@synoikia/core 0.1.0

package/dist/notify/service.js

@@ -0,0 +1,358 @@
+import { createHmac, randomUUID } from 'node:crypto';
+import { asc, eq } from 'drizzle-orm';
+import { z } from 'zod';
+import { writeAudit } from '../audit.js';
+import { aad } from '../crypto/index.js';
+import { notifierChannels } from '../db/schema.js';
+import { NotFoundError, ValidationError } from '../errors.js';
+/**
+ * Notification channels (design §9): ntfy and signed webhooks, subscribed to core events and
+ * optionally filtered by instance. Informational only: approvals happen in the MCP client (§5.3).
+ * Payloads carry summaries, never raw params or secrets.
+ */
+export const NOTIFY_EVENTS = [
+    'instance.error',
+    'instance.recovered',
+    'plugin.crashed',
+    'sync.failed',
+    'sync.pending_review',
+    'auth.lockout',
+];
+/** Channels saved before approval notifications were removed may still list those events. */
+const knownEvents = (events) => events.filter((e) => NOTIFY_EVENTS.includes(e));
+const NtfyConfig = z.object({
+    server: z.url().default('https://ntfy.sh'),
+    topic: z.string().regex(/^[A-Za-z0-9_-]{1,64}$/, 'letters, digits, - and _'),
+});
+const WebhookConfig = z.object({ url: z.url() });
+export const ChannelInputSchema = z.discriminatedUnion('kind', [
+    z.object({
+        kind: z.literal('ntfy'),
+        name: z.string().trim().min(1).max(100),
+        config: NtfyConfig,
+        secrets: z.object({ token: z.string().nullable().optional() }).default({}),
+        events: z.array(z.enum(NOTIFY_EVENTS)).min(1),
+        instanceFilter: z.array(z.string()).nullable().default(null),
+        enabled: z.boolean().default(true),
+    }),
+    z.object({
+        kind: z.literal('webhook'),
+        name: z.string().trim().min(1).max(100),
+        config: WebhookConfig,
+        secrets: z
+            .object({
+            hmacSecret: z.string().nullable().optional(),
+            headers: z.record(z.string(), z.string()).nullable().optional(),
+        })
+            .default({}),
+        events: z.array(z.enum(NOTIFY_EVENTS)).min(1),
+        instanceFilter: z.array(z.string()).nullable().default(null),
+        enabled: z.boolean().default(true),
+    }),
+]);
+export class NotifierService {
+    db;
+    box;
+    opts;
+    lastStatus = new Map();
+    constructor(db, box, opts = {}) {
+        this.db = db;
+        this.box = box;
+        this.opts = opts;
+    }
+    secretsOf(row) {
+        return row.secretsEnc
+            ? this.box.decryptJson(row.secretsEnc, aad('notifier_channels', 'secrets_enc', row.id))
+            : {};
+    }
+    publicRow(row) {
+        const s = this.secretsOf(row);
+        return {
+            ...row,
+            events: knownEvents(row.events),
+            secretsEnc: undefined,
+            secrets: {
+                ...(row.kind === 'ntfy' ? { token: { set: !!s.token } } : {}),
+                ...(row.kind === 'webhook'
+                    ? { hmacSecret: { set: !!s.hmacSecret }, headers: { set: !!s.headers && Object.keys(s.headers).length > 0 } }
+                    : {}),
+            },
+        };
+    }
+    list() {
+        return this.db
+            .select()
+            .from(notifierChannels)
+            .orderBy(asc(notifierChannels.name))
+            .all()
+            .map((r) => this.publicRow(r));
+    }
+    mergeSecrets(current, patch) {
+        const next = { ...current };
+        for (const [k, v] of Object.entries(patch)) {
+            if (v === undefined)
+                continue;
+            if (v === null || v === '')
+                delete next[k];
+            else
+                next[k] = v;
+        }
+        return next;
+    }
+    save(raw, opts = {}) {
+        const existing = opts.id
+            ? this.db.select().from(notifierChannels).where(eq(notifierChannels.id, opts.id)).get()
+            : undefined;
+        if (opts.id && !existing)
+            throw new NotFoundError('channel_not_found', 'No such channel');
+        const merged = existing
+            ? {
+                kind: existing.kind,
+                name: existing.name,
+                config: existing.config,
+                events: knownEvents(existing.events),
+                instanceFilter: existing.instanceFilter,
+                enabled: existing.enabled,
+                ...raw,
+            }
+            : raw;
+        const parsed = ChannelInputSchema.safeParse(merged);
+        if (!parsed.success)
+            throw new ValidationError('invalid_channel', 'Invalid channel', parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`));
+        const input = parsed.data;
+        if (existing && existing.kind !== input.kind)
+            throw new ValidationError('kind_immutable', 'A channel’s kind cannot change');
+        const id = existing?.id ?? randomUUID();
+        const secrets = this.mergeSecrets(existing ? this.secretsOf(existing) : {}, input.secrets);
+        const values = {
+            id,
+            kind: input.kind,
+            name: input.name,
+            config: input.config,
+            secretsEnc: Object.keys(secrets).length
+                ? this.box.encryptJson(secrets, aad('notifier_channels', 'secrets_enc', id))
+                : null,
+            events: input.events,
+            instanceFilter: input.instanceFilter,
+            enabled: input.enabled,
+        };
+        this.db.transaction((tx) => {
+            if (existing)
+                tx.update(notifierChannels).set(values).where(eq(notifierChannels.id, id)).run();
+            else
+                tx.insert(notifierChannels).values(values).run();
+            writeAudit(tx, {
+                kind: 'config',
+                decision: existing ? 'notifier_updated' : 'notifier_created',
+                actorKind: 'user',
+                actorId: opts.actor?.userId,
+                detail: {
+                    id,
+                    kind: input.kind,
+                    name: input.name,
+                    config: input.config,
+                    events: input.events,
+                    secretsChanged: Object.keys(input.secrets),
+                },
+            });
+        });
+        return this.publicRow(this.db.select().from(notifierChannels).where(eq(notifierChannels.id, id)).get());
+    }
+    remove(id, actor = {}) {
+        const row = this.db.select().from(notifierChannels).where(eq(notifierChannels.id, id)).get();
+        if (!row)
+            throw new NotFoundError('channel_not_found', 'No such channel');
+        this.db.transaction((tx) => {
+            tx.delete(notifierChannels).where(eq(notifierChannels.id, id)).run();
+            writeAudit(tx, {
+                kind: 'config',
+                decision: 'notifier_deleted',
+                actorKind: 'user',
+                actorId: actor.userId,
+                detail: { id, name: row.name },
+            });
+        });
+    }
+    /** Sends a test message to one channel, bypassing its event filter. */
+    async test(id) {
+        const row = this.db.select().from(notifierChannels).where(eq(notifierChannels.id, id)).get();
+        if (!row)
+            throw new NotFoundError('channel_not_found', 'No such channel');
+        return this.deliver(row, {
+            event: 'sync.failed',
+            title: 'Test notification',
+            message: 'Notifications from Synoikia are working.',
+            data: { test: true },
+        });
+    }
+    /** Wires channels to the event bus. Returns an unsubscribe function. */
+    subscribe(events) {
+        const offs = [];
+        const on = (name, h) => {
+            const listener = h;
+            events.on(name, listener);
+            offs.push(() => events.off(name, listener));
+        };
+        on('instance.status', (s) => {
+            const prev = this.lastStatus.get(s.instanceId);
+            this.lastStatus.set(s.instanceId, s.status);
+            if (s.status === 'error' && prev !== 'error') {
+                void this.dispatch({
+                    event: 'instance.error',
+                    instance: { id: s.instanceId, slug: s.slug },
+                    title: `/${s.slug} is down`,
+                    message: s.error ?? 'Plugin error',
+                    data: { error: s.error ?? null },
+                });
+            }
+            else if (s.status === 'ready' && prev === 'error') {
+                void this.dispatch({
+                    event: 'instance.recovered',
+                    instance: { id: s.instanceId, slug: s.slug },
+                    title: `/${s.slug} recovered`,
+                    message: 'The plugin is running again.',
+                    data: {},
+                });
+            }
+        });
+        on('plugin.crashed', (p) => void this.dispatch({
+            event: 'plugin.crashed',
+            instance: { id: p.instanceId, slug: p.slug },
+            title: `Plugin for /${p.slug} crashed`,
+            message: p.error,
+            data: { error: p.error },
+        }));
+        on('sync.failed', (p) => void this.dispatch({
+            event: 'sync.failed',
+            instance: { id: p.instanceId, slug: p.slug },
+            title: `Catalog sync failed for /${p.slug}`,
+            message: p.error,
+            data: { error: p.error },
+        }));
+        on('sync.completed', (p) => {
+            const rulesDisabled = p.rulesDisabled ?? 0;
+            if (p.pendingReview.length === 0 && rulesDisabled === 0)
+                return;
+            const lines = [];
+            if (p.pendingReview.length > 0)
+                lines.push(`New or changed writes ask for approval where their level is Write, until acknowledged: ${p.pendingReview.slice(0, 10).join(', ')}${p.pendingReview.length > 10 ? ', …' : ''}`);
+            if (rulesDisabled > 0)
+                lines.push(`${rulesDisabled} pre-approval rule(s) no longer fit their operation and were disabled.`);
+            void this.dispatch({
+                event: 'sync.pending_review',
+                instance: { id: p.instanceId, slug: p.slug },
+                title: p.pendingReview.length > 0
+                    ? `${p.pendingReview.length} write operation(s) to review on /${p.slug}`
+                    : `Pre-approval rules disabled on /${p.slug}`,
+                message: lines.join('\n'),
+                data: { operations: p.pendingReview, rulesDisabled },
+            });
+        });
+        on('auth.lockout', (p) => void this.dispatch({
+            event: 'auth.lockout',
+            title: 'Sign-in locked',
+            message: `Too many failed sign-ins for "${p.username}" on the ${p.surface === 'mcp' ? 'MCP (internet-facing)' : 'admin'} sign-in page${p.ip ? ` from ${p.ip}` : ''}.`,
+            data: { username: p.username, ip: p.ip ?? null, surface: p.surface ?? 'admin' },
+        }));
+        return () => {
+            for (const off of offs)
+                off();
+        };
+    }
+    /** Fans a notification out to every enabled channel subscribed to its event (and instance). */
+    async dispatch(n) {
+        const channels = this.db
+            .select()
+            .from(notifierChannels)
+            .all()
+            .filter((ch) => ch.enabled &&
+            ch.events.includes(n.event) &&
+            (!ch.instanceFilter?.length || (n.instance && ch.instanceFilter.includes(n.instance.id))));
+        await Promise.all(channels.map((ch) => this.deliver(ch, n)));
+    }
+    async deliver(row, n) {
+        const secrets = this.secretsOf(row);
+        let request;
+        if (row.kind === 'ntfy') {
+            const cfg = NtfyConfig.parse(row.config);
+            request = {
+                url: cfg.server.replace(/\/+$/, ''),
+                headers: {
+                    'content-type': 'application/json',
+                    ...(secrets.token ? { authorization: `Bearer ${secrets.token}` } : {}),
+                },
+                // JSON publishing: UTF-8 safe, unlike header-based publishing.
+                body: JSON.stringify({
+                    topic: cfg.topic,
+                    title: n.title,
+                    message: n.message,
+                    priority: n.event.startsWith('instance') || n.event === 'plugin.crashed' ? 4 : 3,
+                    tags: [n.event.replace('.', '-')],
+                }),
+            };
+        }
+        else {
+            const cfg = WebhookConfig.parse(row.config);
+            const timestamp = Math.floor((this.opts.now?.() ?? new Date()).getTime() / 1000).toString();
+            const body = JSON.stringify({
+                event: n.event,
+                at: new Date(Number(timestamp) * 1000).toISOString(),
+                instance: n.instance ?? null,
+                title: n.title,
+                message: n.message,
+                data: n.data,
+            });
+            request = {
+                url: cfg.url,
+                headers: {
+                    ...(secrets.headers ?? {}),
+                    'content-type': 'application/json',
+                    'x-synoikia-event': n.event,
+                    'x-synoikia-timestamp': timestamp,
+                    ...(secrets.hmacSecret
+                        ? {
+                            'x-synoikia-signature': `sha256=${createHmac('sha256', secrets.hmacSecret).update(`${timestamp}.${body}`).digest('hex')}`,
+                        }
+                        : {}),
+                },
+                body,
+            };
+        }
+        const doFetch = this.opts.fetch ?? ((url, init) => fetch(url, init));
+        const delays = this.opts.retryDelaysMs ?? [1000, 4000];
+        let lastError = '';
+        for (let attempt = 0; attempt <= delays.length; attempt++) {
+            if (attempt > 0)
+                await new Promise((r) => setTimeout(r, delays[attempt - 1]));
+            try {
+                const res = await doFetch(request.url, {
+                    method: 'POST',
+                    headers: request.headers,
+                    body: request.body,
+                    signal: AbortSignal.timeout(10_000),
+                });
+                if (res.ok) {
+                    this.db
+                        .update(notifierChannels)
+                        .set({ lastSentAt: this.opts.now?.() ?? new Date(), lastError: null })
+                        .where(eq(notifierChannels.id, row.id))
+                        .run();
+                    return { ok: true };
+                }
+                lastError = `HTTP ${res.status}`;
+                if (res.status >= 400 && res.status < 500 && res.status !== 429)
+                    break; // won't succeed on retry
+            }
+            catch (err) {
+                lastError = err instanceof Error ? err.message : String(err);
+            }
+        }
+        this.db
+            .update(notifierChannels)
+            .set({ lastError: lastError.slice(0, 300) })
+            .where(eq(notifierChannels.id, row.id))
+            .run();
+        return { ok: false, error: lastError };
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/notify/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/notify/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAGzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG9D;;;;GAIG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,aAAa;IACb,qBAAqB;IACrB,cAAc;CACN,CAAC;AAGX,6FAA6F;AAC7F,MAAM,WAAW,GAAG,CAAC,MAAgB,EAAE,EAAE,CACvC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAgB,CAAC,CAAC,CAAC;AAEnF,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,EAAE,0BAA0B,CAAC;CAC7E,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACnC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,CAAC;aACP,MAAM,CAAC;YACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;YAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAChE,CAAC;aACD,OAAO,CAAC,EAAE,CAAC;QACd,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACnC,CAAC;CACH,CAAC,CAAC;AAkBH,MAAM,OAAO,eAAe;IAIP;IACA;IACA;IALF,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExD,YACmB,EAAM,EACN,GAAc,EACd,OAIb,EAAE;QANW,OAAE,GAAF,EAAE,CAAI;QACN,QAAG,GAAH,GAAG,CAAW;QACd,SAAI,GAAJ,IAAI,CAIf;IACL,CAAC;IAEI,SAAS,CAAC,GAAe;QAC/B,OAAO,GAAG,CAAC,UAAU;YACnB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAU,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,mBAAmB,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAChG,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAEO,SAAS,CAAC,GAAe;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,GAAG,GAAG;YACN,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;YAC/B,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE;gBACP,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS;oBACxB,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE;oBAC7G,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;aACnC,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,YAAY,CAAC,OAAgB,EAAE,KAA8B;QACnE,MAAM,IAAI,GAAY,EAAE,GAAG,OAAO,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS;YAC9B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC,CAAkB,CAAC,CAAC;;gBACtD,IAAgC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,GAAY,EAAE,OAAqD,EAAE;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;YACtB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;YACvF,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC;gBACE,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAI,GAAc;aACnB;YACH,CAAC,CAAC,GAAG,CAAC;QACR,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO;YACjB,MAAM,IAAI,eAAe,CACvB,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CACpE,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAC1C,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;QAChF,MAAM,EAAE,GAAG,QAAQ,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAC/B,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EACxC,KAAK,CAAC,OAAkC,CACzC,CAAC;QACF,MAAM,MAAM,GAAG;YACb,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;gBACrC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,mBAAmB,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;gBAC5E,CAAC,CAAC,IAAI;YACR,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,IAAI,QAAQ;gBAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;;gBAC1F,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;YACtD,UAAU,CAAC,EAAE,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB;gBAC5D,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM;gBAC3B,MAAM,EAAE;oBACN,EAAE;oBACF,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;iBAC3C;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAG,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,QAA6B,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7F,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;QAC1E,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YACrE,UAAU,CAAC,EAAE,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,KAAK,CAAC,MAAM;gBACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;aAC/B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7F,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACvB,KAAK,EAAE,aAAa;YACpB,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EAAE,0CAA0C;YACnD,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,SAAS,CAAC,MAAkB;QAC1B,MAAM,IAAI,GAAmB,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,CAA0B,IAAO,EAAE,CAAqC,EAAE,EAAE;YACrF,MAAM,QAAQ,GAAG,CAAU,CAAC;YAC5B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7C,KAAK,IAAI,CAAC,QAAQ,CAAC;oBACjB,KAAK,EAAE,gBAAgB;oBACvB,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBAC5C,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,UAAU;oBAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,IAAI,cAAc;oBAClC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE;iBACjC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACpD,KAAK,IAAI,CAAC,QAAQ,CAAC;oBACjB,KAAK,EAAE,oBAAoB;oBAC3B,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBAC5C,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,YAAY;oBAC7B,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,EAAE;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CACA,gBAAgB,EAChB,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,IAAI,CAAC,QAAQ,CAAC;YACjB,KAAK,EAAE,gBAAgB;YACvB,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC5C,KAAK,EAAE,eAAe,CAAC,CAAC,IAAI,UAAU;YACtC,OAAO,EAAE,CAAC,CAAC,KAAK;YAChB,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;SACzB,CAAC,CACL,CAAC;QACF,EAAE,CACA,aAAa,EACb,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,IAAI,CAAC,QAAQ,CAAC;YACjB,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC5C,KAAK,EAAE,4BAA4B,CAAC,CAAC,IAAI,EAAE;YAC3C,OAAO,EAAE,CAAC,CAAC,KAAK;YAChB,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;SACzB,CAAC,CACL,CAAC;QACF,EAAE,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;YACzB,MAAM,aAAa,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC;gBAAE,OAAO;YAChE,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAC5B,KAAK,CAAC,IAAI,CACR,0FAA0F,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/K,CAAC;YACJ,IAAI,aAAa,GAAG,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,wEAAwE,CAAC,CAAC;YACvG,KAAK,IAAI,CAAC,QAAQ,CAAC;gBACjB,KAAK,EAAE,qBAAqB;gBAC5B,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBAC5C,KAAK,EACH,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;oBACxB,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,qCAAqC,CAAC,CAAC,IAAI,EAAE;oBACxE,CAAC,CAAC,mCAAmC,CAAC,CAAC,IAAI,EAAE;gBACjD,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACzB,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE;aACrD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,EAAE,CACA,cAAc,EACd,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,IAAI,CAAC,QAAQ,CAAC;YACjB,KAAK,EAAE,cAAc;YACrB,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,iCAAiC,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YACrK,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,EAAE;SAChF,CAAC,CACL,CAAC;QACF,OAAO,GAAG,EAAE;YACV,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,GAAG,EAAE,CAAC;QAChC,CAAC,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,QAAQ,CAAC,CAAe;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,GAAG,EAAE;aACL,MAAM,CACL,CAAC,EAAE,EAAE,EAAE,CACL,EAAE,CAAC,OAAO;YACV,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3B,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAC5F,CAAC;QACJ,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAe,EAAE,CAAe;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAuE,CAAC;QAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzC,OAAO,GAAG;gBACR,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnC,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvE;gBACD,+DAA+D;gBAC/D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChF,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;iBAClC,CAAC;aACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,EAAE,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;gBACpD,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;gBAC5B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;YACH,OAAO,GAAG;gBACR,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,OAAO,EAAE;oBACP,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC1B,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,CAAC,CAAC,KAAK;oBAC3B,sBAAsB,EAAE,SAAS;oBACjC,GAAG,CAAC,OAAO,CAAC,UAAU;wBACpB,CAAC,CAAC;4BACE,sBAAsB,EAAE,UAAU,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;yBAC1H;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR;gBACD,IAAI;aACL,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAc,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YAC1D,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;oBACrC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,IAAI,CAAC,EAAE;yBACJ,MAAM,CAAC,gBAAgB,CAAC;yBACxB,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;yBACrE,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;yBACtC,GAAG,EAAE,CAAC;oBACT,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACtB,CAAC;gBACD,SAAS,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;gBACjC,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,CAAC,yBAAyB;YACnG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,EAAE;aACJ,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;aAC3C,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;aACtC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;CACF"}

package/dist/plugins/discovery.d.ts

@@ -0,0 +1,39 @@
+import type { Manifest } from '@synoikia/plugin-sdk';
+import type { Db } from '../db/index.js';
+/** Plugin discovery (design §4.1): core plugins from the image, installed ones from `DATA_DIR/plugins`. */
+export type PluginSource = 'core' | 'repo';
+export type DiscoveredPlugin = {
+    status: 'ok';
+    source: PluginSource;
+    dir: string;
+    manifest: Manifest;
+} | {
+    status: 'invalid' | 'incompatible';
+    source: PluginSource;
+    dir: string;
+    manifest?: Manifest;
+    pluginId: string;
+    error: string;
+};
+export declare function inspectPluginDir(dir: string, source: PluginSource): DiscoveredPlugin;
+/** Scans each root's immediate subdirectories that contain a manifest.json. */
+export declare function discoverPlugins(roots: {
+    dir: string;
+    source: PluginSource;
+}[]): DiscoveredPlugin[];
+export declare const pluginIdOf: (p: DiscoveredPlugin) => string;
+/**
+ * Upserts discovery results into `plugins`. New core plugins start disabled unless `autoEnableCore`.
+ * A repository plugin may not shadow a core plugin id; a core plugin that arrives later with a repo
+ * plugin's id doesn't take its row over either (that row is marked invalid until an admin resolves it). Plugins no longer on disk are marked invalid,
+ * never deleted, so their instances and history remain.
+ */
+export declare function syncPluginRegistry(db: Db, discovered: DiscoveredPlugin[], opts: {
+    autoEnableCore: boolean;
+    now?: Date;
+}): {
+    added: string[];
+    updated: string[];
+    missing: string[];
+    rejected: string[];
+};

package/dist/plugins/discovery.js

@@ -0,0 +1,157 @@
+import { randomUUID } from 'node:crypto';
+import { existsSync, readdirSync, readFileSync, realpathSync, statSync } from 'node:fs';
+import path from 'node:path';
+import { isSdkCompatible, parseManifest, SDK_VERSION } from '@synoikia/plugin-sdk';
+import { eq } from 'drizzle-orm';
+import { ZodError } from 'zod';
+import { writeAudit } from '../audit.js';
+import { plugins } from '../db/schema.js';
+function explain(err) {
+    if (err instanceof ZodError)
+        return err.issues.map((i) => `${i.path.join('.') || '(root)'}: ${i.message}`).join('; ');
+    return err instanceof Error ? err.message : String(err);
+}
+export function inspectPluginDir(dir, source) {
+    const fallbackId = path.basename(dir);
+    let manifest;
+    try {
+        manifest = parseManifest(JSON.parse(readFileSync(path.join(dir, 'manifest.json'), 'utf8')));
+    }
+    catch (err) {
+        return { status: 'invalid', source, dir, pluginId: fallbackId, error: `manifest.json: ${explain(err)}` };
+    }
+    const entry = path.join(dir, manifest.entry);
+    if (!existsSync(entry)) {
+        return {
+            status: 'invalid',
+            source,
+            dir,
+            manifest,
+            pluginId: manifest.id,
+            error: `entry ${manifest.entry} not found (not built?)`,
+        };
+    }
+    // The child may only read its own directory (design §4.4), so the entry must not escape it via symlinks.
+    const realDir = realpathSync(dir);
+    if (!realpathSync(entry).startsWith(realDir + path.sep)) {
+        return {
+            status: 'invalid',
+            source,
+            dir,
+            manifest,
+            pluginId: manifest.id,
+            error: 'entry resolves outside the plugin directory',
+        };
+    }
+    if (!isSdkCompatible(manifest)) {
+        return {
+            status: 'incompatible',
+            source,
+            dir,
+            manifest,
+            pluginId: manifest.id,
+            error: `requires plugin SDK ${manifest.sdk}; core implements ${SDK_VERSION}`,
+        };
+    }
+    return { status: 'ok', source, dir, manifest };
+}
+/** Scans each root's immediate subdirectories that contain a manifest.json. */
+export function discoverPlugins(roots) {
+    const found = [];
+    for (const root of roots) {
+        if (!existsSync(root.dir))
+            continue;
+        for (const name of readdirSync(root.dir).sort()) {
+            const dir = path.join(root.dir, name);
+            if (statSync(dir).isDirectory() && existsSync(path.join(dir, 'manifest.json'))) {
+                found.push(inspectPluginDir(dir, root.source));
+            }
+        }
+    }
+    return found;
+}
+export const pluginIdOf = (p) => (p.status === 'ok' ? p.manifest.id : p.pluginId);
+/**
+ * Upserts discovery results into `plugins`. New core plugins start disabled unless `autoEnableCore`.
+ * A repository plugin may not shadow a core plugin id; a core plugin that arrives later with a repo
+ * plugin's id doesn't take its row over either (that row is marked invalid until an admin resolves it). Plugins no longer on disk are marked invalid,
+ * never deleted, so their instances and history remain.
+ */
+export function syncPluginRegistry(db, discovered, opts) {
+    const now = opts.now ?? new Date();
+    const out = { added: [], updated: [], missing: [], rejected: [] };
+    const coreIds = new Set(discovered.filter((p) => p.source === 'core').map(pluginIdOf));
+    db.transaction((tx) => {
+        const existing = new Map(tx
+            .select()
+            .from(plugins)
+            .all()
+            .map((p) => [p.pluginId, p]));
+        const seen = new Set();
+        for (const p of discovered) {
+            const pluginId = pluginIdOf(p);
+            if (p.source === 'repo' && coreIds.has(pluginId)) {
+                out.rejected.push(pluginId);
+                continue;
+            }
+            if (seen.has(pluginId)) {
+                out.rejected.push(pluginId);
+                continue;
+            }
+            seen.add(pluginId);
+            const fields = {
+                version: p.manifest?.version ?? '0.0.0',
+                source: p.source,
+                path: p.dir,
+                manifest: p.manifest ?? {},
+                status: p.status,
+                statusError: p.status === 'ok' ? null : p.error,
+            };
+            const prev = existing.get(pluginId);
+            if (prev?.source === 'repo' && p.source === 'core') {
+                // A core release now ships this id. Its instances must not silently switch to different code
+                // with the same secrets: the repo row stays as it was, unusable, until an admin resolves it.
+                const statusError = `A core plugin now uses the id "${pluginId}". Uninstall this repository plugin (after moving its endpoints) to use the core one.`;
+                if (prev.status !== 'invalid' || prev.statusError !== statusError) {
+                    tx.update(plugins).set({ status: 'invalid', statusError }).where(eq(plugins.id, prev.id)).run();
+                    writeAudit(tx, {
+                        kind: 'plugin',
+                        decision: 'plugin_id_conflict',
+                        actorKind: 'system',
+                        detail: { pluginId, repoVersion: prev.version, coreVersion: fields.version },
+                    }, now);
+                }
+                out.rejected.push(pluginId);
+                continue;
+            }
+            if (!prev) {
+                const enabled = p.status === 'ok' && p.source === 'core' && opts.autoEnableCore;
+                tx.insert(plugins)
+                    .values({ id: randomUUID(), pluginId, ...fields, enabled, installedAt: now })
+                    .run();
+                out.added.push(pluginId);
+                writeAudit(tx, {
+                    kind: 'plugin',
+                    decision: 'plugin_discovered',
+                    actorKind: 'system',
+                    detail: { pluginId, ...fields, manifest: undefined, enabled },
+                }, now);
+            }
+            else {
+                tx.update(plugins).set(fields).where(eq(plugins.id, prev.id)).run();
+                out.updated.push(pluginId);
+            }
+        }
+        for (const prev of existing.values()) {
+            if (!seen.has(prev.pluginId) && prev.status !== 'invalid') {
+                tx.update(plugins)
+                    .set({ status: 'invalid', statusError: 'plugin directory not found' })
+                    .where(eq(plugins.id, prev.id))
+                    .run();
+                out.missing.push(prev.pluginId);
+            }
+        }
+    });
+    return out;
+}
+//# sourceMappingURL=discovery.js.map

package/dist/plugins/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/plugins/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnF,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAiB1C,SAAS,OAAO,CAAC,GAAY;IAC3B,IAAI,GAAG,YAAY,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtH,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAoB;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM;YACN,GAAG;YACH,QAAQ;YACR,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,KAAK,EAAE,SAAS,QAAQ,CAAC,KAAK,yBAAyB;SACxD,CAAC;IACJ,CAAC;IACD,yGAAyG;IACzG,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM;YACN,GAAG;YACH,QAAQ;YACR,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,KAAK,EAAE,6CAA6C;SACrD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,MAAM;YACN,GAAG;YACH,QAAQ;YACR,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,KAAK,EAAE,uBAAuB,QAAQ,CAAC,GAAG,qBAAqB,WAAW,EAAE;SAC7E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AACjD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,KAA8C;IAC5E,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;gBAC/E,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAEpG;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAM,EACN,UAA8B,EAC9B,IAA6C;IAE7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,EAAc,EAAE,OAAO,EAAE,EAAc,EAAE,OAAO,EAAE,EAAc,EAAE,QAAQ,EAAE,EAAc,EAAE,CAAC;IAClH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAEvF,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;QACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAC/B,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG;gBACb,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,IAAI,OAAO;gBACvC,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI,EAAE,CAAC,CAAC,GAAG;gBACX,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;aAChD,CAAC;YACF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACnD,6FAA6F;gBAC7F,6FAA6F;gBAC7F,MAAM,WAAW,GAAG,kCAAkC,QAAQ,uFAAuF,CAAC;gBACtJ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;oBAClE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;oBAChG,UAAU,CACR,EAAE,EACF;wBACE,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,oBAAoB;wBAC9B,SAAS,EAAE,QAAQ;wBACnB,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE;qBAC7E,EACD,GAAG,CACJ,CAAC;gBACJ,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,CAAC;gBAChF,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;qBACf,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;qBAC5E,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,UAAU,CACR,EAAE,EACF;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,mBAAmB;oBAC7B,SAAS,EAAE,QAAQ;oBACnB,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE;iBAC9D,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;gBACpE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1D,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;qBACf,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;qBACrE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;qBAC9B,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/plugins/minisign.d.ts

@@ -0,0 +1,25 @@
+import type { KeyObject } from 'node:crypto';
+/**
+ * Minisign verification (design §4.3), using Node's built-in Ed25519. Supports both the legacy
+ * `Ed` (signature over the raw file) and the default prehashed `ED` (signature over BLAKE2b-512 of
+ * the file) algorithms, and always checks the global signature over the trusted comment.
+ * Format: https://jedisct1.github.io/minisign/
+ */
+export interface MinisignPublicKey {
+    /** 8-byte key id as minisign prints it (`minisign -V` / the `.pub` comment): 16 upper-case hex digits. */
+    keyId: string;
+    key: KeyObject;
+    /** The base64 key line, normalized. */
+    base64: string;
+}
+export declare class MinisignError extends Error {
+}
+/** Accepts the bare base64 key line or a whole `.pub` file (with its untrusted comment). */
+export declare function parsePublicKey(text: string): MinisignPublicKey;
+export interface VerifiedSignature {
+    keyId: string;
+    prehashed: boolean;
+    trustedComment: string;
+}
+/** Throws MinisignError unless `signature` is a valid minisign signature of `data` by `publicKey`. */
+export declare function verifySignature(data: Buffer, signature: string, publicKey: MinisignPublicKey): VerifiedSignature;