@vectorlingo/cli 0.1.0

package/dist/oauth.js

@@ -0,0 +1,369 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { createServer } from 'node:http';
+import { platform } from 'node:os';
+import { spawn } from 'node:child_process';
+import { AgentError } from './contracts.js';
+import { validateLoopbackRedirect, validateServiceUrl } from './http.js';
+export class OAuthClient {
+    issuer;
+    resource;
+    configuredClientId;
+    scopes;
+    fetch;
+    browser;
+    callbackTimeoutMs;
+    constructor(options) {
+        this.issuer = validateServiceUrl(options.issuer, 'OAuth issuer');
+        this.resource = validateServiceUrl(options.resource, 'OAuth resource');
+        this.configuredClientId = options.clientId;
+        this.scopes = [...new Set(options.scopes)].sort();
+        this.fetch = options.fetch ?? globalThis.fetch;
+        this.browser = options.openBrowser ?? openSystemBrowser;
+        this.callbackTimeoutMs = options.callbackTimeoutMs ?? 180_000;
+        if (this.scopes.length === 0 || this.scopes.some((scope) => !scope || /\s/.test(scope))) {
+            throw new AgentError('invalid_configuration', 'At least one valid OAuth scope is required');
+        }
+    }
+    async discover() {
+        const metadataUrl = authorizationServerMetadataUrl(this.issuer);
+        const response = await this.fetch(metadataUrl, {
+            headers: { accept: 'application/json' },
+            redirect: 'manual',
+        });
+        if (!response.ok) {
+            throw new AgentError('oauth_discovery_failed', `OAuth discovery failed with HTTP ${response.status}`);
+        }
+        const value = (await response.json());
+        if (typeof value.issuer !== 'string' ||
+            normaliseIssuer(value.issuer) !== normaliseIssuer(this.issuer.href) ||
+            typeof value.authorization_endpoint !== 'string' ||
+            typeof value.token_endpoint !== 'string') {
+            throw new AgentError('oauth_discovery_failed', 'OAuth metadata is incomplete or has the wrong issuer');
+        }
+        const metadata = {
+            issuer: value.issuer,
+            authorization_endpoint: secureEndpoint(value.authorization_endpoint, 'OAuth authorisation endpoint'),
+            token_endpoint: secureEndpoint(value.token_endpoint, 'OAuth token endpoint'),
+            ...(typeof value.registration_endpoint === 'string'
+                ? { registration_endpoint: secureEndpoint(value.registration_endpoint, 'OAuth registration endpoint') }
+                : {}),
+            ...(typeof value.revocation_endpoint === 'string'
+                ? { revocation_endpoint: secureEndpoint(value.revocation_endpoint, 'OAuth revocation endpoint') }
+                : {}),
+            ...(Array.isArray(value.code_challenge_methods_supported)
+                ? { code_challenge_methods_supported: value.code_challenge_methods_supported }
+                : {}),
+        };
+        if (metadata.code_challenge_methods_supported &&
+            !metadata.code_challenge_methods_supported.includes('S256')) {
+            throw new AgentError('oauth_pkce_unsupported', 'OAuth server does not advertise PKCE S256');
+        }
+        return metadata;
+    }
+    async login(baseUrl) {
+        const metadata = await this.discover();
+        const callback = await startLoopbackCallback(this.callbackTimeoutMs);
+        try {
+            const redirectUri = validateLoopbackRedirect(callback.redirectUri).href;
+            const clientId = this.configuredClientId ?? (await this.registerClient(metadata, redirectUri));
+            const state = randomUrlSafe(32);
+            const verifier = randomUrlSafe(64);
+            const challenge = createHash('sha256').update(verifier).digest('base64url');
+            const authorization = new URL(metadata.authorization_endpoint);
+            authorization.search = new URLSearchParams({
+                response_type: 'code',
+                client_id: clientId,
+                redirect_uri: redirectUri,
+                code_challenge: challenge,
+                code_challenge_method: 'S256',
+                state,
+                scope: this.scopes.join(' '),
+                resource: this.resource.href,
+            }).toString();
+            await this.browser(authorization);
+            const code = await callback.waitForCode(state);
+            const tokens = await this.exchangeCode(metadata, clientId, redirectUri, code, verifier);
+            return {
+                baseUrl: validateServiceUrl(baseUrl, 'VectorLingo base URL').href,
+                issuer: this.issuer.href,
+                resource: this.resource.href,
+                clientId,
+                tokens,
+            };
+        }
+        finally {
+            await callback.close();
+        }
+    }
+    async refresh(profile) {
+        const refreshToken = profile.tokens.refreshToken;
+        if (!refreshToken) {
+            throw new AgentError('reauthentication_required', 'The OAuth session cannot be refreshed');
+        }
+        const metadata = await this.discover();
+        const body = new URLSearchParams({
+            grant_type: 'refresh_token',
+            refresh_token: refreshToken,
+            client_id: profile.clientId,
+            resource: profile.resource,
+        });
+        const response = await this.fetch(metadata.token_endpoint, {
+            method: 'POST',
+            headers: {
+                accept: 'application/json',
+                'content-type': 'application/x-www-form-urlencoded',
+            },
+            body,
+            redirect: 'manual',
+        });
+        return parseTokenResponse(response, refreshToken);
+    }
+    /**
+     * Revoke the refresh token only. The access token is a short-lived JWT: the broker answers
+     * `unsupported_token_type` for it, which made logout fail until the token expired.
+     */
+    async revoke(profile) {
+        const refreshToken = profile.tokens.refreshToken;
+        if (!refreshToken)
+            return;
+        const metadata = await this.discover();
+        if (!metadata.revocation_endpoint) {
+            throw new AgentError('oauth_revocation_unsupported', 'OAuth server does not advertise revocation');
+        }
+        const response = await this.fetch(metadata.revocation_endpoint, {
+            method: 'POST',
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                token: refreshToken,
+                token_type_hint: 'refresh_token',
+                client_id: profile.clientId,
+            }),
+            redirect: 'manual',
+        });
+        if (!response.ok) {
+            throw new AgentError('oauth_revocation_failed', `OAuth revocation failed with HTTP ${response.status}; local credentials were kept. ` +
+                'Retry, or run vectorlingo logout --local to remove them without revoking.');
+        }
+    }
+    async registerClient(metadata, redirectUri) {
+        if (!metadata.registration_endpoint) {
+            throw new AgentError('oauth_client_required', 'OAuth client ID is required because dynamic registration is unavailable');
+        }
+        const response = await this.fetch(metadata.registration_endpoint, {
+            method: 'POST',
+            headers: { accept: 'application/json', 'content-type': 'application/json' },
+            // RFC 7591 + RFC 8707. `native` is required: Better Auth defaults DCR clients to `web`,
+            // which rejects http loopback redirects. `resources` must match a server resource
+            // exactly; without it the client is linked only to the server's default (MCP) resource.
+            body: JSON.stringify({
+                client_name: 'VectorLingo CLI',
+                application_type: 'native',
+                redirect_uris: [redirectUri],
+                grant_types: ['authorization_code', 'refresh_token'],
+                response_types: ['code'],
+                token_endpoint_auth_method: 'none',
+                scope: this.scopes.join(' '),
+                resources: [this.resource.href],
+            }),
+            redirect: 'manual',
+        });
+        if (!response.ok) {
+            const error = (await response.json().catch(() => ({})));
+            const code = typeof error.error === 'string' ? error.error : undefined;
+            throw new AgentError('oauth_registration_failed', `OAuth registration failed with HTTP ${response.status}${code ? ` (${code})` : ''}`, {
+                httpStatus: response.status,
+                details: {
+                    ...(code ? { error: code } : {}),
+                    ...(typeof error.error_description === 'string' ? { error_description: error.error_description } : {}),
+                },
+            });
+        }
+        const value = (await response.json());
+        if (typeof value.client_id !== 'string' || typeof value.client_secret === 'string') {
+            throw new AgentError('oauth_registration_failed', 'OAuth registration did not return a public client');
+        }
+        return value.client_id;
+    }
+    async exchangeCode(metadata, clientId, redirectUri, code, verifier) {
+        const response = await this.fetch(metadata.token_endpoint, {
+            method: 'POST',
+            headers: {
+                accept: 'application/json',
+                'content-type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams({
+                grant_type: 'authorization_code',
+                code,
+                redirect_uri: redirectUri,
+                code_verifier: verifier,
+                client_id: clientId,
+                resource: this.resource.href,
+            }),
+            redirect: 'manual',
+        });
+        return parseTokenResponse(response);
+    }
+}
+export function createStoredTokenProvider(store, oauth) {
+    return async (options) => {
+        const snapshot = await store.load();
+        if (!snapshot)
+            throw new AgentError('authentication_required', 'Run vectorlingo login first');
+        const observedToken = snapshot.tokens.accessToken;
+        const mustRefresh = options?.forceRefresh === true || snapshot.tokens.expiresAt <= Date.now() + 30_000;
+        if (!mustRefresh)
+            return observedToken;
+        let accessToken;
+        await store.update(async (current) => {
+            if (!current)
+                throw new AgentError('authentication_required', 'Run vectorlingo login first');
+            if (current.tokens.accessToken !== observedToken &&
+                current.tokens.expiresAt > Date.now() + 30_000) {
+                accessToken = current.tokens.accessToken;
+                return current;
+            }
+            const tokens = await oauth.refresh(current);
+            accessToken = tokens.accessToken;
+            return { ...current, tokens };
+        });
+        if (!accessToken)
+            throw new AgentError('reauthentication_required', 'OAuth refresh failed');
+        return accessToken;
+    };
+}
+async function parseTokenResponse(response, previousRefreshToken) {
+    const value = (await response.json().catch(() => ({})));
+    if (!response.ok) {
+        throw new AgentError(response.status === 400 || response.status === 401
+            ? 'reauthentication_required'
+            : 'oauth_token_failed', `OAuth token request failed with HTTP ${response.status}` +
+            (typeof value.error === 'string' ? ` (${value.error})` : ''));
+    }
+    if (typeof value.access_token !== 'string' ||
+        typeof value.token_type !== 'string' ||
+        value.token_type.toLowerCase() !== 'bearer' ||
+        (value.expires_in !== undefined && typeof value.expires_in !== 'number') ||
+        (value.refresh_token !== undefined && typeof value.refresh_token !== 'string')) {
+        throw new AgentError('oauth_token_failed', 'OAuth server returned an invalid token response');
+    }
+    const expiresIn = value.expires_in ?? 300;
+    if (!Number.isFinite(expiresIn) || expiresIn <= 0) {
+        throw new AgentError('oauth_token_failed', 'OAuth server returned an invalid token lifetime');
+    }
+    return {
+        accessToken: value.access_token,
+        tokenType: 'Bearer',
+        expiresAt: Date.now() + expiresIn * 1_000,
+        ...(typeof value.refresh_token === 'string'
+            ? { refreshToken: value.refresh_token }
+            : previousRefreshToken
+                ? { refreshToken: previousRefreshToken }
+                : {}),
+        ...(typeof value.scope === 'string' ? { scope: value.scope } : {}),
+    };
+}
+async function startLoopbackCallback(timeoutMs) {
+    let resolver;
+    const result = new Promise((resolve) => {
+        resolver = resolve;
+    });
+    let settled = false;
+    const server = createServer((request, response) => {
+        const url = new URL(request.url ?? '/', 'http://127.0.0.1');
+        if (request.method !== 'GET' || url.pathname !== '/oauth/callback' || settled) {
+            response.writeHead(404, { 'content-type': 'text/plain; charset=utf-8' }).end('Not found');
+            return;
+        }
+        settled = true;
+        const code = url.searchParams.get('code');
+        const state = url.searchParams.get('state');
+        const error = url.searchParams.get('error');
+        resolver?.({
+            ...(code === null ? {} : { code }),
+            ...(state === null ? {} : { state }),
+            ...(error === null ? {} : { error }),
+        });
+        response
+            .writeHead(200, {
+            'content-type': 'text/plain; charset=utf-8',
+            'cache-control': 'no-store',
+            'x-content-type-options': 'nosniff',
+        })
+            .end('VectorLingo sign-in complete. You may close this window.');
+    });
+    await listenLoopback(server);
+    const address = server.address();
+    if (!address || typeof address === 'string') {
+        await closeServer(server);
+        throw new AgentError('oauth_callback_failed', 'Could not start the OAuth callback server');
+    }
+    const redirectUri = `http://127.0.0.1:${address.port}/oauth/callback`;
+    return {
+        redirectUri,
+        async waitForCode(expectedState) {
+            let timeout;
+            const callback = await Promise.race([
+                result,
+                new Promise((_, reject) => {
+                    timeout = setTimeout(() => reject(new AgentError('oauth_callback_timeout', 'OAuth sign-in timed out')), timeoutMs);
+                    timeout.unref();
+                }),
+            ]).finally(() => {
+                if (timeout)
+                    clearTimeout(timeout);
+            });
+            if (callback.state !== expectedState) {
+                throw new AgentError('oauth_state_mismatch', 'OAuth callback state did not match');
+            }
+            if (callback.error)
+                throw new AgentError('oauth_authorisation_denied', 'OAuth authorisation was denied');
+            if (!callback.code)
+                throw new AgentError('oauth_callback_failed', 'OAuth callback did not include a code');
+            return callback.code;
+        },
+        close: () => closeServer(server),
+    };
+}
+function listenLoopback(server) {
+    return new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            server.off('error', reject);
+            resolve();
+        });
+    });
+}
+function closeServer(server) {
+    return new Promise((resolve, reject) => {
+        server.close((error) => (error ? reject(error) : resolve()));
+        // A real browser keeps keep-alive and preconnected sockets open; close() alone waits for them
+        // (about two minutes with Chrome) before login can finish.
+        server.closeAllConnections();
+    });
+}
+function authorizationServerMetadataUrl(issuer) {
+    const path = issuer.pathname === '/' ? '' : issuer.pathname.replace(/\/$/, '');
+    return new URL(`/.well-known/oauth-authorization-server${path}`, issuer.origin);
+}
+function secureEndpoint(value, label) {
+    return validateServiceUrl(value, label).href;
+}
+function normaliseIssuer(value) {
+    return value.replace(/\/$/, '');
+}
+function randomUrlSafe(bytes) {
+    return randomBytes(bytes).toString('base64url');
+}
+export function openSystemBrowser(url) {
+    const command = platform() === 'darwin' ? 'open' : platform() === 'win32' ? 'cmd' : 'xdg-open';
+    const args = platform() === 'win32' ? ['/c', 'start', '', url.href] : [url.href];
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, { detached: true, stdio: 'ignore' });
+        child.once('error', reject);
+        child.once('spawn', () => {
+            child.unref();
+            resolve();
+        });
+    });
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAM3C,OAAO,EAAkB,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAsBxF,MAAM,OAAO,WAAW;IACb,MAAM,CAAK;IACX,QAAQ,CAAK;IACL,kBAAkB,CAAoB;IACtC,MAAM,CAAU;IAChB,KAAK,CAAW;IAChB,OAAO,CAA6B;IACpC,iBAAiB,CAAQ;IAE1C,YAAY,OAA2B;QACrC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;QAChE,IAAI,CAAC,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;QACtE,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACjD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAA;QACvD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAA;QAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAE,4CAA4C,CAAC,CAAA;QAC7F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,WAAW,GAAG,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAC7C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,oCAAoC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QACvG,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAA;QAC/D,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACnE,OAAO,KAAK,CAAC,sBAAsB,KAAK,QAAQ;YAChD,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EACxC,CAAC;YACD,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,sDAAsD,CAAC,CAAA;QACxG,CAAC;QACD,MAAM,QAAQ,GAAkB;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,sBAAsB,EAAE,cAAc,CAAC,KAAK,CAAC,sBAAsB,EAAE,8BAA8B,CAAC;YACpG,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,sBAAsB,CAAC;YAC5E,GAAG,CAAC,OAAO,KAAK,CAAC,qBAAqB,KAAK,QAAQ;gBACjD,CAAC,CAAC,EAAE,qBAAqB,EAAE,cAAc,CAAC,KAAK,CAAC,qBAAqB,EAAE,6BAA6B,CAAC,EAAE;gBACvG,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,KAAK,CAAC,mBAAmB,KAAK,QAAQ;gBAC/C,CAAC,CAAC,EAAE,mBAAmB,EAAE,cAAc,CAAC,KAAK,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,EAAE;gBACjG,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC;gBACvD,CAAC,CAAC,EAAE,gCAAgC,EAAE,KAAK,CAAC,gCAAgC,EAAE;gBAC9E,CAAC,CAAC,EAAE,CAAC;SACR,CAAA;QACD,IACE,QAAQ,CAAC,gCAAgC;YACzC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC3D,CAAC;YACD,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,2CAA2C,CAAC,CAAA;QAC7F,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAe;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QACtC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACpE,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,wBAAwB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAA;YACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAA;YAC9F,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;YAC/B,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,CAAA;YAClC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC3E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAA;YAC9D,aAAa,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;gBACzC,aAAa,EAAE,MAAM;gBACrB,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,WAAW;gBACzB,cAAc,EAAE,SAAS;gBACzB,qBAAqB,EAAE,MAAM;gBAC7B,KAAK;gBACL,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aAC7B,CAAC,CAAC,QAAQ,EAAE,CAAA;YACb,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;YACjC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;YACvF,OAAO;gBACL,OAAO,EAAE,kBAAkB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,IAAI;gBACjE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAC5B,QAAQ;gBACR,MAAM;aACP,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA0B;QACtC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAA;QAChD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAE,uCAAuC,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QACtC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI;YACJ,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;IACnD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAA0B;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAA;QAChD,IAAI,CAAC,YAAY;YAAE,OAAM;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QACtC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAClC,MAAM,IAAI,UAAU,CAAC,8BAA8B,EAAE,4CAA4C,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,KAAK,EAAE,YAAY;gBACnB,eAAe,EAAE,eAAe;gBAChC,SAAS,EAAE,OAAO,CAAC,QAAQ;aAC5B,CAAC;YACF,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,UAAU,CAClB,yBAAyB,EACzB,qCAAqC,QAAQ,CAAC,MAAM,iCAAiC;gBACnF,2EAA2E,CAC9E,CAAA;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,QAAuB,EAAE,WAAmB;QACvE,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAClB,uBAAuB,EACvB,yEAAyE,CAC1E,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC3E,wFAAwF;YACxF,kFAAkF;YAClF,wFAAwF;YACxF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,iBAAiB;gBAC9B,gBAAgB,EAAE,QAAQ;gBAC1B,aAAa,EAAE,CAAC,WAAW,CAAC;gBAC5B,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;gBACpD,cAAc,EAAE,CAAC,MAAM,CAAC;gBACxB,0BAA0B,EAAE,MAAM;gBAClC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC5B,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;aAChC,CAAC;YACF,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAqD,CAAA;YAC3G,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;YACtE,MAAM,IAAI,UAAU,CAClB,2BAA2B,EAC3B,uCAAuC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EACnF;gBACE,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,OAAO,EAAE;oBACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChC,GAAG,CAAC,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvG;aACF,CACF,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqD,CAAA;QACzF,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YACnF,MAAM,IAAI,UAAU,CAClB,2BAA2B,EAC3B,mDAAmD,CACpD,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAC,SAAS,CAAA;IACxB,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,QAAuB,EACvB,QAAgB,EAChB,WAAmB,EACnB,IAAY,EACZ,QAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACzD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,YAAY,EAAE,WAAW;gBACzB,aAAa,EAAE,QAAQ;gBACvB,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aAC7B,CAAC;YACF,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QACF,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IACrC,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAsB,EAAE,KAAkB;IAClF,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE,6BAA6B,CAAC,CAAA;QAC7F,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAA;QACjD,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAA;QACtG,IAAI,CAAC,WAAW;YAAE,OAAO,aAAa,CAAA;QAEtC,IAAI,WAA+B,CAAA;QACnC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE,6BAA6B,CAAC,CAAA;YAC5F,IACE,OAAO,CAAC,MAAM,CAAC,WAAW,KAAK,aAAa;gBAC5C,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAC9C,CAAC;gBACD,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAA;gBACxC,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC3C,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;YAChC,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAA;QAC/B,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAE,sBAAsB,CAAC,CAAA;QAC3F,OAAO,WAAW,CAAA;IACpB,CAAC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAkB,EAAE,oBAA6B;IACjF,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAOrD,CAAA;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,UAAU,CAClB,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAChD,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,oBAAoB,EACxB,wCAAwC,QAAQ,CAAC,MAAM,EAAE;YACvD,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAC/D,CAAA;IACH,CAAC;IACD,IACE,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ;QAC3C,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC;QACxE,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,EAC9E,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,iDAAiD,CAAC,CAAA;IAC/F,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,iDAAiD,CAAC,CAAA;IAC/F,CAAC;IACD,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,YAAY;QAC/B,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,KAAK;QACzC,GAAG,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;YACzC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,aAAa,EAAE;YACvC,CAAC,CAAC,oBAAoB;gBACpB,CAAC,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAA;AACH,CAAC;AAQD,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IACpD,IAAI,QAA0F,CAAA;IAC9F,MAAM,MAAM,GAAG,IAAI,OAAO,CAAoD,CAAC,OAAO,EAAE,EAAE;QACxF,QAAQ,GAAG,OAAO,CAAA;IACpB,CAAC,CAAC,CAAA;IACF,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,IAAI,OAAO,EAAE,CAAC;YAC9E,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACzF,OAAM;QACR,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;QACd,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC3C,QAAQ,EAAE,CAAC;YACT,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACpC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;SACrC,CAAC,CAAA;QACF,QAAQ;aACL,SAAS,CAAC,GAAG,EAAE;YACd,cAAc,EAAE,2BAA2B;YAC3C,eAAe,EAAE,UAAU;YAC3B,wBAAwB,EAAE,SAAS;SACpC,CAAC;aACD,GAAG,CAAC,0DAA0D,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IACF,MAAM,cAAc,CAAC,MAAM,CAAC,CAAA;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;QACzB,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAE,2CAA2C,CAAC,CAAA;IAC5F,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,OAAO,CAAC,IAAI,iBAAiB,CAAA;IACrE,OAAO;QACL,WAAW;QACX,KAAK,CAAC,WAAW,CAAC,aAAa;YAC7B,IAAI,OAAmC,CAAA;YACvC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAClC,MAAM;gBACN,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,wBAAwB,EAAE,yBAAyB,CAAC,CAAC,EACjF,SAAS,CACV,CAAA;oBACD,OAAO,CAAC,KAAK,EAAE,CAAA;gBACjB,CAAC,CAAC;aACH,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;gBACd,IAAI,OAAO;oBAAE,YAAY,CAAC,OAAO,CAAC,CAAA;YACpC,CAAC,CAAC,CAAA;YACF,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;gBACrC,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK;gBAAE,MAAM,IAAI,UAAU,CAAC,4BAA4B,EAAE,gCAAgC,CAAC,CAAA;YACxG,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAE,uCAAuC,CAAC,CAAA;YAC1G,OAAO,QAAQ,CAAC,IAAI,CAAA;QACtB,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC;KACjC,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC3B,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAC5D,8FAA8F;QAC9F,2DAA2D;QAC3D,MAAM,CAAC,mBAAmB,EAAE,CAAA;IAC9B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,MAAW;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9E,OAAO,IAAI,GAAG,CAAC,0CAA0C,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;AACjF,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,OAAO,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAA;AAC9C,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAQ;IACxC,MAAM,OAAO,GAAG,QAAQ,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAA;IAC9F,MAAM,IAAI,GAAG,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/safe-files.d.ts

@@ -0,0 +1,26 @@
+import { type DownloadDescriptor, type FileDescriptor } from './contracts.js';
+import type { AgentAccessClient } from './client.js';
+export interface UploadFileOptions {
+    tenantId: string;
+    path: string;
+    mimeType: string;
+    attachmentKind: string;
+    initRequestId: string;
+    completeRequestId: string;
+    maxFileBytes?: number;
+    fetch?: typeof globalThis.fetch;
+}
+export interface DownloadFileOptions {
+    tenantId: string;
+    artifactId: string;
+    destination: string;
+    maxFileBytes?: number;
+    fetch?: typeof globalThis.fetch;
+}
+export declare function uploadFile(client: AgentAccessClient, options: UploadFileOptions): Promise<FileDescriptor>;
+export declare function downloadArtifact(client: AgentAccessClient, options: DownloadFileOptions): Promise<{
+    path: string;
+    descriptor: DownloadDescriptor;
+}>;
+export declare function validateDownloadDestination(rawPath: string): string;
+//# sourceMappingURL=safe-files.d.ts.map

package/dist/safe-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-files.d.ts","sourceRoot":"","sources":["../src/safe-files.ts"],"names":[],"mappings":"AAIA,OAAO,EAAc,KAAK,kBAAkB,EAAE,KAAK,cAAc,EAA2D,MAAM,gBAAgB,CAAA;AAClJ,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAGpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;CAChC;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,cAAc,CAAC,CAgDzB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAoB3D;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASnE"}

package/dist/safe-files.js

@@ -0,0 +1,203 @@
+import { constants, createReadStream } from 'node:fs';
+import { link, lstat, mkdir, open, rm } from 'node:fs/promises';
+import { basename, dirname, isAbsolute, parse, resolve, sep } from 'node:path';
+import { createHash, randomBytes } from 'node:crypto';
+import { AgentError } from './contracts.js';
+import { validateServiceUrl } from './http.js';
+export async function uploadFile(client, options) {
+    const maxBytes = options.maxFileBytes ?? 100 * 1024 * 1024;
+    const handle = await openNoFollow(options.path);
+    try {
+        const info = await handle.stat();
+        if (!info.isFile())
+            throw new AgentError('unsafe_local_path', 'Upload source must be a regular file');
+        if (info.size > maxBytes) {
+            throw new AgentError('file_too_large', 'Upload source exceeds the client file-size limit', {
+                details: { max_bytes: maxBytes },
+            });
+        }
+        const sha256 = await digestFile(handle.fd, maxBytes);
+        const initial = await client.execute({
+            tenant_id: options.tenantId,
+            operation: 'files.init_upload',
+            request_id: options.initRequestId,
+            input: {
+                file_name: basename(options.path),
+                mime_type: options.mimeType,
+                size: info.size,
+                sha256,
+                attachment_kind: options.attachmentKind,
+            },
+        });
+        if (initial.status !== 'completed' || !initial.result) {
+            throw new AgentError('upload_initialisation_failed', 'Upload initialisation did not complete', {
+                ...(initial.operation_id === undefined ? {} : { operationId: initial.operation_id }),
+            });
+        }
+        if ('completed_file' in initial.result)
+            return initial.result.completed_file;
+        if (initial.result.transfer_required !== false) {
+            await putUpload(initial.result, handle.fd, info.size, options.fetch ?? globalThis.fetch);
+        }
+        const completed = await client.execute({
+            tenant_id: options.tenantId,
+            operation: 'files.complete_upload',
+            request_id: options.completeRequestId,
+            input: { upload_id: initial.result.upload_id, sha256 },
+        });
+        if (completed.status !== 'completed' || !completed.result) {
+            throw new AgentError('upload_completion_failed', 'Upload completion did not complete', {
+                ...(completed.operation_id === undefined ? {} : { operationId: completed.operation_id }),
+            });
+        }
+        return completed.result;
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function downloadArtifact(client, options) {
+    const response = await client.execute({
+        tenant_id: options.tenantId,
+        operation: 'files.download',
+        input: { artifact_id: options.artifactId },
+    });
+    if (response.status !== 'completed' || !response.result) {
+        throw new AgentError('download_initialisation_failed', 'Download initialisation did not complete', {
+            ...(response.operation_id === undefined ? {} : { operationId: response.operation_id }),
+        });
+    }
+    const destination = validateDownloadDestination(options.destination);
+    const maxBytes = options.maxFileBytes ?? 100 * 1024 * 1024;
+    await streamDownload(response.result, destination, maxBytes, options.fetch ?? globalThis.fetch);
+    return { path: destination, descriptor: response.result };
+}
+export function validateDownloadDestination(rawPath) {
+    if (!rawPath || rawPath.includes('\0')) {
+        throw new AgentError('unsafe_local_path', 'Download destination is invalid');
+    }
+    const components = rawPath.replaceAll('\\', '/').split('/');
+    if (components.includes('..')) {
+        throw new AgentError('unsafe_local_path', 'Download destination must not contain path traversal');
+    }
+    return isAbsolute(rawPath) ? resolve(rawPath) : resolve(process.cwd(), rawPath);
+}
+async function putUpload(instruction, sourceFd, size, fetcher) {
+    const url = validateServiceUrl(instruction.upload_url, 'Signed upload URL');
+    let response;
+    try {
+        response = await fetcher(url, {
+            method: instruction.method,
+            headers: {
+                ...instruction.headers,
+                'content-length': String(size),
+            },
+            body: createReadStream('', { fd: sourceFd, autoClose: false, start: 0 }),
+            duplex: 'half',
+            redirect: 'manual',
+        });
+    }
+    catch (cause) {
+        throw new AgentError('upload_transfer_failed', 'Upload transfer outcome is unknown; retry with the same request IDs', { cause });
+    }
+    // Storage rejects a second PUT to an existing object with 409. The bytes may be ours from a
+    // lost response, so completion (which re-verifies size and SHA-256 server-side) decides.
+    if (response.status === 409)
+        return;
+    if (!response.ok) {
+        throw new AgentError('upload_transfer_failed', `Upload transfer failed with HTTP ${response.status}`);
+    }
+}
+async function streamDownload(descriptor, destination, maxBytes, fetcher) {
+    const url = validateServiceUrl(descriptor.download_url, 'Signed download URL');
+    const parent = dirname(destination);
+    await mkdir(parent, { recursive: true });
+    await assertNoSymlinkAncestors(parent);
+    try {
+        await lstat(destination);
+        throw new AgentError('destination_exists', 'Download destination already exists');
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    const response = await fetcher(url, { method: 'GET', redirect: 'manual' });
+    if (!response.ok || !response.body) {
+        throw new AgentError('download_transfer_failed', `Download transfer failed with HTTP ${response.status}`);
+    }
+    const length = Number(response.headers.get('content-length'));
+    if (Number.isFinite(length) && length > maxBytes) {
+        throw new AgentError('file_too_large', 'Download exceeds the client file-size limit');
+    }
+    const temporary = `${destination}.${process.pid}.${randomBytes(8).toString('hex')}.download`;
+    const file = await open(temporary, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY, 0o600);
+    const digest = createHash('sha256');
+    let size = 0;
+    try {
+        try {
+            for await (const rawChunk of response.body) {
+                const chunk = Buffer.from(rawChunk);
+                size += chunk.length;
+                if (size > maxBytes)
+                    throw new AgentError('file_too_large', 'Download exceeds the client file-size limit');
+                digest.update(chunk);
+                await file.write(chunk);
+            }
+            await file.sync();
+        }
+        finally {
+            await file.close();
+        }
+        if (size !== descriptor.size || digest.digest('hex') !== descriptor.sha256.toLowerCase()) {
+            throw new AgentError('download_integrity_failed', 'Downloaded file did not match its metadata');
+        }
+        await link(temporary, destination);
+    }
+    catch (error) {
+        if (error.code === 'EEXIST') {
+            throw new AgentError('destination_exists', 'Download destination already exists');
+        }
+        throw error;
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+async function openNoFollow(path) {
+    try {
+        const info = await lstat(path);
+        if (info.isSymbolicLink())
+            throw new AgentError('unsafe_local_path', 'Upload source must not be a symlink');
+        return await open(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    }
+    catch (error) {
+        if (error instanceof AgentError)
+            throw error;
+        throw new AgentError('unsafe_local_path', 'Upload source could not be opened safely', { cause: error });
+    }
+}
+async function digestFile(fd, maxBytes) {
+    const digest = createHash('sha256');
+    let size = 0;
+    for await (const rawChunk of createReadStream('', { fd, autoClose: false, start: 0 })) {
+        const chunk = Buffer.from(rawChunk);
+        size += chunk.length;
+        if (size > maxBytes)
+            throw new AgentError('file_too_large', 'Upload source exceeds the client file-size limit');
+        digest.update(chunk);
+    }
+    return digest.digest('hex');
+}
+async function assertNoSymlinkAncestors(directory) {
+    const root = parse(directory).root;
+    const relative = directory.slice(root.length);
+    let current = root;
+    for (const component of relative.split(sep).filter(Boolean)) {
+        current = resolve(current, component);
+        const info = await lstat(current);
+        if (!info.isDirectory() || info.isSymbolicLink()) {
+            throw new AgentError('unsafe_local_path', 'Download destination has an unsafe parent directory');
+        }
+    }
+}
+//# sourceMappingURL=safe-files.js.map

package/dist/safe-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-files.js","sourceRoot":"","sources":["../src/safe-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC9E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,UAAU,EAAyG,MAAM,gBAAgB,CAAA;AAElJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAqB9C,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAyB,EACzB,OAA0B;IAE1B,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1D,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,sCAAsC,CAAC,CAAA;QACrG,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,kDAAkD,EAAE;gBACzF,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE;aACjC,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACpD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAsC;YACxE,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,UAAU,EAAE,OAAO,CAAC,aAAa;YACjC,KAAK,EAAE;gBACL,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjC,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM;gBACN,eAAe,EAAE,OAAO,CAAC,cAAc;aACxC;SACF,CAAC,CAAA;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,IAAI,UAAU,CAAC,8BAA8B,EAAE,wCAAwC,EAAE;gBAC7F,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;aACrF,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,gBAAgB,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,CAAA;QAC5E,IAAI,OAAO,CAAC,MAAM,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC/C,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;QAC1F,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAA0B;YAC9D,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,SAAS,EAAE,uBAAuB;YAClC,UAAU,EAAE,OAAO,CAAC,iBAAiB;YACrC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE;SACvD,CAAC,CAAA;QACF,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC1D,MAAM,IAAI,UAAU,CAAC,0BAA0B,EAAE,oCAAoC,EAAE;gBACrF,GAAG,CAAC,SAAS,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;aACzF,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,MAAM,CAAA;IACzB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAyB,EACzB,OAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAA8B;QACjE,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,SAAS,EAAE,gBAAgB;QAC3B,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE;KAC3C,CAAC,CAAA;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,0CAA0C,EAAE;YACjG,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;SACvF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1D,MAAM,cAAc,CAClB,QAAQ,CAAC,MAAM,EACf,WAAW,EACX,QAAQ,EACR,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAClC,CAAA;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;AAC3D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC3D,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,sDAAsD,CAAC,CAAA;IACnG,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAA;AACjF,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,WAA8B,EAC9B,QAAgB,EAChB,IAAY,EACZ,OAAgC;IAEhC,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAA;IAC3E,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,OAAO,EAAE;gBACP,GAAG,WAAW,CAAC,OAAO;gBACtB,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC;aAC/B;YACD,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;SACO,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,qEAAqE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAClI,CAAC;IACD,4FAA4F;IAC5F,yFAAyF;IACzF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAM;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,oCAAoC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACvG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAA8B,EAC9B,WAAmB,EACnB,QAAgB,EAChB,OAAgC;IAEhC,MAAM,GAAG,GAAG,kBAAkB,CAAC,UAAU,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAA;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACnC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,CAAC,CAAA;QACxB,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAA;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,UAAU,CAAC,0BAA0B,EAAE,sCAAsC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3G,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAC7D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAA;IACvF,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAA;IAC5F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACpG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACnC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,CAAC;QACH,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,QAAQ,IAAI,QAAQ,CAAC,IAA4C,EAAE,CAAC;gBACnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACnC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;gBACpB,IAAI,IAAI,GAAG,QAAQ;oBAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAA;gBAC1G,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACpB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzB,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACnB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;QACD,IAAI,IAAI,KAAK,UAAU,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YACzF,MAAM,IAAI,UAAU,CAAC,2BAA2B,EAAE,4CAA4C,CAAC,CAAA;QACjG,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAA;QACnF,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,qCAAqC,CAAC,CAAA;QAC3G,OAAO,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU;YAAE,MAAM,KAAK,CAAA;QAC5C,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,0CAA0C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACzG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,QAAgB;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACnC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,EAAE,MAAM,QAAQ,IAAI,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;QACpB,IAAI,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,kDAAkD,CAAC,CAAA;QAC/G,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7B,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAA;IAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,OAAO,GAAG,IAAI,CAAA;IAClB,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,qDAAqD,CAAC,CAAA;QAClG,CAAC;IACH,CAAC;AACH,CAAC"}