discord-agent-bridge 0.1.0

package/dist/core/logger.js

@@ -0,0 +1,116 @@
+const LEVEL_ORDER = { debug: 10, info: 20, warn: 30, error: 40 };
+const PLACEHOLDER = '[REDACTED]';
+// Sensitive object keys whose values are replaced wholesale, regardless of shape.
+const SENSITIVE_KEYS = new Set([
+    'token',
+    'authorization',
+    'accesstoken',
+    'refreshtoken',
+    'apikey',
+    'secret',
+    'password',
+    'credentials',
+]);
+// Value-shape patterns for secrets that may appear inside free-form strings.
+const VALUE_PATTERNS = [
+    // Discord bot token: <base64 userId>.<base64 timestamp>.<base64 hmac>. The real
+    // shape is tight (~23-28 . ~6-7 . ~27-40 chars) with word boundaries, so benign
+    // dotted strings (e.g. file hashes like "deadbeef.sig.0123456789") are not
+    // clobbered.
+    /\b[A-Za-z0-9_-]{23,28}\.[A-Za-z0-9_-]{6,7}\.[A-Za-z0-9_-]{27,40}\b/g,
+    // Anthropic / OAuth style bearer tokens (sk-..., sk-ant-..., long opaque tokens).
+    /\bsk-[A-Za-z0-9-]{16,}\b/g,
+    // "Authorization: Bearer <token>" / "Bearer <token>" (allow multiple spaces).
+    /(?<=Bearer\s{1,4})[A-Za-z0-9._-]{8,}/gi,
+];
+function redactString(input) {
+    let out = input;
+    for (const pattern of VALUE_PATTERNS) {
+        out = out.replace(pattern, PLACEHOLDER);
+    }
+    return out;
+}
+// Recursively redact a value: sensitive keys → placeholder, strings → pattern-scrubbed.
+// Cycles are broken via a seen-set. Depth is bounded to avoid pathological payloads.
+export function redact(value, seen = new WeakSet(), depth = 0) {
+    if (typeof value === 'string')
+        return redactString(value);
+    if (value === null || typeof value !== 'object')
+        return value;
+    if (depth > 6)
+        return '[…]';
+    if (seen.has(value))
+        return '[Circular]';
+    seen.add(value);
+    if (Array.isArray(value)) {
+        return value.map((item) => redact(item, seen, depth + 1));
+    }
+    const out = {};
+    for (const [key, val] of Object.entries(value)) {
+        if (SENSITIVE_KEYS.has(key.toLowerCase())) {
+            out[key] = PLACEHOLDER;
+        }
+        else {
+            out[key] = redact(val, seen, depth + 1);
+        }
+    }
+    return out;
+}
+const consoleSink = {
+    write(level, line) {
+        if (level === 'error')
+            console.error(line);
+        else if (level === 'warn')
+            console.warn(line);
+        else
+            console.log(line);
+    },
+};
+function formatMeta(meta) {
+    if (meta.length === 0)
+        return '';
+    const parts = meta.map((m) => {
+        const scrubbed = redact(m);
+        if (typeof scrubbed === 'string')
+            return scrubbed;
+        try {
+            return JSON.stringify(scrubbed);
+        }
+        catch {
+            return String(scrubbed);
+        }
+    });
+    return ' ' + parts.join(' ');
+}
+class RedactingLogger {
+    name;
+    threshold;
+    sink;
+    constructor(name, options) {
+        this.name = name;
+        this.threshold = LEVEL_ORDER[options.level ?? 'info'];
+        this.sink = options.sink ?? consoleSink;
+    }
+    log(level, message, meta) {
+        if (LEVEL_ORDER[level] < this.threshold)
+            return;
+        const line = `[${level.toUpperCase()}] ${this.name}: ${redactString(message)}${formatMeta(meta)}`;
+        this.sink.write(level, line);
+    }
+    debug(message, ...meta) {
+        this.log('debug', message, meta);
+    }
+    info(message, ...meta) {
+        this.log('info', message, meta);
+    }
+    warn(message, ...meta) {
+        this.log('warn', message, meta);
+    }
+    error(message, ...meta) {
+        this.log('error', message, meta);
+    }
+}
+export function createLogger(name, options = {}) {
+    return new RedactingLogger(name, options);
+}
+//# sourceMappingURL=logger.js.map

package/dist/core/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,GAA6B,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAE3F,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,kFAAkF;AAClF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,OAAO;IACP,eAAe;IACf,aAAa;IACb,cAAc;IACd,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,aAAa;CACd,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,cAAc,GAAa;IAC/B,gFAAgF;IAChF,gFAAgF;IAChF,2EAA2E;IAC3E,aAAa;IACb,qEAAqE;IACrE,kFAAkF;IAClF,2BAA2B;IAC3B,8EAA8E;IAC9E,wCAAwC;CACzC,CAAC;AAEF,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wFAAwF;AACxF,qFAAqF;AACrF,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,OAAO,IAAI,OAAO,EAAU,EAAE,KAAK,GAAG,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;QAAE,OAAO,YAAY,CAAC;IACnD,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC1E,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,WAAW,GAAY;IAC3B,KAAK,CAAC,KAAK,EAAE,IAAI;QACf,IAAI,KAAK,KAAK,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aACtC,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACzC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;CACF,CAAC;AAOF,SAAS,UAAU,CAAC,IAAe;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAClD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,eAAe;IACF,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,IAAI,CAAU;IAE/B,YAAY,IAAY,EAAE,OAAsB;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IAC1C,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAAe;QAC3D,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS;YAAE,OAAO;QAChD,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,UAAyB,EAAE;IACpE,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/core/logger.test.js

@@ -0,0 +1,88 @@
+import { describe, it, expect } from 'vitest';
+import { createLogger, redact } from './logger.js';
+function captureSink() {
+    const lines = [];
+    return {
+        lines,
+        sink: {
+            write(level, line) {
+                lines.push({ level, line });
+            },
+        },
+    };
+}
+describe('redact()', () => {
+    it('redacts sensitive object keys', () => {
+        const out = redact({ token: 'abc.def.ghi', clientId: 'safe', authorization: 'Bearer xyz' });
+        expect(out.token).toBe('[REDACTED]');
+        expect(out.authorization).toBe('[REDACTED]');
+        expect(out.clientId).toBe('safe');
+    });
+    it('scrubs Discord-token-shaped strings in free text', () => {
+        // Synthetic, zero-entropy value matching the Discord-token SHAPE
+        // (23-28 . 6-7 . 27-40 chars). Assembled at runtime so no realistic
+        // token literal lives in source (avoids secret scanners).
+        const fake = ['X'.repeat(24), 'Y'.repeat(6), 'Z'.repeat(28)].join('.');
+        const out = redact(`connecting with ${fake} now`);
+        expect(out).not.toContain(fake);
+        expect(out).toContain('[REDACTED]');
+    });
+    it('scrubs Bearer tokens and sk- keys', () => {
+        expect(redact('Authorization: Bearer abcdef123456')).not.toContain('abcdef123456');
+        // Synthetic sk--prefixed key (>=16 tail chars) matching the pattern shape.
+        const skKey = 'sk-' + 'k'.repeat(20);
+        expect(redact(`key ${skKey} here`)).not.toContain(skKey);
+    });
+    it('does NOT over-redact a benign dotted string that only resembles a token', () => {
+        // Short segments (8 . 3 . 10) fall well below the Discord-token shape
+        // (23-28 . 6-7 . 27-40), so a file-hash-like value must survive intact.
+        const benign = 'deadbeef.sig.0123456789';
+        expect(redact(`artifact ${benign} built`)).toBe(`artifact ${benign} built`);
+    });
+    it('scrubs a Bearer token separated by multiple spaces', () => {
+        // The lookbehind allows 1-4 spaces after "Bearer" so a hand-spaced header
+        // is still redacted. Assembled at runtime; not a realistic secret.
+        const tok = 'sometoken12345';
+        const out = redact(`Bearer   ${tok}`);
+        expect(out).not.toContain(tok);
+        expect(out).toContain('[REDACTED]');
+    });
+    it('handles nested structures and circular references', () => {
+        const obj = { a: { token: 'x.y.z' } };
+        obj.self = obj;
+        const out = redact(obj);
+        expect(out.a.token).toBe('[REDACTED]');
+        expect(out.self).toBe('[Circular]');
+    });
+});
+describe('createLogger()', () => {
+    it('redacts a token embedded in a logged payload', () => {
+        const { lines, sink } = captureSink();
+        const logger = createLogger('test', { level: 'info', sink });
+        // Synthetic sentinel under the sensitive 'token' key (redacted by key).
+        const secret = 'S'.repeat(40);
+        logger.info('bot login', { discord: { token: secret } });
+        const joined = lines.map((l) => l.line).join('\n');
+        expect(joined).not.toContain(secret);
+        expect(joined).toContain('[REDACTED]');
+    });
+    it('gates messages below the configured level', () => {
+        const { lines, sink } = captureSink();
+        const logger = createLogger('test', { level: 'warn', sink });
+        logger.debug('debug msg');
+        logger.info('info msg');
+        logger.warn('warn msg');
+        logger.error('error msg');
+        const levels = lines.map((l) => l.level);
+        expect(levels).toEqual(['warn', 'error']);
+    });
+    it('defaults to info level', () => {
+        const { lines, sink } = captureSink();
+        const logger = createLogger('test', { sink });
+        logger.debug('nope');
+        logger.info('yep');
+        expect(lines).toHaveLength(1);
+        expect(lines[0].level).toBe('info');
+    });
+});
+//# sourceMappingURL=logger.test.js.map

package/dist/core/logger.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.test.js","sourceRoot":"","sources":["../../src/core/logger.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,EAA+B,MAAM,aAAa,CAAC;AAEhF,SAAS,WAAW;IAClB,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,OAAO;QACL,KAAK;QACL,IAAI,EAAE;YACJ,KAAK,CAAC,KAAK,EAAE,IAAI;gBACf,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9B,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,CAGzF,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,iEAAiE;QACjE,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAW,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACnF,2EAA2E;QAC3E,MAAM,KAAK,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,MAAM,GAAG,yBAAyB,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,YAAY,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,MAAM,QAAQ,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,GAAG,GAAG,gBAAgB,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,GAAG,EAAE,CAAW,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,GAAG,GAA4B,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QACf,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAA4B,CAAC;QACnD,MAAM,CAAE,GAAG,CAAC,CAA6B,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,wEAAwE;QACxE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/core/modeRegistry.js

@@ -0,0 +1,33 @@
+// name → AgentMode; the single place modes are registered and looked up (§4, §10).
+// This is the extensibility seam: adding a backend is register(mode) + nothing
+// else in core changes. Modes self-identify via their readonly `name`, so the
+// registry keys on mode.name rather than a separately-passed string.
+export class ModeRegistry {
+    modes = new Map();
+    // Register a mode instance. Throws on a duplicate name so a mis-wired double
+    // registration surfaces at boot rather than silently shadowing.
+    register(mode) {
+        if (this.modes.has(mode.name)) {
+            throw new Error(`Mode '${mode.name}' is already registered.`);
+        }
+        this.modes.set(mode.name, mode);
+    }
+    // Look up a registered mode by name; throws if unknown so callers get a clear
+    // error instead of an undefined dereference.
+    get(name) {
+        const mode = this.modes.get(name);
+        if (!mode) {
+            throw new Error(`Unknown mode '${name}'. Registered: ${this.list().join(', ') || '(none)'}.`);
+        }
+        return mode;
+    }
+    // Non-throwing lookup for callers that want to test presence.
+    has(name) {
+        return this.modes.has(name);
+    }
+    // Names of all registered modes, in registration order.
+    list() {
+        return [...this.modes.keys()];
+    }
+}
+//# sourceMappingURL=modeRegistry.js.map

package/dist/core/modeRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modeRegistry.js","sourceRoot":"","sources":["../../src/core/modeRegistry.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,+EAA+E;AAC/E,8EAA8E;AAC9E,qEAAqE;AACrE,MAAM,OAAO,YAAY;IACN,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAEtD,6EAA6E;IAC7E,gEAAgE;IAChE,QAAQ,CAAC,IAAe;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,0BAA0B,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,8EAA8E;IAC9E,6CAA6C;IAC7C,GAAG,CAAC,IAAY;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8DAA8D;IAC9D,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,wDAAwD;IACxD,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/core/permissionResolver.js

@@ -0,0 +1,43 @@
+export class PermissionResolver {
+    configStore;
+    configResolver;
+    constructor(configStore, configResolver) {
+        this.configStore = configStore;
+        this.configResolver = configResolver;
+    }
+    resolve(guildId, channelId, override) {
+        const config = this.configStore.load();
+        const layered = this.configResolver.resolve(guildId, channelId);
+        // Profile: session override wins, else layered value. `null` explicitly
+        // clears the profile; `undefined` falls through.
+        const profileName = override && 'profile' in override ? (override.profile ?? null) : layered.permissionProfile;
+        // Base permission mode from the layered defaults; the global auto-allow set
+        // is the default tool allowlist when no profile narrows it. Widened to
+        // SessionPermMode so a per-session override may carry a Codex sandbox mode.
+        let permMode = layered.permissionMode;
+        let allowedTools = [...config.autoAllowClaudeTools];
+        let policyTier;
+        // A named profile bundles mode + tools + tier (§7A). Applied over the base.
+        if (profileName) {
+            const profile = config.profiles[profileName];
+            if (!profile) {
+                throw new Error(`Unknown permission profile '${profileName}'.`);
+            }
+            permMode = profile.permissionMode;
+            allowedTools = [...profile.allowedTools];
+            policyTier = profile.policyTier;
+        }
+        // A directly-set per-session permission mode wins over everything, including
+        // a profile's bundled mode (the operator explicitly overrode it via /mode).
+        if (override?.permMode !== undefined) {
+            permMode = override.permMode;
+        }
+        return {
+            permMode,
+            profile: profileName,
+            allowedTools,
+            ...(policyTier ? { policyTier } : {}),
+        };
+    }
+}
+//# sourceMappingURL=permissionResolver.js.map

package/dist/core/permissionResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionResolver.js","sourceRoot":"","sources":["../../src/core/permissionResolver.ts"],"names":[],"mappings":"AAmCA,MAAM,OAAO,kBAAkB;IAEV;IACA;IAFnB,YACmB,WAAwB,EACxB,cAA8B;QAD9B,gBAAW,GAAX,WAAW,CAAa;QACxB,mBAAc,GAAd,cAAc,CAAgB;IAC9C,CAAC;IAEJ,OAAO,CACL,OAAe,EACf,SAAiB,EACjB,QAA0B;QAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEhE,wEAAwE;QACxE,iDAAiD;QACjD,MAAM,WAAW,GACf,QAAQ,IAAI,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAE7F,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,IAAI,QAAQ,GAAoB,OAAO,CAAC,cAAc,CAAC;QACvD,IAAI,YAAY,GAAa,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC9D,IAAI,UAAyC,CAAC;QAE9C,4EAA4E;QAC5E,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,WAAW,IAAI,CAAC,CAAC;YAClE,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;YAClC,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;YACzC,UAAU,GAAG,OAAO,CAAC,UAA+B,CAAC;QACvD,CAAC;QAED,6EAA6E;QAC7E,4EAA4E;QAC5E,IAAI,QAAQ,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;YACrC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAC/B,CAAC;QAED,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,WAAW;YACpB,YAAY;YACZ,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC;CACF"}

package/dist/core/permissionResolver.test.js

@@ -0,0 +1,136 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { ConfigStore } from './config.js';
+import { CONFIG_VERSION } from './configSchema.js';
+import { StateStore } from './state/store.js';
+import { ChannelRegistry } from './channelRegistry.js';
+import { ConfigResolver } from './configResolver.js';
+import { PermissionResolver } from './permissionResolver.js';
+function makeConfig(overrides = {}) {
+    return {
+        version: CONFIG_VERSION,
+        discord: { token: 'bot-token-abc', clientId: '123456789' },
+        auth: { adminRoleIds: [], executeRoleIds: [], readOnlyRoleIds: [], dmPolicy: 'deny' },
+        defaults: {
+            mode: 'claude',
+            claudeModel: 'opus',
+            codexModel: '',
+            permissionMode: 'default',
+            permissionProfile: null,
+            codexHome: '~/.codex',
+            codexCliCommand: 'codex',
+            codexCliVersion: null,
+        },
+        limits: { maxSessionsPerUser: 0, permissionTimeoutSec: 60, codexTimeoutMs: 1_800_000 },
+        policy: { unknownCommand: 'confirm', allowExtraCommands: [] },
+        autoAllowClaudeTools: ['Read', 'Glob', 'Grep'],
+        profiles: {
+            readonly: { permissionMode: 'plan', allowedTools: ['Read', 'Glob', 'Grep'], policyTier: 'read-only' },
+            edit: { permissionMode: 'acceptEdits', allowedTools: ['Read', 'Edit', 'Write', 'Bash'], policyTier: 'normal' },
+        },
+        usage: { userAgent: 'claude-code', cacheSec: 180 },
+        audit: { channelId: null },
+        locale: 'ko',
+        logLevel: 'info',
+        favorites: [],
+        ...overrides,
+    };
+}
+function binding(overrides = {}) {
+    return {
+        guildId: 'g1',
+        channelId: 'c1',
+        mode: 'claude',
+        sessionId: null,
+        cwd: '/abs/workspace',
+        ownerId: 'u1',
+        permMode: 'default',
+        profile: null,
+        ...overrides,
+    };
+}
+describe('PermissionResolver', () => {
+    let dir;
+    let store;
+    function build() {
+        const registry = new ChannelRegistry(new StateStore(dir), () => '2026-01-01T00:00:00.000Z');
+        const configResolver = new ConfigResolver(store, registry);
+        const resolver = new PermissionResolver(store, configResolver);
+        return { resolver, registry };
+    }
+    beforeEach(() => {
+        dir = fs.mkdtempSync(path.join(os.tmpdir(), 'dab-permres-'));
+        store = new ConfigStore(dir);
+    });
+    afterEach(() => {
+        fs.rmSync(dir, { recursive: true, force: true });
+    });
+    it('default: global permissionMode + global auto-allow tools when nothing overrides', () => {
+        store.save(makeConfig());
+        const { resolver } = build();
+        const r = resolver.resolve('g1', 'c1');
+        expect(r.permMode).toBe('default');
+        expect(r.profile).toBeNull();
+        expect(r.allowedTools).toEqual(['Read', 'Glob', 'Grep']);
+        expect(r.policyTier).toBeUndefined();
+    });
+    it('layers permission mode global→server→project (project wins)', () => {
+        store.save(makeConfig());
+        store.saveServerConfig({ version: 1, guildId: 'g1', defaults: { permissionMode: 'acceptEdits' } });
+        const { resolver, registry } = build();
+        // Server-only → acceptEdits.
+        expect(resolver.resolve('g1', 'c9').permMode).toBe('acceptEdits');
+        // Project binding wins.
+        registry.set(binding({ permMode: 'plan' }));
+        expect(resolver.resolve('g1', 'c1').permMode).toBe('plan');
+    });
+    it('a resolved profile bundles its mode, tools, and tier', () => {
+        store.save(makeConfig());
+        const { resolver, registry } = build();
+        registry.set(binding({ profile: 'readonly' }));
+        const r = resolver.resolve('g1', 'c1');
+        expect(r.profile).toBe('readonly');
+        expect(r.permMode).toBe('plan'); // from profile, over binding permMode 'default'
+        expect(r.allowedTools).toEqual(['Read', 'Glob', 'Grep']);
+        expect(r.policyTier).toBe('read-only');
+    });
+    it('session override permMode wins over layered value and profile', () => {
+        store.save(makeConfig());
+        const { resolver, registry } = build();
+        registry.set(binding({ profile: 'readonly' })); // profile would give 'plan'
+        const r = resolver.resolve('g1', 'c1', { permMode: 'bypassPermissions' });
+        expect(r.permMode).toBe('bypassPermissions');
+        // Profile still supplies the tool allowlist/tier unless the profile itself was overridden.
+        expect(r.allowedTools).toEqual(['Read', 'Glob', 'Grep']);
+        expect(r.profile).toBe('readonly');
+    });
+    it('session override can switch the profile, changing bundled tools', () => {
+        store.save(makeConfig());
+        const { resolver, registry } = build();
+        registry.set(binding({ profile: 'readonly' }));
+        const r = resolver.resolve('g1', 'c1', { profile: 'edit' });
+        expect(r.profile).toBe('edit');
+        expect(r.permMode).toBe('acceptEdits');
+        expect(r.allowedTools).toEqual(['Read', 'Edit', 'Write', 'Bash']);
+        expect(r.policyTier).toBe('normal');
+    });
+    it('session override can clear the profile back to layered/global tools', () => {
+        store.save(makeConfig());
+        const { resolver, registry } = build();
+        registry.set(binding({ profile: 'readonly', permMode: 'acceptEdits' }));
+        const r = resolver.resolve('g1', 'c1', { profile: null });
+        expect(r.profile).toBeNull();
+        // No profile → layered permMode (binding's acceptEdits) + global auto-allow tools.
+        expect(r.permMode).toBe('acceptEdits');
+        expect(r.allowedTools).toEqual(['Read', 'Glob', 'Grep']);
+    });
+    it('throws on an unknown profile name', () => {
+        store.save(makeConfig());
+        const { resolver, registry } = build();
+        registry.set(binding({ profile: 'nope' }));
+        expect(() => resolver.resolve('g1', 'c1')).toThrow(/unknown permission profile/i);
+    });
+});
+//# sourceMappingURL=permissionResolver.test.js.map

package/dist/core/permissionResolver.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionResolver.test.js","sourceRoot":"","sources":["../../src/core/permissionResolver.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAkB,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAA4B,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,SAAS,UAAU,CAAC,YAAgC,EAAE;IACpD,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE;QAC1D,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;QACrF,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,SAAS;YACzB,iBAAiB,EAAE,IAAI;YACvB,SAAS,EAAE,UAAU;YACrB,eAAe,EAAE,OAAO;YACxB,eAAe,EAAE,IAAI;SACtB;QACD,MAAM,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE;QACtF,MAAM,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE;QAC7D,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC9C,QAAQ,EAAE;YACR,QAAQ,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE;YACrG,IAAI,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE;SAC/G;QACD,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE;QAClD,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC1B,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE;QACb,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,YAA0C,EAAE;IAC3D,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,IAAI;QACf,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,IAAI;QACb,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,GAAW,CAAC;IAChB,IAAI,KAAkB,CAAC;IAEvB,SAAS,KAAK;QACZ,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC;QAC5F,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC/D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAC7D,KAAK,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzB,KAAK,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QACvC,6BAA6B;QAC7B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClE,wBAAwB;QACxB,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gDAAgD;QACjF,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B;QAC5E,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC7C,2FAA2F;QAC3F,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7B,mFAAmF;QACnF,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}