivateKey(privateKey, 'base64');
-        const sharedSecret = ecdh.computeSecret(publicKey, 'base64');
-        // Use HKDF to derive a proper encryption key
-        const derivedKey = crypto.hkdfSync('sha256', sharedSecret, '', 'salamander-e2e-encryption', CryptoService.KEY_LENGTH);
-        return Buffer.from(derivedKey).toString('base64');
-    }
-    /**
-     * Encrypt a message using AES-256-GCM
-     */
-    static encrypt(message, key) {
-        const keyBuffer = Buffer.from(key, 'base64');
-        const iv = crypto.randomBytes(CryptoService.IV_LENGTH);
-        const cipher = crypto.createCipheriv(CryptoService.ALGORITHM, keyBuffer, iv);
-        cipher.setAAD(Buffer.from('salamander'));
-        let encryptedData = cipher.update(message, 'utf8', 'base64');
-        encryptedData += cipher.final('base64');
-        const tag = cipher.getAuthTag();
-        return {
-            encryptedData,
-            iv: iv.toString('base64'),
-            tag: tag.toString('base64')
-        };
-    }
-    /**
-     * Decrypt a message using AES-256-GCM
-     */
-    static decrypt(encryptedMessage, key) {
-        const keyBuffer = Buffer.from(key, 'base64');
-        const iv = Buffer.from(encryptedMessage.iv, 'base64');
-        const tag = Buffer.from(encryptedMessage.tag, 'base64');
-        const decipher = crypto.createDecipheriv(CryptoService.ALGORITHM, keyBuffer, iv);
-        decipher.setAAD(Buffer.from('salamander'));
-        decipher.setAuthTag(tag);
-        let decryptedData = decipher.update(encryptedMessage.encryptedData, 'base64', 'utf8');
-        decryptedData += decipher.final('utf8');
-        return decryptedData;
-    }
-    /**
-     * Generate a random 256-bit key for symmetric encryption
-     */
-    static generateRandomKey() {
-        const key = crypto.randomBytes(CryptoService.KEY_LENGTH);
-        return key.toString('base64');
-    }
-    /**
-     * Check if a message appears to be encrypted
-     */
-    static isEncrypted(message) {
-        try {
-            const parsed = JSON.parse(message);
-            return parsed.encryptedData && parsed.iv && parsed.tag;
-        }
-        catch {
-            return false;
-        }
-    }
-    /**
-     * Safely encrypt a message, handling both string and object inputs
-     */
-    static safeEncrypt(data, key) {
-        const message = typeof data === 'string' ? data : JSON.stringify(data);
-        const encrypted = this.encrypt(message, key);
-        return JSON.stringify(encrypted);
-    }
-    /**
-     * Safely decrypt a message, throwing error if decryption fails
-     */
-    static safeDecrypt(encryptedData, key) {
-        if (!this.isEncrypted(encryptedData)) {
-            throw new Error('Message is not encrypted - encryption is required');
-        }
-        const encryptedMessage = JSON.parse(encryptedData);
-        return this.decrypt(encryptedMessage, key);
-    }
-    /**
-     * Create a hash of the key for identification purposes
-     */
-    static createKeyHash(key) {
-        return crypto.createHash('sha256').update(key).digest('hex').substring(0, 16);
-    }
-}
-//# sourceMappingURL=crypto.js.map

package/dist/services/crypto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/services/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAatC,MAAM,OAAO,aAAa;IACd,MAAM,CAAU,SAAS,GAAG,aAAa,CAAC;IAC1C,MAAM,CAAU,SAAS,GAAG,EAAE,CAAC;IAC/B,MAAM,CAAU,UAAU,GAAG,EAAE,CAAC;IAChC,MAAM,CAAU,UAAU,GAAG,EAAE,CAAC;IAExC;;OAEG;IACH,MAAM,CAAC,mBAAmB;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,OAAO;YACH,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC;YACtC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;SAC3C,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,UAAkB,EAAE,SAAiB;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEzC,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE7D,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,2BAA2B,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;QAEtH,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,OAAe,EAAE,GAAW;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAEzC,IAAI,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,aAAa,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAExC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO;YACH,aAAa;YACb,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC9B,CAAC;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,gBAAkC,EAAE,GAAW;QAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACjF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3C,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,IAAI,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtF,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAExC,OAAO,aAAa,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,iBAAiB;QACpB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,OAAe;QAC9B,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,IAAS,EAAE,GAAW;QACrC,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,WAAW,CAAC,aAAqB,EAAE,GAAW;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,gBAAgB,GAAqB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,GAAW;QAC5B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC"}

package/dist/services/key-manager.d.ts

@@ -1,45 +0,0 @@
-import { KeyPair } from './crypto.js';
-export declare class KeyManagerService {
-    private static readonly KEYS_STORAGE_KEY;
-    private static readonly KEY_EXPIRY_DAYS;
-    /**
-     * Initialize keys for a new runner
-     */
-    static initializeRunnerKeys(runnerId: string): Promise<KeyPair>;
-    /**
-     * Complete the key exchange with the Flutter app's public key
-     */
-    static completeKeyExchange(runnerId: string, flutterPublicKey: string): Promise<string>;
-    /**
-     * Get the shared secret for encryption/decryption
-     */
-    static getSharedSecret(runnerId: string): Promise<string | null>;
-    /**
-     * Get the CLI's public key for a runner
-     */
-    static getPublicKey(runnerId: string): Promise<string | null>;
-    /**
-     * Check if keys exist and are properly initialized for a runner
-     */
-    static hasValidKeys(runnerId: string): Promise<boolean>;
-    /**
-     * Rotate keys for a runner (generate new key pair)
-     */
-    static rotateKeys(runnerId: string): Promise<KeyPair>;
-    /**
-     * Remove keys for a runner (when runner is deleted)
-     */
-    static removeRunnerKeys(runnerId: string): Promise<void>;
-    /**
-     * Get all runners that have encryption keys
-     */
-    static getEncryptedRunnerIds(): Promise<string[]>;
-    /**
-     * Cleanup expired keys
-     */
-    static cleanupExpiredKeys(): Promise<number>;
-    private static getRunnerKeys;
-    private static storeRunnerKeys;
-    private static getAllStoredKeys;
-}
-//# sourceMappingURL=key-manager.d.ts.map

package/dist/services/key-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"key-manager.d.ts","sourceRoot":"","sources":["../../src/services/key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,OAAO,EAAC,MAAM,aAAa,CAAC;AAUnD,qBAAa,iBAAiB;IAC1B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAA4B;IACpE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAM;IAE7C;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYrE;;OAEG;WACU,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAoB7F;;OAEG;WACU,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAetE;;OAEG;WACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKnE;;OAEG;WACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK7D;;OAEG;WACU,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK3D;;OAEG;WACU,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9D;;OAEG;WACU,qBAAqB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAQvD;;OAEG;WACU,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;mBAwB7B,aAAa;mBAKb,eAAe;mBAMf,gBAAgB;CAGxC"}

package/dist/services/key-manager.js

@@ -1,123 +0,0 @@
-import { CryptoService } from './crypto.js';
-import { StorageService } from '../utils/storage.js';
-export class KeyManagerService {
-    static KEYS_STORAGE_KEY = 'salamander_runner_keys';
-    static KEY_EXPIRY_DAYS = 30;
-    /**
-     * Initialize keys for a new runner
-     */
-    static async initializeRunnerKeys(runnerId) {
-        const ecdhKeyPair = CryptoService.generateECDHKeyPair();
-        const runnerKeys = {
-            ecdhKeyPair,
-            createdAt: Date.now()
-        };
-        await this.storeRunnerKeys(runnerId, runnerKeys);
-        return ecdhKeyPair;
-    }
-    /**
-     * Complete the key exchange with the Flutter app's public key
-     */
-    static async completeKeyExchange(runnerId, flutterPublicKey) {
-        const runnerKeys = await this.getRunnerKeys(runnerId);
-        if (!runnerKeys) {
-            throw new Error(`No keys found for runner ${runnerId}`);
-        }
-        // Derive shared secret using our private key and Flutter's public key
-        const sharedSecret = CryptoService.deriveSharedSecret(runnerKeys.ecdhKeyPair.privateKey, flutterPublicKey);
-        // Update stored keys with shared secret
-        runnerKeys.sharedSecret = sharedSecret;
-        runnerKeys.keyHash = CryptoService.createKeyHash(sharedSecret);
-        await this.storeRunnerKeys(runnerId, runnerKeys);
-        return sharedSecret;
-    }
-    /**
-     * Get the shared secret for encryption/decryption
-     */
-    static async getSharedSecret(runnerId) {
-        const runnerKeys = await this.getRunnerKeys(runnerId);
-        if (!runnerKeys?.sharedSecret) {
-            return null;
-        }
-        // Check if keys are expired
-        const daysSinceCreation = (Date.now() - runnerKeys.createdAt) / (1000 * 60 * 60 * 24);
-        if (daysSinceCreation > this.KEY_EXPIRY_DAYS) {
-            console.warn(`Keys for runner ${runnerId} have expired. Consider key rotation.`);
-        }
-        return runnerKeys.sharedSecret;
-    }
-    /**
-     * Get the CLI's public key for a runner
-     */
-    static async getPublicKey(runnerId) {
-        const runnerKeys = await this.getRunnerKeys(runnerId);
-        return runnerKeys?.ecdhKeyPair.publicKey ?? null;
-    }
-    /**
-     * Check if keys exist and are properly initialized for a runner
-     */
-    static async hasValidKeys(runnerId) {
-        const runnerKeys = await this.getRunnerKeys(runnerId);
-        return !!(runnerKeys?.ecdhKeyPair && runnerKeys?.sharedSecret);
-    }
-    /**
-     * Rotate keys for a runner (generate new key pair)
-     */
-    static async rotateKeys(runnerId) {
-        console.log(`Rotating keys for runner ${runnerId}`);
-        return await this.initializeRunnerKeys(runnerId);
-    }
-    /**
-     * Remove keys for a runner (when runner is deleted)
-     */
-    static async removeRunnerKeys(runnerId) {
-        const allKeys = await this.getAllStoredKeys();
-        delete allKeys[runnerId];
-        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
-    }
-    /**
-     * Get all runners that have encryption keys
-     */
-    static async getEncryptedRunnerIds() {
-        const allKeys = await this.getAllStoredKeys();
-        return Object.keys(allKeys).filter(runnerId => {
-            const keys = allKeys[runnerId];
-            return keys?.sharedSecret;
-        });
-    }
-    /**
-     * Cleanup expired keys
-     */
-    static async cleanupExpiredKeys() {
-        const allKeys = await this.getAllStoredKeys();
-        const now = Date.now();
-        let cleanedCount = 0;
-        const updatedKeys = {};
-        for (const [runnerId, keys] of Object.entries(allKeys)) {
-            const daysSinceCreation = (now - keys.createdAt) / (1000 * 60 * 60 * 24);
-            if (daysSinceCreation <= this.KEY_EXPIRY_DAYS) {
-                updatedKeys[runnerId] = keys;
-            }
-            else {
-                cleanedCount++;
-                console.log(`Cleaned up expired keys for runner ${runnerId}`);
-            }
-        }
-        await StorageService.set(this.KEYS_STORAGE_KEY, updatedKeys);
-        return cleanedCount;
-    }
-    // Private helper methods
-    static async getRunnerKeys(runnerId) {
-        const allKeys = await this.getAllStoredKeys();
-        return allKeys[runnerId] ?? null;
-    }
-    static async storeRunnerKeys(runnerId, keys) {
-        const allKeys = await this.getAllStoredKeys();
-        allKeys[runnerId] = keys;
-        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
-    }
-    static async getAllStoredKeys() {
-        return (await StorageService.get(this.KEYS_STORAGE_KEY)) ?? {};
-    }
-}
-//# sourceMappingURL=key-manager.js.map

package/dist/services/key-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../../src/services/key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAU,MAAM,aAAa,CAAC;AACnD,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AASnD,MAAM,OAAO,iBAAiB;IAClB,MAAM,CAAU,gBAAgB,GAAG,wBAAwB,CAAC;IAC5D,MAAM,CAAU,eAAe,GAAG,EAAE,CAAC;IAE7C;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,WAAW,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAExD,MAAM,UAAU,GAAe;YAC3B,WAAW;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAgB,EAAE,gBAAwB;QACvE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,sEAAsE;QACtE,MAAM,YAAY,GAAG,aAAa,CAAC,kBAAkB,CACjD,UAAU,CAAC,WAAW,CAAC,UAAU,EACjC,gBAAgB,CACnB,CAAC;QAEF,wCAAwC;QACxC,UAAU,CAAC,YAAY,GAAG,YAAY,CAAC;QACvC,UAAU,CAAC,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB;QACzC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4BAA4B;QAC5B,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,IAAI,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,mBAAmB,QAAQ,uCAAuC,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,UAAU,CAAC,YAAY,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,UAAU,EAAE,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAgB;QACtC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,IAAI,UAAU,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAgB;QACpC,OAAO,CAAC,GAAG,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,qBAAqB;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO,IAAI,EAAE,YAAY,CAAC;QAC9B,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,WAAW,GAA+B,EAAE,CAAC;QAEnD,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,iBAAiB,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAEzE,IAAI,iBAAiB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC5C,WAAW,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACJ,YAAY,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;YAClE,CAAC;QACL,CAAC;QAED,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;QAC7D,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,yBAAyB;IAEjB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAgB;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,IAAgB;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,gBAAgB;QACjC,OAAO,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC"}

package/dist/services/multi-device-key-manager.d.ts

@@ -1,56 +0,0 @@
-import { type DeviceKey } from '../types/runner.js';
-export declare class MultiDeviceKeyManagerService {
-    private static readonly KEYS_STORAGE_KEY;
-    private static readonly KEY_EXPIRY_DAYS;
-    /**
-     * Initialize keys for a new runner (CLI side)
-     */
-    static initializeRunnerKeys(runnerId: string): Promise<{
-        publicKey: string;
-        privateKey: string;
-    }>;
-    /**
-     * Register a new device and derive shared secret
-     */
-    static registerDevice(runnerId: string, deviceKey: DeviceKey): Promise<string>;
-    /**
-     * Remove a device from the runner
-     */
-    static removeDevice(runnerId: string, deviceId: string): Promise<void>;
-    /**
-     * Get shared secret for specific device
-     */
-    static getSharedSecret(runnerId: string, deviceId: string): Promise<string | null>;
-    /**
-     * Get all registered device IDs for a runner
-     */
-    static getRegisteredDevices(runnerId: string): Promise<string[]>;
-    /**
-     * Encrypt command for specific device
-     */
-    static encryptForDevice(runnerId: string, deviceId: string, command: string): Promise<string>;
-    /**
-     * Encrypt command for all registered devices
-     */
-    static encryptForAllDevices(runnerId: string, command: string): Promise<Record<string, string>>;
-    /**
-     * Decrypt command from specific device
-     */
-    static decryptFromDevice(runnerId: string, deviceId: string, encryptedCommand: string): Promise<string>;
-    /**
-     * Check if runner has any registered devices
-     */
-    static hasRegisteredDevices(runnerId: string): Promise<boolean>;
-    /**
-     * Clean up all keys for a runner
-     */
-    static removeRunnerKeys(runnerId: string): Promise<void>;
-    /**
-     * Get CLI's public key for a runner
-     */
-    static getCliPublicKey(runnerId: string): Promise<string | null>;
-    private static getRunnerKeys;
-    private static storeRunnerKeys;
-    private static getAllStoredKeys;
-}
-//# sourceMappingURL=multi-device-key-manager.d.ts.map

package/dist/services/multi-device-key-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"multi-device-key-manager.d.ts","sourceRoot":"","sources":["../../src/services/multi-device-key-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,KAAK,SAAS,EAAC,MAAM,oBAAoB,CAAC;AASlD,qBAAa,4BAA4B;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAkC;IAC1E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAM;IAE7C;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAC,CAAC;IAcrG;;OAEG;WACU,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BpF;;OAEG;WACU,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa5E;;OAEG;WACU,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAexF;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAStE;;OAEG;WACU,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IASnG;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAuBrG;;OAEG;WACU,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAS7G;;OAEG;WACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKrE;;OAEG;WACU,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D;;OAEG;WACU,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;mBAOjD,aAAa;mBAKb,eAAe;mBAMf,gBAAgB;CAGxC"}

package/dist/services/multi-device-key-manager.js

@@ -1,159 +0,0 @@
-import { CryptoService } from './crypto.js';
-import { StorageService } from '../utils/storage.js';
-export class MultiDeviceKeyManagerService {
-    static KEYS_STORAGE_KEY = 'salamander_multi_device_keys';
-    static KEY_EXPIRY_DAYS = 30;
-    /**
-     * Initialize keys for a new runner (CLI side)
-     */
-    static async initializeRunnerKeys(runnerId) {
-        const ecdhKeyPair = CryptoService.generateECDHKeyPair();
-        const keyData = {
-            ecdhKeyPair,
-            sharedSecrets: {},
-            keyHashes: {},
-            createdAt: Date.now()
-        };
-        await this.storeRunnerKeys(runnerId, keyData);
-        return ecdhKeyPair;
-    }
-    /**
-     * Register a new device and derive shared secret
-     */
-    static async registerDevice(runnerId, deviceKey) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            throw new Error(`No keys found for runner ${runnerId}`);
-        }
-        // Derive shared secret with this device
-        const sharedSecret = CryptoService.deriveSharedSecret(keyData.ecdhKeyPair.privateKey, deviceKey.publicKey);
-        const keyHash = CryptoService.createKeyHash(sharedSecret);
-        // Verify the key hash matches what the device expects
-        if (keyHash !== deviceKey.keyHash) {
-            throw new Error('Key hash mismatch during device registration');
-        }
-        // Store the shared secret for this device
-        keyData.sharedSecrets[deviceKey.deviceId] = sharedSecret;
-        keyData.keyHashes[deviceKey.deviceId] = keyHash;
-        await this.storeRunnerKeys(runnerId, keyData);
-        console.log(`✓ Device ${deviceKey.deviceId} registered for runner ${runnerId}`);
-        return sharedSecret;
-    }
-    /**
-     * Remove a device from the runner
-     */
-    static async removeDevice(runnerId, deviceId) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            return; // No keys to clean up
-        }
-        delete keyData.sharedSecrets[deviceId];
-        delete keyData.keyHashes[deviceId];
-        await this.storeRunnerKeys(runnerId, keyData);
-        console.log(`Device ${deviceId} removed from runner ${runnerId}`);
-    }
-    /**
-     * Get shared secret for specific device
-     */
-    static async getSharedSecret(runnerId, deviceId) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            return null;
-        }
-        // Check if keys are expired
-        const daysSinceCreation = (Date.now() - keyData.createdAt) / (1000 * 60 * 60 * 24);
-        if (daysSinceCreation > this.KEY_EXPIRY_DAYS) {
-            console.warn(`Keys for runner ${runnerId} have expired. Consider key rotation.`);
-        }
-        return keyData.sharedSecrets[deviceId] || null;
-    }
-    /**
-     * Get all registered device IDs for a runner
-     */
-    static async getRegisteredDevices(runnerId) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            return [];
-        }
-        return Object.keys(keyData.sharedSecrets);
-    }
-    /**
-     * Encrypt command for specific device
-     */
-    static async encryptForDevice(runnerId, deviceId, command) {
-        const sharedSecret = await this.getSharedSecret(runnerId, deviceId);
-        if (!sharedSecret) {
-            throw new Error(`No shared secret found for device ${deviceId} on runner ${runnerId}`);
-        }
-        return CryptoService.safeEncrypt(command, sharedSecret);
-    }
-    /**
-     * Encrypt command for all registered devices
-     */
-    static async encryptForAllDevices(runnerId, command) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            throw new Error(`No keys found for runner ${runnerId}`);
-        }
-        const encryptedCommands = {};
-        for (const [deviceId, sharedSecret] of Object.entries(keyData.sharedSecrets)) {
-            try {
-                encryptedCommands[deviceId] = CryptoService.safeEncrypt(command, sharedSecret);
-            }
-            catch (error) {
-                console.warn(`Failed to encrypt command for device ${deviceId}: ${error}`);
-            }
-        }
-        if (Object.keys(encryptedCommands).length === 0) {
-            throw new Error(`No devices registered for runner ${runnerId}`);
-        }
-        return encryptedCommands;
-    }
-    /**
-     * Decrypt command from specific device
-     */
-    static async decryptFromDevice(runnerId, deviceId, encryptedCommand) {
-        const sharedSecret = await this.getSharedSecret(runnerId, deviceId);
-        if (!sharedSecret) {
-            throw new Error(`No shared secret found for device ${deviceId} on runner ${runnerId}`);
-        }
-        return CryptoService.safeDecrypt(encryptedCommand, sharedSecret);
-    }
-    /**
-     * Check if runner has any registered devices
-     */
-    static async hasRegisteredDevices(runnerId) {
-        const devices = await this.getRegisteredDevices(runnerId);
-        return devices.length > 0;
-    }
-    /**
-     * Clean up all keys for a runner
-     */
-    static async removeRunnerKeys(runnerId) {
-        const allKeys = await this.getAllStoredKeys();
-        delete allKeys[runnerId];
-        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
-        console.log(`Cleaned up all keys for runner ${runnerId}`);
-    }
-    /**
-     * Get CLI's public key for a runner
-     */
-    static async getCliPublicKey(runnerId) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        return keyData?.ecdhKeyPair.publicKey || null;
-    }
-    // Private helper methods
-    static async getRunnerKeys(runnerId) {
-        const allKeys = await this.getAllStoredKeys();
-        return allKeys[runnerId] || null;
-    }
-    static async storeRunnerKeys(runnerId, keys) {
-        const allKeys = await this.getAllStoredKeys();
-        allKeys[runnerId] = keys;
-        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
-    }
-    static async getAllStoredKeys() {
-        return (await StorageService.get(this.KEYS_STORAGE_KEY)) ?? {};
-    }
-}
-//# sourceMappingURL=multi-device-key-manager.js.map

package/dist/services/multi-device-key-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"multi-device-key-manager.js","sourceRoot":"","sources":["../../src/services/multi-device-key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AAUnD,MAAM,OAAO,4BAA4B;IAC7B,MAAM,CAAU,gBAAgB,GAAG,8BAA8B,CAAC;IAClE,MAAM,CAAU,eAAe,GAAG,EAAE,CAAC;IAE7C;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,WAAW,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAExD,MAAM,OAAO,GAAkB;YAC3B,WAAW;YACX,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,SAAoB;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,wCAAwC;QACxC,MAAM,YAAY,GAAG,aAAa,CAAC,kBAAkB,CACjD,OAAO,CAAC,WAAW,CAAC,UAAU,EAC9B,SAAS,CAAC,SAAS,CACtB,CAAC;QAEF,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAE1D,sDAAsD;QACtD,IAAI,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACpE,CAAC;QAED,0CAA0C;QAC1C,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;QACzD,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;QAEhD,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,CAAC,QAAQ,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAChF,OAAO,YAAY,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,QAAgB;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,sBAAsB;QAClC,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEnC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,QAAgB;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4BAA4B;QAC5B,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,IAAI,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,mBAAmB,QAAQ,uCAAuC,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAe;QAC7E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,cAAc,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,OAAe;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,iBAAiB,GAA2B,EAAE,CAAC;QAErD,KAAK,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC;gBACD,iBAAiB,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,gBAAwB;QACvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,cAAc,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,aAAa,CAAC,WAAW,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,OAAO,EAAE,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,yBAAyB;IAEjB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAgB;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,IAAmB;QACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,gBAAgB;QACjC,OAAO,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC"}