@dcyfr/ai 1.0.4 → 2.1.1

package/dist/ai/permissions/attenuation-engine.js

@@ -0,0 +1,511 @@
+/**
+ * DCYFR Permission Attenuation Engine
+ * TLP:AMBER - Internal Use Only
+ *
+ * Implements hierarchical permission token attenuation with least-privilege enforcement.
+ * Ensures delegated permissions are always a proper subset of parent permissions.
+ *
+ * @module permissions/attenuation-engine
+ * @version 1.0.0
+ * @date 2026-02-13
+ */
+import { randomUUID } from 'crypto';
+/**
+ * Permission Attenuation Engine
+ *
+ * Enforces least-privilege principle by ensuring delegated permissions
+ * are always strictly reduced from parent permissions.
+ */
+export class PermissionAttenuationEngine {
+    debugMode;
+    constructor(options = {}) {
+        this.debugMode = options.debug ?? false;
+    }
+    /**
+     * Attenuate a permission token to create a child token with reduced permissions
+     *
+     * @param parentToken - The parent token to attenuate
+     * @param request - Attenuation request parameters
+     * @returns Attenuated child token
+     * @throws Error if attenuation violates least-privilege constraints
+     */
+    async attenuate(parentToken, request) {
+        this.log(`Attenuating token ${parentToken.token_id} for ${request.new_holder}`);
+        // Validate parent token is active and delegatable
+        this.validateParentToken(parentToken);
+        // Validate attenuation request
+        const validation = this.validateAttenuation(parentToken, request);
+        if (!validation.valid) {
+            throw new Error(`Attenuation validation failed: ${validation.errors.join(', ')}`);
+        }
+        // Log warnings
+        validation.warnings.forEach(warning => this.log(`Warning: ${warning}`));
+        // Create attenuated child token
+        const childToken = this.createChildToken(parentToken, request);
+        this.log(`Created child token ${childToken.token_id} with depth ${childToken.delegation_depth}`);
+        return childToken;
+    }
+    /**
+     * Validate parent token is suitable for attenuation
+     */
+    validateParentToken(token) {
+        if (token.status !== 'active') {
+            throw new Error(`Cannot attenuate ${token.status} token`);
+        }
+        if (!token.delegatable) {
+            throw new Error('Token is not delegatable');
+        }
+        if (token.delegation_depth >= token.max_delegation_depth) {
+            throw new Error(`Maximum delegation depth ${token.max_delegation_depth} reached`);
+        }
+        // Check if token has expired
+        if (token.expires_at && new Date(token.expires_at) < new Date()) {
+            throw new Error('Token has expired');
+        }
+        // Check count constraints
+        const countConstraint = token.constraints?.find(c => c.type === 'count');
+        if (countConstraint) {
+            const params = countConstraint.parameters;
+            if (params.current_uses !== undefined && params.current_uses >= params.max_uses) {
+                throw new Error('Token usage limit exhausted');
+            }
+        }
+    }
+    /**
+     * Validate attenuation request follows least-privilege principles
+     */
+    validateAttenuation(parentToken, request) {
+        const errors = [];
+        const warnings = [];
+        // Validate scopes are subset or more specific
+        const scopeValidation = this.validateScopeAttenuation(parentToken.scopes, request.scopes);
+        if (!scopeValidation.valid) {
+            errors.push(...scopeValidation.errors);
+        }
+        warnings.push(...scopeValidation.warnings);
+        // Validate actions are subset
+        const actionValidation = this.validateActionAttenuation(parentToken.actions, request.actions || parentToken.actions);
+        if (!actionValidation.valid) {
+            errors.push(...actionValidation.errors);
+        }
+        // Validate resources are subset
+        const resourceValidation = this.validateResourceAttenuation(parentToken.resources, parentToken.resource_patterns, request.resources);
+        if (!resourceValidation.valid) {
+            errors.push(...resourceValidation.errors);
+        }
+        // Validate constraints are more restrictive
+        const constraintValidation = this.validateConstraintAttenuation(parentToken.constraints, request.additional_constraints);
+        if (!constraintValidation.valid) {
+            errors.push(...constraintValidation.errors);
+        }
+        // Validate delegation depth
+        const depthValid = this.validateDelegationDepth(parentToken);
+        if (!depthValid) {
+            errors.push(`Delegation depth limit reached (${parentToken.max_delegation_depth})`);
+        }
+        // Validate expiration
+        const expirationValidation = this.validateExpiration(parentToken.expires_at, request.expires_at);
+        if (!expirationValidation.valid) {
+            errors.push(...expirationValidation.errors);
+        }
+        warnings.push(...expirationValidation.warnings);
+        return {
+            valid: errors.length === 0,
+            errors,
+            warnings,
+            field_validations: {
+                scopes: scopeValidation.valid,
+                actions: actionValidation.valid,
+                resources: resourceValidation.valid,
+                constraints: constraintValidation.valid,
+                delegation_depth: depthValid,
+                expiration: expirationValidation.valid,
+            },
+        };
+    }
+    /**
+     * Validate scope attenuation (hierarchical)
+     *
+     * Child scopes must be equal to or more specific than parent scopes.
+     * Examples:
+     * - "workspace.read" → "workspace.read.code" ✓
+     * - "workspace.read.code" → "workspace.read" ✗
+     * - "workspace.read" → "workspace.write" ✗
+     */
+    validateScopeAttenuation(parentScopes, childScopes) {
+        const errors = [];
+        const warnings = [];
+        if (childScopes.length === 0) {
+            errors.push('Child scopes cannot be empty');
+            return { valid: false, errors, warnings };
+        }
+        for (const childScope of childScopes) {
+            // Check if child scope is covered by at least one parent scope
+            const isCovered = parentScopes.some(parentScope => this.isScopeAttenuation(parentScope, childScope));
+            if (!isCovered) {
+                errors.push(`Scope '${childScope}' is not covered by parent scopes: ${parentScopes.join(', ')}`);
+            }
+        }
+        // Warn if significantly reducing scopes
+        if (childScopes.length < parentScopes.length / 2) {
+            warnings.push(`Significantly reducing scopes from ${parentScopes.length} to ${childScopes.length}`);
+        }
+        return { valid: errors.length === 0, errors, warnings };
+    }
+    /**
+     * Check if childScope is a valid attenuation of parentScope
+     *
+     * Valid attenuations:
+     * - Exact match: "workspace.read" === "workspace.read"
+     * - More specific: "workspace.read.code" extends "workspace.read"
+     */
+    isScopeAttenuation(parentScope, childScope) {
+        // Exact match is valid
+        if (parentScope === childScope) {
+            return true;
+        }
+        // Child must be more specific (longer hierarchical path)
+        // Example: parent "workspace.read", child "workspace.read.code" ✓
+        if (childScope.startsWith(parentScope + '.')) {
+            return true;
+        }
+        // Wildcard support: "workspace.*" covers "workspace.read"
+        if (parentScope.endsWith('.*')) {
+            const baseScope = parentScope.slice(0, -2);
+            return childScope.startsWith(baseScope);
+        }
+        return false;
+    }
+    /**
+     * Validate action attenuation
+     *
+     * Child actions must be a subset of parent actions.
+     * Action hierarchy: manage > create/delete > write > read/execute
+     */
+    validateActionAttenuation(parentActions, childActions) {
+        const errors = [];
+        if (childActions.length === 0) {
+            errors.push('Child actions cannot be empty');
+            return { valid: false, errors };
+        }
+        for (const childAction of childActions) {
+            if (!parentActions.includes(childAction)) {
+                // Check if parent has a higher-level action that implies this action
+                const impliedByParent = this.actionImpliedBy(childAction, parentActions);
+                if (!impliedByParent) {
+                    errors.push(`Action '${childAction}' not permitted by parent actions: ${parentActions.join(', ')}`);
+                }
+            }
+        }
+        return { valid: errors.length === 0, errors };
+    }
+    /**
+     * Check if an action is implied by higher-level actions
+     *
+     * Example: 'manage' implies all actions EXCEPT 'delegate'
+     * 'delegate' requires explicit granting for security
+     */
+    actionImpliedBy(action, parentActions) {
+        // 'delegate' requires explicit granting (never implied)
+        if (action === 'delegate') {
+            return parentActions.includes('delegate');
+        }
+        // 'manage' implies all other actions (except delegate, handled above)
+        if (parentActions.includes('manage')) {
+            return true;
+        }
+        // 'write' implies 'read'
+        if (action === 'read' && parentActions.includes('write')) {
+            return true;
+        }
+        // 'delete' implies 'write'
+        if (action === 'write' && parentActions.includes('delete')) {
+            return true;
+        }
+        // 'create' implies 'write'
+        if (action === 'write' && parentActions.includes('create')) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Validate resource attenuation
+     *
+     * Child resources must be a subset of parent resources or match patterns.
+     */
+    validateResourceAttenuation(parentResources, parentPatterns, childResources) {
+        const errors = [];
+        // If parent has no resource restrictions, child can specify any
+        if (!parentResources && !parentPatterns) {
+            return { valid: true, errors };
+        }
+        // If child has no resources, it inherits parent's (valid)
+        if (!childResources) {
+            return { valid: true, errors };
+        }
+        // Check each child resource is covered by parent
+        for (const childResource of childResources) {
+            const covered = (parentResources && parentResources.includes(childResource)) ||
+                (parentResources && this.matchesPatterns(childResource, parentResources)) ||
+                (parentPatterns && this.matchesPatterns(childResource, parentPatterns));
+            if (!covered) {
+                errors.push(`Resource '${childResource}' not covered by parent resources/patterns`);
+            }
+        }
+        return { valid: errors.length === 0, errors };
+    }
+    /**
+     * Check if a resource matches any of the given patterns
+     *
+     * Supports glob-style patterns: *, **, ?
+     * Also supports hierarchical path matching (e.g., /src/** matches /src/utils/**)
+     */
+    matchesPatterns(resource, patterns) {
+        return patterns.some(pattern => {
+            // Special case: /path/** should match /path/anything/nested/**
+            if (pattern.endsWith('/**')) {
+                const basePath = pattern.slice(0, -3);
+                if (resource.startsWith(basePath + '/')) {
+                    return true;
+                }
+            }
+            // Convert glob pattern to regex
+            const regexPattern = pattern
+                .replace(/\*\*/g, '.*') // ** matches any path
+                .replace(/\*/g, '[^/]*') // * matches any non-slash
+                .replace(/\?/g, '.'); // ? matches single char
+            const regex = new RegExp(`^${regexPattern}$`);
+            return regex.test(resource);
+        });
+    }
+    /**
+     * Validate constraint attenuation
+     *
+     * Additional constraints can only make permissions MORE restrictive.
+     */
+    validateConstraintAttenuation(parentConstraints, additionalConstraints) {
+        const errors = [];
+        // Additional constraints are always valid (they only restrict further)
+        // However, we validate they don't contradict existing constraints
+        if (!additionalConstraints || additionalConstraints.length === 0) {
+            return { valid: true, errors };
+        }
+        // Check for contradictory constraints
+        for (const newConstraint of additionalConstraints) {
+            const existing = parentConstraints?.find(c => c.type === newConstraint.type);
+            if (existing) {
+                // Validate new constraint is more restrictive
+                const moreRestrictive = this.isMoreRestrictive(existing, newConstraint);
+                if (!moreRestrictive) {
+                    errors.push(`New ${newConstraint.type} constraint is less restrictive than parent constraint`);
+                }
+            }
+        }
+        return { valid: errors.length === 0, errors };
+    }
+    /**
+     * Check if new constraint is more restrictive than existing
+     */
+    isMoreRestrictive(existing, newConstraint) {
+        switch (existing.type) {
+            case 'count': {
+                const existingMax = existing.parameters.max_uses;
+                const newMax = newConstraint.parameters.max_uses;
+                return newMax <= existingMax;
+            }
+            case 'rate': {
+                const existingRate = existing.parameters.max_operations;
+                const newRate = newConstraint.parameters.max_operations;
+                return newRate <= existingRate;
+            }
+            case 'size': {
+                const existingSize = existing.parameters.max_size_bytes;
+                const newSize = newConstraint.parameters.max_size_bytes;
+                return newSize <= existingSize;
+            }
+            case 'time': {
+                const existingEnd = existing.parameters.end_time;
+                const newEnd = newConstraint.parameters.end_time;
+                if (!existingEnd || !newEnd) {
+                    return true; // Can't compare, assume valid
+                }
+                return new Date(newEnd) <= new Date(existingEnd);
+            }
+            default:
+                // Custom constraints - assume valid
+                return true;
+        }
+    }
+    /**
+     * Validate delegation depth
+     */
+    validateDelegationDepth(parentToken) {
+        return parentToken.delegation_depth + 1 <= parentToken.max_delegation_depth;
+    }
+    /**
+     * Validate expiration time
+     */
+    validateExpiration(parentExpiration, childExpiration) {
+        const errors = [];
+        const warnings = [];
+        // If parent has no expiration, child can set any
+        if (!parentExpiration) {
+            return { valid: true, errors, warnings };
+        }
+        // If child has no expiration, it inherits parent's
+        if (!childExpiration) {
+            return { valid: true, errors, warnings };
+        }
+        // Child expiration cannot exceed parent
+        const parentDate = new Date(parentExpiration);
+        const childDate = new Date(childExpiration);
+        if (childDate > parentDate) {
+            errors.push(`Child expiration (${childExpiration}) exceeds parent expiration (${parentExpiration})`);
+        }
+        // Warn if child expiration is very close to parent
+        const timeDiff = parentDate.getTime() - childDate.getTime();
+        if (timeDiff < 60000) { // Less than 1 minute difference
+            warnings.push('Child expiration is very close to parent expiration');
+        }
+        return { valid: errors.length === 0, errors, warnings };
+    }
+    /**
+     * Create child token from parent and request
+     */
+    createChildToken(parentToken, request) {
+        const childTokenId = randomUUID();
+        const now = new Date().toISOString();
+        // Merge constraints: parent + additional
+        const mergedConstraints = [
+            ...(parentToken.constraints || []),
+            ...(request.additional_constraints || []),
+        ];
+        // Merge revocation conditions
+        const mergedRevocationConditions = [
+            ...(parentToken.revocation_conditions || []),
+            ...(request.additional_revocation_conditions || []),
+        ];
+        const childToken = {
+            token_id: childTokenId,
+            version: '1.0.0',
+            status: 'active',
+            holder: request.new_holder,
+            issuer: parentToken.holder, // Parent holder becomes issuer
+            scopes: request.scopes,
+            actions: request.actions || parentToken.actions,
+            resource_types: parentToken.resource_types,
+            resources: request.resources || parentToken.resources,
+            resource_patterns: parentToken.resource_patterns,
+            constraints: mergedConstraints.length > 0 ? mergedConstraints : undefined,
+            revocation_conditions: mergedRevocationConditions.length > 0 ? mergedRevocationConditions : undefined,
+            expires_at: request.expires_at || parentToken.expires_at,
+            delegatable: request.delegatable ?? false, // Default to non-delegatable for safety
+            max_delegation_depth: parentToken.max_delegation_depth,
+            delegation_depth: parentToken.delegation_depth + 1,
+            parent_token_id: parentToken.token_id,
+            grant: {
+                granted_by: parentToken.holder,
+                granted_at: now,
+                reason: request.reason,
+                authorization_source: parentToken.token_id,
+            },
+            metadata: request.metadata,
+            created_at: now,
+        };
+        return childToken;
+    }
+    /**
+     * Check if a permission hierarchy is valid (all tokens properly attenuated)
+     *
+     * @param tokens - Array of tokens from root to leaf
+     * @returns Validation result with any violations
+     */
+    validateHierarchy(tokens) {
+        const violations = [];
+        for (let i = 1; i < tokens.length; i++) {
+            const parent = tokens[i - 1];
+            const child = tokens[i];
+            // Verify parent-child relationship
+            if (child.parent_token_id !== parent.token_id) {
+                violations.push({
+                    tokenIndex: i,
+                    error: `Token ${child.token_id} parent_token_id mismatch`,
+                });
+            }
+            // Verify delegation depth increases
+            if (child.delegation_depth !== parent.delegation_depth + 1) {
+                violations.push({
+                    tokenIndex: i,
+                    error: `Invalid delegation depth: parent=${parent.delegation_depth}, child=${child.delegation_depth}`,
+                });
+            }
+            // Verify scopes are properly attenuated
+            const scopeValidation = this.validateScopeAttenuation(parent.scopes, child.scopes);
+            if (!scopeValidation.valid) {
+                violations.push({
+                    tokenIndex: i,
+                    error: `Scope violation: ${scopeValidation.errors.join(', ')}`,
+                });
+            }
+        }
+        return {
+            valid: violations.length === 0,
+            violations,
+        };
+    }
+    /**
+     * Calculate effective permissions for a token (considering all parent constraints)
+     *
+     * @param token - Token to analyze
+     * @param parentTokens - Array of parent tokens (from root to immediate parent)
+     * @returns Effective permissions merging all hierarchical constraints
+     */
+    calculateEffectivePermissions(token, parentTokens) {
+        // Start with token's own permissions
+        let effectiveScopes = [...token.scopes];
+        let effectiveActions = [...token.actions];
+        let effectiveResources = [...(token.resources || [])];
+        const effectiveConstraints = [...(token.constraints || [])];
+        // Apply each parent's restrictions
+        for (const parent of parentTokens) {
+            // Intersect scopes (keep only scopes covered by parent)
+            effectiveScopes = effectiveScopes.filter(childScope => parent.scopes.some(parentScope => this.isScopeAttenuation(parentScope, childScope)));
+            // Intersect actions
+            effectiveActions = effectiveActions.filter(action => parent.actions.includes(action) || this.actionImpliedBy(action, parent.actions));
+            // Intersect resources
+            if (parent.resources && parent.resources.length > 0) {
+                effectiveResources = effectiveResources.filter(resource => parent.resources.includes(resource) ||
+                    (parent.resource_patterns &&
+                        this.matchesPatterns(resource, parent.resource_patterns)));
+            }
+            // Merge constraints (most restrictive wins)
+            for (const parentConstraint of parent.constraints || []) {
+                const existingIndex = effectiveConstraints.findIndex(c => c.type === parentConstraint.type);
+                if (existingIndex >= 0) {
+                    // Keep more restrictive constraint
+                    if (!this.isMoreRestrictive(parentConstraint, effectiveConstraints[existingIndex])) {
+                        effectiveConstraints[existingIndex] = parentConstraint;
+                    }
+                }
+                else {
+                    effectiveConstraints.push(parentConstraint);
+                }
+            }
+        }
+        return {
+            effectiveScopes,
+            effectiveActions,
+            effectiveResources,
+            effectiveConstraints,
+        };
+    }
+    /**
+     * Log debug messages
+     */
+    log(message) {
+        if (this.debugMode) {
+            console.log(`[AttenuationEngine] ${message}`);
+        }
+    }
+}
+//# sourceMappingURL=attenuation-engine.js.map

package/dist/ai/permissions/attenuation-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attenuation-engine.js","sourceRoot":"","sources":["../../../packages/ai/permissions/attenuation-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAkCpC;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IAC9B,SAAS,CAAU;IAE3B,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CACb,WAA4B,EAC5B,OAAmC;QAEnC,IAAI,CAAC,GAAG,CAAC,qBAAqB,WAAW,CAAC,QAAQ,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAEhF,kDAAkD;QAClD,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAEtC,+BAA+B;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAElE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,eAAe;QACf,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC,CAAC;QAExE,gCAAgC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAE/D,IAAI,CAAC,GAAG,CAAC,uBAAuB,UAAU,CAAC,QAAQ,eAAe,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEjG,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,KAAsB;QAChD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,oBAAoB,UAAU,CAAC,CAAC;QACpF,CAAC;QAED,6BAA6B;QAC7B,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QAED,0BAA0B;QAC1B,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACzE,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,eAAe,CAAC,UAAyD,CAAC;YACzF,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,WAA4B,EAC5B,OAAmC;QAEnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,8CAA8C;QAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE3C,8BAA8B;QAC9B,MAAM,gBAAgB,GAAG,IAAI,CAAC,yBAAyB,CACrD,WAAW,CAAC,OAAO,EACnB,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CACvC,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,gCAAgC;QAChC,MAAM,kBAAkB,GAAG,IAAI,CAAC,2BAA2B,CACzD,WAAW,CAAC,SAAS,EACrB,WAAW,CAAC,iBAAiB,EAC7B,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,4CAA4C;QAC5C,MAAM,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,CAC7D,WAAW,CAAC,WAAW,EACvB,OAAO,CAAC,sBAAsB,CAC/B,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,4BAA4B;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,mCAAmC,WAAW,CAAC,oBAAoB,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,sBAAsB;QACtB,MAAM,oBAAoB,GAAG,IAAI,CAAC,kBAAkB,CAClD,WAAW,CAAC,UAAU,EACtB,OAAO,CAAC,UAAU,CACnB,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAEhD,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,iBAAiB,EAAE;gBACjB,MAAM,EAAE,eAAe,CAAC,KAAK;gBAC7B,OAAO,EAAE,gBAAgB,CAAC,KAAK;gBAC/B,SAAS,EAAE,kBAAkB,CAAC,KAAK;gBACnC,WAAW,EAAE,oBAAoB,CAAC,KAAK;gBACvC,gBAAgB,EAAE,UAAU;gBAC5B,UAAU,EAAE,oBAAoB,CAAC,KAAK;aACvC;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,wBAAwB,CAC9B,YAA+B,EAC/B,WAA8B;QAE9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC5C,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,+DAA+D;YAC/D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAChD,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CACjD,CAAC;YAEF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,UAAU,UAAU,sCAAsC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,IAAI,WAAW,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,sCAAsC,YAAY,CAAC,MAAM,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACtG,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC1D,CAAC;IAED;;;;;;OAMG;IACK,kBAAkB,CAAC,WAAmB,EAAE,UAAkB;QAChE,uBAAuB;QACvB,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yDAAyD;QACzD,kEAAkE;QAClE,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0DAA0D;QAC1D,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3C,OAAO,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACK,yBAAyB,CAC/B,aAAiC,EACjC,YAAgC;QAEhC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzC,qEAAqE;gBACrE,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;gBAEzE,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CAAC,WAAW,WAAW,sCAAsC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtG,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,MAAwB,EAAE,aAAiC;QACjF,wDAAwD;QACxD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,OAAO,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QAED,sEAAsE;QACtE,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yBAAyB;QACzB,IAAI,MAAM,KAAK,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,KAAK,OAAO,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAM,KAAK,OAAO,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACK,2BAA2B,CACjC,eAAqC,EACrC,cAAoC,EACpC,cAAoC;QAEpC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,gEAAgE;QAChE,IAAI,CAAC,eAAe,IAAI,CAAC,cAAc,EAAE,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;QAED,iDAAiD;QACjD,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;YAC3C,MAAM,OAAO,GACX,CAAC,eAAe,IAAI,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBAC5D,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;gBACzE,CAAC,cAAc,IAAI,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;YAE1E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,aAAa,aAAa,4CAA4C,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,QAAgB,EAAE,QAAkB;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;YAC7B,+DAA+D;YAC/D,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;oBACxC,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,gCAAgC;YAChC,MAAM,YAAY,GAAG,OAAO;iBACzB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAK,sBAAsB;iBACjD,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAI,0BAA0B;iBACrD,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAQ,wBAAwB;YAEvD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,6BAA6B,CACnC,iBAAqD,EACrD,qBAAyD;QAEzD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,uEAAuE;QACvE,kEAAkE;QAElE,IAAI,CAAC,qBAAqB,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;QAED,sCAAsC;QACtC,KAAK,MAAM,aAAa,IAAI,qBAAqB,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC;YAE7E,IAAI,QAAQ,EAAE,CAAC;gBACb,8CAA8C;gBAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBAExE,IAAI,CAAC,eAAe,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CACT,OAAO,aAAa,CAAC,IAAI,wDAAwD,CAClF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,QAA8B,EAC9B,aAAmC;QAEnC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,WAAW,GAAI,QAAQ,CAAC,UAAmC,CAAC,QAAQ,CAAC;gBAC3E,MAAM,MAAM,GAAI,aAAa,CAAC,UAAmC,CAAC,QAAQ,CAAC;gBAC3E,OAAO,MAAM,IAAI,WAAW,CAAC;YAC/B,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,YAAY,GAAI,QAAQ,CAAC,UAAyC,CAAC,cAAc,CAAC;gBACxF,MAAM,OAAO,GAAI,aAAa,CAAC,UAAyC,CAAC,cAAc,CAAC;gBACxF,OAAO,OAAO,IAAI,YAAY,CAAC;YACjC,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,YAAY,GAAI,QAAQ,CAAC,UAAyC,CAAC,cAAc,CAAC;gBACxF,MAAM,OAAO,GAAI,aAAa,CAAC,UAAyC,CAAC,cAAc,CAAC;gBACxF,OAAO,OAAO,IAAI,YAAY,CAAC;YACjC,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,WAAW,GAAI,QAAQ,CAAC,UAAoC,CAAC,QAAQ,CAAC;gBAC5E,MAAM,MAAM,GAAI,aAAa,CAAC,UAAoC,CAAC,QAAQ,CAAC;gBAE5E,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC5B,OAAO,IAAI,CAAC,CAAC,8BAA8B;gBAC7C,CAAC;gBAED,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;YACnD,CAAC;YAED;gBACE,oCAAoC;gBACpC,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,WAA4B;QAC1D,OAAO,WAAW,CAAC,gBAAgB,GAAG,CAAC,IAAI,WAAW,CAAC,oBAAoB,CAAC;IAC9E,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,gBAAoC,EACpC,eAAmC;QAEnC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,iDAAiD;QACjD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QAED,wCAAwC;QACxC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;QAE5C,IAAI,SAAS,GAAG,UAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACT,qBAAqB,eAAe,gCAAgC,gBAAgB,GAAG,CACxF,CAAC;QACJ,CAAC;QAED,mDAAmD;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QAC5D,IAAI,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,gCAAgC;YACtD,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC1D,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,WAA4B,EAC5B,OAAmC;QAEnC,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,yCAAyC;QACzC,MAAM,iBAAiB,GAAG;YACxB,GAAG,CAAC,WAAW,CAAC,WAAW,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC;SAC1C,CAAC;QAEF,8BAA8B;QAC9B,MAAM,0BAA0B,GAAG;YACjC,GAAG,CAAC,WAAW,CAAC,qBAAqB,IAAI,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,gCAAgC,IAAI,EAAE,CAAC;SACpD,CAAC;QAEF,MAAM,UAAU,GAAoB;YAClC,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,OAAO,CAAC,UAAU;YAC1B,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,+BAA+B;YAC3D,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO;YAC/C,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;YACrD,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;YAChD,WAAW,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACzE,qBAAqB,EACnB,0BAA0B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS;YAChF,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU;YACxD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK,EAAE,wCAAwC;YACnF,oBAAoB,EAAE,WAAW,CAAC,oBAAoB;YACtD,gBAAgB,EAAE,WAAW,CAAC,gBAAgB,GAAG,CAAC;YAClD,eAAe,EAAE,WAAW,CAAC,QAAQ;YACrC,KAAK,EAAE;gBACL,UAAU,EAAE,WAAW,CAAC,MAAM;gBAC9B,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,oBAAoB,EAAE,WAAW,CAAC,QAAQ;aAC3C;YACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,GAAG;SAChB,CAAC;QAEF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,MAAyB;QAIzC,MAAM,UAAU,GAAiD,EAAE,CAAC;QAEpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAExB,mCAAmC;YACnC,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC9C,UAAU,CAAC,IAAI,CAAC;oBACd,UAAU,EAAE,CAAC;oBACb,KAAK,EAAE,SAAS,KAAK,CAAC,QAAQ,2BAA2B;iBAC1D,CAAC,CAAC;YACL,CAAC;YAED,oCAAoC;YACpC,IAAI,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC;oBACd,UAAU,EAAE,CAAC;oBACb,KAAK,EAAE,oCAAoC,MAAM,CAAC,gBAAgB,WAAW,KAAK,CAAC,gBAAgB,EAAE;iBACtG,CAAC,CAAC;YACL,CAAC;YAED,wCAAwC;YACxC,MAAM,eAAe,GAAG,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC;oBACd,UAAU,EAAE,CAAC;oBACb,KAAK,EAAE,oBAAoB,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAC9B,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,6BAA6B,CAC3B,KAAsB,EACtB,YAA+B;QAO/B,qCAAqC;QACrC,IAAI,eAAe,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,gBAAgB,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,kBAAkB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,oBAAoB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAE5D,mCAAmC;QACnC,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,wDAAwD;YACxD,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CACpD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CACpF,CAAC;YAEF,oBAAoB;YACpB,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CACxC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAC1F,CAAC;YAEF,sBAAsB;YACtB,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,kBAAkB,GAAG,kBAAkB,CAAC,MAAM,CAC5C,QAAQ,CAAC,EAAE,CACT,MAAM,CAAC,SAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpC,CAAC,MAAM,CAAC,iBAAiB;wBACvB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAC9D,CAAC;YACJ,CAAC;YAED,4CAA4C;YAC5C,KAAK,MAAM,gBAAgB,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBACxD,MAAM,aAAa,GAAG,oBAAoB,CAAC,SAAS,CAClD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI,CACtC,CAAC;gBAEF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;oBACvB,mCAAmC;oBACnC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;wBACnF,oBAAoB,CAAC,aAAa,CAAC,GAAG,gBAAgB,CAAC;oBACzD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,oBAAoB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,eAAe;YACf,gBAAgB;YAChB,kBAAkB;YAClB,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,GAAG,CAAC,OAAe;QACzB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF"}

package/dist/ai/plugins/plugin-loader.d.ts

@@ -63,6 +63,10 @@ export declare class PluginLoader {
     private plugins;
     private config;
     constructor(config?: PluginLoaderConfig);
+    /** Resolve plugin from path string (dynamic import) or direct object reference */
+    private resolvePlugin;
+    /** Validate, deduplicate, initialize, and store a loaded plugin instance */
+    private registerPlugin;
     /**
      * Load a plugin by module path or object
      */

package/dist/ai/plugins/plugin-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../../../packages/ai/plugins/plugin-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5F;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,UAAU,EAAE,MAAM;IAAS,KAAK,CAAC,EAAE,KAAK;gBAAhE,OAAO,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,KAAK,YAAA;CAI7E;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IACV,UAAU,EAAE,MAAM;gBAA1C,OAAO,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM;CAIvD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,MAAM,CAAqB;gBAEvB,MAAM,GAAE,kBAAuB;IAS3C;;OAEG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0D5D;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D;;OAEG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBrD;;OAEG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAQtC;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAQvC;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmCxE;;OAEG;IACG,YAAY,CAChB,WAAW,EAAE,MAAM,EAAE,EACrB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,CAAC;IA2C5B;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIjD;;OAEG;IACH,UAAU,IAAI,YAAY,EAAE;IAI5B;;OAEG;IACH,cAAc,IAAI,MAAM;IAIxB;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAyBxB;;OAEG;YACW,kBAAkB;IAahC;;OAEG;IACH,OAAO,CAAC,YAAY;CAwBrB;AAOD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,YAAY,CAK/E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}
+{"version":3,"file":"plugin-loader.d.ts","sourceRoot":"","sources":["../../../packages/ai/plugins/plugin-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5F;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACJ,UAAU,EAAE,MAAM;IAAS,KAAK,CAAC,EAAE,KAAK;gBAAhE,OAAO,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAAS,KAAK,CAAC,EAAE,KAAK,YAAA;CAI7E;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IACV,UAAU,EAAE,MAAM;gBAA1C,OAAO,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM;CAIvD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,IAAI,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,MAAM,CAAqB;gBAEvB,MAAM,GAAE,kBAAuB;IAS3C,kFAAkF;YACpE,aAAa;IAQ3B,4EAA4E;YAC9D,cAAc;IAyB5B;;OAEG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB5D;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D;;OAEG;IACG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBrD;;OAEG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAQtC;;OAEG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAQvC;;OAEG;IACG,WAAW,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmCxE;;OAEG;IACG,YAAY,CAChB,WAAW,EAAE,MAAM,EAAE,EACrB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,CAAC;IA2C5B;;OAEG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIjD;;OAEG;IACH,UAAU,IAAI,YAAY,EAAE;IAI5B;;OAEG;IACH,cAAc,IAAI,MAAM;IAIxB;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAyBxB;;OAEG;YACW,kBAAkB;IAahC;;OAEG;IACH,OAAO,CAAC,YAAY;CAwBrB;AAOD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,YAAY,CAK/E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}

package/dist/ai/plugins/plugin-loader.js

@@ -60,39 +60,39 @@ export class PluginLoader {
             ...config,
         };
     }
+    /** Resolve plugin from path string (dynamic import) or direct object reference */
+    async resolvePlugin(pluginPath) {
+        if (typeof pluginPath === 'string') {
+            const module = await import(pluginPath);
+            return module.default || module;
+        }
+        return pluginPath;
+    }
+    /** Validate, deduplicate, initialize, and store a loaded plugin instance */
+    async registerPlugin(plugin) {
+        this.validateManifest(plugin.manifest);
+        if (this.plugins.has(plugin.manifest.name)) {
+            throw new PluginValidationError(`Plugin '${plugin.manifest.name}' is already loaded`, plugin.manifest.name);
+        }
+        if (plugin.onLoad) {
+            await this.executeWithTimeout(() => plugin.onLoad(), this.config.timeout, `onLoad hook for ${plugin.manifest.name}`);
+        }
+        this.plugins.set(plugin.manifest.name, {
+            name: plugin.manifest.name,
+            manifest: plugin.manifest,
+            plugin,
+            loaded: new Date(),
+            enabled: true,
+        });
+        console.log(`✅ Loaded plugin: ${plugin.manifest.name} v${plugin.manifest.version}`);
+    }
     /**
      * Load a plugin by module path or object
      */
     async loadPlugin(pluginPath) {
         try {
-            let plugin;
-            if (typeof pluginPath === 'string') {
-                // Dynamic import
-                const module = await import(pluginPath);
-                plugin = module.default || module;
-            }
-            else {
-                plugin = pluginPath;
-            }
-            // Validate manifest
-            this.validateManifest(plugin.manifest);
-            // Check for duplicates
-            if (this.plugins.has(plugin.manifest.name)) {
-                throw new PluginValidationError(`Plugin '${plugin.manifest.name}' is already loaded`, plugin.manifest.name);
-            }
-            // Call onLoad hook if present
-            if (plugin.onLoad) {
-                await this.executeWithTimeout(() => plugin.onLoad(), this.config.timeout, `onLoad hook for ${plugin.manifest.name}`);
-            }
-            // Store plugin
-            this.plugins.set(plugin.manifest.name, {
-                name: plugin.manifest.name,
-                manifest: plugin.manifest,
-                plugin,
-                loaded: new Date(),
-                enabled: true,
-            });
-            console.log(`✅ Loaded plugin: ${plugin.manifest.name} v${plugin.manifest.version}`);
+            const plugin = await this.resolvePlugin(pluginPath);
+            await this.registerPlugin(plugin);
         }
         catch (error) {
             const pluginName = typeof pluginPath === 'string' ? pluginPath : 'unknown';