@moorline/core 0.0.1

package/dist/core/shared/utils/runtimeMessageUtils.js

@@ -0,0 +1,383 @@
+import { Buffer } from 'node:buffer';
+import { once } from 'node:events';
+import { createWriteStream, existsSync, mkdirSync, readdirSync, rmSync, statSync } from 'node:fs';
+import { extname, join, resolve } from 'node:path';
+import { validateRemoteUrlTarget } from './remoteNetworkPolicy.js';
+import { assertCanonicalExistingPathWithinRoot } from '../fs/canonicalPathContainment.js';
+export function splitRuntimeText(text, maxLength) {
+    const normalized = text.trim();
+    if (normalized.length <= maxLength) {
+        return [normalized];
+    }
+    const chunks = [];
+    let remaining = normalized;
+    while (remaining.length > maxLength) {
+        const window = remaining.slice(0, maxLength + 1);
+        const splitAt = Math.max(window.lastIndexOf('\n\n'), window.lastIndexOf('\n'), window.lastIndexOf(' '));
+        const index = splitAt > 0 ? splitAt : maxLength;
+        chunks.push(remaining.slice(0, index).trim());
+        remaining = remaining.slice(index).trim();
+    }
+    if (remaining.length > 0) {
+        chunks.push(remaining);
+    }
+    return chunks;
+}
+export function validateLocalRuntimeFiles(files, allowlistedRoots = []) {
+    for (const file of files ?? []) {
+        if (file.kind !== 'file' || !file.path) {
+            continue;
+        }
+        const candidatePath = resolve(file.path);
+        const stats = statSync(candidatePath, { throwIfNoEntry: false });
+        if (!stats) {
+            throw new Error(`Attachment file not found: ${file.path}`);
+        }
+        if (!stats.isFile()) {
+            throw new Error(`Attachment path is not a file: ${file.path}`);
+        }
+        if (allowlistedRoots.length === 0) {
+            continue;
+        }
+        const withinAllowlistedRoot = allowlistedRoots.some((root) => {
+            try {
+                assertCanonicalExistingPathWithinRoot({
+                    rootPath: root,
+                    candidatePath,
+                    rootLabel: `attachment root ${root}`,
+                    candidateLabel: `attachment path ${file.path}`
+                });
+                return true;
+            }
+            catch {
+                return false;
+            }
+        });
+        if (!withinAllowlistedRoot) {
+            throw new Error(`Attachment path is outside allowlisted roots: ${file.path}`);
+        }
+    }
+}
+export function normalizeRuntimeReply(text) {
+    const segments = text.split(/(```[\s\S]*?```)/g);
+    const normalized = segments
+        .map((segment) => {
+        if (segment.startsWith('```') && segment.endsWith('```')) {
+            return segment.trim();
+        }
+        return segment
+            .replace(/\r\n/g, '\n')
+            .replace(/[ \t]+\n/g, '\n')
+            .replace(/\n{3,}/g, '\n\n')
+            .replace(/([.!?])([A-Z])/g, '$1 $2')
+            .replace(/([a-z0-9])([A-Z][a-z])/g, '$1 $2')
+            .replace(/([.!?])(\n)([A-Za-z])/g, '$1$2$3')
+            .replace(/([^\n])\n([^\n])/g, '$1 $2')
+            .replace(/[ \t]{2,}/g, ' ')
+            .replace(/\bMoorline\b/g, 'Moorline')
+            .trim();
+    })
+        .join('')
+        .replace(/\n{3,}/g, '\n\n')
+        .trim();
+    return normalized;
+}
+function sanitizeAttachmentFilename(filename, fallback = 'image') {
+    const trimmed = filename?.trim();
+    const base = trimmed && trimmed.length > 0 ? trimmed : fallback;
+    return base.replace(/[^A-Za-z0-9._-]+/g, '-').replace(/^-+|-+$/g, '') || fallback;
+}
+function extensionForAttachment(attachment) {
+    const explicitExtension = extname(attachment.name ?? '');
+    if (explicitExtension) {
+        return explicitExtension;
+    }
+    switch (attachment.contentType) {
+        case 'image/jpeg':
+            return '.jpg';
+        case 'image/png':
+            return '.png';
+        case 'image/gif':
+            return '.gif';
+        case 'image/webp':
+            return '.webp';
+        case 'image/heic':
+            return '.heic';
+        default:
+            return '';
+    }
+}
+const SUPPORTED_PROVIDER_IMAGE_TYPES = new Set([
+    'image/jpeg',
+    'image/png',
+    'image/gif',
+    'image/webp',
+    'image/heic'
+]);
+const MAX_PROVIDER_IMAGE_COUNT = 8;
+const MAX_PROVIDER_IMAGE_BYTES = 8 * 1024 * 1024;
+const MAX_PROVIDER_IMAGE_TOTAL_BYTES = 24 * 1024 * 1024;
+const MAX_PROVIDER_IMAGE_REDIRECTS = 5;
+class ProviderImageValidationError extends Error {
+}
+function privateRemoteImageFetchesEnabled() {
+    return process.env.MOORLINE_ALLOW_PRIVATE_PROVIDER_IMAGE_URLS === '1';
+}
+function providerImageUrlFallbackEnabled() {
+    return process.env.MOORLINE_ALLOW_PROVIDER_IMAGE_URL_FALLBACK === '1';
+}
+async function assertAllowedProviderImageUrl(rawUrl) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        throw new ProviderImageValidationError(`Image URL is invalid: ${rawUrl}`);
+    }
+    if (parsed.protocol === 'data:') {
+        return parsed;
+    }
+    try {
+        return await validateRemoteUrlTarget({
+            rawUrl,
+            allowedProtocols: ['http:', 'https:'],
+            allowPrivateTargets: privateRemoteImageFetchesEnabled(),
+            failOnDnsErrors: true,
+            sourceLabel: 'Image URL target'
+        });
+    }
+    catch (error) {
+        throw new ProviderImageValidationError(error instanceof Error ? error.message : String(error));
+    }
+}
+async function fetchRemoteImageWithPolicy(rawUrl) {
+    let current = await assertAllowedProviderImageUrl(rawUrl);
+    for (let redirectCount = 0; redirectCount <= MAX_PROVIDER_IMAGE_REDIRECTS; redirectCount += 1) {
+        const response = await globalThis.fetch(current, {
+            redirect: 'manual'
+        });
+        if (response.status >= 300 && response.status < 400) {
+            const location = response.headers.get('location');
+            if (!location) {
+                throw new ProviderImageValidationError(`Image redirect from ${current.toString()} did not include a location header.`);
+            }
+            current = await assertAllowedProviderImageUrl(new URL(location, current).toString());
+            continue;
+        }
+        return { response, resolvedUrl: current };
+    }
+    throw new ProviderImageValidationError(`Image download exceeded ${MAX_PROVIDER_IMAGE_REDIRECTS} redirects for ${rawUrl}.`);
+}
+function parseContentType(value) {
+    if (!value) {
+        return null;
+    }
+    const normalized = value.split(';')[0]?.trim().toLowerCase();
+    return normalized || null;
+}
+function assertSupportedContentType(contentType, label) {
+    if (!contentType || !SUPPORTED_PROVIDER_IMAGE_TYPES.has(contentType)) {
+        throw new ProviderImageValidationError(`${label} must use one of: ${Array.from(SUPPORTED_PROVIDER_IMAGE_TYPES).join(', ')}.`);
+    }
+    return contentType;
+}
+async function streamResponseToFile(input) {
+    const declaredLength = Number.parseInt(input.response.headers.get('content-length') ?? '', 10);
+    if (Number.isFinite(declaredLength) && declaredLength > MAX_PROVIDER_IMAGE_BYTES) {
+        throw new ProviderImageValidationError(`Image ${input.filename} exceeds the per-image limit of ${MAX_PROVIDER_IMAGE_BYTES} bytes.`);
+    }
+    if (Number.isFinite(declaredLength) &&
+        input.totalBytes.value + declaredLength > MAX_PROVIDER_IMAGE_TOTAL_BYTES) {
+        throw new ProviderImageValidationError(`Image payload exceeds the total limit of ${MAX_PROVIDER_IMAGE_TOTAL_BYTES} bytes.`);
+    }
+    const stream = createWriteStream(input.targetPath, { flags: 'wx' });
+    const reader = input.response.body?.getReader();
+    let written = 0;
+    try {
+        if (!reader) {
+            const bytes = Buffer.from(await input.response.arrayBuffer());
+            if (bytes.byteLength > MAX_PROVIDER_IMAGE_BYTES) {
+                throw new ProviderImageValidationError(`Image ${input.filename} exceeds the per-image limit of ${MAX_PROVIDER_IMAGE_BYTES} bytes.`);
+            }
+            if (input.totalBytes.value + bytes.byteLength > MAX_PROVIDER_IMAGE_TOTAL_BYTES) {
+                throw new ProviderImageValidationError(`Image payload exceeds the total limit of ${MAX_PROVIDER_IMAGE_TOTAL_BYTES} bytes.`);
+            }
+            stream.write(bytes);
+            written = bytes.byteLength;
+        }
+        else {
+            while (true) {
+                const { done, value } = await reader.read();
+                if (done) {
+                    break;
+                }
+                const chunk = value ?? new Uint8Array();
+                written += chunk.byteLength;
+                if (written > MAX_PROVIDER_IMAGE_BYTES) {
+                    throw new ProviderImageValidationError(`Image ${input.filename} exceeds the per-image limit of ${MAX_PROVIDER_IMAGE_BYTES} bytes.`);
+                }
+                if (input.totalBytes.value + written > MAX_PROVIDER_IMAGE_TOTAL_BYTES) {
+                    throw new ProviderImageValidationError(`Image payload exceeds the total limit of ${MAX_PROVIDER_IMAGE_TOTAL_BYTES} bytes.`);
+                }
+                if (!stream.write(chunk)) {
+                    await once(stream, 'drain');
+                }
+            }
+        }
+        await new Promise((resolve, reject) => {
+            stream.end((error) => (error ? reject(error) : resolve()));
+        });
+        input.totalBytes.value += written;
+    }
+    catch (error) {
+        stream.destroy();
+        rmSync(input.targetPath, { force: true });
+        throw error;
+    }
+}
+export async function prepareProviderImages(input) {
+    const images = (input.attachments ?? []).filter((attachment) => attachment.kind === 'image' && (Boolean(attachment.path) || Boolean(attachment.url)));
+    if (images.length === 0) {
+        return undefined;
+    }
+    if (images.length > MAX_PROVIDER_IMAGE_COUNT) {
+        throw new ProviderImageValidationError(`Too many images. Maximum supported image count is ${MAX_PROVIDER_IMAGE_COUNT}.`);
+    }
+    const attachmentDir = join(input.runtimeRoot, 'state', 'input-images', input.threadId);
+    mkdirSync(attachmentDir, { recursive: true });
+    const totalBytes = { value: 0 };
+    const prepared = [];
+    for (const [index, attachment] of images.entries()) {
+        if (attachment.path) {
+            const stats = statSync(attachment.path, { throwIfNoEntry: false });
+            if (!stats || !stats.isFile()) {
+                throw new ProviderImageValidationError(`Image attachment path is not a readable file: ${attachment.path}`);
+            }
+            if (stats.size > MAX_PROVIDER_IMAGE_BYTES) {
+                throw new ProviderImageValidationError(`Image ${attachment.path} exceeds the per-image limit of ${MAX_PROVIDER_IMAGE_BYTES} bytes.`);
+            }
+            if (totalBytes.value + stats.size > MAX_PROVIDER_IMAGE_TOTAL_BYTES) {
+                throw new ProviderImageValidationError(`Image payload exceeds the total limit of ${MAX_PROVIDER_IMAGE_TOTAL_BYTES} bytes.`);
+            }
+            const hintedType = parseContentType(attachment.contentType);
+            if (hintedType) {
+                assertSupportedContentType(hintedType, `Image ${attachment.path}`);
+            }
+            totalBytes.value += stats.size;
+            prepared.push({ localPath: attachment.path });
+            continue;
+        }
+        if (!attachment.url) {
+            throw new ProviderImageValidationError('Image attachment requires either a local path or a remote URL.');
+        }
+        try {
+            const { response, resolvedUrl } = await fetchRemoteImageWithPolicy(attachment.url);
+            if (!response.ok) {
+                throw new Error(`download failed with status ${response.status}`);
+            }
+            const contentType = assertSupportedContentType(parseContentType(response.headers.get('content-type')) ?? parseContentType(attachment.contentType), resolvedUrl.toString());
+            const filename = sanitizeAttachmentFilename(attachment.name, `image-${index + 1}`);
+            const extension = extensionForAttachment(attachment);
+            const targetPath = join(attachmentDir, `${Date.now()}-${index + 1}-${filename}${extname(filename) ? '' : extension}`);
+            await streamResponseToFile({
+                response,
+                targetPath,
+                filename,
+                totalBytes
+            });
+            void contentType;
+            prepared.push({ localPath: targetPath });
+        }
+        catch (error) {
+            if (error instanceof ProviderImageValidationError) {
+                throw error;
+            }
+            if (providerImageUrlFallbackEnabled()) {
+                prepared.push({ url: attachment.url });
+                continue;
+            }
+            throw new ProviderImageValidationError(`Image download failed for ${attachment.url}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    return prepared;
+}
+const DEFAULT_PROVIDER_INPUT_IMAGE_TTL_MS = 24 * 60 * 60 * 1000;
+const DEFAULT_PROVIDER_INPUT_IMAGE_MAX_FILES_PER_THREAD = 128;
+export function pruneProviderInputImages(input) {
+    const root = join(input.runtimeRoot, 'state', 'input-images');
+    if (!existsSync(root)) {
+        return {
+            scannedThreads: 0,
+            removedFiles: 0,
+            removedDirectories: 0
+        };
+    }
+    const nowMs = input.nowMs ?? Date.now();
+    const ttlMs = input.ttlMs ?? DEFAULT_PROVIDER_INPUT_IMAGE_TTL_MS;
+    const maxFilesPerThread = input.maxFilesPerThread ?? DEFAULT_PROVIDER_INPUT_IMAGE_MAX_FILES_PER_THREAD;
+    const cutoff = nowMs - ttlMs;
+    let removedFiles = 0;
+    let removedDirectories = 0;
+    let scannedThreads = 0;
+    const threadDirs = input.threadId ? [input.threadId] : readdirSync(root);
+    for (const threadId of threadDirs) {
+        const threadRoot = join(root, threadId);
+        const threadStats = statSync(threadRoot, { throwIfNoEntry: false });
+        if (!threadStats?.isDirectory()) {
+            continue;
+        }
+        scannedThreads += 1;
+        const files = readdirSync(threadRoot)
+            .map((entry) => {
+            const fullPath = join(threadRoot, entry);
+            const stats = statSync(fullPath, { throwIfNoEntry: false });
+            if (!stats?.isFile()) {
+                return null;
+            }
+            return {
+                fullPath,
+                mtimeMs: stats.mtimeMs
+            };
+        })
+            .filter((entry) => entry !== null);
+        for (const file of files) {
+            if (file.mtimeMs > cutoff) {
+                continue;
+            }
+            rmSync(file.fullPath, { force: true });
+            removedFiles += 1;
+        }
+        const remaining = readdirSync(threadRoot)
+            .map((entry) => {
+            const fullPath = join(threadRoot, entry);
+            const stats = statSync(fullPath, { throwIfNoEntry: false });
+            if (!stats?.isFile()) {
+                return null;
+            }
+            return {
+                fullPath,
+                mtimeMs: stats.mtimeMs
+            };
+        })
+            .filter((entry) => entry !== null)
+            .sort((left, right) => left.mtimeMs - right.mtimeMs);
+        if (remaining.length > maxFilesPerThread) {
+            const overflow = remaining.length - maxFilesPerThread;
+            for (const file of remaining.slice(0, overflow)) {
+                rmSync(file.fullPath, { force: true });
+                removedFiles += 1;
+            }
+        }
+        const hasFiles = readdirSync(threadRoot).some((entry) => statSync(join(threadRoot, entry), { throwIfNoEntry: false })?.isFile());
+        if (!hasFiles) {
+            rmSync(threadRoot, { recursive: true, force: true });
+            removedDirectories += 1;
+        }
+    }
+    return {
+        scannedThreads,
+        removedFiles,
+        removedDirectories
+    };
+}
+//# sourceMappingURL=runtimeMessageUtils.js.map

package/dist/core/shared/utils/runtimeMessageUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeMessageUtils.js","sourceRoot":"","sources":["../../../../../../../src/core/shared/utils/runtimeMessageUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAInD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,qCAAqC,EAAE,MAAM,mCAAmC,CAAC;AAE1F,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,UAAU,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QACnC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,UAAU,CAAC;IAC3B,OAAO,SAAS,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACxG,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAA6C,EAC7C,mBAA6B,EAAE;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACvC,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3D,IAAI,CAAC;gBACH,qCAAqC,CAAC;oBACpC,QAAQ,EAAE,IAAI;oBACd,aAAa;oBACb,SAAS,EAAE,mBAAmB,IAAI,EAAE;oBACpC,cAAc,EAAE,mBAAmB,IAAI,CAAC,IAAI,EAAE;iBAC/C,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,QAAQ;SACxB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAED,OAAO,OAAO;aACX,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;aACtB,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC;aAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;aAC1B,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC;aACnC,OAAO,CAAC,yBAAyB,EAAE,OAAO,CAAC;aAC3C,OAAO,CAAC,wBAAwB,EAAE,QAAQ,CAAC;aAC3C,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC;aACrC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;aAC1B,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC;aACpC,IAAI,EAAE,CAAC;IACZ,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC;SACR,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,IAAI,EAAE,CAAC;IAEV,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,0BAA0B,CAAC,QAA4B,EAAE,QAAQ,GAAG,OAAO;IAClF,MAAM,OAAO,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChE,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC;AACpF,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAoC;IAClE,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,QAAQ,UAAU,CAAC,WAAW,EAAE,CAAC;QAC/B,KAAK,YAAY;YACf,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC;QAChB,KAAK,YAAY;YACf,OAAO,OAAO,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IAC7C,YAAY;IACZ,WAAW;IACX,WAAW;IACX,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AACH,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,8BAA8B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAEvC,MAAM,4BAA6B,SAAQ,KAAK;CAAG;AAEnD,SAAS,gCAAgC;IACvC,OAAO,OAAO,CAAC,GAAG,CAAC,0CAA0C,KAAK,GAAG,CAAC;AACxE,CAAC;AAED,SAAS,+BAA+B;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,0CAA0C,KAAK,GAAG,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,MAAc;IACzD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAA4B,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,uBAAuB,CAAC;YACnC,MAAM;YACN,gBAAgB,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YACrC,mBAAmB,EAAE,gCAAgC,EAAE;YACvD,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,4BAA4B,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,MAAc;IACtD,IAAI,OAAO,GAAG,MAAM,6BAA6B,CAAC,MAAM,CAAC,CAAC;IAC1D,KAAK,IAAI,aAAa,GAAG,CAAC,EAAE,aAAa,IAAI,4BAA4B,EAAE,aAAa,IAAI,CAAC,EAAE,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE;YAC/C,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,4BAA4B,CAAC,uBAAuB,OAAO,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;YACzH,CAAC;YACD,OAAO,GAAG,MAAM,6BAA6B,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,4BAA4B,CAAC,2BAA2B,4BAA4B,kBAAkB,MAAM,GAAG,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgC;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,OAAO,UAAU,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,0BAA0B,CAAC,WAA0B,EAAE,KAAa;IAC3E,IAAI,CAAC,WAAW,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,4BAA4B,CACpC,GAAG,KAAK,qBAAqB,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAKnC;IACC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,wBAAwB,EAAE,CAAC;QACjF,MAAM,IAAI,4BAA4B,CACpC,SAAS,KAAK,CAAC,QAAQ,mCAAmC,wBAAwB,SAAS,CAC5F,CAAC;IACJ,CAAC;IACD,IACE,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC/B,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,cAAc,GAAG,8BAA8B,EACxE,CAAC;QACD,MAAM,IAAI,4BAA4B,CACpC,4CAA4C,8BAA8B,SAAS,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAChD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9D,IAAI,KAAK,CAAC,UAAU,GAAG,wBAAwB,EAAE,CAAC;gBAChD,MAAM,IAAI,4BAA4B,CACpC,SAAS,KAAK,CAAC,QAAQ,mCAAmC,wBAAwB,SAAS,CAC5F,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,GAAG,8BAA8B,EAAE,CAAC;gBAC/E,MAAM,IAAI,4BAA4B,CACpC,4CAA4C,8BAA8B,SAAS,CACpF,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM;gBACR,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,IAAI,IAAI,UAAU,EAAE,CAAC;gBACxC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC;gBAC5B,IAAI,OAAO,GAAG,wBAAwB,EAAE,CAAC;oBACvC,MAAM,IAAI,4BAA4B,CACpC,SAAS,KAAK,CAAC,QAAQ,mCAAmC,wBAAwB,SAAS,CAC5F,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,OAAO,GAAG,8BAA8B,EAAE,CAAC;oBACtE,MAAM,IAAI,4BAA4B,CACpC,4CAA4C,8BAA8B,SAAS,CACpF,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAI3C;IACC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAC7C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CACrG,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC7C,MAAM,IAAI,4BAA4B,CACpC,qDAAqD,wBAAwB,GAAG,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvF,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAEhC,MAAM,QAAQ,GAAmD,EAAE,CAAC;IACpE,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACnD,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,4BAA4B,CAAC,iDAAiD,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;gBAC1C,MAAM,IAAI,4BAA4B,CACpC,SAAS,UAAU,CAAC,IAAI,mCAAmC,wBAAwB,SAAS,CAC7F,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,GAAG,8BAA8B,EAAE,CAAC;gBACnE,MAAM,IAAI,4BAA4B,CACpC,4CAA4C,8BAA8B,SAAS,CACpF,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC5D,IAAI,UAAU,EAAE,CAAC;gBACf,0BAA0B,CAAC,UAAU,EAAE,SAAS,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,UAAU,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,4BAA4B,CAAC,gEAAgE,CAAC,CAAC;QAC3G,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,0BAA0B,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACnF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,WAAW,GAAG,0BAA0B,CAC5C,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,gBAAgB,CAAC,UAAU,CAAC,WAAW,CAAC,EAClG,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAC;YACF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,MAAM,SAAS,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,UAAU,GAAG,IAAI,CACrB,aAAa,EACb,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAC9E,CAAC;YACF,MAAM,oBAAoB,CAAC;gBACzB,QAAQ;gBACR,UAAU;gBACV,QAAQ;gBACR,UAAU;aACX,CAAC,CAAC;YACH,KAAK,WAAW,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;gBAClD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,+BAA+B,EAAE,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,MAAM,IAAI,4BAA4B,CACpC,6BAA6B,UAAU,CAAC,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAgBD,MAAM,mCAAmC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChE,MAAM,iDAAiD,GAAG,GAAG,CAAC;AAE9D,MAAM,UAAU,wBAAwB,CAAC,KAA6B;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,CAAC;YACf,kBAAkB,EAAE,CAAC;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,mCAAmC,CAAC;IACjE,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,iDAAiD,CAAC;IACvG,MAAM,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAEzE,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,cAAc,IAAI,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC;aAClC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO;gBACL,QAAQ;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;QACJ,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,KAAK,EAAkD,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QAErF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,YAAY,IAAI,CAAC,CAAC;QACpB,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO;gBACL,QAAQ;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;QACJ,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,KAAK,EAAkD,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;aACjF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,GAAG,iBAAiB,CAAC;YACtD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,YAAY,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,kBAAkB,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,cAAc;QACd,YAAY;QACZ,kBAAkB;KACnB,CAAC;AACJ,CAAC"}

package/dist/core/system/audit/auditLogger.d.ts

@@ -0,0 +1,15 @@
+interface AuditEvent {
+    eventType: 'policy.decision' | 'tool.execution' | 'plugin.load';
+    actor: string;
+    action: string;
+    status: 'allowed' | 'denied' | 'success' | 'failed';
+    metadata?: Record<string, string | number | boolean | null>;
+}
+export declare class JsonAuditLogger {
+    private readonly filePath;
+    private writes;
+    constructor(filePath: string);
+    log(event: AuditEvent): Promise<void>;
+    flush(): Promise<void>;
+}
+export {};

package/dist/core/system/audit/auditLogger.js

@@ -0,0 +1,22 @@
+import { mkdir, appendFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+export class JsonAuditLogger {
+    filePath;
+    writes = Promise.resolve();
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    async log(event) {
+        const write = this.writes.then(async () => {
+            await mkdir(dirname(this.filePath), { recursive: true });
+            const line = JSON.stringify({ ...event, timestamp: new Date().toISOString() });
+            await appendFile(this.filePath, `${line}\n`, 'utf8');
+        });
+        this.writes = write.catch(() => undefined);
+        await write;
+    }
+    async flush() {
+        await this.writes;
+    }
+}
+//# sourceMappingURL=auditLogger.js.map

package/dist/core/system/audit/auditLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditLogger.js","sourceRoot":"","sources":["../../../../../../../src/core/system/audit/auditLogger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,MAAM,OAAO,eAAe;IAGG;IAFrB,MAAM,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAElD,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACxC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC/E,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;CACF"}

package/dist/core/system/backup/runtimeBackupService.d.ts

@@ -0,0 +1,28 @@
+import * as path from 'node:path';
+import { type MoorlineConfig } from '../../../types/config.js';
+interface CreateRuntimeBackupInput {
+    config: MoorlineConfig;
+    configPath: string;
+    includeWorkspaces: boolean;
+    outputPath: string;
+    nowIso?: string;
+}
+interface CreateRuntimeBackupResult {
+    archivePath: string;
+    includeWorkspaces: boolean;
+}
+interface ImportRuntimeBackupInput {
+    archivePath: string;
+    targetConfigPath: string;
+    targetRuntimeRoot: string;
+    force: boolean;
+}
+interface ImportRuntimeBackupResult {
+    configPath: string;
+    runtimeRoot: string;
+    replacedExistingState: boolean;
+}
+export declare function isPathWithinDirectory(rootPath: string, candidatePath: string, pathOps?: Pick<typeof path, 'resolve' | 'relative' | 'isAbsolute'>): boolean;
+export declare function createRuntimeBackup(input: CreateRuntimeBackupInput): Promise<CreateRuntimeBackupResult>;
+export declare function importRuntimeBackup(input: ImportRuntimeBackupInput): Promise<ImportRuntimeBackupResult>;
+export {};