@creezio/electron-shell 0.22.0

package/dist-cjs/host/meili-launcher.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * Meilisearch local OPTIONNEL — launcher générique (injecte chemins).
+ * Port de electron/meili-launcher.ts sans dépendances marque.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startMeili = startMeili;
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const platform_core_1 = require("@creezio/platform-core");
+function ensureMasterKey(dataDir) {
+    const keyFile = node_path_1.default.join(dataDir, ".master-key");
+    try {
+        const existing = node_fs_1.default.readFileSync(keyFile, "utf8").trim();
+        if (existing.length >= 16)
+            return existing;
+    }
+    catch {
+        /* première exécution */
+    }
+    const key = node_crypto_1.default.randomBytes(24).toString("base64url");
+    node_fs_1.default.writeFileSync(keyFile, key, { mode: 0o600 });
+    return key;
+}
+/**
+ * Démarre Meilisearch si le binaire est disponible.
+ * Retourne null (sans throw) si absent ou en échec.
+ */
+async function startMeili(opts) {
+    const log = opts.log ?? ((l) => console.log(`[meili] ${l}`));
+    const bin = opts.binaryPath;
+    if (!bin || !node_fs_1.default.existsSync(bin)) {
+        log("binaire Meilisearch absent — le boot fail-closed décide " +
+            "(maybeBootBrandMeili : throw si le feed déclare des index).");
+        return null;
+    }
+    try {
+        node_fs_1.default.mkdirSync(opts.dataDir, { recursive: true });
+        const masterKey = ensureMasterKey(opts.dataDir);
+        const port = await (0, platform_core_1.findFreePort)();
+        const host = `http://127.0.0.1:${port}`;
+        log(`spawn ${bin} (port ${port}, data ${node_path_1.default.join(opts.dataDir, "data.ms")})`);
+        const env = opts.buildEnv?.({ ...process.env }) ?? { ...process.env };
+        const child = (0, node_child_process_1.spawn)(bin, [
+            "--http-addr",
+            `127.0.0.1:${port}`,
+            "--db-path",
+            node_path_1.default.join(opts.dataDir, "data.ms"),
+            "--master-key",
+            masterKey,
+            "--no-analytics",
+            "--env",
+            "production",
+        ], {
+            stdio: ["ignore", "pipe", "pipe"],
+            windowsHide: true,
+            env,
+        });
+        const errTail = [];
+        const keepTail = (line) => {
+            errTail.push(line);
+            if (errTail.length > 25)
+                errTail.shift();
+        };
+        child.stdout?.on("data", (d) => d
+            .toString()
+            .split("\n")
+            .filter(Boolean)
+            .forEach((l) => {
+            keepTail(l);
+            log(l);
+        }));
+        child.stderr?.on("data", (d) => d
+            .toString()
+            .split("\n")
+            .filter(Boolean)
+            .forEach((l) => {
+            keepTail(l);
+            log(`stderr: ${l}`);
+        }));
+        child.on("error", (e) => {
+            log(`spawn error: ${e.message}`);
+            opts.onCrash?.({ child: "meilisearch", spawnError: e.message });
+        });
+        child.on("exit", (code) => {
+            if (code !== 0 && code !== null) {
+                log(`meilisearch terminé (code ${code})`);
+                opts.onCrash?.({
+                    child: "meilisearch",
+                    code,
+                    output: errTail.join("\n"),
+                });
+            }
+        });
+        await (0, platform_core_1.waitForMeiliHealth)(host);
+        log(`Meilisearch local démarré sur ${host}`);
+        return {
+            host,
+            masterKey,
+            child,
+            stop: () => {
+                try {
+                    child.kill();
+                }
+                catch {
+                    /* déjà mort */
+                }
+            },
+        };
+    }
+    catch (e) {
+        log(`démarrage Meilisearch échoué (${e instanceof Error ? e.message : e}).`);
+        return null;
+    }
+}
+//# sourceMappingURL=meili-launcher.js.map

package/dist-cjs/host/meili-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meili-launcher.js","sourceRoot":"","sources":["../../src/host/meili-launcher.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAiDH,gCAsGC;AArJD,2DAA8D;AAC9D,8DAAiC;AACjC,sDAAyB;AACzB,0DAA6B;AAC7B,0DAGgC;AAuBhC,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,iBAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,MAAM,GAAG,GAAG,qBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzD,iBAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,UAAU,CAC9B,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5B,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CACD,0DAA0D;YACxD,6DAA6D,CAChE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,iBAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAY,GAAE,CAAC;QAClC,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAC;QAExC,GAAG,CAAC,SAAS,GAAG,UAAU,IAAI,UAAU,mBAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/E,MAAM,GAAG,GACP,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE5D,MAAM,KAAK,GAAG,IAAA,0BAAK,EACjB,GAAG,EACH;YACE,aAAa;YACb,aAAa,IAAI,EAAE;YACnB,WAAW;YACX,mBAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;YAClC,cAAc;YACd,SAAS;YACT,gBAAgB;YAChB,OAAO;YACP,YAAY;SACb,EACD;YACE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,WAAW,EAAE,IAAI;YACjB,GAAG;SACJ,CACF,CAAC;QAEF,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;YAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC3C,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CACrC,CAAC;aACE,QAAQ,EAAE;aACV,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACb,QAAQ,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,CAAC,CAAC,CAAC,CAAC;QACT,CAAC,CAAC,CACL,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CACrC,CAAC;aACE,QAAQ,EAAE;aACV,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACb,QAAQ,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CACL,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,GAAG,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChC,GAAG,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;gBAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,KAAK,EAAE,aAAa;oBACpB,IAAI;oBACJ,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,IAAA,kCAAkB,EAAC,IAAI,CAAC,CAAC;QAC/B,GAAG,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO;YACL,IAAI;YACJ,SAAS;YACT,KAAK;YACL,IAAI,EAAE,GAAG,EAAE;gBACT,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAe;gBACjB,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CACD,iCAAiC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CACxE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist-cjs/host/n8n/agent-isolation.js

@@ -0,0 +1,173 @@
+"use strict";
+/**
+ * Étanchéité par collaborateur IA (Q2 multi-profils) — gold TempoFlow paramétré.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.agentIdSegment = agentIdSegment;
+exports.n8nAgentKeyLabel = n8nAgentKeyLabel;
+exports.n8nAgentTag = n8nAgentTag;
+exports.n8nAgentKeysPath = n8nAgentKeysPath;
+exports.readStoredN8nAgentKeys = readStoredN8nAgentKeys;
+exports.writeStoredN8nAgentKeys = writeStoredN8nAgentKeys;
+exports.ensureN8nAgentApiKey = ensureN8nAgentApiKey;
+exports.revokeN8nAgentApiKey = revokeN8nAgentApiKey;
+exports.hermesAgentWorkspaceDir = hermesAgentWorkspaceDir;
+exports.ensureHermesAgentWorkspace = ensureHermesAgentWorkspace;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const api_key_js_1 = require("./api-key.js");
+const embed_sandbox_js_1 = require("../sandbox/embed-sandbox.js");
+function agentIdSegment(aiUserId) {
+    const cleaned = String(aiUserId || "")
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/g, "-")
+        .replace(/^[-.]+|[-.]+$/g, "");
+    return cleaned.slice(0, 64) || "agent";
+}
+function n8nAgentKeyLabel(brand, aiUserId) {
+    return `${brand.labelPrefix} ${agentIdSegment(aiUserId)}`;
+}
+function n8nAgentTag(brand, aiUserId) {
+    return `${brand.tagPrefix}:${agentIdSegment(aiUserId)}`;
+}
+function n8nAgentKeysPath(homeDir, brand) {
+    return node_path_1.default.join(homeDir, brand.keysFileName);
+}
+function readStoredN8nAgentKeys(homeDir, brand) {
+    try {
+        const raw = JSON.parse(node_fs_1.default.readFileSync(n8nAgentKeysPath(homeDir, brand), "utf8"));
+        if (raw && typeof raw === "object") {
+            const out = {};
+            for (const [userId, entry] of Object.entries(raw)) {
+                if (entry &&
+                    typeof entry.apiKey === "string" &&
+                    entry.apiKey.length >= 16) {
+                    out[userId] = entry;
+                }
+            }
+            return out;
+        }
+    }
+    catch {
+        /* absent */
+    }
+    return {};
+}
+function writeStoredN8nAgentKeys(homeDir, brand, keys) {
+    node_fs_1.default.mkdirSync(homeDir, { recursive: true });
+    node_fs_1.default.writeFileSync(n8nAgentKeysPath(homeDir, brand), `${JSON.stringify(keys, null, 2)}\n`, { mode: 0o600 });
+}
+async function ensureN8nAgentApiKey(opts) {
+    const log = opts.log || (() => { });
+    const keys = readStoredN8nAgentKeys(opts.homeDir, opts.brand);
+    const existing = keys[opts.aiUserId];
+    if (existing && !opts.forceNew) {
+        return {
+            ok: true,
+            apiKey: existing.apiKey,
+            detail: "clé n8n agent déjà provisionnée",
+        };
+    }
+    const base = opts.uiUrl.replace(/\/$/, "");
+    const label = n8nAgentKeyLabel(opts.brand, opts.aiUserId);
+    try {
+        const login = await (0, api_key_js_1.n8nHttpJson)("POST", `${base}/rest/login`, {
+            emailOrLdapLoginId: opts.email,
+            password: opts.password,
+        });
+        if (!(login.status >= 200 && login.status < 300)) {
+            return { ok: false, apiKey: null, detail: `login n8n HTTP ${login.status}` };
+        }
+        const cookie = (0, api_key_js_1.cookieHeaderFromSetCookie)(login.headers["set-cookie"]);
+        if (!cookie) {
+            return { ok: false, apiKey: null, detail: "login OK sans cookie" };
+        }
+        const scopes = await (0, api_key_js_1.fetchN8nApiKeyScopes)(base, cookie);
+        const create = await (0, api_key_js_1.n8nHttpJson)("POST", `${base}/rest/api-keys`, { label, expiresAt: null, scopes }, { Cookie: cookie });
+        if (!(create.status >= 200 && create.status < 300)) {
+            return {
+                ok: false,
+                apiKey: null,
+                detail: `création API key agent HTTP ${create.status}: ${create.raw.slice(0, 200)}`,
+            };
+        }
+        const parsed = (0, api_key_js_1.extractRawN8nApiKey)(create.json);
+        if (!parsed) {
+            return {
+                ok: false,
+                apiKey: null,
+                detail: "API key créée mais rawApiKey absent",
+            };
+        }
+        keys[opts.aiUserId] = {
+            id: parsed.id,
+            label,
+            apiKey: parsed.apiKey,
+            createdAt: new Date().toISOString(),
+        };
+        writeStoredN8nAgentKeys(opts.homeDir, opts.brand, keys);
+        log(`api-key agent: provisionnée (${label})`);
+        return { ok: true, apiKey: parsed.apiKey, detail: "clé n8n agent créée" };
+    }
+    catch (e) {
+        return {
+            ok: false,
+            apiKey: null,
+            detail: e instanceof Error ? e.message : String(e),
+        };
+    }
+}
+async function revokeN8nAgentApiKey(opts) {
+    const keys = readStoredN8nAgentKeys(opts.homeDir, opts.brand);
+    const existing = keys[opts.aiUserId];
+    if (!existing)
+        return { ok: true, detail: "aucune clé agent à révoquer" };
+    delete keys[opts.aiUserId];
+    writeStoredN8nAgentKeys(opts.homeDir, opts.brand, keys);
+    if (!existing.id) {
+        return { ok: true, detail: "clé retirée du fichier (id n8n inconnu)" };
+    }
+    const base = opts.uiUrl.replace(/\/$/, "");
+    try {
+        const login = await (0, api_key_js_1.n8nHttpJson)("POST", `${base}/rest/login`, {
+            emailOrLdapLoginId: opts.email,
+            password: opts.password,
+        });
+        const cookie = (0, api_key_js_1.cookieHeaderFromSetCookie)(login.headers["set-cookie"]);
+        if (!cookie)
+            return { ok: false, detail: "login n8n sans cookie" };
+        const del = await (0, api_key_js_1.n8nHttpJson)("DELETE", `${base}/rest/api-keys/${encodeURIComponent(existing.id)}`, undefined, { Cookie: cookie });
+        if (del.status >= 200 && del.status < 300) {
+            opts.log?.(`api-key agent: révoquée (${existing.label})`);
+            return { ok: true, detail: "clé n8n agent révoquée" };
+        }
+        return { ok: false, detail: `révocation HTTP ${del.status}` };
+    }
+    catch (e) {
+        return { ok: false, detail: e instanceof Error ? e.message : String(e) };
+    }
+}
+function hermesAgentWorkspaceDir(hermesHome, aiUserId) {
+    const { workspace } = (0, embed_sandbox_js_1.hermesSandboxPaths)(hermesHome);
+    return node_path_1.default.join(workspace, "agents", agentIdSegment(aiUserId));
+}
+function ensureHermesAgentWorkspace(hermesHome, aiUserId, brand) {
+    const dir = hermesAgentWorkspaceDir(hermesHome, aiUserId);
+    node_fs_1.default.mkdirSync(dir, { recursive: true });
+    const readme = node_path_1.default.join(dir, "README-AGENT.txt");
+    if (!node_fs_1.default.existsSync(readme)) {
+        node_fs_1.default.writeFileSync(readme, [
+            `${brand.productName} — workspace de l'agent ${agentIdSegment(aiUserId)}`,
+            "",
+            "Espace de travail cloisonné de ce collaborateur IA (fichiers, brouillons).",
+            "Ne pas y stocker de secrets — voir la politique multi-profils (Q2).",
+            "",
+        ].join("\n"), "utf8");
+    }
+    return dir;
+}
+//# sourceMappingURL=agent-isolation.js.map

package/dist-cjs/host/n8n/agent-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-isolation.js","sourceRoot":"","sources":["../../../src/host/n8n/agent-isolation.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;AAgCH,wCAOC;AAED,4CAKC;AAED,kCAKC;AAED,4CAKC;AAED,wDAyBC;AAED,0DAWC;AAED,oDA0EC;AAED,oDAyCC;AAED,0DAMC;AAED,gEAsBC;AAzPD,sDAAyB;AACzB,0DAA6B;AAC7B,6CAKsB;AACtB,kEAAiE;AAsBjE,SAAgB,cAAc,CAAC,QAAgB;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;SACnC,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;AACzC,CAAC;AAED,SAAgB,gBAAgB,CAC9B,KAA6B,EAC7B,QAAgB;IAEhB,OAAO,GAAG,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAgB,WAAW,CACzB,KAA6B,EAC7B,QAAgB;IAEhB,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAgB,gBAAgB,CAC9B,OAAe,EACf,KAA6B;IAE7B,OAAO,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,SAAgB,sBAAsB,CACpC,OAAe,EACf,KAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,iBAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CACtC,CAAC;QACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,GAAG,GAAqB,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClD,IACE,KAAK;oBACL,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;oBAChC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EACzB,CAAC;oBACD,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAgB,uBAAuB,CACrC,OAAe,EACf,KAA6B,EAC7B,IAAsB;IAEtB,iBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,iBAAE,CAAC,aAAa,CACd,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAChC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACpC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,IAS1C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,iCAAiC;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAA,wBAAW,EAAC,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE;YAC5D,kBAAkB,EAAE,IAAI,CAAC,KAAK;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,iCAAoB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAW,EAC9B,MAAM,EACN,GAAG,IAAI,gBAAgB,EACvB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAClC,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,+BAA+B,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aACpF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,gCAAmB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,qCAAqC;aAC9C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG;YACpB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxD,GAAG,CAAC,gCAAgC,KAAK,GAAG,CAAC,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,IAQ1C;IACC,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAE1E,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAExD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAA,wBAAW,EAAC,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE;YAC5D,kBAAkB,EAAE,IAAI,CAAC,KAAK;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,sCAAyB,EAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,IAAA,wBAAW,EAC3B,QAAQ,EACR,GAAG,IAAI,kBAAkB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAC1D,SAAS,EACT,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,EAAE,CAAC,4BAA4B,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,SAAgB,uBAAuB,CACrC,UAAkB,EAClB,QAAgB;IAEhB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,qCAAkB,EAAC,UAAU,CAAC,CAAC;IACrD,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAgB,0BAA0B,CACxC,UAAkB,EAClB,QAAgB,EAChB,KAAkD;IAElD,MAAM,GAAG,GAAG,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC1D,iBAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAClD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,iBAAE,CAAC,aAAa,CACd,MAAM,EACN;YACE,GAAG,KAAK,CAAC,WAAW,2BAA2B,cAAc,CAAC,QAAQ,CAAC,EAAE;YACzE,EAAE;YACF,4EAA4E;YAC5E,qEAAqE;YACrE,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist-cjs/host/n8n/api-key.js

@@ -0,0 +1,314 @@
+"use strict";
+/**
+ * Provisionnement silencieux d’une API key n8n (REST public /api/v1).
+ * Gold TempoFlow — labels / fichier paramétrables par marque.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.N8N_HERMES_API_SCOPES = void 0;
+exports.n8nApiKeyPath = n8nApiKeyPath;
+exports.readStoredN8nApiKey = readStoredN8nApiKey;
+exports.writeStoredN8nApiKey = writeStoredN8nApiKey;
+exports.n8nNeedsOwnerSetup = n8nNeedsOwnerSetup;
+exports.n8nLoginSucceeded = n8nLoginSucceeded;
+exports.cookieHeaderFromSetCookie = cookieHeaderFromSetCookie;
+exports.n8nHttpJson = n8nHttpJson;
+exports.extractRawN8nApiKey = extractRawN8nApiKey;
+exports.fetchN8nApiKeyScopes = fetchN8nApiKeyScopes;
+exports.ensureN8nApiKey = ensureN8nApiKey;
+exports.getN8nBridgeEnv = getN8nBridgeEnv;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_http_1 = __importDefault(require("node:http"));
+const node_path_1 = __importDefault(require("node:path"));
+/** Scopes minimaux pour piloter workflows (community / self-hosted). */
+exports.N8N_HERMES_API_SCOPES = [
+    "workflow:create",
+    "workflow:read",
+    "workflow:update",
+    "workflow:delete",
+    "workflow:list",
+    "workflow:move",
+    "workflow:execute",
+    "execution:read",
+    "execution:list",
+    "execution:delete",
+    "tag:create",
+    "tag:read",
+    "tag:update",
+    "tag:delete",
+    "tag:list",
+    "project:list",
+    "project:read",
+    "credential:create",
+    "credential:read",
+    "credential:update",
+    "credential:delete",
+    "credential:list",
+    "variable:list",
+    "variable:read",
+];
+function n8nApiKeyPath(homeDir, brand) {
+    return node_path_1.default.join(homeDir, brand.fileName);
+}
+function readStoredN8nApiKey(homeDir, brand) {
+    try {
+        const raw = JSON.parse(node_fs_1.default.readFileSync(n8nApiKeyPath(homeDir, brand), "utf8"));
+        if (raw && typeof raw.apiKey === "string" && raw.apiKey.length >= 16) {
+            return raw;
+        }
+    }
+    catch {
+        /* absent */
+    }
+    return null;
+}
+function writeStoredN8nApiKey(homeDir, brand, data) {
+    node_fs_1.default.mkdirSync(homeDir, { recursive: true });
+    node_fs_1.default.writeFileSync(n8nApiKeyPath(homeDir, brand), `${JSON.stringify(data, null, 2)}\n`, { mode: 0o600 });
+}
+/**
+ * Instance n8n vierge ? Lit `/rest/settings` :
+ * `data.userManagement.showSetupOnFirstLoad` (true = owner à créer).
+ * null = signal indisponible (vieux n8n / réponse inattendue).
+ */
+function n8nNeedsOwnerSetup(settingsJson) {
+    if (!settingsJson || typeof settingsJson !== "object")
+        return null;
+    const data = settingsJson.data;
+    if (!data || typeof data !== "object")
+        return null;
+    const um = data.userManagement;
+    if (!um || typeof um !== "object")
+        return null;
+    const flag = um.showSetupOnFirstLoad;
+    return typeof flag === "boolean" ? flag : null;
+}
+/**
+ * Login n8n réellement authentifié = 2xx ET cookie de session `n8n-auth`.
+ * Une instance vierge (pré-owner-setup) répond 200 à `/rest/login` avec le
+ * shell user SANS cookie — un simple test de status crée un faux positif
+ * (vécu : « owner: login OK » sur instance non initialisée, owner jamais
+ * provisionné).
+ */
+function n8nLoginSucceeded(status, setCookie) {
+    if (status < 200 || status >= 300)
+        return false;
+    return cookieHeaderFromSetCookie(setCookie).includes("n8n-auth=");
+}
+function cookieHeaderFromSetCookie(setCookie) {
+    const lines = !setCookie
+        ? []
+        : Array.isArray(setCookie)
+            ? setCookie
+            : [setCookie];
+    const parts = [];
+    for (const line of lines) {
+        const nameVal = String(line).split(";")[0] || "";
+        if (nameVal.includes("="))
+            parts.push(nameVal.trim());
+    }
+    return parts.join("; ");
+}
+function n8nHttpJson(method, url, body, headers) {
+    return new Promise((resolve, reject) => {
+        const u = new URL(url);
+        const payload = body === undefined ? null : JSON.stringify(body);
+        const req = node_http_1.default.request({
+            hostname: u.hostname,
+            port: u.port,
+            path: `${u.pathname}${u.search}`,
+            method,
+            headers: {
+                Accept: "application/json",
+                ...(payload
+                    ? {
+                        "Content-Type": "application/json",
+                        "Content-Length": Buffer.byteLength(payload),
+                    }
+                    : {}),
+                ...headers,
+            },
+            timeout: 20000,
+        }, (res) => {
+            const chunks = [];
+            res.on("data", (c) => chunks.push(c));
+            res.on("end", () => {
+                const raw = Buffer.concat(chunks).toString("utf8");
+                let json = null;
+                try {
+                    json = raw ? JSON.parse(raw) : null;
+                }
+                catch {
+                    json = null;
+                }
+                resolve({
+                    status: res.statusCode || 0,
+                    json,
+                    headers: res.headers,
+                    raw,
+                });
+            });
+        });
+        req.on("error", reject);
+        req.on("timeout", () => {
+            req.destroy();
+            reject(new Error("n8n api-key timeout"));
+        });
+        if (payload)
+            req.write(payload);
+        req.end();
+    });
+}
+function extractRawN8nApiKey(json) {
+    if (!json || typeof json !== "object")
+        return null;
+    const o = json;
+    const apiKey = (typeof o.rawApiKey === "string" && o.rawApiKey) ||
+        (typeof o.apiKey === "string" && o.apiKey) ||
+        (typeof o.data === "object" &&
+            o.data &&
+            typeof o.data.rawApiKey === "string"
+            ? o.data.rawApiKey
+            : null);
+    if (!apiKey || apiKey.length < 16)
+        return null;
+    const id = typeof o.id === "string"
+        ? o.id
+        : typeof o.id === "number"
+            ? String(o.id)
+            : undefined;
+    return { id, apiKey };
+}
+async function fetchN8nApiKeyScopes(base, cookie) {
+    try {
+        const res = await n8nHttpJson("GET", `${base}/rest/api-keys/scopes`, undefined, { Cookie: cookie });
+        if (res.status >= 200 && res.status < 300) {
+            const arr = Array.isArray(res.json)
+                ? res.json
+                : Array.isArray(res.json?.data)
+                    ? res.json.data
+                    : null;
+            if (arr?.length) {
+                return arr.map(String).filter((s) => /^[a-zA-Z]+:[a-zA-Z]+$/.test(s));
+            }
+        }
+    }
+    catch {
+        /* fallback */
+    }
+    return [...exports.N8N_HERMES_API_SCOPES];
+}
+async function ensureN8nApiKey(opts) {
+    const log = opts.log || (() => { });
+    const brand = opts.brand;
+    const existing = readStoredN8nApiKey(opts.homeDir, brand);
+    if (existing && !opts.forceNew) {
+        log(`api-key: réutilise clé ${brand.label} (fichier local)`);
+        return {
+            ok: true,
+            apiKey: existing.apiKey,
+            detail: "clé n8n déjà provisionnée",
+        };
+    }
+    const base = opts.uiUrl.replace(/\/$/, "");
+    try {
+        const login = await n8nHttpJson("POST", `${base}/rest/login`, {
+            emailOrLdapLoginId: opts.email,
+            password: opts.password,
+        });
+        if (!(login.status >= 200 && login.status < 300)) {
+            return {
+                ok: false,
+                apiKey: null,
+                detail: `login n8n HTTP ${login.status}`,
+            };
+        }
+        const cookie = cookieHeaderFromSetCookie(login.headers["set-cookie"]);
+        if (!cookie) {
+            return { ok: false, apiKey: null, detail: "login OK sans cookie" };
+        }
+        const scopes = await fetchN8nApiKeyScopes(base, cookie);
+        const create = await n8nHttpJson("POST", `${base}/rest/api-keys`, {
+            label: brand.label,
+            expiresAt: null,
+            scopes,
+        }, { Cookie: cookie });
+        if (!(create.status >= 200 && create.status < 300)) {
+            const retry = await n8nHttpJson("POST", `${base}/rest/api-keys`, {
+                label: brand.label,
+                expiresAt: null,
+                scopes: [
+                    "workflow:create",
+                    "workflow:read",
+                    "workflow:update",
+                    "workflow:delete",
+                    "workflow:list",
+                    "execution:read",
+                    "execution:list",
+                ],
+            }, { Cookie: cookie });
+            if (!(retry.status >= 200 && retry.status < 300)) {
+                return {
+                    ok: false,
+                    apiKey: null,
+                    detail: `création API key HTTP ${create.status}/${retry.status}: ${retry.raw.slice(0, 200)}`,
+                };
+            }
+            const parsedRetry = extractRawN8nApiKey(retry.json);
+            if (!parsedRetry) {
+                return {
+                    ok: false,
+                    apiKey: null,
+                    detail: "API key créée mais rawApiKey absent",
+                };
+            }
+            writeStoredN8nApiKey(opts.homeDir, brand, {
+                id: parsedRetry.id,
+                label: brand.label,
+                apiKey: parsedRetry.apiKey,
+                createdAt: new Date().toISOString(),
+            });
+            log("api-key: provisionnée (scopes minimaux)");
+            return {
+                ok: true,
+                apiKey: parsedRetry.apiKey,
+                detail: "clé n8n créée",
+            };
+        }
+        const parsed = extractRawN8nApiKey(create.json);
+        if (!parsed) {
+            return {
+                ok: false,
+                apiKey: null,
+                detail: "API key créée mais rawApiKey absent",
+            };
+        }
+        writeStoredN8nApiKey(opts.homeDir, brand, {
+            id: parsed.id,
+            label: brand.label,
+            apiKey: parsed.apiKey,
+            createdAt: new Date().toISOString(),
+        });
+        log("api-key: provisionnée pour Hermes");
+        return { ok: true, apiKey: parsed.apiKey, detail: "clé n8n créée" };
+    }
+    catch (e) {
+        const detail = e instanceof Error ? e.message : String(e);
+        return { ok: false, apiKey: null, detail };
+    }
+}
+function getN8nBridgeEnv(opts) {
+    const stored = readStoredN8nApiKey(opts.homeDir, opts.brand);
+    const base = opts.localUiUrl.replace(/\/$/, "");
+    const out = {
+        N8N_BASE_URL: base,
+        N8N_API_URL: `${base}/api/v1`,
+    };
+    if (stored?.apiKey) {
+        out.N8N_API_KEY = stored.apiKey;
+    }
+    return out;
+}
+//# sourceMappingURL=api-key.js.map

package/dist-cjs/host/n8n/api-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key.js","sourceRoot":"","sources":["../../../src/host/n8n/api-key.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AAgDH,sCAEC;AAED,kDAeC;AAED,oDAWC;AAOD,gDAQC;AASD,8CAMC;AAED,8DAcC;AAED,kCA4DC;AAED,kDAqBC;AAED,oDAyBC;AAED,0CAuHC;AAED,0CAeC;AAtXD,sDAAyB;AACzB,0DAA6B;AAC7B,0DAA6B;AAE7B,wEAAwE;AAC3D,QAAA,qBAAqB,GAAG;IACnC,iBAAiB;IACjB,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,iBAAiB;IACjB,eAAe;IACf,eAAe;CACP,CAAC;AAgBX,SAAgB,aAAa,CAAC,OAAe,EAAE,KAAqB;IAClE,OAAO,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,SAAgB,mBAAmB,CACjC,OAAe,EACf,KAAqB;IAErB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,iBAAE,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CACpC,CAAC;QACrB,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACrE,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,oBAAoB,CAClC,OAAe,EACf,KAAqB,EACrB,IAAqB;IAErB,iBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,iBAAE,CAAC,aAAa,CACd,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,EAC7B,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACpC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,YAAqB;IACtD,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,IAAI,GAAI,YAAmC,CAAC,IAAI,CAAC;IACvD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,EAAE,GAAI,IAAqC,CAAC,cAAc,CAAC;IACjE,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,IAAI,GAAI,EAAyC,CAAC,oBAAoB,CAAC;IAC7E,OAAO,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAC/B,MAAc,EACd,SAAwC;IAExC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,yBAAyB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,yBAAyB,CACvC,SAAwC;IAExC,MAAM,KAAK,GAAG,CAAC,SAAS;QACtB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAgB,WAAW,CACzB,MAAc,EACd,GAAW,EACX,IAAc,EACd,OAAgC;IAOhC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CACtB;YACE,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE;YAChC,MAAM;YACN,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,OAAO;oBACT,CAAC,CAAC;wBACE,cAAc,EAAE,kBAAkB;wBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;qBAC7C;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,OAAO;aACX;YACD,OAAO,EAAE,KAAK;SACf,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnD,IAAI,IAAI,GAAY,IAAI,CAAC;gBACzB,IAAI,CAAC;oBACH,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,IAAI;oBACJ,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,GAAG;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,mBAAmB,CACjC,IAAa;IAEb,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,MAAM,GACV,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC;QAChD,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC;QAC1C,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAC3B,CAAC,CAAC,IAAI;YACN,OAAQ,CAAC,CAAC,IAA+B,CAAC,SAAS,KAAK,QAAQ;YAC9D,CAAC,CAAE,CAAC,CAAC,IAA8B,CAAC,SAAS;YAC7C,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,EAAE,GACN,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACtB,CAAC,CAAC,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YACxB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACd,CAAC,CAAC,SAAS,CAAC;IAClB,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACxB,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,WAAW,CAC3B,KAAK,EACL,GAAG,IAAI,uBAAuB,EAC9B,SAAS,EACT,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBACjC,CAAC,CAAC,GAAG,CAAC,IAAI;gBACV,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,GAAG,CAAC,IAA2B,EAAE,IAAI,CAAC;oBACrD,CAAC,CAAE,GAAG,CAAC,IAA4B,CAAC,IAAI;oBACxC,CAAC,CAAC,IAAI,CAAC;YACX,IAAI,GAAG,EAAE,MAAM,EAAE,CAAC;gBAChB,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,OAAO,CAAC,GAAG,6BAAqB,CAAC,CAAC;AACpC,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,IAQrC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1D,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,0BAA0B,KAAK,CAAC,KAAK,kBAAkB,CAAC,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,2BAA2B;SACpC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE;YAC5D,kBAAkB,EAAE,IAAI,CAAC,KAAK;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,kBAAkB,KAAK,CAAC,MAAM,EAAE;aACzC,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,EACN,GAAG,IAAI,gBAAgB,EACvB;YACE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI;YACf,MAAM;SACP,EACD,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QAEF,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,MAAM,EACN,GAAG,IAAI,gBAAgB,EACvB;gBACE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE;oBACN,iBAAiB;oBACjB,eAAe;oBACf,iBAAiB;oBACjB,iBAAiB;oBACjB,eAAe;oBACf,gBAAgB;oBAChB,gBAAgB;iBACjB;aACF,EACD,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;YACF,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;gBACjD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,yBAAyB,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;iBAC7F,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,qCAAqC;iBAC9C,CAAC;YACJ,CAAC;YACD,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE;gBACxC,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,GAAG,CAAC,yCAAyC,CAAC,CAAC;YAC/C,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,MAAM,EAAE,eAAe;aACxB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,qCAAqC;aAC9C,CAAC;QACJ,CAAC;QACD,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE;YACxC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAAC,IAI/B;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAA2B;QAClC,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,GAAG,IAAI,SAAS;KAC9B,CAAC;IACF,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}