@prompd/cli 0.3.3

package/dist/lib/auth.js

@@ -0,0 +1,388 @@
+"use strict";
+/**
+ * OAuth 2.0 Authentication System for Prompd Workflows
+ * Enterprise-grade authentication with security best practices
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDefaultAuthConfig = exports.AuthMiddleware = exports.AuthManager = void 0;
+const crypto = __importStar(require("crypto"));
+const jwt = __importStar(require("jsonwebtoken"));
+const bcrypt = __importStar(require("bcrypt"));
+const events_1 = require("events");
+/**
+ * Core authentication manager
+ */
+class AuthManager extends events_1.EventEmitter {
+    constructor(config) {
+        super();
+        this.sessions = new Map();
+        this.users = new Map();
+        this.workflowPermissions = new Map();
+        this.oauthStates = new Map();
+        this.config = config;
+        this.setupSessionCleanup();
+    }
+    /**
+     * Generate OAuth 2.0 authorization URL with PKCE
+     */
+    generateAuthUrl(userId) {
+        // Generate PKCE parameters
+        const codeVerifier = this.generateCodeVerifier();
+        const codeChallenge = this.generateCodeChallenge(codeVerifier);
+        const state = this.generateSecureToken();
+        // Store state for validation
+        this.oauthStates.set(state, {
+            state,
+            codeVerifier,
+            createdAt: new Date()
+        });
+        // Build authorization URL
+        const params = new URLSearchParams({
+            response_type: 'code',
+            client_id: this.config.oauth.clientId,
+            redirect_uri: this.config.oauth.redirectUri,
+            scope: this.config.oauth.scopes.join(' '),
+            state,
+            code_challenge: codeChallenge,
+            code_challenge_method: 'S256'
+        });
+        const authUrl = `${this.config.oauth.authorizationUrl}?${params.toString()}`;
+        this.emit('authUrlGenerated', { authUrl, state, userId });
+        return { authUrl, state, codeVerifier };
+    }
+    /**
+     * Exchange OAuth code for tokens
+     */
+    async exchangeCodeForTokens(code, state) {
+        // Validate state
+        const stateData = this.oauthStates.get(state);
+        if (!stateData) {
+            throw new Error('Invalid or expired OAuth state');
+        }
+        // Check state expiration (10 minutes)
+        const stateAge = Date.now() - stateData.createdAt.getTime();
+        if (stateAge > 10 * 60 * 1000) {
+            this.oauthStates.delete(state);
+            throw new Error('OAuth state expired');
+        }
+        try {
+            // Exchange code for tokens
+            const tokenResponse = await this.requestTokens(code, stateData.codeVerifier);
+            // Clean up state
+            this.oauthStates.delete(state);
+            this.emit('tokensExchanged', { code, state });
+            return tokenResponse;
+        }
+        catch (error) {
+            this.emit('tokenExchangeFailed', { code, state, error });
+            throw error;
+        }
+    }
+    /**
+     * Create authenticated session
+     */
+    async createSession(user, metadata = {}) {
+        const sessionId = this.generateSecureToken();
+        const now = new Date();
+        const expiresAt = new Date(now.getTime() + this.config.sessionConfig.maxAge);
+        const session = {
+            sessionId,
+            userId: user.id,
+            createdAt: now,
+            expiresAt,
+            lastAccessAt: now,
+            metadata
+        };
+        this.sessions.set(sessionId, session);
+        this.emit('sessionCreated', { sessionId, userId: user.id });
+        return session;
+    }
+    /**
+     * Validate and refresh session
+     */
+    async validateSession(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            return null;
+        }
+        // Check expiration
+        if (new Date() > session.expiresAt) {
+            this.sessions.delete(sessionId);
+            this.emit('sessionExpired', { sessionId, userId: session.userId });
+            return null;
+        }
+        // Update last access
+        session.lastAccessAt = new Date();
+        this.emit('sessionAccessed', { sessionId, userId: session.userId });
+        return session;
+    }
+    /**
+     * Generate JWT token for API access
+     */
+    generateJWT(user, permissions = []) {
+        const payload = {
+            sub: user.id,
+            email: user.email,
+            name: user.name,
+            roles: user.roles,
+            permissions: [...user.permissions, ...permissions],
+            iat: Math.floor(Date.now() / 1000)
+        };
+        return jwt.sign(payload, this.config.jwtSecret, {
+            expiresIn: this.config.jwtExpiresIn || '24h',
+            issuer: 'prompd-workflow-engine',
+            audience: 'prompd-api'
+        });
+    }
+    /**
+     * Verify JWT token
+     */
+    verifyJWT(token) {
+        try {
+            return jwt.verify(token, this.config.jwtSecret, {
+                issuer: 'prompd-workflow-engine',
+                audience: 'prompd-api'
+            });
+        }
+        catch (error) {
+            this.emit('jwtVerificationFailed', { token: token.substring(0, 10), error });
+            throw new Error('Invalid or expired token');
+        }
+    }
+    /**
+     * Check workflow permissions
+     */
+    async checkWorkflowPermission(userId, workflowId, permission) {
+        const workflowPerms = this.workflowPermissions.get(workflowId) || [];
+        const userPerms = workflowPerms.find(p => p.userId === userId);
+        if (!userPerms) {
+            return false;
+        }
+        // Admin permission includes all others
+        if (userPerms.permissions.includes('admin')) {
+            return true;
+        }
+        return userPerms.permissions.includes(permission);
+    }
+    /**
+     * Grant workflow permissions
+     */
+    async grantWorkflowPermission(workflowId, userId, permissions, grantedBy) {
+        const existing = this.workflowPermissions.get(workflowId) || [];
+        const existingIndex = existing.findIndex(p => p.userId === userId);
+        const permission = {
+            workflowId,
+            userId,
+            permissions,
+            grantedAt: new Date(),
+            grantedBy
+        };
+        if (existingIndex >= 0) {
+            existing[existingIndex] = permission;
+        }
+        else {
+            existing.push(permission);
+        }
+        this.workflowPermissions.set(workflowId, existing);
+        this.emit('workflowPermissionGranted', { workflowId, userId, permissions, grantedBy });
+    }
+    /**
+     * Revoke workflow permissions
+     */
+    async revokeWorkflowPermission(workflowId, userId, revokedBy) {
+        const existing = this.workflowPermissions.get(workflowId) || [];
+        const filtered = existing.filter(p => p.userId !== userId);
+        this.workflowPermissions.set(workflowId, filtered);
+        this.emit('workflowPermissionRevoked', { workflowId, userId, revokedBy });
+    }
+    /**
+     * Create or update user
+     */
+    async createUser(userData) {
+        const user = {
+            id: this.generateSecureToken(),
+            ...userData,
+            createdAt: new Date()
+        };
+        this.users.set(user.id, user);
+        this.emit('userCreated', { userId: user.id, email: user.email });
+        return user;
+    }
+    /**
+     * Get user by ID
+     */
+    async getUser(userId) {
+        return this.users.get(userId) || null;
+    }
+    /**
+     * Hash password securely
+     */
+    async hashPassword(password) {
+        return await bcrypt.hash(password, this.config.bcryptRounds);
+    }
+    /**
+     * Verify password
+     */
+    async verifyPassword(password, hash) {
+        return await bcrypt.compare(password, hash);
+    }
+    /**
+     * Destroy session
+     */
+    async destroySession(sessionId) {
+        const session = this.sessions.get(sessionId);
+        this.sessions.delete(sessionId);
+        if (session) {
+            this.emit('sessionDestroyed', { sessionId, userId: session.userId });
+        }
+    }
+    async requestTokens(code, codeVerifier) {
+        const params = new URLSearchParams({
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: this.config.oauth.redirectUri,
+            client_id: this.config.oauth.clientId,
+            client_secret: this.config.oauth.clientSecret,
+            code_verifier: codeVerifier
+        });
+        // In a real implementation, this would make an HTTP request
+        // For now, return a mock token
+        return {
+            accessToken: this.generateSecureToken(),
+            refreshToken: this.generateSecureToken(),
+            tokenType: 'Bearer',
+            expiresIn: 3600,
+            scope: this.config.oauth.scopes.join(' '),
+            issuedAt: new Date()
+        };
+    }
+    generateCodeVerifier() {
+        return crypto.randomBytes(32).toString('base64url');
+    }
+    generateCodeChallenge(verifier) {
+        return crypto.createHash('sha256').update(verifier).digest('base64url');
+    }
+    generateSecureToken() {
+        return crypto.randomBytes(32).toString('hex');
+    }
+    setupSessionCleanup() {
+        // Clean up expired sessions every 5 minutes
+        setInterval(() => {
+            const now = new Date();
+            for (const [sessionId, session] of this.sessions.entries()) {
+                if (now > session.expiresAt) {
+                    this.sessions.delete(sessionId);
+                    this.emit('sessionExpired', { sessionId, userId: session.userId });
+                }
+            }
+            // Clean up expired OAuth states (older than 10 minutes)
+            for (const [state, stateData] of this.oauthStates.entries()) {
+                const stateAge = now.getTime() - stateData.createdAt.getTime();
+                if (stateAge > 10 * 60 * 1000) {
+                    this.oauthStates.delete(state);
+                }
+            }
+        }, 5 * 60 * 1000);
+    }
+}
+exports.AuthManager = AuthManager;
+/**
+ * Authentication middleware for workflow execution
+ */
+class AuthMiddleware {
+    constructor(authManager) {
+        this.authManager = authManager;
+    }
+    /**
+     * Middleware for session-based authentication
+     */
+    async authenticateSession(sessionId) {
+        const session = await this.authManager.validateSession(sessionId);
+        if (!session) {
+            return null;
+        }
+        return await this.authManager.getUser(session.userId);
+    }
+    /**
+     * Middleware for JWT-based authentication
+     */
+    async authenticateJWT(token) {
+        try {
+            const payload = this.authManager.verifyJWT(token);
+            return await this.authManager.getUser(payload.sub);
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Authorize workflow execution
+     */
+    async authorizeWorkflowExecution(userId, workflowId) {
+        return await this.authManager.checkWorkflowPermission(userId, workflowId, 'execute');
+    }
+    /**
+     * Authorize workflow modification
+     */
+    async authorizeWorkflowModification(userId, workflowId) {
+        return await this.authManager.checkWorkflowPermission(userId, workflowId, 'modify');
+    }
+}
+exports.AuthMiddleware = AuthMiddleware;
+/**
+ * Default authentication configuration
+ */
+const createDefaultAuthConfig = () => ({
+    jwtSecret: '',
+    jwtExpiresIn: '24h',
+    bcryptRounds: 12,
+    oauth: {
+        clientId: '',
+        clientSecret: '',
+        redirectUri: '',
+        scopes: ['openid', 'profile', 'email'],
+        authorizationUrl: '',
+        tokenUrl: ''
+    },
+    sessionConfig: {
+        maxAge: 24 * 60 * 60 * 1000, // 24 hours
+        secure: process.env.NODE_ENV === 'production',
+        httpOnly: true,
+        sameSite: 'strict'
+    }
+});
+exports.createDefaultAuthConfig = createDefaultAuthConfig;
+//# sourceMappingURL=auth.js.map

package/dist/lib/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AACjC,kDAAoC;AACpC,+CAAiC;AACjC,mCAAsC;AA8DtC;;GAEG;AACH,MAAa,WAAY,SAAQ,qBAAY;IAO3C,YAAY,MAAkB;QAC5B,KAAK,EAAE,CAAC;QANF,aAAQ,GAA6B,IAAI,GAAG,EAAE,CAAC;QAC/C,UAAK,GAAsB,IAAI,GAAG,EAAE,CAAC;QACrC,wBAAmB,GAAsC,IAAI,GAAG,EAAE,CAAC;QACnE,gBAAW,GAA0E,IAAI,GAAG,EAAE,CAAC;QAIrG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,MAAe;QAC7B,2BAA2B;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAEzC,6BAA6B;QAC7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE;YAC1B,KAAK;YACL,YAAY;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ;YACrC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW;YAC3C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACzC,KAAK;YACL,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAE7E,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAE1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,IAAY,EAAE,KAAa;QACrD,iBAAiB;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,sCAAsC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC5D,IAAI,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,CAAC;YACH,2BAA2B;YAC3B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;YAE7E,iBAAiB;YACjB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE/B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAE9C,OAAO,aAAa,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,IAAU,EAAE,WAAoC,EAAE;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAE7E,MAAM,OAAO,GAAgB;YAC3B,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,GAAG;YACd,SAAS;YACT,YAAY,EAAE,GAAG;YACjB,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE5D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,qBAAqB;QACrB,OAAO,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAEpE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAU,EAAE,cAAwB,EAAE;QAChD,MAAM,OAAO,GAAG;YACd,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC;YAClD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SACnC,CAAC;QAEF,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;YAC9C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,KAAK;YAC5C,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,YAAY;SACJ,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAAa;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC9C,MAAM,EAAE,wBAAwB;gBAChC,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAC3B,MAAc,EACd,UAAkB,EAClB,UAAmD;QAEnD,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAE/D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uCAAuC;QACvC,IAAI,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB,CAC3B,UAAkB,EAClB,MAAc,EACd,WAAwD,EACxD,SAAiB;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAEnE,MAAM,UAAU,GAAuB;YACrC,UAAU;YACV,MAAM;YACN,WAAW;YACX,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS;SACV,CAAC;QAEF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IACzF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAAC,UAAkB,EAAE,MAAc,EAAE,SAAiB;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAE3D,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,QAAwC;QACvD,MAAM,IAAI,GAAS;YACjB,EAAE,EAAE,IAAI,CAAC,mBAAmB,EAAE;YAC9B,GAAG,QAAQ;YACX,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,IAAY;QACjD,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEhC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,YAAoB;QAC5D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW;YAC3C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ;YACrC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY;YAC7C,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,4DAA4D;QAC5D,+BAA+B;QAC/B,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE;YACvC,YAAY,EAAE,IAAI,CAAC,mBAAmB,EAAE;YACxC,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACzC,QAAQ,EAAE,IAAI,IAAI,EAAE;SACrB,CAAC;IACJ,CAAC;IAEO,oBAAoB;QAC1B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IAEO,qBAAqB,CAAC,QAAgB;QAC5C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC;IAEO,mBAAmB;QACzB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAEO,mBAAmB;QACzB,4CAA4C;QAC5C,WAAW,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3D,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;oBAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YAED,wDAAwD;YACxD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC/D,IAAI,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oBAC9B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACpB,CAAC;CACF;AAxUD,kCAwUC;AAED;;GAEG;AACH,MAAa,cAAc;IACzB,YAAoB,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;IAAG,CAAC;IAEhD;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,0BAA0B,CAC9B,MAAc,EACd,UAAkB;QAElB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACvF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,6BAA6B,CACjC,MAAc,EACd,UAAkB;QAElB,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtF,CAAC;CACF;AA9CD,wCA8CC;AAED;;GAEG;AACI,MAAM,uBAAuB,GAAG,GAAe,EAAE,CAAC,CAAC;IACxD,SAAS,EAAE,EAAE;IACb,YAAY,EAAE,KAAK;IACnB,YAAY,EAAE,EAAE;IAChB,KAAK,EAAE;QACL,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE,EAAE;QAChB,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;QACtC,gBAAgB,EAAE,EAAE;QACpB,QAAQ,EAAE,EAAE;KACb;IACD,aAAa,EAAE;QACb,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,WAAW;QACxC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAC7C,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,QAAQ;KACnB;CACF,CAAC,CAAC;AAlBU,QAAA,uBAAuB,2BAkBjC"}

package/dist/lib/compiler/file-system.d.ts

@@ -0,0 +1,178 @@
+/**
+ * File System Abstraction
+ *
+ * Provides an abstraction layer for file system operations in the compiler.
+ * This allows the compiler to work with in-memory file systems (for server-side
+ * compilation) or the actual file system (for CLI usage).
+ */
+/**
+ * File system interface that can be implemented for different storage backends.
+ */
+export interface IFileSystem {
+    /**
+     * Check if a file or directory exists.
+     */
+    exists(filePath: string): boolean | Promise<boolean>;
+    /**
+     * Read a file's contents as a UTF-8 string.
+     */
+    readFile(filePath: string): string | Promise<string>;
+    /**
+     * Check if a path is a directory.
+     */
+    isDirectory(filePath: string): boolean | Promise<boolean>;
+    /**
+     * List files in a directory.
+     */
+    readdir(dirPath: string): string[] | Promise<string[]>;
+    /**
+     * Resolve a path (for package resolution).
+     */
+    resolve(...pathSegments: string[]): string;
+    /**
+     * Get the directory name of a path.
+     */
+    dirname(filePath: string): string;
+    /**
+     * Join path segments.
+     */
+    join(...pathSegments: string[]): string;
+}
+/**
+ * Default file system implementation that uses Node.js fs module.
+ */
+export declare class NodeFileSystem implements IFileSystem {
+    exists(filePath: string): boolean;
+    readFile(filePath: string): string;
+    isDirectory(filePath: string): boolean;
+    readdir(dirPath: string): string[];
+    resolve(...pathSegments: string[]): string;
+    dirname(filePath: string): string;
+    join(...pathSegments: string[]): string;
+}
+/**
+ * In-memory file system for server-side compilation.
+ * Files are provided as a map of path -> content.
+ */
+export declare class MemoryFileSystem implements IFileSystem {
+    private files;
+    private static readonly MAX_PACKAGE_SIZE;
+    private static readonly MAX_FILE_SIZE;
+    private static readonly MAX_FILE_COUNT;
+    constructor(files?: Record<string, string>);
+    /**
+     * Add or update a file in the in-memory file system.
+     */
+    addFile(filePath: string, content: string): void;
+    /**
+     * Add multiple files at once.
+     */
+    addFiles(files: Record<string, string>): void;
+    exists(filePath: string): boolean;
+    readFile(filePath: string): string;
+    isDirectory(filePath: string): boolean;
+    readdir(dirPath: string): string[];
+    resolve(...pathSegments: string[]): string;
+    dirname(filePath: string): string;
+    join(...pathSegments: string[]): string;
+    /**
+     * Validate package name against npm/semver standards.
+     * Prevents path traversal and injection attacks.
+     */
+    private validatePackageName;
+    /**
+     * Validate semantic version format.
+     */
+    private validateVersion;
+    /**
+     * Validate ZIP package structure before extraction.
+     * Prevents: zip bombs, path traversal, symlink attacks.
+     */
+    private validateZipStructure;
+    /**
+     * Validate a single ZIP entry for security issues.
+     */
+    private validateZipEntry;
+    /**
+     * Add a package from a ZIP Buffer to the in-memory file system.
+     * Extracts the .pdpkg (ZIP) and stores all files with the package path prefix.
+     * SECURITY: Validates package name, version, and ZIP structure.
+     *
+     * @param packageName - Full package name (e.g., "@namespace/package-name")
+     * @param version - Package version (e.g., "1.0.0")
+     * @param packageBuffer - Buffer containing the .pdpkg (ZIP) file
+     */
+    addPackage(packageName: string, version: string, packageBuffer: Buffer): Promise<void>;
+    /**
+     * Recursively load a directory's contents into the in-memory file system.
+     *
+     * @param sourceDir - Directory to read from disk
+     * @param targetPath - Virtual path in memory file system
+     */
+    private loadDirectoryToMemory;
+    /**
+     * Add a package from the registry to the in-memory file system.
+     * Downloads the package tarball and extracts it to memory.
+     *
+     * @param packageRef - Package reference (e.g., "@namespace/package@1.0.0")
+     * @param downloadFn - Optional function to download package, receives (packageName, version) and returns {tarball: Buffer, metadata: any}
+     */
+    addPackageFromRegistry(packageRef: string, downloadFn?: (packageName: string, version: string) => Promise<{
+        tarball: Buffer;
+        metadata: any;
+    }>): Promise<void>;
+    /**
+     * Get the virtual file system path for a package.
+     *
+     * @param packageName - Full package name (e.g., "@namespace/package-name")
+     * @param version - Package version (e.g., "1.0.0")
+     * @returns Virtual path (e.g., "/packages/@namespace/package-name@1.0.0")
+     */
+    getPackagePath(packageName: string, version: string): string;
+    /**
+     * Parse a package reference into name and version.
+     *
+     * @param packageRef - Package reference (e.g., "@namespace/package@1.0.0")
+     * @returns Object with packageName and version
+     */
+    private parsePackageReference;
+    /**
+     * Normalize path to use forward slashes and ensure consistency.
+     */
+    private normalizePath;
+    /**
+     * Get all files under a base path.
+     *
+     * @param basePath - Optional base path to filter files
+     * @returns Map of file paths to content
+     */
+    getAllFiles(basePath?: string): Map<string, string>;
+    /**
+     * Calculate total size of files under base path.
+     *
+     * @param basePath - Base path to calculate size for
+     * @returns Object with size in bytes and file count
+     */
+    getTotalSize(basePath: string): {
+        size: number;
+        files: number;
+    };
+    /**
+     * Create a .pdpkg tarball Buffer from in-memory files.
+     * Used for server-side package creation without disk writes.
+     * SECURITY: Scans for secrets before packing.
+     *
+     * @param basePath - Base path in memory filesystem (e.g., "/my-package")
+     * @param manifest - Package manifest.json content
+     * @param options - Optional filter for files
+     * @returns Buffer containing gzipped tarball
+     */
+    createPackageBuffer(basePath: string, manifest: Record<string, any>, options?: {
+        filter?: (path: string) => boolean;
+    }): Promise<Buffer>;
+}
+/**
+ * Get the default file system (Node.js fs).
+ */
+export declare function getDefaultFileSystem(): IFileSystem;
+//# sourceMappingURL=file-system.d.ts.map

package/dist/lib/compiler/file-system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-system.d.ts","sourceRoot":"","sources":["../../../src/lib/compiler/file-system.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErD;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAErD;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1D;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEvD;;OAEG;IACH,OAAO,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE3C;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAElC;;OAEG;IACH,IAAI,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;CACzC;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,WAAW;IAChD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAIlC,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAItC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAIlC,OAAO,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM;IAI1C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAIjC,IAAI,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM;CAGxC;AAED;;;GAGG;AACH,qBAAa,gBAAiB,YAAW,WAAW;IAClD,OAAO,CAAC,KAAK,CAAsB;IAGnC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAoB;IAC5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAoB;IACzD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAQ;gBAElC,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;IAQ9C;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAIhD;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAM7C,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAWlC,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IActC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAuBlC,OAAO,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM;IAI1C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAIjC,IAAI,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM;IAIvC;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAa3B;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IA4B5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA0BxB;;;;;;;;OAQG;IACG,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoC5F;;;;;OAKG;YACW,qBAAqB;IAoBnC;;;;;;OAMG;IACG,sBAAsB,CAC1B,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,GAAG,CAAA;KAAE,CAAC,GACjG,OAAO,CAAC,IAAI,CAAC;IAehB;;;;;;OAMG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAI5D;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;OAEG;IACH,OAAO,CAAC,aAAa;IAsBrB;;;;;OAKG;IACH,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAkBnD;;;;;OAKG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAc/D;;;;;;;;;OASG;IACG,mBAAmB,CACvB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC7B,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;KACpC,GACA,OAAO,CAAC,MAAM,CAAC;CA0CnB;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,WAAW,CAElD"}