@iflow-mcp/jkheadley-instar 0.26.2

package/dist/core/GlobalSecretStore.js

@@ -0,0 +1,396 @@
+/**
+ * Global encrypted secret store — lives at ~/.instar/secrets/ to survive repo nukes.
+ *
+ * Unlike the per-agent SecretStore (which lives inside .instar/secrets/),
+ * this store persists across agent deletions and reinstalls on the same machine.
+ *
+ * Encryption: AES-256-GCM with a master key stored in:
+ *   1. macOS Keychain (preferred — transparent, no password needed)
+ *   2. Password-derived key via PBKDF2 (fallback — user enters password)
+ *
+ * File layout:
+ *   ~/.instar/secrets/
+ *     global.secrets.enc    — encrypted secrets (all agents on this machine)
+ *     global.key            — master key file (0600, only if keychain unavailable)
+ *
+ * Secrets are organized by agent name:
+ *   {
+ *     "agents": {
+ *       "my-agent": {
+ *         "telegram-token": "bot123:ABC",
+ *         "telegram-chat-id": "-100123",
+ *         ...
+ *       }
+ *     }
+ *   }
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { execFileSync } from 'node:child_process';
+// ── Constants ────────────────────────────────────────────────────────
+function defaultSecretsDir() { return path.join(os.homedir(), '.instar', 'secrets'); }
+const KEYCHAIN_SERVICE = 'instar-global-secrets';
+const KEYCHAIN_ACCOUNT = 'master-key';
+const MASTER_KEY_LENGTH = 32; // AES-256
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+const PBKDF2_ITERATIONS = 600000; // OWASP recommendation for PBKDF2-SHA256
+const PBKDF2_SALT_LENGTH = 32;
+// ── Global Secret Store ──────────────────────────────────────────────
+export class GlobalSecretStore {
+    masterKey = null;
+    secretsDir;
+    encryptedFile;
+    keyFile;
+    useKeychain;
+    constructor(basePath) {
+        this.secretsDir = basePath || defaultSecretsDir();
+        // Skip keychain when a custom basePath is provided (tests / self-contained stores)
+        this.useKeychain = !basePath;
+        this.encryptedFile = path.join(this.secretsDir, 'global.secrets.enc');
+        this.keyFile = path.join(this.secretsDir, 'global.key');
+        // Ensure directory exists
+        if (!fs.existsSync(this.secretsDir)) {
+            fs.mkdirSync(this.secretsDir, { recursive: true, mode: 0o700 });
+        }
+    }
+    // ── Agent-Scoped Operations ───────────────────────────────────────
+    /**
+     * Get a secret for an agent.
+     * Returns null if the agent or key doesn't exist.
+     */
+    getSecret(agentName, key) {
+        const secrets = this.readSecrets();
+        if (!secrets)
+            return null;
+        return secrets.agents?.[agentName]?.[key] ?? null;
+    }
+    /**
+     * Set a secret for an agent.
+     */
+    setSecret(agentName, key, value) {
+        const secrets = this.readSecrets() || { agents: {} };
+        if (!secrets.agents[agentName]) {
+            secrets.agents[agentName] = {};
+        }
+        secrets.agents[agentName][key] = value;
+        this.writeSecrets(secrets);
+    }
+    /**
+     * Get all secrets for an agent.
+     * Returns empty object if agent has no secrets.
+     */
+    getAgentSecrets(agentName) {
+        const secrets = this.readSecrets();
+        if (!secrets)
+            return {};
+        return secrets.agents?.[agentName] ?? {};
+    }
+    /**
+     * Set multiple secrets for an agent at once.
+     */
+    setAgentSecrets(agentName, newSecrets) {
+        const secrets = this.readSecrets() || { agents: {} };
+        secrets.agents[agentName] = {
+            ...(secrets.agents[agentName] || {}),
+            ...newSecrets,
+        };
+        this.writeSecrets(secrets);
+    }
+    /**
+     * Delete all secrets for an agent.
+     */
+    deleteAgent(agentName) {
+        const secrets = this.readSecrets();
+        if (!secrets || !secrets.agents[agentName])
+            return;
+        delete secrets.agents[agentName];
+        this.writeSecrets(secrets);
+    }
+    /**
+     * Delete a specific secret for an agent.
+     */
+    deleteSecret(agentName, key) {
+        const secrets = this.readSecrets();
+        if (!secrets || !secrets.agents?.[agentName])
+            return;
+        delete secrets.agents[agentName][key];
+        // Clean up empty agent entries
+        if (Object.keys(secrets.agents[agentName]).length === 0) {
+            delete secrets.agents[agentName];
+        }
+        this.writeSecrets(secrets);
+    }
+    /**
+     * Check if any secrets exist for an agent.
+     */
+    hasAgent(agentName) {
+        const secrets = this.readSecrets();
+        if (!secrets)
+            return false;
+        return !!secrets.agents?.[agentName] && Object.keys(secrets.agents[agentName]).length > 0;
+    }
+    /**
+     * Check if a specific secret exists for an agent.
+     */
+    hasSecret(agentName, key) {
+        return this.getSecret(agentName, key) !== null;
+    }
+    /**
+     * List all agent names that have stored secrets.
+     */
+    listAgents() {
+        const secrets = this.readSecrets();
+        if (!secrets)
+            return [];
+        return Object.keys(secrets.agents);
+    }
+    /** Whether the encrypted store file exists. */
+    get exists() {
+        return fs.existsSync(this.encryptedFile);
+    }
+    // ── Key Management ────────────────────────────────────────────────
+    /**
+     * Initialize with a user-provided password.
+     * Derives the master key via PBKDF2.
+     * Returns true if this created a new store (vs unlocked existing).
+     */
+    initWithPassword(password) {
+        const isNew = !this.exists;
+        if (isNew) {
+            // Generate salt and derive key
+            const salt = crypto.randomBytes(PBKDF2_SALT_LENGTH);
+            const key = crypto.pbkdf2Sync(password, salt, PBKDF2_ITERATIONS, MASTER_KEY_LENGTH, 'sha256');
+            // Store salt alongside key file (salt is not secret, just needs to be consistent)
+            const keyData = JSON.stringify({
+                type: 'pbkdf2',
+                salt: salt.toString('base64'),
+                iterations: PBKDF2_ITERATIONS,
+            });
+            fs.writeFileSync(this.keyFile, keyData, { mode: 0o600 });
+            this.masterKey = key;
+            // Create empty secrets
+            this.writeSecrets({ agents: {} });
+        }
+        else {
+            // Read salt from key file and derive key
+            this.masterKey = this.deriveKeyFromPassword(password);
+            // Verify by trying to read — will throw if wrong password
+            this.readSecrets();
+        }
+        return isNew;
+    }
+    /**
+     * Initialize with auto-generated key in OS keychain.
+     * Transparent — no password needed.
+     * Returns false if keychain is not available.
+     */
+    initWithKeychain() {
+        if (!this.useKeychain)
+            return false;
+        const key = this.readKeychain();
+        if (key) {
+            this.masterKey = key;
+            return true;
+        }
+        // Generate a new key and store in keychain
+        const newKey = crypto.randomBytes(MASTER_KEY_LENGTH);
+        if (this.writeKeychain(newKey)) {
+            this.masterKey = newKey;
+            // Mark key file as keychain-backed
+            fs.writeFileSync(this.keyFile, JSON.stringify({ type: 'keychain' }), { mode: 0o600 });
+            if (!this.exists) {
+                this.writeSecrets({ agents: {} });
+            }
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Auto-initialize: respects existing store type, falls back to keychain for new stores.
+     * When keychain is unavailable, falls back to a machine-derived password.
+     * Returns true if the store is ready to use without user interaction.
+     */
+    autoInit() {
+        // If already initialized, we're good
+        if (this.masterKey)
+            return true;
+        // Check existing key file type FIRST — don't override an existing store
+        if (fs.existsSync(this.keyFile)) {
+            try {
+                const keyData = JSON.parse(fs.readFileSync(this.keyFile, 'utf-8'));
+                if (keyData.type === 'keychain') {
+                    // Keychain-backed store — try to read from keychain
+                    return this.initWithKeychain();
+                }
+                if (keyData.type === 'pbkdf2-auto') {
+                    // Auto-generated machine-derived password — can re-unlock
+                    return this.initWithMachinePassword();
+                }
+                if (keyData.type === 'pbkdf2') {
+                    // User-set password store — need user to provide password
+                    return false;
+                }
+            }
+            catch {
+                // @silent-fallback-ok — fallback to local store when global unavailable
+                return false;
+            }
+        }
+        // No key file exists yet — try keychain, then machine-derived password
+        if (this.initWithKeychain())
+            return true;
+        // Keychain not available — auto-create with machine-derived password
+        return this.initWithMachinePassword();
+    }
+    /**
+     * Initialize with a machine-derived password (hostname + homedir).
+     * The key file is marked as 'pbkdf2-auto' so autoInit() can re-unlock.
+     */
+    initWithMachinePassword() {
+        const password = `instar-local-${os.hostname()}-${os.homedir()}`;
+        const isNew = !this.exists;
+        if (isNew) {
+            const salt = crypto.randomBytes(PBKDF2_SALT_LENGTH);
+            const key = crypto.pbkdf2Sync(password, salt, PBKDF2_ITERATIONS, MASTER_KEY_LENGTH, 'sha256');
+            const keyData = JSON.stringify({
+                type: 'pbkdf2-auto',
+                salt: salt.toString('base64'),
+                iterations: PBKDF2_ITERATIONS,
+            });
+            fs.writeFileSync(this.keyFile, keyData, { mode: 0o600 });
+            this.masterKey = key;
+            this.writeSecrets({ agents: {} });
+        }
+        else {
+            this.masterKey = this.deriveKeyFromPassword(password);
+            this.readSecrets(); // Verify
+        }
+        return true;
+    }
+    /** Whether the store requires a password to unlock. */
+    requiresPassword() {
+        if (!fs.existsSync(this.keyFile))
+            return false;
+        try {
+            const keyData = JSON.parse(fs.readFileSync(this.keyFile, 'utf-8'));
+            return keyData.type === 'pbkdf2';
+        }
+        catch {
+            return false;
+        }
+    }
+    // ── Encryption ────────────────────────────────────────────────────
+    readSecrets() {
+        if (!fs.existsSync(this.encryptedFile))
+            return null;
+        if (!this.masterKey) {
+            // Try auto-init
+            if (!this.autoInit())
+                return null;
+        }
+        const raw = fs.readFileSync(this.encryptedFile);
+        return this.decrypt(raw);
+    }
+    writeSecrets(secrets) {
+        if (!this.masterKey)
+            throw new Error('GlobalSecretStore not initialized — call initWithKeychain() or initWithPassword() first');
+        const encrypted = this.encrypt(secrets);
+        // Atomic write
+        const tmpPath = this.encryptedFile + '.tmp';
+        fs.writeFileSync(tmpPath, encrypted, { mode: 0o600 });
+        fs.renameSync(tmpPath, this.encryptedFile);
+    }
+    encrypt(data) {
+        const iv = crypto.randomBytes(IV_LENGTH);
+        const cipher = crypto.createCipheriv('aes-256-gcm', this.masterKey, iv);
+        const plaintext = Buffer.from(JSON.stringify(data), 'utf-8');
+        const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        // Format: [iv (12)] [tag (16)] [ciphertext]
+        return Buffer.concat([iv, tag, encrypted]);
+    }
+    decrypt(raw) {
+        if (raw.length < IV_LENGTH + AUTH_TAG_LENGTH + 1) {
+            throw new Error('GlobalSecretStore: encrypted file is too short (corrupted?)');
+        }
+        const iv = raw.subarray(0, IV_LENGTH);
+        const tag = raw.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH);
+        const ciphertext = raw.subarray(IV_LENGTH + AUTH_TAG_LENGTH);
+        const decipher = crypto.createDecipheriv('aes-256-gcm', this.masterKey, iv);
+        decipher.setAuthTag(tag);
+        const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+        return JSON.parse(decrypted.toString('utf-8'));
+    }
+    // ── Key Derivation ────────────────────────────────────────────────
+    deriveKeyFromPassword(password) {
+        if (!fs.existsSync(this.keyFile)) {
+            throw new Error('No key file found — store has not been initialized');
+        }
+        const keyData = JSON.parse(fs.readFileSync(this.keyFile, 'utf-8'));
+        if (keyData.type !== 'pbkdf2' && keyData.type !== 'pbkdf2-auto') {
+            throw new Error('Store is not password-based');
+        }
+        const salt = Buffer.from(keyData.salt, 'base64');
+        const iterations = keyData.iterations || PBKDF2_ITERATIONS;
+        return crypto.pbkdf2Sync(password, salt, iterations, MASTER_KEY_LENGTH, 'sha256');
+    }
+    // ── macOS Keychain ────────────────────────────────────────────────
+    readKeychain() {
+        if (process.platform !== 'darwin')
+            return null;
+        try {
+            const result = execFileSync('security', [
+                'find-generic-password',
+                '-s', KEYCHAIN_SERVICE,
+                '-a', KEYCHAIN_ACCOUNT,
+                '-w',
+            ], { encoding: 'utf-8', timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+            return Buffer.from(result, 'base64');
+        }
+        catch {
+            // @silent-fallback-ok — fallback to local store when global unavailable
+            return null;
+        }
+    }
+    writeKeychain(key) {
+        if (process.platform !== 'darwin')
+            return false;
+        try {
+            // Delete existing entry first
+            try {
+                execFileSync('security', [
+                    'delete-generic-password',
+                    '-s', KEYCHAIN_SERVICE,
+                    '-a', KEYCHAIN_ACCOUNT,
+                ], { stdio: 'pipe', timeout: 5000 });
+            }
+            catch {
+                // @silent-fallback-ok — fallback to local store when global unavailable
+                // Entry may not exist
+            }
+            execFileSync('security', [
+                'add-generic-password',
+                '-s', KEYCHAIN_SERVICE,
+                '-a', KEYCHAIN_ACCOUNT,
+                '-w', key.toString('base64'),
+            ], { stdio: 'pipe', timeout: 5000 });
+            return true;
+        }
+        catch {
+            // @silent-fallback-ok — fallback to local store when global unavailable
+            return false;
+        }
+    }
+    /** Destroy all stored secrets and keys. For testing only. */
+    destroy() {
+        if (fs.existsSync(this.encryptedFile))
+            fs.unlinkSync(this.encryptedFile);
+        if (fs.existsSync(this.keyFile))
+            fs.unlinkSync(this.keyFile);
+        this.masterKey = null;
+    }
+}
+//# sourceMappingURL=GlobalSecretStore.js.map

package/dist/core/GlobalSecretStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GlobalSecretStore.js","sourceRoot":"","sources":["../../src/core/GlobalSecretStore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,wEAAwE;AAExE,SAAS,iBAAiB,KAAa,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACjD,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAC,UAAU;AACxC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,yCAAyC;AAC3E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAQ9B,wEAAwE;AAExE,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAkB,IAAI,CAAC;IAChC,UAAU,CAAS;IACnB,aAAa,CAAS;IACtB,OAAO,CAAS;IAChB,WAAW,CAAU;IAE7B,YAAY,QAAiB;QAC3B,IAAI,CAAC,UAAU,GAAG,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClD,mFAAmF;QACnF,IAAI,CAAC,WAAW,GAAG,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAExD,0BAA0B;QAC1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,qEAAqE;IAErE;;;OAGG;IACH,SAAS,CAAC,SAAiB,EAAE,GAAW;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB,EAAE,GAAW,EAAE,KAAa;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;QACjC,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,SAAiB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB,EAAE,UAAkC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACrD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG;YAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpC,GAAG,UAAU;SACd,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,SAAiB;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO;QACnD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB,EAAE,GAAW;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC;YAAE,OAAO;QACrD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC;QACtC,+BAA+B;QAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,SAAiB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5F,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB,EAAE,GAAW;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,UAAU;QACR,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,+CAA+C;IAC/C,IAAI,MAAM;QACR,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC;IAED,qEAAqE;IAErE;;;;OAIG;IACH,gBAAgB,CAAC,QAAgB;QAC/B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3B,IAAI,KAAK,EAAE,CAAC;YACV,+BAA+B;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YAE9F,kFAAkF;YAClF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC7B,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC7B,UAAU,EAAE,iBAAiB;aAC9B,CAAC,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAEzD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,uBAAuB;YACvB,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,yCAAyC;YACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACtD,0DAA0D;YAC1D,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,gBAAgB;QACd,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2CAA2C;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YACxB,mCAAmC;YACnC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,qCAAqC;QACrC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAEhC,wEAAwE;QACxE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACnE,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAChC,oDAAoD;oBACpD,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACjC,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACnC,0DAA0D;oBAC1D,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACxC,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,0DAA0D;oBAC1D,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;gBACxE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,IAAI,IAAI,CAAC,gBAAgB,EAAE;YAAE,OAAO,IAAI,CAAC;QAEzC,qEAAqE;QACrE,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACxC,CAAC;IAED;;;OAGG;IACK,uBAAuB;QAC7B,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAE3B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC7B,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC7B,UAAU,EAAE,iBAAiB;aAC9B,CAAC,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;YACrB,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uDAAuD;IACvD,gBAAgB;QACd,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACnE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,qEAAqE;IAE7D,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,gBAAgB;YAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAAE,OAAO,IAAI,CAAC;QACpC,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAEO,YAAY,CAAC,OAAsB;QACzC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAEhI,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAExC,eAAe;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC;IAEO,OAAO,CAAC,IAAmB;QACjC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAU,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,4CAA4C;QAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7C,CAAC;IAEO,OAAO,CAAC,GAAW;QACzB,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,GAAG,eAAe,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,eAAe,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;QAE7D,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,SAAU,EAAE,EAAE,CAAC,CAAC;QAC7E,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,qEAAqE;IAE7D,qBAAqB,CAAC,QAAgB;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;QAC3D,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACpF,CAAC;IAED,qEAAqE;IAE7D,YAAY;QAClB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE;gBACtC,uBAAuB;gBACvB,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,gBAAgB;gBACtB,IAAI;aACL,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACjF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,GAAW;QAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAEhD,IAAI,CAAC;YACH,8BAA8B;YAC9B,IAAI,CAAC;gBACH,YAAY,CAAC,UAAU,EAAE;oBACvB,yBAAyB;oBACzB,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,gBAAgB;iBACvB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;gBACxE,sBAAsB;YACxB,CAAC;YAED,YAAY,CAAC,UAAU,EAAE;gBACvB,sBAAsB;gBACtB,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC7B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,OAAO;QACL,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;CACF"}

package/dist/core/HandoffManager.d.ts

@@ -0,0 +1,163 @@
+/**
+ * HandoffManager — Seamless work transfer between machines.
+ *
+ * Handles three scenarios:
+ *   1. Graceful handoff: outgoing machine saves state, writes handoff note
+ *   2. Resume: incoming machine reads handoff note, picks up where left off
+ *   3. Crash recovery: incoming machine detects stale work, recovers gracefully
+ *
+ * From INTELLIGENT_SYNC_SPEC Section 9 (Machine Transition) and
+ * Section 10 (Failover and Handoff).
+ */
+import type { WorkLedger, LedgerEntry } from './WorkLedger.js';
+export interface HandoffNote {
+    /** Schema version for forward compatibility. */
+    schemaVersion: number;
+    /** Machine that initiated the handoff. */
+    from: string;
+    /** Timestamp of handoff. */
+    at: string;
+    /** Reason for handoff. */
+    reason: HandoffReason;
+    /** Active work items at time of handoff. */
+    activeWork: HandoffWorkItem[];
+    /** Whether all changes were committed and pushed. */
+    allChangesPushed: boolean;
+    /** Any notes about uncommitted state. */
+    uncommittedNotes: string;
+    /** The git HEAD at handoff time. */
+    gitHead: string;
+    /** Branches that were active at handoff. */
+    activeBranches: string[];
+}
+export type HandoffReason = 'user-initiated' | 'inactivity' | 'shutdown' | 'sleep' | 'crash-detected';
+export interface HandoffWorkItem {
+    /** Ledger entry ID. */
+    entryId: string;
+    /** Session ID. */
+    sessionId: string;
+    /** Branch name (if on a task branch). */
+    branch?: string;
+    /** Status at handoff time. */
+    status: 'paused' | 'interrupted';
+    /** Task description. */
+    description: string;
+    /** Files that were being worked on. */
+    filesModified: string[];
+    /** Instructions for resuming. */
+    resumeInstructions?: string;
+}
+export interface HandoffResult {
+    /** Whether the handoff completed successfully. */
+    success: boolean;
+    /** The handoff note that was written. */
+    note?: HandoffNote;
+    /** Number of ledger entries paused. */
+    entriesPaused: number;
+    /** Number of WIP commits created. */
+    wipCommits: number;
+    /** Whether push succeeded. */
+    pushed: boolean;
+    /** Error if handoff failed. */
+    error?: string;
+}
+export interface ResumeResult {
+    /** Whether resume completed successfully. */
+    success: boolean;
+    /** The handoff note that was read. */
+    note?: HandoffNote;
+    /** Work items available to resume. */
+    resumableWork: HandoffWorkItem[];
+    /** Whether pull succeeded. */
+    pulled: boolean;
+    /** Whether the previous machine's changes were present. */
+    changesAvailable: boolean;
+    /** Recovery type. */
+    recoveryType: 'graceful' | 'crash-recovery' | 'fresh-start';
+    /** Error if resume failed. */
+    error?: string;
+}
+export interface HandoffManagerConfig {
+    /** Project directory (repo root). */
+    projectDir: string;
+    /** State directory (.instar). */
+    stateDir: string;
+    /** This machine's ID. */
+    machineId: string;
+    /** Work ledger instance. */
+    workLedger: WorkLedger;
+}
+export declare class HandoffManager {
+    private projectDir;
+    private stateDir;
+    private machineId;
+    private workLedger;
+    private handoffDir;
+    constructor(config: HandoffManagerConfig);
+    /**
+     * Perform a graceful handoff: commit WIP, pause ledger entries,
+     * write handoff note, push.
+     */
+    initiateHandoff(opts?: {
+        reason?: HandoffReason;
+        resumeInstructions?: string;
+    }): HandoffResult;
+    /**
+     * Resume work on an incoming machine.
+     * Reads the handoff note, pulls latest, identifies resumable work.
+     */
+    resume(): ResumeResult;
+    /**
+     * Accept a handoff — take ownership of resumed work.
+     * Creates new ledger entries for the work being resumed.
+     */
+    acceptHandoff(workItems: HandoffWorkItem[]): LedgerEntry[];
+    /**
+     * Attempt crash recovery when no handoff note exists but stale work detected.
+     */
+    private attemptCrashRecovery;
+    /**
+     * Read the current handoff note, if any.
+     */
+    readHandoffNote(): HandoffNote | null;
+    /**
+     * Check if a handoff note exists.
+     */
+    hasHandoffNote(): boolean;
+    /**
+     * Clear the handoff note (after accepting or when no longer needed).
+     */
+    clearHandoffNote(): void;
+    private handoffFilePath;
+    private writeHandoffNote;
+    /**
+     * Commit any uncommitted changes as WIP.
+     */
+    private commitWip;
+    /**
+     * Pause all active ledger entries for this machine.
+     */
+    private pauseActiveEntries;
+    /**
+     * Collect active work items for the handoff note.
+     */
+    private collectActiveWork;
+    /**
+     * Detect active task branches.
+     */
+    private detectActiveBranches;
+    /**
+     * Get current git HEAD.
+     */
+    private getGitHead;
+    /**
+     * Push all branches and tags.
+     */
+    private pushAll;
+    /**
+     * Pull latest from remote.
+     */
+    private pullLatest;
+    private git;
+}
+//# sourceMappingURL=HandoffManager.d.ts.map

package/dist/core/HandoffManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HandoffManager.d.ts","sourceRoot":"","sources":["../../src/core/HandoffManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAI/D,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,4CAA4C;IAC5C,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,qDAAqD;IACrD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,YAAY,GAAG,UAAU,GAAG,OAAO,GAAG,gBAAgB,CAAC;AAEtG,MAAM,WAAW,eAAe;IAC9B,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC;IACjC,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iCAAiC;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,kDAAkD;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB,yCAAyC;IACzC,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,sCAAsC;IACtC,aAAa,EAAE,eAAe,EAAE,CAAC;IACjC,8BAA8B;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,2DAA2D;IAC3D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,qBAAqB;IACrB,YAAY,EAAE,UAAU,GAAG,gBAAgB,GAAG,aAAa,CAAC;IAC5D,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,UAAU,EAAE,UAAU,CAAC;CACxB;AASD,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,UAAU,CAAS;gBAEf,MAAM,EAAE,oBAAoB;IAcxC;;;OAGG;IACH,eAAe,CAAC,IAAI,CAAC,EAAE;QACrB,MAAM,CAAC,EAAE,aAAa,CAAC;QACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,aAAa;IAmEjB;;;OAGG;IACH,MAAM,IAAI,YAAY;IAmDtB;;;OAGG;IACH,aAAa,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,WAAW,EAAE;IAqB1D;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAsC5B;;OAEG;IACH,eAAe,IAAI,WAAW,GAAG,IAAI;IAWrC;;OAEG;IACH,cAAc,IAAI,OAAO;IAIzB;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAWxB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,gBAAgB;IAKxB;;OAEG;IACH,OAAO,CAAC,SAAS;IAoBjB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAc1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAgBzB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAY5B;;OAEG;IACH,OAAO,CAAC,UAAU;IASlB;;OAEG;IACH,OAAO,CAAC,OAAO;IAgBf;;OAEG;IACH,OAAO,CAAC,UAAU;IAgBlB,OAAO,CAAC,GAAG;CAQZ"}