@waiaas/daemon 2.0.0-rc.1

package/dist/api/server.js

@@ -0,0 +1,406 @@
+/**
+ * Hono API server factory: createApp(deps) returns a configured Hono instance.
+ *
+ * Middleware registration order:
+ *   1. requestId
+ *   2. hostGuard
+ *   3. killSwitchGuard
+ *   4. requestLogger
+ *
+ * Auth middleware (route-level, registered on app before sub-routers):
+ *   - masterAuth: /v1/wallets, /v1/policies, /v1/sessions, /v1/sessions/:id (admin operations, skips /renew)
+ *   - sessionAuth: /v1/sessions/:id/renew, /v1/wallet/*, /v1/transactions/*
+ *   - /health remains public (no auth required)
+ *
+ * Error handler is registered via app.onError.
+ *
+ * The returned app instance is NOT started -- starting is DaemonLifecycle's job.
+ *
+ * @see docs/29-api-framework-design.md
+ * @see docs/52-auth-redesign.md
+ */
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+import { OpenAPIHono } from '@hono/zod-openapi';
+import { serveStatic } from '@hono/node-server/serve-static';
+const require = createRequire(import.meta.url);
+const { version: DAEMON_VERSION } = require('../../package.json');
+// Compute absolute path to admin static files (from dist/api/server.js -> ../../public/admin)
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const ADMIN_STATIC_ROOT = join(__dirname, '..', '..', 'public', 'admin');
+import { requestId, hostGuard, createKillSwitchGuard, requestLogger, errorHandler, createSessionAuth, createMasterAuth, createOwnerAuth, cspMiddleware, } from './middleware/index.js';
+import { createHealthRoute } from './routes/health.js';
+import { walletCrudRoutes } from './routes/wallets.js';
+import { sessionRoutes } from './routes/sessions.js';
+import { walletRoutes } from './routes/wallet.js';
+import { transactionRoutes } from './routes/transactions.js';
+import { policyRoutes } from './routes/policies.js';
+import { nonceRoutes } from './routes/nonce.js';
+import { utilsRoutes } from './routes/utils.js';
+import { skillsRoutes } from './routes/skills.js';
+import { adminRoutes } from './routes/admin.js';
+import { tokenRegistryRoutes } from './routes/tokens.js';
+import { mcpTokenRoutes } from './routes/mcp.js';
+import { WAIaaSError } from '@waiaas/core';
+import { TokenRegistryService } from '../infrastructure/token-registry/index.js';
+import { actionRoutes } from './routes/actions.js';
+import { x402Routes } from './routes/x402.js';
+import { wcRoutes, wcSessionRoutes } from './routes/wc.js';
+import { DatabasePolicyEngine } from '../pipeline/database-policy-engine.js';
+/**
+ * Create a Hono app instance with all middleware and routes configured.
+ *
+ * @param deps - Optional dependencies (extensible for future use)
+ * @returns Configured OpenAPIHono instance (not started)
+ */
+export function createApp(deps = {}) {
+    const app = new OpenAPIHono();
+    // Register global middleware in order
+    app.use('*', requestId);
+    app.use('*', hostGuard);
+    // killSwitchGuard: prefer KillSwitchService if available, else use callback
+    const killSwitchStateGetter = deps.killSwitchService
+        ? () => deps.killSwitchService.getState().state
+        : (deps.getKillSwitchState ?? (() => 'ACTIVE'));
+    app.use('*', createKillSwitchGuard(killSwitchStateGetter));
+    app.use('*', requestLogger);
+    // Register error handler
+    app.onError(errorHandler);
+    // Register route-level auth middleware on the app (before sub-routers)
+    if (deps.masterPasswordHash !== undefined) {
+        const masterAuth = createMasterAuth({ masterPasswordHash: deps.masterPasswordHash });
+        app.use('/v1/wallets', masterAuth);
+        app.use('/v1/policies', masterAuth);
+        app.use('/v1/policies/:id', masterAuth);
+        // masterAuth on /v1/sessions (POST create, GET list)
+        app.use('/v1/sessions', masterAuth);
+        // masterAuth on /v1/sessions/:id for DELETE -- skip /renew sub-path (sessionAuth handles it)
+        app.use('/v1/sessions/:id', async (c, next) => {
+            if (c.req.path.endsWith('/renew')) {
+                await next();
+                return;
+            }
+            return masterAuth(c, next);
+        });
+    }
+    // masterAuth for GET /v1/wallets/:id (wallet detail) -- skip sub-paths with own auth
+    if (deps.masterPasswordHash !== undefined) {
+        const masterAuthForWalletDetail = createMasterAuth({ masterPasswordHash: deps.masterPasswordHash });
+        app.use('/v1/wallets/:id', async (c, next) => {
+            // Skip sub-paths that have their own masterAuth registered below
+            if (c.req.path.includes('/owner') || c.req.path.includes('/default-network') || c.req.path.includes('/networks') || c.req.path.includes('/wc/')) {
+                await next();
+                return;
+            }
+            return masterAuthForWalletDetail(c, next);
+        });
+    }
+    // masterAuth for PUT /v1/wallets/:id/owner
+    if (deps.masterPasswordHash !== undefined) {
+        const masterAuthForOwner = createMasterAuth({ masterPasswordHash: deps.masterPasswordHash });
+        app.use('/v1/wallets/:id/owner', masterAuthForOwner);
+        app.use('/v1/wallets/:id/default-network', masterAuthForOwner);
+        app.use('/v1/wallets/:id/networks', masterAuthForOwner);
+    }
+    // masterAuth for WalletConnect routes
+    if (deps.masterPasswordHash !== undefined) {
+        const masterAuthForWc = createMasterAuth({ masterPasswordHash: deps.masterPasswordHash });
+        app.use('/v1/wallets/:id/wc/*', masterAuthForWc);
+    }
+    if (deps.jwtSecretManager && deps.db) {
+        const sessionAuth = createSessionAuth({ jwtSecretManager: deps.jwtSecretManager, db: deps.db });
+        // sessionAuth for session renewal (uses own token)
+        app.use('/v1/sessions/:id/renew', sessionAuth);
+        app.use('/v1/wallet/*', sessionAuth);
+        // sessionAuth for GET /v1/transactions (exact path -- wildcard won't match base)
+        app.use('/v1/transactions', sessionAuth);
+        app.use('/v1/transactions/*', sessionAuth);
+        app.use('/v1/utils/*', sessionAuth);
+        app.use('/v1/actions/*', sessionAuth);
+        app.use('/v1/x402/*', sessionAuth);
+    }
+    // ownerAuth for approve and reject routes (requires DB for agent lookup)
+    if (deps.db) {
+        const ownerAuth = createOwnerAuth({ db: deps.db });
+        app.use('/v1/transactions/:id/approve', ownerAuth);
+        app.use('/v1/transactions/:id/reject', ownerAuth);
+        app.use('/v1/wallets/:id/owner/verify', ownerAuth);
+    }
+    // masterAuth for admin routes (except GET /admin/kill-switch which is public)
+    if (deps.masterPasswordHash !== undefined) {
+        const masterAuthForAdmin = createMasterAuth({ masterPasswordHash: deps.masterPasswordHash });
+        app.use('/v1/admin/status', masterAuthForAdmin);
+        app.use('/v1/admin/kill-switch', async (c, next) => {
+            // POST requires masterAuth, GET is public
+            if (c.req.method === 'POST') {
+                return masterAuthForAdmin(c, next);
+            }
+            await next();
+        });
+        app.use('/v1/admin/recover', masterAuthForAdmin);
+        app.use('/v1/admin/shutdown', masterAuthForAdmin);
+        app.use('/v1/admin/rotate-secret', masterAuthForAdmin);
+        app.use('/v1/admin/notifications/*', masterAuthForAdmin);
+        app.use('/v1/admin/settings', masterAuthForAdmin);
+        app.use('/v1/admin/settings/*', masterAuthForAdmin);
+        app.use('/v1/admin/api-keys', masterAuthForAdmin);
+        app.use('/v1/admin/api-keys/*', masterAuthForAdmin);
+        app.use('/v1/admin/forex/*', masterAuthForAdmin);
+        app.use('/v1/admin/kill-switch/escalate', masterAuthForAdmin);
+        app.use('/v1/tokens', masterAuthForAdmin);
+        app.use('/v1/mcp/tokens', masterAuthForAdmin);
+        app.use('/v1/admin/wallets/*', masterAuthForAdmin);
+        app.use('/v1/admin/telegram-users', masterAuthForAdmin);
+        app.use('/v1/admin/telegram-users/*', masterAuthForAdmin);
+    }
+    // ownerAuth for POST /v1/owner/kill-switch
+    if (deps.db) {
+        const ownerAuthForKillSwitch = createOwnerAuth({ db: deps.db });
+        app.use('/v1/owner/kill-switch', ownerAuthForKillSwitch);
+    }
+    // Register routes
+    app.route('/health', createHealthRoute({ versionCheckService: deps.versionCheckService ?? null }));
+    // Register nonce route (public, no auth required)
+    app.route('/v1', nonceRoutes());
+    // Register skills route (public, no auth required -- AI agent skill references)
+    app.route('/v1', skillsRoutes());
+    // Register utils routes (sessionAuth required -- stateless utilities)
+    app.route('/v1', utilsRoutes());
+    // Register wallet CRUD routes when deps are available
+    if (deps.db && deps.sqlite && deps.keyStore && deps.masterPassword !== undefined && deps.config) {
+        app.route('/v1', walletCrudRoutes({
+            db: deps.db,
+            sqlite: deps.sqlite,
+            keyStore: deps.keyStore,
+            masterPassword: deps.masterPassword,
+            config: deps.config,
+            adapterPool: deps.adapterPool ?? undefined,
+            notificationService: deps.notificationService,
+            eventBus: deps.eventBus,
+        }));
+    }
+    // Register session routes when deps are available (masterAuth + JWT)
+    if (deps.db && deps.jwtSecretManager && deps.config) {
+        app.route('/v1', sessionRoutes({
+            db: deps.db,
+            jwtSecretManager: deps.jwtSecretManager,
+            config: deps.config,
+            notificationService: deps.notificationService,
+            eventBus: deps.eventBus,
+        }));
+    }
+    // Register policy routes when DB is available (masterAuth covers /v1/policies)
+    if (deps.db) {
+        app.route('/v1', policyRoutes({ db: deps.db }));
+    }
+    // Create shared TokenRegistryService for walletRoutes and tokenRegistryRoutes
+    const tokenRegistryService = deps.db ? new TokenRegistryService(deps.db) : null;
+    if (deps.db) {
+        app.route('/v1', walletRoutes({
+            db: deps.db,
+            adapterPool: deps.adapterPool ?? null,
+            config: deps.config ?? null,
+            tokenRegistryService,
+            forexRateService: deps.forexRateService,
+            settingsService: deps.settingsService,
+        }));
+    }
+    // Register transaction routes when all pipeline deps are available
+    if (deps.db &&
+        deps.keyStore &&
+        deps.masterPassword !== undefined &&
+        deps.adapterPool &&
+        deps.policyEngine &&
+        deps.config) {
+        app.route('/v1', transactionRoutes({
+            db: deps.db,
+            adapterPool: deps.adapterPool,
+            config: deps.config,
+            keyStore: deps.keyStore,
+            policyEngine: deps.policyEngine,
+            masterPassword: deps.masterPassword,
+            approvalWorkflow: deps.approvalWorkflow,
+            delayQueue: deps.delayQueue,
+            ownerLifecycle: deps.ownerLifecycle,
+            sqlite: deps.sqlite,
+            notificationService: deps.notificationService,
+            priceOracle: deps.priceOracle,
+            settingsService: deps.settingsService,
+            forexRateService: deps.forexRateService,
+            eventBus: deps.eventBus,
+            wcSigningBridge: deps.wcSigningBridge,
+        }));
+    }
+    // Register action routes when registry + pipeline deps are available
+    if (deps.actionProviderRegistry &&
+        deps.apiKeyStore &&
+        deps.db &&
+        deps.keyStore &&
+        deps.masterPassword !== undefined &&
+        deps.adapterPool &&
+        deps.policyEngine &&
+        deps.config) {
+        app.route('/v1', actionRoutes({
+            registry: deps.actionProviderRegistry,
+            apiKeyStore: deps.apiKeyStore,
+            db: deps.db,
+            adapterPool: deps.adapterPool,
+            config: deps.config,
+            keyStore: deps.keyStore,
+            policyEngine: deps.policyEngine,
+            masterPassword: deps.masterPassword,
+            approvalWorkflow: deps.approvalWorkflow,
+            delayQueue: deps.delayQueue,
+            ownerLifecycle: deps.ownerLifecycle,
+            sqlite: deps.sqlite,
+            notificationService: deps.notificationService,
+            priceOracle: deps.priceOracle,
+            settingsService: deps.settingsService,
+        }));
+    }
+    // Register x402 routes when pipeline deps + config are available
+    if (deps.db &&
+        deps.sqlite &&
+        deps.keyStore &&
+        deps.masterPassword !== undefined &&
+        deps.policyEngine &&
+        deps.policyEngine instanceof DatabasePolicyEngine &&
+        deps.config) {
+        app.route('/v1', x402Routes({
+            db: deps.db,
+            sqlite: deps.sqlite,
+            keyStore: deps.keyStore,
+            policyEngine: deps.policyEngine,
+            masterPassword: deps.masterPassword,
+            config: deps.config,
+            notificationService: deps.notificationService,
+            priceOracle: deps.priceOracle,
+            adapterPool: deps.adapterPool ?? null,
+            settingsService: deps.settingsService,
+            eventBus: deps.eventBus,
+        }));
+    }
+    // Register admin routes when DB is available
+    if (deps.db) {
+        // Kill switch state holder: wraps getKillSwitchState callback with enriched state
+        const killSwitchHolder = {
+            state: 'ACTIVE',
+            activatedAt: null,
+            activatedBy: null,
+        };
+        // Sync initial state from KillSwitchService or callback
+        if (deps.killSwitchService) {
+            const ksInfo = deps.killSwitchService.getState();
+            killSwitchHolder.state = ksInfo.state;
+            killSwitchHolder.activatedAt = ksInfo.activatedAt;
+            killSwitchHolder.activatedBy = ksInfo.activatedBy;
+        }
+        else if (deps.getKillSwitchState) {
+            killSwitchHolder.state = deps.getKillSwitchState();
+        }
+        app.route('/v1', adminRoutes({
+            db: deps.db,
+            jwtSecretManager: deps.jwtSecretManager,
+            getKillSwitchState: () => killSwitchHolder,
+            setKillSwitchState: (state, activatedBy) => {
+                killSwitchHolder.state = state;
+                if (state === 'SUSPENDED' || state === 'LOCKED') {
+                    killSwitchHolder.activatedAt = Math.floor(Date.now() / 1000);
+                    killSwitchHolder.activatedBy = activatedBy ?? null;
+                }
+                else {
+                    killSwitchHolder.activatedAt = null;
+                    killSwitchHolder.activatedBy = null;
+                }
+            },
+            killSwitchService: deps.killSwitchService,
+            requestShutdown: deps.requestShutdown,
+            startTime: deps.startTime ?? Math.floor(Date.now() / 1000),
+            version: DAEMON_VERSION,
+            adminTimeout: deps.config?.daemon?.admin_timeout ?? 900,
+            notificationService: deps.notificationService,
+            notificationConfig: deps.config?.notifications,
+            settingsService: deps.settingsService,
+            onSettingsChanged: deps.onSettingsChanged,
+            adapterPool: deps.adapterPool ?? null,
+            daemonConfig: deps.config,
+            priceOracle: deps.priceOracle,
+            apiKeyStore: deps.apiKeyStore,
+            actionProviderRegistry: deps.actionProviderRegistry,
+            forexRateService: deps.forexRateService,
+            sqlite: deps.sqlite,
+        }));
+        // Register owner kill-switch route (ownerAuth protected)
+        if (deps.killSwitchService) {
+            const ownerKsRouter = new OpenAPIHono();
+            const ownerKillSwitchService = deps.killSwitchService;
+            ownerKsRouter.post('/owner/kill-switch', async (c) => {
+                const ownerAddress = c.get('ownerAddress');
+                const result = ownerKillSwitchService.activateWithCascade(ownerAddress ?? 'owner');
+                if (!result.success) {
+                    throw new WAIaaSError('KILL_SWITCH_ACTIVE', {
+                        message: result.error ?? 'Kill switch is already active',
+                    });
+                }
+                const state = ownerKillSwitchService.getState();
+                return c.json({
+                    state: 'SUSPENDED',
+                    activatedAt: state.activatedAt ?? Math.floor(Date.now() / 1000),
+                }, 200);
+            });
+            app.route('/v1', ownerKsRouter);
+        }
+    }
+    // Register token registry routes when DB is available
+    if (deps.db && tokenRegistryService) {
+        app.route('/v1', tokenRegistryRoutes({ tokenRegistryService }));
+    }
+    // Register MCP token provisioning routes when deps are available
+    if (deps.db && deps.jwtSecretManager && deps.config && deps.dataDir) {
+        app.route('/v1', mcpTokenRoutes({
+            db: deps.db,
+            jwtSecretManager: deps.jwtSecretManager,
+            config: deps.config,
+            dataDir: deps.dataDir,
+            notificationService: deps.notificationService,
+        }));
+    }
+    // Register WalletConnect routes (always, with mutable WcServiceRef).
+    // Handlers throw WC_NOT_CONFIGURED (503) when service is unavailable.
+    // The ref pattern allows hot-reload to swap the underlying WcSessionService.
+    if (deps.db) {
+        const wcServiceRef = deps.wcServiceRef ?? { current: null };
+        app.route('/v1', wcRoutes({ db: deps.db, wcServiceRef }));
+        app.route('/v1', wcSessionRoutes({ db: deps.db, wcServiceRef }));
+    }
+    // Register OpenAPI spec endpoint (GET /doc)
+    app.doc('/doc', {
+        openapi: '3.0.0',
+        info: {
+            title: 'WAIaaS API',
+            version: DAEMON_VERSION,
+            description: 'AI Agent Wallet-as-a-Service REST API',
+        },
+    });
+    // Register Admin UI static serving (conditional on config)
+    if (deps.config?.daemon?.admin_ui !== false) {
+        // CSP headers for admin paths
+        app.use('/admin/*', cspMiddleware);
+        // Serve static files from public/admin/ using absolute path
+        app.use('/admin/*', serveStatic({
+            root: ADMIN_STATIC_ROOT,
+            rewriteRequestPath: (path) => path.replace(/^\/admin/, ''),
+        }));
+        // SPA fallback: any /admin/* path that didn't match a static file -> index.html
+        app.get('/admin/*', serveStatic({
+            root: ADMIN_STATIC_ROOT,
+            path: 'index.html',
+        }));
+        // Redirect /admin to /admin/ for consistency
+        app.get('/admin', (c) => c.redirect('/admin/'));
+    }
+    return app;
+}
+//# sourceMappingURL=server.js.map

package/dist/api/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/api/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAE7D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAEzF,8FAA8F;AAC9F,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAKzE,OAAO,EACL,SAAS,EACT,SAAS,EACT,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,aAAa,GACd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAc3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAkC7E;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,OAAsB,EAAE;IAChD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAE9B,sCAAsC;IACtC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxB,4EAA4E;IAC5E,MAAM,qBAAqB,GAAuB,IAAI,CAAC,iBAAiB;QACtE,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC,QAAQ,EAAE,CAAC,KAAK;QAChD,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAE5B,yBAAyB;IACzB,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1B,uEAAuE;IACvE,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACrF,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;QACxC,qDAAqD;QACrD,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QACpC,6FAA6F;QAC7F,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC5C,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YACD,OAAO,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qFAAqF;IACrF,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACpG,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC3C,iEAAiE;YACjE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChJ,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YACD,OAAO,yBAAyB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2CAA2C;IAC3C,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC7F,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,kBAAkB,CAAC,CAAC;QAC/D,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,CAAC;IAC1D,CAAC;IAED,sCAAsC;IACtC,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,eAAe,GAAG,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC1F,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAChG,mDAAmD;QACnD,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAC/C,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACrC,iFAAiF;QACjF,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QACzC,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,yEAAyE;IACzE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,8EAA8E;IAC9E,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC7F,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QAChD,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACjD,0CAA0C;YAC1C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5B,OAAO,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,gCAAgC,EAAE,kBAAkB,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAC9C,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC;IAC5D,CAAC;IAED,2CAA2C;IAC3C,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,sBAAsB,GAAG,eAAe,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,CAAC;IAC3D,CAAC;IAED,kBAAkB;IAClB,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnG,kDAAkD;IAClD,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAEhC,gFAAgF;IAChF,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAEjC,sEAAsE;IACtE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAEhC,sDAAsD;IACtD,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChG,GAAG,CAAC,KAAK,CACP,KAAK,EACL,gBAAgB,CAAC;YACf,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS;YAC1C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CACP,KAAK,EACL,aAAa,CAAC;YACZ,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,GAAG,CAAC,KAAK,CACP,KAAK,EACL,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAC9B,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,MAAM,oBAAoB,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhF,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,GAAG,CAAC,KAAK,CACP,KAAK,EACL,YAAY,CAAC;YACX,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,oBAAoB;YACpB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,IACE,IAAI,CAAC,EAAE;QACP,IAAI,CAAC,QAAQ;QACb,IAAI,CAAC,cAAc,KAAK,SAAS;QACjC,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,YAAY;QACjB,IAAI,CAAC,MAAM,EACX,CAAC;QACD,GAAG,CAAC,KAAK,CACP,KAAK,EACL,iBAAiB,CAAC;YAChB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,IACE,IAAI,CAAC,sBAAsB;QAC3B,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,EAAE;QACP,IAAI,CAAC,QAAQ;QACb,IAAI,CAAC,cAAc,KAAK,SAAS;QACjC,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,YAAY;QACjB,IAAI,CAAC,MAAM,EACX,CAAC;QACD,GAAG,CAAC,KAAK,CACP,KAAK,EACL,YAAY,CAAC;YACX,QAAQ,EAAE,IAAI,CAAC,sBAAsB;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,IACE,IAAI,CAAC,EAAE;QACP,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,QAAQ;QACb,IAAI,CAAC,cAAc,KAAK,SAAS;QACjC,IAAI,CAAC,YAAY;QACjB,IAAI,CAAC,YAAY,YAAY,oBAAoB;QACjD,IAAI,CAAC,MAAM,EACX,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC;YAC1B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,kFAAkF;QAClF,MAAM,gBAAgB,GAAoB;YACxC,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,IAAI;SAClB,CAAC;QAEF,wDAAwD;QACxD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;YACjD,gBAAgB,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACtC,gBAAgB,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YAClD,gBAAgB,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnC,gBAAgB,CAAC,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrD,CAAC;QAED,GAAG,CAAC,KAAK,CACP,KAAK,EACL,WAAW,CAAC;YACV,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,kBAAkB,EAAE,GAAG,EAAE,CAAC,gBAAgB;YAC1C,kBAAkB,EAAE,CAAC,KAAa,EAAE,WAAoB,EAAE,EAAE;gBAC1D,gBAAgB,CAAC,KAAK,GAAG,KAAK,CAAC;gBAC/B,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAChD,gBAAgB,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;oBAC7D,gBAAgB,CAAC,WAAW,GAAG,WAAW,IAAI,IAAI,CAAC;gBACrD,CAAC;qBAAM,CAAC;oBACN,gBAAgB,CAAC,WAAW,GAAG,IAAI,CAAC;oBACpC,gBAAgB,CAAC,WAAW,GAAG,IAAI,CAAC;gBACtC,CAAC;YACH,CAAC;YACD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAC1D,OAAO,EAAE,cAAc;YACvB,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,IAAI,GAAG;YACvD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,kBAAkB,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa;YAC9C,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,YAAY,EAAE,IAAI,CAAC,MAAM;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CACH,CAAC;QAEF,yDAAyD;QACzD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC;YACxC,MAAM,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACtD,aAAa,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBACnD,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,cAAuB,CAAuB,CAAC;gBAC1E,MAAM,MAAM,GAAG,sBAAsB,CAAC,mBAAmB,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC;gBACnF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE;wBAC1C,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,+BAA+B;qBACzD,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,QAAQ,EAAE,CAAC;gBAChD,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,WAAoB;oBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;iBAChE,EACD,GAAG,CACJ,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,IAAI,CAAC,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACpC,GAAG,CAAC,KAAK,CACP,KAAK,EACL,mBAAmB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACpE,GAAG,CAAC,KAAK,CACP,KAAK,EACL,cAAc,CAAC;YACb,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC,CACH,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,sEAAsE;IACtE,6EAA6E;IAC7E,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC1D,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,4CAA4C;IAC5C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,uCAAuC;SACrD;KACF,CAAC,CAAC;IAEH,2DAA2D;IAC3D,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC5C,8BAA8B;QAC9B,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAEnC,4DAA4D;QAC5D,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC;YAC9B,IAAI,EAAE,iBAAiB;YACvB,kBAAkB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACnE,CAAC,CAAC,CAAC;QAEJ,gFAAgF;QAChF,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC;YAC9B,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC,CAAC;QAEJ,6CAA6C;QAC7C,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,35 @@
+export { createDatabase, closeDatabase, pushSchema, wallets, sessions, transactions, policies, pendingApprovals, auditLog, keyValueStore, generateId, } from './infrastructure/database/index.js';
+export type { DatabaseConnection } from './infrastructure/database/index.js';
+export { deriveKey, encrypt, decrypt, KDF_PARAMS, allocateGuarded, writeToGuarded, zeroAndRelease, isAvailable, LocalKeyStore, } from './infrastructure/keystore/index.js';
+export type { EncryptedData } from './infrastructure/keystore/index.js';
+export type { KeystoreFileV1 } from './infrastructure/keystore/index.js';
+export { loadConfig, DaemonConfigSchema, detectNestedSections, applyEnvOverrides, parseEnvValue, } from './infrastructure/config/index.js';
+export type { DaemonConfig } from './infrastructure/config/index.js';
+export { DaemonLifecycle, withTimeout } from './lifecycle/index.js';
+export { registerSignalHandlers } from './lifecycle/index.js';
+export { BackgroundWorkers } from './lifecycle/index.js';
+export { createApp } from './api/index.js';
+export type { CreateAppDeps } from './api/index.js';
+export { walletCrudRoutes, walletRoutes, transactionRoutes } from './api/routes/index.js';
+export type { WalletCrudRouteDeps } from './api/routes/wallets.js';
+export type { WalletRouteDeps } from './api/routes/wallet.js';
+export type { TransactionRouteDeps } from './api/routes/transactions.js';
+export { JwtSecretManager } from './infrastructure/jwt/index.js';
+export type { JwtPayload } from './infrastructure/jwt/index.js';
+export { BackupService } from './infrastructure/backup/index.js';
+export { TransactionPipeline, DefaultPolicyEngine } from './pipeline/index.js';
+export { DatabasePolicyEngine } from './pipeline/database-policy-engine.js';
+export type { PipelineDeps, PipelineContext } from './pipeline/index.js';
+import { DaemonLifecycle } from './lifecycle/index.js';
+/**
+ * Start the WAIaaS daemon.
+ *
+ * Convenience wrapper that creates a DaemonLifecycle, registers signal handlers,
+ * and starts the daemon with the given data directory and master password.
+ *
+ * @param dataDir - Path to the WAIaaS data directory (contains config.toml, data/, keystore/)
+ * @param masterPassword - Master password for keystore encryption
+ * @returns The DaemonLifecycle instance (for testing or programmatic shutdown)
+ */
+export declare function startDaemon(dataDir: string, masterPassword: string): Promise<DaemonLifecycle>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,cAAc,EACd,aAAa,EACb,UAAU,EACV,OAAO,EACP,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,gBAAgB,EAChB,QAAQ,EACR,aAAa,EACb,UAAU,GACX,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAG7E,OAAO,EACL,SAAS,EACT,OAAO,EACP,OAAO,EACP,UAAU,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,WAAW,EACX,aAAa,GACd,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,YAAY,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,GACd,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,YAAY,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,YAAY,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAGhE,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAGjE,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAMzE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,eAAe,CAAC,CAK1B"}

package/dist/index.js

@@ -0,0 +1,43 @@
+// @waiaas/daemon - daemon infrastructure
+// Database module
+export { createDatabase, closeDatabase, pushSchema, wallets, sessions, transactions, policies, pendingApprovals, auditLog, keyValueStore, generateId, } from './infrastructure/database/index.js';
+// Keystore module
+export { deriveKey, encrypt, decrypt, KDF_PARAMS, allocateGuarded, writeToGuarded, zeroAndRelease, isAvailable, LocalKeyStore, } from './infrastructure/keystore/index.js';
+// Config module
+export { loadConfig, DaemonConfigSchema, detectNestedSections, applyEnvOverrides, parseEnvValue, } from './infrastructure/config/index.js';
+// Lifecycle module
+export { DaemonLifecycle, withTimeout } from './lifecycle/index.js';
+export { registerSignalHandlers } from './lifecycle/index.js';
+export { BackgroundWorkers } from './lifecycle/index.js';
+// API module
+export { createApp } from './api/index.js';
+export { walletCrudRoutes, walletRoutes, transactionRoutes } from './api/routes/index.js';
+// JWT module
+export { JwtSecretManager } from './infrastructure/jwt/index.js';
+// Backup module
+export { BackupService } from './infrastructure/backup/index.js';
+// Pipeline module
+export { TransactionPipeline, DefaultPolicyEngine } from './pipeline/index.js';
+export { DatabasePolicyEngine } from './pipeline/database-policy-engine.js';
+// ---------------------------------------------------------------------------
+// Convenience: top-level startDaemon()
+// ---------------------------------------------------------------------------
+import { DaemonLifecycle } from './lifecycle/index.js';
+import { registerSignalHandlers } from './lifecycle/index.js';
+/**
+ * Start the WAIaaS daemon.
+ *
+ * Convenience wrapper that creates a DaemonLifecycle, registers signal handlers,
+ * and starts the daemon with the given data directory and master password.
+ *
+ * @param dataDir - Path to the WAIaaS data directory (contains config.toml, data/, keystore/)
+ * @param masterPassword - Master password for keystore encryption
+ * @returns The DaemonLifecycle instance (for testing or programmatic shutdown)
+ */
+export async function startDaemon(dataDir, masterPassword) {
+    const daemon = new DaemonLifecycle();
+    registerSignalHandlers(daemon);
+    await daemon.start(dataDir, masterPassword);
+    return daemon;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yCAAyC;AAEzC,kBAAkB;AAClB,OAAO,EACL,cAAc,EACd,aAAa,EACb,UAAU,EACV,OAAO,EACP,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,gBAAgB,EAChB,QAAQ,EACR,aAAa,EACb,UAAU,GACX,MAAM,oCAAoC,CAAC;AAG5C,kBAAkB;AAClB,OAAO,EACL,SAAS,EACT,OAAO,EACP,OAAO,EACP,UAAU,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,WAAW,EACX,aAAa,GACd,MAAM,oCAAoC,CAAC;AAI5C,gBAAgB;AAChB,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,GACd,MAAM,kCAAkC,CAAC;AAG1C,mBAAmB;AACnB,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,aAAa;AACb,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAK1F,aAAa;AACb,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGjE,gBAAgB;AAChB,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEjE,kBAAkB;AAClB,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAG5E,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,cAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/infrastructure/action/action-provider-registry.d.ts

@@ -0,0 +1,77 @@
+import { type IActionProvider, type ActionDefinition, type ActionContext, type ContractCallRequest, type ActionProviderMetadata } from '@waiaas/core';
+/**
+ * ActionProviderRegistry manages provider registration, action lookup,
+ * and resolve() execution with schema validation.
+ */
+export declare class ActionProviderRegistry {
+    private readonly providers;
+    private readonly actions;
+    /**
+     * Register an IActionProvider implementation.
+     * Validates metadata and action definitions with Zod schemas.
+     * Checks inputSchema duck typing (parse/safeParse functions).
+     * @throws WAIaaSError('ACTION_NAME_CONFLICT') if provider name is already registered.
+     */
+    register(provider: IActionProvider): void;
+    /**
+     * Unregister a provider and all its actions.
+     * @returns true if the provider was found and removed, false otherwise.
+     */
+    unregister(providerName: string): boolean;
+    /**
+     * Get a registered provider by name.
+     */
+    getProvider(name: string): IActionProvider | undefined;
+    /**
+     * Get an action entry by key (providerName/actionName).
+     */
+    getAction(key: string): {
+        provider: IActionProvider;
+        action: ActionDefinition;
+    } | undefined;
+    /**
+     * List metadata for all registered providers.
+     */
+    listProviders(): ActionProviderMetadata[];
+    /**
+     * List actions, optionally filtered by provider name.
+     */
+    listActions(providerName?: string): {
+        providerName: string;
+        action: ActionDefinition;
+    }[];
+    /**
+     * Get actions from providers with mcpExpose=true.
+     */
+    getMcpExposedActions(): {
+        provider: IActionProvider;
+        action: ActionDefinition;
+    }[];
+    /**
+     * Execute an action's resolve() with full validation pipeline:
+     * 1. Lookup action by key
+     * 2. Validate input params via action.inputSchema.parse()
+     * 3. Call provider.resolve()
+     * 4. Re-validate result via ContractCallRequestSchema.parse()
+     *
+     * @throws WAIaaSError('ACTION_NOT_FOUND') if action key not found
+     * @throws WAIaaSError('ACTION_VALIDATION_FAILED') if input validation fails
+     * @throws WAIaaSError('ACTION_RETURN_INVALID') if resolve() return value is invalid
+     */
+    executeResolve(actionKey: string, params: Record<string, unknown>, context: ActionContext): Promise<ContractCallRequest>;
+    /**
+     * Load ESM plugins from a directory. Each subdirectory is a plugin.
+     * Individual plugin failures are logged and skipped (fail-open).
+     *
+     * @returns Object with loaded/failed plugin names.
+     */
+    loadPlugins(actionsDir: string): Promise<{
+        loaded: string[];
+        failed: string[];
+    }>;
+    /**
+     * Load a single ESM plugin from a directory.
+     */
+    private loadSinglePlugin;
+}
+//# sourceMappingURL=action-provider-registry.d.ts.map

package/dist/infrastructure/action/action-provider-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-provider-registry.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/action/action-provider-registry.ts"],"names":[],"mappings":"AAeA,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AAEtB;;;GAGG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsC;IAChE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGpB;IAEJ;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAmCzC;;;OAGG;IACH,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAazC;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAItD;;OAEG;IACH,SAAS,CACP,GAAG,EAAE,MAAM,GACV;QAAE,QAAQ,EAAE,eAAe,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,GAAG,SAAS;IAItE;;OAEG;IACH,aAAa,IAAI,sBAAsB,EAAE;IAIzC;;OAEG;IACH,WAAW,CACT,YAAY,CAAC,EAAE,MAAM,GACpB;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,gBAAgB,CAAA;KAAE,EAAE;IAUvD;;OAEG;IACH,oBAAoB,IAAI;QACtB,QAAQ,EAAE,eAAe,CAAC;QAC1B,MAAM,EAAE,gBAAgB,CAAC;KAC1B,EAAE;IAUH;;;;;;;;;;OAUG;IACG,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,mBAAmB,CAAC;IAwC/B;;;;;OAKG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAgClD;;OAEG;YACW,gBAAgB;CAyD/B"}