@dcyfr/ai 2.1.3 → 3.0.0

package/dist/ai/src/plugins/reputation/plugin-reputation-engine.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Plugin Reputation Engine
+ *
+ * Manages plugin trust scores with SQLite persistence, weekly registry sync,
+ * and maintenance-score decay.
+ *
+ * Key features:
+ *   • CRUD: upsert scan results, record incidents, query scores
+ *   • Trust score storage & retrieval (task 7.3)
+ *   • Weekly sync from central registry (task 7.4)
+ *   • Decay algorithm: maintenance -5 per 90d without a new scan (task 7.5)
+ *   • Query API: getScore(), getTopPlugins() (task 7.6)
+ *
+ * @module plugins/reputation/plugin-reputation-engine
+ * @version 1.0.0
+ * @date 2026-02-28
+ * @license MIT
+ */
+import type { PluginReputationEngineConfig, PluginReputationRecord, PluginIncidentRecord, PluginAuditRecord, PluginScoreResult, TopPluginResult, UpsertScanInput, AuditEventType, IncidentSeverity, RegistryReputationEntry, PluginTrustScore } from './types.js';
+export type { PluginReputationEngineConfig, PluginReputationRecord, PluginIncidentRecord, PluginAuditRecord, PluginScoreResult, TopPluginResult, UpsertScanInput, AuditEventType, IncidentSeverity, RegistryReputationEntry, PluginTrustScore, };
+/**
+ * Plugin Reputation Engine
+ *
+ * Single-instance, synchronous (except for the async `syncFromRegistry()`).
+ * Uses better-sqlite3's synchronous API for all DB operations.
+ */
+export declare class PluginReputationEngine {
+    private db;
+    private registryUrl;
+    private decayIntervalDays;
+    private decayAmount;
+    private decayFloor;
+    private debug;
+    constructor(config?: PluginReputationEngineConfig);
+    /** Close the database connection. Call when the engine is no longer needed. */
+    close(): void;
+    /**
+     * Upsert a plugin scan result.
+     * Creates a new row on first scan; updates existing row on re-scan.
+     * Increments `scan_count` and writes an audit entry.
+     */
+    upsertScan(input: UpsertScanInput): void;
+    /**
+     * Delete a plugin and all its associated incidents / audits.
+     * Foreign-key cascade handles child rows.
+     */
+    deletePlugin(pluginId: string): boolean;
+    /**
+     * Store / update a trust score for a plugin that already exists.
+     * Use `upsertScan` for new scans; this is for score-only patches
+     * (e.g. after a registry merge).
+     */
+    updateScore(pluginId: string, trustScore: PluginTrustScore): void;
+    /**
+     * Retrieve the trust score for a plugin.
+     * Returns null if the plugin is not in the database.
+     */
+    getScore(pluginId: string): PluginScoreResult | null;
+    /**
+     * Record a security or compliance incident for a plugin.
+     * Returns the newly created incident's row ID.
+     */
+    recordIncident(pluginId: string, severity: IncidentSeverity, description: string): number;
+    /**
+     * Mark an existing incident as resolved.
+     * Returns `true` if a row was updated.
+     */
+    resolveIncident(incidentId: number): boolean;
+    /** List all incidents for a plugin, newest first. */
+    listIncidents(pluginId: string, includeResolved?: boolean): PluginIncidentRecord[];
+    /**
+     * Return the top-N plugins by trust score.
+     *
+     * @param capability - Optional capability filter (e.g. `"git"`).
+     *   Matches plugins whose capabilities_json array contains the given string.
+     * @param limit - Maximum number of results to return (default 10).
+     */
+    getTopPlugins(capability?: string, limit?: number): TopPluginResult[];
+    /** List all plugins, ordered by trust_score descending. */
+    listAll(): PluginScoreResult[];
+    /**
+     * Apply maintenance-score decay to plugins that haven't been scanned
+     * within the configured `decayIntervalDays`.
+     *
+     * For each qualifying plugin, `maintenance` dimension is decreased by
+     * `decayAmount` (default 5), clamped at `decayFloor` (default 0),
+     * and the overall trust score is recalculated proportionally.
+     *
+     * Returns the number of plugins that had decay applied.
+     */
+    applyDecay(): number;
+    /**
+     * Download the central registry's `reputation.json` and merge entries
+     * into the local database.
+     *
+     * Registry data takes precedence over local scores for `approved_at` and
+     * `trust_score`, but local scans preserve their `scan_count`.
+     *
+     * Returns `{ added, updated, skipped }` counts.
+     */
+    syncFromRegistry(overrideUrl?: string, fetchFn?: typeof fetch): Promise<{
+        added: number;
+        updated: number;
+        skipped: number;
+    }>;
+    /** List audit events for a plugin, newest first. */
+    listAudits(pluginId: string, limit?: number): PluginAuditRecord[];
+    /** Return total plugin count in the database. */
+    count(): number;
+    private _appendAudit;
+    private _scoreToRecommendation;
+    private _parseRegistryPayload;
+    private _log;
+}
+//# sourceMappingURL=plugin-reputation-engine.d.ts.map

package/dist/ai/src/plugins/reputation/plugin-reputation-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-reputation-engine.d.ts","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/reputation/plugin-reputation-engine.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EACV,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,GACjB,CAAC;AAeF;;;;;GAKG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,KAAK,CAAU;gBAEX,MAAM,GAAE,4BAAiC;IAYrD,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IAMb;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAsFxC;;;OAGG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAiBvC;;;;OAIG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,GAAG,IAAI;IAsBjE;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IA6BpD;;;OAGG;IACH,cAAc,CACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,gBAAgB,EAC1B,WAAW,EAAE,MAAM,GAClB,MAAM;IAeT;;;OAGG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAqB5C,qDAAqD;IACrD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,UAAO,GAAG,oBAAoB,EAAE;IAS/E;;;;;;OAMG;IACH,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,eAAe,EAAE;IAgCjE,2DAA2D;IAC3D,OAAO,IAAI,iBAAiB,EAAE;IAyB9B;;;;;;;;;OASG;IACH,UAAU,IAAI,MAAM;IAwEpB;;;;;;;;OAQG;IACG,gBAAgB,CACpB,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,GAAE,OAAO,KAAwB,GACvC,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAwG/D,oDAAoD;IACpD,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,iBAAiB,EAAE;IAQ7D,iDAAiD;IACjD,KAAK,IAAI,MAAM;IASf,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,sBAAsB;IAS9B,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,IAAI;CAKb"}

package/dist/ai/src/plugins/reputation/plugin-reputation-engine.js

@@ -0,0 +1,528 @@
+/* eslint-disable @typescript-eslint/no-explicit-any */
+/**
+ * Plugin Reputation Engine
+ *
+ * Manages plugin trust scores with SQLite persistence, weekly registry sync,
+ * and maintenance-score decay.
+ *
+ * Key features:
+ *   • CRUD: upsert scan results, record incidents, query scores
+ *   • Trust score storage & retrieval (task 7.3)
+ *   • Weekly sync from central registry (task 7.4)
+ *   • Decay algorithm: maintenance -5 per 90d without a new scan (task 7.5)
+ *   • Query API: getScore(), getTopPlugins() (task 7.6)
+ *
+ * @module plugins/reputation/plugin-reputation-engine
+ * @version 1.0.0
+ * @date 2026-02-28
+ * @license MIT
+ */
+import { openReputationDb, DEFAULT_DB_PATH } from './plugin-reputation-db.js';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const DEFAULT_REGISTRY_URL = 'https://registry.dcyfr.ai/reputation.json';
+const DEFAULT_DECAY_INTERVAL_DAYS = 90;
+const DEFAULT_DECAY_AMOUNT = 5;
+const DEFAULT_DECAY_FLOOR = 0;
+// ---------------------------------------------------------------------------
+// Engine
+// ---------------------------------------------------------------------------
+/**
+ * Plugin Reputation Engine
+ *
+ * Single-instance, synchronous (except for the async `syncFromRegistry()`).
+ * Uses better-sqlite3's synchronous API for all DB operations.
+ */
+export class PluginReputationEngine {
+    db;
+    registryUrl;
+    decayIntervalDays;
+    decayAmount;
+    decayFloor;
+    debug;
+    constructor(config = {}) {
+        const dbPath = config.databasePath ?? DEFAULT_DB_PATH;
+        this.db = openReputationDb(dbPath);
+        this.registryUrl = config.registryUrl ?? DEFAULT_REGISTRY_URL;
+        this.decayIntervalDays = config.decayIntervalDays ?? DEFAULT_DECAY_INTERVAL_DAYS;
+        this.decayAmount = config.decayAmount ?? DEFAULT_DECAY_AMOUNT;
+        this.decayFloor = config.decayFloor ?? DEFAULT_DECAY_FLOOR;
+        this.debug = config.debug ?? false;
+    }
+    // ── Lifecycle ──────────────────────────────────────────────────────────────
+    /** Close the database connection. Call when the engine is no longer needed. */
+    close() {
+        this.db.close();
+    }
+    // ── CRUD ───────────────────────────────────────────────────────────────────
+    /**
+     * Upsert a plugin scan result.
+     * Creates a new row on first scan; updates existing row on re-scan.
+     * Increments `scan_count` and writes an audit entry.
+     */
+    upsertScan(input) {
+        const now = new Date().toISOString();
+        const capabilitiesJson = JSON.stringify(input.capabilities ?? []);
+        const dimensionsJson = JSON.stringify(input.trustScore.dimensions);
+        const approvedAt = input.approved ? now : null;
+        const registrySource = input.registrySource ?? 'local';
+        this.db.transaction(() => {
+            const existing = this.db
+                .prepare('SELECT scan_count, created_at, approved_at FROM plugins WHERE plugin_id = ?')
+                .get(input.plugin_id);
+            if (existing) {
+                this.db
+                    .prepare(/* sql */ `
+            UPDATE plugins SET
+              name                  = @name,
+              version               = @version,
+              capabilities_json     = @capabilitiesJson,
+              trust_score           = @trustScore,
+              trust_dimensions_json = @dimensionsJson,
+              last_scanned_at       = @now,
+              scan_count            = @scanCount,
+              approved_at           = COALESCE(@approvedAt, approved_at),
+              registry_source       = @registrySource,
+              updated_at            = @now
+            WHERE plugin_id = @pluginId
+          `)
+                    .run({
+                    name: input.name,
+                    version: input.version,
+                    capabilitiesJson,
+                    trustScore: input.trustScore.overall,
+                    dimensionsJson,
+                    now,
+                    scanCount: existing.scan_count + 1,
+                    approvedAt: approvedAt ?? null,
+                    registrySource,
+                    pluginId: input.plugin_id,
+                });
+            }
+            else {
+                this.db
+                    .prepare(/* sql */ `
+            INSERT INTO plugins (
+              plugin_id, name, version, capabilities_json,
+              trust_score, trust_dimensions_json, last_scanned_at,
+              scan_count, approved_at, registry_source,
+              created_at, updated_at
+            ) VALUES (
+              @pluginId, @name, @version, @capabilitiesJson,
+              @trustScore, @dimensionsJson, @now,
+              1, @approvedAt, @registrySource,
+              @now, @now
+            )
+          `)
+                    .run({
+                    pluginId: input.plugin_id,
+                    name: input.name,
+                    version: input.version,
+                    capabilitiesJson,
+                    trustScore: input.trustScore.overall,
+                    dimensionsJson,
+                    now,
+                    approvedAt: approvedAt ?? null,
+                    registrySource,
+                });
+            }
+            this._appendAudit(input.plugin_id, 'scan_completed', {
+                version: input.version,
+                trust_score: input.trustScore.overall,
+                recommendation: this._scoreToRecommendation(input.trustScore.overall),
+            });
+            if (input.approved) {
+                this._appendAudit(input.plugin_id, 'plugin_approved', {
+                    trust_score: input.trustScore.overall,
+                });
+            }
+        })();
+        this._log(`upsertScan: ${input.plugin_id} → score=${input.trustScore.overall}`);
+    }
+    /**
+     * Delete a plugin and all its associated incidents / audits.
+     * Foreign-key cascade handles child rows.
+     */
+    deletePlugin(pluginId) {
+        const result = this.db
+            .prepare('DELETE FROM plugins WHERE plugin_id = ?')
+            .run(pluginId);
+        if (result.changes > 0) {
+            // Audits for deleted plugins are kept (no FK ref) — just orphaned
+            // Clean them up manually
+            this.db.prepare('DELETE FROM audits WHERE plugin_id = ?').run(pluginId);
+            this._log(`deletePlugin: removed ${pluginId}`);
+            return true;
+        }
+        return false;
+    }
+    // ── Trust score ────────────────────────────────────────────────────────────
+    /**
+     * Store / update a trust score for a plugin that already exists.
+     * Use `upsertScan` for new scans; this is for score-only patches
+     * (e.g. after a registry merge).
+     */
+    updateScore(pluginId, trustScore) {
+        const now = new Date().toISOString();
+        const dimensionsJson = JSON.stringify(trustScore.dimensions);
+        const result = this.db
+            .prepare(/* sql */ `
+        UPDATE plugins SET
+          trust_score           = @score,
+          trust_dimensions_json = @dimensionsJson,
+          updated_at            = @now
+        WHERE plugin_id = @pluginId
+      `)
+            .run({ score: trustScore.overall, dimensionsJson, now, pluginId });
+        if (result.changes === 0) {
+            throw new Error(`Plugin not found: ${pluginId}`);
+        }
+        this._appendAudit(pluginId, 'score_updated', { trust_score: trustScore.overall });
+        this._log(`updateScore: ${pluginId} → ${trustScore.overall}`);
+    }
+    /**
+     * Retrieve the trust score for a plugin.
+     * Returns null if the plugin is not in the database.
+     */
+    getScore(pluginId) {
+        const row = this.db
+            .prepare(/* sql */ `
+        SELECT
+          plugin_id, name, version, trust_score,
+          trust_dimensions_json, scan_count, last_scanned_at, approved_at
+        FROM plugins
+        WHERE plugin_id = ?
+      `)
+            .get(pluginId);
+        if (!row)
+            return null;
+        return {
+            plugin_id: row.plugin_id,
+            name: row.name,
+            version: row.version,
+            trust_score: row.trust_score,
+            dimensions: JSON.parse(row.trust_dimensions_json),
+            scan_count: row.scan_count,
+            last_scanned_at: row.last_scanned_at,
+            approved_at: row.approved_at,
+        };
+    }
+    // ── Incidents ──────────────────────────────────────────────────────────────
+    /**
+     * Record a security or compliance incident for a plugin.
+     * Returns the newly created incident's row ID.
+     */
+    recordIncident(pluginId, severity, description) {
+        const now = new Date().toISOString();
+        const result = this.db
+            .prepare(/* sql */ `
+        INSERT INTO incidents (plugin_id, severity, description, detected_at)
+        VALUES (?, ?, ?, ?)
+      `)
+            .run(pluginId, severity, description, now);
+        this._appendAudit(pluginId, 'incident_recorded', { severity, description });
+        this._log(`recordIncident: ${pluginId} [${severity}] — ${description}`);
+        return result.lastInsertRowid;
+    }
+    /**
+     * Mark an existing incident as resolved.
+     * Returns `true` if a row was updated.
+     */
+    resolveIncident(incidentId) {
+        const now = new Date().toISOString();
+        const result = this.db
+            .prepare('UPDATE incidents SET resolved_at = ? WHERE id = ? AND resolved_at IS NULL')
+            .run(now, incidentId);
+        if (result.changes > 0) {
+            // Look up plugin_id for the audit entry
+            const inc = this.db
+                .prepare('SELECT plugin_id, severity FROM incidents WHERE id = ?')
+                .get(incidentId);
+            if (inc) {
+                this._appendAudit(inc.plugin_id, 'incident_resolved', { incident_id: incidentId });
+            }
+            return true;
+        }
+        return false;
+    }
+    /** List all incidents for a plugin, newest first. */
+    listIncidents(pluginId, includeResolved = true) {
+        const sql = includeResolved
+            ? 'SELECT * FROM incidents WHERE plugin_id = ? ORDER BY detected_at DESC'
+            : 'SELECT * FROM incidents WHERE plugin_id = ? AND resolved_at IS NULL ORDER BY detected_at DESC';
+        return this.db.prepare(sql).all(pluginId);
+    }
+    // ── Query API (task 7.6) ──────────────────────────────────────────────────
+    /**
+     * Return the top-N plugins by trust score.
+     *
+     * @param capability - Optional capability filter (e.g. `"git"`).
+     *   Matches plugins whose capabilities_json array contains the given string.
+     * @param limit - Maximum number of results to return (default 10).
+     */
+    getTopPlugins(capability, limit = 10) {
+        const allRows = this.db
+            .prepare(/* sql */ `
+        SELECT
+          plugin_id, name, version, trust_score,
+          trust_dimensions_json, capabilities_json,
+          scan_count, last_scanned_at, approved_at
+        FROM plugins
+        ORDER BY trust_score DESC
+      `)
+            .all();
+        const matched = capability
+            ? allRows.filter((r) => {
+                const caps = JSON.parse(r.capabilities_json);
+                return caps.includes(capability);
+            })
+            : allRows;
+        return matched.slice(0, limit).map((r) => ({
+            plugin_id: r.plugin_id,
+            name: r.name,
+            version: r.version,
+            trust_score: r.trust_score,
+            dimensions: JSON.parse(r.trust_dimensions_json),
+            capabilities: JSON.parse(r.capabilities_json),
+            scan_count: r.scan_count,
+            last_scanned_at: r.last_scanned_at,
+            approved_at: r.approved_at,
+        }));
+    }
+    /** List all plugins, ordered by trust_score descending. */
+    listAll() {
+        const rows = this.db
+            .prepare(/* sql */ `
+        SELECT
+          plugin_id, name, version, trust_score,
+          trust_dimensions_json, scan_count, last_scanned_at, approved_at
+        FROM plugins
+        ORDER BY trust_score DESC
+      `)
+            .all();
+        return rows.map((r) => ({
+            plugin_id: r.plugin_id,
+            name: r.name,
+            version: r.version,
+            trust_score: r.trust_score,
+            dimensions: JSON.parse(r.trust_dimensions_json),
+            scan_count: r.scan_count,
+            last_scanned_at: r.last_scanned_at,
+            approved_at: r.approved_at,
+        }));
+    }
+    // ── Decay algorithm (task 7.5) ─────────────────────────────────────────────
+    /**
+     * Apply maintenance-score decay to plugins that haven't been scanned
+     * within the configured `decayIntervalDays`.
+     *
+     * For each qualifying plugin, `maintenance` dimension is decreased by
+     * `decayAmount` (default 5), clamped at `decayFloor` (default 0),
+     * and the overall trust score is recalculated proportionally.
+     *
+     * Returns the number of plugins that had decay applied.
+     */
+    applyDecay() {
+        const cutoff = new Date();
+        cutoff.setDate(cutoff.getDate() - this.decayIntervalDays);
+        const cutoffIso = cutoff.toISOString();
+        const stale = this.db
+            .prepare(/* sql */ `
+        SELECT plugin_id, trust_score, trust_dimensions_json
+        FROM plugins
+        WHERE last_scanned_at < ?
+      `)
+            .all(cutoffIso);
+        let count = 0;
+        const now = new Date().toISOString();
+        for (const row of stale) {
+            const dims = JSON.parse(row.trust_dimensions_json);
+            const oldMaintenance = dims.maintenance;
+            const newMaintenance = Math.max(this.decayFloor, oldMaintenance - this.decayAmount);
+            if (newMaintenance === oldMaintenance)
+                continue; // already at floor
+            const decayedDims = { ...dims, maintenance: newMaintenance };
+            // Recalculate overall score with same weights as TrustScore calculation
+            // (security 40%, community 30%, maintenance 20%, transparency 10%)
+            const newOverall = Math.round(decayedDims.security * 0.4 +
+                decayedDims.community * 0.3 +
+                decayedDims.maintenance * 0.2 +
+                decayedDims.transparency * 0.1);
+            this.db
+                .prepare(/* sql */ `
+          UPDATE plugins SET
+            trust_score           = @overall,
+            trust_dimensions_json = @dimensionsJson,
+            updated_at            = @now
+          WHERE plugin_id = @pluginId
+        `)
+                .run({
+                overall: newOverall,
+                dimensionsJson: JSON.stringify(decayedDims),
+                now,
+                pluginId: row.plugin_id,
+            });
+            this._appendAudit(row.plugin_id, 'decay_applied', {
+                old_maintenance: oldMaintenance,
+                new_maintenance: newMaintenance,
+                old_score: row.trust_score,
+                new_score: newOverall,
+                decay_amount: this.decayAmount,
+            });
+            count++;
+            this._log(`applyDecay: ${row.plugin_id} maintenance ${oldMaintenance}→${newMaintenance}, score ${row.trust_score}→${newOverall}`);
+        }
+        return count;
+    }
+    // ── Registry sync (task 7.4) ──────────────────────────────────────────────
+    /**
+     * Download the central registry's `reputation.json` and merge entries
+     * into the local database.
+     *
+     * Registry data takes precedence over local scores for `approved_at` and
+     * `trust_score`, but local scans preserve their `scan_count`.
+     *
+     * Returns `{ added, updated, skipped }` counts.
+     */
+    async syncFromRegistry(overrideUrl, fetchFn = globalThis.fetch) {
+        const url = overrideUrl ?? this.registryUrl;
+        let entries;
+        try {
+            const response = await fetchFn(url, {
+                headers: { 'Accept': 'application/json', 'User-Agent': '@dcyfr/ai plugin-reputation-engine' },
+                signal: AbortSignal.timeout(15_000),
+            });
+            if (!response.ok) {
+                throw new Error(`HTTP ${response.status} from ${url}`);
+            }
+            const json = await response.json();
+            entries = this._parseRegistryPayload(json);
+        }
+        catch (err) {
+            this._log(`syncFromRegistry error: ${err.message}`);
+            throw err;
+        }
+        let added = 0;
+        let updated = 0;
+        const skipped = 0;
+        const now = new Date().toISOString();
+        for (const entry of entries) {
+            const existing = this.db
+                .prepare('SELECT scan_count, approved_at FROM plugins WHERE plugin_id = ?')
+                .get(entry.plugin_id);
+            const dimensionsJson = JSON.stringify(entry.dimensions);
+            const capabilitiesJson = JSON.stringify(entry.capabilities ?? []);
+            if (existing) {
+                this.db
+                    .prepare(/* sql */ `
+            UPDATE plugins SET
+              name                  = @name,
+              version               = @version,
+              capabilities_json     = @capabilitiesJson,
+              trust_score           = @trustScore,
+              trust_dimensions_json = @dimensionsJson,
+              last_scanned_at       = @lastUpdated,
+              registry_source       = 'registry',
+              updated_at            = @now
+            WHERE plugin_id = @pluginId
+          `)
+                    .run({
+                    name: entry.name,
+                    version: entry.version,
+                    capabilitiesJson,
+                    trustScore: entry.trust_score,
+                    dimensionsJson,
+                    lastUpdated: entry.last_updated,
+                    now,
+                    pluginId: entry.plugin_id,
+                });
+                updated++;
+            }
+            else {
+                this.db
+                    .prepare(/* sql */ `
+            INSERT INTO plugins (
+              plugin_id, name, version, capabilities_json,
+              trust_score, trust_dimensions_json,
+              last_scanned_at, scan_count,
+              approved_at, registry_source,
+              created_at, updated_at
+            ) VALUES (
+              @pluginId, @name, @version, @capabilitiesJson,
+              @trustScore, @dimensionsJson,
+              @lastUpdated, 0,
+              NULL, 'registry',
+              @now, @now
+            )
+          `)
+                    .run({
+                    pluginId: entry.plugin_id,
+                    name: entry.name,
+                    version: entry.version,
+                    capabilitiesJson,
+                    trustScore: entry.trust_score,
+                    dimensionsJson,
+                    lastUpdated: entry.last_updated,
+                    now,
+                });
+                added++;
+            }
+            this._appendAudit(entry.plugin_id, 'registry_sync', {
+                version: entry.version,
+                trust_score: entry.trust_score,
+                action: existing ? 'updated' : 'added',
+            });
+        }
+        this._log(`syncFromRegistry: added=${added} updated=${updated} skipped=${skipped}`);
+        return { added, updated, skipped };
+    }
+    // ── Audit log ──────────────────────────────────────────────────────────────
+    /** List audit events for a plugin, newest first. */
+    listAudits(pluginId, limit = 50) {
+        return this.db
+            .prepare('SELECT * FROM audits WHERE plugin_id = ? ORDER BY created_at DESC LIMIT ?')
+            .all(pluginId, limit);
+    }
+    /** Return total plugin count in the database. */
+    count() {
+        const row = this.db
+            .prepare('SELECT COUNT(*) AS n FROM plugins')
+            .get();
+        return row.n;
+    }
+    // ── Private helpers ────────────────────────────────────────────────────────
+    _appendAudit(pluginId, eventType, data = {}) {
+        const now = new Date().toISOString();
+        this.db
+            .prepare(/* sql */ `
+        INSERT INTO audits (plugin_id, event_type, event_data_json, created_at)
+        VALUES (?, ?, ?, ?)
+      `)
+            .run(pluginId, eventType, JSON.stringify(data), now);
+    }
+    _scoreToRecommendation(score) {
+        if (score >= 80)
+            return 'approve';
+        if (score >= 65)
+            return 'approve-with-warnings';
+        if (score >= 50)
+            return 'require-review';
+        return 'reject';
+    }
+    _parseRegistryPayload(json) {
+        // Registry payload may be `{ plugins: [...] }` or a bare array
+        if (Array.isArray(json))
+            return json;
+        if (json && typeof json === 'object' && 'plugins' in json) {
+            return json.plugins;
+        }
+        throw new Error('Unrecognised registry payload format');
+    }
+    _log(msg) {
+        if (this.debug) {
+            console.debug(`[PluginReputationEngine] ${msg}`);
+        }
+    }
+}
+//# sourceMappingURL=plugin-reputation-engine.js.map

package/dist/ai/src/plugins/reputation/plugin-reputation-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-reputation-engine.js","sourceRoot":"","sources":["../../../../../packages/ai/src/plugins/reputation/plugin-reputation-engine.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AA8B9E,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,oBAAoB,GAAG,2CAA2C,CAAC;AACzE,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IACzB,EAAE,CAAoB;IACtB,WAAW,CAAS;IACpB,iBAAiB,CAAS;IAC1B,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,KAAK,CAAU;IAEvB,YAAY,SAAuC,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,IAAI,eAAe,CAAC;QACtD,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAC;QAC9D,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,2BAA2B,CAAC;QACjF,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAC;QAC9D,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC3D,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,CAAC;IAED,8EAA8E;IAE9E,+EAA+E;IAC/E,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,8EAA8E;IAE9E;;;;OAIG;IACH,UAAU,CAAC,KAAsB;QAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC;QAEvD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;iBACrB,OAAO,CAAC,6EAA6E,CAAC;iBACtF,GAAG,CAAC,KAAK,CAAC,SAAS,CAET,CAAC;YAEd,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,SAAS,CAAC;;;;;;;;;;;;;WAalB,CAAC;qBACD,GAAG,CAAC;oBACH,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,gBAAgB;oBAChB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO;oBACpC,cAAc;oBACd,GAAG;oBACH,SAAS,EAAE,QAAQ,CAAC,UAAU,GAAG,CAAC;oBAClC,UAAU,EAAE,UAAU,IAAI,IAAI;oBAC9B,cAAc;oBACd,QAAQ,EAAE,KAAK,CAAC,SAAS;iBAC1B,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,SAAS,CAAC;;;;;;;;;;;;WAYlB,CAAC;qBACD,GAAG,CAAC;oBACH,QAAQ,EAAE,KAAK,CAAC,SAAS;oBACzB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,gBAAgB;oBAChB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO;oBACpC,cAAc;oBACd,GAAG;oBACH,UAAU,EAAE,UAAU,IAAI,IAAI;oBAC9B,cAAc;iBACf,CAAC,CAAC;YACP,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,EAAE;gBACnD,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO;gBACrC,cAAc,EAAE,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;aACtE,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE;oBACpD,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,SAAS,YAAY,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,yCAAyC,CAAC;aAClD,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEjB,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,kEAAkE;YAClE,yBAAyB;YACzB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxE,IAAI,CAAC,IAAI,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8EAA8E;IAE9E;;;;OAIG;IACH,WAAW,CAAC,QAAgB,EAAE,UAA4B;QACxD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,SAAS,CAAC;;;;;;OAMlB,CAAC;aACD,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAErE,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,gBAAgB,QAAQ,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,QAAgB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,SAAS,CAAC;;;;;;OAMlB,CAAC;aACD,GAAG,CAAC,QAAQ,CAEF,CAAC;QAEd,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAmC;YACnF,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E;;;OAGG;IACH,cAAc,CACZ,QAAgB,EAChB,QAA0B,EAC1B,WAAmB;QAEnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,SAAS,CAAC;;;OAGlB,CAAC;aACD,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QAE7C,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,mBAAmB,QAAQ,KAAK,QAAQ,OAAO,WAAW,EAAE,CAAC,CAAC;QAExE,OAAO,MAAM,CAAC,eAAyB,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,UAAkB;QAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN,2EAA2E,CAC5E;aACA,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAExB,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,wCAAwC;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;iBAChB,OAAO,CAAC,wDAAwD,CAAC;iBACjE,GAAG,CAAC,UAAU,CAAwD,CAAC;YAC1E,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,mBAAmB,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qDAAqD;IACrD,aAAa,CAAC,QAAgB,EAAE,eAAe,GAAG,IAAI;QACpD,MAAM,GAAG,GAAG,eAAe;YACzB,CAAC,CAAC,uEAAuE;YACzE,CAAC,CAAC,+FAA+F,CAAC;QACpG,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAA2B,CAAC;IACtE,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,aAAa,CAAC,UAAmB,EAAE,KAAK,GAAG,EAAE;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;aACpB,OAAO,CAAC,SAAS,CAAC;;;;;;;OAOlB,CAAC;aACD,GAAG,EAAW,CAAC;QAElB,MAAM,OAAO,GAAG,UAAU;YACxB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACnB,MAAM,IAAI,GAAa,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACnC,CAAC,CAAC;YACJ,CAAC,CAAC,OAAO,CAAC;QAEZ,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAmC;YACjF,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAa;YACzD,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,WAAW,EAAE,CAAC,CAAC,WAA4B;SAC5C,CAAC,CAAC,CAAC;IACN,CAAC;IAED,2DAA2D;IAC3D,OAAO;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,SAAS,CAAC;;;;;;OAMlB,CAAC;aACD,GAAG,EAAW,CAAC;QAElB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAmC;YACjF,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,WAAW,EAAE,CAAC,CAAC,WAA4B;SAC5C,CAAC,CAAC,CAAC;IACN,CAAC;IAED,8EAA8E;IAE9E;;;;;;;;;OASG;IACH,UAAU;QACR,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAEvC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CAAC,SAAS,CAAC;;;;OAIlB,CAAC;aACD,GAAG,CAAC,SAAS,CAId,CAAC;QAEH,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAmC,CAAC;YAErF,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC;YACxC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;YAEpF,IAAI,cAAc,KAAK,cAAc;gBAAE,SAAS,CAAC,mBAAmB;YAEpE,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;YAC7D,wEAAwE;YACxE,mEAAmE;YACnE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAC3B,WAAW,CAAC,QAAQ,GAAG,GAAG;gBAC1B,WAAW,CAAC,SAAS,GAAG,GAAG;gBAC3B,WAAW,CAAC,WAAW,GAAG,GAAG;gBAC7B,WAAW,CAAC,YAAY,GAAG,GAAG,CAC/B,CAAC;YAEF,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,SAAS,CAAC;;;;;;SAMlB,CAAC;iBACD,GAAG,CAAC;gBACH,OAAO,EAAE,UAAU;gBACnB,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;gBAC3C,GAAG;gBACH,QAAQ,EAAE,GAAG,CAAC,SAAS;aACxB,CAAC,CAAC;YAEL,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE;gBAChD,eAAe,EAAE,cAAc;gBAC/B,eAAe,EAAE,cAAc;gBAC/B,SAAS,EAAE,GAAG,CAAC,WAAW;gBAC1B,SAAS,EAAE,UAAU;gBACrB,YAAY,EAAE,IAAI,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,KAAK,EAAE,CAAC;YACR,IAAI,CAAC,IAAI,CACP,eAAe,GAAG,CAAC,SAAS,gBAAgB,cAAc,IAAI,cAAc,WAAW,GAAG,CAAC,WAAW,IAAI,UAAU,EAAE,CACvH,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6EAA6E;IAE7E;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB,CACpB,WAAoB,EACpB,UAAwB,UAAU,CAAC,KAAK;QAExC,MAAM,GAAG,GAAG,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;QAC5C,IAAI,OAAkC,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBAClC,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,EAAE,oCAAoC,EAAE;gBAC7F,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAa,CAAC;YAC9C,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,2BAA4B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,OAAO,GAAG,CAAC,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;iBACrB,OAAO,CAAC,iEAAiE,CAAC;iBAC1E,GAAG,CAAC,KAAK,CAAC,SAAS,CAET,CAAC;YAEd,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YAElE,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,SAAS,CAAC;;;;;;;;;;;WAWlB,CAAC;qBACD,GAAG,CAAC;oBACH,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,gBAAgB;oBAChB,UAAU,EAAE,KAAK,CAAC,WAAW;oBAC7B,cAAc;oBACd,WAAW,EAAE,KAAK,CAAC,YAAY;oBAC/B,GAAG;oBACH,QAAQ,EAAE,KAAK,CAAC,SAAS;iBAC1B,CAAC,CAAC;gBACL,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,SAAS,CAAC;;;;;;;;;;;;;;WAclB,CAAC;qBACD,GAAG,CAAC;oBACH,QAAQ,EAAE,KAAK,CAAC,SAAS;oBACzB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,gBAAgB;oBAChB,UAAU,EAAE,KAAK,CAAC,WAAW;oBAC7B,cAAc;oBACd,WAAW,EAAE,KAAK,CAAC,YAAY;oBAC/B,GAAG;iBACJ,CAAC,CAAC;gBACL,KAAK,EAAE,CAAC;YACV,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,EAAE;gBAClD,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;aACvC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,2BAA2B,KAAK,YAAY,OAAO,YAAY,OAAO,EAAE,CAAC,CAAC;QACpF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,8EAA8E;IAE9E,oDAAoD;IACpD,UAAU,CAAC,QAAgB,EAAE,KAAK,GAAG,EAAE;QACrC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN,2EAA2E,CAC5E;aACA,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAwB,CAAC;IACjD,CAAC;IAED,iDAAiD;IACjD,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,mCAAmC,CAAC;aAC5C,GAAG,EAAmB,CAAC;QAC1B,OAAO,GAAG,CAAC,CAAC,CAAC;IACf,CAAC;IAED,8EAA8E;IAEtE,YAAY,CAClB,QAAgB,EAChB,SAAyB,EACzB,OAAgC,EAAE;QAElC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,SAAS,CAAC;;;OAGlB,CAAC;aACD,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAEO,sBAAsB,CAC5B,KAAa;QAEb,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC;QAClC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,uBAAuB,CAAC;QAChD,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,gBAAgB,CAAC;QACzC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,qBAAqB,CAAC,IAAa;QACzC,+DAA+D;QAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAiC,CAAC;QAClE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YAC1D,OAAQ,IAA+C,CAAC,OAAO,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAEO,IAAI,CAAC,GAAW;QACtB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;CACF"}