@supen-ai/cli 0.1.6

package/daemon/dist/core/sdk-wrapper.js

@@ -0,0 +1,533 @@
+/**
+ * Claude-specific backend session implementation.
+ *
+ * This module remains the implementation detail used by the
+ * Supen Agent SDK ClaudeCode driver. New backend integrations
+ * should not call this file directly.
+ */
+import fs from 'fs';
+import os from 'os';
+import { createRequire } from 'module';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { ClaudeCliDirectDriver } from '../agent-sdk/drivers/claude-cli-direct-driver.js';
+import { DEFAULT_MODEL, getAgentModelConfig, agentPaths } from './config.js';
+import { logger } from './logger.js';
+import { getLlmToken } from './gateway.js';
+import { SkillsRegistry } from '../skills/registry.js';
+import { listLoadableEnabledSkillEntries } from '../skills/enabled.js';
+import { inspectSkillRuntime, installSkillRuntime } from '../skills/runtime.js';
+import { isPathWithin } from './security.js';
+import { withRuntimeSpaceEnv } from './space-env.js';
+const require = createRequire(import.meta.url);
+const thisFileDir = typeof __dirname !== 'undefined'
+    ? __dirname
+    : path.dirname(fileURLToPath(import.meta.url));
+const resolvedWorkspaceRoot = path.resolve(thisFileDir, '../..');
+const daemonBinDir = path.join(resolvedWorkspaceRoot, 'bin');
+let cachedClaudeCliPath = null;
+function resolveClaudeCliPath() {
+    if (cachedClaudeCliPath)
+        return cachedClaudeCliPath;
+    cachedClaudeCliPath =
+        process.env.CLAUDE_CODE_EXECUTABLE?.trim() ||
+            process.env.CLAUDE_PATH?.trim() ||
+            'claude';
+    return cachedClaudeCliPath;
+}
+function sanitizeSkillRuntimeName(name) {
+    const cleaned = name.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, '-');
+    return cleaned.replace(/^-+|-+$/g, '') || 'skill';
+}
+function resolveUserToolPathEntries() {
+    const homeDir = process.env.HOME || os.homedir();
+    if (!homeDir)
+        return [];
+    return [
+        path.join(homeDir, '.dotnet', 'tools'),
+        path.join(homeDir, '.local', 'bin'),
+        path.join(homeDir, 'bin'),
+    ];
+}
+function resolveSkillRuntimePathEntries(agentId) {
+    const homeDir = process.env.HOME || os.homedir();
+    const supenHome = process.env.SUPEN_HOME || (homeDir ? path.join(homeDir, '.supen') : undefined);
+    const runtimeBins = supenHome
+        ? resolveEnabledSkillEntries(agentId).map((entry) => path.join(supenHome, 'runtime', 'skills', sanitizeSkillRuntimeName(entry.skill.name), 'bin'))
+        : [];
+    return Array.from(new Set([...runtimeBins, ...resolveUserToolPathEntries()]));
+}
+function joinPathEntries(entries) {
+    return Array.from(new Set(entries.filter((entry) => !!entry && entry.trim().length > 0))).join(path.delimiter);
+}
+function resolveLocalMcpServersRoot() {
+    const candidates = [
+        process.env.MCP_SERVERS_ROOT,
+        path.join(process.env.HOME || '', 'work', 'mcp-servers'),
+        path.join(process.env.HOME || '', 'tc', 'mcp-servers'),
+    ].filter((entry) => !!entry && entry.trim().length > 0);
+    for (const candidate of candidates) {
+        if (fs.existsSync(path.join(candidate, 'servers', 'office', 'index.mjs'))) {
+            return candidate;
+        }
+    }
+    return undefined;
+}
+function resolveAutomationMcpConfig(agentId, sessionId) {
+    const srcScheduler = path.join(resolvedWorkspaceRoot, 'src', 'bin', 'mcp-scheduler.ts');
+    const distScheduler = path.join(resolvedWorkspaceRoot, 'dist', 'bin', 'mcp-scheduler.js');
+    const mcpScript = fs.existsSync(srcScheduler) ? srcScheduler : distScheduler;
+    if (!fs.existsSync(mcpScript))
+        return undefined;
+    let command = process.execPath;
+    const args = [mcpScript];
+    if (mcpScript.endsWith('.ts')) {
+        try {
+            const tsxPkgPath = require.resolve('tsx/package.json', { paths: [thisFileDir] });
+            const candidate = path.join(path.dirname(tsxPkgPath), 'dist', 'cli.mjs');
+            if (fs.existsSync(candidate)) {
+                args.unshift(candidate);
+            }
+            else {
+                command = 'tsx';
+                // Keep a conservative fallback path if direct cli resolution fails.
+            }
+        }
+        catch {
+            command = 'tsx';
+        }
+    }
+    return {
+        command,
+        args,
+        env: {
+            ...withRuntimeSpaceEnv(process.env),
+            SUPEN_AGENT_ID: agentId,
+            ...(sessionId ? { SUPEN_SESSION_ID: sessionId } : {}),
+        },
+    };
+}
+class AsyncMessageQueue {
+    queue = [];
+    readResolve;
+    readReject;
+    doneFlag = false;
+    errorValue;
+    enqueue(value) {
+        if (this.doneFlag)
+            return;
+        if (this.readResolve) {
+            const resolve = this.readResolve;
+            this.readResolve = undefined;
+            this.readReject = undefined;
+            resolve({ value, done: false });
+            return;
+        }
+        this.queue.push(value);
+    }
+    done() {
+        this.doneFlag = true;
+        if (this.readResolve) {
+            const resolve = this.readResolve;
+            this.readResolve = undefined;
+            this.readReject = undefined;
+            resolve({ value: undefined, done: true });
+        }
+    }
+    error(error) {
+        this.errorValue = error;
+        if (this.readReject) {
+            const reject = this.readReject;
+            this.readResolve = undefined;
+            this.readReject = undefined;
+            reject(error);
+        }
+    }
+    [Symbol.asyncIterator]() {
+        return {
+            next: async () => {
+                if (this.queue.length > 0) {
+                    return { value: this.queue.shift(), done: false };
+                }
+                if (this.errorValue) {
+                    throw this.errorValue;
+                }
+                if (this.doneFlag) {
+                    return { value: undefined, done: true };
+                }
+                return new Promise((resolve, reject) => {
+                    this.readResolve = resolve;
+                    this.readReject = reject;
+                });
+            },
+            return: async () => {
+                this.done();
+                return { value: undefined, done: true };
+            },
+            throw: async (error) => {
+                this.error(error);
+                throw error;
+            },
+        };
+    }
+}
+const liveSessions = new Map();
+const sessionCreationInFlight = new Map();
+function resolveSdkModelAlias(model, providerId) {
+    if (!model)
+        return undefined;
+    const normalized = model.trim().toLowerCase();
+    if (!normalized)
+        return undefined;
+    if (providerId && providerId !== 'anthropic') {
+        return 'sonnet';
+    }
+    if (normalized === 'sonnet' || normalized === 'opus' || normalized === 'haiku') {
+        return normalized;
+    }
+    if (normalized.includes('haiku'))
+        return 'haiku';
+    if (normalized.includes('opus'))
+        return 'opus';
+    if (normalized.includes('sonnet') || normalized.includes('claude'))
+        return 'sonnet';
+    return model;
+}
+function resolveSelectedModel(agentId) {
+    return getAgentModelConfig(agentId, true)[0] || DEFAULT_MODEL;
+}
+export function shouldWaitForGatewayToken(agentId) {
+    if (getLlmToken())
+        return false;
+    const selectedModel = resolveSelectedModel(agentId);
+    const providerId = selectedModel?.provider_id?.toLowerCase() || '';
+    const isGatewayBackedProvider = providerId === 'supen' || providerId === 'babelark';
+    if (isGatewayBackedProvider)
+        return true;
+    const configuredApiKey = process.env.ANTHROPIC_API_KEY || selectedModel?.api_key;
+    return !configuredApiKey;
+}
+export function resetAgentSessionCache() {
+    for (const session of liveSessions.values()) {
+        try {
+            session.close();
+        }
+        catch {
+            // best effort cleanup for tests/shutdown paths
+        }
+    }
+    liveSessions.clear();
+    sessionCreationInFlight.clear();
+}
+export function hasLiveAgentSession(sessionKey) {
+    return liveSessions.has(sessionKey) || sessionCreationInFlight.has(sessionKey);
+}
+function resolveEnabledSkillNames() {
+    try {
+        return Array.from(new Set(listLoadableEnabledSkillEntries()
+            .map((entry) => entry.skill.name))).sort();
+    }
+    catch (err) {
+        logger.warn({ err }, 'Failed to resolve enabled skill names for SDK session');
+        return [];
+    }
+}
+function resolveEnabledSkillEntries(agentId) {
+    try {
+        return listLoadableEnabledSkillEntries(agentId);
+    }
+    catch (err) {
+        logger.warn({ err, agentId }, 'Failed to resolve enabled skill entries for SDK session');
+        return [];
+    }
+}
+function ensureEnabledSkillRuntimes(agentId) {
+    for (const entry of resolveEnabledSkillEntries(agentId)) {
+        if (!entry.skill.runtime)
+            continue;
+        let status = inspectSkillRuntime(entry);
+        if (!status || status.ready)
+            continue;
+        if (!entry.skill.runtime.installScript) {
+            logger.warn({ agentId, skill: entry.skill.name, checks: status.checks }, 'Enabled skill runtime is not ready and has no installer');
+            continue;
+        }
+        try {
+            status = installSkillRuntime(entry);
+            logger.info({ agentId, skill: entry.skill.name, ready: status.ready }, 'Installed enabled skill runtime before SDK session start');
+        }
+        catch (err) {
+            logger.warn({ err, agentId, skill: entry.skill.name }, 'Failed to install enabled skill runtime before SDK session start');
+        }
+    }
+}
+export function buildEnabledSkillsPrompt(agentId) {
+    const entries = resolveEnabledSkillEntries(agentId);
+    if (entries.length === 0)
+        return undefined;
+    const sections = entries
+        .map((entry) => {
+        const skillFilePath = path.join(entry.skillDirectory, 'SKILL.md');
+        if (!fs.existsSync(skillFilePath)) {
+            return undefined;
+        }
+        const raw = fs.readFileSync(skillFilePath, 'utf-8').trim();
+        if (!raw) {
+            return undefined;
+        }
+        return [
+            `### Skill: ${entry.skill.name}`,
+            `Skill directory: ${path.dirname(skillFilePath)}`,
+            'Use the current task folder for generated task files. Create subfolders only when this skill run actually needs them.',
+            'Resolve relative asset/template paths from the skill directory, but do not write generated task files into the skill directory.',
+            raw.slice(0, 12000),
+        ].join('\n');
+    })
+        .filter((value) => !!value);
+    if (sections.length === 0)
+        return undefined;
+    return [
+        '## Installed Supen Skills',
+        'The following Supen-managed skills are installed and enabled for this session.',
+        'Treat them as available capabilities even if they are not surfaced by Claude slash-command listings.',
+        'Do not call the built-in Skill tool for these Supen-managed skills.',
+        'When the user request matches one of these skills, follow the skill workflow directly.',
+        'The current working directory is the task folder. Keep generated files there and create only the task-specific subfolders that the request actually needs.',
+        ...sections,
+    ].join('\n\n');
+}
+function compileEnabledSkillsPlugin(agentId) {
+    let skillHub;
+    try {
+        skillHub = new SkillsRegistry();
+    }
+    catch (err) {
+        logger.warn({ err, agentId }, 'Failed to initialize SkillHub for SDK plugin compilation');
+        return [];
+    }
+    const { base } = agentPaths(agentId);
+    const pluginPath = path.join(base, 'sdk_plugin');
+    const pluginMetaPath = path.join(pluginPath, '.claude-plugin');
+    const pluginSkillsPath = path.join(pluginPath, 'skills');
+    const managedRoot = path.dirname(path.dirname(skillHub.getConfig().statePath));
+    const allowedRoots = Array.from(new Set([...skillHub.getConfig().directories, managedRoot].map((entry) => path.resolve(entry))));
+    fs.mkdirSync(pluginMetaPath, { recursive: true });
+    fs.mkdirSync(pluginSkillsPath, { recursive: true });
+    fs.writeFileSync(path.join(pluginMetaPath, 'plugin.json'), JSON.stringify({
+        name: 'supen-skills',
+        version: '1.0.0',
+        description: 'Supen dynamically compiled skills bundle for Claude SDK discovery.',
+    }, null, 2));
+    for (const entry of fs.readdirSync(pluginSkillsPath)) {
+        fs.rmSync(path.join(pluginSkillsPath, entry), { recursive: true, force: true });
+    }
+    for (const entry of resolveEnabledSkillEntries(agentId)) {
+        const skillDir = entry.skillDirectory;
+        if (!skillDir)
+            continue;
+        const inAllowedRoot = allowedRoots.some((root) => isPathWithin(root, skillDir));
+        if (!inAllowedRoot) {
+            logger.warn({ agentId, skill: entry.skill.name, directory: skillDir }, 'Skipping skill outside configured skills scope');
+            continue;
+        }
+        const linkPath = path.join(pluginSkillsPath, entry.skill.name);
+        try {
+            fs.rmSync(linkPath, { recursive: true, force: true });
+            fs.symlinkSync(skillDir, linkPath, 'dir');
+        }
+        catch (err) {
+            if (fs.existsSync(linkPath)) {
+                continue;
+            }
+            logger.error({ err, agentId, skill: entry.skill.name }, 'Failed to symlink skill into SDK plugin');
+        }
+    }
+    return [{ type: 'local', path: pluginPath }];
+}
+export async function buildAgentSessionConfig(config) {
+    const cliPath = resolveClaudeCliPath();
+    const gatewayToken = getLlmToken();
+    const selectedModel = resolveSelectedModel(config.agentId);
+    const providerId = selectedModel?.provider_id?.toLowerCase() || '';
+    const configuredApiKey = process.env.ANTHROPIC_API_KEY || selectedModel?.api_key;
+    const isGatewayBackedProvider = providerId === 'supen' || providerId === 'babelark';
+    const llmToken = isGatewayBackedProvider
+        ? (gatewayToken || configuredApiKey || 'dummy')
+        : (configuredApiKey || gatewayToken || 'dummy');
+    const anthropicApiKey = llmToken;
+    const anthropicGatewayBaseUrl = process.env.SUPEN_LLM_ANTHROPIC_URL ||
+        process.env.TEST_ANTHROPIC_BASE_URL;
+    const configuredBaseUrl = isGatewayBackedProvider
+        ? (anthropicGatewayBaseUrl ||
+            selectedModel?.base_url ||
+            (gatewayToken ? 'http://127.0.0.1:2755/api/llm/anthropic' : undefined))
+        : ((providerId === 'anthropic' ? anthropicGatewayBaseUrl : undefined) ||
+            selectedModel?.base_url);
+    const configuredModelName = selectedModel?.model;
+    const isThirdPartyProvider = !!selectedModel?.provider_id && selectedModel.provider_id !== 'anthropic';
+    const nativeSkillToolSupported = !providerId || providerId === 'anthropic';
+    const runningAsRoot = typeof process.getuid === 'function' && process.getuid() === 0;
+    const permissionMode = runningAsRoot ? 'default' : 'bypassPermissions';
+    const localMcpServersRoot = resolveLocalMcpServersRoot();
+    const sessionConfig = {
+        model: resolveSdkModelAlias(config.model || selectedModel?.model, selectedModel?.provider_id) || 'sonnet',
+        resume: config.resume,
+        cwd: config.cwd,
+        // Surface incremental token events from Claude Code so the chat transport
+        // can render streamed assistant text instead of waiting for the final block.
+        includePartialMessages: true,
+        // Non-Anthropic providers reject Claude Code's native Skill continuation
+        // shape, so Supen-managed skills stay available through the appended prompt.
+        settingSources: nativeSkillToolSupported ? ['project'] : [],
+        // Claude Code rejects bypass mode under root/sudo. Cloud containers often run as root.
+        permissionMode,
+        ...(runningAsRoot
+            ? {
+                // Claude Code refuses bypassPermissions when running as root, which is
+                // common in hosted space containers. Keep the SDK in default mode but
+                // explicitly allow tool calls so template skills can run end to end
+                // without an impossible interactive approval step.
+                canUseTool: async (_toolName, input, options) => ({
+                    behavior: 'allow',
+                    updatedInput: input,
+                    ...(options?.toolUseID ? { toolUseID: options.toolUseID } : {}),
+                }),
+            }
+            : { allowDangerouslySkipPermissions: true }),
+        pathToClaudeCodeExecutable: cliPath,
+        env: {
+            ...withRuntimeSpaceEnv(process.env),
+            PWD: config.cwd,
+            PATH: joinPathEntries([daemonBinDir, ...resolveSkillRuntimePathEntries(config.agentId), process.env.PATH || '']),
+            // Claude Code sends ANTHROPIC_API_KEY as the request auth credential for
+            // custom Anthropic-compatible base URLs. Keep AUTH_TOKEN set as well for
+            // runtimes that read it, but the gateway token must be present here.
+            ANTHROPIC_API_KEY: anthropicApiKey,
+            ANTHROPIC_AUTH_TOKEN: llmToken,
+            ...(localMcpServersRoot
+                ? { MCP_SERVERS_ROOT: localMcpServersRoot }
+                : {}),
+            ...(isThirdPartyProvider && configuredModelName
+                ? {
+                    ANTHROPIC_MODEL: configuredModelName,
+                    ANTHROPIC_SMALL_FAST_MODEL: configuredModelName,
+                    ANTHROPIC_DEFAULT_SONNET_MODEL: configuredModelName,
+                    ANTHROPIC_DEFAULT_OPUS_MODEL: configuredModelName,
+                    ANTHROPIC_DEFAULT_HAIKU_MODEL: configuredModelName,
+                }
+                : {}),
+            ...(configuredBaseUrl
+                ? { ANTHROPIC_BASE_URL: configuredBaseUrl }
+                : {}),
+        },
+        onMessage: (msg) => {
+            logger.info({ type: msg.type }, 'SDK Message received in onMessage');
+        },
+        onError: (err) => {
+            logger.error({ err, agentId: config.agentId }, 'SDK Session Error');
+        }
+    };
+    const mergedMcpServers = {};
+    const automationMcpConfig = resolveAutomationMcpConfig(config.agentId, config.sessionId);
+    if (automationMcpConfig) {
+        mergedMcpServers.mcpAutomations = {
+            type: 'stdio',
+            command: automationMcpConfig.command,
+            args: automationMcpConfig.args,
+            env: automationMcpConfig.env,
+        };
+    }
+    if (config.mcpServers && Object.keys(config.mcpServers).length > 0) {
+        Object.assign(mergedMcpServers, config.mcpServers);
+    }
+    const skillsPrompt = buildEnabledSkillsPrompt(config.agentId);
+    const appendedPrompt = [config.systemPromptAppend?.trim(), skillsPrompt]
+        .filter((value) => !!value && value.trim().length > 0)
+        .join('\n\n');
+    if (appendedPrompt) {
+        sessionConfig.systemPrompt = {
+            type: 'preset',
+            preset: 'claude_code',
+            append: appendedPrompt,
+        };
+    }
+    // Pass MCP server configurations if provided.
+    if (Object.keys(mergedMcpServers).length > 0) {
+        sessionConfig.mcpServers = mergedMcpServers;
+    }
+    const disallowedTools = new Set([
+        ...(Array.isArray(sessionConfig.disallowedTools) ? sessionConfig.disallowedTools : []),
+        'CronCreate',
+        'create_schedule',
+        'list_schedules',
+        'delete_schedule',
+        ...(nativeSkillToolSupported ? [] : ['Skill']),
+    ]);
+    sessionConfig.disallowedTools = Array.from(disallowedTools);
+    if (nativeSkillToolSupported) {
+        sessionConfig.plugins = compileEnabledSkillsPlugin(config.agentId);
+        const enabledSkills = resolveEnabledSkillNames();
+        if (enabledSkills.length > 0) {
+            sessionConfig.skills = enabledSkills;
+        }
+    }
+    return sessionConfig;
+}
+/**
+ * Exported for the ClaudeCode driver boundary and targeted wrapper tests.
+ * New backend integrations should implement BackendDriver instead of
+ * calling this Claude-specific helper directly.
+ */
+export async function createAgentSession(config) {
+    if (config.sessionKey) {
+        const existingSession = liveSessions.get(config.sessionKey);
+        if (existingSession)
+            return existingSession;
+        const inFlightSession = sessionCreationInFlight.get(config.sessionKey);
+        if (inFlightSession)
+            return inFlightSession;
+    }
+    const createSessionPromise = (async () => {
+        ensureEnabledSkillRuntimes(config.agentId);
+        const driver = new ClaudeCliDirectDriver();
+        const session = await driver.startSession({
+            agentId: config.agentId,
+            sessionId: config.sessionId || config.sessionKey || 'claude-session',
+            turnId: 'claude-turn',
+            cwd: config.cwd,
+            model: config.model,
+            resume: config.resume,
+            mcpServers: config.mcpServers,
+            systemPromptAppend: config.systemPromptAppend,
+        });
+        const wrappedSession = {
+            send: (message) => session.send(message),
+            stream: () => session.stream(),
+            supportedCommands: () => typeof session.supportedCommands === 'function'
+                ? session.supportedCommands()
+                : Promise.resolve([]),
+            getContextUsage: () => typeof session.getContextUsage === 'function'
+                ? session.getContextUsage()
+                : Promise.resolve(undefined),
+            close() {
+                session.close();
+                if (config.sessionKey) {
+                    liveSessions.delete(config.sessionKey);
+                }
+            },
+        };
+        if (config.sessionKey) {
+            liveSessions.set(config.sessionKey, wrappedSession);
+        }
+        return wrappedSession;
+    })();
+    if (config.sessionKey) {
+        const sessionKey = config.sessionKey;
+        sessionCreationInFlight.set(sessionKey, createSessionPromise);
+        createSessionPromise.finally(() => {
+            sessionCreationInFlight.delete(sessionKey);
+        });
+    }
+    return createSessionPromise;
+}
+//# sourceMappingURL=sdk-wrapper.js.map

package/daemon/dist/core/sdk-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-wrapper.js","sourceRoot":"","sources":["../../src/core/sdk-wrapper.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,OAAO,SAAS,KAAK,WAAW;IAClD,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACjE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;AAE7D,IAAI,mBAAmB,GAAkB,IAAI,CAAC;AAE9C,SAAS,oBAAoB;IAC3B,IAAI,mBAAmB;QAAE,OAAO,mBAAmB,CAAC;IACpD,mBAAmB;QACjB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE;YAC1C,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE;YAC/B,QAAQ,CAAC;IACX,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAGD,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;AACpD,CAAC;AAED,SAAS,0BAA0B;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,OAAe;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjG,MAAM,WAAW,GAAG,SAAS;QAC3B,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAChD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAC7F;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,0BAA0B,EAAE,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,OAAkC;IACzD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAClI,CAAC;AAED,SAAS,0BAA0B;IACjC,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC;KACvD,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEzE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD,SAAS,0BAA0B,CAAC,OAAe,EAAE,SAAkB;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACxF,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;IAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAEhD,IAAI,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAEzB,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACzE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,KAAK,CAAC;gBAChB,oEAAoE;YACtE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,IAAI;QACJ,GAAG,EAAE;YACH,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC;YACnC,cAAc,EAAE,OAAO;YACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD;KACF,CAAC;AACJ,CAAC;AAsCD,MAAM,iBAAiB;IACb,KAAK,GAAQ,EAAE,CAAC;IAChB,WAAW,CAAuC;IAClD,UAAU,CAA4B;IACtC,QAAQ,GAAG,KAAK,CAAC;IACjB,UAAU,CAAU;IAE5B,OAAO,CAAC,KAAQ;QACd,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,OAAO,CAAC,EAAE,KAAK,EAAE,SAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAc;QAClB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAC/B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,CAAC,MAAM,CAAC,aAAa,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,KAAK,IAAgC,EAAE;gBAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBACzD,CAAC;gBACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,MAAM,IAAI,CAAC,UAAU,CAAC;gBACxB,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,OAAO,EAAE,KAAK,EAAE,SAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC/C,CAAC;gBACD,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACxD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;oBAC3B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,EAAE,KAAK,IAAgC,EAAE;gBAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO,EAAE,KAAK,EAAE,SAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;YACD,KAAK,EAAE,KAAK,EAAE,KAAe,EAA8B,EAAE;gBAC3D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClB,MAAM,KAAK,CAAC;YACd,CAAC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;AACpD,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAgC,CAAC;AAExE,SAAS,oBAAoB,CAAC,KAAyB,EAAE,UAA8B;IACrF,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAElC,IAAI,UAAU,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC/E,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,IAAI,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IAEhC,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACnE,MAAM,uBAAuB,GAAG,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,UAAU,CAAC;IACpF,IAAI,uBAAuB;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,aAAa,EAAE,OAAO,CAAC;IAEjF,OAAO,CAAC,gBAAgB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IACD,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,uBAAuB,CAAC,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,OAAO,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,wBAAwB;IAC/B,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CACL,+BAA+B,EAAE;aAC9B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC,CACF,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uDAAuD,CAAC,CAAC;QAC9E,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,IAAI,CAAC;QACH,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,yDAAyD,CAAC,CAAC;QACzF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,KAAK,MAAM,KAAK,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO;YAAE,SAAS;QAEnC,IAAI,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK;YAAE,SAAS;QAEtC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAC3D,yDAAyD,CAC1D,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EACzD,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EACzC,kEAAkE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,QAAQ,GAAG,OAAO;SACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,cAAc,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;YAChC,oBAAoB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE;YACjD,uHAAuH;YACvH,iIAAiI;YACjI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;SACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5C,OAAO;QACL,2BAA2B;QAC3B,gFAAgF;QAChF,sGAAsG;QACtG,qEAAqE;QACrE,wFAAwF;QACxF,4JAA4J;QAC5J,GAAG,QAAQ;KACZ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,0DAA0D,CAAC,CAAC;QAC1F,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,IAAI,GAAG,CACL,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC/D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CACpB,CACF,CACF,CAAC;IAEF,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,EACxC,IAAI,CAAC,SAAS,CACZ;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,oEAAoE;KAClF,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC;QACtC,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,gDAAgD,CAAC,CAAC;YACzH,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,yCAAyC,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAA0B;IACtE,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,WAAW,EAAE,CAAC;IACnC,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACnE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,aAAa,EAAE,OAAO,CAAC;IACjF,MAAM,uBAAuB,GAAG,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,UAAU,CAAC;IACpF,MAAM,QAAQ,GAAG,uBAAuB;QACtC,CAAC,CAAC,CAAC,YAAY,IAAI,gBAAgB,IAAI,OAAO,CAAC;QAC/C,CAAC,CAAC,CAAC,gBAAgB,IAAI,YAAY,IAAI,OAAO,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,QAAQ,CAAC;IACjC,MAAM,uBAAuB,GAC3B,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACtC,MAAM,iBAAiB,GAAG,uBAAuB;QAC/C,CAAC,CAAC,CACA,uBAAuB;YACvB,aAAa,EAAE,QAAQ;YACvB,CAAC,YAAY,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,SAAS,CAAC,CACvE;QACD,CAAC,CAAC,CACA,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,aAAa,EAAE,QAAQ,CACxB,CAAC;IACJ,MAAM,mBAAmB,GAAG,aAAa,EAAE,KAAK,CAAC;IACjD,MAAM,oBAAoB,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,IAAI,aAAa,CAAC,WAAW,KAAK,WAAW,CAAC;IACvG,MAAM,wBAAwB,GAAG,CAAC,UAAU,IAAI,UAAU,KAAK,WAAW,CAAC;IAC3E,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACvE,MAAM,mBAAmB,GAAG,0BAA0B,EAAE,CAAC;IAEzD,MAAM,aAAa,GAAQ;QACzB,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,CAAC,IAAI,QAAQ;QACzG,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,0EAA0E;QAC1E,6EAA6E;QAC7E,sBAAsB,EAAE,IAAI;QAC5B,yEAAyE;QACzE,6EAA6E;QAC7E,cAAc,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;QAC3D,uFAAuF;QACvF,cAAc;QACd,GAAG,CAAC,aAAa;YACf,CAAC,CAAC;gBACE,uEAAuE;gBACvE,sEAAsE;gBACtE,oEAAoE;gBACpE,mDAAmD;gBACnD,UAAU,EAAE,KAAK,EACf,SAAiB,EACjB,KAA8B,EAC9B,OAA+B,EAC/B,EAAE,CAAC,CAAC;oBACJ,QAAQ,EAAE,OAAgB;oBAC1B,YAAY,EAAE,KAAK;oBACnB,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChE,CAAC;aACH;YACH,CAAC,CAAC,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC;QAC9C,0BAA0B,EAAE,OAAO;QACnC,GAAG,EAAE;YACH,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC;YACnC,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,eAAe,CAAC,CAAC,YAAY,EAAE,GAAG,8BAA8B,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAChH,yEAAyE;YACzE,yEAAyE;YACzE,qEAAqE;YACrE,iBAAiB,EAAE,eAAe;YAClC,oBAAoB,EAAE,QAAQ;YAC9B,GAAG,CAAC,mBAAmB;gBACrB,CAAC,CAAC,EAAE,gBAAgB,EAAE,mBAAmB,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,oBAAoB,IAAI,mBAAmB;gBAC7C,CAAC,CAAC;oBACE,eAAe,EAAE,mBAAmB;oBACpC,0BAA0B,EAAE,mBAAmB;oBAC/C,8BAA8B,EAAE,mBAAmB;oBACnD,4BAA4B,EAAE,mBAAmB;oBACjD,6BAA6B,EAAE,mBAAmB;iBACnD;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,iBAAiB;gBACnB,CAAC,CAAC,EAAE,kBAAkB,EAAE,iBAAiB,EAAE;gBAC3C,CAAC,CAAC,EAAE,CAAC;SACR;QACD,SAAS,EAAE,CAAC,GAAQ,EAAE,EAAE;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACtE,CAAC;KACF,CAAC;IAEF,MAAM,gBAAgB,GAAuC,EAAE,CAAC;IAChE,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,mBAAmB,EAAE,CAAC;QACxB,gBAAgB,CAAC,cAAc,GAAG;YAChC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,mBAAmB,CAAC,OAAO;YACpC,IAAI,EAAE,mBAAmB,CAAC,IAAI;YAC9B,GAAG,EAAE,mBAAmB,CAAC,GAAG;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,YAAY,CAAC;SACrE,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACtE,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,IAAI,cAAc,EAAE,CAAC;QACnB,aAAa,CAAC,YAAY,GAAG;YAC3B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,cAAc;SACvB,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,aAAa,CAAC,UAAU,GAAG,gBAAgB,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;QACtC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,YAAY;QACZ,iBAAiB;QACjB,gBAAgB;QAChB,iBAAiB;QACjB,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;KAC/C,CAAC,CAAC;IACH,aAAa,CAAC,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE5D,IAAI,wBAAwB,EAAE,CAAC;QAC7B,aAAa,CAAC,OAAO,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnE,MAAM,aAAa,GAAG,wBAAwB,EAAE,CAAC;QACjD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,aAAa,CAAC,MAAM,GAAG,aAAa,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAA0B;IACjE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,eAAe,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,eAAe;YAAE,OAAO,eAAe,CAAC;QAC5C,MAAM,eAAe,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvE,IAAI,eAAe;YAAE,OAAO,eAAe,CAAC;IAC9C,CAAC;IAED,MAAM,oBAAoB,GAAG,CAAC,KAAK,IAAI,EAAE;QACvC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,IAAI,gBAAgB;YACpE,MAAM,EAAE,aAAa;YACrB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;SAC9C,CAAC,CAAC;QAEH,MAAM,cAAc,GAAgB;YAClC,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAChD,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAA+B;YAC3D,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAQ,OAAe,CAAC,iBAAiB,KAAK,UAAU;gBAC/E,CAAC,CAAE,OAAe,CAAC,iBAAiB,EAAE;gBACtC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,eAAe,EAAE,GAAG,EAAE,CAAC,OAAQ,OAAe,CAAC,eAAe,KAAK,UAAU;gBAC3E,CAAC,CAAE,OAAe,CAAC,eAAe,EAAE;gBACpC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAC9B,KAAK;gBACH,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;SACF,CAAC;QAEF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,uBAAuB,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QAC9D,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE;YAChC,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,oBAAoB,CAAC;AAC9B,CAAC"}

package/daemon/dist/core/security.d.ts

@@ -0,0 +1,10 @@
+export declare function isLocalHost(host: string): boolean;
+export declare function isTrustedRemoteHost(host: string): boolean;
+export declare function validateOutboundEndpoint(rawUrl: string, options: {
+    allowedProtocols: string[];
+    label: string;
+}): URL;
+export declare function assertSafePathSegment(input: string, label?: string): string;
+export declare function resolveWithin(root: string, ...segments: string[]): string;
+export declare function isPathWithin(root: string, candidate: string): boolean;
+//# sourceMappingURL=security.d.ts.map

package/daemon/dist/core/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/core/security.ts"],"names":[],"mappings":"AAkBA,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOjD;AAeD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKzD;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IACP,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACf,GACA,GAAG,CAiCL;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,KAAK,SAAiB,GACrB,MAAM,CAkBR;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAOzE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAerE"}