@troykelly/openclaw-projects 0.0.1

package/dist/config.d.ts

@@ -0,0 +1,324 @@
+/**
+ * Plugin configuration schema using Zod.
+ * Validates configuration at runtime to ensure type safety.
+ *
+ * Supports flexible secret handling with three patterns:
+ * 1. Direct value (e.g., apiKey: "sk-xxx")
+ * 2. File reference (e.g., apiKeyFile: "~/.secrets/api_key")
+ * 3. Command reference (e.g., apiKeyCommand: "op read op://...")
+ */
+import { z } from 'zod';
+/** User scoping strategies for memory isolation */
+export declare const UserScopingSchema: z.ZodEnum<["agent", "identity", "session"]>;
+export type UserScoping = z.infer<typeof UserScopingSchema>;
+/**
+ * Raw plugin configuration schema (before secret resolution).
+ * Accepts direct values, file references, or command references for secrets.
+ */
+export declare const RawPluginConfigSchema: z.ZodEffects<z.ZodObject<{
+    /** Backend API URL (must be HTTPS in production) */
+    apiUrl: z.ZodEffects<z.ZodString, string, string>;
+    /** API authentication key (direct value) */
+    apiKey: z.ZodOptional<z.ZodString>;
+    /** Path to file containing API key */
+    apiKeyFile: z.ZodOptional<z.ZodString>;
+    /** Command to execute to get API key */
+    apiKeyCommand: z.ZodOptional<z.ZodString>;
+    /** Twilio Account SID (direct value) */
+    twilioAccountSid: z.ZodOptional<z.ZodString>;
+    /** Path to file containing Twilio Account SID */
+    twilioAccountSidFile: z.ZodOptional<z.ZodString>;
+    /** Command to get Twilio Account SID */
+    twilioAccountSidCommand: z.ZodOptional<z.ZodString>;
+    /** Twilio Auth Token (direct value) */
+    twilioAuthToken: z.ZodOptional<z.ZodString>;
+    /** Path to file containing Twilio Auth Token */
+    twilioAuthTokenFile: z.ZodOptional<z.ZodString>;
+    /** Command to get Twilio Auth Token */
+    twilioAuthTokenCommand: z.ZodOptional<z.ZodString>;
+    /** Twilio Phone Number (direct value) */
+    twilioPhoneNumber: z.ZodOptional<z.ZodString>;
+    /** Path to file containing Twilio Phone Number */
+    twilioPhoneNumberFile: z.ZodOptional<z.ZodString>;
+    /** Command to get Twilio Phone Number */
+    twilioPhoneNumberCommand: z.ZodOptional<z.ZodString>;
+    /** Postmark API Token (direct value) */
+    postmarkToken: z.ZodOptional<z.ZodString>;
+    /** Path to file containing Postmark Token */
+    postmarkTokenFile: z.ZodOptional<z.ZodString>;
+    /** Command to get Postmark Token */
+    postmarkTokenCommand: z.ZodOptional<z.ZodString>;
+    /** Postmark From Email address (direct value) */
+    postmarkFromEmail: z.ZodOptional<z.ZodString>;
+    /** Path to file containing Postmark From Email */
+    postmarkFromEmailFile: z.ZodOptional<z.ZodString>;
+    /** Command to get Postmark From Email */
+    postmarkFromEmailCommand: z.ZodOptional<z.ZodString>;
+    /** Timeout for secret command execution in milliseconds */
+    secretCommandTimeout: z.ZodDefault<z.ZodNumber>;
+    /** Automatically recall relevant memories on conversation start */
+    autoRecall: z.ZodDefault<z.ZodBoolean>;
+    /** Automatically capture important information as memories */
+    autoCapture: z.ZodDefault<z.ZodBoolean>;
+    /** How to scope user memories */
+    userScoping: z.ZodDefault<z.ZodEnum<["agent", "identity", "session"]>>;
+    /** Maximum memories to inject in auto-recall */
+    maxRecallMemories: z.ZodDefault<z.ZodNumber>;
+    /** Minimum relevance score for auto-recall (0-1) */
+    minRecallScore: z.ZodDefault<z.ZodNumber>;
+    /** Request timeout in milliseconds */
+    timeout: z.ZodDefault<z.ZodNumber>;
+    /** Maximum retries for failed requests */
+    maxRetries: z.ZodDefault<z.ZodNumber>;
+    /** Enable debug logging (never logs secrets) */
+    debug: z.ZodDefault<z.ZodBoolean>;
+    /** Base URL for web app (used for generating note/notebook URLs) */
+    baseUrl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    apiUrl: string;
+    secretCommandTimeout: number;
+    autoRecall: boolean;
+    autoCapture: boolean;
+    userScoping: "agent" | "identity" | "session";
+    maxRecallMemories: number;
+    minRecallScore: number;
+    timeout: number;
+    maxRetries: number;
+    debug: boolean;
+    apiKey?: string | undefined;
+    apiKeyFile?: string | undefined;
+    apiKeyCommand?: string | undefined;
+    twilioAccountSid?: string | undefined;
+    twilioAccountSidFile?: string | undefined;
+    twilioAccountSidCommand?: string | undefined;
+    twilioAuthToken?: string | undefined;
+    twilioAuthTokenFile?: string | undefined;
+    twilioAuthTokenCommand?: string | undefined;
+    twilioPhoneNumber?: string | undefined;
+    twilioPhoneNumberFile?: string | undefined;
+    twilioPhoneNumberCommand?: string | undefined;
+    postmarkToken?: string | undefined;
+    postmarkTokenFile?: string | undefined;
+    postmarkTokenCommand?: string | undefined;
+    postmarkFromEmail?: string | undefined;
+    postmarkFromEmailFile?: string | undefined;
+    postmarkFromEmailCommand?: string | undefined;
+    baseUrl?: string | undefined;
+}, {
+    apiUrl: string;
+    apiKey?: string | undefined;
+    apiKeyFile?: string | undefined;
+    apiKeyCommand?: string | undefined;
+    twilioAccountSid?: string | undefined;
+    twilioAccountSidFile?: string | undefined;
+    twilioAccountSidCommand?: string | undefined;
+    twilioAuthToken?: string | undefined;
+    twilioAuthTokenFile?: string | undefined;
+    twilioAuthTokenCommand?: string | undefined;
+    twilioPhoneNumber?: string | undefined;
+    twilioPhoneNumberFile?: string | undefined;
+    twilioPhoneNumberCommand?: string | undefined;
+    postmarkToken?: string | undefined;
+    postmarkTokenFile?: string | undefined;
+    postmarkTokenCommand?: string | undefined;
+    postmarkFromEmail?: string | undefined;
+    postmarkFromEmailFile?: string | undefined;
+    postmarkFromEmailCommand?: string | undefined;
+    secretCommandTimeout?: number | undefined;
+    autoRecall?: boolean | undefined;
+    autoCapture?: boolean | undefined;
+    userScoping?: "agent" | "identity" | "session" | undefined;
+    maxRecallMemories?: number | undefined;
+    minRecallScore?: number | undefined;
+    timeout?: number | undefined;
+    maxRetries?: number | undefined;
+    debug?: boolean | undefined;
+    baseUrl?: string | undefined;
+}>, {
+    apiUrl: string;
+    secretCommandTimeout: number;
+    autoRecall: boolean;
+    autoCapture: boolean;
+    userScoping: "agent" | "identity" | "session";
+    maxRecallMemories: number;
+    minRecallScore: number;
+    timeout: number;
+    maxRetries: number;
+    debug: boolean;
+    apiKey?: string | undefined;
+    apiKeyFile?: string | undefined;
+    apiKeyCommand?: string | undefined;
+    twilioAccountSid?: string | undefined;
+    twilioAccountSidFile?: string | undefined;
+    twilioAccountSidCommand?: string | undefined;
+    twilioAuthToken?: string | undefined;
+    twilioAuthTokenFile?: string | undefined;
+    twilioAuthTokenCommand?: string | undefined;
+    twilioPhoneNumber?: string | undefined;
+    twilioPhoneNumberFile?: string | undefined;
+    twilioPhoneNumberCommand?: string | undefined;
+    postmarkToken?: string | undefined;
+    postmarkTokenFile?: string | undefined;
+    postmarkTokenCommand?: string | undefined;
+    postmarkFromEmail?: string | undefined;
+    postmarkFromEmailFile?: string | undefined;
+    postmarkFromEmailCommand?: string | undefined;
+    baseUrl?: string | undefined;
+}, {
+    apiUrl: string;
+    apiKey?: string | undefined;
+    apiKeyFile?: string | undefined;
+    apiKeyCommand?: string | undefined;
+    twilioAccountSid?: string | undefined;
+    twilioAccountSidFile?: string | undefined;
+    twilioAccountSidCommand?: string | undefined;
+    twilioAuthToken?: string | undefined;
+    twilioAuthTokenFile?: string | undefined;
+    twilioAuthTokenCommand?: string | undefined;
+    twilioPhoneNumber?: string | undefined;
+    twilioPhoneNumberFile?: string | undefined;
+    twilioPhoneNumberCommand?: string | undefined;
+    postmarkToken?: string | undefined;
+    postmarkTokenFile?: string | undefined;
+    postmarkTokenCommand?: string | undefined;
+    postmarkFromEmail?: string | undefined;
+    postmarkFromEmailFile?: string | undefined;
+    postmarkFromEmailCommand?: string | undefined;
+    secretCommandTimeout?: number | undefined;
+    autoRecall?: boolean | undefined;
+    autoCapture?: boolean | undefined;
+    userScoping?: "agent" | "identity" | "session" | undefined;
+    maxRecallMemories?: number | undefined;
+    minRecallScore?: number | undefined;
+    timeout?: number | undefined;
+    maxRetries?: number | undefined;
+    debug?: boolean | undefined;
+    baseUrl?: string | undefined;
+}>;
+export type RawPluginConfig = z.infer<typeof RawPluginConfigSchema>;
+/**
+ * Resolved plugin configuration (after secret resolution).
+ * Contains the actual secret values ready for use.
+ */
+export declare const PluginConfigSchema: z.ZodObject<{
+    /** Backend API URL */
+    apiUrl: z.ZodString;
+    /** Resolved API authentication key */
+    apiKey: z.ZodString;
+    /** Resolved Twilio Account SID */
+    twilioAccountSid: z.ZodOptional<z.ZodString>;
+    /** Resolved Twilio Auth Token */
+    twilioAuthToken: z.ZodOptional<z.ZodString>;
+    /** Resolved Twilio Phone Number */
+    twilioPhoneNumber: z.ZodOptional<z.ZodString>;
+    /** Resolved Postmark Token */
+    postmarkToken: z.ZodOptional<z.ZodString>;
+    /** Resolved Postmark From Email */
+    postmarkFromEmail: z.ZodOptional<z.ZodString>;
+    /** Secret command timeout */
+    secretCommandTimeout: z.ZodDefault<z.ZodNumber>;
+    /** Auto-recall memories */
+    autoRecall: z.ZodDefault<z.ZodBoolean>;
+    /** Auto-capture memories */
+    autoCapture: z.ZodDefault<z.ZodBoolean>;
+    /** User scoping strategy */
+    userScoping: z.ZodDefault<z.ZodEnum<["agent", "identity", "session"]>>;
+    /** Maximum memories to inject */
+    maxRecallMemories: z.ZodDefault<z.ZodNumber>;
+    /** Minimum relevance score */
+    minRecallScore: z.ZodDefault<z.ZodNumber>;
+    /** Request timeout in ms */
+    timeout: z.ZodDefault<z.ZodNumber>;
+    /** Maximum retries */
+    maxRetries: z.ZodDefault<z.ZodNumber>;
+    /** Enable debug logging */
+    debug: z.ZodDefault<z.ZodBoolean>;
+    /** Base URL for web app */
+    baseUrl: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    apiUrl: string;
+    apiKey: string;
+    secretCommandTimeout: number;
+    autoRecall: boolean;
+    autoCapture: boolean;
+    userScoping: "agent" | "identity" | "session";
+    maxRecallMemories: number;
+    minRecallScore: number;
+    timeout: number;
+    maxRetries: number;
+    debug: boolean;
+    twilioAccountSid?: string | undefined;
+    twilioAuthToken?: string | undefined;
+    twilioPhoneNumber?: string | undefined;
+    postmarkToken?: string | undefined;
+    postmarkFromEmail?: string | undefined;
+    baseUrl?: string | undefined;
+}, {
+    apiUrl: string;
+    apiKey: string;
+    twilioAccountSid?: string | undefined;
+    twilioAuthToken?: string | undefined;
+    twilioPhoneNumber?: string | undefined;
+    postmarkToken?: string | undefined;
+    postmarkFromEmail?: string | undefined;
+    secretCommandTimeout?: number | undefined;
+    autoRecall?: boolean | undefined;
+    autoCapture?: boolean | undefined;
+    userScoping?: "agent" | "identity" | "session" | undefined;
+    maxRecallMemories?: number | undefined;
+    minRecallScore?: number | undefined;
+    timeout?: number | undefined;
+    maxRetries?: number | undefined;
+    debug?: boolean | undefined;
+    baseUrl?: string | undefined;
+}>;
+export type PluginConfig = z.infer<typeof PluginConfigSchema>;
+/**
+ * Validates raw plugin configuration (before secret resolution).
+ * Use this for initial config validation before resolving secrets.
+ * Throws a ZodError if validation fails.
+ */
+export declare function validateRawConfig(config: unknown): RawPluginConfig;
+/**
+ * Safely validates raw configuration without throwing.
+ * Returns a result object with either the validated config or errors.
+ */
+export declare function safeValidateRawConfig(config: unknown): {
+    success: true;
+    data: RawPluginConfig;
+} | {
+    success: false;
+    errors: z.ZodIssue[];
+};
+/**
+ * Validates resolved plugin configuration (after secret resolution).
+ * Throws a ZodError if validation fails.
+ */
+export declare function validateConfig(config: unknown): PluginConfig;
+/**
+ * Safely validates resolved configuration without throwing.
+ * Returns a result object with either the validated config or errors.
+ *
+ * Note: This validates raw config for backwards compatibility.
+ * Use safeValidateRawConfig for explicit raw config validation.
+ */
+export declare function safeValidateConfig(config: unknown): {
+    success: true;
+    data: RawPluginConfig;
+} | {
+    success: false;
+    errors: z.ZodIssue[];
+};
+/**
+ * Create a safe-to-log version of config with secrets redacted.
+ */
+export declare function redactConfig(config: PluginConfig): PluginConfig;
+/**
+ * Resolves all secrets in a raw config to produce a resolved config.
+ *
+ * @param rawConfig - The raw plugin configuration with secret references
+ * @returns The resolved plugin configuration with actual secret values
+ * @throws If required secrets cannot be resolved
+ */
+export declare function resolveConfigSecrets(rawConfig: RawPluginConfig): Promise<PluginConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,mDAAmD;AACnD,eAAO,MAAM,iBAAiB,6CAA2C,CAAA;AACzE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAS3D;;;GAGG;AACH,eAAO,MAAM,qBAAqB;IAE9B,oDAAoD;;IAUpD,4CAA4C;;IAE5C,sCAAsC;;IAEtC,wCAAwC;;IAIxC,wCAAwC;;IAExC,iDAAiD;;IAEjD,wCAAwC;;IAIxC,uCAAuC;;IAEvC,gDAAgD;;IAEhD,uCAAuC;;IAIvC,yCAAyC;;IAEzC,kDAAkD;;IAElD,yCAAyC;;IAIzC,wCAAwC;;IAExC,6CAA6C;;IAE7C,oCAAoC;;IAIpC,iDAAiD;;IAEjD,kDAAkD;;IAElD,yCAAyC;;IAGzC,2DAA2D;;IAS3D,mEAAmE;;IAGnE,8DAA8D;;IAG9D,iCAAiC;;IAGjC,gDAAgD;;IAShD,oDAAoD;;IAQpD,sCAAsC;;IAStC,0CAA0C;;IAS1C,gDAAgD;;IAGhD,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASrE,CAAA;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC7B,sBAAsB;;IAGtB,sCAAsC;;IAGtC,kCAAkC;;IAGlC,iCAAiC;;IAGjC,mCAAmC;;IAGnC,8BAA8B;;IAG9B,mCAAmC;;IAGnC,6BAA6B;;IAG7B,2BAA2B;;IAG3B,4BAA4B;;IAG5B,4BAA4B;;IAG5B,iCAAiC;;IAGjC,8BAA8B;;IAG9B,4BAA4B;;IAG5B,sBAAsB;;IAGtB,2BAA2B;;IAG3B,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE3B,CAAA;AAEF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAE7D;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,CAElE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,OAAO,GACd;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;CAAE,CAMrF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,YAAY,CAE5D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,OAAO,GACd;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;CAAE,CAErF;AAWD;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAS/D;AAsBD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CA6C5F"}

package/dist/config.js

@@ -0,0 +1,287 @@
+/**
+ * Plugin configuration schema using Zod.
+ * Validates configuration at runtime to ensure type safety.
+ *
+ * Supports flexible secret handling with three patterns:
+ * 1. Direct value (e.g., apiKey: "sk-xxx")
+ * 2. File reference (e.g., apiKeyFile: "~/.secrets/api_key")
+ * 3. Command reference (e.g., apiKeyCommand: "op read op://...")
+ */
+import { z } from 'zod';
+import { resolveSecret } from './secrets.js';
+/** User scoping strategies for memory isolation */
+export const UserScopingSchema = z.enum(['agent', 'identity', 'session']);
+/**
+ * Checks if running in production mode.
+ */
+function isProduction() {
+    return process.env.NODE_ENV === 'production';
+}
+/**
+ * Raw plugin configuration schema (before secret resolution).
+ * Accepts direct values, file references, or command references for secrets.
+ */
+export const RawPluginConfigSchema = z
+    .object({
+    /** Backend API URL (must be HTTPS in production) */
+    apiUrl: z
+        .string()
+        .url('apiUrl must be a valid URL')
+        .refine((url) => url.startsWith('https://') || !isProduction(), {
+        message: 'apiUrl must use HTTPS in production',
+    })
+        .describe('Backend API URL'),
+    // API Key - supports three patterns
+    /** API authentication key (direct value) */
+    apiKey: z.string().min(1).optional().describe('API key (direct value)'),
+    /** Path to file containing API key */
+    apiKeyFile: z.string().optional().describe('Path to API key file'),
+    /** Command to execute to get API key */
+    apiKeyCommand: z.string().optional().describe('Command to get API key'),
+    // Twilio Account SID
+    /** Twilio Account SID (direct value) */
+    twilioAccountSid: z.string().optional().describe('Twilio Account SID'),
+    /** Path to file containing Twilio Account SID */
+    twilioAccountSidFile: z.string().optional().describe('Path to Twilio Account SID file'),
+    /** Command to get Twilio Account SID */
+    twilioAccountSidCommand: z.string().optional().describe('Command to get Twilio Account SID'),
+    // Twilio Auth Token
+    /** Twilio Auth Token (direct value) */
+    twilioAuthToken: z.string().optional().describe('Twilio Auth Token'),
+    /** Path to file containing Twilio Auth Token */
+    twilioAuthTokenFile: z.string().optional().describe('Path to Twilio Auth Token file'),
+    /** Command to get Twilio Auth Token */
+    twilioAuthTokenCommand: z.string().optional().describe('Command to get Twilio Auth Token'),
+    // Twilio Phone Number
+    /** Twilio Phone Number (direct value) */
+    twilioPhoneNumber: z.string().optional().describe('Twilio Phone Number'),
+    /** Path to file containing Twilio Phone Number */
+    twilioPhoneNumberFile: z.string().optional().describe('Path to Twilio Phone Number file'),
+    /** Command to get Twilio Phone Number */
+    twilioPhoneNumberCommand: z.string().optional().describe('Command to get Twilio Phone Number'),
+    // Postmark Token
+    /** Postmark API Token (direct value) */
+    postmarkToken: z.string().optional().describe('Postmark Token'),
+    /** Path to file containing Postmark Token */
+    postmarkTokenFile: z.string().optional().describe('Path to Postmark Token file'),
+    /** Command to get Postmark Token */
+    postmarkTokenCommand: z.string().optional().describe('Command to get Postmark Token'),
+    // Postmark From Email
+    /** Postmark From Email address (direct value) */
+    postmarkFromEmail: z.string().email().optional().describe('Postmark From Email'),
+    /** Path to file containing Postmark From Email */
+    postmarkFromEmailFile: z.string().optional().describe('Path to Postmark From Email file'),
+    /** Command to get Postmark From Email */
+    postmarkFromEmailCommand: z.string().optional().describe('Command to get Postmark From Email'),
+    /** Timeout for secret command execution in milliseconds */
+    secretCommandTimeout: z
+        .number()
+        .int()
+        .min(1000, 'secretCommandTimeout must be at least 1000ms')
+        .max(30000, 'secretCommandTimeout must be at most 30000ms')
+        .default(5000)
+        .describe('Secret command timeout in ms'),
+    /** Automatically recall relevant memories on conversation start */
+    autoRecall: z.boolean().default(true).describe('Auto-recall memories'),
+    /** Automatically capture important information as memories */
+    autoCapture: z.boolean().default(true).describe('Auto-capture memories'),
+    /** How to scope user memories */
+    userScoping: UserScopingSchema.default('agent').describe('User scoping strategy'),
+    /** Maximum memories to inject in auto-recall */
+    maxRecallMemories: z
+        .number()
+        .int()
+        .min(1, 'maxRecallMemories must be at least 1')
+        .max(20, 'maxRecallMemories must be at most 20')
+        .default(5)
+        .describe('Maximum memories to inject'),
+    /** Minimum relevance score for auto-recall (0-1) */
+    minRecallScore: z
+        .number()
+        .min(0, 'minRecallScore must be at least 0')
+        .max(1, 'minRecallScore must be at most 1')
+        .default(0.7)
+        .describe('Minimum relevance score'),
+    /** Request timeout in milliseconds */
+    timeout: z
+        .number()
+        .int()
+        .min(1000, 'timeout must be at least 1000ms')
+        .max(60000, 'timeout must be at most 60000ms')
+        .default(30000)
+        .describe('Request timeout in ms'),
+    /** Maximum retries for failed requests */
+    maxRetries: z
+        .number()
+        .int()
+        .min(0, 'maxRetries must be at least 0')
+        .max(5, 'maxRetries must be at most 5')
+        .default(3)
+        .describe('Maximum retries'),
+    /** Enable debug logging (never logs secrets) */
+    debug: z.boolean().default(false).describe('Enable debug logging'),
+    /** Base URL for web app (used for generating note/notebook URLs) */
+    baseUrl: z.string().url().optional().describe('Web app base URL'),
+})
+    .refine((data) => data.apiKey || data.apiKeyFile || data.apiKeyCommand, {
+    message: 'At least one of apiKey, apiKeyFile, or apiKeyCommand is required',
+    path: ['apiKey'],
+});
+/**
+ * Resolved plugin configuration (after secret resolution).
+ * Contains the actual secret values ready for use.
+ */
+export const PluginConfigSchema = z.object({
+    /** Backend API URL */
+    apiUrl: z.string().url(),
+    /** Resolved API authentication key */
+    apiKey: z.string().min(1),
+    /** Resolved Twilio Account SID */
+    twilioAccountSid: z.string().optional(),
+    /** Resolved Twilio Auth Token */
+    twilioAuthToken: z.string().optional(),
+    /** Resolved Twilio Phone Number */
+    twilioPhoneNumber: z.string().optional(),
+    /** Resolved Postmark Token */
+    postmarkToken: z.string().optional(),
+    /** Resolved Postmark From Email */
+    postmarkFromEmail: z.string().email().optional(),
+    /** Secret command timeout */
+    secretCommandTimeout: z.number().int().default(5000),
+    /** Auto-recall memories */
+    autoRecall: z.boolean().default(true),
+    /** Auto-capture memories */
+    autoCapture: z.boolean().default(true),
+    /** User scoping strategy */
+    userScoping: UserScopingSchema.default('agent'),
+    /** Maximum memories to inject */
+    maxRecallMemories: z.number().int().default(5),
+    /** Minimum relevance score */
+    minRecallScore: z.number().default(0.7),
+    /** Request timeout in ms */
+    timeout: z.number().int().default(30000),
+    /** Maximum retries */
+    maxRetries: z.number().int().default(3),
+    /** Enable debug logging */
+    debug: z.boolean().default(false),
+    /** Base URL for web app */
+    baseUrl: z.string().url().optional(),
+});
+/**
+ * Validates raw plugin configuration (before secret resolution).
+ * Use this for initial config validation before resolving secrets.
+ * Throws a ZodError if validation fails.
+ */
+export function validateRawConfig(config) {
+    return RawPluginConfigSchema.parse(config);
+}
+/**
+ * Safely validates raw configuration without throwing.
+ * Returns a result object with either the validated config or errors.
+ */
+export function safeValidateRawConfig(config) {
+    const result = RawPluginConfigSchema.safeParse(config);
+    if (result.success) {
+        return { success: true, data: result.data };
+    }
+    return { success: false, errors: result.error.issues };
+}
+/**
+ * Validates resolved plugin configuration (after secret resolution).
+ * Throws a ZodError if validation fails.
+ */
+export function validateConfig(config) {
+    return PluginConfigSchema.parse(config);
+}
+/**
+ * Safely validates resolved configuration without throwing.
+ * Returns a result object with either the validated config or errors.
+ *
+ * Note: This validates raw config for backwards compatibility.
+ * Use safeValidateRawConfig for explicit raw config validation.
+ */
+export function safeValidateConfig(config) {
+    return safeValidateRawConfig(config);
+}
+/** Secret fields that should be redacted in logs */
+const SECRET_FIELDS = [
+    'apiKey',
+    'twilioAccountSid',
+    'twilioAuthToken',
+    'twilioPhoneNumber',
+    'postmarkToken',
+];
+/**
+ * Create a safe-to-log version of config with secrets redacted.
+ */
+export function redactConfig(config) {
+    const redacted = { ...config };
+    for (const field of SECRET_FIELDS) {
+        if (redacted[field]) {
+            // Type assertion needed because we're setting string fields to '[REDACTED]'
+            ;
+            redacted[field] = '[REDACTED]';
+        }
+    }
+    return redacted;
+}
+/**
+ * Builds a SecretConfig from the raw config for a given secret name.
+ */
+function buildSecretConfig(rawConfig, secretName, timeout) {
+    const direct = rawConfig[secretName];
+    const file = rawConfig[`${secretName}File`];
+    const command = rawConfig[`${secretName}Command`];
+    return {
+        direct,
+        file,
+        command,
+        commandTimeout: timeout,
+    };
+}
+/**
+ * Resolves all secrets in a raw config to produce a resolved config.
+ *
+ * @param rawConfig - The raw plugin configuration with secret references
+ * @returns The resolved plugin configuration with actual secret values
+ * @throws If required secrets cannot be resolved
+ */
+export async function resolveConfigSecrets(rawConfig) {
+    const timeout = rawConfig.secretCommandTimeout;
+    // Resolve API key (required)
+    const apiKey = await resolveSecret(buildSecretConfig(rawConfig, 'apiKey', timeout), 'apiKey');
+    if (!apiKey) {
+        throw new Error('Failed to resolve API key from config');
+    }
+    // Resolve optional secrets in parallel
+    const [twilioAccountSid, twilioAuthToken, twilioPhoneNumber, postmarkToken, postmarkFromEmail] = await Promise.all([
+        resolveSecret(buildSecretConfig(rawConfig, 'twilioAccountSid', timeout), 'twilioAccountSid'),
+        resolveSecret(buildSecretConfig(rawConfig, 'twilioAuthToken', timeout), 'twilioAuthToken'),
+        resolveSecret(buildSecretConfig(rawConfig, 'twilioPhoneNumber', timeout), 'twilioPhoneNumber'),
+        resolveSecret(buildSecretConfig(rawConfig, 'postmarkToken', timeout), 'postmarkToken'),
+        resolveSecret(buildSecretConfig(rawConfig, 'postmarkFromEmail', timeout), 'postmarkFromEmail'),
+    ]);
+    // Build the resolved config
+    const resolvedConfig = {
+        apiUrl: rawConfig.apiUrl,
+        apiKey,
+        twilioAccountSid,
+        twilioAuthToken,
+        twilioPhoneNumber,
+        postmarkToken,
+        postmarkFromEmail,
+        secretCommandTimeout: timeout,
+        autoRecall: rawConfig.autoRecall,
+        autoCapture: rawConfig.autoCapture,
+        userScoping: rawConfig.userScoping,
+        maxRecallMemories: rawConfig.maxRecallMemories,
+        minRecallScore: rawConfig.minRecallScore,
+        timeout: rawConfig.timeout,
+        maxRetries: rawConfig.maxRetries,
+        debug: rawConfig.debug,
+        baseUrl: rawConfig.baseUrl,
+    };
+    // Validate the resolved config
+    return validateConfig(resolvedConfig);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,aAAa,EAAqB,MAAM,cAAc,CAAA;AAE/D,mDAAmD;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;AAGzE;;GAEG;AACH,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAA;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,oDAAoD;IACpD,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,4BAA4B,CAAC;SACjC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE;QAC9D,OAAO,EAAE,qCAAqC;KAC/C,CAAC;SACD,QAAQ,CAAC,iBAAiB,CAAC;IAE9B,oCAAoC;IACpC,4CAA4C;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACvE,sCAAsC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAClE,wCAAwC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAEvE,qBAAqB;IACrB,wCAAwC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACtE,iDAAiD;IACjD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACvF,wCAAwC;IACxC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAE5F,oBAAoB;IACpB,uCAAuC;IACvC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACpE,gDAAgD;IAChD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACrF,uCAAuC;IACvC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAE1F,sBAAsB;IACtB,yCAAyC;IACzC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACxE,kDAAkD;IAClD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACzF,yCAAyC;IACzC,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAE9F,iBAAiB;IACjB,wCAAwC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAC/D,6CAA6C;IAC7C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAChF,oCAAoC;IACpC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAErF,sBAAsB;IACtB,iDAAiD;IACjD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAChF,kDAAkD;IAClD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACzF,yCAAyC;IACzC,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAE9F,2DAA2D;IAC3D,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,IAAI,EAAE,8CAA8C,CAAC;SACzD,GAAG,CAAC,KAAK,EAAE,8CAA8C,CAAC;SAC1D,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8BAA8B,CAAC;IAE3C,mEAAmE;IACnE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAEtE,8DAA8D;IAC9D,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAExE,iCAAiC;IACjC,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IAEjF,gDAAgD;IAChD,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;SAC9C,GAAG,CAAC,EAAE,EAAE,sCAAsC,CAAC;SAC/C,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,4BAA4B,CAAC;IAEzC,oDAAoD;IACpD,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,mCAAmC,CAAC;SAC3C,GAAG,CAAC,CAAC,EAAE,kCAAkC,CAAC;SAC1C,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CAAC,yBAAyB,CAAC;IAEtC,sCAAsC;IACtC,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,IAAI,EAAE,iCAAiC,CAAC;SAC5C,GAAG,CAAC,KAAK,EAAE,iCAAiC,CAAC;SAC7C,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,uBAAuB,CAAC;IAEpC,0CAA0C;IAC1C,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;SACvC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;SACtC,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,iBAAiB,CAAC;IAE9B,gDAAgD;IAChD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAElE,oEAAoE;IACpE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CAClE,CAAC;KACD,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,EAC9D;IACE,OAAO,EAAE,kEAAkE;IAC3E,IAAI,EAAE,CAAC,QAAQ,CAAC;CACjB,CACF,CAAA;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,sBAAsB;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAExB,sCAAsC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEzB,kCAAkC;IAClC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEvC,iCAAiC;IACjC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC,mCAAmC;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAExC,8BAA8B;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEpC,mCAAmC;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAEhD,6BAA6B;IAC7B,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAEpD,2BAA2B;IAC3B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAErC,4BAA4B;IAC5B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAEtC,4BAA4B;IAC5B,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC;IAE/C,iCAAiC;IACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAE9C,8BAA8B;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAEvC,4BAA4B;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAExC,sBAAsB;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEvC,2BAA2B;IAC3B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAEjC,2BAA2B;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAIF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,OAAO,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAe;IAEf,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACtD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAA;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,OAAO,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAe;IAEf,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAA;AACtC,CAAC;AAED,oDAAoD;AACpD,MAAM,aAAa,GAAG;IACpB,QAAQ;IACR,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;CACP,CAAA;AAEV;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,4EAA4E;YAC5E,CAAC;YAAC,QAA8C,CAAC,KAAK,CAAC,GAAG,YAAY,CAAA;QACxE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACxB,SAA0B,EAC1B,UAAiC,EACjC,OAAe;IAEf,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAuB,CAAA;IAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,UAAU,MAA+B,CAAuB,CAAA;IAC1F,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,UAAU,SAAkC,CAAuB,CAAA;IAEhG,OAAO;QACL,MAAM;QACN,IAAI;QACJ,OAAO;QACP,cAAc,EAAE,OAAO;KACxB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAA0B;IACnE,MAAM,OAAO,GAAG,SAAS,CAAC,oBAAoB,CAAA;IAE9C,6BAA6B;IAC7B,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,EAC/C,QAAQ,CACT,CAAA;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1D,CAAC;IAED,uCAAuC;IACvC,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,CAAC,GAC5F,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,kBAAkB,CAAC;QAC5F,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC;QAC1F,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,mBAAmB,CAAC;QAC9F,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,eAAe,CAAC;QACtF,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,mBAAmB,CAAC;KAC/F,CAAC,CAAA;IAEJ,4BAA4B;IAC5B,MAAM,cAAc,GAAiB;QACnC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,MAAM;QACN,gBAAgB;QAChB,eAAe;QACf,iBAAiB;QACjB,aAAa;QACb,iBAAiB;QACjB,oBAAoB,EAAE,OAAO;QAC7B,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAA;IAED,+BAA+B;IAC/B,OAAO,cAAc,CAAC,cAAc,CAAC,CAAA;AACvC,CAAC"}