deepseek-coder-agent-cli 1.0.0

package/dist/core/schemaValidator.js

@@ -0,0 +1,234 @@
+/**
+ * Enhanced validation error with structured error information
+ */
+export class ToolArgumentValidationError extends Error {
+    issues;
+    toolName;
+    constructor(toolName, issues) {
+        super(formatMessage(toolName, issues));
+        this.name = 'ToolArgumentValidationError';
+        this.issues = issues;
+        this.toolName = toolName;
+    }
+}
+/**
+ * Runtime type guards for tool argument validation
+ */
+export var TypeGuards;
+(function (TypeGuards) {
+    /**
+     * Type guard for string values
+     */
+    function isString(value) {
+        return typeof value === 'string';
+    }
+    TypeGuards.isString = isString;
+    /**
+     * Type guard for number values
+     */
+    function isNumber(value) {
+        return typeof value === 'number' && !Number.isNaN(value);
+    }
+    TypeGuards.isNumber = isNumber;
+    /**
+     * Type guard for boolean values
+     */
+    function isBoolean(value) {
+        return typeof value === 'boolean';
+    }
+    TypeGuards.isBoolean = isBoolean;
+    /**
+     * Type guard for array values
+     */
+    function isArray(value) {
+        return Array.isArray(value);
+    }
+    TypeGuards.isArray = isArray;
+    /**
+     * Type guard for object values
+     */
+    function isObject(value) {
+        return typeof value === 'object' && value !== null && !Array.isArray(value);
+    }
+    TypeGuards.isObject = isObject;
+    /**
+     * Type guard for non-null values
+     */
+    function isNotNull(value) {
+        return value !== undefined && value !== null;
+    }
+    TypeGuards.isNotNull = isNotNull;
+    /**
+     * Type guard for enum values
+     */
+    function isEnum(value, enumValues) {
+        return TypeGuards.isString(value) && enumValues.includes(value);
+    }
+    TypeGuards.isEnum = isEnum;
+})(TypeGuards || (TypeGuards = {}));
+/**
+ * Coerce loosely-typed tool arguments into their declared schema types.
+ * This makes tools resilient to providers that emit boolean/number values as strings.
+ */
+export function coerceToolArguments(schema, args) {
+    if (!schema || schema.type !== 'object' || !schema.properties) {
+        return args;
+    }
+    const coerced = { ...args };
+    for (const [key, definition] of Object.entries(schema.properties)) {
+        if (!Object.hasOwn(args, key)) {
+            continue;
+        }
+        const value = args[key];
+        if (value === undefined || value === null) {
+            continue;
+        }
+        switch (definition.type) {
+            case 'boolean': {
+                const normalized = coerceBoolean(value);
+                coerced[key] = normalized;
+                break;
+            }
+            case 'number': {
+                const normalized = coerceNumber(value);
+                coerced[key] = normalized;
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    return coerced;
+}
+function coerceBoolean(value) {
+    if (typeof value === 'boolean') {
+        return value;
+    }
+    if (typeof value === 'number') {
+        if (value === 1)
+            return true;
+        if (value === 0)
+            return false;
+    }
+    if (typeof value === 'string') {
+        const trimmed = value.trim().toLowerCase();
+        if (trimmed === 'true' || trimmed === '1')
+            return true;
+        if (trimmed === 'false' || trimmed === '0')
+            return false;
+    }
+    return value;
+}
+function coerceNumber(value) {
+    if (typeof value === 'number') {
+        // Reject NaN, Infinity, and -Infinity
+        if (!Number.isFinite(value)) {
+            return value; // Return as-is to fail validation
+        }
+        return value;
+    }
+    if (typeof value === 'string' && value.trim().length > 0) {
+        const parsed = Number(value);
+        // Only accept finite numbers
+        if (Number.isFinite(parsed)) {
+            return parsed;
+        }
+    }
+    return value;
+}
+export function validateToolArguments(toolName, schema, args) {
+    if (!schema || schema.type !== 'object') {
+        return;
+    }
+    const errors = [];
+    const properties = schema.properties ?? {};
+    const required = Array.isArray(schema.required) ? schema.required : [];
+    for (const property of required) {
+        if (!hasArgument(args, property)) {
+            errors.push(`Missing required property "${property}".`);
+        }
+    }
+    for (const [key, value] of Object.entries(args)) {
+        const definition = properties[key];
+        if (!definition) {
+            // Silently ignore unknown properties - models sometimes hallucinate extra params
+            // This is more lenient than strict JSON schema validation but prevents errors
+            // when models pass extra parameters that don't affect tool behavior
+            continue;
+        }
+        validateSchemaProperty(definition, value, key, errors);
+    }
+    if (errors.length) {
+        throw new ToolArgumentValidationError(toolName, errors);
+    }
+}
+function validateSchemaProperty(definition, value, path, errors) {
+    switch (definition.type) {
+        case 'string': {
+            if (typeof value !== 'string') {
+                errors.push(`Argument "${path}" must be a string.`);
+                return;
+            }
+            if (definition.enum && !definition.enum.includes(value)) {
+                errors.push(`Argument "${path}" must be one of: ${definition.enum.map((entry) => `"${entry}"`).join(', ')}.`);
+            }
+            if (typeof definition.minLength === 'number' && value.length < definition.minLength) {
+                errors.push(`Argument "${path}" must be at least ${definition.minLength} character${definition.minLength === 1 ? '' : 's'} long.`);
+            }
+            return;
+        }
+        case 'number': {
+            if (typeof value !== 'number' || !Number.isFinite(value)) {
+                errors.push(`Argument "${path}" must be a finite number.`);
+                return;
+            }
+            // Validate minimum constraint
+            if (typeof definition.minimum === 'number' && value < definition.minimum) {
+                errors.push(`Argument "${path}" must be at least ${definition.minimum}.`);
+            }
+            // Validate maximum constraint
+            if (typeof definition.maximum === 'number' && value > definition.maximum) {
+                errors.push(`Argument "${path}" must be at most ${definition.maximum}.`);
+            }
+            return;
+        }
+        case 'boolean': {
+            if (typeof value !== 'boolean') {
+                errors.push(`Argument "${path}" must be a boolean.`);
+            }
+            return;
+        }
+        case 'array': {
+            if (!Array.isArray(value)) {
+                errors.push(`Argument "${path}" must be an array.`);
+                return;
+            }
+            validateArrayItems(definition, value, path, errors);
+            return;
+        }
+        default:
+            return;
+    }
+}
+function validateArrayItems(definition, value, path, errors) {
+    const itemSchema = definition.items;
+    if (!itemSchema) {
+        return;
+    }
+    for (let index = 0; index < value.length; index += 1) {
+        const entry = value[index];
+        validateSchemaProperty(itemSchema, entry, `${path}[${index}]`, errors);
+    }
+}
+function hasArgument(args, key) {
+    if (!Object.hasOwn(args, key)) {
+        return false;
+    }
+    const value = args[key];
+    return value !== undefined && value !== null;
+}
+function formatMessage(toolName, issues) {
+    const detail = issues.join(' ');
+    return `Invalid arguments for "${toolName}": ${detail}`;
+}
+//# sourceMappingURL=schemaValidator.js.map

package/dist/core/schemaValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaValidator.js","sourceRoot":"","sources":["../../src/core/schemaValidator.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,MAAM,CAAoB;IAC1B,QAAQ,CAAS;IAE1B,YAAY,QAAgB,EAAE,MAAgB;QAC5C,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,KAAW,UAAU,CAiD1B;AAjDD,WAAiB,UAAU;IACzB;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;IACnC,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAc;QACtC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;IACpC,CAAC;IAFe,oBAAS,YAExB,CAAA;IAED;;OAEG;IACH,SAAgB,OAAO,CAAC,KAAc;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAFe,kBAAO,UAEtB,CAAA;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAc;QACtC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;IAC/C,CAAC;IAFe,oBAAS,YAExB,CAAA;IAED;;OAEG;IACH,SAAgB,MAAM,CAAmB,KAAc,EAAE,UAAwB;QAC/E,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAU,CAAC,CAAC;IACvE,CAAC;IAFe,iBAAM,SAErB,CAAA;AACH,CAAC,EAjDgB,UAAU,KAAV,UAAU,QAiD1B;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAoC,EACpC,IAA6B;IAE7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IAErD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,sCAAsC;QACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,kCAAkC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,6BAA6B;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,MAAoC,EACpC,IAA6B;IAE7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,8BAA8B,QAAQ,IAAI,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,iFAAiF;YACjF,8EAA8E;YAC9E,oEAAoE;YACpE,SAAS;QACX,CAAC;QACD,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAA8B,EAC9B,KAAc,EACd,IAAY,EACZ,MAAgB;IAEhB,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,aAAa,IAAI,qBAAqB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;gBACpF,MAAM,CAAC,IAAI,CACT,aAAa,IAAI,sBAAsB,UAAU,CAAC,SAAS,aACzD,UAAU,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACpC,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,4BAA4B,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,8BAA8B;YAC9B,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;YAC5E,CAAC;YACD,8BAA8B;YAC9B,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC,CAAC;YACvD,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,kBAAkB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,UAA2B,EAC3B,KAAgB,EAChB,IAAY,EACZ,MAAgB;IAEhB,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,GAAW;IAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAgB;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,0BAA0B,QAAQ,MAAM,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/core/secretStore.d.ts

@@ -0,0 +1,48 @@
+import type { ProviderId } from './types.js';
+export type SecretName = 'DEEPSEEK_API_KEY' | 'TAVILY_API_KEY' | 'SMTP_USER' | 'SMTP_PASSWORD' | 'SMTP_PROVIDER' | 'SMTP_FROM_NAME' | 'SMTP_HOST' | 'SMTP_PORT';
+export interface SecretDefinition {
+    id: SecretName;
+    label: string;
+    description: string;
+    envVar: SecretName;
+    providers: ProviderId[];
+}
+export declare class MissingSecretError extends Error {
+    readonly secret: SecretDefinition;
+    constructor(secret: SecretDefinition);
+}
+export declare function listSecretDefinitions(): SecretDefinition[];
+export declare function getSecretDefinition(id: SecretName): SecretDefinition | null;
+export declare function getSecretValue(id: SecretName): string | null;
+/**
+ * Load all stored secrets into process.env at startup.
+ * This ensures secrets are available before any provider checks.
+ *
+ * IMPORTANT: Stored secrets always take precedence over environment variables
+ * for provider API keys. This ensures keys set via /secrets are used even if
+ * the user has old/stale keys exported in their shell environment.
+ */
+export declare function loadAllSecrets(): void;
+export declare function setSecretValue(id: SecretName, rawValue: string): void;
+export declare function maskSecret(value: string): string;
+export declare function ensureSecretForProvider(provider: ProviderId): string;
+export declare function getSecretDefinitionForProvider(provider: ProviderId): SecretDefinition | null;
+/**
+ * Sanitize error messages to remove potential API keys and secrets.
+ * This prevents accidental token leakage in logs, error reports, and console output.
+ *
+ * @param message - The error message or string to sanitize
+ * @returns The sanitized string with secrets replaced by [REDACTED]
+ */
+export declare function sanitizeErrorMessage(message: string): string;
+/**
+ * Sanitize an Error object's message and stack trace.
+ * Returns a new error message string with secrets removed.
+ */
+export declare function sanitizeError(error: Error): string;
+/**
+ * Create a safe error message from an unknown error value.
+ * Ensures no secrets are leaked regardless of error type.
+ */
+export declare function safeErrorMessage(error: unknown): string;
+//# sourceMappingURL=secretStore.d.ts.map

package/dist/core/secretStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretStore.d.ts","sourceRoot":"","sources":["../../src/core/secretStore.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,UAAU,GAClB,kBAAkB,GAClB,gBAAgB,GAChB,WAAW,GACX,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,UAAU,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,UAAU,EAAE,CAAC;CACzB;AAqED,qBAAa,kBAAmB,SAAQ,KAAK;aACf,MAAM,EAAE,gBAAgB;gBAAxB,MAAM,EAAE,gBAAgB;CAIrD;AAED,wBAAgB,qBAAqB,IAAI,gBAAgB,EAAE,CAE1D;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAE3E;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAc5D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAUrC;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAUrE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAQpE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAE5F;AAwED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA4B5D;AAqCD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAQlD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQvD"}

package/dist/core/secretStore.js

@@ -0,0 +1,295 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+const SECRET_DEFINITIONS = [
+    {
+        id: 'DEEPSEEK_API_KEY',
+        label: 'DeepSeek API Key',
+        description: 'Required to run DeepSeek Reasoner or Chat models.',
+        envVar: 'DEEPSEEK_API_KEY',
+        providers: ['deepseek'],
+    },
+    {
+        id: 'TAVILY_API_KEY',
+        label: 'Tavily API Key',
+        description: 'Required: WebSearch and WebExtract provider. Get yours at https://tavily.com',
+        envVar: 'TAVILY_API_KEY',
+        providers: [],
+    },
+    {
+        id: 'SMTP_USER',
+        label: 'Email Address',
+        description: 'Your email address for sending emails (e.g., you@gmail.com).',
+        envVar: 'SMTP_USER',
+        providers: [],
+    },
+    {
+        id: 'SMTP_PASSWORD',
+        label: 'Email App Password',
+        description: 'App password for your email (NOT your regular password). For Gmail: https://myaccount.google.com/apppasswords',
+        envVar: 'SMTP_PASSWORD',
+        providers: [],
+    },
+    {
+        id: 'SMTP_PROVIDER',
+        label: 'Email Provider',
+        description: 'Email provider: gmail, outlook, yahoo, icloud, zoho (default: gmail).',
+        envVar: 'SMTP_PROVIDER',
+        providers: [],
+    },
+    {
+        id: 'SMTP_FROM_NAME',
+        label: 'Email Display Name',
+        description: 'Optional: Display name shown in sent emails (e.g., "John Doe").',
+        envVar: 'SMTP_FROM_NAME',
+        providers: [],
+    },
+    {
+        id: 'SMTP_HOST',
+        label: 'Custom SMTP Host',
+        description: 'Optional: Custom SMTP server hostname (only for non-standard providers).',
+        envVar: 'SMTP_HOST',
+        providers: [],
+    },
+    {
+        id: 'SMTP_PORT',
+        label: 'Custom SMTP Port',
+        description: 'Optional: Custom SMTP port (only for non-standard providers, default: 587).',
+        envVar: 'SMTP_PORT',
+        providers: [],
+    },
+];
+const envAgiHome = process.env['AGI_HOME'];
+const SECRET_DIR = envAgiHome ? resolve(envAgiHome) : join(homedir(), '.agi');
+const SECRET_FILE = join(SECRET_DIR, 'secrets.json');
+export class MissingSecretError extends Error {
+    secret;
+    constructor(secret) {
+        super(`${secret.label} is not configured.`);
+        this.secret = secret;
+        this.name = 'MissingSecretError';
+    }
+}
+export function listSecretDefinitions() {
+    return [...SECRET_DEFINITIONS];
+}
+export function getSecretDefinition(id) {
+    return SECRET_DEFINITIONS.find((entry) => entry.id === id) ?? null;
+}
+export function getSecretValue(id) {
+    const envValue = sanitize(process.env[id]);
+    if (envValue) {
+        return envValue;
+    }
+    const store = readSecretStore();
+    const storedValue = sanitize(store[id]);
+    if (!storedValue) {
+        return null;
+    }
+    process.env[id] = storedValue;
+    return storedValue;
+}
+/**
+ * Load all stored secrets into process.env at startup.
+ * This ensures secrets are available before any provider checks.
+ *
+ * IMPORTANT: Stored secrets always take precedence over environment variables
+ * for provider API keys. This ensures keys set via /secrets are used even if
+ * the user has old/stale keys exported in their shell environment.
+ */
+export function loadAllSecrets() {
+    const store = readSecretStore();
+    for (const definition of SECRET_DEFINITIONS) {
+        const storedValue = sanitize(store[definition.id]);
+        if (storedValue) {
+            // Always use stored value for API keys to ensure /secrets takes precedence
+            // over potentially stale environment variables
+            process.env[definition.id] = storedValue;
+        }
+    }
+}
+export function setSecretValue(id, rawValue) {
+    const value = sanitize(rawValue);
+    if (!value) {
+        throw new Error('Secret value cannot be blank.');
+    }
+    const store = readSecretStore();
+    store[id] = value;
+    writeSecretStore(store);
+    process.env[id] = value;
+}
+export function maskSecret(value) {
+    if (!value) {
+        return '';
+    }
+    if (value.length <= 4) {
+        return '*'.repeat(value.length);
+    }
+    const suffix = value.slice(-4);
+    const prefix = '*'.repeat(Math.max(0, value.length - 4));
+    return `${prefix}${suffix}`;
+}
+export function ensureSecretForProvider(provider) {
+    const definition = findDefinitionForProvider(provider);
+    const value = getSecretValue(definition.id);
+    if (!value) {
+        throw new MissingSecretError(definition);
+    }
+    process.env[definition.envVar] = value;
+    return value;
+}
+export function getSecretDefinitionForProvider(provider) {
+    return SECRET_DEFINITIONS.find((entry) => entry.providers.includes(provider)) ?? null;
+}
+function readSecretStore() {
+    if (!existsSync(SECRET_FILE)) {
+        return {};
+    }
+    try {
+        const content = readFileSync(SECRET_FILE, 'utf8');
+        const parsed = JSON.parse(content);
+        if (parsed && typeof parsed === 'object') {
+            return parsed;
+        }
+    }
+    catch {
+        return {};
+    }
+    return {};
+}
+function writeSecretStore(store) {
+    const directory = dirname(SECRET_FILE);
+    mkdirSync(directory, { recursive: true });
+    const payload = JSON.stringify(store, null, 2);
+    writeFileSync(SECRET_FILE, `${payload}
+`);
+}
+function findDefinitionForProvider(provider) {
+    const definition = getSecretDefinitionForProvider(provider);
+    if (!definition) {
+        throw new Error(`No secret configuration for provider "${provider}".`);
+    }
+    return definition;
+}
+function sanitize(value) {
+    if (typeof value !== 'string') {
+        return null;
+    }
+    const trimmed = value.trim();
+    return trimmed.length ? trimmed : null;
+}
+// ============================================================================
+// Secret Sanitization for Error Messages
+// ============================================================================
+/**
+ * Known API key patterns to detect and sanitize in error messages.
+ * These patterns match common API key formats from various providers.
+ */
+const API_KEY_PATTERNS = [
+    // Anthropic API keys: sk-ant-api03-...
+    /sk-ant-api\d{2}-[A-Za-z0-9_-]{20,}/g,
+    // OpenAI API keys: sk-proj-... or sk-...
+    /sk-(?:proj-)?[A-Za-z0-9_-]{20,}/g,
+    // Generic Bearer tokens in headers
+    /Bearer\s+[A-Za-z0-9_.-]{20,}/gi,
+    // x-api-key header values
+    /x-api-key['":\s]+[A-Za-z0-9_.-]{20,}/gi,
+    // API keys in URLs (key=value pattern)
+    /[?&](?:key|api_key|apiKey|api-key|token|access_token)=([A-Za-z0-9_.-]{16,})/gi,
+    // DeepSeek keys
+    /sk-[a-f0-9]{32,}/gi,
+    // xAI/Grok keys
+    /xai-[A-Za-z0-9_-]{20,}/gi,
+    // Google/Gemini API keys (AIza...)
+    /AIza[A-Za-z0-9_-]{30,}/g,
+    // Generic long alphanumeric tokens that look like API keys
+    /(?:api[_-]?key|token|secret|password|credential)['"]?\s*[:=]\s*['"]?([A-Za-z0-9_.-]{20,})['"]?/gi,
+];
+/**
+ * Sanitize error messages to remove potential API keys and secrets.
+ * This prevents accidental token leakage in logs, error reports, and console output.
+ *
+ * @param message - The error message or string to sanitize
+ * @returns The sanitized string with secrets replaced by [REDACTED]
+ */
+export function sanitizeErrorMessage(message) {
+    if (!message || typeof message !== 'string') {
+        return message;
+    }
+    let sanitized = message;
+    // Apply all API key patterns
+    for (const pattern of API_KEY_PATTERNS) {
+        // Reset lastIndex for global patterns
+        pattern.lastIndex = 0;
+        sanitized = sanitized.replace(pattern, (match) => {
+            // For patterns with capture groups, try to preserve context
+            if (match.includes('=') || match.includes(':')) {
+                const separator = match.includes('=') ? '=' : ':';
+                const parts = match.split(separator);
+                if (parts.length === 2) {
+                    return `${parts[0]}${separator}[REDACTED]`;
+                }
+            }
+            return '[REDACTED]';
+        });
+    }
+    // Additionally sanitize any env var values that are currently loaded
+    sanitized = sanitizeAgainstLoadedSecrets(sanitized);
+    return sanitized;
+}
+/**
+ * Sanitize a string against currently loaded secret values.
+ * This catches any secrets that might not match the pattern-based detection.
+ */
+function sanitizeAgainstLoadedSecrets(message) {
+    const secretNames = [
+        'DEEPSEEK_API_KEY',
+        'TAVILY_API_KEY',
+        'SMTP_PASSWORD',
+    ];
+    let sanitized = message;
+    for (const name of secretNames) {
+        const value = process.env[name];
+        if (value && value.length >= 4) {
+            // Only sanitize if the value appears in the message
+            // Use a case-sensitive exact match to avoid false positives
+            if (sanitized.includes(value)) {
+                sanitized = sanitized.split(value).join('[REDACTED]');
+            }
+            // Also sanitize partial matches (first 8 chars + last 4 chars pattern)
+            if (value.length >= 12) {
+                const partialPattern = `${value.substring(0, 8)}...${value.substring(value.length - 4)}`;
+                if (sanitized.includes(partialPattern)) {
+                    sanitized = sanitized.split(partialPattern).join('[REDACTED_PARTIAL]');
+                }
+            }
+        }
+    }
+    return sanitized;
+}
+/**
+ * Sanitize an Error object's message and stack trace.
+ * Returns a new error message string with secrets removed.
+ */
+export function sanitizeError(error) {
+    const message = sanitizeErrorMessage(error.message);
+    const stack = error.stack ? sanitizeErrorMessage(error.stack) : '';
+    if (stack && stack !== message) {
+        return `${message}\n${stack}`;
+    }
+    return message;
+}
+/**
+ * Create a safe error message from an unknown error value.
+ * Ensures no secrets are leaked regardless of error type.
+ */
+export function safeErrorMessage(error) {
+    if (error instanceof Error) {
+        return sanitizeErrorMessage(error.message);
+    }
+    if (typeof error === 'string') {
+        return sanitizeErrorMessage(error);
+    }
+    return 'Unknown error occurred';
+}
+//# sourceMappingURL=secretStore.js.map

package/dist/core/secretStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretStore.js","sourceRoot":"","sources":["../../src/core/secretStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyBnD,MAAM,kBAAkB,GAAuB;IAC7C;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,mDAAmD;QAChE,MAAM,EAAE,kBAAkB;QAC1B,SAAS,EAAE,CAAC,UAAU,CAAC;KACxB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,8EAA8E;QAC3F,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,8DAA8D;QAC3E,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,+GAA+G;QAC5H,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,uEAAuE;QACpF,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,iEAAiE;QAC9E,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,0EAA0E;QACvF,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,6EAA6E;QAC1F,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,EAAE;KACd;CACF,CAAC;AAEF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AAErD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACf;IAA5B,YAA4B,MAAwB;QAClD,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,qBAAqB,CAAC,CAAC;QADlB,WAAM,GAAN,MAAM,CAAkB;QAElD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAc;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAc;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC;IAC9B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,MAAM,UAAU,IAAI,kBAAkB,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,2EAA2E;YAC3E,+CAA+C;YAC/C,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC;QAC3C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAc,EAAE,QAAgB;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IAClB,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAoB;IAC1D,MAAM,UAAU,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAAoB;IACjE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,MAAyB,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAsB;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,aAAa,CAAC,WAAW,EAAE,GAAG,OAAO;CACtC,CAAC,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAoB;IACrD,MAAM,UAAU,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,gBAAgB,GAAa;IACjC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,kCAAkC;IAClC,mCAAmC;IACnC,gCAAgC;IAChC,0BAA0B;IAC1B,wCAAwC;IACxC,uCAAuC;IACvC,+EAA+E;IAC/E,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,0BAA0B;IAC1B,mCAAmC;IACnC,yBAAyB;IACzB,2DAA2D;IAC3D,kGAAkG;CACnG,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,6BAA6B;IAC7B,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,sCAAsC;QACtC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/C,4DAA4D;YAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,YAAY,CAAC;gBAC7C,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,SAAS,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,4BAA4B,CAAC,OAAe;IACnD,MAAM,WAAW,GAAiB;QAChC,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;KAChB,CAAC;IAEF,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC/B,oDAAoD;YACpD,4DAA4D;YAC5D,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxD,CAAC;YAED,uEAAuE;YACvE,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACvB,MAAM,cAAc,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzF,IAAI,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBACvC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAY;IACxC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnE,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,GAAG,OAAO,KAAK,KAAK,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC"}