clodds 1.1.0

package/dist/api/apikeys.js

@@ -0,0 +1,319 @@
+"use strict";
+/**
+ * API Key Manager - Authentication and rate limiting
+ *
+ * Features:
+ * - API key generation and validation
+ * - Subscription tier management
+ * - Daily prompt limits
+ * - Referral tracking
+ * - Validation caching for performance
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createApiKeyManager = createApiKeyManager;
+exports.parseApiKey = parseApiKey;
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const index_1 = require("../cache/index");
+const logger_1 = require("../utils/logger");
+// =============================================================================
+// CONSTANTS
+// =============================================================================
+const DEFAULT_CONFIG = {
+    storageDir: (0, path_1.join)((0, os_1.homedir)(), '.clodds', 'api', 'keys'),
+    persist: true,
+};
+// =============================================================================
+// IMPLEMENTATION
+// =============================================================================
+function createApiKeyManager(config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    // Storage
+    const keys = new Map();
+    // Validation cache - brief caching to reduce repeated hash comparisons
+    const validationCache = (0, index_1.createApiKeyCache)({
+        maxSize: config.validationCacheSize ?? 200,
+        defaultTtl: config.validationCacheTtl ?? 10000, // 10 seconds
+    });
+    // Ensure storage directory
+    if (cfg.persist) {
+        (0, fs_1.mkdirSync)(cfg.storageDir, { recursive: true });
+        loadKeys();
+    }
+    function loadKeys() {
+        try {
+            const indexPath = (0, path_1.join)(cfg.storageDir, 'keys.json');
+            if ((0, fs_1.existsSync)(indexPath)) {
+                const data = JSON.parse((0, fs_1.readFileSync)(indexPath, 'utf-8'));
+                for (const key of data) {
+                    keys.set(key.id, key);
+                }
+                logger_1.logger.info({ count: keys.size }, 'Loaded API keys');
+            }
+        }
+        catch (e) {
+            logger_1.logger.warn('Failed to load API keys');
+        }
+    }
+    function saveKeys() {
+        if (!cfg.persist)
+            return;
+        try {
+            const indexPath = (0, path_1.join)(cfg.storageDir, 'keys.json');
+            (0, fs_1.writeFileSync)(indexPath, JSON.stringify(Array.from(keys.values()), null, 2));
+        }
+        catch (e) {
+            logger_1.logger.error({ error: e }, 'Failed to save API keys');
+        }
+    }
+    function generateKeyId() {
+        return `clodds_${(0, crypto_1.randomBytes)(8).toString('hex')}`;
+    }
+    function generateSecret() {
+        return (0, crypto_1.randomBytes)(24).toString('base64url');
+    }
+    function generateReferralCode() {
+        return (0, crypto_1.randomBytes)(4).toString('hex').toUpperCase();
+    }
+    function hashSecret(secret) {
+        return (0, crypto_1.createHash)('sha256').update(secret).digest('hex');
+    }
+    function create(owner, name, tier = 'free', referredBy) {
+        const keyId = generateKeyId();
+        const secret = generateSecret();
+        const now = Date.now();
+        const data = {
+            id: keyId,
+            secretHash: hashSecret(secret),
+            owner: owner.toLowerCase(),
+            name,
+            tier,
+            createdAt: now,
+            lastUsedAt: now,
+            expiresAt: 0,
+            active: true,
+            dailyPrompts: 0,
+            dailyResetAt: now + 86400000,
+            referredBy,
+            referralCode: generateReferralCode(),
+            totalSpent: 0,
+            referralEarnings: 0,
+        };
+        keys.set(keyId, data);
+        saveKeys();
+        logger_1.logger.info({ keyId, owner, tier }, 'API key created');
+        return {
+            keyId,
+            secret,
+            fullKey: `${keyId}.${secret}`,
+            data,
+        };
+    }
+    function validate(keyId, secret) {
+        const providedHash = hashSecret(secret);
+        const cacheKey = { keyId, secretHash: providedHash };
+        // Check validation cache first
+        const cached = validationCache.get(cacheKey);
+        if (cached !== undefined) {
+            // Return cached result (could be null for invalid keys)
+            if (cached) {
+                // Update last used timestamp (but don't save frequently)
+                cached.lastUsedAt = Date.now();
+            }
+            return cached;
+        }
+        const data = keys.get(keyId);
+        if (!data) {
+            // Cache negative result briefly
+            validationCache.set(cacheKey, null);
+            return null;
+        }
+        // Check if active
+        if (!data.active) {
+            validationCache.set(cacheKey, null);
+            return null;
+        }
+        // Check expiry
+        if (data.expiresAt > 0 && Date.now() > data.expiresAt) {
+            data.active = false;
+            saveKeys();
+            validationCache.set(cacheKey, null);
+            return null;
+        }
+        // Verify secret (timing-safe comparison)
+        const storedHash = data.secretHash;
+        try {
+            const match = (0, crypto_1.timingSafeEqual)(Buffer.from(providedHash, 'hex'), Buffer.from(storedHash, 'hex'));
+            if (!match) {
+                validationCache.set(cacheKey, null);
+                return null;
+            }
+        }
+        catch {
+            validationCache.set(cacheKey, null);
+            return null;
+        }
+        // Update last used
+        data.lastUsedAt = Date.now();
+        saveKeys();
+        // Cache successful validation
+        validationCache.set(cacheKey, data);
+        return data;
+    }
+    function get(keyId) {
+        return keys.get(keyId) || null;
+    }
+    function getByOwner(owner) {
+        const ownerLower = owner.toLowerCase();
+        return Array.from(keys.values()).filter(k => k.owner === ownerLower);
+    }
+    function updateTier(keyId, tier) {
+        const data = keys.get(keyId);
+        if (!data)
+            return false;
+        data.tier = tier;
+        saveKeys();
+        // Invalidate any cached validation for this key
+        validationCache.clear(); // Simple approach: clear all (keys update rarely)
+        logger_1.logger.info({ keyId, tier }, 'API key tier updated');
+        return true;
+    }
+    function revoke(keyId) {
+        const data = keys.get(keyId);
+        if (!data)
+            return false;
+        data.active = false;
+        saveKeys();
+        // Invalidate any cached validation for this key
+        validationCache.clear();
+        logger_1.logger.info({ keyId }, 'API key revoked');
+        return true;
+    }
+    function checkPromptLimit(keyId) {
+        const data = keys.get(keyId);
+        if (!data) {
+            return { allowed: false, remaining: 0, resetAt: 0 };
+        }
+        // Import subscription tiers
+        const tierConfig = require('./types').SUBSCRIPTION_TIERS[data.tier];
+        const limit = tierConfig?.promptsPerDay || 5;
+        // Reset daily count if needed
+        const now = Date.now();
+        if (now > data.dailyResetAt) {
+            data.dailyPrompts = 0;
+            data.dailyResetAt = now + 86400000;
+            saveKeys();
+        }
+        // Unlimited (-1) or under limit
+        if (limit === -1 || data.dailyPrompts < limit) {
+            const remaining = limit === -1 ? -1 : limit - data.dailyPrompts;
+            return { allowed: true, remaining, resetAt: data.dailyResetAt };
+        }
+        return { allowed: false, remaining: 0, resetAt: data.dailyResetAt };
+    }
+    function recordPrompt(keyId) {
+        const data = keys.get(keyId);
+        if (!data)
+            return;
+        data.dailyPrompts++;
+        data.lastUsedAt = Date.now();
+        saveKeys();
+    }
+    /**
+     * Record spending and credit referrer
+     * @param keyId - API key that spent money
+     * @param amountUsd - Amount spent in USD
+     * @param referralShare - Referrer's share (default 10%)
+     */
+    function recordSpending(keyId, amountUsd, referralShare = 0.1) {
+        const data = keys.get(keyId);
+        if (!data || amountUsd <= 0)
+            return;
+        // Track user's total spending
+        data.totalSpent = (data.totalSpent || 0) + amountUsd;
+        data.lastUsedAt = Date.now();
+        // Credit referrer if exists
+        if (data.referredBy) {
+            for (const key of keys.values()) {
+                if (key.referralCode === data.referredBy) {
+                    const earnings = amountUsd * referralShare;
+                    key.referralEarnings = (key.referralEarnings || 0) + earnings;
+                    logger_1.logger.debug({ referrer: key.id, earnings, from: keyId }, 'Referral earnings credited');
+                    break;
+                }
+            }
+        }
+        saveKeys();
+    }
+    function getReferralStats(referralCode) {
+        let totalReferred = 0;
+        let activeReferred = 0;
+        let totalEarnings = 0;
+        // Find the key that owns this referral code
+        for (const key of keys.values()) {
+            if (key.referralCode === referralCode) {
+                totalEarnings = key.referralEarnings || 0;
+            }
+            if (key.referredBy === referralCode) {
+                totalReferred++;
+                if (key.active)
+                    activeReferred++;
+            }
+        }
+        return {
+            referralCode,
+            totalReferred,
+            activeReferred,
+            totalEarnings,
+        };
+    }
+    function listAll() {
+        return Array.from(keys.values());
+    }
+    return {
+        create,
+        validate,
+        get,
+        getByOwner,
+        updateTier,
+        revoke,
+        checkPromptLimit,
+        recordPrompt,
+        recordSpending,
+        getReferralStats,
+        listAll,
+    };
+}
+/**
+ * Parse API key from Authorization header
+ * Supports: "Bearer keyId.secret" or "Basic base64(keyId:secret)"
+ */
+function parseApiKey(authHeader) {
+    if (!authHeader)
+        return null;
+    // Bearer token: "Bearer keyId.secret"
+    if (authHeader.startsWith('Bearer ')) {
+        const token = authHeader.slice(7);
+        const [keyId, secret] = token.split('.');
+        if (keyId && secret) {
+            return { keyId, secret };
+        }
+    }
+    // Basic auth: "Basic base64(keyId:secret)"
+    if (authHeader.startsWith('Basic ')) {
+        try {
+            const decoded = Buffer.from(authHeader.slice(6), 'base64').toString();
+            const [keyId, secret] = decoded.split(':');
+            if (keyId && secret) {
+                return { keyId, secret };
+            }
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=apikeys.js.map

package/dist/api/apikeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apikeys.js","sourceRoot":"","sources":["../../src/api/apikeys.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AAqFH,kDA6SC;AAMD,kCA0BC;AAhaD,mCAAkE;AAClE,2BAAwE;AACxE,+BAA4B;AAC5B,2BAA6B;AAC7B,0CAAwE;AACxE,4CAAyC;AAiEzC,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,cAAc,GAAG;IACrB,UAAU,EAAE,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC;IACrD,OAAO,EAAE,IAAI;CACd,CAAC;AAEF,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,SAAgB,mBAAmB,CAAC,SAA8B,EAAE;IAClE,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,UAAU;IACV,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE3C,uEAAuE;IACvE,MAAM,eAAe,GAAG,IAAA,yBAAiB,EAAoB;QAC3D,OAAO,EAAE,MAAM,CAAC,mBAAmB,IAAI,GAAG;QAC1C,UAAU,EAAE,MAAM,CAAC,kBAAkB,IAAI,KAAK,EAAE,aAAa;KAC9D,CAAC,CAAC;IAEH,2BAA2B;IAC3B,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,IAAA,cAAS,EAAC,GAAG,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,QAAQ,EAAE,CAAC;IACb,CAAC;IAED,SAAS,QAAQ;QACf,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACpD,IAAI,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAiB,CAAC;gBAC1E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACxB,CAAC;gBACD,eAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,eAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,SAAS,QAAQ;QACf,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACpD,IAAA,kBAAa,EAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,eAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,SAAS,aAAa;QACpB,OAAO,UAAU,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACpD,CAAC;IAED,SAAS,cAAc;QACrB,OAAO,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAED,SAAS,oBAAoB;QAC3B,OAAO,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,CAAC;IAED,SAAS,UAAU,CAAC,MAAc;QAChC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,OAAyB,MAAM,EAAE,UAAmB;QAC/F,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,IAAI,GAAe;YACvB,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC;YAC9B,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1B,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,GAAG,GAAG,QAAQ;YAC5B,UAAU;YACV,YAAY,EAAE,oBAAoB,EAAE;YACpC,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,CAAC;SACpB,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtB,QAAQ,EAAE,CAAC;QAEX,eAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAEvD,OAAO;YACL,KAAK;YACL,MAAM;YACN,OAAO,EAAE,GAAG,KAAK,IAAI,MAAM,EAAE;YAC7B,IAAI;SACL,CAAC;IACJ,CAAC;IAED,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAc;QAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAmB,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAErE,+BAA+B;QAC/B,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,wDAAwD;YACxD,IAAI,MAAM,EAAE,CAAC;gBACX,yDAAyD;gBACzD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,gCAAgC;YAChC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,eAAe;QACf,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,QAAQ,EAAE,CAAC;YACX,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yCAAyC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAA,wBAAe,EAC3B,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,EAChC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAC/B,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACpC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,QAAQ,EAAE,CAAC;QAEX,8BAA8B;QAC9B,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,GAAG,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IACjC,CAAC;IAED,SAAS,UAAU,CAAC,KAAa;QAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACvE,CAAC;IAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAsB;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAExB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,QAAQ,EAAE,CAAC;QAEX,gDAAgD;QAChD,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,kDAAkD;QAE3E,eAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,MAAM,CAAC,KAAa;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAExB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,QAAQ,EAAE,CAAC;QAEX,gDAAgD;QAChD,eAAe,CAAC,KAAK,EAAE,CAAC;QAExB,eAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,gBAAgB,CAAC,KAAa;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,4BAA4B;QAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,UAAU,EAAE,aAAa,IAAI,CAAC,CAAC;QAE7C,8BAA8B;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,GAAG,GAAG,QAAQ,CAAC;YACnC,QAAQ,EAAE,CAAC;QACb,CAAC;QAED,gCAAgC;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;YAC9C,MAAM,SAAS,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClE,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACtE,CAAC;IAED,SAAS,YAAY,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,QAAQ,EAAE,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,SAAS,cAAc,CAAC,KAAa,EAAE,SAAiB,EAAE,aAAa,GAAG,GAAG;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO;QAEpC,8BAA8B;QAC9B,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,4BAA4B;QAC5B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAChC,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;oBACzC,MAAM,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;oBAC3C,GAAG,CAAC,gBAAgB,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC;oBAC9D,eAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAC;oBACxF,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,EAAE,CAAC;IACb,CAAC;IAED,SAAS,gBAAgB,CAAC,YAAoB;QAC5C,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,4CAA4C;QAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gBACtC,aAAa,GAAG,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,GAAG,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;gBACpC,aAAa,EAAE,CAAC;gBAChB,IAAI,GAAG,CAAC,MAAM;oBAAE,cAAc,EAAE,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY;YACZ,aAAa;YACb,cAAc;YACd,aAAa;SACd,CAAC;IACJ,CAAC;IAED,SAAS,OAAO;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ;QACR,GAAG;QACH,UAAU;QACV,UAAU;QACV,MAAM;QACN,gBAAgB;QAChB,YAAY;QACZ,cAAc;QACd,gBAAgB;QAChB,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,UAAkB;IAC5C,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,sCAAsC;IACtC,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;gBACpB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/api/compute/code.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Code Execution Service - Sandboxed code runner for agents
+ *
+ * Supports Python, JavaScript, TypeScript, Rust, Go, Bash
+ * Uses isolated containers for safety
+ */
+import type { ComputeRequest, CodeResponse, CodeLanguage } from './types';
+export interface CodeRunner {
+    /** Execute code */
+    execute(request: ComputeRequest): Promise<CodeResponse>;
+    /** Get supported languages */
+    getLanguages(): CodeLanguage[];
+    /** Check if language is available */
+    isAvailable(language: CodeLanguage): Promise<boolean>;
+}
+export interface CodeRunnerConfig {
+    /** Sandbox mode: 'docker' | 'native' (default: 'native' in dev) */
+    sandbox?: 'docker' | 'native';
+    /** Working directory for temp files */
+    workDir?: string;
+    /** Default timeout in ms (default: 30000) */
+    defaultTimeout?: number;
+    /** Default memory limit in MB (default: 256) */
+    defaultMemoryMb?: number;
+    /** Docker image for sandbox */
+    dockerImage?: string;
+}
+export declare function createCodeRunner(config?: CodeRunnerConfig): CodeRunner;

package/dist/api/compute/code.js

@@ -0,0 +1,257 @@
+"use strict";
+/**
+ * Code Execution Service - Sandboxed code runner for agents
+ *
+ * Supports Python, JavaScript, TypeScript, Rust, Go, Bash
+ * Uses isolated containers for safety
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCodeRunner = createCodeRunner;
+const child_process_1 = require("child_process");
+const promises_1 = require("fs/promises");
+const path_1 = require("path");
+const crypto_1 = require("crypto");
+const logger_1 = require("../../utils/logger");
+// =============================================================================
+// CONSTANTS
+// =============================================================================
+const DEFAULT_CONFIG = {
+    sandbox: 'native',
+    workDir: '/tmp/clodds-code',
+    defaultTimeout: 30000,
+    defaultMemoryMb: 256,
+    dockerImage: 'clodds/sandbox:latest',
+};
+const LANGUAGE_COMMANDS = {
+    python: { cmd: 'python3', ext: '.py' },
+    javascript: { cmd: 'node', ext: '.js' },
+    typescript: { cmd: 'npx ts-node', ext: '.ts' },
+    rust: { cmd: './main', ext: '.rs', compile: 'rustc -o main' },
+    go: { cmd: 'go run', ext: '.go' },
+    bash: { cmd: 'bash', ext: '.sh' },
+};
+// =============================================================================
+// IMPLEMENTATION
+// =============================================================================
+function createCodeRunner(config = {}) {
+    const cfg = { ...DEFAULT_CONFIG, ...config };
+    function getLanguages() {
+        return Object.keys(LANGUAGE_COMMANDS);
+    }
+    async function isAvailable(language) {
+        const langConfig = LANGUAGE_COMMANDS[language];
+        if (!langConfig)
+            return false;
+        try {
+            const cmd = langConfig.cmd.split(' ')[0];
+            await execCommand('which', [cmd], 5000);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async function execute(request) {
+        const payload = request.payload;
+        const { language, code, stdin, env, timeout = cfg.defaultTimeout, memoryMb = cfg.defaultMemoryMb, files, } = payload;
+        const langConfig = LANGUAGE_COMMANDS[language];
+        if (!langConfig) {
+            throw new Error(`Unsupported language: ${language}`);
+        }
+        // Create isolated work directory
+        const sessionId = (0, crypto_1.randomBytes)(8).toString('hex');
+        const sessionDir = (0, path_1.join)(cfg.workDir, sessionId);
+        const startTime = Date.now();
+        try {
+            await (0, promises_1.mkdir)(sessionDir, { recursive: true });
+            // Write main code file
+            const mainFile = (0, path_1.join)(sessionDir, `main${langConfig.ext}`);
+            await (0, promises_1.writeFile)(mainFile, code, 'utf-8');
+            // Write additional files
+            if (files) {
+                for (const file of files) {
+                    const filePath = (0, path_1.join)(sessionDir, file.name);
+                    await (0, promises_1.writeFile)(filePath, file.content, 'utf-8');
+                }
+            }
+            // Compile if needed
+            if (langConfig.compile) {
+                const compileResult = await execInDir(sessionDir, langConfig.compile, [`main${langConfig.ext}`], timeout, env);
+                if (compileResult.exitCode !== 0) {
+                    return {
+                        exitCode: compileResult.exitCode,
+                        stdout: compileResult.stdout,
+                        stderr: `Compilation failed:\n${compileResult.stderr}`,
+                        durationMs: Date.now() - startTime,
+                        memoryMb: 0,
+                    };
+                }
+            }
+            // Execute
+            let result;
+            if (cfg.sandbox === 'docker') {
+                result = await execDocker(sessionDir, langConfig.cmd, language === 'go' ? [`main${langConfig.ext}`] : (langConfig.compile ? [] : [`main${langConfig.ext}`]), timeout, memoryMb, env, stdin);
+            }
+            else {
+                const args = language === 'go'
+                    ? [`main${langConfig.ext}`]
+                    : (langConfig.compile ? [] : [`main${langConfig.ext}`]);
+                result = await execInDir(sessionDir, langConfig.cmd, args, timeout, env, stdin);
+            }
+            // Read output files
+            const outputFiles = [];
+            // Could scan for new files here if needed
+            const durationMs = Date.now() - startTime;
+            logger_1.logger.info({
+                requestId: request.id,
+                language,
+                exitCode: result.exitCode,
+                durationMs,
+            }, 'Code execution completed');
+            return {
+                exitCode: result.exitCode,
+                stdout: result.stdout,
+                stderr: result.stderr,
+                durationMs,
+                memoryMb: result.memoryMb || 0,
+                files: outputFiles.length > 0 ? outputFiles : undefined,
+            };
+        }
+        finally {
+            // Cleanup
+            try {
+                await (0, promises_1.rm)(sessionDir, { recursive: true, force: true });
+            }
+            catch {
+                // Ignore cleanup errors
+            }
+        }
+    }
+    async function execCommand(cmd, args, timeout) {
+        return new Promise((resolve, reject) => {
+            const proc = (0, child_process_1.spawn)(cmd, args, { timeout });
+            let stdout = '';
+            let stderr = '';
+            proc.stdout?.on('data', (data) => {
+                stdout += data.toString();
+            });
+            proc.stderr?.on('data', (data) => {
+                stderr += data.toString();
+            });
+            proc.on('close', (code) => {
+                resolve({
+                    exitCode: code ?? 1,
+                    stdout,
+                    stderr,
+                });
+            });
+            proc.on('error', (err) => {
+                reject(err);
+            });
+        });
+    }
+    async function execInDir(cwd, cmd, args, timeout, env, stdin) {
+        return new Promise((resolve, reject) => {
+            const [executable, ...cmdArgs] = cmd.split(' ');
+            const fullArgs = [...cmdArgs, ...args];
+            const proc = (0, child_process_1.spawn)(executable, fullArgs, {
+                cwd,
+                timeout,
+                env: { ...getProcessEnv(), ...env },
+            });
+            let stdout = '';
+            let stderr = '';
+            proc.stdout?.on('data', (data) => {
+                stdout += data.toString();
+                // Limit output size
+                if (stdout.length > 1024 * 1024) {
+                    proc.kill();
+                    stderr += '\n[Output truncated - exceeded 1MB limit]';
+                }
+            });
+            proc.stderr?.on('data', (data) => {
+                stderr += data.toString();
+                if (stderr.length > 1024 * 1024) {
+                    proc.kill();
+                    stderr = stderr.slice(0, 1024 * 1024) + '\n[Stderr truncated]';
+                }
+            });
+            // Send stdin if provided
+            if (stdin) {
+                proc.stdin?.write(stdin);
+                proc.stdin?.end();
+            }
+            proc.on('close', (code) => {
+                resolve({
+                    exitCode: code ?? 1,
+                    stdout: stdout.slice(0, 100000), // Limit final output
+                    stderr: stderr.slice(0, 100000),
+                });
+            });
+            proc.on('error', (err) => {
+                reject(err);
+            });
+        });
+    }
+    async function execDocker(sessionDir, cmd, args, timeout, memoryMb, env, stdin) {
+        const dockerArgs = [
+            'run',
+            '--rm',
+            '--network=none', // No network access
+            `--memory=${memoryMb}m`,
+            `--memory-swap=${memoryMb}m`,
+            '--cpus=1',
+            '--pids-limit=100',
+            '-v', `${sessionDir}:/code:ro`,
+            '-w', '/code',
+        ];
+        // Add environment variables
+        if (env) {
+            for (const [key, value] of Object.entries(env)) {
+                dockerArgs.push('-e', `${key}=${value}`);
+            }
+        }
+        dockerArgs.push(cfg.dockerImage);
+        dockerArgs.push(...cmd.split(' '));
+        dockerArgs.push(...args);
+        return new Promise((resolve, reject) => {
+            const proc = (0, child_process_1.spawn)('docker', dockerArgs, { timeout });
+            let stdout = '';
+            let stderr = '';
+            proc.stdout?.on('data', (data) => {
+                stdout += data.toString();
+            });
+            proc.stderr?.on('data', (data) => {
+                stderr += data.toString();
+            });
+            if (stdin) {
+                proc.stdin?.write(stdin);
+                proc.stdin?.end();
+            }
+            proc.on('close', (code) => {
+                resolve({
+                    exitCode: code ?? 1,
+                    stdout,
+                    stderr,
+                    memoryMb,
+                });
+            });
+            proc.on('error', (err) => {
+                reject(err);
+            });
+        });
+    }
+    function getProcessEnv() {
+        if (typeof globalThis !== 'undefined' && 'process' in globalThis) {
+            const proc = globalThis.process;
+            return proc?.env || {};
+        }
+        return {};
+    }
+    return {
+        execute,
+        getLanguages,
+        isAvailable,
+    };
+}
+//# sourceMappingURL=code.js.map

package/dist/api/compute/code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code.js","sourceRoot":"","sources":["../../../src/api/compute/code.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAiEH,4CA2TC;AA1XD,iDAAsC;AACtC,0CAA6D;AAC7D,+BAA4B;AAC5B,mCAAqC;AACrC,+CAA4C;AAkC5C,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,cAAc,GAA+B;IACjD,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,kBAAkB;IAC3B,cAAc,EAAE,KAAK;IACrB,eAAe,EAAE,GAAG;IACpB,WAAW,EAAE,uBAAuB;CACrC,CAAC;AAEF,MAAM,iBAAiB,GAAyE;IAC9F,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE;IACtC,UAAU,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE;IACvC,UAAU,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE;IAC9C,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE;IAC7D,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE;IACjC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE;CAClC,CAAC;AAEF,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,SAAgB,gBAAgB,CAAC,SAA2B,EAAE;IAC5D,MAAM,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,SAAS,YAAY;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAmB,CAAC;IAC1D,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,QAAsB;QAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,OAAuB;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAsB,CAAC;QAC/C,MAAM,EACJ,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,GAAG,EACH,OAAO,GAAG,GAAG,CAAC,cAAc,EAC5B,QAAQ,GAAG,GAAG,CAAC,eAAe,EAC9B,KAAK,GACN,GAAG,OAAO,CAAC;QAEZ,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,iCAAiC;QACjC,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,IAAA,gBAAK,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE7C,uBAAuB;YACvB,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3D,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAEzC,yBAAyB;YACzB,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,SAAS,CACnC,UAAU,EACV,UAAU,CAAC,OAAO,EAClB,CAAC,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,EACzB,OAAO,EACP,GAAG,CACJ,CAAC;gBAEF,IAAI,aAAa,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACjC,OAAO;wBACL,QAAQ,EAAE,aAAa,CAAC,QAAQ;wBAChC,MAAM,EAAE,aAAa,CAAC,MAAM;wBAC5B,MAAM,EAAE,wBAAwB,aAAa,CAAC,MAAM,EAAE;wBACtD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAClC,QAAQ,EAAE,CAAC;qBACZ,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,UAAU;YACV,IAAI,MAAkB,CAAC;YAEvB,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,GAAG,MAAM,UAAU,CACvB,UAAU,EACV,UAAU,CAAC,GAAG,EACd,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EACrG,OAAO,EACP,QAAQ,EACR,GAAG,EACH,KAAK,CACN,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI;oBAC5B,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC;oBAC3B,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAE1D,MAAM,GAAG,MAAM,SAAS,CACtB,UAAU,EACV,UAAU,CAAC,GAAG,EACd,IAAI,EACJ,OAAO,EACP,GAAG,EACH,KAAK,CACN,CAAC;YACJ,CAAC;YAED,oBAAoB;YACpB,MAAM,WAAW,GAA6C,EAAE,CAAC;YACjE,0CAA0C;YAE1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,eAAM,CAAC,IAAI,CAAC;gBACV,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ;gBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU;aACX,EAAE,0BAA0B,CAAC,CAAC;YAE/B,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;gBAC9B,KAAK,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,UAAU;YACV,IAAI,CAAC;gBACH,MAAM,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IASD,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,IAAc,EACd,OAAe;QAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAE3C,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,OAAO,CAAC;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,MAAM;oBACN,MAAM;iBACP,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,GAAW,EACX,IAAc,EACd,OAAe,EACf,GAA4B,EAC5B,KAAc;QAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YAEvC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,UAAU,EAAE,QAAQ,EAAE;gBACvC,GAAG;gBACH,OAAO;gBACP,GAAG,EAAE,EAAE,GAAG,aAAa,EAAE,EAAE,GAAG,GAAG,EAAE;aACpC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,oBAAoB;gBACpB,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBAChC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACZ,MAAM,IAAI,2CAA2C,CAAC;gBACxD,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBAChC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACZ,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,sBAAsB,CAAC;gBACjE,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,yBAAyB;YACzB,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YACpB,CAAC;YAED,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,OAAO,CAAC;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,qBAAqB;oBACtD,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,UAAU,CACvB,UAAkB,EAClB,GAAW,EACX,IAAc,EACd,OAAe,EACf,QAAgB,EAChB,GAA4B,EAC5B,KAAc;QAEd,MAAM,UAAU,GAAG;YACjB,KAAK;YACL,MAAM;YACN,gBAAgB,EAAE,oBAAoB;YACtC,YAAY,QAAQ,GAAG;YACvB,iBAAiB,QAAQ,GAAG;YAC5B,UAAU;YACV,kBAAkB;YAClB,IAAI,EAAE,GAAG,UAAU,WAAW;YAC9B,IAAI,EAAE,OAAO;SACd,CAAC;QAEF,4BAA4B;QAC5B,IAAI,GAAG,EAAE,CAAC;YACR,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAEzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAEtD,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YACpB,CAAC;YAED,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,OAAO,CAAC;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,MAAM;oBACN,MAAM;oBACN,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,aAAa;QACpB,IAAI,OAAO,UAAU,KAAK,WAAW,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;YACjE,MAAM,IAAI,GAAI,UAA6D,CAAC,OAAO,CAAC;YACpF,OAAO,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL,OAAO;QACP,YAAY;QACZ,WAAW;KACZ,CAAC;AACJ,CAAC"}