aimeat 1.2.0

package/dist/src/routes/setup.js

@@ -0,0 +1,243 @@
+import { Router } from 'express';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { generateKeyPair } from '../auth/keypair.js';
+import { issueJWT } from '../auth/jwt.js';
+import { success, error } from '../middleware/envelope.js';
+import { validateOwnerName, buildGAII } from '../utils/gaii.js';
+import { hashPassword } from '../services/password.js';
+import { logger } from '../utils/logger.js';
+const __dirname_setup = dirname(fileURLToPath(import.meta.url));
+/** Resolve a file from public/ directory (works from both src/ and dist/). */
+function resolvePublicFile(filename) {
+    const candidates = [
+        join(__dirname_setup, '..', '..', 'public', filename), // dev: src/routes/../../public
+        join(__dirname_setup, '..', '..', '..', 'public', filename), // dist: dist/src/routes/../../../public
+    ];
+    for (const p of candidates) {
+        if (existsSync(p))
+            return p;
+    }
+    return null;
+}
+export function setupRouter(config, storage, onSetupComplete) {
+    const router = Router();
+    // Phase 1.2 — IP restriction for setup endpoints
+    const checkSetupIp = (req, res) => {
+        const allowedIps = config.setupAllowedIps;
+        if (allowedIps.length === 0)
+            return true; // No restriction if not configured
+        const clientIp = req.ip ?? req.socket.remoteAddress ?? '';
+        if (allowedIps.includes(clientIp) || allowedIps.includes('127.0.0.1') && (clientIp === '::1' || clientIp === '::ffff:127.0.0.1')) {
+            return true;
+        }
+        res.status(403).json(error(config.nodeId, 'IP_RESTRICTED', 'Setup access is restricted by IP'));
+        return false;
+    };
+    // GET /v1/setup/status — Check if node needs setup
+    router.get('/v1/setup/status', async (_req, res) => {
+        try {
+            const owners = await storage.listOwners();
+            const needsSetup = owners.length === 0;
+            res.json(success(config.nodeId, {
+                needsSetup,
+                nodeId: config.nodeId,
+            }));
+        }
+        catch (err) {
+            logger.error('Setup status check failed', { error: err });
+            res.status(500).json(error(config.nodeId, 'INTERNAL', 'Failed to check setup status'));
+        }
+    });
+    // GET /v1/setup/wizard — Serve the wizard HTML page with CSP nonce injection
+    router.get('/v1/setup/wizard', (req, res) => {
+        if (!checkSetupIp(req, res))
+            return;
+        const htmlPath = resolvePublicFile('wizard.html');
+        if (htmlPath) {
+            let html = readFileSync(htmlPath, 'utf-8');
+            // Inject CSP nonce into all script and style tags
+            const nonce = res.locals.cspNonce || '';
+            if (nonce) {
+                html = html.replace(/<script(?=[ >])/g, `<script nonce="${nonce}"`);
+                html = html.replace(/<style(?=[ >])/g, `<style nonce="${nonce}"`);
+            }
+            res.type('text/html').send(html);
+        }
+        else {
+            res.status(404).json(error(config.nodeId, 'NOT_FOUND', 'Setup wizard page not found'));
+        }
+    });
+    // POST /v1/setup/init — First-run initialization
+    router.post('/v1/setup/init', async (req, res) => {
+        if (!checkSetupIp(req, res))
+            return;
+        try {
+            // Guard: only works when no owners exist
+            const existingOwners = await storage.listOwners();
+            if (existingOwners.length > 0) {
+                res.status(403).json(error(config.nodeId, 'ALREADY_CONFIGURED', 'This node is already configured. Setup can only run once.'));
+                return;
+            }
+            const { locale, nodeId, nodeType, owner, genesisUrl, port } = req.body ?? {};
+            // Validate owner object
+            if (!owner || typeof owner !== 'object') {
+                res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'owner object is required'));
+                return;
+            }
+            const { username, displayName, email, password, importPublicKey } = owner;
+            // Validate username
+            if (!username || typeof username !== 'string') {
+                res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'owner.username is required'));
+                return;
+            }
+            const nameError = validateOwnerName(username);
+            if (nameError) {
+                res.status(400).json(error(config.nodeId, 'INVALID_INPUT', nameError));
+                return;
+            }
+            // Validate password
+            if (!password || typeof password !== 'string') {
+                res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'owner.password is required'));
+                return;
+            }
+            if (password.length < 8) {
+                res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'Password must be at least 8 characters'));
+                return;
+            }
+            // Validate importPublicKey if provided
+            if (importPublicKey !== undefined && (typeof importPublicKey !== 'string' || importPublicKey.trim().length === 0)) {
+                res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'owner.importPublicKey must be a non-empty string'));
+                return;
+            }
+            const resolvedDisplayName = (typeof displayName === 'string' && displayName.length > 0)
+                ? displayName
+                : username;
+            // 1. Get keypair: use imported public key or generate a new one
+            let ownerPublicKey;
+            if (typeof importPublicKey === 'string' && importPublicKey.trim().length > 0) {
+                ownerPublicKey = importPublicKey.trim();
+            }
+            else {
+                const keyPair = await generateKeyPair();
+                ownerPublicKey = keyPair.publicKey;
+            }
+            // 2. Create owner with roles ['owner', 'operator'] (first owner = operator)
+            const now = new Date().toISOString();
+            const ownerRecord = await storage.createOwner({
+                name: username,
+                displayName: resolvedDisplayName,
+                publicKey: ownerPublicKey,
+                roles: ['owner', 'operator'],
+                createdAt: now,
+            });
+            // 3. Create GHII profile
+            const ghii = `${username}@${config.nodeId}`;
+            const passwordHash = await hashPassword(password);
+            await storage.createGHII({
+                username,
+                nodeId: config.nodeId,
+                ghii,
+                displayName: resolvedDisplayName,
+                locale: typeof locale === 'string' ? locale : undefined,
+                passwordHash,
+                verificationLevel: 0,
+                ownerName: ownerRecord.name,
+                totpEnabled: false,
+                createdAt: now,
+                updatedAt: now,
+            });
+            // 4. Create a default agent for the owner
+            const agentKeyPair = await generateKeyPair();
+            const gaii = buildGAII('app', username, config.nodeId);
+            const agentRecord = await storage.createAgent({
+                name: 'app',
+                owner: username,
+                gaii,
+                displayName: `${resolvedDisplayName}'s App Agent`,
+                description: 'Default agent created during setup',
+                capabilities: [],
+                publicKey: agentKeyPair.publicKey,
+                trustScore: 50,
+                morselBalance: config.welcomeBonus,
+                createdAt: now,
+                lastSeen: now,
+            });
+            // 5. Write .env file with config values (best effort)
+            try {
+                const envLines = [
+                    '# AIMEAT Node Configuration (generated by setup wizard)',
+                    `# Created: ${now}`,
+                    '',
+                    `AIMEAT_NODE_ID="${typeof nodeId === 'string' && nodeId.length > 0 ? nodeId : config.nodeId}"`,
+                    `AIMEAT_PORT="${typeof port === 'number' ? port : config.port}"`,
+                    `AIMEAT_NODE_TYPE="${typeof nodeType === 'string' && nodeType.length > 0 ? nodeType : config.nodeType}"`,
+                ];
+                if (typeof genesisUrl === 'string' && genesisUrl.length > 0) {
+                    envLines.push(`AIMEAT_GENESIS_URL="${genesisUrl}"`);
+                }
+                if (typeof locale === 'string' && locale.length > 0) {
+                    envLines.push(`AIMEAT_LOCALE="${locale}"`);
+                }
+                envLines.push('');
+                const envContent = envLines.join('\n') + '\n';
+                // Try to find or create .env in the project root
+                const envCandidates = [
+                    join(__dirname_setup, '..', '..', '.env'), // dev: src/routes/../../.env
+                    join(__dirname_setup, '..', '..', '..', '.env'), // dist: dist/src/routes/../../../.env
+                ];
+                let envPath = envCandidates.find(p => existsSync(p));
+                if (!envPath) {
+                    // Create in the first candidate location (project root)
+                    envPath = envCandidates[0];
+                }
+                // Only write if no .env exists yet (don't overwrite existing config)
+                if (!existsSync(envPath)) {
+                    writeFileSync(envPath, envContent, 'utf-8');
+                    logger.info('Setup wizard wrote .env file', { path: envPath });
+                }
+            }
+            catch (envErr) {
+                // Non-fatal: .env writing is best-effort
+                logger.warn('Setup wizard could not write .env file', { error: envErr });
+            }
+            // 6. Generate JWT for auto-login
+            const roles = ['agent', 'owner', 'operator'];
+            const token = await issueJWT({
+                sub: agentRecord.gaii,
+                owner: username,
+                node: config.nodeId,
+                roles,
+            }, config.jwtTtlSeconds);
+            // 7. Invalidate first-run cache
+            if (onSetupComplete) {
+                onSetupComplete();
+            }
+            res.status(201).json(success(config.nodeId, {
+                owner: {
+                    name: ownerRecord.name,
+                    displayName: ownerRecord.displayName,
+                    roles: ownerRecord.roles,
+                },
+                agent: {
+                    gaii: agentRecord.gaii,
+                    name: agentRecord.name,
+                },
+                token,
+                expires_at: new Date(Date.now() + config.jwtTtlSeconds * 1000).toISOString(),
+                message: 'Node setup complete. You are now the operator of this node.',
+            }, [
+                { description: 'View your profile', method: 'GET', url: `/v1/ghii/${encodeURIComponent(ghii)}` },
+                { description: 'Store data in memory', method: 'POST', url: '/v1/memory' },
+                { description: 'Visit the portal', method: 'GET', url: '/v1/portal' },
+            ]));
+        }
+        catch (err) {
+            logger.error('Setup init failed', { error: err });
+            res.status(500).json(error(config.nodeId, 'INTERNAL', 'Setup failed. Please try again.'));
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=setup.js.map

package/dist/src/routes/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../src/routes/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEhE,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,QAAgB;IACvC,MAAM,UAAU,GAAG;QACf,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAO,+BAA+B;QAC3F,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,wCAAwC;KACxG,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAKD,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,OAAgB,EAAE,eAAuC;IACvG,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,iDAAiD;IACjD,MAAM,YAAY,GAAG,CAAC,GAA8B,EAAE,GAA+B,EAAW,EAAE;QAC9F,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC;QAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAE,mCAAmC;QAC9E,MAAM,QAAQ,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;QAC1D,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,kBAAkB,CAAC,EAAE,CAAC;YAC/H,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,kCAAkC,CAAC,CAAC,CAAC;QAChG,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;IAEF,mDAAmD;IACnD,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/C,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC5B,UAAU;gBACV,MAAM,EAAE,MAAM,CAAC,MAAM;aACxB,CAAC,CAAC,CAAC;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,8BAA8B,CAAC,CAAC,CAAC;QAC3F,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACX,IAAI,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3C,kDAAkD;YAClD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,QAAkB,IAAI,EAAE,CAAC;YAClD,IAAI,KAAK,EAAE,CAAC;gBACR,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,kBAAkB,KAAK,GAAG,CAAC,CAAC;gBACpE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,iBAAiB,KAAK,GAAG,CAAC,CAAC;YACtE,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,6BAA6B,CAAC,CAAC,CAAC;QAC3F,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC;YACD,yCAAyC;YACzC,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAClD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,2DAA2D,CAAC,CAAC,CAAC;gBAC9H,OAAO;YACX,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAE7E,wBAAwB;YACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,0BAA0B,CAAC,CAAC,CAAC;gBACxF,OAAO;YACX,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;YAE1E,oBAAoB;YACpB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,4BAA4B,CAAC,CAAC,CAAC;gBAC1F,OAAO;YACX,CAAC;YAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,SAAS,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;gBACvE,OAAO;YACX,CAAC;YAED,oBAAoB;YACpB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,4BAA4B,CAAC,CAAC,CAAC;gBAC1F,OAAO;YACX,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,wCAAwC,CAAC,CAAC,CAAC;gBACtG,OAAO;YACX,CAAC;YAED,uCAAuC;YACvC,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBAChH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,kDAAkD,CAAC,CAAC,CAAC;gBAChH,OAAO;YACX,CAAC;YAED,MAAM,mBAAmB,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;gBACnF,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,QAAQ,CAAC;YAEf,gEAAgE;YAChE,IAAI,cAAsB,CAAC;YAC3B,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3E,cAAc,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACJ,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;gBACxC,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;YACvC,CAAC;YAED,4EAA4E;YAC5E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC;gBAC1C,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,mBAAmB;gBAChC,SAAS,EAAE,cAAc;gBACzB,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;gBAC5B,SAAS,EAAE,GAAG;aACjB,CAAC,CAAC;YAEH,yBAAyB;YACzB,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,OAAO,CAAC,UAAU,CAAC;gBACrB,QAAQ;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI;gBACJ,WAAW,EAAE,mBAAmB;gBAChC,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACvD,YAAY;gBACZ,iBAAiB,EAAE,CAAC;gBACpB,SAAS,EAAE,WAAW,CAAC,IAAI;gBAC3B,WAAW,EAAE,KAAK;gBAClB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACjB,CAAC,CAAC;YAEH,0CAA0C;YAC1C,MAAM,YAAY,GAAG,MAAM,eAAe,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC;gBAC1C,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,QAAQ;gBACf,IAAI;gBACJ,WAAW,EAAE,GAAG,mBAAmB,cAAc;gBACjD,WAAW,EAAE,oCAAoC;gBACjD,YAAY,EAAE,EAAE;gBAChB,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,UAAU,EAAE,EAAE;gBACd,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,SAAS,EAAE,GAAG;gBACd,QAAQ,EAAE,GAAG;aAChB,CAAC,CAAC;YAEH,sDAAsD;YACtD,IAAI,CAAC;gBACD,MAAM,QAAQ,GAAa;oBACvB,yDAAyD;oBACzD,cAAc,GAAG,EAAE;oBACnB,EAAE;oBACF,mBAAmB,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG;oBAC9F,gBAAgB,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG;oBAChE,qBAAqB,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG;iBAC3G,CAAC;gBACF,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1D,QAAQ,CAAC,IAAI,CAAC,uBAAuB,UAAU,GAAG,CAAC,CAAC;gBACxD,CAAC;gBACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClD,QAAQ,CAAC,IAAI,CAAC,kBAAkB,MAAM,GAAG,CAAC,CAAC;gBAC/C,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAElB,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;gBAE9C,iDAAiD;gBACjD,MAAM,aAAa,GAAG;oBAClB,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAO,6BAA6B;oBAC7E,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,sCAAsC;iBAC1F,CAAC;gBACF,IAAI,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACX,wDAAwD;oBACxD,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC/B,CAAC;gBACD,qEAAqE;gBACrE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvB,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;oBAC5C,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBACnE,CAAC;YACL,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBACd,yCAAyC;gBACzC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,iCAAiC;YACjC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;gBACzB,GAAG,EAAE,WAAW,CAAC,IAAI;gBACrB,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,MAAM,CAAC,MAAM;gBACnB,KAAK;aACR,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAEzB,gCAAgC;YAChC,IAAI,eAAe,EAAE,CAAC;gBAClB,eAAe,EAAE,CAAC;YACtB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBACxC,KAAK,EAAE;oBACH,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,WAAW,EAAE,WAAW,CAAC,WAAW;oBACpC,KAAK,EAAE,WAAW,CAAC,KAAK;iBAC3B;gBACD,KAAK,EAAE;oBACH,IAAI,EAAE,WAAW,CAAC,IAAI;oBACtB,IAAI,EAAE,WAAW,CAAC,IAAI;iBACzB;gBACD,KAAK;gBACL,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;gBAC5E,OAAO,EAAE,6DAA6D;aACzE,EAAE;gBACC,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE;gBAChG,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE;gBAC1E,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE;aACxE,CAAC,CAAC,CAAC;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,iCAAiC,CAAC,CAAC,CAAC;QAC9F,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/src/routes/site.d.ts

@@ -0,0 +1,6 @@
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+import { SiteService } from '../services/site.js';
+export declare function siteRouter(config: AimeatConfig, storage: Storage, siteService?: SiteService): Router;
+//# sourceMappingURL=site.d.ts.map

package/dist/src/routes/site.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"site.d.ts","sourceRoot":"","sources":["../../../src/routes/site.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAuB,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAIvD,OAAO,EAAE,WAAW,EAAa,MAAM,qBAAqB,CAAC;AAE7D,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,WAAW,GAAG,MAAM,CAoNpG"}

package/dist/src/routes/site.js

@@ -0,0 +1,201 @@
+import { Router } from 'express';
+import { requireAuth, requireRole } from '../auth/middleware.js';
+import { success, error } from '../middleware/envelope.js';
+import { emitChange } from '../services/event-bus.js';
+import { SiteService, SiteError } from '../services/site.js';
+export function siteRouter(config, storage, siteService) {
+    const router = Router();
+    const site = siteService ?? new SiteService(config, storage);
+    // LB write guard — blocks portal modifications when in load-balancer mode
+    const requireNotLb = (_req, res, next) => {
+        if (config.siteLbEnabled) {
+            res.status(409).json(error(config.nodeId, 'LB_MODE', 'Cannot modify portal content in load-balancer mode. Content synced from origin.'));
+            return;
+        }
+        next();
+    };
+    // GET / — Serve the portal HTML
+    router.get('/', async (req, res) => {
+        if (!config.siteEnabled) {
+            res.status(404).send('Portal not enabled');
+            return;
+        }
+        try {
+            const langParam = req.query.lang;
+            const html = await site.getPortalHtml(langParam, req.headers.cookie, req.headers['accept-language']);
+            res.set('Cache-Control', `public, max-age=${config.siteCacheTtlSeconds}`);
+            res.type('text/html').send(html);
+        }
+        catch (err) {
+            if (err instanceof SiteError) {
+                res.status(err.httpStatus).json(error(config.nodeId, err.code, err.message));
+                return;
+            }
+            throw err;
+        }
+    });
+    // GET /v1/site — Portal metadata (JSON)
+    router.get('/v1/site', async (_req, res) => {
+        const data = await site.getMetadata();
+        res.json(success(config.nodeId, data, [
+            { description: 'View the portal', method: 'GET', url: '/' },
+            { description: 'Get AI prompt', method: 'GET', url: '/v1/site/prompt' },
+            { description: 'View action catalogue', method: 'GET', url: '/v1/actions/catalogue' },
+        ]));
+    });
+    // GET /v1/site/template — Download current template (operator)
+    router.get('/v1/site/template', requireAuth(), requireRole('operator'), async (_req, res) => {
+        const result = await site.getTemplate();
+        if (!result) {
+            res.status(404).json(error(config.nodeId, 'NO_TEMPLATE', 'No custom template. Default portal is active.'));
+            return;
+        }
+        res.json(success(config.nodeId, {
+            template: result.template,
+            size_bytes: result.sizeBytes,
+            updated_at: result.updatedAt,
+            tags_found: result.tagsFound,
+        }));
+    });
+    // POST /v1/site/template — Upload new template (operator)
+    router.post('/v1/site/template', requireAuth(), requireRole('operator'), requireNotLb, async (req, res) => {
+        const { template } = req.body ?? {};
+        if (!template || typeof template !== 'string') {
+            res.status(422).json(error(config.nodeId, 'TEMPLATE_INVALID', 'Request body must include "template" string'));
+            return;
+        }
+        try {
+            const result = await site.uploadTemplate(template, req.auth.sub);
+            res.json(success(config.nodeId, {
+                stored: true,
+                size_bytes: Buffer.byteLength(template, 'utf-8'),
+                tags_found: result.tagsFound,
+                unresolvable_tags: result.unresolvableTags,
+            }));
+            emitChange('site');
+        }
+        catch (err) {
+            if (err instanceof SiteError) {
+                res.status(err.httpStatus).json(error(config.nodeId, err.code, err.message));
+                return;
+            }
+            throw err;
+        }
+    });
+    // DELETE /v1/site/template — Revert to default (operator)
+    router.delete('/v1/site/template', requireAuth(), requireRole('operator'), requireNotLb, async (req, res) => {
+        await site.deleteTemplate(req.auth.sub);
+        res.json(success(config.nodeId, { deleted: true, reverted_to: 'default' }));
+        emitChange('site');
+    });
+    // POST /v1/site/import — Import portal bundle (operator)
+    router.post('/v1/site/import', requireAuth(), requireRole('operator'), requireNotLb, async (req, res) => {
+        const body = req.body ?? {};
+        if (!body.template && !body.memory && !body.kv) {
+            res.status(422).json(error(config.nodeId, 'IMPORT_INVALID', 'Bundle must include at least one of: template, memory, kv'));
+            return;
+        }
+        // Validate memory keys are under portal/* namespace
+        if (body.memory && typeof body.memory === 'object') {
+            for (const key of Object.keys(body.memory)) {
+                if (!key.startsWith('portal/')) {
+                    res.status(422).json(error(config.nodeId, 'IMPORT_INVALID', `Memory key "${key}" must start with "portal/"`));
+                    return;
+                }
+                if (typeof body.memory[key] !== 'string') {
+                    res.status(422).json(error(config.nodeId, 'IMPORT_INVALID', `Memory value for "${key}" must be a string`));
+                    return;
+                }
+            }
+        }
+        if (body.kv && typeof body.kv !== 'object') {
+            res.status(422).json(error(config.nodeId, 'IMPORT_INVALID', '"kv" must be an object'));
+            return;
+        }
+        try {
+            const result = await site.importBundle({
+                template: typeof body.template === 'string' ? body.template : undefined,
+                memory: body.memory,
+                kv: body.kv,
+            }, req.auth.sub);
+            res.json(success(config.nodeId, {
+                template_stored: result.templateStored,
+                memory_keys_written: result.memoryKeysWritten,
+                kv_pairs_updated: result.kvPairsUpdated,
+                changelog_entry_id: result.changelogEntryId,
+            }));
+            emitChange('site');
+        }
+        catch (err) {
+            if (err instanceof SiteError) {
+                res.status(err.httpStatus).json(error(config.nodeId, err.code, err.message));
+                return;
+            }
+            throw err;
+        }
+    });
+    // GET /v1/site/changelog — View change log (operator)
+    router.get('/v1/site/changelog', requireAuth(), requireRole('operator'), async (req, res) => {
+        const limit = Math.min(parseInt(req.query.limit ?? '20', 10) || 20, 100);
+        const cursor = req.query.cursor;
+        const entries = await storage.listSiteChangeLog(limit, cursor);
+        res.json(success(config.nodeId, entries));
+    });
+    // POST /v1/site/cache-invalidate — Force cache refresh (operator)
+    router.post('/v1/site/cache-invalidate', requireAuth(), requireRole('operator'), async (req, res) => {
+        await site.invalidateCacheAction(req.auth.sub);
+        res.json(success(config.nodeId, { cache_cleared: true }));
+        emitChange('site');
+    });
+    // GET /v1/site/prompt — AI navigation prompt
+    router.get('/v1/site/prompt', async (_req, res) => {
+        const prompt = await site.getPrompt();
+        res.json(success(config.nodeId, { prompt }));
+    });
+    // GET /v1/site/memory-keys — List portal memory keys with values (operator)
+    router.get('/v1/site/memory-keys', requireAuth(), requireRole('operator'), async (_req, res) => {
+        const keys = await site.getPortalMemoryEntries();
+        res.json(success(config.nodeId, { keys }));
+    });
+    // GET /v1/site/sync — Origin sync endpoint for LB nodes (no auth, portal content is public)
+    router.get('/v1/site/sync', async (req, res) => {
+        const since = req.query.since;
+        const sinceDate = since ? new Date(since) : new Date(0);
+        // Template
+        const templateRecord = await storage.getStorageFile('__site__', '__site_template__');
+        let template = null;
+        if (templateRecord) {
+            const updatedAt = templateRecord.createdAt;
+            if (new Date(updatedAt) > sinceDate) {
+                template = { html: templateRecord.data.toString('utf-8'), updated_at: updatedAt };
+            }
+        }
+        // Portal memory keys
+        const allMemory = await storage.listMemory('__site__', { prefix: 'portal/' });
+        const memoryKeys = allMemory
+            .filter(r => new Date(r.updatedAt) > sinceDate)
+            .map(r => ({ key: r.key, value: r.value, updated_at: r.updatedAt }));
+        // System board posts
+        const boards = await storage.listBoards({ visibility: 'system' });
+        const systemBoardPosts = [];
+        for (const board of boards) {
+            const posts = await storage.listPosts(board.id, { limit: 50 });
+            for (const p of posts) {
+                if (new Date(p.createdAt) > sinceDate) {
+                    systemBoardPosts.push({ id: p.id, board_id: p.boardId, title: p.title, body: p.body, created_at: p.createdAt });
+                }
+            }
+        }
+        res.json(success(config.nodeId, {
+            sync_timestamp: new Date().toISOString(),
+            template,
+            memory_keys: memoryKeys,
+            deleted_memory_keys: [],
+            kv: config.siteKv,
+            system_board_posts: systemBoardPosts,
+            deleted_post_ids: [],
+        }));
+    });
+    return router;
+}
+//# sourceMappingURL=site.js.map

package/dist/src/routes/site.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site.js","sourceRoot":"","sources":["../../../src/routes/site.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAuB,MAAM,SAAS,CAAC;AAGtD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,UAAU,UAAU,CAAC,MAAoB,EAAE,OAAgB,EAAE,WAAyB;IACxF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,WAAW,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE7D,0EAA0E;IAC1E,MAAM,YAAY,GAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACrD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAC/C,iFAAiF,CAAC,CAAC,CAAC;YACxF,OAAO;QACX,CAAC;QACD,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;IAEF,gCAAgC;IAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACtB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3C,OAAO;QACX,CAAC;QACD,IAAI,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACrG,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;gBAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,OAAO;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wCAAwC;IACxC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE;YAClC,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE;YAC3D,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE;YACvE,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,uBAAuB,EAAE;SACxF,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,+DAA+D;IAC/D,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACxF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,+CAA+C,CAAC,CAAC,CAAC;YAC3G,OAAO;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,UAAU,EAAE,MAAM,CAAC,SAAS;SAC/B,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtG,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAAE,6CAA6C,CAAC,CAAC,CAAC;YAC9G,OAAO;QACX,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAK,CAAC,GAAG,CAAC,CAAC;YAClE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC5B,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC;gBAChD,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;aAC7C,CAAC,CAAC,CAAC;YACJ,UAAU,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;gBAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,OAAO;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAK,CAAC,GAAG,CAAC,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC5E,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,yDAAyD;IACzD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpG,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,2DAA2D,CAAC,CAAC,CAAC;YAC1H,OAAO;QACX,CAAC;QACD,oDAAoD;QACpD,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,eAAe,GAAG,6BAA6B,CAAC,CAAC,CAAC;oBAC9G,OAAO;gBACX,CAAC;gBACD,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,qBAAqB,GAAG,oBAAoB,CAAC,CAAC,CAAC;oBAC3G,OAAO;gBACX,CAAC;YACL,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,CAAC;YACvF,OAAO;QACX,CAAC;QACD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAClC;gBACI,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACvE,MAAM,EAAE,IAAI,CAAC,MAA4C;gBACzD,EAAE,EAAE,IAAI,CAAC,EAAwC;aACpD,EACD,GAAG,CAAC,IAAK,CAAC,GAAG,CAChB,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC5B,eAAe,EAAE,MAAM,CAAC,cAAc;gBACtC,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;gBAC7C,gBAAgB,EAAE,MAAM,CAAC,cAAc;gBACvC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;aAC9C,CAAC,CAAC,CAAC;YACJ,UAAU,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;gBAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC7E,OAAO;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACxF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAA4B,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChG,MAAM,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAK,CAAC,GAAG,CAAC,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1D,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,6CAA6C;IAC7C,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,4FAA4F;IAC5F,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAA2B,CAAC;QACpD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QAExD,WAAW;QACX,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QACrF,IAAI,QAAQ,GAAgD,IAAI,CAAC;QACjE,IAAI,cAAc,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC;YAC3C,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,SAAS,EAAE,CAAC;gBAClC,QAAQ,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YACtF,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,SAAS;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAEzE,qBAAqB;QACrB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,MAAM,gBAAgB,GAA6F,EAAE,CAAC;QACtH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACpB,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,SAAS,EAAE,CAAC;oBACpC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBACpH,CAAC;YACL,CAAC;QACL,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACxC,QAAQ;YACR,WAAW,EAAE,UAAU;YACvB,mBAAmB,EAAE,EAAE;YACvB,EAAE,EAAE,MAAM,CAAC,MAAM;YACjB,kBAAkB,EAAE,gBAAgB;YACpC,gBAAgB,EAAE,EAAE;SACvB,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/src/routes/spec.d.ts

@@ -0,0 +1,3 @@
+import { Router } from 'express';
+export declare function specRouter(): Router;
+//# sourceMappingURL=spec.d.ts.map

package/dist/src/routes/spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.d.ts","sourceRoot":"","sources":["../../../src/routes/spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKjC,wBAAgB,UAAU,IAAI,MAAM,CA+CnC"}

package/dist/src/routes/spec.js

@@ -0,0 +1,47 @@
+import { Router } from 'express';
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+export function specRouter() {
+    const router = Router();
+    // GET /v1/spec — serve the OpenAPI spec
+    router.get('/v1/spec', (_req, res) => {
+        // Try to find openapi.yaml relative to the project
+        const candidates = [
+            join(process.cwd(), 'openapi.yaml'),
+            join(process.cwd(), '..', 'openapi.yaml'),
+        ];
+        for (const path of candidates) {
+            if (existsSync(path)) {
+                const content = readFileSync(path, 'utf-8');
+                res.type('text/yaml').send(content);
+                return;
+            }
+        }
+        res.status(404).json({
+            ok: false,
+            error: { code: 'NOT_FOUND', message: 'OpenAPI spec not found' },
+        });
+    });
+    // GET /v1/docs — simple HTML redirect to Swagger UI
+    router.get('/v1/docs', (_req, res) => {
+        res.type('text/html').send(`<!DOCTYPE html>
+<html>
+<head>
+  <title>AIMEAT API Docs</title>
+  <meta charset="utf-8"/>
+  <meta name="viewport" content="width=device-width, initial-scale=1"/>
+  <link rel="icon" href="/favicon.svg" type="image/svg+xml">
+  <link rel="stylesheet" href="https://unpkg.com/swagger-ui-dist@5/swagger-ui.css" />
+</head>
+<body>
+  <div id="swagger-ui"></div>
+  <script src="https://unpkg.com/swagger-ui-dist@5/swagger-ui-bundle.js" crossorigin></script>
+  <script>
+    SwaggerUIBundle({ url: '/v1/spec', dom_id: '#swagger-ui', deepLinking: true });
+  </script>
+</body>
+</html>`);
+    });
+    return router;
+}
+//# sourceMappingURL=spec.js.map

package/dist/src/routes/spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.js","sourceRoot":"","sources":["../../../src/routes/spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAW,MAAM,WAAW,CAAC;AAG1C,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,wCAAwC;IACxC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,mDAAmD;QACnD,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC;SAC1C,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;QACH,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE;SAChE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;QAgBvB,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/routes/sse.d.ts

@@ -0,0 +1,5 @@
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export declare function sseRouter(config: AimeatConfig, _storage: Storage): Router;
+//# sourceMappingURL=sse.d.ts.map

package/dist/src/routes/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/routes/sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAqBvD,wBAAgB,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CA2DzE"}

package/dist/src/routes/sse.js

@@ -0,0 +1,66 @@
+import { Router } from 'express';
+import { randomBytes } from 'node:crypto';
+import { requireAuth } from '../auth/middleware.js';
+import { success, error } from '../middleware/envelope.js';
+import { onChangeEvent, offChangeEvent } from '../services/event-bus.js';
+const tickets = new Map();
+// Periodic cleanup of expired tickets (every 60s)
+setInterval(() => {
+    const now = Date.now();
+    for (const [id, t] of tickets) {
+        if (t.expires < now)
+            tickets.delete(id);
+    }
+}, 60_000);
+export function sseRouter(config, _storage) {
+    const router = Router();
+    // Ticket endpoint — exchange JWT for a single-use SSE connection ticket
+    router.post('/v1/events/ticket', requireAuth(), (req, res) => {
+        const ticket = randomBytes(32).toString('hex');
+        tickets.set(ticket, {
+            sub: req.auth.sub,
+            expires: Date.now() + 30_000,
+        });
+        res.json(success(config.nodeId, { ticket, expires: 30 }));
+    });
+    // SSE stream — validates ticket, streams change events
+    router.get('/v1/events', (req, res) => {
+        const ticketId = req.query.ticket;
+        if (!ticketId) {
+            res.status(400).json(error(config.nodeId, 'MISSING_TICKET', 'ticket query parameter required'));
+            return;
+        }
+        const t = tickets.get(ticketId);
+        if (!t || t.expires < Date.now()) {
+            tickets.delete(ticketId);
+            res.status(401).json(error(config.nodeId, 'INVALID_TICKET', 'Ticket is invalid or expired'));
+            return;
+        }
+        // Consume the ticket (single-use)
+        tickets.delete(ticketId);
+        // SSE headers
+        res.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            'Connection': 'keep-alive',
+            'X-Accel-Buffering': 'no',
+        });
+        res.flushHeaders();
+        // Keepalive comment every 30s
+        const keepalive = setInterval(() => {
+            res.write(':keepalive\n\n');
+        }, 30_000);
+        // Forward change events to this client
+        const handler = (evt) => {
+            res.write(`data: ${JSON.stringify(evt)}\n\n`);
+        };
+        onChangeEvent(handler);
+        // Cleanup on disconnect
+        req.on('close', () => {
+            clearInterval(keepalive);
+            offChangeEvent(handler);
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=sse.js.map

package/dist/src/routes/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../../src/routes/sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAQzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE1C,kDAAkD;AAClD,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG;YAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,MAAM,UAAU,SAAS,CAAC,MAAoB,EAAE,QAAiB;IAC/D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,wEAAwE;IACxE,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;YAClB,GAAG,EAAE,GAAG,CAAC,IAAK,CAAC,GAAG;YAClB,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;SAC7B,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,MAAgB,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,iCAAiC,CAAC,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACjC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,8BAA8B,CAAC,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QAED,kCAAkC;QAClC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEzB,cAAc;QACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,YAAY,EAAE,YAAY;YAC1B,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,GAAG,CAAC,YAAY,EAAE,CAAC;QAEnB,8BAA8B;QAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC9B,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,uCAAuC;QACvC,MAAM,OAAO,GAAG,CAAC,GAAgB,EAAE,EAAE;YACnC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,aAAa,CAAC,OAAO,CAAC,CAAC;QAEvB,wBAAwB;QACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}