@congzhen/changewayguard 6.8.12

package/dist/agent/business-reporter.d.ts

@@ -0,0 +1,114 @@
+/**
+ * BusinessReporter - Reports telemetry data to Core's Business Dashboard.
+ *
+ * Only active when the agent's account is on the "business" plan.
+ * Accumulates events and agentic hours locally, then flushes to Core
+ * every 60 seconds via POST /api/v1/business/telemetry.
+ */
+import type { CoreCredentials } from "./config.js";
+import type { Logger } from "./types.js";
+export type BusinessEvent = {
+    type: string;
+    toolName?: string;
+    category?: string;
+    riskLevel?: string;
+    blocked?: boolean;
+    durationMs?: number;
+    summary?: string;
+    metadata?: Record<string, unknown>;
+};
+export type AgenticHoursAccum = {
+    toolCallDurationMs: number;
+    llmDurationMs: number;
+    totalDurationMs: number;
+    toolCallCount: number;
+    llmCallCount: number;
+    sessionCount: number;
+    blockCount: number;
+    riskEventCount: number;
+};
+export type ScanSummaryAccum = {
+    scanType: string;
+    totalScans: number;
+    riskyScans: number;
+    categoryCounts: Record<string, number>;
+};
+export type GatewaySummaryAccum = {
+    totalRequests: number;
+    totalRedactions: number;
+    typeCounts: Record<string, number>;
+};
+export type SecretSummaryAccum = {
+    totalDetections: number;
+    typeCounts: Record<string, number>;
+};
+export type BusinessReporterConfig = {
+    coreUrl: string;
+    pluginVersion: string;
+};
+export declare class BusinessReporter {
+    private enabled;
+    private config;
+    private log;
+    private credentials;
+    private ownerName;
+    private machineName;
+    private machineId;
+    private agentName;
+    private provider;
+    private model;
+    /** Buffered events waiting to be flushed */
+    private pendingEvents;
+    /** Accumulated agentic hours since last flush */
+    private hoursAccum;
+    /** Accumulated scan summaries since last flush */
+    private scanAccum;
+    /** Accumulated gateway activity since last flush */
+    private gatewayAccum;
+    /** Accumulated secret detections since last flush */
+    private secretAccum;
+    /** Periodic flush timer */
+    private flushInterval;
+    /** Whether we're currently flushing */
+    private flushing;
+    constructor(config: BusinessReporterConfig, log: Logger);
+    /**
+     * Initialize the reporter. Only enables if the account plan is "business".
+     * Call this after fetching the account info from Core.
+     */
+    initialize(plan: string): void;
+    /** Set Core credentials */
+    setCredentials(credentials: CoreCredentials | null): void;
+    /** Update agent profile info (called when profile changes) */
+    setProfile(profile: {
+        ownerName?: string;
+        agentName?: string;
+        provider?: string;
+        model?: string;
+    }): void;
+    /** Whether the reporter is active */
+    isEnabled(): boolean;
+    /** Stop the reporter and flush remaining data */
+    stop(): Promise<void>;
+    /** Record a tool call */
+    recordToolCall(toolName: string, category: string, durationMs: number, blocked: boolean): void;
+    /** Record an LLM call */
+    recordLlmCall(durationMs: number, model?: string): void;
+    /** Record a detection event */
+    recordDetection(riskLevel: string, blocked: boolean, summary?: string): void;
+    /** Record a session start/end */
+    recordSession(type: "start" | "end", durationMs?: number): void;
+    /** Record a scan result (static or dynamic) */
+    recordScanResult(scanType: "static" | "dynamic", categories: string[], risky: boolean): void;
+    /** Record gateway sanitization activity */
+    recordGatewayActivity(redactionCount: number, typeCounts: Record<string, number>): void;
+    /** Record secret detection */
+    recordSecretDetection(typeCounts: Record<string, number>): void;
+    private startPeriodicFlush;
+    private maybeFlush;
+    flush(): Promise<void>;
+    private emptyAccum;
+    private emptyGatewayAccum;
+    private emptySecretAccum;
+}
+//# sourceMappingURL=business-reporter.d.ts.map

package/dist/agent/business-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-reporter.d.ts","sourceRoot":"","sources":["../../agent/business-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AA4BzC,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAMF,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,QAAQ,CAAM;IACtB,OAAO,CAAC,KAAK,CAAM;IAEnB,4CAA4C;IAC5C,OAAO,CAAC,aAAa,CAAuB;IAE5C,iDAAiD;IACjD,OAAO,CAAC,UAAU,CAAwC;IAE1D,kDAAkD;IAClD,OAAO,CAAC,SAAS,CAA0B;IAE3C,oDAAoD;IACpD,OAAO,CAAC,YAAY,CAAiD;IAErE,qDAAqD;IACrD,OAAO,CAAC,WAAW,CAA+C;IAElE,2BAA2B;IAC3B,OAAO,CAAC,aAAa,CAA+B;IAEpD,uCAAuC;IACvC,OAAO,CAAC,QAAQ,CAAS;gBAEb,MAAM,EAAE,sBAAsB,EAAE,GAAG,EAAE,MAAM;IASvD;;;OAGG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAW9B,2BAA2B;IAC3B,cAAc,CAAC,WAAW,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IAIzD,8DAA8D;IAC9D,UAAU,CAAC,OAAO,EAAE;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,IAAI;IAOR,qCAAqC;IACrC,SAAS,IAAI,OAAO;IAIpB,iDAAiD;IAC3C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAa3B,yBAAyB;IACzB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAmB9F,yBAAyB;IACzB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAUvD,+BAA+B;IAC/B,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAkB5E,iCAAiC;IACjC,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,KAAK,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAgB/D,+CAA+C;IAC/C,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAgB5F,2CAA2C;IAC3C,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAUvF,8BAA8B;IAC9B,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAY/D,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,UAAU;IAQZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA6F5B,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,gBAAgB;CAGzB"}

package/dist/agent/business-reporter.js

@@ -0,0 +1,359 @@
+/**
+ * BusinessReporter - Reports telemetry data to Core's Business Dashboard.
+ *
+ * Only active when the agent's account is on the "business" plan.
+ * Accumulates events and agentic hours locally, then flushes to Core
+ * every 60 seconds via POST /api/v1/business/telemetry.
+ */
+import os from "node:os";
+import fs from "node:fs";
+import path from "node:path";
+import { createHash } from "node:crypto";
+import { networkInterfaces } from "node:os";
+import { buildSignedAuthHeadersForUrl, withChangewayOpenPrefix } from "./auth.js";
+import { openclawHome } from "./env.js";
+function debugLog(msg) {
+    try {
+        const logPath = path.join(openclawHome, "logs", "moltguard-debug.log");
+        fs.appendFileSync(logPath, `[${new Date().toISOString()}] [BusinessReporter] ${msg}\n`);
+    }
+    catch { /* ignore */ }
+}
+// =============================================================================
+// Constants
+// =============================================================================
+/** Flush interval in ms (60 seconds) */
+const FLUSH_INTERVAL_MS = 60_000;
+/** Maximum events to buffer before forced flush */
+const MAX_BUFFERED_EVENTS = 500;
+/** Timeout for Core API calls */
+const API_TIMEOUT_MS = 5_000;
+// =============================================================================
+// BusinessReporter Class
+// =============================================================================
+export class BusinessReporter {
+    enabled = false;
+    config;
+    log;
+    credentials = null;
+    ownerName = "";
+    machineName;
+    machineId;
+    agentName = "";
+    provider = "";
+    model = "";
+    /** Buffered events waiting to be flushed */
+    pendingEvents = [];
+    /** Accumulated agentic hours since last flush */
+    hoursAccum = this.emptyAccum();
+    /** Accumulated scan summaries since last flush */
+    scanAccum = [];
+    /** Accumulated gateway activity since last flush */
+    gatewayAccum = this.emptyGatewayAccum();
+    /** Accumulated secret detections since last flush */
+    secretAccum = this.emptySecretAccum();
+    /** Periodic flush timer */
+    flushInterval = null;
+    /** Whether we're currently flushing */
+    flushing = false;
+    constructor(config, log) {
+        this.config = config;
+        this.log = log;
+        this.machineName = os.hostname();
+        this.machineId = generateMachineId();
+    }
+    // ─── Lifecycle ───────────────────────────────────────────────────
+    /**
+     * Initialize the reporter. Only enables if the account plan is "business".
+     * Call this after fetching the account info from Core.
+     */
+    initialize(plan) {
+        if (plan !== "business") {
+            this.log.debug?.(`BusinessReporter: plan is "${plan}", not enabling`);
+            return;
+        }
+        this.enabled = true;
+        this.startPeriodicFlush();
+        this.log.info(`BusinessReporter: enabled for business plan (machine: ${this.machineName})`);
+    }
+    /** Set Core credentials */
+    setCredentials(credentials) {
+        this.credentials = credentials;
+    }
+    /** Update agent profile info (called when profile changes) */
+    setProfile(profile) {
+        if (profile.ownerName !== undefined)
+            this.ownerName = profile.ownerName;
+        if (profile.agentName !== undefined)
+            this.agentName = profile.agentName;
+        if (profile.provider !== undefined)
+            this.provider = profile.provider;
+        if (profile.model !== undefined)
+            this.model = profile.model;
+    }
+    /** Whether the reporter is active */
+    isEnabled() {
+        return this.enabled;
+    }
+    /** Stop the reporter and flush remaining data */
+    async stop() {
+        if (this.flushInterval) {
+            clearInterval(this.flushInterval);
+            this.flushInterval = null;
+        }
+        if (this.enabled) {
+            await this.flush();
+        }
+        this.enabled = false;
+    }
+    // ─── Event Recording ─────────────────────────────────────────────
+    /** Record a tool call */
+    recordToolCall(toolName, category, durationMs, blocked) {
+        if (!this.enabled)
+            return;
+        this.pendingEvents.push({
+            type: blocked ? "block" : "tool_call",
+            toolName,
+            category,
+            durationMs,
+            blocked,
+        });
+        this.hoursAccum.toolCallDurationMs += durationMs;
+        this.hoursAccum.toolCallCount += 1;
+        this.hoursAccum.totalDurationMs += durationMs;
+        if (blocked)
+            this.hoursAccum.blockCount += 1;
+        this.maybeFlush();
+    }
+    /** Record an LLM call */
+    recordLlmCall(durationMs, model) {
+        if (!this.enabled)
+            return;
+        if (model)
+            this.model = model;
+        this.hoursAccum.llmDurationMs += durationMs;
+        this.hoursAccum.llmCallCount += 1;
+        this.hoursAccum.totalDurationMs += durationMs;
+    }
+    /** Record a detection event */
+    recordDetection(riskLevel, blocked, summary) {
+        if (!this.enabled)
+            return;
+        this.pendingEvents.push({
+            type: "detection",
+            riskLevel,
+            blocked,
+            summary,
+        });
+        if (riskLevel !== "no_risk" && riskLevel !== "low") {
+            this.hoursAccum.riskEventCount += 1;
+        }
+        if (blocked)
+            this.hoursAccum.blockCount += 1;
+        this.maybeFlush();
+    }
+    /** Record a session start/end */
+    recordSession(type, durationMs) {
+        if (!this.enabled)
+            return;
+        this.pendingEvents.push({
+            type: type === "start" ? "session_start" : "session_end",
+            durationMs,
+        });
+        if (type === "start") {
+            this.hoursAccum.sessionCount += 1;
+        }
+        if (durationMs) {
+            this.hoursAccum.totalDurationMs += durationMs;
+        }
+    }
+    /** Record a scan result (static or dynamic) */
+    recordScanResult(scanType, categories, risky) {
+        if (!this.enabled)
+            return;
+        // Find or create accum for this scan type
+        let accum = this.scanAccum.find((s) => s.scanType === scanType);
+        if (!accum) {
+            accum = { scanType, totalScans: 0, riskyScans: 0, categoryCounts: {} };
+            this.scanAccum.push(accum);
+        }
+        accum.totalScans += 1;
+        if (risky)
+            accum.riskyScans += 1;
+        for (const cat of categories) {
+            accum.categoryCounts[cat] = (accum.categoryCounts[cat] ?? 0) + 1;
+        }
+    }
+    /** Record gateway sanitization activity */
+    recordGatewayActivity(redactionCount, typeCounts) {
+        if (!this.enabled)
+            return;
+        this.gatewayAccum.totalRequests += 1;
+        this.gatewayAccum.totalRedactions += redactionCount;
+        for (const [k, v] of Object.entries(typeCounts)) {
+            this.gatewayAccum.typeCounts[k] = (this.gatewayAccum.typeCounts[k] ?? 0) + v;
+        }
+    }
+    /** Record secret detection */
+    recordSecretDetection(typeCounts) {
+        if (!this.enabled)
+            return;
+        const total = Object.values(typeCounts).reduce((a, b) => a + b, 0);
+        this.secretAccum.totalDetections += total;
+        for (const [k, v] of Object.entries(typeCounts)) {
+            this.secretAccum.typeCounts[k] = (this.secretAccum.typeCounts[k] ?? 0) + v;
+        }
+    }
+    // ─── Flush ─────────────────────────────────────────────────────
+    startPeriodicFlush() {
+        if (this.flushInterval)
+            return;
+        this.flushInterval = setInterval(() => {
+            this.flush().catch((err) => {
+                this.log.debug?.(`BusinessReporter: flush error: ${err}`);
+            });
+        }, FLUSH_INTERVAL_MS);
+        // Don't prevent process exit
+        this.flushInterval.unref();
+    }
+    maybeFlush() {
+        if (this.pendingEvents.length >= MAX_BUFFERED_EVENTS) {
+            this.flush().catch((err) => {
+                this.log.debug?.(`BusinessReporter: forced flush error: ${err}`);
+            });
+        }
+    }
+    async flush() {
+        if (this.flushing || !this.enabled || !this.credentials)
+            return;
+        // Check if there's anything to flush
+        const hasEvents = this.pendingEvents.length > 0;
+        const hasHours = this.hoursAccum.totalDurationMs > 0 ||
+            this.hoursAccum.toolCallCount > 0 ||
+            this.hoursAccum.llmCallCount > 0 ||
+            this.hoursAccum.sessionCount > 0;
+        const hasScans = this.scanAccum.length > 0;
+        const hasGateway = this.gatewayAccum.totalRequests > 0;
+        const hasSecrets = this.secretAccum.totalDetections > 0;
+        if (!hasEvents && !hasHours && !hasScans && !hasGateway && !hasSecrets)
+            return;
+        this.flushing = true;
+        // Take current state
+        const events = this.pendingEvents.splice(0);
+        const hours = { ...this.hoursAccum };
+        this.hoursAccum = this.emptyAccum();
+        const scans = this.scanAccum.splice(0);
+        const gateway = { ...this.gatewayAccum };
+        this.gatewayAccum = this.emptyGatewayAccum();
+        const secrets = { ...this.secretAccum };
+        this.secretAccum = this.emptySecretAccum();
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), API_TIMEOUT_MS);
+        try {
+            const body = {
+                agentId: this.credentials.agentId,
+                ownerName: this.ownerName || undefined,
+                machineName: this.machineName,
+                machineId: this.machineId,
+                agentName: this.agentName || undefined,
+                provider: this.provider || undefined,
+                model: this.model || undefined,
+                events: events.length > 0 ? events : undefined,
+                agenticHours: hasHours ? hours : undefined,
+                heartbeat: true,
+                scanSummary: scans.length > 0 ? scans : undefined,
+                gatewaySummary: hasGateway ? gateway : undefined,
+                secretSummary: hasSecrets ? secrets : undefined,
+            };
+            const url = withChangewayOpenPrefix(`${this.config.coreUrl}/api/v1/business/telemetry`);
+            debugLog(`flush: POSTing to ${url} events=${events.length} hours=${JSON.stringify(hours)}`);
+            const response = await fetch(url, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    ...buildSignedAuthHeadersForUrl({
+                        method: "POST",
+                        url,
+                        body,
+                    }),
+                },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                debugLog(`flush: POST failed with ${response.status}`);
+                this.log.debug?.(`BusinessReporter: telemetry request failed with ${response.status}`);
+                // Put events back on failure (hours are lost to avoid double-counting)
+                this.pendingEvents.unshift(...events);
+                if (this.pendingEvents.length > MAX_BUFFERED_EVENTS) {
+                    this.pendingEvents.length = MAX_BUFFERED_EVENTS; // Trim oldest
+                }
+            }
+            else {
+                debugLog(`flush: POST success`);
+                this.log.debug?.(`BusinessReporter: flushed ${events.length} events`);
+            }
+        }
+        catch (err) {
+            debugLog(`flush: POST error: ${err}`);
+            if (err.name !== "AbortError") {
+                this.log.debug?.(`BusinessReporter: telemetry error: ${err}`);
+            }
+            // Put events back on failure
+            this.pendingEvents.unshift(...events);
+            if (this.pendingEvents.length > MAX_BUFFERED_EVENTS) {
+                this.pendingEvents.length = MAX_BUFFERED_EVENTS;
+            }
+        }
+        finally {
+            clearTimeout(timer);
+            this.flushing = false;
+        }
+    }
+    // ─── Helpers ───────────────────────────────────────────────────
+    emptyAccum() {
+        return {
+            toolCallDurationMs: 0,
+            llmDurationMs: 0,
+            totalDurationMs: 0,
+            toolCallCount: 0,
+            llmCallCount: 0,
+            sessionCount: 0,
+            blockCount: 0,
+            riskEventCount: 0,
+        };
+    }
+    emptyGatewayAccum() {
+        return { totalRequests: 0, totalRedactions: 0, typeCounts: {} };
+    }
+    emptySecretAccum() {
+        return { totalDetections: 0, typeCounts: {} };
+    }
+}
+// =============================================================================
+// Machine ID Generation
+// =============================================================================
+/**
+ * Generate a stable machine ID from hostname + first MAC address.
+ * This identifies a specific machine across restarts.
+ */
+function generateMachineId() {
+    const hostname = os.hostname();
+    const interfaces = networkInterfaces();
+    let mac = "";
+    for (const iface of Object.values(interfaces)) {
+        if (!iface)
+            continue;
+        for (const info of iface) {
+            if (!info.internal && info.mac && info.mac !== "00:00:00:00:00:00") {
+                mac = info.mac;
+                break;
+            }
+        }
+        if (mac)
+            break;
+    }
+    const input = `${hostname}:${mac || "unknown"}`;
+    return createHash("sha256").update(input).digest("hex").slice(0, 16);
+}
+//# sourceMappingURL=business-reporter.js.map

package/dist/agent/business-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-reporter.js","sourceRoot":"","sources":["../../agent/business-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAG5C,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;QACvE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AAC1B,CAAC;AAED,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,wCAAwC;AACxC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,mDAAmD;AACnD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,iCAAiC;AACjC,MAAM,cAAc,GAAG,KAAK,CAAC;AAmD7B,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,MAAM,OAAO,gBAAgB;IACnB,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,CAAyB;IAC/B,GAAG,CAAS;IACZ,WAAW,GAA2B,IAAI,CAAC;IAC3C,SAAS,GAAG,EAAE,CAAC;IACf,WAAW,CAAS;IACpB,SAAS,CAAS;IAClB,SAAS,GAAG,EAAE,CAAC;IACf,QAAQ,GAAG,EAAE,CAAC;IACd,KAAK,GAAG,EAAE,CAAC;IAEnB,4CAA4C;IACpC,aAAa,GAAoB,EAAE,CAAC;IAE5C,iDAAiD;IACzC,UAAU,GAAsB,IAAI,CAAC,UAAU,EAAE,CAAC;IAE1D,kDAAkD;IAC1C,SAAS,GAAuB,EAAE,CAAC;IAE3C,oDAAoD;IAC5C,YAAY,GAAwB,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAErE,qDAAqD;IAC7C,WAAW,GAAuB,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAElE,2BAA2B;IACnB,aAAa,GAA0B,IAAI,CAAC;IAEpD,uCAAuC;IAC/B,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,MAA8B,EAAE,GAAW;QACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACvC,CAAC;IAED,oEAAoE;IAEpE;;;OAGG;IACH,UAAU,CAAC,IAAY;QACrB,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,8BAA8B,IAAI,iBAAiB,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yDAAyD,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IAC9F,CAAC;IAED,2BAA2B;IAC3B,cAAc,CAAC,WAAmC;QAChD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,8DAA8D;IAC9D,UAAU,CAAC,OAKV;QACC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACxE,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACxE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACrE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC9D,CAAC;IAED,qCAAqC;IACrC,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,oEAAoE;IAEpE,yBAAyB;IACzB,cAAc,CAAC,QAAgB,EAAE,QAAgB,EAAE,UAAkB,EAAE,OAAgB;QACrF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;YACrC,QAAQ;YACR,QAAQ;YACR,UAAU;YACV,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,kBAAkB,IAAI,UAAU,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,eAAe,IAAI,UAAU,CAAC;QAC9C,IAAI,OAAO;YAAE,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,yBAAyB;IACzB,aAAa,CAAC,UAAkB,EAAE,KAAc;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAE9B,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,eAAe,IAAI,UAAU,CAAC;IAChD,CAAC;IAED,+BAA+B;IAC/B,eAAe,CAAC,SAAiB,EAAE,OAAgB,EAAE,OAAgB;QACnE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,OAAO;YACP,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,cAAc,IAAI,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,OAAO;YAAE,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,iCAAiC;IACjC,aAAa,CAAC,IAAqB,EAAE,UAAmB;QACtD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa;YACxD,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,eAAe,IAAI,UAAU,CAAC;QAChD,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,gBAAgB,CAAC,QAA8B,EAAE,UAAoB,EAAE,KAAc;QACnF,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,0CAA0C;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;YACvE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;QACtB,IAAI,KAAK;YAAE,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,qBAAqB,CAAC,cAAsB,EAAE,UAAkC;QAC9E,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC,YAAY,CAAC,aAAa,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,cAAc,CAAC;QACpD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,qBAAqB,CAAC,UAAkC;QACtD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,WAAW,CAAC,eAAe,IAAI,KAAK,CAAC;QAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,kEAAkE;IAE1D,kBAAkB;QACxB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,6BAA6B;QAC7B,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;YACrD,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAEhE,qCAAqC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,GAAG,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,aAAa,GAAG,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC;YAChC,IAAI,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,GAAG,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,eAAe,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU;YAAE,OAAO;QAE/E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,qBAAqB;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS;gBACtC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,SAAS;gBACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;gBACpC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;gBAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBAC9C,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC1C,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBACjD,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBAChD,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;aAChD,CAAC;YAEF,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;YACxF,QAAQ,CAAC,qBAAqB,GAAG,WAAW,MAAM,CAAC,MAAM,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,4BAA4B,CAAC;wBAC9B,MAAM,EAAE,MAAM;wBACd,GAAG;wBACH,IAAI;qBACL,CAAC;iBACH;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,QAAQ,CAAC,2BAA2B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,mDAAmD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvF,uEAAuE;gBACvE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;oBACpD,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC,cAAc;gBACjE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,qBAAqB,CAAC,CAAC;gBAChC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,6BAA6B,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;YACtC,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,6BAA6B;YAC7B,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBACpD,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,mBAAmB,CAAC;YAClD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,kEAAkE;IAE1D,UAAU;QAChB,OAAO;YACL,kBAAkB,EAAE,CAAC;YACrB,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,UAAU,EAAE,CAAC;YACb,cAAc,EAAE,CAAC;SAClB,CAAC;IACJ,CAAC;IAEO,iBAAiB;QACvB,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAClE,CAAC;IAEO,gBAAgB;QACtB,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAChD,CAAC;CACF;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,IAAI,GAAG,GAAG,EAAE,CAAC;IAEb,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,mBAAmB,EAAE,CAAC;gBACnE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,GAAG;YAAE,MAAM;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,QAAQ,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/agent/config-sync.d.ts

@@ -0,0 +1,70 @@
+/**
+ * ConfigSync - Periodically pulls team-level configuration from Core.
+ *
+ * Only active when the agent's account is on the "business" plan.
+ * Pulls policies and gateway config every 5 minutes from
+ * GET /api/v1/business/config and applies them locally.
+ */
+import type { CoreCredentials } from "./config.js";
+import type { Logger } from "./types.js";
+export type TeamPolicy = {
+    id: string;
+    name: string;
+    description: string | null;
+    scannerIds: string | null;
+    action: string;
+    sensitivityThreshold: number;
+    targetAgentIds: string | null;
+    targetOwners: string | null;
+    isEnabled: number;
+};
+export type TeamGatewayConfig = {
+    sanitizeEmail: number;
+    sanitizeApiKeys: number;
+    sanitizePii: number;
+    sanitizeSshKeys: number;
+    sanitizeEnvVars: number;
+    sanitizeConfidential: number;
+    customPatterns: string | null;
+    targetAgentIds: string | null;
+    targetOwners: string | null;
+};
+export type BusinessConfig = {
+    policies: TeamPolicy[];
+    gatewayConfig: TeamGatewayConfig | null;
+};
+/** Callback for when config changes */
+export type OnConfigUpdate = (config: BusinessConfig) => void;
+export type ConfigSyncOptions = {
+    coreUrl: string;
+    /** Callback invoked when remote config changes */
+    onUpdate?: OnConfigUpdate;
+};
+export declare class ConfigSync {
+    private enabled;
+    private options;
+    private log;
+    private credentials;
+    private pollInterval;
+    /** Last fetched config (for change detection) */
+    private lastConfigHash;
+    /** Last successfully fetched config */
+    private currentConfig;
+    constructor(options: ConfigSyncOptions, log: Logger);
+    /**
+     * Initialize config sync. Only enables if plan is "business".
+     */
+    initialize(plan: string): Promise<void>;
+    /** Set Core credentials */
+    setCredentials(credentials: CoreCredentials | null): void;
+    /** Get current config (may be null if not yet fetched) */
+    getConfig(): BusinessConfig | null;
+    /** Whether sync is active */
+    isEnabled(): boolean;
+    /** Stop polling */
+    stop(): void;
+    private startPolling;
+    /** Pull config from Core */
+    pull(): Promise<BusinessConfig | null>;
+}
+//# sourceMappingURL=config-sync.d.ts.map

package/dist/agent/config-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-sync.d.ts","sourceRoot":"","sources":["../../agent/config-sync.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAgBzC,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,aAAa,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACzC,CAAC;AAEF,uCAAuC;AACvC,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;AAMF,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,YAAY,CAA+B;IAEnD,iDAAiD;IACjD,OAAO,CAAC,cAAc,CAAM;IAE5B,uCAAuC;IACvC,OAAO,CAAC,aAAa,CAA+B;gBAExC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM;IAOnD;;OAEG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB7C,2BAA2B;IAC3B,cAAc,CAAC,WAAW,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IAIzD,0DAA0D;IAC1D,SAAS,IAAI,cAAc,GAAG,IAAI;IAIlC,6BAA6B;IAC7B,SAAS,IAAI,OAAO;IAIpB,mBAAmB;IACnB,IAAI,IAAI,IAAI;IAUZ,OAAO,CAAC,YAAY;IAUpB,4BAA4B;IACtB,IAAI,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;CA4D7C"}