@stackmemoryai/stackmemory 0.8.1 → 1.0.0

package/dist/src/hooks/sms-watcher.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/hooks/sms-watcher.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n/**\n * SMS Response Watcher\n * Watches for incoming SMS/WhatsApp responses and triggers notifications\n *\n * Run in background: stackmemory notify watch-responses &\n */\n\nimport { existsSync, readFileSync, watchFile, writeFileSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport { execSync } from 'child_process';\n\nconst RESPONSE_PATH = join(\n  homedir(),\n  '.stackmemory',\n  'sms-latest-response.json'\n);\nconst SIGNAL_PATH = join(homedir(), '.stackmemory', 'sms-signal.txt');\n\ninterface SMSResponse {\n  promptId: string;\n  response: string;\n  timestamp: string;\n}\n\nlet lastProcessedTimestamp = '';\n\nfunction checkForResponse(): SMSResponse | null {\n  try {\n    if (existsSync(RESPONSE_PATH)) {\n      const data = JSON.parse(\n        readFileSync(RESPONSE_PATH, 'utf8')\n      ) as SMSResponse;\n\n      // Only process new responses\n      if (data.timestamp !== lastProcessedTimestamp) {\n        lastProcessedTimestamp = data.timestamp;\n        return data;\n      }\n    }\n  } catch {\n    // Ignore errors\n  }\n  return null;\n}\n\nfunction triggerNotification(response: SMSResponse): void {\n  const message = `SMS Response: \"${response.response}\"`;\n\n  // macOS notification\n  try {\n    execSync(\n      `osascript -e 'display notification \"${message}\" with title \"StackMemory\"'`,\n      {\n        stdio: 'ignore',\n      }\n    );\n  } catch {\n    // Ignore if not on macOS\n  }\n\n  // Terminal bell\n  process.stdout.write('\\x07');\n\n  // Write to signal file (for other processes to detect)\n  try {\n    writeFileSync(\n      SIGNAL_PATH,\n      JSON.stringify({\n        type: 'sms_response',\n        response: response.response,\n        promptId: response.promptId,\n        timestamp: new Date().toISOString(),\n      })\n    );\n  } catch {\n    // Ignore\n  }\n\n  // Output to terminal\n  console.log(`\\n[SMS] User responded: \"${response.response}\"`);\n  console.log(`[SMS] Run: stackmemory notify run-actions\\n`);\n}\n\nexport function startResponseWatcher(intervalMs: number = 2000): void {\n  console.log('[SMS Watcher] Watching for responses...');\n  console.log('[SMS Watcher] Press Ctrl+C to stop\\n');\n\n  // Initial check\n  const initial = checkForResponse();\n  if (initial) {\n    triggerNotification(initial);\n  }\n\n  // Poll for changes\n  setInterval(() => {\n    const response = checkForResponse();\n    if (response) {\n      triggerNotification(response);\n    }\n  }, intervalMs);\n}\n\n// Also watch file for immediate notification\nexport function startFileWatcher(): void {\n  console.log('[SMS Watcher] Watching for responses (file mode)...');\n\n  watchFile(RESPONSE_PATH, { interval: 1000 }, () => {\n    const response = checkForResponse();\n    if (response) {\n      triggerNotification(response);\n    }\n  });\n}\n\n// CLI entry\nif (process.argv[1]?.includes('sms-watcher')) {\n  startResponseWatcher();\n}\n\nexport { checkForResponse, triggerNotification };\n"],
-  "mappings": ";;;;;AAQA,SAAS,YAAY,cAAc,WAAW,qBAAqB;AACnE,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,gBAAgB;AAEzB,MAAM,gBAAgB;AAAA,EACpB,QAAQ;AAAA,EACR;AAAA,EACA;AACF;AACA,MAAM,cAAc,KAAK,QAAQ,GAAG,gBAAgB,gBAAgB;AAQpE,IAAI,yBAAyB;AAE7B,SAAS,mBAAuC;AAC9C,MAAI;AACF,QAAI,WAAW,aAAa,GAAG;AAC7B,YAAM,OAAO,KAAK;AAAA,QAChB,aAAa,eAAe,MAAM;AAAA,MACpC;AAGA,UAAI,KAAK,cAAc,wBAAwB;AAC7C,iCAAyB,KAAK;AAC9B,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,UAA6B;AACxD,QAAM,UAAU,kBAAkB,SAAS,QAAQ;AAGnD,MAAI;AACF;AAAA,MACE,uCAAuC,OAAO;AAAA,MAC9C;AAAA,QACE,OAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAGA,UAAQ,OAAO,MAAM,MAAM;AAG3B,MAAI;AACF;AAAA,MACE;AAAA,MACA,KAAK,UAAU;AAAA,QACb,MAAM;AAAA,QACN,UAAU,SAAS;AAAA,QACnB,UAAU,SAAS;AAAA,QACnB,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AAAA,EAER;AAGA,UAAQ,IAAI;AAAA,yBAA4B,SAAS,QAAQ,GAAG;AAC5D,UAAQ,IAAI;AAAA,CAA6C;AAC3D;AAEO,SAAS,qBAAqB,aAAqB,KAAY;AACpE,UAAQ,IAAI,yCAAyC;AACrD,UAAQ,IAAI,sCAAsC;AAGlD,QAAM,UAAU,iBAAiB;AACjC,MAAI,SAAS;AACX,wBAAoB,OAAO;AAAA,EAC7B;AAGA,cAAY,MAAM;AAChB,UAAM,WAAW,iBAAiB;AAClC,QAAI,UAAU;AACZ,0BAAoB,QAAQ;AAAA,IAC9B;AAAA,EACF,GAAG,UAAU;AACf;AAGO,SAAS,mBAAyB;AACvC,UAAQ,IAAI,qDAAqD;AAEjE,YAAU,eAAe,EAAE,UAAU,IAAK,GAAG,MAAM;AACjD,UAAM,WAAW,iBAAiB;AAClC,QAAI,UAAU;AACZ,0BAAoB,QAAQ;AAAA,IAC9B;AAAA,EACF,CAAC;AACH;AAGA,IAAI,QAAQ,KAAK,CAAC,GAAG,SAAS,aAAa,GAAG;AAC5C,uBAAqB;AACvB;",
-  "names": []
-}

package/dist/src/hooks/sms-webhook.js

@@ -1,555 +0,0 @@
-import { fileURLToPath as __fileURLToPath } from 'url';
-import { dirname as __pathDirname } from 'path';
-const __filename = __fileURLToPath(import.meta.url);
-const __dirname = __pathDirname(__filename);
-import { createServer } from "http";
-import { parse as parseUrl } from "url";
-import { existsSync, readFileSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
-import { createHmac } from "crypto";
-import { execFileSync } from "child_process";
-import {
-  processIncomingResponse,
-  loadSMSConfig,
-  cleanupExpiredPrompts,
-  sendNotification
-} from "./sms-notify.js";
-import {
-  queueAction,
-  executeActionSafe,
-  cleanupOldActions
-} from "./sms-action-runner.js";
-import {
-  isCommand,
-  processCommand,
-  sendCommandResponse
-} from "./whatsapp-commands.js";
-import { writeFileSecure, ensureSecureDir } from "./secure-fs.js";
-import {
-  logWebhookRequest,
-  logRateLimit,
-  logSignatureInvalid,
-  logBodyTooLarge,
-  logContentTypeInvalid,
-  logActionAllowed,
-  logActionBlocked,
-  logCleanup
-} from "./security-logger.js";
-const CLEANUP_INTERVAL_MS = 5 * 60 * 1e3;
-const MAX_SMS_BODY_LENGTH = 1e3;
-const MAX_PHONE_LENGTH = 50;
-const MAX_BODY_SIZE = 50 * 1024;
-const RATE_LIMIT_WINDOW_MS = 60 * 1e3;
-const RATE_LIMIT_MAX_REQUESTS = 30;
-const ACTION_TIMEOUT_MS = 6e4;
-async function executeActionWithTimeout(action, response) {
-  return Promise.race([
-    executeActionSafe(action, response),
-    new Promise(
-      (_, reject) => setTimeout(
-        () => reject(new Error(`Action timed out after ${ACTION_TIMEOUT_MS}ms`)),
-        ACTION_TIMEOUT_MS
-      )
-    )
-  ]).catch((error) => ({
-    success: false,
-    error: error instanceof Error ? error.message : String(error)
-  }));
-}
-const RATE_LIMIT_PATH = join(homedir(), ".stackmemory", "rate-limits.json");
-let rateLimitCache = {};
-let rateLimitCacheDirty = false;
-function loadRateLimits() {
-  try {
-    if (existsSync(RATE_LIMIT_PATH)) {
-      const data = JSON.parse(readFileSync(RATE_LIMIT_PATH, "utf8"));
-      const now = Date.now();
-      const cleaned = {};
-      for (const [ip, record] of Object.entries(data)) {
-        const r = record;
-        if (r.resetTime > now) {
-          cleaned[ip] = r;
-        }
-      }
-      return cleaned;
-    }
-  } catch {
-  }
-  return {};
-}
-function saveRateLimits() {
-  if (!rateLimitCacheDirty) return;
-  try {
-    ensureSecureDir(join(homedir(), ".stackmemory"));
-    writeFileSecure(RATE_LIMIT_PATH, JSON.stringify(rateLimitCache));
-    rateLimitCacheDirty = false;
-  } catch {
-  }
-}
-setInterval(saveRateLimits, 3e4);
-rateLimitCache = loadRateLimits();
-function checkRateLimit(ip) {
-  const now = Date.now();
-  const record = rateLimitCache[ip];
-  if (!record || now > record.resetTime) {
-    rateLimitCache[ip] = { count: 1, resetTime: now + RATE_LIMIT_WINDOW_MS };
-    rateLimitCacheDirty = true;
-    return true;
-  }
-  if (record.count >= RATE_LIMIT_MAX_REQUESTS) {
-    return false;
-  }
-  record.count++;
-  rateLimitCacheDirty = true;
-  return true;
-}
-function verifyTwilioSignature(url, params, signature) {
-  const authToken = process.env["TWILIO_AUTH_TOKEN"];
-  if (!authToken) {
-    const isDev = process.env["NODE_ENV"] === "development" || process.env["SKIP_TWILIO_VERIFICATION"] === "true";
-    if (isDev) {
-      console.warn(
-        "[sms-webhook] TWILIO_AUTH_TOKEN not set, skipping verification (dev mode)"
-      );
-      return true;
-    }
-    console.error(
-      "[sms-webhook] TWILIO_AUTH_TOKEN not set - rejecting request in production"
-    );
-    return false;
-  }
-  const sortedKeys = Object.keys(params).sort();
-  let data = url;
-  for (const key of sortedKeys) {
-    data += key + params[key];
-  }
-  const hmac = createHmac("sha1", authToken);
-  hmac.update(data);
-  const expectedSignature = hmac.digest("base64");
-  return signature === expectedSignature;
-}
-function parseFormData(body) {
-  const params = new URLSearchParams(body);
-  const result = {};
-  params.forEach((value, key) => {
-    result[key] = value;
-  });
-  return result;
-}
-function storeLatestResponse(promptId, response, action) {
-  ensureSecureDir(join(homedir(), ".stackmemory"));
-  const responsePath = join(
-    homedir(),
-    ".stackmemory",
-    "sms-latest-response.json"
-  );
-  writeFileSecure(
-    responsePath,
-    JSON.stringify({
-      promptId,
-      response,
-      action,
-      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-    })
-  );
-}
-function storeIncomingRequest(from, message) {
-  ensureSecureDir(join(homedir(), ".stackmemory"));
-  const requestPath = join(
-    homedir(),
-    ".stackmemory",
-    "sms-incoming-request.json"
-  );
-  writeFileSecure(
-    requestPath,
-    JSON.stringify({
-      from,
-      message,
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      processed: false
-    })
-  );
-}
-function getIncomingRequest() {
-  const requestPath = join(
-    homedir(),
-    ".stackmemory",
-    "sms-incoming-request.json"
-  );
-  if (!existsSync(requestPath)) {
-    return null;
-  }
-  try {
-    const data = JSON.parse(readFileSync(requestPath, "utf-8"));
-    if (data.processed) {
-      return null;
-    }
-    return data;
-  } catch {
-    return null;
-  }
-}
-function markRequestProcessed() {
-  const requestPath = join(
-    homedir(),
-    ".stackmemory",
-    "sms-incoming-request.json"
-  );
-  if (!existsSync(requestPath)) {
-    return;
-  }
-  try {
-    const data = JSON.parse(readFileSync(requestPath, "utf-8"));
-    data.processed = true;
-    writeFileSecure(requestPath, JSON.stringify(data));
-  } catch {
-  }
-}
-async function handleSMSWebhook(payload) {
-  const { From, Body } = payload;
-  if (Body && Body.length > MAX_SMS_BODY_LENGTH) {
-    console.log(`[sms-webhook] Body too long: ${Body.length} chars`);
-    return { response: "Message too long. Max 1000 characters." };
-  }
-  if (From && From.length > MAX_PHONE_LENGTH) {
-    console.log(
-      `[sms-webhook] Phone number too long: ${From.length} chars (max ${MAX_PHONE_LENGTH}): ${From.substring(0, 30)}...`
-    );
-    return { response: "Invalid phone number." };
-  }
-  console.log(`[sms-webhook] Received from ${From}: ${Body}`);
-  if (isCommand(Body)) {
-    console.log(`[sms-webhook] Processing command: ${Body}`);
-    const cmdResult = await processCommand(From, Body);
-    if (cmdResult.handled) {
-      if (cmdResult.response) {
-        sendCommandResponse(cmdResult.response).catch(console.error);
-      }
-      return {
-        response: cmdResult.response || "Command processed",
-        action: cmdResult.action,
-        queued: false
-      };
-    }
-  }
-  const result = processIncomingResponse(From, Body);
-  if (!result.matched) {
-    if (result.prompt) {
-      return {
-        response: `Invalid response. Expected: ${result.prompt.options.map((o) => o.key).join(", ")}`
-      };
-    }
-    storeIncomingRequest(From, Body);
-    console.log(
-      `[sms-webhook] Stored new request from ${From}: ${Body.substring(0, 50)}...`
-    );
-    return { response: "Got it! Your request has been queued." };
-  }
-  storeLatestResponse(
-    result.prompt?.id || "unknown",
-    result.response || Body,
-    result.action
-  );
-  triggerResponseNotification(result.response || Body);
-  if (result.action) {
-    console.log(`[sms-webhook] Executing action: ${result.action}`);
-    const actionResult = await executeActionWithTimeout(
-      result.action,
-      result.response || Body
-    );
-    if (actionResult.success) {
-      logActionAllowed("sms-webhook", result.action);
-      console.log(
-        `[sms-webhook] Action completed: ${(actionResult.output || "").substring(0, 200)}`
-      );
-      return {
-        response: `Done! Action executed successfully.`,
-        action: result.action,
-        queued: false
-      };
-    } else {
-      logActionBlocked(
-        "sms-webhook",
-        result.action,
-        actionResult.error || "unknown"
-      );
-      console.log(`[sms-webhook] Action failed: ${actionResult.error}`);
-      queueAction(
-        result.prompt?.id || "unknown",
-        result.response || Body,
-        result.action
-      );
-      return {
-        response: `Action failed, queued for retry: ${(actionResult.error || "").substring(0, 50)}`,
-        action: result.action,
-        queued: true
-      };
-    }
-  }
-  return {
-    response: `Received: ${result.response}. Next action will be triggered.`
-  };
-}
-function escapeAppleScript(str) {
-  return str.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").substring(0, 200);
-}
-function triggerResponseNotification(response) {
-  const safeMessage = escapeAppleScript(`SMS Response: ${response}`);
-  try {
-    execFileSync(
-      "osascript",
-      [
-        "-e",
-        `display notification "${safeMessage}" with title "StackMemory" sound name "Glass"`
-      ],
-      { stdio: "ignore", timeout: 5e3 }
-    );
-  } catch {
-  }
-  try {
-    const signalPath = join(homedir(), ".stackmemory", "sms-signal.txt");
-    writeFileSecure(
-      signalPath,
-      JSON.stringify({
-        type: "sms_response",
-        response,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      })
-    );
-  } catch {
-  }
-  console.log(`
-*** SMS RESPONSE RECEIVED: "${response}" ***`);
-  console.log(`*** Run: stackmemory notify run-actions ***
-`);
-}
-function twimlResponse(message) {
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<Response>
-  <Message>${escapeXml(message)}</Message>
-</Response>`;
-}
-function escapeXml(str) {
-  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
-}
-function startWebhookServer(port = 3456) {
-  const server = createServer(
-    async (req, res) => {
-      const url = parseUrl(req.url || "/", true);
-      if (url.pathname === "/health") {
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ status: "ok" }));
-        return;
-      }
-      if ((url.pathname === "/sms" || url.pathname === "/sms/incoming" || url.pathname === "/webhook") && req.method === "POST") {
-        const clientIp = req.socket.remoteAddress || "unknown";
-        logWebhookRequest(
-          "sms-webhook",
-          req.method || "POST",
-          url.pathname || "/sms",
-          clientIp
-        );
-        if (!checkRateLimit(clientIp)) {
-          logRateLimit("sms-webhook", clientIp);
-          res.writeHead(429, {
-            "Content-Type": "text/xml",
-            "Retry-After": "60"
-          });
-          res.end(twimlResponse("Too many requests. Please try again later."));
-          return;
-        }
-        const contentType = req.headers["content-type"] || "";
-        if (!contentType.includes("application/x-www-form-urlencoded")) {
-          logContentTypeInvalid("sms-webhook", contentType, clientIp);
-          res.writeHead(400, { "Content-Type": "text/xml" });
-          res.end(twimlResponse("Invalid content type"));
-          return;
-        }
-        let body = "";
-        let bodyTooLarge = false;
-        req.on("data", (chunk) => {
-          body += chunk;
-          if (body.length > MAX_BODY_SIZE) {
-            bodyTooLarge = true;
-            logBodyTooLarge("sms-webhook", body.length, clientIp);
-            req.destroy();
-          }
-        });
-        req.on("end", async () => {
-          if (bodyTooLarge) {
-            res.writeHead(413, { "Content-Type": "text/xml" });
-            res.end(twimlResponse("Request too large"));
-            return;
-          }
-          try {
-            const payload = parseFormData(
-              body
-            );
-            const twilioSignature = req.headers["x-twilio-signature"];
-            const webhookUrl = `${req.headers["x-forwarded-proto"] || "http"}://${req.headers.host}${req.url}`;
-            if (twilioSignature && !verifyTwilioSignature(
-              webhookUrl,
-              payload,
-              twilioSignature
-            )) {
-              logSignatureInvalid("sms-webhook", clientIp);
-              console.error("[sms-webhook] Invalid Twilio signature");
-              res.writeHead(401, { "Content-Type": "text/xml" });
-              res.end(twimlResponse("Unauthorized"));
-              return;
-            }
-            const result = await handleSMSWebhook(payload);
-            res.writeHead(200, { "Content-Type": "text/xml" });
-            res.end(twimlResponse(result.response));
-          } catch (err) {
-            console.error("[sms-webhook] Error:", err);
-            res.writeHead(500, { "Content-Type": "text/xml" });
-            res.end(twimlResponse("Error processing message"));
-          }
-        });
-        return;
-      }
-      if (url.pathname === "/sms/status" && req.method === "POST") {
-        let body = "";
-        req.on("data", (chunk) => {
-          body += chunk;
-        });
-        req.on("end", () => {
-          try {
-            const payload = parseFormData(body);
-            console.log(
-              `[sms-webhook] Status update: ${payload["MessageSid"]} -> ${payload["MessageStatus"]}`
-            );
-            const statusPath = join(
-              homedir(),
-              ".stackmemory",
-              "sms-status.json"
-            );
-            const statuses = existsSync(statusPath) ? JSON.parse(readFileSync(statusPath, "utf8")) : {};
-            statuses[payload["MessageSid"]] = payload["MessageStatus"];
-            writeFileSecure(statusPath, JSON.stringify(statuses, null, 2));
-            res.writeHead(200, { "Content-Type": "text/plain" });
-            res.end("OK");
-          } catch (err) {
-            console.error("[sms-webhook] Status error:", err);
-            res.writeHead(500);
-            res.end("Error");
-          }
-        });
-        return;
-      }
-      if (url.pathname === "/status") {
-        const config = loadSMSConfig();
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(
-          JSON.stringify({
-            enabled: config.enabled,
-            pendingPrompts: config.pendingPrompts.length
-          })
-        );
-        return;
-      }
-      if (url.pathname === "/request" && req.method === "GET") {
-        const request = getIncomingRequest();
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ request }));
-        return;
-      }
-      if (url.pathname === "/request/ack" && req.method === "POST") {
-        markRequestProcessed();
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ success: true }));
-        return;
-      }
-      if (url.pathname === "/send" && req.method === "POST") {
-        let body = "";
-        req.on("data", (chunk) => {
-          body += chunk;
-          if (body.length > MAX_BODY_SIZE) {
-            req.destroy();
-          }
-        });
-        req.on("end", async () => {
-          try {
-            const payload = JSON.parse(body);
-            const message = payload.message || payload.body || "";
-            const title = payload.title || "Notification";
-            const type = payload.type || "custom";
-            if (!message) {
-              res.writeHead(400, { "Content-Type": "application/json" });
-              res.end(
-                JSON.stringify({ success: false, error: "Message required" })
-              );
-              return;
-            }
-            const result = await sendNotification({
-              type,
-              title,
-              message
-            });
-            res.writeHead(result.success ? 200 : 500, {
-              "Content-Type": "application/json"
-            });
-            res.end(JSON.stringify(result));
-          } catch (err) {
-            console.error("[sms-webhook] Send error:", err);
-            res.writeHead(500, { "Content-Type": "application/json" });
-            res.end(
-              JSON.stringify({
-                success: false,
-                error: err instanceof Error ? err.message : "Send failed"
-              })
-            );
-          }
-        });
-        return;
-      }
-      res.writeHead(404);
-      res.end("Not found");
-    }
-  );
-  server.listen(port, () => {
-    console.log(`[sms-webhook] Server listening on port ${port}`);
-    console.log(
-      `[sms-webhook] Incoming messages: http://localhost:${port}/sms/incoming`
-    );
-    console.log(
-      `[sms-webhook] Status callback:   http://localhost:${port}/sms/status`
-    );
-    console.log(`[sms-webhook] Configure these URLs in Twilio console`);
-    setInterval(() => {
-      try {
-        const expiredPrompts = cleanupExpiredPrompts();
-        const oldActions = cleanupOldActions();
-        if (expiredPrompts > 0 || oldActions > 0) {
-          logCleanup("sms-webhook", expiredPrompts, oldActions);
-          console.log(
-            `[sms-webhook] Cleanup: ${expiredPrompts} expired prompts, ${oldActions} old actions`
-          );
-        }
-      } catch {
-      }
-    }, CLEANUP_INTERVAL_MS);
-    console.log(
-      `[sms-webhook] Cleanup interval: every ${CLEANUP_INTERVAL_MS / 1e3}s`
-    );
-  });
-}
-async function smsWebhookMiddleware(req, res) {
-  const result = await handleSMSWebhook(req.body);
-  res.type("text/xml");
-  res.send(twimlResponse(result.response));
-}
-if (process.argv[1]?.endsWith("sms-webhook.js")) {
-  const port = parseInt(process.env["SMS_WEBHOOK_PORT"] || "3456", 10);
-  startWebhookServer(port);
-}
-export {
-  getIncomingRequest,
-  handleSMSWebhook,
-  markRequestProcessed,
-  smsWebhookMiddleware,
-  startWebhookServer
-};
-//# sourceMappingURL=sms-webhook.js.map

package/dist/src/hooks/sms-webhook.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/hooks/sms-webhook.ts"],
-  "sourcesContent": ["/**\n * SMS Webhook Handler for receiving Twilio responses\n * Can run as standalone server or integrate with existing Express app\n *\n * Security features:\n * - Twilio signature verification\n * - Rate limiting per IP\n * - Body size limits\n * - Content-type validation\n * - Safe action execution (no shell injection)\n */\n\nimport { createServer, IncomingMessage, ServerResponse } from 'http';\nimport { parse as parseUrl } from 'url';\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport { createHmac } from 'crypto';\nimport { execFileSync } from 'child_process';\nimport {\n  processIncomingResponse,\n  loadSMSConfig,\n  cleanupExpiredPrompts,\n  sendNotification,\n} from './sms-notify.js';\nimport {\n  queueAction,\n  executeActionSafe,\n  cleanupOldActions,\n  type ActionResult,\n} from './sms-action-runner.js';\nimport {\n  isCommand,\n  processCommand,\n  sendCommandResponse,\n} from './whatsapp-commands.js';\nimport { writeFileSecure, ensureSecureDir } from './secure-fs.js';\nimport {\n  logWebhookRequest,\n  logRateLimit,\n  logSignatureInvalid,\n  logBodyTooLarge,\n  logContentTypeInvalid,\n  logActionAllowed,\n  logActionBlocked,\n  logCleanup,\n} from './security-logger.js';\n\n// Cleanup interval (5 minutes)\nconst CLEANUP_INTERVAL_MS = 5 * 60 * 1000;\n\n// Input validation constants\nconst MAX_SMS_BODY_LENGTH = 1000;\nconst MAX_PHONE_LENGTH = 50; // WhatsApp format: whatsapp:+12345678901\n\n// Security constants\nconst MAX_BODY_SIZE = 50 * 1024; // 50KB max body\nconst RATE_LIMIT_WINDOW_MS = 60 * 1000; // 1 minute\nconst RATE_LIMIT_MAX_REQUESTS = 30; // 30 requests per minute per IP\nconst ACTION_TIMEOUT_MS = 60000; // 60 second timeout for action execution\n\n/**\n * Execute action with timeout to prevent hanging requests\n */\nasync function executeActionWithTimeout(\n  action: string,\n  response: string\n): Promise<ActionResult> {\n  return Promise.race([\n    executeActionSafe(action, response),\n    new Promise<ActionResult>((_, reject) =>\n      setTimeout(\n        () =>\n          reject(new Error(`Action timed out after ${ACTION_TIMEOUT_MS}ms`)),\n        ACTION_TIMEOUT_MS\n      )\n    ),\n  ]).catch((error) => ({\n    success: false,\n    error: error instanceof Error ? error.message : String(error),\n  }));\n}\n\n// Rate limiting store - persisted to disk to survive restarts\nconst RATE_LIMIT_PATH = join(homedir(), '.stackmemory', 'rate-limits.json');\n\ninterface RateLimitRecord {\n  count: number;\n  resetTime: number;\n}\n\ninterface RateLimitStore {\n  [ip: string]: RateLimitRecord;\n}\n\n// In-memory cache with periodic persistence\nlet rateLimitCache: RateLimitStore = {};\nlet rateLimitCacheDirty = false;\n\nfunction loadRateLimits(): RateLimitStore {\n  try {\n    if (existsSync(RATE_LIMIT_PATH)) {\n      const data = JSON.parse(readFileSync(RATE_LIMIT_PATH, 'utf8'));\n      // Clean up expired entries on load\n      const now = Date.now();\n      const cleaned: RateLimitStore = {};\n      for (const [ip, record] of Object.entries(data)) {\n        const r = record as RateLimitRecord;\n        if (r.resetTime > now) {\n          cleaned[ip] = r;\n        }\n      }\n      return cleaned;\n    }\n  } catch {\n    // Use empty store on error\n  }\n  return {};\n}\n\nfunction saveRateLimits(): void {\n  if (!rateLimitCacheDirty) return;\n  try {\n    ensureSecureDir(join(homedir(), '.stackmemory'));\n    writeFileSecure(RATE_LIMIT_PATH, JSON.stringify(rateLimitCache));\n    rateLimitCacheDirty = false;\n  } catch {\n    // Ignore save errors - rate limiting is best-effort\n  }\n}\n\n// Persist rate limits periodically (every 30 seconds)\nsetInterval(saveRateLimits, 30000);\n\n// Load on startup\nrateLimitCache = loadRateLimits();\n\nfunction checkRateLimit(ip: string): boolean {\n  const now = Date.now();\n  const record = rateLimitCache[ip];\n\n  if (!record || now > record.resetTime) {\n    rateLimitCache[ip] = { count: 1, resetTime: now + RATE_LIMIT_WINDOW_MS };\n    rateLimitCacheDirty = true;\n    return true;\n  }\n\n  if (record.count >= RATE_LIMIT_MAX_REQUESTS) {\n    return false;\n  }\n\n  record.count++;\n  rateLimitCacheDirty = true;\n  return true;\n}\n\n// Twilio signature verification\nfunction verifyTwilioSignature(\n  url: string,\n  params: Record<string, string>,\n  signature: string\n): boolean {\n  const authToken = process.env['TWILIO_AUTH_TOKEN'];\n  if (!authToken) {\n    // Only allow bypass in explicit development mode\n    const isDev =\n      process.env['NODE_ENV'] === 'development' ||\n      process.env['SKIP_TWILIO_VERIFICATION'] === 'true';\n\n    if (isDev) {\n      console.warn(\n        '[sms-webhook] TWILIO_AUTH_TOKEN not set, skipping verification (dev mode)'\n      );\n      return true;\n    }\n\n    // In production, reject requests without auth token configured\n    console.error(\n      '[sms-webhook] TWILIO_AUTH_TOKEN not set - rejecting request in production'\n    );\n    return false;\n  }\n\n  // Build the data string (URL + sorted params)\n  const sortedKeys = Object.keys(params).sort();\n  let data = url;\n  for (const key of sortedKeys) {\n    data += key + params[key];\n  }\n\n  // Calculate expected signature\n  const hmac = createHmac('sha1', authToken);\n  hmac.update(data);\n  const expectedSignature = hmac.digest('base64');\n\n  return signature === expectedSignature;\n}\n\ninterface TwilioWebhookPayload {\n  From: string;\n  To: string;\n  Body: string;\n  MessageSid: string;\n}\n\nfunction parseFormData(body: string): Record<string, string> {\n  const params = new URLSearchParams(body);\n  const result: Record<string, string> = {};\n  params.forEach((value, key) => {\n    result[key] = value;\n  });\n  return result;\n}\n\n// Store response for Claude hook to pick up\nfunction storeLatestResponse(\n  promptId: string,\n  response: string,\n  action?: string\n): void {\n  ensureSecureDir(join(homedir(), '.stackmemory'));\n  const responsePath = join(\n    homedir(),\n    '.stackmemory',\n    'sms-latest-response.json'\n  );\n  writeFileSecure(\n    responsePath,\n    JSON.stringify({\n      promptId,\n      response,\n      action,\n      timestamp: new Date().toISOString(),\n    })\n  );\n}\n\n/**\n * Store incoming request for Claude to pick up\n * Used when a WhatsApp/SMS message arrives without a pending prompt\n */\nfunction storeIncomingRequest(from: string, message: string): void {\n  ensureSecureDir(join(homedir(), '.stackmemory'));\n  const requestPath = join(\n    homedir(),\n    '.stackmemory',\n    'sms-incoming-request.json'\n  );\n  writeFileSecure(\n    requestPath,\n    JSON.stringify({\n      from,\n      message,\n      timestamp: new Date().toISOString(),\n      processed: false,\n    })\n  );\n}\n\n/**\n * Get pending incoming request (if any)\n */\nexport function getIncomingRequest(): {\n  from: string;\n  message: string;\n  timestamp: string;\n  processed: boolean;\n} | null {\n  const requestPath = join(\n    homedir(),\n    '.stackmemory',\n    'sms-incoming-request.json'\n  );\n  if (!existsSync(requestPath)) {\n    return null;\n  }\n  try {\n    const data = JSON.parse(readFileSync(requestPath, 'utf-8'));\n    if (data.processed) {\n      return null;\n    }\n    return data;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Mark incoming request as processed\n */\nexport function markRequestProcessed(): void {\n  const requestPath = join(\n    homedir(),\n    '.stackmemory',\n    'sms-incoming-request.json'\n  );\n  if (!existsSync(requestPath)) {\n    return;\n  }\n  try {\n    const data = JSON.parse(readFileSync(requestPath, 'utf-8'));\n    data.processed = true;\n    writeFileSecure(requestPath, JSON.stringify(data));\n  } catch {\n    // Ignore errors\n  }\n}\n\nexport async function handleSMSWebhook(payload: TwilioWebhookPayload): Promise<{\n  response: string;\n  action?: string;\n  queued?: boolean;\n}> {\n  const { From, Body } = payload;\n\n  // Input length validation\n  if (Body && Body.length > MAX_SMS_BODY_LENGTH) {\n    console.log(`[sms-webhook] Body too long: ${Body.length} chars`);\n    return { response: 'Message too long. Max 1000 characters.' };\n  }\n\n  if (From && From.length > MAX_PHONE_LENGTH) {\n    console.log(\n      `[sms-webhook] Phone number too long: ${From.length} chars (max ${MAX_PHONE_LENGTH}): ${From.substring(0, 30)}...`\n    );\n    return { response: 'Invalid phone number.' };\n  }\n\n  console.log(`[sms-webhook] Received from ${From}: ${Body}`);\n\n  // Check for command prefix before prompt matching\n  if (isCommand(Body)) {\n    console.log(`[sms-webhook] Processing command: ${Body}`);\n    const cmdResult = await processCommand(From, Body);\n\n    if (cmdResult.handled) {\n      // Send response back if we have one\n      if (cmdResult.response) {\n        // Don't await - fire and forget the response notification\n        sendCommandResponse(cmdResult.response).catch(console.error);\n      }\n\n      return {\n        response: cmdResult.response || 'Command processed',\n        action: cmdResult.action,\n        queued: false,\n      };\n    }\n    // If not handled, fall through to regular prompt matching\n  }\n\n  const result = processIncomingResponse(From, Body);\n\n  if (!result.matched) {\n    if (result.prompt) {\n      return {\n        response: `Invalid response. Expected: ${result.prompt.options.map((o) => o.key).join(', ')}`,\n      };\n    }\n    // No pending prompt - store as new incoming request for Claude\n    storeIncomingRequest(From, Body);\n    console.log(\n      `[sms-webhook] Stored new request from ${From}: ${Body.substring(0, 50)}...`\n    );\n    return { response: 'Got it! Your request has been queued.' };\n  }\n\n  // Store response for Claude hook\n  storeLatestResponse(\n    result.prompt?.id || 'unknown',\n    result.response || Body,\n    result.action\n  );\n\n  // Trigger notification to alert user/Claude\n  triggerResponseNotification(result.response || Body);\n\n  // Execute action safely if present (no shell injection, with timeout)\n  if (result.action) {\n    console.log(`[sms-webhook] Executing action: ${result.action}`);\n\n    const actionResult = await executeActionWithTimeout(\n      result.action,\n      result.response || Body\n    );\n\n    if (actionResult.success) {\n      logActionAllowed('sms-webhook', result.action);\n      console.log(\n        `[sms-webhook] Action completed: ${(actionResult.output || '').substring(0, 200)}`\n      );\n\n      return {\n        response: `Done! Action executed successfully.`,\n        action: result.action,\n        queued: false,\n      };\n    } else {\n      logActionBlocked(\n        'sms-webhook',\n        result.action,\n        actionResult.error || 'unknown'\n      );\n      console.log(`[sms-webhook] Action failed: ${actionResult.error}`);\n\n      // Queue for retry\n      queueAction(\n        result.prompt?.id || 'unknown',\n        result.response || Body,\n        result.action\n      );\n\n      return {\n        response: `Action failed, queued for retry: ${(actionResult.error || '').substring(0, 50)}`,\n        action: result.action,\n        queued: true,\n      };\n    }\n  }\n\n  return {\n    response: `Received: ${result.response}. Next action will be triggered.`,\n  };\n}\n\n// Escape string for AppleScript (prevent injection)\nfunction escapeAppleScript(str: string): string {\n  return str\n    .replace(/\\\\/g, '\\\\\\\\')\n    .replace(/\"/g, '\\\\\"')\n    .replace(/\\n/g, '\\\\n')\n    .replace(/\\r/g, '\\\\r')\n    .substring(0, 200); // Limit length\n}\n\n// Trigger notification when response received\nfunction triggerResponseNotification(response: string): void {\n  const safeMessage = escapeAppleScript(`SMS Response: ${response}`);\n\n  // macOS notification using execFile (safer than execSync with shell)\n  try {\n    execFileSync(\n      'osascript',\n      [\n        '-e',\n        `display notification \"${safeMessage}\" with title \"StackMemory\" sound name \"Glass\"`,\n      ],\n      { stdio: 'ignore', timeout: 5000 }\n    );\n  } catch {\n    // Ignore if not on macOS\n  }\n\n  // Write signal file for other processes\n  try {\n    const signalPath = join(homedir(), '.stackmemory', 'sms-signal.txt');\n    writeFileSecure(\n      signalPath,\n      JSON.stringify({\n        type: 'sms_response',\n        response,\n        timestamp: new Date().toISOString(),\n      })\n    );\n  } catch {\n    // Ignore\n  }\n\n  console.log(`\\n*** SMS RESPONSE RECEIVED: \"${response}\" ***`);\n  console.log(`*** Run: stackmemory notify run-actions ***\\n`);\n}\n\n// TwiML response helper\nfunction twimlResponse(message: string): string {\n  return `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<Response>\n  <Message>${escapeXml(message)}</Message>\n</Response>`;\n}\n\nfunction escapeXml(str: string): string {\n  return str\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;')\n    .replace(/'/g, '&apos;');\n}\n\n// Standalone webhook server\nexport function startWebhookServer(port: number = 3456): void {\n  const server = createServer(\n    async (req: IncomingMessage, res: ServerResponse) => {\n      const url = parseUrl(req.url || '/', true);\n\n      // Health check\n      if (url.pathname === '/health') {\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ status: 'ok' }));\n        return;\n      }\n\n      // SMS webhook endpoint (incoming messages)\n      if (\n        (url.pathname === '/sms' ||\n          url.pathname === '/sms/incoming' ||\n          url.pathname === '/webhook') &&\n        req.method === 'POST'\n      ) {\n        const clientIp = req.socket.remoteAddress || 'unknown';\n\n        // Log webhook request\n        logWebhookRequest(\n          'sms-webhook',\n          req.method || 'POST',\n          url.pathname || '/sms',\n          clientIp\n        );\n\n        // Rate limiting\n        if (!checkRateLimit(clientIp)) {\n          logRateLimit('sms-webhook', clientIp);\n          res.writeHead(429, {\n            'Content-Type': 'text/xml',\n            'Retry-After': '60',\n          });\n          res.end(twimlResponse('Too many requests. Please try again later.'));\n          return;\n        }\n\n        // Content-type validation\n        const contentType = req.headers['content-type'] || '';\n        if (!contentType.includes('application/x-www-form-urlencoded')) {\n          logContentTypeInvalid('sms-webhook', contentType, clientIp);\n          res.writeHead(400, { 'Content-Type': 'text/xml' });\n          res.end(twimlResponse('Invalid content type'));\n          return;\n        }\n\n        let body = '';\n        let bodyTooLarge = false;\n\n        req.on('data', (chunk) => {\n          body += chunk;\n          // Body size limit\n          if (body.length > MAX_BODY_SIZE) {\n            bodyTooLarge = true;\n            logBodyTooLarge('sms-webhook', body.length, clientIp);\n            req.destroy();\n          }\n        });\n\n        req.on('end', async () => {\n          if (bodyTooLarge) {\n            res.writeHead(413, { 'Content-Type': 'text/xml' });\n            res.end(twimlResponse('Request too large'));\n            return;\n          }\n\n          try {\n            const payload = parseFormData(\n              body\n            ) as unknown as TwilioWebhookPayload;\n\n            // Verify Twilio signature\n            const twilioSignature = req.headers['x-twilio-signature'] as string;\n            const webhookUrl = `${req.headers['x-forwarded-proto'] || 'http'}://${req.headers.host}${req.url}`;\n\n            if (\n              twilioSignature &&\n              !verifyTwilioSignature(\n                webhookUrl,\n                payload as unknown as Record<string, string>,\n                twilioSignature\n              )\n            ) {\n              logSignatureInvalid('sms-webhook', clientIp);\n              console.error('[sms-webhook] Invalid Twilio signature');\n              res.writeHead(401, { 'Content-Type': 'text/xml' });\n              res.end(twimlResponse('Unauthorized'));\n              return;\n            }\n\n            const result = await handleSMSWebhook(payload);\n\n            res.writeHead(200, { 'Content-Type': 'text/xml' });\n            res.end(twimlResponse(result.response));\n          } catch (err) {\n            console.error('[sms-webhook] Error:', err);\n            res.writeHead(500, { 'Content-Type': 'text/xml' });\n            res.end(twimlResponse('Error processing message'));\n          }\n        });\n        return;\n      }\n\n      // Status callback endpoint (delivery status updates)\n      if (url.pathname === '/sms/status' && req.method === 'POST') {\n        let body = '';\n        req.on('data', (chunk) => {\n          body += chunk;\n        });\n\n        req.on('end', () => {\n          try {\n            const payload = parseFormData(body);\n            console.log(\n              `[sms-webhook] Status update: ${payload['MessageSid']} -> ${payload['MessageStatus']}`\n            );\n\n            // Store status for tracking\n            const statusPath = join(\n              homedir(),\n              '.stackmemory',\n              'sms-status.json'\n            );\n            const statuses: Record<string, string> = existsSync(statusPath)\n              ? JSON.parse(readFileSync(statusPath, 'utf8'))\n              : {};\n            statuses[payload['MessageSid']] = payload['MessageStatus'];\n            writeFileSecure(statusPath, JSON.stringify(statuses, null, 2));\n\n            res.writeHead(200, { 'Content-Type': 'text/plain' });\n            res.end('OK');\n          } catch (err) {\n            console.error('[sms-webhook] Status error:', err);\n            res.writeHead(500);\n            res.end('Error');\n          }\n        });\n        return;\n      }\n\n      // Server status endpoint\n      if (url.pathname === '/status') {\n        const config = loadSMSConfig();\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(\n          JSON.stringify({\n            enabled: config.enabled,\n            pendingPrompts: config.pendingPrompts.length,\n          })\n        );\n        return;\n      }\n\n      // Get pending incoming request endpoint\n      if (url.pathname === '/request' && req.method === 'GET') {\n        const request = getIncomingRequest();\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ request }));\n        return;\n      }\n\n      // Mark request as processed endpoint\n      if (url.pathname === '/request/ack' && req.method === 'POST') {\n        markRequestProcessed();\n        res.writeHead(200, { 'Content-Type': 'application/json' });\n        res.end(JSON.stringify({ success: true }));\n        return;\n      }\n\n      // Send outgoing notification endpoint\n      if (url.pathname === '/send' && req.method === 'POST') {\n        let body = '';\n        req.on('data', (chunk) => {\n          body += chunk;\n          if (body.length > MAX_BODY_SIZE) {\n            req.destroy();\n          }\n        });\n\n        req.on('end', async () => {\n          try {\n            const payload = JSON.parse(body);\n            const message = payload.message || payload.body || '';\n            const title = payload.title || 'Notification';\n            const type = payload.type || 'custom';\n\n            if (!message) {\n              res.writeHead(400, { 'Content-Type': 'application/json' });\n              res.end(\n                JSON.stringify({ success: false, error: 'Message required' })\n              );\n              return;\n            }\n\n            const result = await sendNotification({\n              type: type as\n                | 'task_complete'\n                | 'review_ready'\n                | 'error'\n                | 'custom',\n              title,\n              message,\n            });\n\n            res.writeHead(result.success ? 200 : 500, {\n              'Content-Type': 'application/json',\n            });\n            res.end(JSON.stringify(result));\n          } catch (err) {\n            console.error('[sms-webhook] Send error:', err);\n            res.writeHead(500, { 'Content-Type': 'application/json' });\n            res.end(\n              JSON.stringify({\n                success: false,\n                error: err instanceof Error ? err.message : 'Send failed',\n              })\n            );\n          }\n        });\n        return;\n      }\n\n      res.writeHead(404);\n      res.end('Not found');\n    }\n  );\n\n  server.listen(port, () => {\n    console.log(`[sms-webhook] Server listening on port ${port}`);\n    console.log(\n      `[sms-webhook] Incoming messages: http://localhost:${port}/sms/incoming`\n    );\n    console.log(\n      `[sms-webhook] Status callback:   http://localhost:${port}/sms/status`\n    );\n    console.log(`[sms-webhook] Configure these URLs in Twilio console`);\n\n    // Start timed cleanup of expired prompts and old actions\n    setInterval(() => {\n      try {\n        const expiredPrompts = cleanupExpiredPrompts();\n        const oldActions = cleanupOldActions();\n        if (expiredPrompts > 0 || oldActions > 0) {\n          logCleanup('sms-webhook', expiredPrompts, oldActions);\n          console.log(\n            `[sms-webhook] Cleanup: ${expiredPrompts} expired prompts, ${oldActions} old actions`\n          );\n        }\n      } catch {\n        // Ignore cleanup errors\n      }\n    }, CLEANUP_INTERVAL_MS);\n    console.log(\n      `[sms-webhook] Cleanup interval: every ${CLEANUP_INTERVAL_MS / 1000}s`\n    );\n  });\n}\n\n// Express middleware for integration\nexport async function smsWebhookMiddleware(\n  req: { body: TwilioWebhookPayload },\n  res: { type: (t: string) => void; send: (s: string) => void }\n): Promise<void> {\n  const result = await handleSMSWebhook(req.body);\n  res.type('text/xml');\n  res.send(twimlResponse(result.response));\n}\n\n// CLI entry\nif (process.argv[1]?.endsWith('sms-webhook.js')) {\n  const port = parseInt(process.env['SMS_WEBHOOK_PORT'] || '3456', 10);\n  startWebhookServer(port);\n}\n"],
-  "mappings": ";;;;AAYA,SAAS,oBAAqD;AAC9D,SAAS,SAAS,gBAAgB;AAClC,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB,uBAAuB;AACjD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,MAAM,sBAAsB,IAAI,KAAK;AAGrC,MAAM,sBAAsB;AAC5B,MAAM,mBAAmB;AAGzB,MAAM,gBAAgB,KAAK;AAC3B,MAAM,uBAAuB,KAAK;AAClC,MAAM,0BAA0B;AAChC,MAAM,oBAAoB;AAK1B,eAAe,yBACb,QACA,UACuB;AACvB,SAAO,QAAQ,KAAK;AAAA,IAClB,kBAAkB,QAAQ,QAAQ;AAAA,IAClC,IAAI;AAAA,MAAsB,CAAC,GAAG,WAC5B;AAAA,QACE,MACE,OAAO,IAAI,MAAM,0BAA0B,iBAAiB,IAAI,CAAC;AAAA,QACnE;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC,EAAE,MAAM,CAAC,WAAW;AAAA,IACnB,SAAS;AAAA,IACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,EAC9D,EAAE;AACJ;AAGA,MAAM,kBAAkB,KAAK,QAAQ,GAAG,gBAAgB,kBAAkB;AAY1E,IAAI,iBAAiC,CAAC;AACtC,IAAI,sBAAsB;AAE1B,SAAS,iBAAiC;AACxC,MAAI;AACF,QAAI,WAAW,eAAe,GAAG;AAC/B,YAAM,OAAO,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;AAE7D,YAAM,MAAM,KAAK,IAAI;AACrB,YAAM,UAA0B,CAAC;AACjC,iBAAW,CAAC,IAAI,MAAM,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC/C,cAAM,IAAI;AACV,YAAI,EAAE,YAAY,KAAK;AACrB,kBAAQ,EAAE,IAAI;AAAA,QAChB;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,CAAC;AACV;AAEA,SAAS,iBAAuB;AAC9B,MAAI,CAAC,oBAAqB;AAC1B,MAAI;AACF,oBAAgB,KAAK,QAAQ,GAAG,cAAc,CAAC;AAC/C,oBAAgB,iBAAiB,KAAK,UAAU,cAAc,CAAC;AAC/D,0BAAsB;AAAA,EACxB,QAAQ;AAAA,EAER;AACF;AAGA,YAAY,gBAAgB,GAAK;AAGjC,iBAAiB,eAAe;AAEhC,SAAS,eAAe,IAAqB;AAC3C,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,SAAS,eAAe,EAAE;AAEhC,MAAI,CAAC,UAAU,MAAM,OAAO,WAAW;AACrC,mBAAe,EAAE,IAAI,EAAE,OAAO,GAAG,WAAW,MAAM,qBAAqB;AACvE,0BAAsB;AACtB,WAAO;AAAA,EACT;AAEA,MAAI,OAAO,SAAS,yBAAyB;AAC3C,WAAO;AAAA,EACT;AAEA,SAAO;AACP,wBAAsB;AACtB,SAAO;AACT;AAGA,SAAS,sBACP,KACA,QACA,WACS;AACT,QAAM,YAAY,QAAQ,IAAI,mBAAmB;AACjD,MAAI,CAAC,WAAW;AAEd,UAAM,QACJ,QAAQ,IAAI,UAAU,MAAM,iBAC5B,QAAQ,IAAI,0BAA0B,MAAM;AAE9C,QAAI,OAAO;AACT,cAAQ;AAAA,QACN;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAGA,YAAQ;AAAA,MACN;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAGA,QAAM,aAAa,OAAO,KAAK,MAAM,EAAE,KAAK;AAC5C,MAAI,OAAO;AACX,aAAW,OAAO,YAAY;AAC5B,YAAQ,MAAM,OAAO,GAAG;AAAA,EAC1B;AAGA,QAAM,OAAO,WAAW,QAAQ,SAAS;AACzC,OAAK,OAAO,IAAI;AAChB,QAAM,oBAAoB,KAAK,OAAO,QAAQ;AAE9C,SAAO,cAAc;AACvB;AASA,SAAS,cAAc,MAAsC;AAC3D,QAAM,SAAS,IAAI,gBAAgB,IAAI;AACvC,QAAM,SAAiC,CAAC;AACxC,SAAO,QAAQ,CAAC,OAAO,QAAQ;AAC7B,WAAO,GAAG,IAAI;AAAA,EAChB,CAAC;AACD,SAAO;AACT;AAGA,SAAS,oBACP,UACA,UACA,QACM;AACN,kBAAgB,KAAK,QAAQ,GAAG,cAAc,CAAC;AAC/C,QAAM,eAAe;AAAA,IACnB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACA;AAAA,IACE;AAAA,IACA,KAAK,UAAU;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AACF;AAMA,SAAS,qBAAqB,MAAc,SAAuB;AACjE,kBAAgB,KAAK,QAAQ,GAAG,cAAc,CAAC;AAC/C,QAAM,cAAc;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACA;AAAA,IACE;AAAA,IACA,KAAK,UAAU;AAAA,MACb;AAAA,MACA;AAAA,MACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AACF;AAKO,SAAS,qBAKP;AACP,QAAM,cAAc;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,WAAW,WAAW,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,OAAO,KAAK,MAAM,aAAa,aAAa,OAAO,CAAC;AAC1D,QAAI,KAAK,WAAW;AAClB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,uBAA6B;AAC3C,QAAM,cAAc;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,WAAW,WAAW,GAAG;AAC5B;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAO,KAAK,MAAM,aAAa,aAAa,OAAO,CAAC;AAC1D,SAAK,YAAY;AACjB,oBAAgB,aAAa,KAAK,UAAU,IAAI,CAAC;AAAA,EACnD,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,iBAAiB,SAIpC;AACD,QAAM,EAAE,MAAM,KAAK,IAAI;AAGvB,MAAI,QAAQ,KAAK,SAAS,qBAAqB;AAC7C,YAAQ,IAAI,gCAAgC,KAAK,MAAM,QAAQ;AAC/D,WAAO,EAAE,UAAU,yCAAyC;AAAA,EAC9D;AAEA,MAAI,QAAQ,KAAK,SAAS,kBAAkB;AAC1C,YAAQ;AAAA,MACN,wCAAwC,KAAK,MAAM,eAAe,gBAAgB,MAAM,KAAK,UAAU,GAAG,EAAE,CAAC;AAAA,IAC/G;AACA,WAAO,EAAE,UAAU,wBAAwB;AAAA,EAC7C;AAEA,UAAQ,IAAI,+BAA+B,IAAI,KAAK,IAAI,EAAE;AAG1D,MAAI,UAAU,IAAI,GAAG;AACnB,YAAQ,IAAI,qCAAqC,IAAI,EAAE;AACvD,UAAM,YAAY,MAAM,eAAe,MAAM,IAAI;AAEjD,QAAI,UAAU,SAAS;AAErB,UAAI,UAAU,UAAU;AAEtB,4BAAoB,UAAU,QAAQ,EAAE,MAAM,QAAQ,KAAK;AAAA,MAC7D;AAEA,aAAO;AAAA,QACL,UAAU,UAAU,YAAY;AAAA,QAChC,QAAQ,UAAU;AAAA,QAClB,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EAEF;AAEA,QAAM,SAAS,wBAAwB,MAAM,IAAI;AAEjD,MAAI,CAAC,OAAO,SAAS;AACnB,QAAI,OAAO,QAAQ;AACjB,aAAO;AAAA,QACL,UAAU,+BAA+B,OAAO,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;AAAA,MAC7F;AAAA,IACF;AAEA,yBAAqB,MAAM,IAAI;AAC/B,YAAQ;AAAA,MACN,yCAAyC,IAAI,KAAK,KAAK,UAAU,GAAG,EAAE,CAAC;AAAA,IACzE;AACA,WAAO,EAAE,UAAU,wCAAwC;AAAA,EAC7D;AAGA;AAAA,IACE,OAAO,QAAQ,MAAM;AAAA,IACrB,OAAO,YAAY;AAAA,IACnB,OAAO;AAAA,EACT;AAGA,8BAA4B,OAAO,YAAY,IAAI;AAGnD,MAAI,OAAO,QAAQ;AACjB,YAAQ,IAAI,mCAAmC,OAAO,MAAM,EAAE;AAE9D,UAAM,eAAe,MAAM;AAAA,MACzB,OAAO;AAAA,MACP,OAAO,YAAY;AAAA,IACrB;AAEA,QAAI,aAAa,SAAS;AACxB,uBAAiB,eAAe,OAAO,MAAM;AAC7C,cAAQ;AAAA,QACN,oCAAoC,aAAa,UAAU,IAAI,UAAU,GAAG,GAAG,CAAC;AAAA,MAClF;AAEA,aAAO;AAAA,QACL,UAAU;AAAA,QACV,QAAQ,OAAO;AAAA,QACf,QAAQ;AAAA,MACV;AAAA,IACF,OAAO;AACL;AAAA,QACE;AAAA,QACA,OAAO;AAAA,QACP,aAAa,SAAS;AAAA,MACxB;AACA,cAAQ,IAAI,gCAAgC,aAAa,KAAK,EAAE;AAGhE;AAAA,QACE,OAAO,QAAQ,MAAM;AAAA,QACrB,OAAO,YAAY;AAAA,QACnB,OAAO;AAAA,MACT;AAEA,aAAO;AAAA,QACL,UAAU,qCAAqC,aAAa,SAAS,IAAI,UAAU,GAAG,EAAE,CAAC;AAAA,QACzF,QAAQ,OAAO;AAAA,QACf,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,UAAU,aAAa,OAAO,QAAQ;AAAA,EACxC;AACF;AAGA,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,IACJ,QAAQ,OAAO,MAAM,EACrB,QAAQ,MAAM,KAAK,EACnB,QAAQ,OAAO,KAAK,EACpB,QAAQ,OAAO,KAAK,EACpB,UAAU,GAAG,GAAG;AACrB;AAGA,SAAS,4BAA4B,UAAwB;AAC3D,QAAM,cAAc,kBAAkB,iBAAiB,QAAQ,EAAE;AAGjE,MAAI;AACF;AAAA,MACE;AAAA,MACA;AAAA,QACE;AAAA,QACA,yBAAyB,WAAW;AAAA,MACtC;AAAA,MACA,EAAE,OAAO,UAAU,SAAS,IAAK;AAAA,IACnC;AAAA,EACF,QAAQ;AAAA,EAER;AAGA,MAAI;AACF,UAAM,aAAa,KAAK,QAAQ,GAAG,gBAAgB,gBAAgB;AACnE;AAAA,MACE;AAAA,MACA,KAAK,UAAU;AAAA,QACb,MAAM;AAAA,QACN;AAAA,QACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,UAAQ,IAAI;AAAA,8BAAiC,QAAQ,OAAO;AAC5D,UAAQ,IAAI;AAAA,CAA+C;AAC7D;AAGA,SAAS,cAAc,SAAyB;AAC9C,SAAO;AAAA;AAAA,aAEI,UAAU,OAAO,CAAC;AAAA;AAE/B;AAEA,SAAS,UAAU,KAAqB;AACtC,SAAO,IACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,QAAQ,EACtB,QAAQ,MAAM,QAAQ;AAC3B;AAGO,SAAS,mBAAmB,OAAe,MAAY;AAC5D,QAAM,SAAS;AAAA,IACb,OAAO,KAAsB,QAAwB;AACnD,YAAM,MAAM,SAAS,IAAI,OAAO,KAAK,IAAI;AAGzC,UAAI,IAAI,aAAa,WAAW;AAC9B,YAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,YAAI,IAAI,KAAK,UAAU,EAAE,QAAQ,KAAK,CAAC,CAAC;AACxC;AAAA,MACF;AAGA,WACG,IAAI,aAAa,UAChB,IAAI,aAAa,mBACjB,IAAI,aAAa,eACnB,IAAI,WAAW,QACf;AACA,cAAM,WAAW,IAAI,OAAO,iBAAiB;AAG7C;AAAA,UACE;AAAA,UACA,IAAI,UAAU;AAAA,UACd,IAAI,YAAY;AAAA,UAChB;AAAA,QACF;AAGA,YAAI,CAAC,eAAe,QAAQ,GAAG;AAC7B,uBAAa,eAAe,QAAQ;AACpC,cAAI,UAAU,KAAK;AAAA,YACjB,gBAAgB;AAAA,YAChB,eAAe;AAAA,UACjB,CAAC;AACD,cAAI,IAAI,cAAc,4CAA4C,CAAC;AACnE;AAAA,QACF;AAGA,cAAM,cAAc,IAAI,QAAQ,cAAc,KAAK;AACnD,YAAI,CAAC,YAAY,SAAS,mCAAmC,GAAG;AAC9D,gCAAsB,eAAe,aAAa,QAAQ;AAC1D,cAAI,UAAU,KAAK,EAAE,gBAAgB,WAAW,CAAC;AACjD,cAAI,IAAI,cAAc,sBAAsB,CAAC;AAC7C;AAAA,QACF;AAEA,YAAI,OAAO;AACX,YAAI,eAAe;AAEnB,YAAI,GAAG,QAAQ,CAAC,UAAU;AACxB,kBAAQ;AAER,cAAI,KAAK,SAAS,eAAe;AAC/B,2BAAe;AACf,4BAAgB,eAAe,KAAK,QAAQ,QAAQ;AACpD,gBAAI,QAAQ;AAAA,UACd;AAAA,QACF,CAAC;AAED,YAAI,GAAG,OAAO,YAAY;AACxB,cAAI,cAAc;AAChB,gBAAI,UAAU,KAAK,EAAE,gBAAgB,WAAW,CAAC;AACjD,gBAAI,IAAI,cAAc,mBAAmB,CAAC;AAC1C;AAAA,UACF;AAEA,cAAI;AACF,kBAAM,UAAU;AAAA,cACd;AAAA,YACF;AAGA,kBAAM,kBAAkB,IAAI,QAAQ,oBAAoB;AACxD,kBAAM,aAAa,GAAG,IAAI,QAAQ,mBAAmB,KAAK,MAAM,MAAM,IAAI,QAAQ,IAAI,GAAG,IAAI,GAAG;AAEhG,gBACE,mBACA,CAAC;AAAA,cACC;AAAA,cACA;AAAA,cACA;AAAA,YACF,GACA;AACA,kCAAoB,eAAe,QAAQ;AAC3C,sBAAQ,MAAM,wCAAwC;AACtD,kBAAI,UAAU,KAAK,EAAE,gBAAgB,WAAW,CAAC;AACjD,kBAAI,IAAI,cAAc,cAAc,CAAC;AACrC;AAAA,YACF;AAEA,kBAAM,SAAS,MAAM,iBAAiB,OAAO;AAE7C,gBAAI,UAAU,KAAK,EAAE,gBAAgB,WAAW,CAAC;AACjD,gBAAI,IAAI,cAAc,OAAO,QAAQ,CAAC;AAAA,UACxC,SAAS,KAAK;AACZ,oBAAQ,MAAM,wBAAwB,GAAG;AACzC,gBAAI,UAAU,KAAK,EAAE,gBAAgB,WAAW,CAAC;AACjD,gBAAI,IAAI,cAAc,0BAA0B,CAAC;AAAA,UACnD;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAGA,UAAI,IAAI,aAAa,iBAAiB,IAAI,WAAW,QAAQ;AAC3D,YAAI,OAAO;AACX,YAAI,GAAG,QAAQ,CAAC,UAAU;AACxB,kBAAQ;AAAA,QACV,CAAC;AAED,YAAI,GAAG,OAAO,MAAM;AAClB,cAAI;AACF,kBAAM,UAAU,cAAc,IAAI;AAClC,oBAAQ;AAAA,cACN,gCAAgC,QAAQ,YAAY,CAAC,OAAO,QAAQ,eAAe,CAAC;AAAA,YACtF;AAGA,kBAAM,aAAa;AAAA,cACjB,QAAQ;AAAA,cACR;AAAA,cACA;AAAA,YACF;AACA,kBAAM,WAAmC,WAAW,UAAU,IAC1D,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC,IAC3C,CAAC;AACL,qBAAS,QAAQ,YAAY,CAAC,IAAI,QAAQ,eAAe;AACzD,4BAAgB,YAAY,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAE7D,gBAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;AACnD,gBAAI,IAAI,IAAI;AAAA,UACd,SAAS,KAAK;AACZ,oBAAQ,MAAM,+BAA+B,GAAG;AAChD,gBAAI,UAAU,GAAG;AACjB,gBAAI,IAAI,OAAO;AAAA,UACjB;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAGA,UAAI,IAAI,aAAa,WAAW;AAC9B,cAAM,SAAS,cAAc;AAC7B,YAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,YAAI;AAAA,UACF,KAAK,UAAU;AAAA,YACb,SAAS,OAAO;AAAA,YAChB,gBAAgB,OAAO,eAAe;AAAA,UACxC,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAGA,UAAI,IAAI,aAAa,cAAc,IAAI,WAAW,OAAO;AACvD,cAAM,UAAU,mBAAmB;AACnC,YAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,YAAI,IAAI,KAAK,UAAU,EAAE,QAAQ,CAAC,CAAC;AACnC;AAAA,MACF;AAGA,UAAI,IAAI,aAAa,kBAAkB,IAAI,WAAW,QAAQ;AAC5D,6BAAqB;AACrB,YAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,YAAI,IAAI,KAAK,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC;AACzC;AAAA,MACF;AAGA,UAAI,IAAI,aAAa,WAAW,IAAI,WAAW,QAAQ;AACrD,YAAI,OAAO;AACX,YAAI,GAAG,QAAQ,CAAC,UAAU;AACxB,kBAAQ;AACR,cAAI,KAAK,SAAS,eAAe;AAC/B,gBAAI,QAAQ;AAAA,UACd;AAAA,QACF,CAAC;AAED,YAAI,GAAG,OAAO,YAAY;AACxB,cAAI;AACF,kBAAM,UAAU,KAAK,MAAM,IAAI;AAC/B,kBAAM,UAAU,QAAQ,WAAW,QAAQ,QAAQ;AACnD,kBAAM,QAAQ,QAAQ,SAAS;AAC/B,kBAAM,OAAO,QAAQ,QAAQ;AAE7B,gBAAI,CAAC,SAAS;AACZ,kBAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,kBAAI;AAAA,gBACF,KAAK,UAAU,EAAE,SAAS,OAAO,OAAO,mBAAmB,CAAC;AAAA,cAC9D;AACA;AAAA,YACF;AAEA,kBAAM,SAAS,MAAM,iBAAiB;AAAA,cACpC;AAAA,cAKA;AAAA,cACA;AAAA,YACF,CAAC;AAED,gBAAI,UAAU,OAAO,UAAU,MAAM,KAAK;AAAA,cACxC,gBAAgB;AAAA,YAClB,CAAC;AACD,gBAAI,IAAI,KAAK,UAAU,MAAM,CAAC;AAAA,UAChC,SAAS,KAAK;AACZ,oBAAQ,MAAM,6BAA6B,GAAG;AAC9C,gBAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,gBAAI;AAAA,cACF,KAAK,UAAU;AAAA,gBACb,SAAS;AAAA,gBACT,OAAO,eAAe,QAAQ,IAAI,UAAU;AAAA,cAC9C,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAEA,UAAI,UAAU,GAAG;AACjB,UAAI,IAAI,WAAW;AAAA,IACrB;AAAA,EACF;AAEA,SAAO,OAAO,MAAM,MAAM;AACxB,YAAQ,IAAI,0CAA0C,IAAI,EAAE;AAC5D,YAAQ;AAAA,MACN,qDAAqD,IAAI;AAAA,IAC3D;AACA,YAAQ;AAAA,MACN,qDAAqD,IAAI;AAAA,IAC3D;AACA,YAAQ,IAAI,sDAAsD;AAGlE,gBAAY,MAAM;AAChB,UAAI;AACF,cAAM,iBAAiB,sBAAsB;AAC7C,cAAM,aAAa,kBAAkB;AACrC,YAAI,iBAAiB,KAAK,aAAa,GAAG;AACxC,qBAAW,eAAe,gBAAgB,UAAU;AACpD,kBAAQ;AAAA,YACN,0BAA0B,cAAc,qBAAqB,UAAU;AAAA,UACzE;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,GAAG,mBAAmB;AACtB,YAAQ;AAAA,MACN,yCAAyC,sBAAsB,GAAI;AAAA,IACrE;AAAA,EACF,CAAC;AACH;AAGA,eAAsB,qBACpB,KACA,KACe;AACf,QAAM,SAAS,MAAM,iBAAiB,IAAI,IAAI;AAC9C,MAAI,KAAK,UAAU;AACnB,MAAI,KAAK,cAAc,OAAO,QAAQ,CAAC;AACzC;AAGA,IAAI,QAAQ,KAAK,CAAC,GAAG,SAAS,gBAAgB,GAAG;AAC/C,QAAM,OAAO,SAAS,QAAQ,IAAI,kBAAkB,KAAK,QAAQ,EAAE;AACnE,qBAAmB,IAAI;AACzB;",
-  "names": []
-}