@iflow-mcp/jkheadley-instar 0.26.2

package/dist/commands/whatsapp.js

@@ -0,0 +1,408 @@
+/**
+ * WhatsApp CLI commands — add, login, doctor, status.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import pc from 'picocolors';
+import { loadConfig } from '../core/Config.js';
+import { isEncryptedFile } from '../messaging/shared/EncryptedAuthStore.js';
+/**
+ * Check if Baileys is importable. Uses dynamic import() instead of require.resolve()
+ * because require.resolve() fails in npx context — it resolves relative to the
+ * npx cache directory, not the user's project. Dynamic import() correctly searches
+ * the full module resolution chain including the user's node_modules.
+ *
+ * Prefers v7 (baileys) over deprecated v6 (@whiskeysockets/baileys).
+ */
+async function isBaileysInstalled() {
+    // Try v7 first (preferred — v6 is deprecated and has protocol issues)
+    try {
+        await import('baileys');
+        return { installed: true, packageName: 'baileys' };
+    }
+    catch {
+        // Fall back to deprecated v6 package name
+        try {
+            // @ts-expect-error — Baileys v6 uses different package name
+            await import('@whiskeysockets/baileys');
+            return { installed: true, packageName: '@whiskeysockets/baileys' };
+        }
+        catch {
+            return { installed: false, packageName: null };
+        }
+    }
+}
+export async function addWhatsApp(opts) {
+    const configPath = path.join(process.cwd(), '.instar', 'config.json');
+    if (!fs.existsSync(configPath)) {
+        console.log(pc.red('No .instar/config.json found. Run `instar init` first.'));
+        process.exit(1);
+    }
+    const backend = opts.backend ?? 'baileys';
+    if (backend !== 'baileys' && backend !== 'business-api') {
+        console.log(pc.red(`Unknown backend: "${backend}". Use "baileys" or "business-api".`));
+        process.exit(1);
+    }
+    if (backend === 'business-api' && (!opts.phoneNumberId || !opts.accessToken || !opts.webhookVerifyToken)) {
+        console.log(pc.red('Business API requires --phone-number-id, --access-token, and --webhook-verify-token.'));
+        console.log('Example: instar add whatsapp --backend business-api \\');
+        console.log('  --phone-number-id 123456789 \\');
+        console.log('  --access-token EAAx... \\');
+        console.log('  --webhook-verify-token my-secret');
+        process.exit(1);
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    let config;
+    try {
+        config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    }
+    catch {
+        console.log(pc.red('Failed to parse .instar/config.json.'));
+        process.exit(1);
+    }
+    if (!config.messaging)
+        config.messaging = [];
+    // Remove existing WhatsApp config if any
+    config.messaging = config.messaging.filter((m) => m.type !== 'whatsapp');
+    const authMethod = opts.authMethod ?? 'qr';
+    if (authMethod !== 'qr' && authMethod !== 'pairing-code') {
+        console.log(pc.red(`Unknown auth method: "${authMethod}". Use "qr" or "pairing-code".`));
+        process.exit(1);
+    }
+    if (authMethod === 'pairing-code' && !opts.phone) {
+        console.log(pc.red('--phone is required for pairing-code auth method.'));
+        console.log('Example: instar add whatsapp --auth-method pairing-code --phone +14155552671');
+        process.exit(1);
+    }
+    const authorizedNumbers = opts.authorized
+        ? opts.authorized.split(',').map(n => n.trim()).filter(Boolean)
+        : [];
+    const waConfig = {
+        backend,
+        authorizedNumbers,
+    };
+    if (backend === 'baileys') {
+        waConfig.baileys = {
+            authMethod,
+            ...(opts.phone && { pairingPhoneNumber: opts.phone }),
+            ...(opts.encrypt && { encryptAuth: true }),
+        };
+    }
+    else if (backend === 'business-api') {
+        waConfig.businessApi = {
+            phoneNumberId: opts.phoneNumberId,
+            accessToken: opts.accessToken,
+            webhookVerifyToken: opts.webhookVerifyToken,
+            ...(opts.webhookPort && { webhookPort: opts.webhookPort }),
+        };
+    }
+    config.messaging.push({
+        type: 'whatsapp',
+        enabled: true,
+        config: waConfig,
+    });
+    const tmpPath = configPath + `.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+    try {
+        fs.writeFileSync(tmpPath, JSON.stringify(config, null, 2));
+        fs.renameSync(tmpPath, configPath);
+    }
+    catch (err) {
+        try {
+            fs.unlinkSync(tmpPath);
+        }
+        catch { /* ignore */ }
+        throw err;
+    }
+    console.log(pc.green('WhatsApp adapter configured successfully!'));
+    console.log(`  Backend: ${backend}`);
+    if (authorizedNumbers.length > 0) {
+        console.log(`  Authorized: ${authorizedNumbers.join(', ')}`);
+    }
+    else {
+        console.log(`  Authorized: all users (no restrictions)`);
+    }
+    if (backend === 'baileys') {
+        console.log(`  Auth method: ${authMethod}`);
+        if (opts.encrypt) {
+            console.log(`  Auth encryption: ${pc.green('enabled')}`);
+        }
+        console.log();
+        // Check if Baileys is installed
+        const baileysCheck = await isBaileysInstalled();
+        if (!baileysCheck.installed) {
+            console.log(pc.yellow('Baileys is not installed. Install it:'));
+            console.log(`  npm install @whiskeysockets/baileys`);
+            console.log();
+        }
+        console.log('Next steps:');
+        console.log(`  1. ${pc.cyan('instar channels login whatsapp')} — Authenticate with WhatsApp`);
+        console.log(`  2. Restart the server: ${pc.cyan('instar server stop && instar server start')}`);
+    }
+    else {
+        console.log(`  Phone Number ID: ${opts.phoneNumberId}`);
+        console.log(`  Webhook verify token: ${opts.webhookVerifyToken}`);
+        console.log();
+        console.log('Next steps:');
+        console.log(`  1. Configure your Meta webhook URL to point to your server's ${pc.cyan('/webhooks/whatsapp')} endpoint`);
+        console.log(`  2. Restart the server: ${pc.cyan('instar server stop && instar server start')}`);
+        console.log();
+        console.log(pc.yellow('Note: Business API requires a publicly accessible HTTPS endpoint.'));
+        console.log('If running locally, use Cloudflare Tunnel or ngrok to expose the webhook URL.');
+    }
+}
+export async function channelLogin(adapter, opts) {
+    if (adapter !== 'whatsapp') {
+        console.log(pc.red(`Unknown adapter: "${adapter}". Currently supported: whatsapp`));
+        process.exit(1);
+    }
+    let config;
+    try {
+        config = loadConfig(opts.dir);
+    }
+    catch {
+        console.log(pc.red('Not initialized. Run `instar init` first.'));
+        process.exit(1);
+    }
+    const waConfig = config.messaging?.find(m => m.type === 'whatsapp');
+    if (!waConfig) {
+        console.log(pc.red('WhatsApp is not configured. Run `instar add whatsapp` first.'));
+        process.exit(1);
+    }
+    // Check if Baileys is installed
+    const baileysCheck = await isBaileysInstalled();
+    if (!baileysCheck.installed) {
+        console.log(pc.red('Baileys is not installed.'));
+        console.log(`Run: ${pc.cyan('npm install @whiskeysockets/baileys')}`);
+        process.exit(1);
+    }
+    const authMethod = opts.method ?? waConfig.config.baileys?.authMethod ?? 'qr';
+    const authDir = path.join(config.stateDir, 'whatsapp-auth');
+    console.log(pc.bold('\n  WhatsApp Login\n'));
+    if (authMethod === 'qr') {
+        console.log('A QR code will appear in the terminal.');
+        console.log('Open WhatsApp on your phone > Settings > Linked Devices > Link a Device');
+        console.log('Scan the QR code to authenticate.\n');
+    }
+    else {
+        console.log('An 8-digit pairing code will be displayed.');
+        console.log('Open WhatsApp on your phone > Settings > Linked Devices > Link a Device');
+        console.log('Choose "Link with phone number instead" and enter the code.\n');
+    }
+    // Dynamic import of BaileysBackend
+    const { BaileysBackend } = await import('../messaging/backends/BaileysBackend.js');
+    const { WhatsAppAdapter } = await import('../messaging/WhatsAppAdapter.js');
+    const adapter_ = new WhatsAppAdapter(waConfig.config, config.stateDir);
+    const backend = new BaileysBackend(adapter_, adapter_.getBaileysConfig(), {
+        onQrCode: (qr) => {
+            console.log(pc.cyan('QR Code received — scan it with your phone:'));
+            // The Baileys printQRInTerminal option will print to terminal directly
+            console.log(`(QR data: ${qr.substring(0, 20)}...)\n`);
+        },
+        onPairingCode: (code) => {
+            console.log(pc.green(`Pairing code: ${pc.bold(code)}`));
+            console.log('Enter this code in WhatsApp on your phone.\n');
+        },
+        onConnected: (phoneNumber) => {
+            console.log(pc.green(`\nConnected as ${phoneNumber}!`));
+            console.log(`Auth state saved to: ${authDir}`);
+            console.log(`\nRestart the server to begin: ${pc.cyan('instar server stop && instar server start')}`);
+            process.exit(0);
+        },
+        onDisconnected: (reason, shouldReconnect) => {
+            if (!shouldReconnect) {
+                console.log(pc.red(`\nDisconnected: ${reason}`));
+                process.exit(1);
+            }
+            console.log(pc.yellow(`Disconnected: ${reason}. Reconnecting...`));
+        },
+        onMessage: () => { }, // Ignore messages during login
+        onError: (error) => {
+            console.log(pc.red(`\nError: ${error.message}`));
+            process.exit(1);
+        },
+    });
+    console.log('Connecting...\n');
+    await backend.connect();
+    // Keep the process alive for QR scanning
+    await new Promise(() => { }); // Block forever — process.exit() in onConnected/onError
+}
+export async function channelDoctor(adapter, opts) {
+    let config;
+    try {
+        config = loadConfig(opts.dir);
+    }
+    catch {
+        console.log(pc.red('Not initialized. Run `instar init` first.'));
+        process.exit(1);
+    }
+    const checks = [];
+    console.log(pc.bold('\n  Channel Diagnostics\n'));
+    const adapters = adapter ? [adapter] : ['telegram', 'whatsapp'];
+    for (const adapterType of adapters) {
+        const adapterConfig = config.messaging?.find(m => m.type === adapterType);
+        if (!adapterConfig) {
+            if (adapter) {
+                checks.push({ name: `${adapterType} config`, status: 'fail', detail: `Not configured. Run \`instar add ${adapterType}\`` });
+            }
+            continue;
+        }
+        checks.push({ name: `${adapterType} config`, status: adapterConfig.enabled ? 'ok' : 'warn', detail: adapterConfig.enabled ? 'Configured and enabled' : 'Configured but disabled' });
+        if (adapterType === 'whatsapp') {
+            const waConf = adapterConfig.config;
+            // Check backend
+            checks.push({ name: 'WhatsApp backend', status: 'ok', detail: waConf.backend ?? 'baileys' });
+            const currentBackend = waConf.backend ?? 'baileys';
+            // Backend-specific checks
+            if (currentBackend === 'baileys') {
+                const doctorBaileysCheck = await isBaileysInstalled();
+                if (doctorBaileysCheck.installed) {
+                    checks.push({ name: 'Baileys installed', status: 'ok', detail: `Found (${doctorBaileysCheck.packageName})` });
+                }
+                else {
+                    checks.push({ name: 'Baileys installed', status: 'fail', detail: 'Not installed. Run: npm install @whiskeysockets/baileys' });
+                }
+                // Check auth state
+                const authDir = waConf.baileys?.authDir ?? path.join(config.stateDir, 'whatsapp-auth');
+                const credsFile = path.join(authDir, 'creds.json');
+                if (fs.existsSync(credsFile)) {
+                    const encrypted = isEncryptedFile(credsFile);
+                    checks.push({
+                        name: 'Auth state',
+                        status: 'ok',
+                        detail: `Credentials found${encrypted ? ' (encrypted)' : ' (unencrypted)'}`,
+                    });
+                    if (!encrypted && waConf.baileys?.encryptAuth) {
+                        checks.push({ name: 'Auth encryption', status: 'warn', detail: 'Encryption enabled in config but credentials are not encrypted. Re-authenticate to encrypt.' });
+                    }
+                }
+                else {
+                    checks.push({ name: 'Auth state', status: 'warn', detail: `No credentials. Run \`instar channels login whatsapp\`` });
+                }
+                // Check auth method
+                const method = waConf.baileys?.authMethod ?? 'qr';
+                checks.push({ name: 'Auth method', status: 'ok', detail: method });
+                if (method === 'pairing-code' && !waConf.baileys?.pairingPhoneNumber) {
+                    checks.push({ name: 'Pairing phone', status: 'fail', detail: 'pairing-code auth requires pairingPhoneNumber in config' });
+                }
+            }
+            else if (currentBackend === 'business-api') {
+                const apiConf = waConf.businessApi;
+                // Check required Business API fields
+                checks.push({
+                    name: 'Phone Number ID',
+                    status: apiConf?.phoneNumberId ? 'ok' : 'fail',
+                    detail: apiConf?.phoneNumberId ? `${String(apiConf.phoneNumberId).slice(0, 8)}...` : 'Missing — required for Business API',
+                });
+                checks.push({
+                    name: 'Access token',
+                    status: apiConf?.accessToken ? 'ok' : 'fail',
+                    detail: apiConf?.accessToken ? `${String(apiConf.accessToken).slice(0, 8)}...` : 'Missing — required for Business API',
+                });
+                checks.push({
+                    name: 'Webhook verify token',
+                    status: apiConf?.webhookVerifyToken ? 'ok' : 'fail',
+                    detail: apiConf?.webhookVerifyToken ? 'Configured' : 'Missing — required for webhook verification',
+                });
+                // Webhook port
+                if (apiConf?.webhookPort) {
+                    checks.push({ name: 'Webhook port', status: 'ok', detail: `Port ${apiConf.webhookPort}` });
+                }
+                else {
+                    checks.push({ name: 'Webhook port', status: 'ok', detail: 'Using Instar server port (default)' });
+                }
+            }
+            // Check authorized numbers
+            const authNumbers = waConf.authorizedNumbers ?? [];
+            if (authNumbers.length > 0) {
+                checks.push({ name: 'Authorized users', status: 'ok', detail: `${authNumbers.length} number(s) configured` });
+            }
+            else {
+                checks.push({ name: 'Authorized users', status: 'warn', detail: 'No restrictions — all users can message. Set authorizedNumbers to restrict.' });
+            }
+            // Check consent records
+            const consentPath = path.join(config.stateDir, 'whatsapp', 'consent.json');
+            if (fs.existsSync(consentPath)) {
+                try {
+                    const records = JSON.parse(fs.readFileSync(consentPath, 'utf-8'));
+                    checks.push({ name: 'Privacy consent', status: 'ok', detail: `${records.length} consent record(s)` });
+                }
+                catch {
+                    checks.push({ name: 'Privacy consent', status: 'warn', detail: 'Consent file exists but is unreadable' });
+                }
+            }
+            else {
+                checks.push({ name: 'Privacy consent', status: 'ok', detail: 'No records yet (first-contact prompt will trigger)' });
+            }
+        }
+        if (adapterType === 'telegram') {
+            const tgConf = adapterConfig.config;
+            checks.push({ name: 'Telegram token', status: tgConf.token ? 'ok' : 'fail', detail: tgConf.token ? `${String(tgConf.token).slice(0, 8)}...` : 'Missing' });
+            checks.push({ name: 'Telegram chat ID', status: tgConf.chatId ? 'ok' : 'fail', detail: tgConf.chatId ? String(tgConf.chatId) : 'Missing' });
+        }
+    }
+    // Display results
+    for (const check of checks) {
+        const icon = check.status === 'ok' ? pc.green('OK') : check.status === 'warn' ? pc.yellow('WARN') : pc.red('FAIL');
+        console.log(`  [${icon}] ${check.name}: ${check.detail}`);
+    }
+    const fails = checks.filter(c => c.status === 'fail');
+    const warns = checks.filter(c => c.status === 'warn');
+    console.log();
+    if (fails.length > 0) {
+        console.log(pc.red(`  ${fails.length} issue(s) need attention.`));
+    }
+    else if (warns.length > 0) {
+        console.log(pc.yellow(`  ${warns.length} warning(s). Everything functional.`));
+    }
+    else if (checks.length > 0) {
+        console.log(pc.green('  All checks passed.'));
+    }
+    else {
+        console.log('  No messaging adapters configured.');
+    }
+}
+export async function channelStatus(opts) {
+    let config;
+    try {
+        config = loadConfig(opts.dir);
+    }
+    catch {
+        console.log(pc.red('Not initialized. Run `instar init` first.'));
+        process.exit(1);
+    }
+    console.log(pc.bold('\n  Messaging Channels\n'));
+    const adapters = config.messaging ?? [];
+    if (adapters.length === 0) {
+        console.log('  No messaging adapters configured.');
+        console.log(`  Add one: ${pc.cyan('instar add telegram')} or ${pc.cyan('instar add whatsapp')}`);
+        return;
+    }
+    for (const adapter of adapters) {
+        const status = adapter.enabled ? pc.green('enabled') : pc.red('disabled');
+        console.log(`  ${pc.bold(adapter.type)} [${status}]`);
+        if (adapter.type === 'whatsapp') {
+            const conf = adapter.config;
+            const whatsappBackend = conf.backend ?? 'baileys';
+            console.log(`    Backend: ${whatsappBackend}`);
+            if (whatsappBackend === 'baileys') {
+                console.log(`    Auth: ${conf.baileys?.authMethod ?? 'qr'}`);
+                const authDir = conf.baileys?.authDir ?? path.join(config.stateDir, 'whatsapp-auth');
+                const hasCreds = fs.existsSync(path.join(authDir, 'creds.json'));
+                console.log(`    Authenticated: ${hasCreds ? pc.green('yes') : pc.yellow('no')}`);
+            }
+            else if (whatsappBackend === 'business-api') {
+                const apiConf = conf.businessApi;
+                console.log(`    Phone Number ID: ${apiConf?.phoneNumberId ? `${String(apiConf.phoneNumberId).slice(0, 8)}...` : pc.red('missing')}`);
+                console.log(`    Access token: ${apiConf?.accessToken ? pc.green('configured') : pc.red('missing')}`);
+                console.log(`    Webhook: ${apiConf?.webhookVerifyToken ? pc.green('configured') : pc.red('missing')}`);
+            }
+        }
+        if (adapter.type === 'telegram') {
+            const conf = adapter.config;
+            console.log(`    Token: ${conf.token ? `${String(conf.token).slice(0, 8)}...` : pc.red('missing')}`);
+            console.log(`    Chat ID: ${conf.chatId ?? pc.red('missing')}`);
+        }
+        console.log();
+    }
+}
+//# sourceMappingURL=whatsapp.js.map

package/dist/commands/whatsapp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whatsapp.js","sourceRoot":"","sources":["../../src/commands/whatsapp.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAE5E;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB;IAC/B,sEAAsE;IACtE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;QAC1C,IAAI,CAAC;YACH,4DAA4D;YAC5D,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACxC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qBAAqB,OAAO,qCAAqC,CAAC,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC,CAAC;QAC5G,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8DAA8D;IAC9D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;IAE7C,yCAAyC;IACzC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAE3F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,yBAAyB,UAAU,gCAAgC,CAAC,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,UAAU,KAAK,cAAc,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU;QACvC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/D,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,QAAQ,GAA4B;QACxC,OAAO;QACP,iBAAiB;KAClB,CAAC;IAEF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,QAAQ,CAAC,OAAO,GAAG;YACjB,UAAU;YACV,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;SAC3C,CAAC;IACJ,CAAC;SAAM,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QACtC,QAAQ,CAAC,WAAW,GAAG;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;QACpB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,UAAU,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1F,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;IACrC,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,iBAAiB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,gCAAgC;QAChC,MAAM,YAAY,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAChD,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,gCAAgC,CAAC,+BAA+B,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC,IAAI,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,kEAAkE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACxH,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC,IAAI,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,mEAAmE,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,IAAyB;IAC3E,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qBAAqB,OAAO,kCAAkC,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gCAAgC;IAChC,MAAM,YAAY,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAChD,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAK,QAAQ,CAAC,MAAc,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC;IACvF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAE5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE7C,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC;IAED,mCAAmC;IACnC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;IACnF,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAE5E,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEvE,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,EAAE,EAAE;QACxE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,CAAC;YACpE,uEAAuE;YACvE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;QACxD,CAAC;QACD,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE;YACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;QACD,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE;YAC3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,kBAAkB,WAAW,GAAG,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,CAAC,IAAI,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;YACtG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE;YAC1C,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,MAAM,mBAAmB,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,+BAA+B;QACpD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/B,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAExB,yCAAyC;IACzC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,wDAAwD;AACvF,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA2B,EAAE,IAA0B;IACzF,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAA4E,EAAE,CAAC;IAE3F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAEhE,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAE1E,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,WAAW,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oCAAoC,WAAW,IAAI,EAAE,CAAC,CAAC;YAC9H,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,WAAW,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,CAAC;QAEpL,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAa,CAAC;YAE3C,gBAAgB;YAChB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;YAE7F,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;YAEnD,0BAA0B;YAC1B,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,EAAE,CAAC;gBACtD,IAAI,kBAAkB,CAAC,SAAS,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,kBAAkB,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;gBAChH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC,CAAC;gBAChI,CAAC;gBAED,mBAAmB;gBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;gBACvF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBACnD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7B,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;oBAC7C,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,YAAY;wBAClB,MAAM,EAAE,IAAI;wBACZ,MAAM,EAAE,oBAAoB,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,EAAE;qBAC5E,CAAC,CAAC;oBAEH,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;wBAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6FAA6F,EAAE,CAAC,CAAC;oBAClK,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC,CAAC;gBACxH,CAAC;gBAED,oBAAoB;gBACpB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAEnE,IAAI,MAAM,KAAK,cAAc,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,CAAC;oBACrE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC,CAAC;gBAC5H,CAAC;YACH,CAAC;iBAAM,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC;gBAEnC,qCAAqC;gBACrC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;oBAC9C,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qCAAqC;iBAC3H,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;oBAC5C,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qCAAqC;iBACvH,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,sBAAsB;oBAC5B,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;oBACnD,MAAM,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,6CAA6C;iBACnG,CAAC,CAAC;gBAEH,eAAe;gBACf,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC7F,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC,CAAC;gBACpG,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;YACnD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,uBAAuB,EAAE,CAAC,CAAC;YAChH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,6EAA6E,EAAE,CAAC,CAAC;YACnJ,CAAC;YAED,wBAAwB;YACxB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;YAC3E,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;oBAClE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC;gBACxG,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC,CAAC;gBAC5G,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC,CAAC;YACvH,CAAC;QACH,CAAC;QAED,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAa,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3J,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9I,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnH,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,2BAA2B,CAAC,CAAC,CAAC;IACpE,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,MAAM,qCAAqC,CAAC,CAAC,CAAC;IACjF,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC;QAEtD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAa,CAAC;YACnC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,gBAAgB,eAAe,EAAE,CAAC,CAAC;YAE/C,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;gBACrF,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;iBAAM,IAAI,eAAe,KAAK,cAAc,EAAE,CAAC;gBAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACtI,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACtG,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAa,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACrG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/config/ConfigDefaults.d.ts

@@ -0,0 +1,40 @@
+/**
+ * ConfigDefaults — Single source of truth for Instar agent config defaults.
+ *
+ * RULES FOR THIS FILE:
+ * 1. Only include fields that are SAFE for all agents (not runtime-generated)
+ * 2. Never include: port, authToken, paths, dashboardPin, chatId, botToken
+ * 3. If a field differs by agent type, put it in TYPE_OVERRIDES
+ * 4. If a field should be more conservative for existing agents, put it in MIGRATION_OVERRIDES
+ * 5. Every field here is auto-applied to existing agents on update via PostUpdateMigrator
+ * 6. Adding a field here is equivalent to adding it to BOTH init AND migration
+ *
+ * Runtime-generated fields that MUST NOT appear here:
+ *   port, authToken, dashboardPin, stateDir, projectDir, tmuxPath, claudePath,
+ *   chatId, botToken, appToken, token (any credential), webhookUrl
+ */
+export type AgentType = 'managed-project' | 'standalone';
+/**
+ * Get the complete defaults for a given agent type (used by init).
+ * Returns a deep copy safe to mutate.
+ */
+export declare function getInitDefaults(agentType: AgentType): Record<string, unknown>;
+/**
+ * Get the defaults for migration (used by PostUpdateMigrator).
+ * Uses conservative overrides for security-sensitive fields.
+ */
+export declare function getMigrationDefaults(agentType: AgentType): Record<string, unknown>;
+/**
+ * Apply defaults to an existing config. Only adds MISSING keys.
+ * Never overwrites existing values. Respects _instar_noMigrate.
+ *
+ * Arrays are treated as opaque leaves — if present, left alone; if absent, added whole.
+ *
+ * @returns { patched, changes, skipped }
+ */
+export declare function applyDefaults(config: Record<string, unknown>, defaults: Record<string, unknown>): {
+    patched: boolean;
+    changes: string[];
+    skipped: string[];
+};
+//# sourceMappingURL=ConfigDefaults.d.ts.map

package/dist/config/ConfigDefaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigDefaults.d.ts","sourceRoot":"","sources":["../../src/config/ConfigDefaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA2GH,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAO7E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIlF;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAuC5D"}

package/dist/config/ConfigDefaults.js

@@ -0,0 +1,175 @@
+/**
+ * ConfigDefaults — Single source of truth for Instar agent config defaults.
+ *
+ * RULES FOR THIS FILE:
+ * 1. Only include fields that are SAFE for all agents (not runtime-generated)
+ * 2. Never include: port, authToken, paths, dashboardPin, chatId, botToken
+ * 3. If a field differs by agent type, put it in TYPE_OVERRIDES
+ * 4. If a field should be more conservative for existing agents, put it in MIGRATION_OVERRIDES
+ * 5. Every field here is auto-applied to existing agents on update via PostUpdateMigrator
+ * 6. Adding a field here is equivalent to adding it to BOTH init AND migration
+ *
+ * Runtime-generated fields that MUST NOT appear here:
+ *   port, authToken, dashboardPin, stateDir, projectDir, tmuxPath, claudePath,
+ *   chatId, botToken, appToken, token (any credential), webhookUrl
+ */
+/** Fields shared across ALL agent types and contexts (init + migration) */
+const SHARED_DEFAULTS = {
+    monitoring: {
+        memoryMonitoring: true,
+        healthCheckIntervalMs: 30000,
+        promptGate: {
+            enabled: true,
+            autoApprove: {
+                enabled: true,
+                fileCreation: true,
+                fileEdits: true,
+                planApproval: false,
+            },
+            dryRun: false,
+        },
+    },
+    threadline: {
+        relayEnabled: false,
+        visibility: 'public',
+        capabilities: ['chat'],
+    },
+};
+/**
+ * Fields that differ between agent types at INIT time.
+ * These override SHARED_DEFAULTS when creating new agents.
+ */
+const TYPE_OVERRIDES = {
+    'managed-project': {
+        monitoring: { quotaTracking: false },
+        externalOperations: {
+            enabled: true,
+            sentinel: { enabled: true },
+            services: {},
+            readOnlyServices: [],
+            trust: {
+                floor: 'collaborative',
+                autoElevateEnabled: true,
+                elevationThreshold: 5,
+            },
+        },
+        tunnel: {
+            enabled: true,
+            type: 'quick',
+        },
+    },
+    standalone: {
+        monitoring: { quotaTracking: true },
+        externalOperations: {
+            enabled: true,
+            sentinel: { enabled: true },
+            services: {},
+            readOnlyServices: [],
+            trust: {
+                floor: 'collaborative',
+                autoElevateEnabled: true,
+                elevationThreshold: 5,
+            },
+        },
+    },
+};
+/**
+ * Fields that should use MORE CONSERVATIVE values when migrating to existing agents.
+ * These override SHARED_DEFAULTS + TYPE_OVERRIDES during migration only.
+ *
+ * Rationale: existing agents were operating without these features.
+ * Silently enabling permissive settings could change security posture.
+ * New agents get the permissive defaults; existing agents get conservative ones.
+ */
+const MIGRATION_OVERRIDES = {
+    externalOperations: {
+        enabled: true,
+        sentinel: { enabled: true },
+        services: {},
+        readOnlyServices: [],
+        trust: {
+            floor: 'supervised', // More conservative than init's 'collaborative'
+            autoElevateEnabled: false, // Don't auto-elevate existing agents
+            elevationThreshold: 10, // Higher threshold
+        },
+    },
+};
+// ── Deep Merge Utility ──
+/**
+ * Deep merge source into target (mutates target).
+ * Arrays are treated as opaque leaves (replaced, never merged/concatenated).
+ */
+function deepMerge(target, source) {
+    for (const key of Object.keys(source)) {
+        if (typeof target[key] === 'object' && target[key] !== null && !Array.isArray(target[key]) &&
+            typeof source[key] === 'object' && source[key] !== null && !Array.isArray(source[key])) {
+            deepMerge(target[key], source[key]);
+        }
+        else {
+            target[key] = structuredClone(source[key]);
+        }
+    }
+}
+/**
+ * Get the complete defaults for a given agent type (used by init).
+ * Returns a deep copy safe to mutate.
+ */
+export function getInitDefaults(agentType) {
+    const base = structuredClone(SHARED_DEFAULTS);
+    const overrides = TYPE_OVERRIDES[agentType];
+    if (overrides) {
+        deepMerge(base, structuredClone(overrides));
+    }
+    return base;
+}
+/**
+ * Get the defaults for migration (used by PostUpdateMigrator).
+ * Uses conservative overrides for security-sensitive fields.
+ */
+export function getMigrationDefaults(agentType) {
+    const base = getInitDefaults(agentType);
+    deepMerge(base, structuredClone(MIGRATION_OVERRIDES));
+    return base;
+}
+/**
+ * Apply defaults to an existing config. Only adds MISSING keys.
+ * Never overwrites existing values. Respects _instar_noMigrate.
+ *
+ * Arrays are treated as opaque leaves — if present, left alone; if absent, added whole.
+ *
+ * @returns { patched, changes, skipped }
+ */
+export function applyDefaults(config, defaults) {
+    const noMigrate = new Set(Array.isArray(config._instar_noMigrate)
+        ? config._instar_noMigrate
+        : []);
+    const changes = [];
+    const skipped = [];
+    function merge(target, source, path) {
+        for (const key of Object.keys(source)) {
+            const fullPath = path ? `${path}.${key}` : key;
+            // Skip fields the user explicitly opted out of
+            if (noMigrate.has(fullPath) || noMigrate.has(key)) {
+                skipped.push(`${fullPath} (opted out via _instar_noMigrate)`);
+                continue;
+            }
+            if (!(key in target)) {
+                // Key is missing — add it
+                target[key] = structuredClone(source[key]);
+                changes.push(`${fullPath} (added)`);
+            }
+            else if (typeof target[key] === 'object' && target[key] !== null && !Array.isArray(target[key]) &&
+                typeof source[key] === 'object' && source[key] !== null && !Array.isArray(source[key])) {
+                // Both are objects — recurse
+                merge(target[key], source[key], fullPath);
+            }
+            else {
+                // Key exists with a non-object value, or one side is an array — don't touch
+                // (includes type mismatches like boolean vs object — skip, don't crash)
+            }
+        }
+    }
+    merge(config, defaults, '');
+    return { patched: changes.length > 0, changes, skipped };
+}
+//# sourceMappingURL=ConfigDefaults.js.map