@moxxy/plugin-provider-admin 0.26.0

package/dist/index.js

@@ -0,0 +1,520 @@
+import { createMutex, defineTool, definePlugin, MoxxyError, z, } from '@moxxy/sdk';
+import { buildProviderDef, validateOpenAICompatKey } from './factory.js';
+import { providerApiKeyName } from './key-name.js';
+import { providersConfigPath, readProvidersConfig, removeStoredProvider, upsertStoredProvider, } from './store.js';
+/**
+ * `AppContext` doesn't declare a `logger` (warnings are best-effort), but some
+ * hosts attach one. Narrow with a runtime guard rather than asserting its shape
+ * via a blanket cast, so a non-conforming `logger` is simply ignored.
+ */
+function getWarnLogger(ctx) {
+    if (typeof ctx !== 'object' || ctx === null)
+        return undefined;
+    const candidate = ctx.logger;
+    if (typeof candidate === 'object' && candidate !== null && typeof candidate.warn === 'function') {
+        return candidate;
+    }
+    return undefined;
+}
+export { providersConfigPath, readProvidersConfig, upsertStoredProvider, removeStoredProvider };
+export { buildProviderDef, validateOpenAICompatKey } from './factory.js';
+export { providerApiKeyName, storedProviderApiKeyName } from './key-name.js';
+const PROVIDER_NAME_RE = /^[a-z][a-z0-9-]*$/;
+const providerNameSchema = z
+    .string()
+    .min(1)
+    .max(60)
+    .regex(PROVIDER_NAME_RE, 'name must be slug-like (lowercase letters, digits, hyphens; must start with a letter)');
+const ENV_VAR_RE = /^[A-Z][A-Z0-9_]*$/;
+/**
+ * Defense-in-depth check on a vendor base URL before the OpenAI SDK probes it
+ * with a Bearer key. The permission prompt is the primary gate, but a base URL
+ * a user might not scrutinize should not be able to point a stored credential
+ * at an arbitrary host. We require https (allowing http only for explicit
+ * localhost) and reject link-local / cloud-metadata addresses (SSRF + key
+ * egress). The threat model treats baseURL as operator-controlled; this is a
+ * backstop, not the trust boundary.
+ */
+function isSafeBaseURL(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    const host = url.hostname.toLowerCase();
+    const isLocalhost = host === 'localhost' || host === '127.0.0.1' || host === '::1' || host === '[::1]';
+    if (url.protocol === 'http:')
+        return isLocalhost;
+    if (url.protocol !== 'https:')
+        return false;
+    // `localhost` over https is the only allowed loopback name; everything below
+    // operates on the WHATWG-canonicalized host (decimal/hex/octal IPv4 forms are
+    // already folded to dotted-decimal, so a `169.254.x` / private prefix can't be
+    // smuggled as `https://2852039166/v1`).
+    // Block loopback, link-local / metadata, unspecified, AND RFC1918 private
+    // ranges even over https — a stored Bearer credential must not be egressable
+    // to an internal/metadata host via a base URL the user might not scrutinize.
+    if (host === 'localhost' ||
+        host.startsWith('127.') || // IPv4 loopback 127.0.0.0/8
+        host.startsWith('169.254.') || // IPv4 link-local incl. cloud metadata 169.254.169.254
+        host.startsWith('0.') || // "this" network 0.0.0.0/8
+        host === '0.0.0.0' ||
+        host.startsWith('10.') || // RFC1918 10.0.0.0/8
+        host.startsWith('192.168.') || // RFC1918 192.168.0.0/16
+        isPrivate172(host) || // RFC1918 172.16.0.0/12
+        host === '::1' ||
+        host === '[::1]' || // IPv6 loopback
+        host.startsWith('[fe80:') || // IPv6 link-local
+        host.startsWith('[fc') || // IPv6 unique-local fc00::/7
+        host.startsWith('[fd')) {
+        return false;
+    }
+    return true;
+}
+/** True for a dotted-decimal IPv4 host in the RFC1918 172.16.0.0/12 range. */
+function isPrivate172(host) {
+    const m = /^172\.(\d{1,3})\./.exec(host);
+    if (!m)
+        return false;
+    const octet = Number(m[1]);
+    return octet >= 16 && octet <= 31;
+}
+const safeBaseURLSchema = z
+    .string()
+    .url()
+    .refine(isSafeBaseURL, {
+    message: 'baseURL must be an https URL (or http://localhost). file://, ftp://, link-local and ' +
+        'cloud-metadata addresses are rejected to prevent credential egress / SSRF.',
+});
+const modelDescriptorSchema = z.object({
+    id: z.string().min(1),
+    contextWindow: z.number().int().positive(),
+    maxOutputTokens: z.number().int().positive().optional(),
+    supportsTools: z.boolean().default(true),
+    supportsStreaming: z.boolean().default(true),
+    supportsImages: z.boolean().optional(),
+    /**
+     * Whether the model ingests `document` blocks (native PDF etc.). Without
+     * this flag the desktop degrades attachments to extracted text for every
+     * runtime-registered provider — declare it for models that take files.
+     */
+    supportsDocuments: z.boolean().optional(),
+    supportsAudio: z.boolean().optional(),
+}).passthrough();
+const addProviderInput = z.object({
+    kind: z
+        .enum(['openai-compat'])
+        .default('openai-compat')
+        .describe('Wire-protocol family the vendor speaks. "openai-compat" reuses the moxxy ' +
+        'OpenAI client against a vendor baseURL (z.ai, deepseek, groq, openrouter, …). ' +
+        'Native-SDK vendors must ship as a dedicated plugin instead.'),
+    name: providerNameSchema.describe('Provider slug. Becomes the registry key + canonical vault entry (<NAME>_API_KEY).'),
+    baseURL: safeBaseURLSchema.describe('Vendor API base URL, e.g. https://api.z.ai/api/coding/paas/v4.'),
+    defaultModel: z.string().min(1).describe('Model id used when a request does not pin one explicitly.'),
+    models: z
+        .array(modelDescriptorSchema)
+        .min(1)
+        .describe('Models the vendor exposes. Powers /model autocomplete and the setup wizard.'),
+    envVar: z
+        .string()
+        .regex(ENV_VAR_RE)
+        .optional()
+        .describe('Override the API-key env-var name (defaults to <NAME>_API_KEY).'),
+});
+const removeProviderInput = z.object({
+    name: providerNameSchema,
+});
+/**
+ * Validation for the `configure()` patch. `configure` is part of the exported
+ * ProviderAdminView contract — ANY in-process consumer (a future channel, a
+ * test, a plugin) can call it, not just the runner handler. The invariant must
+ * live where the data is persisted, so a malformed baseURL/envVar can't reach
+ * buildProviderDef + the vault key-name derivation through an alternate caller.
+ * Mirrors the runner's providerConfigureParamsSchema.patch.
+ */
+const configurePatchSchema = z.object({
+    baseURL: safeBaseURLSchema.optional(),
+    defaultModel: z.string().min(1).optional(),
+    envVar: z.string().regex(ENV_VAR_RE).optional(),
+    models: z.array(modelDescriptorSchema).min(1).optional(),
+});
+const testProviderInput = z.object({
+    baseURL: safeBaseURLSchema.describe('Vendor API base URL to probe, e.g. https://api.deepseek.com.'),
+    keyName: z
+        .string()
+        .regex(ENV_VAR_RE)
+        .describe('NAME of the vault secret holding the API key (e.g. DEEPSEEK_API_KEY). The key is ' +
+        'resolved from the vault inside the tool — never ask the user for the plaintext key ' +
+        'and never pass one as a tool argument. Have them store it first: /vault set <NAME> <key>.'),
+});
+function createProviderAdminEngine(opts) {
+    const { providerRegistry, configPath, resolveActiveConfig } = opts;
+    const ownNames = new Set();
+    // Per-name mutexes, ref-counted so the map is bounded by the number of
+    // CONCURRENTLY-active names, not the cumulative count of every slug ever seen.
+    // Without the counter a model issuing many distinct provider_add/remove calls
+    // would grow this map without bound for the life of the runner. We can't probe
+    // a Mutex's queue (the interface only exposes `run`), so we track holders
+    // ourselves and drop the entry when the last in-flight call for a name settles.
+    const locks = new Map();
+    return {
+        providerRegistry,
+        configPath,
+        ownNames,
+        isBuiltin(name) {
+            return providerRegistry.list().some((p) => p.name === name) && !ownNames.has(name);
+        },
+        async withLock(name, fn) {
+            let slot = locks.get(name);
+            if (!slot) {
+                slot = { mutex: createMutex(), holders: 0 };
+                locks.set(name, slot);
+            }
+            slot.holders += 1;
+            try {
+                return await slot.mutex.run(fn);
+            }
+            finally {
+                slot.holders -= 1;
+                // Last holder out removes the entry. A name acquired again later just
+                // creates a fresh mutex — serialization is only ever needed between
+                // OVERLAPPING calls, which by definition still share this live slot.
+                if (slot.holders === 0 && locks.get(name) === slot)
+                    locks.delete(name);
+            }
+        },
+        async rebuildActiveIfNeeded(name) {
+            if (!resolveActiveConfig)
+                return;
+            const activeName = providerRegistry.getActiveName?.();
+            if (activeName !== name)
+                return;
+            try {
+                const cfg = await resolveActiveConfig(name);
+                providerRegistry.setActive?.(name, cfg);
+            }
+            catch {
+                // Best-effort: a failed rebuild leaves `getActive()` throwing exactly as
+                // it did before this fix — never worse — and the user can re-select.
+            }
+        },
+    };
+}
+/**
+ * Re-register a stored provider against the live registry + persist it. The
+ * whole capture→mutate→persist→rollback sequence runs under the per-name lock so
+ * concurrent admin calls (parallel tool calls / a configure racing an add) can't
+ * interleave with stale prevDef snapshots. On a write failure the prior def is
+ * restored (or the phantom dropped) so the registry never drifts from disk.
+ */
+async function applyStoredProvider(engine, entry) {
+    const { providerRegistry, configPath } = engine;
+    return engine.withLock(entry.name, async () => {
+        const def = buildProviderDef(entry);
+        const prevDef = providerRegistry.list().find((p) => p.name === entry.name);
+        const wasRegistered = prevDef !== undefined;
+        if (wasRegistered)
+            providerRegistry.replace(def);
+        else
+            providerRegistry.register(def);
+        engine.ownNames.add(entry.name);
+        try {
+            await upsertStoredProvider(entry, configPath);
+        }
+        catch (err) {
+            // Roll back the runtime registration. If a def existed before this call,
+            // restore it; otherwise drop the phantom + our ownership claim so the next
+            // boot doesn't see something that isn't on disk.
+            if (wasRegistered && prevDef)
+                providerRegistry.replace(prevDef);
+            else {
+                providerRegistry.unregister(entry.name);
+                engine.ownNames.delete(entry.name);
+            }
+            throw err;
+        }
+        // Replacing the active provider's def dropped its cached instance — rebuild.
+        if (wasRegistered)
+            await engine.rebuildActiveIfNeeded(entry.name);
+        return { replaced: wasRegistered };
+    });
+}
+/**
+ * Like {@link buildProviderAdminPlugin} but also returns a
+ * {@link ProviderAdminView} api the host can stash on the session
+ * (`session.providerAdmin`) so channels — and the runner's
+ * `provider.configure` method — can edit a stored provider without going
+ * through the model. Mirrors `buildMcpAdminPluginWithApi`.
+ */
+export function buildProviderAdminPluginWithApi(opts) {
+    const engine = createProviderAdminEngine(opts);
+    const api = {
+        configure: async (name, patch) => {
+            if (engine.isBuiltin(name)) {
+                throw new MoxxyError({
+                    code: 'CONFIG_INVALID',
+                    message: `provider-admin: "${name}" is a built-in provider and cannot be reconfigured here — ` +
+                        `built-ins are code. Only runtime-registered (providers.json) providers are editable.`,
+                });
+            }
+            // Defense-in-depth: validate the patch HERE (where it is persisted), not
+            // only at the runner boundary, so any in-process caller is covered.
+            const validated = configurePatchSchema.parse(patch);
+            const cfg = await readProvidersConfig(engine.configPath);
+            const entry = cfg.providers.find((p) => p.name === name);
+            if (!entry) {
+                throw new MoxxyError({
+                    code: 'CONFIG_INVALID',
+                    message: `provider-admin: no stored provider named "${name}" — only runtime-registered ` +
+                        `(providers.json) providers are configurable; built-ins are code.`,
+                });
+            }
+            const next = {
+                ...entry,
+                ...(validated.baseURL ? { baseURL: validated.baseURL } : {}),
+                ...(validated.defaultModel ? { defaultModel: validated.defaultModel } : {}),
+                ...(validated.envVar ? { envVar: validated.envVar } : {}),
+                ...(validated.models && validated.models.length > 0 ? { models: validated.models } : {}),
+            };
+            if (!next.models.some((m) => m.id === next.defaultModel)) {
+                throw new MoxxyError({
+                    code: 'CONFIG_INVALID',
+                    message: `provider-admin: defaultModel "${next.defaultModel}" is not in the models list ` +
+                        `(${next.models.map((m) => m.id).join(', ')}).`,
+                });
+            }
+            // Same order as provider_add: live registry first, then disk, so a failed
+            // write rolls back; the whole section is locked per name.
+            await applyStoredProvider(engine, next);
+        },
+    };
+    return { plugin: buildProviderAdminPlugin(opts, engine), api };
+}
+export function buildProviderAdminPlugin(opts, sharedEngine) {
+    const engine = sharedEngine ?? createProviderAdminEngine(opts);
+    const { providerRegistry, configPath } = engine;
+    return definePlugin({
+        name: '@moxxy/plugin-provider-admin',
+        version: '0.0.0',
+        tools: [
+            defineTool({
+                name: 'provider_add',
+                description: 'Register an OpenAI-compatible LLM provider (z.ai, deepseek, groq, openrouter, fireworks, ' +
+                    'together, mistral, …) with moxxy. Wraps the in-process OpenAI client with the vendor baseURL + ' +
+                    'a user-supplied models list. Persists to ~/.moxxy/providers.json so the provider survives ' +
+                    'restarts. The new provider is registered in the LIVE session — switch to it with /provider ' +
+                    'or set it as the default in moxxy.config.ts.',
+                inputSchema: addProviderInput,
+                permission: { action: 'prompt' },
+                handler: async (input) => {
+                    if (engine.isBuiltin(input.name)) {
+                        throw new MoxxyError({
+                            code: 'CONFIG_INVALID',
+                            message: `provider_add: "${input.name}" is a built-in provider and cannot be shadowed ` +
+                                `or redirected. Pick a different slug for your OpenAI-compatible vendor ` +
+                                `(e.g. "${input.name}-compat").`,
+                        });
+                    }
+                    const entry = {
+                        kind: 'openai-compat',
+                        name: input.name,
+                        baseURL: input.baseURL,
+                        defaultModel: input.defaultModel,
+                        models: input.models,
+                        ...(input.envVar ? { envVar: input.envVar } : {}),
+                        createdAt: new Date().toISOString(),
+                    };
+                    if (!entry.models.some((m) => m.id === entry.defaultModel)) {
+                        throw new MoxxyError({
+                            code: 'CONFIG_INVALID',
+                            message: `provider_add: defaultModel "${entry.defaultModel}" is not in the models list. ` +
+                                `Add it to the array or pick one of: ${entry.models.map((m) => m.id).join(', ')}.`,
+                        });
+                    }
+                    const { replaced: wasRegistered } = await applyStoredProvider(engine, entry);
+                    const vaultKeyName = providerApiKeyName(entry);
+                    return {
+                        ok: true,
+                        name: entry.name,
+                        kind: entry.kind,
+                        baseURL: entry.baseURL,
+                        defaultModel: entry.defaultModel,
+                        models: entry.models.map((m) => m.id),
+                        path: configPath ?? providersConfigPath(),
+                        replaced: wasRegistered,
+                        note: `Provider "${entry.name}" is live in this session. ` +
+                            `Have the USER store the API key by running: /vault set ${vaultKeyName} <key> ` +
+                            `— never ask them to paste the key to you. ` +
+                            `Once stored, you can verify it with provider_test (baseURL + keyName "${vaultKeyName}") — it resolves the key from the vault itself. ` +
+                            `Switch with the /provider command or set provider.name in moxxy.config.ts.`,
+                    };
+                },
+            }),
+            defineTool({
+                name: 'provider_list',
+                description: 'List user-registered providers (persisted in ~/.moxxy/providers.json) plus their default model and base URL. ' +
+                    'Built-in providers (anthropic, openai, openai-codex) are NOT included — query session.providers for those.',
+                inputSchema: z.object({}),
+                handler: async () => {
+                    const cfg = await readProvidersConfig(configPath);
+                    return {
+                        path: configPath ?? providersConfigPath(),
+                        providers: cfg.providers.map((p) => ({
+                            name: p.name,
+                            kind: p.kind,
+                            baseURL: p.baseURL,
+                            defaultModel: p.defaultModel,
+                            models: p.models.map((m) => m.id),
+                            envVar: providerApiKeyName(p),
+                        })),
+                    };
+                },
+            }),
+            defineTool({
+                name: 'provider_remove',
+                description: 'Remove a previously-added provider from ~/.moxxy/providers.json and detach it from the live session. ' +
+                    'Does NOT delete the stored API key — call vault_delete name=<NAME>_API_KEY separately if you also want to drop the credential.',
+                inputSchema: removeProviderInput,
+                permission: { action: 'prompt' },
+                handler: async ({ name }) => {
+                    // Removing the ACTIVE provider leaves the registry with active=null, so
+                    // the next turn fails with a "no active provider" error. Mirror the
+                    // setEnabled guard's intent: surface the consequence prominently
+                    // instead of returning a cheerful ok with no warning.
+                    const removingActive = providerRegistry.getActiveName?.() === name;
+                    return engine.withLock(name, async () => {
+                        const removed = await removeStoredProvider(name, configPath);
+                        if (!removed) {
+                            return { ok: false, name, note: `No stored provider named "${name}".` };
+                        }
+                        try {
+                            providerRegistry.unregister(name);
+                        }
+                        catch {
+                            // Already gone in the live registry — best effort.
+                        }
+                        engine.ownNames.delete(name);
+                        const note = removingActive
+                            ? `Removed "${name}" from providers.json and detached from session. ` +
+                                `WARNING: "${name}" was the ACTIVE provider — the session now has NO active provider ` +
+                                `and the next turn will fail until you switch with the /provider command.`
+                            : `Removed "${name}" from providers.json and detached from session.`;
+                        return { ok: true, name, removedActive: removingActive, note };
+                    });
+                },
+            }),
+            defineTool({
+                name: 'provider_test',
+                description: 'Probe an OpenAI-compatible endpoint by calling /v1/models. Takes the NAME of a vault ' +
+                    'secret (e.g. ZAI_API_KEY) and resolves the API key via the vault inside the handler — ' +
+                    'the plaintext key never enters the conversation or logs. Have the USER store the key ' +
+                    'first with /vault set <NAME> <key>, then call this to confirm the baseURL + key are ' +
+                    'valid (typically before provider_add). Returns { ok: true } on success or ' +
+                    '{ ok: false, message } with the vendor error verbatim.',
+                inputSchema: testProviderInput,
+                permission: { action: 'prompt' },
+                // The plaintext key is resolved HERE, at call time, via ctx.getSecret —
+                // it never appears as tool input/output, so it stays out of the model
+                // context, the runner session log, and the desktop NDJSON log.
+                handler: async ({ baseURL, keyName }, ctx) => {
+                    if (!ctx.getSecret) {
+                        return {
+                            ok: false,
+                            message: 'provider_test: this session has no secret vault wired in (ctx.getSecret is ' +
+                                'unavailable), so the key cannot be resolved. Register the provider with ' +
+                                'provider_add and have the user verify the key with `moxxy doctor` instead.',
+                        };
+                    }
+                    const apiKey = await ctx.getSecret(keyName);
+                    if (!apiKey) {
+                        return {
+                            ok: false,
+                            message: `provider_test: no vault secret named "${keyName}". Ask the USER to store it ` +
+                                `by running: /vault set ${keyName} <key> — then call provider_test again with ` +
+                                `keyName "${keyName}". Never ask them to paste the key into the conversation.`,
+                        };
+                    }
+                    return validateOpenAICompatKey(apiKey, { baseURL });
+                },
+            }),
+        ],
+        hooks: {
+            onInit: async (ctx) => {
+                const log = getWarnLogger(ctx);
+                let cfg;
+                try {
+                    cfg = await readProvidersConfig(configPath);
+                }
+                catch (err) {
+                    log?.warn('provider-admin: failed to read providers.json', {
+                        err: err instanceof Error ? err.message : String(err),
+                    });
+                    return;
+                }
+                for (const entry of cfg.providers) {
+                    try {
+                        // Evaluate built-in collision against the live registry MINUS our
+                        // own names BEFORE claiming ownership. A name present in the registry
+                        // that we didn't put there is a built-in (code provider) and must
+                        // never be overwritten by a poisoned/legacy store entry.
+                        if (engine.isBuiltin(entry.name)) {
+                            log?.warn(`provider-admin: skipping stored provider "${entry.name}" — it collides with a built-in`);
+                            continue;
+                        }
+                        const def = buildProviderDef(entry);
+                        const already = providerRegistry.list().some((p) => p.name === entry.name);
+                        if (already)
+                            providerRegistry.replace(def);
+                        else
+                            providerRegistry.register(def);
+                        engine.ownNames.add(entry.name);
+                    }
+                    catch (err) {
+                        log?.warn(`provider-admin: failed to register "${entry.name}"`, {
+                            err: err instanceof Error ? err.message : String(err),
+                        });
+                    }
+                }
+            },
+        },
+    });
+}
+export const providerAdminPlugin = (() => {
+    let resolvedRegistry = null;
+    let resolveCreds = null;
+    const lazyRegistry = new Proxy({}, {
+        get(_target, prop) {
+            if (!resolvedRegistry) {
+                throw new Error('@moxxy/plugin-provider-admin: the "providers" service is unavailable — the host must publish it');
+            }
+            const value = resolvedRegistry[prop];
+            return typeof value === 'function'
+                ? value.bind(resolvedRegistry)
+                : value;
+        },
+    });
+    const { plugin, api } = buildProviderAdminPluginWithApi({
+        providerRegistry: lazyRegistry,
+        resolveActiveConfig: (name) => (resolveCreds ? resolveCreds(name) : {}),
+    });
+    const innerOnInit = plugin.hooks?.onInit;
+    return definePlugin({
+        ...plugin,
+        hooks: {
+            ...plugin.hooks,
+            onInit: async (ctx) => {
+                resolvedRegistry = ctx.services.get('providers') ?? null;
+                resolveCreds = ctx.services.get('resolveCredentials') ?? null;
+                ctx.services.register('providerAdmin', api);
+                // Now that the registry is resolved, run the stored-provider
+                // re-registration (it drives the lazy registry).
+                await innerOnInit?.(ctx);
+            },
+        },
+    });
+})();
+// Discovery entry: `createPluginLoader` requires a default Plugin export.
+export default providerAdminPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,UAAU,EACV,YAAY,EACZ,UAAU,EACV,CAAC,GAMF,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAQpB;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,SAAS,GAAI,GAA4B,CAAC,MAAM,CAAC;IACvD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,OAAQ,SAAwB,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChH,OAAO,SAAuB,CAAC;IACjC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;AAEhG,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AA4C7E,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,gBAAgB,EAAE,uFAAuF,CAAC,CAAC;AAEpH,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;IACvG,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,wCAAwC;IACxC,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,IACE,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,4BAA4B;QACvD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,uDAAuD;QACtF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,2BAA2B;QACpD,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,qBAAqB;QAC/C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,yBAAyB;QACxD,YAAY,CAAC,IAAI,CAAC,IAAI,wBAAwB;QAC9C,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,OAAO,IAAI,gBAAgB;QACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,kBAAkB;QAC/C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,6BAA6B;QACvD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,GAAG,EAAE;KACL,MAAM,CAAC,aAAa,EAAE;IACrB,OAAO,EACL,sFAAsF;QACtF,4EAA4E;CAC/E,CAAC,CAAC;AAEL,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;SACvB,OAAO,CAAC,eAAe,CAAC;SACxB,QAAQ,CACP,2EAA2E;QACzE,gFAAgF;QAChF,6DAA6D,CAChE;IACH,IAAI,EAAE,kBAAkB,CAAC,QAAQ,CAAC,mFAAmF,CAAC;IACtH,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,gEAAgE,CAAC;IACrG,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACrG,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,qBAAqB,CAAC;SAC5B,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,6EAA6E,CAAC;IAC1F,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,KAAK,CAAC,UAAU,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CAAC,iEAAiE,CAAC;CAC/E,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,kBAAkB;CACzB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,8DAA8D,CAAC;IACnG,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,UAAU,CAAC;SACjB,QAAQ,CACP,mFAAmF;QACjF,qFAAqF;QACrF,2FAA2F,CAC9F;CACJ,CAAC,CAAC;AAkCH,SAAS,yBAAyB,CAAC,IAAqC;IACtE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,uEAAuE;IACvE,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,0EAA0E;IAC1E,gFAAgF;IAChF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6C,CAAC;IACnE,OAAO;QACL,gBAAgB;QAChB,UAAU;QACV,QAAQ;QACR,SAAS,CAAC,IAAY;YACpB,OAAO,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC;QACD,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,EAAoB;YAClD,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;gBAClB,sEAAsE;gBACtE,oEAAoE;gBACpE,qEAAqE;gBACrE,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;oBAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,KAAK,CAAC,qBAAqB,CAAC,IAAY;YACtC,IAAI,CAAC,mBAAmB;gBAAE,OAAO;YACjC,MAAM,UAAU,GAAG,gBAAgB,CAAC,aAAa,EAAE,EAAE,CAAC;YACtD,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO;YAChC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC5C,gBAAgB,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;gBACzE,qEAAqE;YACvE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAAC,MAA2B,EAAE,KAAqB;IACnF,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,OAAO,KAAK,SAAS,CAAC;QAC5C,IAAI,aAAa;YAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;;YAC5C,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,2EAA2E;YAC3E,iDAAiD;YACjD,IAAI,aAAa,IAAI,OAAO;gBAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;iBAC3D,CAAC;gBACJ,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,6EAA6E;QAC7E,IAAI,aAAa;YAAE,MAAM,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,IAAqC;IAInF,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAsB;QAC7B,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,KAA6B,EAAiB,EAAE;YAC9E,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,UAAU,CAAC;oBACnB,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EACL,oBAAoB,IAAI,6DAA6D;wBACrF,sFAAsF;iBACzF,CAAC,CAAC;YACL,CAAC;YACD,yEAAyE;YACzE,oEAAoE;YACpE,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,UAAU,CAAC;oBACnB,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EACL,6CAA6C,IAAI,8BAA8B;wBAC/E,kEAAkE;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAmB;gBAC3B,GAAG,KAAK;gBACR,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzF,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,UAAU,CAAC;oBACnB,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EACL,iCAAiC,IAAI,CAAC,YAAY,8BAA8B;wBAChF,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;iBAClD,CAAC,CAAC;YACL,CAAC;YACD,0EAA0E;YAC1E,0DAA0D;YAC1D,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAqC,EACrC,YAAkC;IAElC,MAAM,MAAM,GAAG,YAAY,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAEhD,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE;YACL,UAAU,CAAC;gBACT,IAAI,EAAE,cAAc;gBACpB,WAAW,EACT,2FAA2F;oBAC3F,iGAAiG;oBACjG,4FAA4F;oBAC5F,6FAA6F;oBAC7F,8CAA8C;gBAChD,WAAW,EAAE,gBAAgB;gBAC7B,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACvB,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACjC,MAAM,IAAI,UAAU,CAAC;4BACnB,IAAI,EAAE,gBAAgB;4BACtB,OAAO,EACL,kBAAkB,KAAK,CAAC,IAAI,kDAAkD;gCAC9E,yEAAyE;gCACzE,UAAU,KAAK,CAAC,IAAI,YAAY;yBACnC,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,KAAK,GAAmB;wBAC5B,IAAI,EAAE,eAAe;wBACrB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;wBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACpC,CAAC;oBACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;wBAC3D,MAAM,IAAI,UAAU,CAAC;4BACnB,IAAI,EAAE,gBAAgB;4BACtB,OAAO,EACL,+BAA+B,KAAK,CAAC,YAAY,+BAA+B;gCAChF,uCAAuC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;yBACrF,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;oBAC7E,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;oBAC/C,OAAO;wBACL,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;wBAChC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrC,IAAI,EAAE,UAAU,IAAI,mBAAmB,EAAE;wBACzC,QAAQ,EAAE,aAAa;wBACvB,IAAI,EACF,aAAa,KAAK,CAAC,IAAI,6BAA6B;4BACpD,0DAA0D,YAAY,SAAS;4BAC/E,4CAA4C;4BAC5C,yEAAyE,YAAY,kDAAkD;4BACvI,4EAA4E;qBAC/E,CAAC;gBACJ,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,eAAe;gBACrB,WAAW,EACT,+GAA+G;oBAC/G,4GAA4G;gBAC9G,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;oBAClD,OAAO;wBACL,IAAI,EAAE,UAAU,IAAI,mBAAmB,EAAE;wBACzC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACnC,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,OAAO,EAAE,CAAC,CAAC,OAAO;4BAClB,YAAY,EAAE,CAAC,CAAC,YAAY;4BAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACjC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;yBAC9B,CAAC,CAAC;qBACJ,CAAC;gBACJ,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EACT,uGAAuG;oBACvG,gIAAgI;gBAClI,WAAW,EAAE,mBAAmB;gBAChC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAChC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;oBAC1B,wEAAwE;oBACxE,oEAAoE;oBACpE,iEAAiE;oBACjE,sDAAsD;oBACtD,MAAM,cAAc,GAAG,gBAAgB,CAAC,aAAa,EAAE,EAAE,KAAK,IAAI,CAAC;oBACnE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;wBACtC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;wBAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;4BACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,IAAI,IAAI,EAAE,CAAC;wBAC1E,CAAC;wBACD,IAAI,CAAC;4BACH,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;wBACpC,CAAC;wBAAC,MAAM,CAAC;4BACP,mDAAmD;wBACrD,CAAC;wBACD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAC7B,MAAM,IAAI,GAAG,cAAc;4BACzB,CAAC,CAAC,YAAY,IAAI,mDAAmD;gCACnE,aAAa,IAAI,qEAAqE;gCACtF,0EAA0E;4BAC5E,CAAC,CAAC,YAAY,IAAI,kDAAkD,CAAC;wBACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;oBACjE,CAAC,CAAC,CAAC;gBACL,CAAC;aACF,CAAC;YACF,UAAU,CAAC;gBACT,IAAI,EAAE,eAAe;gBACrB,WAAW,EACT,uFAAuF;oBACvF,wFAAwF;oBACxF,uFAAuF;oBACvF,sFAAsF;oBACtF,4EAA4E;oBAC5E,wDAAwD;gBAC1D,WAAW,EAAE,iBAAiB;gBAC9B,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAChC,wEAAwE;gBACxE,sEAAsE;gBACtE,+DAA+D;gBAC/D,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE;oBAC3C,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;wBACnB,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EACL,6EAA6E;gCAC7E,0EAA0E;gCAC1E,4EAA4E;yBAC/E,CAAC;oBACJ,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,OAAO,EACL,yCAAyC,OAAO,8BAA8B;gCAC9E,0BAA0B,OAAO,8CAA8C;gCAC/E,YAAY,OAAO,2DAA2D;yBACjF,CAAC;oBACJ,CAAC;oBACD,OAAO,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBACtD,CAAC;aACF,CAAC;SACH;QACD,KAAK,EAAE;YACL,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACpB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,GAAG,CAAC;gBACR,IAAI,CAAC;oBACH,GAAG,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,EAAE,IAAI,CAAC,+CAA+C,EAAE;wBACzD,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACtD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClC,IAAI,CAAC;wBACH,kEAAkE;wBAClE,sEAAsE;wBACtE,kEAAkE;wBAClE,yDAAyD;wBACzD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;4BACjC,GAAG,EAAE,IAAI,CACP,6CAA6C,KAAK,CAAC,IAAI,iCAAiC,CACzF,CAAC;4BACF,SAAS;wBACX,CAAC;wBACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;wBACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC3E,IAAI,OAAO;4BAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;;4BACtC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;wBACpC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAClC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,GAAG,EAAE,IAAI,CAAC,uCAAuC,KAAK,CAAC,IAAI,GAAG,EAAE;4BAC9D,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;yBACtD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAcD,MAAM,CAAC,MAAM,mBAAmB,GAAW,CAAC,GAAG,EAAE;IAC/C,IAAI,gBAAgB,GAAgC,IAAI,CAAC;IACzD,IAAI,YAAY,GAAwB,IAAI,CAAC;IAE7C,MAAM,YAAY,GAAG,IAAI,KAAK,CAAC,EAA0B,EAAE;QACzD,GAAG,CAAC,OAAO,EAAE,IAAI;YACf,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAI,gBAAgE,CAAC,IAAI,CAAC,CAAC;YACtF,OAAO,OAAO,KAAK,KAAK,UAAU;gBAChC,CAAC,CAAE,KAAyC,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACnE,CAAC,CAAC,KAAK,CAAC;QACZ,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,+BAA+B,CAAC;QACtD,gBAAgB,EAAE,YAAY;QAC9B,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;IAEzC,OAAO,YAAY,CAAC;QAClB,GAAG,MAAM;QACT,KAAK,EAAE;YACL,GAAG,MAAM,CAAC,KAAK;YACf,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACpB,gBAAgB,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAuB,WAAW,CAAC,IAAI,IAAI,CAAC;gBAC/E,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAe,oBAAoB,CAAC,IAAI,IAAI,CAAC;gBAC5E,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;gBAC5C,6DAA6D;gBAC7D,iDAAiD;gBACjD,MAAM,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;SACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC,EAAE,CAAC;AAEL,0EAA0E;AAC1E,eAAe,mBAAmB,CAAC"}

package/dist/key-name.d.ts

@@ -0,0 +1,27 @@
+/**
+ * THE canonical derivation of the vault/env key name that holds a
+ * provider's API key. Every consumer (provider-admin tools, the CLI's
+ * credential resolution, the desktop's provider discovery) must agree on
+ * this name or keys stored by one surface become invisible to another —
+ * previously the CLI, the admin tools and the desktop each derived it
+ * slightly differently (the CLI didn't map `-` → `_` and ignored the
+ * stored `envVar` override).
+ *
+ * Rules:
+ *  - a stored `envVar` override always wins;
+ *  - otherwise the provider slug is upper-snaked and suffixed with
+ *    `_API_KEY` (`z-ai` → `Z_AI_API_KEY`) — hyphens become underscores
+ *    so the result is a valid POSIX env-var name.
+ */
+export declare function providerApiKeyName(provider: string | {
+    readonly name: string;
+    readonly envVar?: string;
+}): string;
+/**
+ * Key name for a provider honoring any `envVar` override persisted in
+ * ~/.moxxy/providers.json. Returns `null` when the provider isn't a
+ * stored (runtime-registered) one — callers fall back to
+ * `providerApiKeyName(name)` for built-ins.
+ */
+export declare function storedProviderApiKeyName(providerName: string, configPath?: string): Promise<string | null>;
+//# sourceMappingURL=key-name.d.ts.map

package/dist/key-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-name.d.ts","sourceRoot":"","sources":["../src/key-name.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACrE,MAAM,CAIR;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB"}

package/dist/key-name.js

@@ -0,0 +1,34 @@
+import { readProvidersConfig } from './store.js';
+/**
+ * THE canonical derivation of the vault/env key name that holds a
+ * provider's API key. Every consumer (provider-admin tools, the CLI's
+ * credential resolution, the desktop's provider discovery) must agree on
+ * this name or keys stored by one surface become invisible to another —
+ * previously the CLI, the admin tools and the desktop each derived it
+ * slightly differently (the CLI didn't map `-` → `_` and ignored the
+ * stored `envVar` override).
+ *
+ * Rules:
+ *  - a stored `envVar` override always wins;
+ *  - otherwise the provider slug is upper-snaked and suffixed with
+ *    `_API_KEY` (`z-ai` → `Z_AI_API_KEY`) — hyphens become underscores
+ *    so the result is a valid POSIX env-var name.
+ */
+export function providerApiKeyName(provider) {
+    if (typeof provider !== 'string' && provider.envVar)
+        return provider.envVar;
+    const name = typeof provider === 'string' ? provider : provider.name;
+    return `${name.toUpperCase().replace(/-/g, '_')}_API_KEY`;
+}
+/**
+ * Key name for a provider honoring any `envVar` override persisted in
+ * ~/.moxxy/providers.json. Returns `null` when the provider isn't a
+ * stored (runtime-registered) one — callers fall back to
+ * `providerApiKeyName(name)` for built-ins.
+ */
+export async function storedProviderApiKeyName(providerName, configPath) {
+    const cfg = await readProvidersConfig(configPath);
+    const entry = cfg.providers.find((p) => p.name === providerName);
+    return entry ? providerApiKeyName(entry) : null;
+}
+//# sourceMappingURL=key-name.js.map

package/dist/key-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-name.js","sourceRoot":"","sources":["../src/key-name.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAsE;IAEtE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IACrE,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC;AAC5D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,YAAoB,EACpB,UAAmB;IAEnB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC"}

package/dist/store.d.ts

@@ -0,0 +1,12 @@
+import type { StoredProvider, StoredProvidersConfig } from './types.js';
+/**
+ * User-level provider catalog. Mirrors the MCP admin storage pattern:
+ * a JSON file in ~/.moxxy/ that the admin tools mutate and the plugin's
+ * onInit hook reads back on every boot to repopulate the registry.
+ */
+export declare function providersConfigPath(): string;
+export declare function readProvidersConfig(filePath?: string): Promise<StoredProvidersConfig>;
+export declare function writeProvidersConfig(cfg: StoredProvidersConfig, filePath?: string): Promise<void>;
+export declare function upsertStoredProvider(entry: StoredProvider, filePath?: string): Promise<StoredProvidersConfig>;
+export declare function removeStoredProvider(name: string, filePath?: string): Promise<boolean>;
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExE;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAqCD,wBAAsB,mBAAmB,CAAC,QAAQ,GAAE,MAA8B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAwBlH;AAUD,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,qBAAqB,EAC1B,QAAQ,GAAE,MAA8B,GACvC,OAAO,CAAC,IAAI,CAAC,CAEf;AASD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,cAAc,EACrB,QAAQ,GAAE,MAA8B,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAShC;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,MAA8B,GACvC,OAAO,CAAC,OAAO,CAAC,CAQlB"}