@windagency/valora 2.0.1

package/dist/utils/encryption.js

@@ -0,0 +1,304 @@
+/**
+ * Encryption Utility
+ *
+ * Provides AES-256-GCM encryption/decryption for sensitive data.
+ * Used for securing session data and other sensitive information.
+ *
+ * Security Features:
+ * - AES-256-GCM encryption with authentication
+ * - PBKDF2 key derivation with salt
+ * - Secure random IV generation
+ * - Tamper detection with authentication tags
+ * - Configurable key management
+ */
+import * as crypto from 'crypto';
+/**
+ * Default encryption configuration
+ */
+const DEFAULT_ENCRYPTION_OPTIONS = {
+    algorithm: 'aes-256-gcm',
+    // 256 bits salt
+    iterations: 100000, // 256 bits
+    ivLength: 12,
+    keyLength: 32, // 96 bits (GCM standard, can be any length)
+    saltLength: 32 // PBKDF2 iterations
+};
+/**
+ * Encryption Utility Class
+ *
+ * Handles encryption/decryption of sensitive data with strong cryptographic practices.
+ */
+export class EncryptionUtil {
+    masterKey;
+    options;
+    constructor(options = {}, masterKey) {
+        this.options = { ...DEFAULT_ENCRYPTION_OPTIONS, ...options };
+        this.masterKey = masterKey;
+    }
+    /**
+     * Encrypt data using AES-256-GCM
+     */
+    encrypt(data, password) {
+        try {
+            // Generate salt for key derivation
+            const salt = crypto.randomBytes(this.options.saltLength);
+            // Derive key from password using PBKDF2
+            const key = crypto.pbkdf2Sync(password ?? this.getMasterKey(), salt, this.options.iterations, this.options.keyLength, 'sha256');
+            // Generate initialization vector (nonce for GCM)
+            const iv = crypto.randomBytes(this.options.ivLength);
+            // Create cipher in GCM mode
+            const cipher = crypto.createCipheriv(this.options.algorithm, key, iv);
+            // Encrypt data
+            let encrypted = cipher.update(data, 'utf8', 'base64');
+            encrypted += cipher.final('base64');
+            // Get the authentication tag
+            const tag = cipher.getAuthTag();
+            return {
+                encrypted,
+                iv: iv.toString('base64'),
+                salt: salt.toString('base64'),
+                tag: tag.toString('base64'),
+                version: 2 // Updated version for GCM
+            };
+        }
+        catch (error) {
+            throw new Error(`Encryption failed: ${error.message}`);
+        }
+    }
+    /**
+     * Decrypt data using AES-256-GCM (v2+) or AES-256-CBC (v1) for backward compatibility
+     */
+    decrypt(encryptedData, password) {
+        try {
+            // Decode encrypted components
+            const encrypted = Buffer.from(encryptedData.encrypted, 'base64');
+            const salt = Buffer.from(encryptedData.salt, 'base64');
+            const iv = Buffer.from(encryptedData.iv, 'base64');
+            // Derive key from password using PBKDF2
+            const key = crypto.pbkdf2Sync(password ?? this.getMasterKey(), salt, this.options.iterations, this.options.keyLength, 'sha256');
+            // Handle backward compatibility: v1 uses CBC, v2+ uses GCM
+            if (this.isGCMData(encryptedData)) {
+                // GCM mode (current)
+                const decipher = crypto.createDecipheriv(this.options.algorithm, key, iv);
+                // Set authentication tag for integrity verification
+                const tag = Buffer.from(encryptedData.tag, 'base64');
+                decipher.setAuthTag(tag);
+                // Decrypt data
+                let decrypted = decipher.update(encrypted).toString('utf8');
+                decrypted += decipher.final('utf8');
+                return {
+                    data: decrypted,
+                    success: true
+                };
+            }
+            else {
+                // CBC mode (legacy v1) - maintain backward compatibility
+                const decipher = crypto.createDecipheriv('aes-256-cbc', key, iv);
+                // Decrypt data
+                let decrypted = decipher.update(encrypted).toString('utf8');
+                decrypted += decipher.final('utf8');
+                return {
+                    data: decrypted,
+                    success: true
+                };
+            }
+        }
+        catch (error) {
+            return {
+                error: `Decryption failed: ${error.message}`,
+                success: false
+            };
+        }
+    }
+    /**
+     * Encrypt sensitive fields in an object
+     */
+    encryptObjectFields(obj, sensitiveFields, password) {
+        const encrypted = { ...obj };
+        sensitiveFields.forEach((field) => {
+            if (field in encrypted && typeof encrypted[field] === 'string') {
+                const value = encrypted[field];
+                if (value) {
+                    encrypted[field] = this.encrypt(value, password);
+                }
+            }
+        });
+        return encrypted;
+    }
+    /**
+     * Decrypt sensitive fields in an object
+     */
+    decryptObjectFields(obj, sensitiveFields, password) {
+        const decrypted = { ...obj };
+        sensitiveFields.forEach((field) => {
+            if (field in decrypted) {
+                const value = decrypted[field];
+                if (this.isEncryptedData(value)) {
+                    const result = this.decrypt(value, password);
+                    if (result.success && result.data) {
+                        decrypted[field] = result.data;
+                    }
+                    else {
+                        throw new Error(`Failed to decrypt field ${field}: ${result.error ?? 'Unknown error'}`);
+                    }
+                }
+            }
+        });
+        return decrypted;
+    }
+    /**
+     * Check if data looks like encrypted data
+     */
+    isEncryptedData(data) {
+        return (typeof data === 'object' &&
+            data !== null &&
+            'encrypted' in data &&
+            'iv' in data &&
+            'salt' in data &&
+            'version' in data &&
+            typeof data.encrypted === 'string' &&
+            typeof data.iv === 'string' &&
+            typeof data.salt === 'string' &&
+            typeof data.version === 'number');
+    }
+    /**
+     * Check if encrypted data uses GCM (version 2+) or legacy CBC (version 1)
+     */
+    isGCMData(encryptedData) {
+        return encryptedData.version >= 2 && !!encryptedData.tag;
+    }
+    /**
+     * Get or generate master key
+     * In production, this should be loaded from secure key management
+     */
+    getMasterKey() {
+        if (this.masterKey) {
+            return this.masterKey;
+        }
+        // Generate a master key from environment or fallback
+        // In production, use a proper KMS or secure key storage
+        const envKey = process.env['AI_ENCRYPTION_KEY'];
+        if (envKey && envKey.length >= 32) {
+            this.masterKey = envKey;
+            return this.masterKey;
+        }
+        // Fallback: derive from machine-specific data (not secure for production!)
+        const machineId = process.env['COMPUTERNAME'] ?? process.env['HOSTNAME'] ?? 'localhost';
+        const appId = 'ai-orchestrator-session-encryption';
+        const combined = `${machineId}:${appId}:${Date.now()}`;
+        // Use PBKDF2 to derive a consistent key from machine data
+        this.masterKey = crypto
+            .pbkdf2Sync(combined, 'ai-orchestrator-salt', 10000, this.options.keyLength, 'sha256')
+            .toString('hex');
+        return this.masterKey;
+    }
+    /**
+     * Generate a secure random password/key
+     */
+    static generateSecureKey(length = 32) {
+        return crypto.randomBytes(length).toString('hex');
+    }
+    /**
+     * Validate encryption configuration
+     */
+    validateConfig() {
+        const errors = [];
+        try {
+            // Test encryption/decryption cycle
+            const testData = 'test encryption data';
+            const encrypted = this.encrypt(testData);
+            const decrypted = this.decrypt(encrypted);
+            if (!decrypted.success || decrypted.data !== testData) {
+                errors.push('Encryption/decryption cycle failed');
+            }
+            // Test with master key
+            const masterKey = this.getMasterKey();
+            if (masterKey.length < this.options.keyLength * 2) {
+                // Hex encoded
+                errors.push('Master key is too short');
+            }
+        }
+        catch (error) {
+            errors.push(`Encryption configuration error: ${error.message}`);
+        }
+        return {
+            errors,
+            valid: errors.length === 0
+        };
+    }
+}
+// Sensitive fields that should be encrypted in sessions
+export const SENSITIVE_SESSION_FIELDS = [
+    'apiKey',
+    'apikey',
+    'api_key',
+    'token',
+    'bearer',
+    'authorization',
+    'auth',
+    'password',
+    'pwd',
+    'pass',
+    'secret',
+    'key',
+    'credential',
+    'credentials',
+    'privateKey',
+    'private_key',
+    'secretKey',
+    'secret_key',
+    'accessToken',
+    'access_token',
+    'refreshToken',
+    'refresh_token',
+    'sessionToken',
+    'session_token',
+    'databaseUrl',
+    'database_url',
+    'dbUrl',
+    'db_url',
+    'connectionString',
+    'connection_string',
+    'connString',
+    'conn_string'
+];
+// Singleton instance for global use
+let globalEncryptionUtil = null;
+/**
+ * Get the global encryption utility instance
+ */
+export function getEncryptionUtil(options, masterKey) {
+    globalEncryptionUtil ??= new EncryptionUtil(options, masterKey);
+    return globalEncryptionUtil;
+}
+/**
+ * Set a custom global encryption utility instance
+ */
+export function setEncryptionUtil(util) {
+    globalEncryptionUtil = util;
+}
+/**
+ * Encrypt sensitive session data
+ */
+export function encryptSessionData(sessionData) {
+    return getEncryptionUtil().encryptObjectFields(sessionData, SENSITIVE_SESSION_FIELDS);
+}
+/**
+ * Decrypt sensitive session data
+ */
+export function decryptSessionData(sessionData) {
+    return getEncryptionUtil().decryptObjectFields(sessionData, SENSITIVE_SESSION_FIELDS);
+}
+/**
+ * Encrypt a single value
+ */
+export function encryptValue(value) {
+    return getEncryptionUtil().encrypt(value);
+}
+/**
+ * Decrypt a single value
+ */
+export function decryptValue(encryptedData) {
+    return getEncryptionUtil().decrypt(encryptedData);
+}
+//# sourceMappingURL=encryption.js.map

package/dist/utils/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/utils/encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAsCjC;;GAEG;AACH,MAAM,0BAA0B,GAAgC;IAC/D,SAAS,EAAE,aAAa;IACxB,gBAAgB;IAChB,UAAU,EAAE,MAAM,EAAE,WAAW;IAC/B,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,EAAE,EAAE,4CAA4C;IAC3D,UAAU,EAAE,EAAE,CAAC,oBAAoB;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAClB,SAAS,CAAU;IACnB,OAAO,CAA8B;IAE7C,YAAY,UAA6B,EAAE,EAAE,SAAkB;QAC9D,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,0BAA0B,EAAE,GAAG,OAAO,EAAE,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY,EAAE,QAAiB;QACtC,IAAI,CAAC;YACJ,mCAAmC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAEzD,wCAAwC;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAC5B,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,EAC/B,IAAI,EACJ,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,QAAQ,CACR,CAAC;YAEF,iDAAiD;YACjD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAErD,4BAA4B;YAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAc,CAAC;YAEnF,eAAe;YACf,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACtD,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAEpC,6BAA6B;YAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEhC,OAAO;gBACN,SAAS;gBACT,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACzB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC7B,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC3B,OAAO,EAAE,CAAC,CAAC,0BAA0B;aACrC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,sBAAuB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;IACF,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,aAA4B,EAAE,QAAiB;QACtD,IAAI,CAAC;YACJ,8BAA8B;YAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEnD,wCAAwC;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAC5B,QAAQ,IAAI,IAAI,CAAC,YAAY,EAAE,EAC/B,IAAI,EACJ,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,QAAQ,CACR,CAAC;YAEF,2DAA2D;YAC3D,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnC,qBAAqB;gBACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAgB,CAAC;gBAEzF,oDAAoD;gBACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAI,EAAE,QAAQ,CAAC,CAAC;gBACtD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAEzB,eAAe;gBACf,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAEpC,OAAO;oBACN,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI;iBACb,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,yDAAyD;gBACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;gBAEjE,eAAe;gBACf,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAEpC,OAAO;oBACN,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI;iBACb,CAAC;YACH,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,KAAK,EAAE,sBAAuB,KAAe,CAAC,OAAO,EAAE;gBACvD,OAAO,EAAE,KAAK;aACd,CAAC;QACH,CAAC;IACF,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAoC,GAAM,EAAE,eAAyB,EAAE,QAAiB;QAC1G,MAAM,SAAS,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAC;QAEtD,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,KAAK,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAChE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAW,CAAC;gBACzC,IAAI,KAAK,EAAE,CAAC;oBACX,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAClD,CAAC;YACF,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,OAAO,SAAc,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAoC,GAAM,EAAE,eAAyB,EAAE,QAAiB;QAC1G,MAAM,SAAS,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAC;QAEtD,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAsB,EAAE,QAAQ,CAAC,CAAC;oBAC9D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;wBACnC,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;oBAChC,CAAC;yBAAM,CAAC;wBACP,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;oBACzF,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,OAAO,SAAc,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,IAAa;QACpC,OAAO,CACN,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,WAAW,IAAI,IAAI;YACnB,IAAI,IAAI,IAAI;YACZ,MAAM,IAAI,IAAI;YACd,SAAS,IAAI,IAAI;YACjB,OAAQ,IAAsB,CAAC,SAAS,KAAK,QAAQ;YACrD,OAAQ,IAAsB,CAAC,EAAE,KAAK,QAAQ;YAC9C,OAAQ,IAAsB,CAAC,IAAI,KAAK,QAAQ;YAChD,OAAQ,IAAsB,CAAC,OAAO,KAAK,QAAQ,CACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,aAA4B;QAC7C,OAAO,aAAa,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACK,YAAY;QACnB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,SAAS,CAAC;QACvB,CAAC;QAED,qDAAqD;QACrD,wDAAwD;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAChD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YACxB,OAAO,IAAI,CAAC,SAAS,CAAC;QACvB,CAAC;QAED,2EAA2E;QAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC;QACxF,MAAM,KAAK,GAAG,oCAAoC,CAAC;QACnD,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAEvD,0DAA0D;QAC1D,IAAI,CAAC,SAAS,GAAG,MAAM;aACrB,UAAU,CAAC,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC;aACrF,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElB,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,SAAiB,EAAE;QAC3C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,cAAc;QACb,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,CAAC;YACJ,mCAAmC;YACnC,MAAM,QAAQ,GAAG,sBAAsB,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE1C,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YACnD,CAAC;YAED,uBAAuB;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACtC,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBACnD,cAAc;gBACd,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,mCAAoC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO;YACN,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;SAC1B,CAAC;IACH,CAAC;CACD;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,eAAe;IACf,MAAM;IACN,UAAU;IACV,KAAK;IACL,MAAM;IACN,QAAQ;IACR,KAAK;IACL,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,WAAW;IACX,YAAY;IACZ,aAAa;IACb,cAAc;IACd,cAAc;IACd,eAAe;IACf,cAAc;IACd,eAAe;IACf,aAAa;IACb,cAAc;IACd,OAAO;IACP,QAAQ;IACR,kBAAkB;IAClB,mBAAmB;IACnB,YAAY;IACZ,aAAa;CACb,CAAC;AAEF,oCAAoC;AACpC,IAAI,oBAAoB,GAA0B,IAAI,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B,EAAE,SAAkB;IAChF,oBAAoB,KAAK,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChE,OAAO,oBAAoB,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAoB;IACrD,oBAAoB,GAAG,IAAI,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAoC,WAAc;IACnF,OAAO,iBAAiB,EAAE,CAAC,mBAAmB,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;AACvF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAoC,WAAc;IACnF,OAAO,iBAAiB,EAAE,CAAC,mBAAmB,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;AACvF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACzC,OAAO,iBAAiB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,aAA4B;IACxD,OAAO,iBAAiB,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AACnD,CAAC"}

package/dist/utils/environment.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Environment detection utilities
+ *
+ * Provides functions to detect various runtime environments and their constraints.
+ */
+/**
+ * Check if we're running in a sandboxed environment
+ * Sandboxed environments have restricted access to file system and network
+ */
+export declare function isSandboxedEnvironment(): boolean;
+/**
+ * Check if we're in a test environment where we want strict error handling
+ * (as opposed to production sandboxed environments where we want graceful degradation)
+ */
+export declare function isTestEnvironment(): boolean;
+/**
+ * Check if we should gracefully handle file system errors
+ * (test environments should throw errors for proper testing)
+ */
+export declare function shouldGracefullyHandleFileErrors(): boolean;
+/**
+ * Check if network access is restricted
+ */
+export declare function isNetworkRestricted(): boolean;
+/**
+ * Check if we're in a development environment
+ */
+export declare function isDevelopmentEnvironment(): boolean;
+/**
+ * Check if we're in a production environment
+ */
+export declare function isProductionEnvironment(): boolean;
+/**
+ * Get environment summary for logging/debugging
+ */
+export declare function getEnvironmentSummary(): Record<string, unknown>;
+//# sourceMappingURL=environment.d.ts.map

package/dist/utils/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/utils/environment.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAwBhD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAO3C;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,IAAI,OAAO,CAE1D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAM7C;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,OAAO,CAElD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAe/D"}

package/dist/utils/environment.js

@@ -0,0 +1,87 @@
+/**
+ * Environment detection utilities
+ *
+ * Provides functions to detect various runtime environments and their constraints.
+ */
+import { accessSync, constants } from 'fs';
+/**
+ * Check if we're running in a sandboxed environment
+ * Sandboxed environments have restricted access to file system and network
+ */
+export function isSandboxedEnvironment() {
+    // MCP/Cursor environment
+    if (process.env['AI_MCP_ENABLED'] === 'true') {
+        return true;
+    }
+    // Test environment - tests need actual errors for validation
+    // if (process.env['NODE_ENV'] === 'test') {
+    // 	return true;
+    // }
+    // CI environment
+    if (process.env['CI'] === 'true') {
+        return true;
+    }
+    // Check for restricted file system access (common in containers/sandboxes)
+    try {
+        accessSync('/tmp', constants.W_OK);
+    }
+    catch {
+        return true; // Can't write to /tmp, likely sandboxed
+    }
+    return false;
+}
+/**
+ * Check if we're in a test environment where we want strict error handling
+ * (as opposed to production sandboxed environments where we want graceful degradation)
+ */
+export function isTestEnvironment() {
+    return (process.env['NODE_ENV'] === 'test' ||
+        process.env['VITEST'] === 'true' ||
+        process.argv.some((arg) => arg.includes('vitest')) ||
+        process.argv.some((arg) => arg.includes('jest')));
+}
+/**
+ * Check if we should gracefully handle file system errors
+ * (test environments should throw errors for proper testing)
+ */
+export function shouldGracefullyHandleFileErrors() {
+    return isSandboxedEnvironment() && !isTestEnvironment();
+}
+/**
+ * Check if network access is restricted
+ */
+export function isNetworkRestricted() {
+    return (isSandboxedEnvironment() ||
+        process.env['AI_NETWORK_RESTRICTED'] === 'true' ||
+        (!process.env['AI_OPENAI_API_KEY'] && !process.env['AI_ANTHROPIC_API_KEY'] && !process.env['AI_GOOGLE_API_KEY']));
+}
+/**
+ * Check if we're in a development environment
+ */
+export function isDevelopmentEnvironment() {
+    return process.env['NODE_ENV'] === 'development' || process.env['NODE_ENV'] === undefined; // Default to development
+}
+/**
+ * Check if we're in a production environment
+ */
+export function isProductionEnvironment() {
+    return process.env['NODE_ENV'] === 'production';
+}
+/**
+ * Get environment summary for logging/debugging
+ */
+export function getEnvironmentSummary() {
+    return {
+        ci: process.env['CI'] === 'true',
+        development: isDevelopmentEnvironment(),
+        hasApiKeys: !!(process.env['AI_OPENAI_API_KEY'] ??
+            process.env['AI_ANTHROPIC_API_KEY'] ??
+            process.env['AI_GOOGLE_API_KEY']),
+        mcp: process.env['AI_MCP_ENABLED'] === 'true',
+        networkRestricted: isNetworkRestricted(),
+        nodeEnv: process.env['NODE_ENV'],
+        production: isProductionEnvironment(),
+        sandboxed: isSandboxedEnvironment()
+    };
+}
+//# sourceMappingURL=environment.js.map

package/dist/utils/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/utils/environment.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACrC,yBAAyB;IACzB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,6DAA6D;IAC7D,4CAA4C;IAC5C,gBAAgB;IAChB,IAAI;IAEJ,iBAAiB;IACjB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC;QACJ,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC,CAAC,wCAAwC;IACtD,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAChC,OAAO,CACN,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM;QAClC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM;QAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAChD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC;IAC/C,OAAO,sBAAsB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IAClC,OAAO,CACN,sBAAsB,EAAE;QACxB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,MAAM;QAC/C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAChH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC,CAAC,yBAAyB;AACrH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACpC,OAAO;QACN,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM;QAChC,WAAW,EAAE,wBAAwB,EAAE;QACvC,UAAU,EAAE,CAAC,CAAC,CACb,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAChC;QACD,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM;QAC7C,iBAAiB,EAAE,mBAAmB,EAAE;QACxC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAChC,UAAU,EAAE,uBAAuB,EAAE;QACrC,SAAS,EAAE,sBAAsB,EAAE;KACnC,CAAC;AACH,CAAC"}

package/dist/utils/error-handler.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Enhanced Error Handling System
+ *
+ * Provides comprehensive error classification, recovery mechanisms,
+ * and standardized error handling patterns.
+ */
+export interface ErrorContext {
+    component: string;
+    duration?: number;
+    metadata?: Record<string, unknown>;
+    operation: string;
+    requestId?: string;
+    retryCount?: number;
+    sessionId?: string;
+    timestamp: Date;
+    userId?: string;
+}
+export interface RecoveryStrategy {
+    backoffMs?: number;
+    fallbackValue?: unknown;
+    maxRetries?: number;
+    timeoutMs?: number;
+    type: 'circuit-breaker' | 'degradation' | 'fallback' | 'retry';
+}
+export declare class BaseError extends Error {
+    readonly code: string;
+    readonly cause?: Error;
+    readonly context: ErrorContext;
+    readonly details?: Record<string, unknown>;
+    readonly docsLink?: string;
+    readonly fixSuggestions?: string[];
+    readonly recovery?: RecoveryStrategy;
+    readonly userMessage?: string;
+    constructor(message: string, code: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, recovery?: RecoveryStrategy, cause?: Error, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class ConfigurationError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class ExecutionError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, recovery?: RecoveryStrategy, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class NetworkError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, recovery?: RecoveryStrategy, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class ProviderError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, recovery?: RecoveryStrategy, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class ResourceError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, recovery?: RecoveryStrategy, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class SecurityError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class SessionError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class TimeoutError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, recovery?: RecoveryStrategy, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+export declare class ValidationError extends BaseError {
+    constructor(message: string, details?: Record<string, unknown>, context?: Partial<ErrorContext>, userMessage?: string, fixSuggestions?: string[], docsLink?: string);
+}
+/**
+ * Circuit Breaker State
+ */
+export type CircuitState = 'closed' | 'half-open' | 'open';
+/**
+ * Circuit Breaker for external service calls
+ */
+export declare class CircuitBreaker {
+    private readonly failureThreshold;
+    private readonly recoveryTimeoutMs;
+    private failureCount;
+    private nextAttemptTime;
+    private state;
+    constructor(failureThreshold?: number, recoveryTimeoutMs?: number);
+    /**
+     * Execute operation with circuit breaker protection
+     */
+    execute<T>(operation: () => Promise<T>, context?: Partial<ErrorContext>): Promise<T>;
+    getFailureCount(): number;
+    getState(): CircuitState;
+    private onFailure;
+    private onSuccess;
+}
+/**
+ * Retry utility with exponential backoff
+ */
+export declare function withRetry<T>(operation: () => Promise<T>, options: {
+    backoffFactor?: number;
+    baseDelayMs?: number;
+    context?: Partial<ErrorContext>;
+    maxDelayMs?: number;
+    maxRetries?: number;
+    retryCondition?: (error: Error) => boolean;
+}): Promise<T>;
+/**
+ * Safe async operation wrapper
+ */
+export declare function safeAsync<T>(operation: () => Promise<T>, fallback?: T, context?: Partial<ErrorContext>): Promise<T | undefined>;
+/**
+ * Safe synchronous operation wrapper
+ */
+export declare function safeSync<T>(operation: () => T, fallback?: T, context?: Partial<ErrorContext>): T | undefined;
+/**
+ * Create error context helper
+ */
+export declare function createErrorContext(component: string, operation: string, additionalContext?: Record<string, unknown>): Partial<ErrorContext>;
+/**
+ * Format error for display with enhanced context
+ */
+export declare function formatError(error: Error): string;
+export { formatErrorMessage } from './error-utils.js';
+/**
+ * Check if error is retriable (enhanced version)
+ */
+export declare function isRetriableError(error: Error): boolean;
+/**
+ * Check if error should trigger circuit breaker
+ */
+export declare function isCircuitBreakerError(error: Error): boolean;
+/**
+ * Get or create circuit breaker for a service
+ */
+export declare function getCircuitBreaker(serviceName: string): CircuitBreaker;
+/**
+ * Execute operation with circuit breaker protection
+ */
+export declare function withCircuitBreaker<T>(serviceName: string, operation: () => Promise<T>, context?: Partial<ErrorContext>): Promise<T>;
+//# sourceMappingURL=error-handler.d.ts.map

package/dist/utils/error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../src/utils/error-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,YAAY;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,iBAAiB,GAAG,aAAa,GAAG,UAAU,GAAG,OAAO,CAAC;CAC/D;AAED,qBAAa,SAAU,SAAQ,KAAK;aAWlB,IAAI,EAAE,MAAM;IAV7B,SAAyB,KAAK,CAAC,EAAE,KAAK,CAAC;IACvC,SAAgB,OAAO,EAAE,YAAY,CAAC;IACtC,SAAgB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,SAAgB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClC,SAAgB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1C,SAAgB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5C,SAAgB,WAAW,CAAC,EAAE,MAAM,CAAC;gBAGpC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,KAAK,CAAC,EAAE,KAAK,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAyBlB;AAED,qBAAa,kBAAmB,SAAQ,SAAS;gBAE/C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAclB;AAED,qBAAa,cAAe,SAAQ,SAAS;gBAE3C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAIlB;AAED,qBAAa,YAAa,SAAQ,SAAS;gBAEzC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAmBlB;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAE1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAmBlB;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAE1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAkBlB;AAED,qBAAa,aAAc,SAAQ,SAAS;gBAE1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAUlB;AAED,qBAAa,YAAa,SAAQ,SAAS;gBAEzC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAIlB;AAED,qBAAa,YAAa,SAAQ,SAAS;gBAEzC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAmBlB;AAED,qBAAa,eAAgB,SAAQ,SAAS;gBAE5C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,EAC/B,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,QAAQ,CAAC,EAAE,MAAM;CAIlB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAC;AAE3D;;GAEG;AACH,qBAAa,cAAc;IAMzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IANnC,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,KAAK,CAA0B;gBAGrB,gBAAgB,GAAE,MAAU,EAC5B,iBAAiB,GAAE,MAAc;IAGnD;;OAEG;IACG,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAsB1F,eAAe,IAAI,MAAM;IAIzB,QAAQ,IAAI,YAAY;IAIxB,OAAO,CAAC,SAAS;IAgBjB,OAAO,CAAC,SAAS;CAIjB;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAChC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE;IACR,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;CAC3C,GACC,OAAO,CAAC,CAAC,CAAC,CAwCZ;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAChC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,QAAQ,CAAC,EAAE,CAAC,EACZ,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC7B,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAQxB;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,SAAS,CAQ5G;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CACjC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzC,OAAO,CAAC,YAAY,CAAC,CAOvB;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAqBhD;AAGD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAqBtD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAgB3D;AAKD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CAKrE;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACzC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC,CAGZ"}