@waiaas/daemon 2.0.0-rc.1

package/dist/infrastructure/action/action-provider-registry.js

@@ -0,0 +1,239 @@
+/**
+ * ActionProviderRegistry -- manages IActionProvider registration, lookup, and execution.
+ *
+ * Responsibilities:
+ * 1. Register/unregister IActionProvider implementations with Zod validation
+ * 2. Look up providers and actions by name (providerName/actionName key format)
+ * 3. Execute resolve() with input validation + return value re-validation
+ * 4. Load ESM plugins from ~/.waiaas/actions/ directory
+ *
+ * Design source: doc 62 (action-provider-architecture).
+ */
+import { readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { readFile } from 'node:fs/promises';
+import { WAIaaSError, ContractCallRequestSchema, ActionProviderMetadataSchema, ActionDefinitionSchema, } from '@waiaas/core';
+/**
+ * ActionProviderRegistry manages provider registration, action lookup,
+ * and resolve() execution with schema validation.
+ */
+export class ActionProviderRegistry {
+    providers = new Map();
+    actions = new Map();
+    /**
+     * Register an IActionProvider implementation.
+     * Validates metadata and action definitions with Zod schemas.
+     * Checks inputSchema duck typing (parse/safeParse functions).
+     * @throws WAIaaSError('ACTION_NAME_CONFLICT') if provider name is already registered.
+     */
+    register(provider) {
+        // Validate metadata via Zod SSoT
+        const metadata = ActionProviderMetadataSchema.parse(provider.metadata);
+        // Check name conflict
+        if (this.providers.has(metadata.name)) {
+            throw new WAIaaSError('ACTION_NAME_CONFLICT', {
+                message: `Action provider '${metadata.name}' is already registered`,
+                details: { providerName: metadata.name },
+            });
+        }
+        // Validate each action definition
+        for (const action of provider.actions) {
+            ActionDefinitionSchema.parse(action);
+            // Duck-typing validation for inputSchema (cross-zod-version compatibility)
+            if (typeof action.inputSchema?.parse !== 'function' ||
+                typeof action.inputSchema?.safeParse !== 'function') {
+                throw new WAIaaSError('ACTION_VALIDATION_FAILED', {
+                    message: `Action '${action.name}' inputSchema must have parse() and safeParse() methods`,
+                    details: { providerName: metadata.name, actionName: action.name },
+                });
+            }
+            // Register action with providerName/actionName key
+            const actionKey = `${metadata.name}/${action.name}`;
+            this.actions.set(actionKey, { provider, action });
+        }
+        this.providers.set(metadata.name, provider);
+    }
+    /**
+     * Unregister a provider and all its actions.
+     * @returns true if the provider was found and removed, false otherwise.
+     */
+    unregister(providerName) {
+        const provider = this.providers.get(providerName);
+        if (!provider)
+            return false;
+        // Remove all actions belonging to this provider
+        for (const action of provider.actions) {
+            this.actions.delete(`${providerName}/${action.name}`);
+        }
+        this.providers.delete(providerName);
+        return true;
+    }
+    /**
+     * Get a registered provider by name.
+     */
+    getProvider(name) {
+        return this.providers.get(name);
+    }
+    /**
+     * Get an action entry by key (providerName/actionName).
+     */
+    getAction(key) {
+        return this.actions.get(key);
+    }
+    /**
+     * List metadata for all registered providers.
+     */
+    listProviders() {
+        return Array.from(this.providers.values()).map((p) => p.metadata);
+    }
+    /**
+     * List actions, optionally filtered by provider name.
+     */
+    listActions(providerName) {
+        const result = [];
+        for (const [key, entry] of this.actions) {
+            const pName = key.split('/')[0] ?? key;
+            if (providerName && pName !== providerName)
+                continue;
+            result.push({ providerName: pName, action: entry.action });
+        }
+        return result;
+    }
+    /**
+     * Get actions from providers with mcpExpose=true.
+     */
+    getMcpExposedActions() {
+        const result = [];
+        for (const entry of this.actions.values()) {
+            if (entry.provider.metadata.mcpExpose) {
+                result.push(entry);
+            }
+        }
+        return result;
+    }
+    /**
+     * Execute an action's resolve() with full validation pipeline:
+     * 1. Lookup action by key
+     * 2. Validate input params via action.inputSchema.parse()
+     * 3. Call provider.resolve()
+     * 4. Re-validate result via ContractCallRequestSchema.parse()
+     *
+     * @throws WAIaaSError('ACTION_NOT_FOUND') if action key not found
+     * @throws WAIaaSError('ACTION_VALIDATION_FAILED') if input validation fails
+     * @throws WAIaaSError('ACTION_RETURN_INVALID') if resolve() return value is invalid
+     */
+    async executeResolve(actionKey, params, context) {
+        // 1. Lookup action
+        const entry = this.actions.get(actionKey);
+        if (!entry) {
+            throw new WAIaaSError('ACTION_NOT_FOUND', {
+                message: `Action '${actionKey}' not found`,
+                details: { actionKey },
+            });
+        }
+        // 2. Validate input params
+        try {
+            entry.action.inputSchema.parse(params);
+        }
+        catch (err) {
+            throw new WAIaaSError('ACTION_VALIDATION_FAILED', {
+                message: `Input validation failed for action '${actionKey}'`,
+                details: { actionKey, validationErrors: err.message },
+                cause: err,
+            });
+        }
+        // 3. Call provider.resolve()
+        const result = await entry.provider.resolve(entry.action.name, params, context);
+        // 4. Re-validate return value (prevent policy bypass)
+        try {
+            return ContractCallRequestSchema.parse(result);
+        }
+        catch (err) {
+            throw new WAIaaSError('ACTION_RETURN_INVALID', {
+                message: `Resolve return value schema validation failed for action '${actionKey}'`,
+                details: { actionKey },
+                cause: err,
+            });
+        }
+    }
+    /**
+     * Load ESM plugins from a directory. Each subdirectory is a plugin.
+     * Individual plugin failures are logged and skipped (fail-open).
+     *
+     * @returns Object with loaded/failed plugin names.
+     */
+    async loadPlugins(actionsDir) {
+        const loaded = [];
+        const failed = [];
+        let entries;
+        try {
+            entries = await readdir(actionsDir, { withFileTypes: true });
+        }
+        catch {
+            // Directory doesn't exist or not readable -- not an error
+            return { loaded, failed };
+        }
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            try {
+                await this.loadSinglePlugin(join(actionsDir, entry.name), entry.name);
+                loaded.push(entry.name);
+            }
+            catch (error) {
+                console.warn(`Plugin load failed (skipped): ${entry.name}`, error instanceof Error ? error.message : error);
+                failed.push(entry.name);
+            }
+        }
+        return { loaded, failed };
+    }
+    /**
+     * Load a single ESM plugin from a directory.
+     */
+    async loadSinglePlugin(pluginDir, pluginName) {
+        // 1. Read package.json
+        const pkgPath = join(pluginDir, 'package.json');
+        let pkg;
+        try {
+            const raw = await readFile(pkgPath, 'utf-8');
+            pkg = JSON.parse(raw);
+        }
+        catch {
+            throw new Error(`Plugin '${pluginName}': package.json not found or invalid`);
+        }
+        // Verify ESM module
+        if (pkg.type !== 'module') {
+            throw new Error(`Plugin '${pluginName}': package.json must have "type": "module"`);
+        }
+        // 2. Determine entry point
+        const mainFile = pkg.main || 'index.js';
+        const mainPath = join(pluginDir, mainFile);
+        // 3. ESM dynamic import via file:// URL
+        const moduleUrl = pathToFileURL(mainPath).href;
+        const module = await import(moduleUrl);
+        // 4. Extract default export
+        let provider;
+        const defaultExport = module.default;
+        if (!defaultExport) {
+            throw new Error(`Plugin '${pluginName}': no default export found`);
+        }
+        // Handle class (constructor), factory function, or plain object
+        if (typeof defaultExport === 'function') {
+            try {
+                // Try as constructor (class)
+                provider = new defaultExport();
+            }
+            catch {
+                // Fall back to factory function
+                provider = defaultExport();
+            }
+        }
+        else {
+            provider = defaultExport;
+        }
+        // 5. Register (validates metadata/actions via Zod)
+        this.register(provider);
+    }
+}
+//# sourceMappingURL=action-provider-registry.js.map

package/dist/infrastructure/action/action-provider-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-provider-registry.js","sourceRoot":"","sources":["../../../src/infrastructure/action/action-provider-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EACL,WAAW,EACX,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,GAMvB,MAAM,cAAc,CAAC;AAEtB;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAChB,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/C,OAAO,GAAG,IAAI,GAAG,EAG/B,CAAC;IAEJ;;;;;OAKG;IACH,QAAQ,CAAC,QAAyB;QAChC,iCAAiC;QACjC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvE,sBAAsB;QACtB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE;gBAC5C,OAAO,EAAE,oBAAoB,QAAQ,CAAC,IAAI,yBAAyB;gBACnE,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;aACzC,CAAC,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtC,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAErC,2EAA2E;YAC3E,IACE,OAAO,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,UAAU;gBAC/C,OAAO,MAAM,CAAC,WAAW,EAAE,SAAS,KAAK,UAAU,EACnD,CAAC;gBACD,MAAM,IAAI,WAAW,CAAC,0BAA0B,EAAE;oBAChD,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,yDAAyD;oBACxF,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE;iBAClE,CAAC,CAAC;YACL,CAAC;YAED,mDAAmD;YACnD,MAAM,SAAS,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,YAAoB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE5B,gDAAgD;QAChD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,YAAY,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,SAAS,CACP,GAAW;QAEX,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,WAAW,CACT,YAAqB;QAErB,MAAM,MAAM,GAAyD,EAAE,CAAC;QACxE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YACvC,IAAI,YAAY,IAAI,KAAK,KAAK,YAAY;gBAAE,SAAS;YACrD,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,oBAAoB;QAIlB,MAAM,MAAM,GAA8D,EAAE,CAAC;QAC7E,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,cAAc,CAClB,SAAiB,EACjB,MAA+B,EAC/B,OAAsB;QAEtB,mBAAmB;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE;gBACxC,OAAO,EAAE,WAAW,SAAS,aAAa;gBAC1C,OAAO,EAAE,EAAE,SAAS,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CAAC,0BAA0B,EAAE;gBAChD,OAAO,EAAE,uCAAuC,SAAS,GAAG;gBAC5D,OAAO,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAG,GAAa,CAAC,OAAO,EAAE;gBAChE,KAAK,EAAE,GAAY;aACpB,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CACzC,KAAK,CAAC,MAAM,CAAC,IAAI,EACjB,MAAM,EACN,OAAO,CACR,CAAC;QAEF,sDAAsD;QACtD,IAAI,CAAC;YACH,OAAO,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE;gBAC7C,OAAO,EAAE,6DAA6D,SAAS,GAAG;gBAClF,OAAO,EAAE,EAAE,SAAS,EAAE;gBACtB,KAAK,EAAE,GAAY;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,UAAkB;QAElB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;YAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,gBAAgB,CACzB,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAC5B,KAAK,CAAC,IAAI,CACX,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CACV,iCAAiC,KAAK,CAAC,IAAI,EAAE,EAC7C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC/C,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAC5B,SAAiB,EACjB,UAAkB;QAElB,uBAAuB;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAChD,IAAI,GAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,sCAAsC,CAC5D,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,4CAA4C,CAClE,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE3C,wCAAwC;QACxC,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAEvC,4BAA4B;QAC5B,IAAI,QAAyB,CAAC;QAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;QAErC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,4BAA4B,CAClD,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,IAAI,OAAO,aAAa,KAAK,UAAU,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,6BAA6B;gBAC7B,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;gBAChC,QAAQ,GAAG,aAAa,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,aAAa,CAAC;QAC3B,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/infrastructure/action/api-key-store.d.ts

@@ -0,0 +1,60 @@
+/**
+ * ApiKeyStore -- encrypted storage for Action Provider API keys.
+ *
+ * Uses the same HKDF + AES-256-GCM pattern as settings-crypto.ts to
+ * encrypt API keys before DB storage and decrypt on retrieval.
+ *
+ * Each provider has a single API key row (provider_name = PK).
+ * set() performs upsert (insert or update).
+ *
+ * @see settings-crypto.ts for encryption internals
+ */
+import type { BetterSQLite3Database } from 'drizzle-orm/better-sqlite3';
+import type * as schema from '../database/schema.js';
+export interface ApiKeyListEntry {
+    providerName: string;
+    hasKey: boolean;
+    maskedKey: string | null;
+    updatedAt: Date;
+}
+export declare class ApiKeyStore {
+    private readonly db;
+    private readonly masterPassword;
+    constructor(db: BetterSQLite3Database<typeof schema>, masterPassword: string);
+    /**
+     * Store or update an API key for a provider. The key is encrypted with
+     * AES-256-GCM before storage. createdAt is set only on insert;
+     * updatedAt is always refreshed.
+     */
+    set(providerName: string, apiKey: string): void;
+    /**
+     * Retrieve and decrypt an API key for a provider.
+     * Returns null if no key is stored for this provider.
+     */
+    get(providerName: string): string | null;
+    /**
+     * Retrieve a masked version of the API key for display purposes.
+     *
+     * Masking rules:
+     * - length > 6: first 4 chars + '...' + last 2 chars
+     * - length 4-6: first 2 chars + '...'
+     * - length < 4: '****'
+     *
+     * Returns null if no key is stored for this provider.
+     */
+    getMasked(providerName: string): string | null;
+    /**
+     * Check whether a key exists for a provider (without decrypting).
+     */
+    has(providerName: string): boolean;
+    /**
+     * Delete an API key for a provider.
+     * Returns true if a row was deleted, false if no row existed.
+     */
+    delete(providerName: string): boolean;
+    /**
+     * List all stored API keys with masked values.
+     */
+    listAll(): ApiKeyListEntry[];
+}
+//# sourceMappingURL=api-key-store.d.ts.map

package/dist/infrastructure/action/api-key-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-store.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/action/api-key-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,KAAK,MAAM,MAAM,uBAAuB,CAAC;AAQrD,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;CACjB;AAMD,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,cAAc;gBADd,EAAE,EAAE,qBAAqB,CAAC,OAAO,MAAM,CAAC,EACxC,cAAc,EAAE,MAAM;IAGzC;;;;OAIG;IACH,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAsB/C;;;OAGG;IACH,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAWxC;;;;;;;;;OASG;IACH,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAM9C;;OAEG;IACH,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IAUlC;;;OAGG;IACH,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IASrC;;OAEG;IACH,OAAO,IAAI,eAAe,EAAE;CAa7B"}

package/dist/infrastructure/action/api-key-store.js

@@ -0,0 +1,130 @@
+/**
+ * ApiKeyStore -- encrypted storage for Action Provider API keys.
+ *
+ * Uses the same HKDF + AES-256-GCM pattern as settings-crypto.ts to
+ * encrypt API keys before DB storage and decrypt on retrieval.
+ *
+ * Each provider has a single API key row (provider_name = PK).
+ * set() performs upsert (insert or update).
+ *
+ * @see settings-crypto.ts for encryption internals
+ */
+import { eq } from 'drizzle-orm';
+import { apiKeys } from '../database/schema.js';
+import { encryptSettingValue, decryptSettingValue } from '../settings/settings-crypto.js';
+// ---------------------------------------------------------------------------
+// ApiKeyStore
+// ---------------------------------------------------------------------------
+export class ApiKeyStore {
+    db;
+    masterPassword;
+    constructor(db, masterPassword) {
+        this.db = db;
+        this.masterPassword = masterPassword;
+    }
+    /**
+     * Store or update an API key for a provider. The key is encrypted with
+     * AES-256-GCM before storage. createdAt is set only on insert;
+     * updatedAt is always refreshed.
+     */
+    set(providerName, apiKey) {
+        const encrypted = encryptSettingValue(apiKey, this.masterPassword);
+        const now = new Date(Math.floor(Date.now() / 1000) * 1000);
+        this.db
+            .insert(apiKeys)
+            .values({
+            providerName,
+            encryptedKey: encrypted,
+            createdAt: now,
+            updatedAt: now,
+        })
+            .onConflictDoUpdate({
+            target: apiKeys.providerName,
+            set: {
+                encryptedKey: encrypted,
+                updatedAt: now,
+            },
+        })
+            .run();
+    }
+    /**
+     * Retrieve and decrypt an API key for a provider.
+     * Returns null if no key is stored for this provider.
+     */
+    get(providerName) {
+        const row = this.db
+            .select()
+            .from(apiKeys)
+            .where(eq(apiKeys.providerName, providerName))
+            .get();
+        if (!row)
+            return null;
+        return decryptSettingValue(row.encryptedKey, this.masterPassword);
+    }
+    /**
+     * Retrieve a masked version of the API key for display purposes.
+     *
+     * Masking rules:
+     * - length > 6: first 4 chars + '...' + last 2 chars
+     * - length 4-6: first 2 chars + '...'
+     * - length < 4: '****'
+     *
+     * Returns null if no key is stored for this provider.
+     */
+    getMasked(providerName) {
+        const key = this.get(providerName);
+        if (key === null)
+            return null;
+        return maskKey(key);
+    }
+    /**
+     * Check whether a key exists for a provider (without decrypting).
+     */
+    has(providerName) {
+        const row = this.db
+            .select({ providerName: apiKeys.providerName })
+            .from(apiKeys)
+            .where(eq(apiKeys.providerName, providerName))
+            .get();
+        return row !== undefined;
+    }
+    /**
+     * Delete an API key for a provider.
+     * Returns true if a row was deleted, false if no row existed.
+     */
+    delete(providerName) {
+        const result = this.db
+            .delete(apiKeys)
+            .where(eq(apiKeys.providerName, providerName))
+            .run();
+        return result.changes > 0;
+    }
+    /**
+     * List all stored API keys with masked values.
+     */
+    listAll() {
+        const rows = this.db.select().from(apiKeys).all();
+        return rows.map((row) => {
+            const decrypted = decryptSettingValue(row.encryptedKey, this.masterPassword);
+            return {
+                providerName: row.providerName,
+                hasKey: true,
+                maskedKey: maskKey(decrypted),
+                updatedAt: row.updatedAt,
+            };
+        });
+    }
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function maskKey(key) {
+    if (key.length > 6) {
+        return key.slice(0, 4) + '...' + key.slice(-2);
+    }
+    if (key.length >= 4) {
+        return key.slice(0, 2) + '...';
+    }
+    return '****';
+}
+//# sourceMappingURL=api-key-store.js.map

package/dist/infrastructure/action/api-key-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-store.js","sourceRoot":"","sources":["../../../src/infrastructure/action/api-key-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAa1F,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,OAAO,WAAW;IAEH;IACA;IAFnB,YACmB,EAAwC,EACxC,cAAsB;QADtB,OAAE,GAAF,EAAE,CAAsC;QACxC,mBAAc,GAAd,cAAc,CAAQ;IACtC,CAAC;IAEJ;;;;OAIG;IACH,GAAG,CAAC,YAAoB,EAAE,MAAc;QACtC,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAE3D,IAAI,CAAC,EAAE;aACJ,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC;YACN,YAAY;YACZ,YAAY,EAAE,SAAS;YACvB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE,OAAO,CAAC,YAAY;YAC5B,GAAG,EAAE;gBACH,YAAY,EAAE,SAAS;gBACvB,SAAS,EAAE,GAAG;aACf;SACF,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,YAAoB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;aAC7C,GAAG,EAAE,CAAC;QAET,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO,mBAAmB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;OASG;IACH,SAAS,CAAC,YAAoB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,YAAoB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,MAAM,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;aAC9C,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;aAC7C,GAAG,EAAE,CAAC;QAET,OAAO,GAAG,KAAK,SAAS,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,YAAoB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,MAAM,CAAC,OAAO,CAAC;aACf,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;aAC7C,GAAG,EAAE,CAAC;QAET,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;QAElD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7E,OAAO;gBACL,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;gBAC7B,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/infrastructure/action/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Action infrastructure module barrel export.
+ *
+ * Re-exports the ActionProviderRegistry for provider registration,
+ * action lookup, and ESM plugin loading.
+ */
+export { ActionProviderRegistry } from './action-provider-registry.js';
+export { ApiKeyStore } from './api-key-store.js';
+export type { ApiKeyListEntry } from './api-key-store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/infrastructure/action/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/action/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/infrastructure/action/index.js

@@ -0,0 +1,9 @@
+/**
+ * Action infrastructure module barrel export.
+ *
+ * Re-exports the ActionProviderRegistry for provider registration,
+ * action lookup, and ESM plugin loading.
+ */
+export { ActionProviderRegistry } from './action-provider-registry.js';
+export { ApiKeyStore } from './api-key-store.js';
+//# sourceMappingURL=index.js.map

package/dist/infrastructure/action/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infrastructure/action/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/infrastructure/adapter-pool.d.ts

@@ -0,0 +1,50 @@
+/**
+ * AdapterPool -- lazy-initialized, cached IChainAdapter instances keyed by chain:network.
+ *
+ * The daemon supports both Solana and EVM agents simultaneously. Instead of a single
+ * hardcoded SolanaAdapter, AdapterPool resolves the correct adapter type based on
+ * agent chain/network, reuses instances for the same network, and cleanly disconnects
+ * all on shutdown.
+ *
+ * @see Phase 84-01
+ */
+import type { IChainAdapter, ChainType, NetworkType } from '@waiaas/core';
+/**
+ * Resolve RPC URL from config rpc section for a given chain:network.
+ * Maps:
+ *   solana + 'devnet'          -> rpc.solana_devnet
+ *   ethereum + 'ethereum-sepolia' -> rpc.evm_ethereum_sepolia
+ */
+export declare function resolveRpcUrl(rpcConfig: Record<string, string>, chain: string, network: string): string;
+export declare class AdapterPool {
+    private readonly _pool;
+    /**
+     * Build cache key from chain:network.
+     */
+    private cacheKey;
+    /**
+     * Resolve (lazy-create + cache) an adapter for the given chain:network.
+     * - Solana: SolanaAdapter(network) -> connect(rpcUrl)
+     * - Ethereum: EvmAdapter(network, viemChain, nativeSymbol, nativeName) -> connect(rpcUrl)
+     * Same chain:network returns the cached instance.
+     */
+    resolve(chain: ChainType, network: NetworkType, rpcUrl: string): Promise<IChainAdapter>;
+    /**
+     * Disconnect all cached adapters and clear the pool.
+     * Individual disconnect errors are caught and logged (fail-soft).
+     */
+    disconnectAll(): Promise<void>;
+    /**
+     * Evict a cached adapter for a given chain:network.
+     * Disconnects the existing adapter and removes it from pool.
+     * Next resolve() call will create a fresh adapter with the new RPC URL.
+     */
+    evict(chain: ChainType, network: NetworkType): Promise<void>;
+    /**
+     * Evict all cached adapters. Used when multiple RPC URLs change at once.
+     */
+    evictAll(): Promise<void>;
+    /** Number of cached adapters. */
+    get size(): number;
+}
+//# sourceMappingURL=adapter-pool.d.ts.map

package/dist/infrastructure/adapter-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-pool.d.ts","sourceRoot":"","sources":["../../src/infrastructure/adapter-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAkB,MAAM,cAAc,CAAC;AAE1F;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACjC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,MAAM,CASR;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAE1D;;OAEG;IACH,OAAO,CAAC,QAAQ;IAIhB;;;;;OAKG;IACG,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA0B7F;;;OAGG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAapC;;;;OAIG;IACG,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAalE;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAI/B,iCAAiC;IACjC,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/infrastructure/adapter-pool.js

@@ -0,0 +1,110 @@
+/**
+ * AdapterPool -- lazy-initialized, cached IChainAdapter instances keyed by chain:network.
+ *
+ * The daemon supports both Solana and EVM agents simultaneously. Instead of a single
+ * hardcoded SolanaAdapter, AdapterPool resolves the correct adapter type based on
+ * agent chain/network, reuses instances for the same network, and cleanly disconnects
+ * all on shutdown.
+ *
+ * @see Phase 84-01
+ */
+/**
+ * Resolve RPC URL from config rpc section for a given chain:network.
+ * Maps:
+ *   solana + 'devnet'          -> rpc.solana_devnet
+ *   ethereum + 'ethereum-sepolia' -> rpc.evm_ethereum_sepolia
+ */
+export function resolveRpcUrl(rpcConfig, chain, network) {
+    if (chain === 'solana') {
+        const key = `solana_${network}`;
+        return rpcConfig[key] || '';
+    }
+    else if (chain === 'ethereum') {
+        const key = `evm_${network.replace(/-/g, '_')}`;
+        return rpcConfig[key] || '';
+    }
+    return '';
+}
+export class AdapterPool {
+    _pool = new Map();
+    /**
+     * Build cache key from chain:network.
+     */
+    cacheKey(chain, network) {
+        return `${chain}:${network}`;
+    }
+    /**
+     * Resolve (lazy-create + cache) an adapter for the given chain:network.
+     * - Solana: SolanaAdapter(network) -> connect(rpcUrl)
+     * - Ethereum: EvmAdapter(network, viemChain, nativeSymbol, nativeName) -> connect(rpcUrl)
+     * Same chain:network returns the cached instance.
+     */
+    async resolve(chain, network, rpcUrl) {
+        const key = this.cacheKey(chain, network);
+        const existing = this._pool.get(key);
+        if (existing)
+            return existing;
+        let adapter;
+        if (chain === 'solana') {
+            const { SolanaAdapter } = await import('@waiaas/adapter-solana');
+            adapter = new SolanaAdapter(network);
+        }
+        else if (chain === 'ethereum') {
+            const { EvmAdapter, EVM_CHAIN_MAP } = await import('@waiaas/adapter-evm');
+            const entry = EVM_CHAIN_MAP[network];
+            if (!entry) {
+                throw new Error(`No EVM chain config for network '${network}'`);
+            }
+            adapter = new EvmAdapter(network, entry.viemChain, entry.nativeSymbol, entry.nativeName);
+        }
+        else {
+            throw new Error(`Unsupported chain: ${chain}`);
+        }
+        await adapter.connect(rpcUrl);
+        this._pool.set(key, adapter);
+        return adapter;
+    }
+    /**
+     * Disconnect all cached adapters and clear the pool.
+     * Individual disconnect errors are caught and logged (fail-soft).
+     */
+    async disconnectAll() {
+        const promises = [];
+        for (const adapter of this._pool.values()) {
+            promises.push(adapter.disconnect().catch((err) => {
+                console.warn('AdapterPool disconnect warning:', err);
+            }));
+        }
+        await Promise.all(promises);
+        this._pool.clear();
+    }
+    /**
+     * Evict a cached adapter for a given chain:network.
+     * Disconnects the existing adapter and removes it from pool.
+     * Next resolve() call will create a fresh adapter with the new RPC URL.
+     */
+    async evict(chain, network) {
+        const key = this.cacheKey(chain, network);
+        const existing = this._pool.get(key);
+        if (existing) {
+            try {
+                await existing.disconnect();
+            }
+            catch (err) {
+                console.warn(`AdapterPool evict disconnect warning (${key}):`, err);
+            }
+            this._pool.delete(key);
+        }
+    }
+    /**
+     * Evict all cached adapters. Used when multiple RPC URLs change at once.
+     */
+    async evictAll() {
+        await this.disconnectAll(); // Existing method already disconnects + clears
+    }
+    /** Number of cached adapters. */
+    get size() {
+        return this._pool.size;
+    }
+}
+//# sourceMappingURL=adapter-pool.js.map

package/dist/infrastructure/adapter-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-pool.js","sourceRoot":"","sources":["../../src/infrastructure/adapter-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiC,EACjC,KAAa,EACb,OAAe;IAEf,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,UAAU,OAAO,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;SAAM,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE1D;;OAEG;IACK,QAAQ,CAAC,KAAgB,EAAE,OAAoB;QACrD,OAAO,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,KAAgB,EAAE,OAAoB,EAAE,MAAc;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,IAAI,OAAsB,CAAC;QAE3B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACjE,OAAO,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,OAAyB,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3F,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjC,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,KAAgB,EAAE,OAAoB;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,yCAAyC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,+CAA+C;IAC7E,CAAC;IAED,iCAAiC;IACjC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF"}