@trenchwork/coder 1.3.0

package/dist/utils/planFormatter.d.ts

@@ -0,0 +1,34 @@
+export type PlanStatus = 'pending' | 'in_progress' | 'completed';
+export interface PlanItem {
+    step: string;
+    status?: PlanStatus;
+}
+export type NormalizedPlanItem = PlanItem & {
+    status: PlanStatus;
+};
+export type PlanInput = Array<PlanItem | string | number | boolean | null | undefined>;
+export interface PlanFormatOptions {
+    heading?: string;
+    bullet?: string;
+    width?: number;
+    statusSymbols?: Partial<Record<PlanStatus, string>>;
+}
+/**
+ * Format a structured plan for display with compact tree-like layout.
+ */
+export declare function formatPlan(plan: PlanInput, options?: PlanFormatOptions): string;
+export declare function formatPlan(plan: unknown, options?: PlanFormatOptions): string;
+/**
+ * Normalize plan input into a typed list of steps with default statuses.
+ */
+export declare function normalizePlanItems(plan: PlanInput): NormalizedPlanItem[];
+export declare function normalizePlanItems(plan: unknown): NormalizedPlanItem[];
+/**
+ * Wrap plan text with a prefix, preserving indentation for continuations.
+ */
+export declare function wrapPlanText(text: string, prefix: string, width?: number): string[];
+/**
+ * Determine the available plan width using the terminal size if available.
+ */
+export declare function resolvePlanWidth(padding?: number): number | undefined;
+//# sourceMappingURL=planFormatter.d.ts.map

package/dist/utils/planFormatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planFormatter.d.ts","sourceRoot":"","sources":["../../src/utils/planFormatter.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;AAEjE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAEvF,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC;AACjF,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAC;AAuB/E;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,GAAG,kBAAkB,EAAE,CAAC;AAC1E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,kBAAkB,EAAE,CAAC;AAyCxE;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAanF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,MAAU,GAAG,MAAM,GAAG,SAAS,CASxE"}

package/dist/utils/planFormatter.js

@@ -0,0 +1,141 @@
+// eslint-disable-next-line no-control-regex
+const ANSI_REGEX = /\u001B\[[0-9;]*m/g;
+const DEFAULT_WIDTH = 78;
+const MIN_WIDTH = 42;
+const MAX_WIDTH = 100;
+export function formatPlan(plan, options = {}) {
+    const width = clampWidth(options.width);
+    const heading = (options.heading ?? 'Updated Plan').trim() || 'Updated Plan';
+    const bullet = (options.bullet ?? '•').trim() || '•';
+    const items = normalizePlanItems(plan);
+    const lines = [`${bullet} ${heading}`];
+    if (!items.length) {
+        lines.push('  (no steps provided)');
+        return lines.join('\n');
+    }
+    const statusSymbols = buildStatusSymbols(options.statusSymbols);
+    items.forEach((item, index) => {
+        const prefix = `${index === 0 ? '  └ ' : '    '}${statusSymbols[item.status]} `;
+        lines.push(...wrapPlanText(item.step, prefix, width));
+    });
+    return lines.join('\n');
+}
+export function normalizePlanItems(plan) {
+    if (!Array.isArray(plan)) {
+        return [];
+    }
+    const items = [];
+    for (const entry of plan) {
+        if (entry === null || entry === undefined) {
+            continue;
+        }
+        if (typeof entry === 'string' || typeof entry === 'number' || typeof entry === 'boolean') {
+            const step = String(entry).trim();
+            if (!step) {
+                continue;
+            }
+            items.push({ step, status: 'pending' });
+            continue;
+        }
+        if (typeof entry === 'object') {
+            const rawStep = entry.step;
+            const step = typeof rawStep === 'string'
+                ? rawStep.trim()
+                : typeof rawStep === 'number' || typeof rawStep === 'boolean'
+                    ? String(rawStep).trim()
+                    : '';
+            if (!step) {
+                continue;
+            }
+            const status = normalizeStatus(entry.status);
+            items.push({ step, status });
+        }
+    }
+    return items;
+}
+/**
+ * Wrap plan text with a prefix, preserving indentation for continuations.
+ */
+export function wrapPlanText(text, prefix, width) {
+    const normalizedWidth = clampWidth(width);
+    const cleanPrefix = prefix ?? '';
+    const prefixLength = visibleLength(cleanPrefix);
+    const available = Math.max(12, normalizedWidth - prefixLength);
+    const wrapped = wrapText(text, available);
+    if (!wrapped.length) {
+        return [cleanPrefix.trimEnd()];
+    }
+    const indent = ' '.repeat(prefixLength);
+    return wrapped.map((line, index) => (index === 0 ? `${cleanPrefix}${line}` : `${indent}${line}`));
+}
+/**
+ * Determine the available plan width using the terminal size if available.
+ */
+export function resolvePlanWidth(padding = 4) {
+    if (typeof process !== 'undefined' &&
+        typeof process.stdout?.columns === 'number' &&
+        Number.isFinite(process.stdout.columns)) {
+        return Math.max(0, process.stdout.columns - padding);
+    }
+    return undefined;
+}
+function buildStatusSymbols(overrides) {
+    return {
+        pending: overrides?.pending?.trim() || '□',
+        in_progress: overrides?.in_progress?.trim() || '◐',
+        completed: overrides?.completed?.trim() || '✔',
+    };
+}
+function normalizeStatus(status) {
+    if (typeof status !== 'string') {
+        return 'pending';
+    }
+    const normalized = status.trim().toLowerCase().replace(/[\s-]+/g, '_');
+    if (normalized === 'completed' || normalized === 'complete' || normalized === 'done') {
+        return 'completed';
+    }
+    if (normalized === 'in_progress' || normalized === 'inprogress') {
+        return 'in_progress';
+    }
+    return 'pending';
+}
+function wrapText(text, width) {
+    const normalized = (text || '').trim();
+    if (!normalized) {
+        return [];
+    }
+    const words = normalized.split(/\s+/);
+    const lines = [];
+    let current = words.shift() ?? '';
+    for (const word of words) {
+        const candidate = `${current} ${word}`;
+        if (visibleLength(candidate) > width && current) {
+            lines.push(current);
+            current = word;
+        }
+        else {
+            current = candidate;
+        }
+    }
+    if (current) {
+        lines.push(current);
+    }
+    return lines;
+}
+function clampWidth(width) {
+    if (typeof width !== 'number' || !Number.isFinite(width)) {
+        return DEFAULT_WIDTH;
+    }
+    const normalized = Math.floor(width);
+    if (normalized < MIN_WIDTH) {
+        return MIN_WIDTH;
+    }
+    if (normalized > MAX_WIDTH) {
+        return MAX_WIDTH;
+    }
+    return normalized;
+}
+function visibleLength(value) {
+    return value.replace(ANSI_REGEX, '').length;
+}
+//# sourceMappingURL=planFormatter.js.map

package/dist/utils/planFormatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planFormatter.js","sourceRoot":"","sources":["../../src/utils/planFormatter.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,SAAS,GAAG,GAAG,CAAC;AAwBtB,MAAM,UAAU,UAAU,CAAC,IAAa,EAAE,UAA6B,EAAE;IACvE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc,CAAC;IAC7E,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAa,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;IAEjD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEhE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAChF,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAOD,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAyB,EAAE,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACzF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAI,KAAkB,CAAC,IAAI,CAAC;YACzC,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ;gBACzB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;gBAChB,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,SAAS;oBAC3D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;oBACxB,CAAC,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,eAAe,CAAE,KAAkB,CAAC,MAAM,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAc,EAAE,KAAc;IACvE,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,GAAG,YAAY,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE1C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,CAAC;IAClD,IACE,OAAO,OAAO,KAAK,WAAW;QAC9B,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ;QAC3C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EACvC,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,SAA+C;IACzE,OAAO;QACL,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG;QAC1C,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,GAAG;QAClD,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAEvE,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QACrF,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,UAAU,KAAK,aAAa,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,MAAM,UAAU,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;QACvC,IAAI,aAAa,CAAC,SAAS,CAAC,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,UAAU,GAAG,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,UAAU,GAAG,SAAS,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC"}

package/dist/utils/securityUtils.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Security Utilities for AGI Core
+ * Comprehensive security validation, sanitization, and safe execution utilities
+ */
+import { SpawnSyncOptions } from 'node:child_process';
+/**
+ * Validate target hostname, IP address, or domain
+ * Prevents command injection and path traversal
+ */
+export declare function validateTarget(target: string): {
+    valid: boolean;
+    reason?: string;
+};
+/**
+ * Validate port numbers and ranges
+ */
+export declare function validatePorts(ports: string): {
+    valid: boolean;
+    reason?: string;
+};
+/**
+ * Validate and sanitize URL
+ */
+export declare function validateUrl(url: string): {
+    valid: boolean;
+    reason?: string;
+    sanitized?: string;
+};
+/**
+ * Safe command execution wrapper
+ * Uses spawnSync with array arguments, never shell mode
+ */
+export declare function safeExecSync(command: string, args?: string[], options?: SpawnSyncOptions): {
+    success: boolean;
+    stdout: string;
+    stderr: string;
+    error?: string;
+};
+/**
+ * Sanitize user input for shell commands
+ * Escapes shell metacharacters
+ */
+export declare function sanitizeShellInput(input: string): string;
+/**
+ * Validate and sanitize file path
+ * Prevents directory traversal anomalys
+ */
+export declare function sanitizeFilePath(path: string): {
+    valid: boolean;
+    sanitized?: string;
+    reason?: string;
+};
+/**
+ * Rate limiting and request throttling
+ */
+export declare class RateLimiter {
+    private maxRequests;
+    private timeWindowMs;
+    private requests;
+    constructor(maxRequests?: number, timeWindowMs?: number);
+    /**
+     * Check if request is allowed
+     */
+    isAllowed(key: string): boolean;
+    /**
+     * Clean up old request records
+     */
+    private cleanup;
+    /**
+     * Get wait time if rate limited
+     */
+    getWaitTime(key: string): number;
+}
+/**
+ * Secure HTTP request utilities
+ */
+export declare class SecureHttpClient {
+    private rateLimiter;
+    get(url: string, options?: {
+        timeout?: number;
+        headers?: Record<string, string>;
+    }): Promise<{
+        success: boolean;
+        statusCode?: number;
+        data?: string;
+        error?: string;
+    }>;
+}
+/**
+ * Security context for tool execution
+ */
+export interface SecurityContext {
+    userId?: string;
+    permissions: string[];
+    maxExecutionTime: number;
+    allowedCommands: string[];
+    allowedHosts: string[];
+}
+/**
+ * Security policy validator
+ */
+export declare class SecurityPolicyValidator {
+    private defaultContext;
+    validateCommand(command: string, args: string[], context?: Partial<SecurityContext>): {
+        allowed: boolean;
+        reason?: string;
+    };
+    private validateNmapArgs;
+    private validateCurlArgs;
+}
+/**
+ * Security logger for audit trail
+ */
+export declare class SecurityLogger {
+    private logFile?;
+    constructor(logFile?: string);
+    logSecurityEvent(event: {
+        type: string;
+        userId?: string;
+        command?: string;
+        args?: string[];
+        target?: string;
+        success: boolean;
+        timestamp: Date;
+        details?: Record<string, any>;
+    }): void;
+    private getClientIp;
+}
+export declare const securityValidator: SecurityPolicyValidator;
+export declare const securityLogger: SecurityLogger;
+export declare const globalRateLimiter: RateLimiter;
+//# sourceMappingURL=securityUtils.d.ts.map

package/dist/utils/securityUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityUtils.d.ts","sourceRoot":"","sources":["../../src/utils/securityUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAa,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAIjE;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAsBlF;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAsBhF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAyBhG;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,GAAE,gBAAqB,GAC7B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAmCtE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAkBtG;AAED;;GAEG;AACH,qBAAa,WAAW;IAIpB,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,YAAY;IAJtB,OAAO,CAAC,QAAQ,CAAoC;gBAG1C,WAAW,GAAE,MAAW,EACxB,YAAY,GAAE,MAAc;IAGtC;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAwB/B;;OAEG;IACH,OAAO,CAAC,OAAO;IAcf;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;CASjC;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAA8B;IAE3C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAO,GAAG,OAAO,CAAC;QACpG,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CAqBH;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,cAAc,CAKpB;IAEF,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,OAAO,CAAC,eAAe,CAAM,GAAG;QACxF,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB;IAoBD,OAAO,CAAC,gBAAgB;IAuBxB,OAAO,CAAC,gBAAgB;CAsBzB;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAC,CAAS;gBAEb,OAAO,CAAC,EAAE,MAAM;IAI5B,gBAAgB,CAAC,KAAK,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,IAAI,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAC/B,GAAG,IAAI;IAWR,OAAO,CAAC,WAAW;CAIpB;AAGD,eAAO,MAAM,iBAAiB,yBAAgC,CAAC;AAC/D,eAAO,MAAM,cAAc,gBAAuB,CAAC;AACnD,eAAO,MAAM,iBAAiB,aAA8B,CAAC"}

package/dist/utils/securityUtils.js

@@ -0,0 +1,324 @@
+/**
+ * Security Utilities for AGI Core
+ * Comprehensive security validation, sanitization, and safe execution utilities
+ */
+import { spawnSync } from 'node:child_process';
+import { URL } from 'node:url';
+import { logDebug } from './debugLogger.js';
+/**
+ * Validate target hostname, IP address, or domain
+ * Prevents command injection and path traversal
+ */
+export function validateTarget(target) {
+    if (typeof target !== 'string') {
+        return { valid: false, reason: 'Target must be a string' };
+    }
+    if (target.length > 253) {
+        return { valid: false, reason: 'Target too long (max 253 characters)' };
+    }
+    // Allow IP addresses (IPv4 and IPv6), hostnames, but no shell metacharacters
+    const validTargetRegex = /^[a-zA-Z0-9.\-:_[\]]+$/;
+    if (!validTargetRegex.test(target)) {
+        return { valid: false, reason: 'Target contains invalid characters' };
+    }
+    // Disallow localhost/private IPs unless explicitly allowed (add config flag if needed)
+    const privateIPRegex = /^(127\.|10\.|172\.(1[6-9]|2[0-9]|3[0-1])\.|192\.168\.|::1|localhost)/;
+    if (privateIPRegex.test(target.toLowerCase())) {
+        console.warn(`Security warning: Scanning private/localhost target ${target}`);
+    }
+    return { valid: true };
+}
+/**
+ * Validate port numbers and ranges
+ */
+export function validatePorts(ports) {
+    if (typeof ports !== 'string') {
+        return { valid: false, reason: 'Ports must be a string' };
+    }
+    const portList = ports.split(',');
+    for (const port of portList) {
+        if (port.includes('-')) {
+            // Handle port ranges like "1-1000"
+            const [start, end] = port.split('-').map(p => parseInt(p.trim(), 10));
+            if (isNaN(start) || isNaN(end) || start < 1 || end > 65535 || start > end) {
+                return { valid: false, reason: `Invalid port range: ${port}` };
+            }
+        }
+        else {
+            const portNum = parseInt(port.trim(), 10);
+            if (isNaN(portNum) || portNum < 1 || portNum > 65535) {
+                return { valid: false, reason: `Invalid port: ${port}` };
+            }
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Validate and sanitize URL
+ */
+export function validateUrl(url) {
+    try {
+        const parsed = new URL(url);
+        // Validate protocol
+        if (!['http:', 'https:'].includes(parsed.protocol)) {
+            return { valid: false, reason: `Unsupported protocol: ${parsed.protocol}` };
+        }
+        // Validate hostname
+        const hostnameValidation = validateTarget(parsed.hostname);
+        if (!hostnameValidation.valid) {
+            return { valid: false, reason: hostnameValidation.reason };
+        }
+        // Sanitize path (basic prevention of directory traversal in URL)
+        const sanitizedPath = parsed.pathname.replace(/\.\.\//g, '').replace(/\/\/+/g, '/');
+        return {
+            valid: true,
+            sanitized: `${parsed.protocol}//${parsed.hostname}${sanitizedPath}${parsed.search}${parsed.hash}`
+        };
+    }
+    catch (error) {
+        return { valid: false, reason: 'Invalid URL format' };
+    }
+}
+/**
+ * Safe command execution wrapper
+ * Uses spawnSync with array arguments, never shell mode
+ */
+export function safeExecSync(command, args = [], options = {}) {
+    try {
+        const defaultOptions = {
+            encoding: 'utf-8',
+            timeout: 30000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            shell: false, // CRITICAL: Never use shell mode
+        };
+        const mergedOptions = { ...defaultOptions, ...options };
+        const result = spawnSync(command, args, mergedOptions);
+        if (result.error) {
+            return {
+                success: false,
+                stdout: '',
+                stderr: '',
+                error: `Command execution failed: ${result.error.message}`
+            };
+        }
+        return {
+            success: result.status === 0,
+            stdout: result.stdout?.toString() || '',
+            stderr: result.stderr?.toString() || '',
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            stdout: '',
+            stderr: '',
+            error: `Execution error: ${error.message}`
+        };
+    }
+}
+/**
+ * Sanitize user input for shell commands
+ * Escapes shell metacharacters
+ */
+export function sanitizeShellInput(input) {
+    if (typeof input !== 'string')
+        return '';
+    // Escape shell metacharacters
+    return input.replace(/[;&|`$\\'"\n\r]/g, '\\$&');
+}
+/**
+ * Validate and sanitize file path
+ * Prevents directory traversal anomalys
+ */
+export function sanitizeFilePath(path) {
+    if (typeof path !== 'string') {
+        return { valid: false, reason: 'Path must be a string' };
+    }
+    // Prevent directory traversal
+    if (path.includes('..') || path.includes('//')) {
+        return { valid: false, reason: 'Path contains directory traversal attempts' };
+    }
+    // Prevent absolute paths to sensitive locations (basic check)
+    const sensitivePaths = ['/etc/', '/var/', '/usr/', '/bin/', '/sbin/', '/root/', '/home/'];
+    const normalizedPath = path.toLowerCase();
+    if (sensitivePaths.some(sp => normalizedPath.startsWith(sp))) {
+        return { valid: false, reason: 'Path points to sensitive system location' };
+    }
+    return { valid: true, sanitized: path };
+}
+/**
+ * Rate limiting and request throttling
+ */
+export class RateLimiter {
+    maxRequests;
+    timeWindowMs;
+    requests = new Map();
+    constructor(maxRequests = 10, timeWindowMs = 60000) {
+        this.maxRequests = maxRequests;
+        this.timeWindowMs = timeWindowMs;
+    }
+    /**
+     * Check if request is allowed
+     */
+    isAllowed(key) {
+        const now = Date.now();
+        const windowStart = now - this.timeWindowMs;
+        let requests = this.requests.get(key) || [];
+        // Clean old requests
+        requests = requests.filter(time => time > windowStart);
+        if (requests.length >= this.maxRequests) {
+            return false;
+        }
+        requests.push(now);
+        this.requests.set(key, requests);
+        // Cleanup old entries periodically
+        if (Math.random() < 0.01) { // 1% chance to cleanup
+            this.cleanup();
+        }
+        return true;
+    }
+    /**
+     * Clean up old request records
+     */
+    cleanup() {
+        const now = Date.now();
+        const windowStart = now - this.timeWindowMs;
+        for (const [key, requests] of this.requests.entries()) {
+            const filtered = requests.filter(time => time > windowStart);
+            if (filtered.length === 0) {
+                this.requests.delete(key);
+            }
+            else {
+                this.requests.set(key, filtered);
+            }
+        }
+    }
+    /**
+     * Get wait time if rate limited
+     */
+    getWaitTime(key) {
+        const requests = this.requests.get(key) || [];
+        if (requests.length < this.maxRequests) {
+            return 0;
+        }
+        const oldest = Math.min(...requests);
+        return Math.max(0, oldest + this.timeWindowMs - Date.now());
+    }
+}
+/**
+ * Secure HTTP request utilities
+ */
+export class SecureHttpClient {
+    rateLimiter = new RateLimiter(50, 60000); // 50 requests per minute
+    async get(url, options = {}) {
+        // Validate URL
+        const urlValidation = validateUrl(url);
+        if (!urlValidation.valid) {
+            return { success: false, error: urlValidation.reason };
+        }
+        // Rate limiting
+        const hostname = new URL(url).hostname;
+        if (!this.rateLimiter.isAllowed(hostname)) {
+            return {
+                success: false,
+                error: `Rate limit exceeded for ${hostname}. Wait ${this.rateLimiter.getWaitTime(hostname)}ms`
+            };
+        }
+        // Use native HTTP/HTTPS modules (implementation would go here)
+        // This is a placeholder for actual HTTP implementation
+        return { success: false, error: 'HTTP client not implemented' };
+    }
+}
+/**
+ * Security policy validator
+ */
+export class SecurityPolicyValidator {
+    defaultContext = {
+        permissions: ['read', 'write', 'execute'],
+        maxExecutionTime: 30000,
+        allowedCommands: ['nmap', 'curl', 'dig', 'sshpass', 'openssl'],
+        allowedHosts: []
+    };
+    validateCommand(command, args, context = {}) {
+        const mergedContext = { ...this.defaultContext, ...context };
+        // Check if command is allowed
+        if (!mergedContext.allowedCommands.includes(command)) {
+            return { allowed: false, reason: `Command ${command} not allowed` };
+        }
+        // Validate arguments for specific commands
+        if (command === 'nmap') {
+            return this.validateNmapArgs(args);
+        }
+        if (command === 'curl') {
+            return this.validateCurlArgs(args);
+        }
+        return { allowed: true };
+    }
+    validateNmapArgs(args) {
+        const allowedOptions = [
+            '-sS', '-sT', '-sV', '-sC', '-O', '-T4', '-T5', '-p', '-p-',
+            '-Pn', '-A', '--script=vuln', '--script=safe', '--open',
+            '--host-timeout', '--max-retries'
+        ];
+        for (const arg of args) {
+            if (arg.startsWith('-p') && !['-p', '-p-'].includes(arg)) {
+                // Validate port specification
+                const ports = arg.substring(2);
+                const portValidation = validatePorts(ports);
+                if (!portValidation.valid) {
+                    return { allowed: false, reason: portValidation.reason };
+                }
+            }
+            else if (!allowedOptions.includes(arg) && !arg.startsWith('--script')) {
+                return { allowed: false, reason: `Disallowed nmap option: ${arg}` };
+            }
+        }
+        return { allowed: true };
+    }
+    validateCurlArgs(args) {
+        for (let i = 0; i < args.length; i++) {
+            const arg = args[i];
+            if (arg === '-X' || arg === '--request') {
+                const method = args[i + 1];
+                if (!['GET', 'POST', 'HEAD', 'OPTIONS'].includes(method?.toUpperCase())) {
+                    return { allowed: false, reason: `Disallowed HTTP method: ${method}` };
+                }
+                i++; // Skip next arg
+            }
+            if (arg.startsWith('http://') || arg.startsWith('https://')) {
+                const urlValidation = validateUrl(arg);
+                if (!urlValidation.valid) {
+                    return { allowed: false, reason: urlValidation.reason };
+                }
+            }
+        }
+        return { allowed: true };
+    }
+}
+/**
+ * Security logger for audit trail
+ */
+export class SecurityLogger {
+    logFile;
+    constructor(logFile) {
+        this.logFile = logFile;
+    }
+    logSecurityEvent(event) {
+        const logEntry = {
+            ...event,
+            timestamp: event.timestamp.toISOString(),
+            ip: this.getClientIp()
+        };
+        // Keep security logging off the main console; emit via debug logger
+        logDebug(`[SECURITY] ${JSON.stringify(logEntry)}`);
+    }
+    getClientIp() {
+        // Placeholder for actual IP detection
+        return '127.0.0.1';
+    }
+}
+// Export singleton instances
+export const securityValidator = new SecurityPolicyValidator();
+export const securityLogger = new SecurityLogger();
+export const globalRateLimiter = new RateLimiter(100, 60000); // 100 requests per minute globally
+//# sourceMappingURL=securityUtils.js.map

package/dist/utils/securityUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityUtils.js","sourceRoot":"","sources":["../../src/utils/securityUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAoB,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC1E,CAAC;IAED,6EAA6E;IAC7E,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;IAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACxE,CAAC;IAED,uFAAuF;IACvF,MAAM,cAAc,GAAG,sEAAsE,CAAC;IAC9F,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,uDAAuD,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,mCAAmC;YACnC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;gBAC1E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,IAAI,EAAE,EAAE,CAAC;YACjE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,KAAK,EAAE,CAAC;gBACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAE5B,oBAAoB;QACpB,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC9E,CAAC;QAED,oBAAoB;QACpB,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC7D,CAAC;QAED,iEAAiE;QACjE,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEpF,OAAO;YACL,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,GAAG,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE;SAClG,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,OAAiB,EAAE,EACnB,UAA4B,EAAE;IAE9B,IAAI,CAAC;QACH,MAAM,cAAc,GAAqB;YACvC,QAAQ,EAAE,OAAgB;YAC1B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,KAAK,EAAE,KAAK,EAAE,iCAAiC;SAChD,CAAC;QAEF,MAAM,aAAa,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;QAExD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAEvD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,6BAA6B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;aAC3D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;SACxC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,oBAAoB,KAAK,CAAC,OAAO,EAAE;SAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzC,8BAA8B;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC3D,CAAC;IAED,8BAA8B;IAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAChF,CAAC;IAED,8DAA8D;IAC9D,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAC9E,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,WAAW;IAIZ;IACA;IAJF,QAAQ,GAA0B,IAAI,GAAG,EAAE,CAAC;IAEpD,YACU,cAAsB,EAAE,EACxB,eAAuB,KAAK;QAD5B,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAgB;IACnC,CAAC;IAEJ;;OAEG;IACH,SAAS,CAAC,GAAW;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC;QAE5C,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE5C,qBAAqB;QACrB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;QAEvD,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEjC,mCAAmC;QACnC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,uBAAuB;YACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC;QAE5C,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC;YAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAW;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACnB,WAAW,GAAG,IAAI,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,yBAAyB;IAE3E,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,UAAkE,EAAE;QAMzF,eAAe;QACf,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC;QACzD,CAAC;QAED,gBAAgB;QAChB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,2BAA2B,QAAQ,UAAU,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI;aAC/F,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,uDAAuD;QAEvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAClE,CAAC;CACF;AAaD;;GAEG;AACH,MAAM,OAAO,uBAAuB;IAC1B,cAAc,GAAoB;QACxC,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;QACzC,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;QAC9D,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF,eAAe,CAAC,OAAe,EAAE,IAAc,EAAE,UAAoC,EAAE;QAIrF,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,OAAO,EAAE,CAAC;QAE7D,8BAA8B;QAC9B,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,OAAO,cAAc,EAAE,CAAC;QACtE,CAAC;QAED,2CAA2C;QAC3C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEO,gBAAgB,CAAC,IAAc;QACrC,MAAM,cAAc,GAAG;YACrB,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;YAC3D,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,QAAQ;YACvD,gBAAgB,EAAE,eAAe;SAClC,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzD,8BAA8B;gBAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC5C,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;oBAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC;iBAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,GAAG,EAAE,EAAE,CAAC;YACtE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEO,gBAAgB,CAAC,IAAc;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAEpB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3B,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;oBACxE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,MAAM,EAAE,EAAE,CAAC;gBACzE,CAAC;gBACD,CAAC,EAAE,CAAC,CAAC,gBAAgB;YACvB,CAAC;YAED,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5D,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;oBACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAc;IACjB,OAAO,CAAU;IAEzB,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,gBAAgB,CAAC,KAShB;QACC,MAAM,QAAQ,GAAG;YACf,GAAG,KAAK;YACR,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;YACxC,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE;SACvB,CAAC;QAEF,oEAAoE;QACpE,QAAQ,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAEO,WAAW;QACjB,sCAAsC;QACtC,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAED,6BAA6B;AAC7B,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,uBAAuB,EAAE,CAAC;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,mCAAmC"}