dodo-mcp 1.0.0

package/dist/services/ai/credentials.js

@@ -0,0 +1,77 @@
+import { spawn } from 'node:child_process';
+import { timingSafeEqual } from 'node:crypto';
+import { DodoError } from '../../errors.js';
+const SERVICE = 'DODO AI Providers';
+export class AICredentials {
+    session = new Map();
+    command(args, input) {
+        if (process.platform !== 'darwin')
+            return Promise.reject(new DodoError('NOT_SUPPORTED', 'Keychain storage requires macOS; use session credentials on this platform'));
+        return new Promise((resolve, reject) => {
+            const child = spawn('/usr/bin/security', args, { shell: false, stdio: ['pipe', 'pipe', 'ignore'] });
+            const chunks = [];
+            let bytes = 0;
+            const timer = setTimeout(() => child.kill(), 30000);
+            child.stdout.on('data', (b) => { bytes += b.length; if (bytes > 16384)
+                child.kill();
+            else
+                chunks.push(b); });
+            child.on('error', () => { clearTimeout(timer); reject(new DodoError('NOT_SUPPORTED', 'Keychain unavailable')); });
+            child.on('close', code => { clearTimeout(timer); if (code !== 0 || bytes > 16384)
+                reject(new DodoError('AUTH_REQUIRED', 'Keychain refused access; unlock it locally or use a session key'));
+            else
+                resolve(Buffer.concat(chunks)); });
+            child.stdin.on('error', () => undefined);
+            child.stdin.end(input);
+        });
+    }
+    hasSession(id) { return this.session.has(id); }
+    async get(id, storage) {
+        if (storage === 'session')
+            return this.session.get(id)?.toString('utf8') ?? '';
+        const value = await this.command(['find-generic-password', '-a', id, '-s', SERVICE, '-w']);
+        try {
+            return value.toString('utf8').replace(/\r?\n$/, '');
+        }
+        finally {
+            value.fill(0);
+        }
+    }
+    async set(id, storage, key) {
+        if (key.length < 1 || key.length > 4096 || /[\x00-\x20\x7f]/.test(key))
+            throw new DodoError('INVALID_INPUT', 'API key must be a single nonempty credential without whitespace');
+        if (storage === 'session') {
+            this.session.get(id)?.fill(0);
+            this.session.set(id, Buffer.from(key));
+            return;
+        }
+        const input = Buffer.from(`${key}\n${key}\n`);
+        try {
+            await this.command(['add-generic-password', '-U', '-a', id, '-s', SERVICE, '-w'], input);
+            const roundtrip = Buffer.from(await this.get(id, storage));
+            const expected = Buffer.from(key);
+            try {
+                if (roundtrip.length !== expected.length || !timingSafeEqual(roundtrip, expected))
+                    throw new DodoError('INTERNAL_ERROR', 'Keychain verification failed');
+            }
+            finally {
+                roundtrip.fill(0);
+                expected.fill(0);
+            }
+        }
+        finally {
+            input.fill(0);
+        }
+    }
+    async delete(id, storage) {
+        if (storage === 'session') {
+            this.session.get(id)?.fill(0);
+            this.session.delete(id);
+        }
+        if (storage === 'keychain')
+            await this.command(['delete-generic-password', '-a', id, '-s', SERVICE]);
+    }
+    close() { for (const b of this.session.values())
+        b.fill(0); this.session.clear(); }
+}
+//# sourceMappingURL=credentials.js.map

package/dist/services/ai/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../src/services/ai/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC;AACpC,MAAM,OAAO,aAAa;IACP,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,OAAO,CAAC,IAAc,EAAE,KAAc;QAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,eAAe,EAAE,2EAA2E,CAAC,CAAC,CAAC;QACtK,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpG,MAAM,MAAM,GAAa,EAAE,CAAC;YAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YACpD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,GAAG,KAAK;gBAAE,KAAK,CAAC,IAAI,EAAE,CAAC;;gBAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,KAAK;gBAAE,MAAM,CAAC,IAAI,SAAS,CAAC,eAAe,EAAE,iEAAiE,CAAC,CAAC,CAAC;;gBAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrO,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,UAAU,CAAC,EAAU,IAAa,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,OAA+B;QACnD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC;YAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACzF,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,OAA+B,EAAE,GAAW;QAChE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,iEAAiE,CAAC,CAAC;QAChL,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7G,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YACzF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9F,IAAI,CAAC;gBAAC,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;YAAC,CAAC;oBACzJ,CAAC;gBAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,OAA+B;QACtD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACtF,IAAI,OAAO,KAAK,UAAU;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,yBAAyB,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,KAAW,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;QAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CAC1F"}

package/dist/services/ai/network.js

@@ -0,0 +1,113 @@
+import http from 'node:http';
+import https from 'node:https';
+import dns from 'node:dns/promises';
+import net from 'node:net';
+import { DodoError } from '../../errors.js';
+export function validateEndpoint(connection, adminPorts) {
+    const u = new URL(connection.baseUrl);
+    if (!['http:', 'https:'].includes(u.protocol) || u.username || u.password || u.search || u.hash)
+        throw new DodoError('INVALID_INPUT', 'provider URL must be an HTTP(S) base URL without credentials, query or fragment');
+    if (/(?:^|\/)(?:models|responses|messages|interactions|chat\/completions|chat|tags|show)\/?$/.test(u.pathname))
+        throw new DodoError('INVALID_INPUT', 'provider URL must stop at the API base (for example /v1); remove /models, /responses, /messages or /chat/completions');
+    if (u.protocol === 'http:' && !connection.allowPrivateNetwork)
+        throw new DodoError('FORBIDDEN', 'HTTP requires explicit private endpoint permission');
+    if (adminPorts.includes(Number(u.port || (u.protocol === 'https:' ? 443 : 80))))
+        throw new DodoError('FORBIDDEN', 'DODO control and MCP ports cannot be AI endpoints');
+    return u;
+}
+function addressClass(ip) {
+    ip = ip.toLowerCase().replace(/^::ffff:/, '');
+    if (ip.includes(':')) {
+        if (ip.startsWith('2002:') || ip.startsWith('2001:0:') || ip === '::' || /^fe[89ab]/.test(ip) || ip.startsWith('ff') || ip.includes('.'))
+            return 'denied';
+        if (ip === '::1' || /^f[cd]/.test(ip))
+            return 'private';
+        if (!ip.startsWith('2') && !ip.startsWith('3'))
+            return 'denied';
+        return 'public';
+    }
+    const [a = 0, b = 0] = ip.split('.').map(Number);
+    if (a === 0 || (a === 169 && b === 254) || a >= 224 || (a === 100 && b >= 64 && b <= 127))
+        return 'denied';
+    if (a === 10 || a === 127 || (a === 172 && b >= 16 && b <= 31) || (a === 192 && b === 168))
+        return 'private';
+    return 'public';
+}
+/** Resolve once, validate every address, then pin the selected address on the actual socket. */
+export async function providerRequest(connection, suffix, key, body, adminPorts, signal, onChunk, beforeSend) {
+    const base = validateEndpoint(connection, adminPorts);
+    const host = base.hostname.replace(/^\[|\]$/g, '');
+    const addresses = net.isIP(host) ? [{ address: host, family: net.isIP(host) }] : await dns.lookup(host, { all: true });
+    if (!addresses.length)
+        throw new DodoError('NOT_SUPPORTED', 'provider hostname has no address');
+    for (const { address } of addresses) {
+        const kind = addressClass(address);
+        if (kind === 'denied' || (kind === 'private' && !connection.allowPrivateNetwork) || (kind === 'public' && base.protocol === 'http:'))
+            throw new DodoError('FORBIDDEN', 'provider address is not allowed by endpoint policy');
+    }
+    // Node's HTTP agent requests lookup({ all:true }) so it can implement its
+    // own connection ordering. Return the already-reviewed pinned address in
+    // that shape; returning the legacy (address, family) tuple there makes
+    // public DNS providers fail with ERR_INVALID_IP_ADDRESS on current Node.
+    const chosen = addresses.find(entry => entry.family === 4) ?? addresses[0];
+    const url = new URL(base.toString().replace(/\/$/, '') + '/' + suffix.replace(/^\//, ''));
+    const payload = body === undefined ? undefined : JSON.stringify(body);
+    const headers = { 'content-type': 'application/json', accept: 'application/json, text/event-stream' };
+    if (key) {
+        if (connection.protocol === 'anthropic')
+            headers['x-api-key'] = key;
+        else if (connection.protocol === 'gemini')
+            headers['x-goog-api-key'] = key;
+        else
+            headers.authorization = `Bearer ${key}`;
+    }
+    if (connection.protocol === 'anthropic')
+        headers['anthropic-version'] = '2023-06-01';
+    signal?.throwIfAborted();
+    beforeSend?.();
+    return new Promise((resolve, reject) => {
+        const req = (url.protocol === 'https:' ? https : http).request(url, {
+            method: payload === undefined ? 'GET' : 'POST', headers, agent: false, ...(signal ? { signal } : {}),
+            lookup: (_hostname, options, callback) => {
+                if (typeof options === 'object' && options.all)
+                    callback(null, [chosen]);
+                else
+                    callback(null, chosen.address, chosen.family);
+            },
+        }, response => {
+            const status = response.statusCode ?? 0;
+            if (status >= 300 && status < 400) {
+                response.resume();
+                reject(new DodoError('FORBIDDEN', 'provider redirects are refused; credentials were not forwarded'));
+                return;
+            }
+            let bytes = 0;
+            let text = '';
+            let pending = '';
+            response.setEncoding('utf8');
+            response.on('data', (chunk) => {
+                bytes += Buffer.byteLength(chunk);
+                if (bytes > 4 * 1024 * 1024) {
+                    req.destroy();
+                    reject(new DodoError('RESOURCE_LIMIT', 'provider response is too large'));
+                    return;
+                }
+                text += chunk;
+                pending += chunk;
+                for (let i = pending.indexOf('\n'); i >= 0; i = pending.indexOf('\n')) {
+                    const line = pending.slice(0, i).trim();
+                    pending = pending.slice(i + 1);
+                    if (onChunk && status < 400)
+                        onChunk(line);
+                }
+            });
+            response.on('error', () => reject(new DodoError('CONFLICT', 'provider response failed; not retried')));
+            response.on('aborted', () => reject(new DodoError('CONFLICT', 'provider response interrupted; outcome uncertain, not retried')));
+            response.on('end', () => resolve({ status, text }));
+        });
+        req.setTimeout(120000, () => req.destroy());
+        req.on('error', () => reject(new DodoError('CONFLICT', 'provider connection failed or canceled; outcome uncertain, not retried')));
+        req.end(payload);
+    });
+}
+//# sourceMappingURL=network.js.map

package/dist/services/ai/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../../src/services/ai/network.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,GAAG,MAAM,mBAAmB,CAAC;AACpC,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,UAAU,gBAAgB,CAAC,UAAoB,EAAE,UAAoB;IACzE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,iFAAiF,CAAC,CAAC;IACzN,IAAI,yFAAyF,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,sHAAsH,CAAC,CAAC;IAC7Q,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,mBAAmB;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,oDAAoD,CAAC,CAAC;IACtJ,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,mDAAmD,CAAC,CAAC;IACvK,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,YAAY,CAAC,EAAU;IAC9B,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC1J,IAAI,EAAE,KAAK,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QAChE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,CAAC,GAAG,CAAC,EAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3G,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7G,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAoB,EAAE,MAAc,EAAE,GAAW,EAAE,IAAyB,EAChH,UAAoB,EAAE,MAAoB,EAAE,OAAgC,EAAE,UAAuB;IACrG,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACvH,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;IAChG,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,oDAAoD,CAAC,CAAC;IAC/N,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAE,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IAC9H,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,UAAU,CAAC,QAAQ,KAAK,WAAW;YAAE,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC;aAC/D,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC;;YACtE,OAAO,CAAC,aAAa,GAAG,UAAU,GAAG,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,KAAK,WAAW;QAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,YAAY,CAAC;IACrF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,UAAU,EAAE,EAAE,CAAC;IACf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAClE,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;gBACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG;oBAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;;oBACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACrD,CAAC;SACF,EAAE,QAAQ,CAAC,EAAE;YACZ,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;gBAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,gEAAgE,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACvK,IAAI,KAAK,GAAG,CAAC,CAAC;YAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,OAAO,GAAG,EAAE,CAAC;YAC/C,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC7B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACpC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,SAAS,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACrK,IAAI,IAAI,KAAK,CAAC;gBAAC,OAAO,IAAI,KAAK,CAAC;gBAChC,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAC,IAAI,OAAO,IAAI,MAAM,GAAG,GAAG;wBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;YACjM,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,EAAE,uCAAuC,CAAC,CAAC,CAAC,CAAC;YACvG,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,EAAE,+DAA+D,CAAC,CAAC,CAAC,CAAC;YACjI,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,UAAU,EAAE,wEAAwE,CAAC,CAAC,CAAC,CAAC;QACnI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/services/ai/settings.js

@@ -0,0 +1,178 @@
+import { digestOf, newId } from '../../util/hash.js';
+import { DodoError } from '../../errors.js';
+import { AICredentials } from './credentials.js';
+import { AILimits, PRESETS, ProviderInput, ProfileInput, ProjectAIInput } from './contracts.js';
+import { validateEndpoint, providerRequest } from './network.js';
+import { generate } from './adapters.js';
+export class AISettings {
+    store;
+    ports;
+    credentials = new AICredentials();
+    users = new Map();
+    editing = new Set();
+    lease(id) {
+        if (this.editing.has(id))
+            throw new DodoError('CONFLICT', 'provider credentials are being changed');
+        this.users.set(id, (this.users.get(id) ?? 0) + 1);
+        let released = false;
+        return () => { if (!released) {
+            released = true;
+            this.users.set(id, (this.users.get(id) ?? 1) - 1);
+        } };
+    }
+    edit(id) {
+        if (this.editing.has(id) || this.users.get(id))
+            throw new DodoError('CONFLICT', 'provider is in use; pause or finish its runs before changing credentials');
+        this.editing.add(id);
+        return () => { this.editing.delete(id); };
+    }
+    constructor(store, ports) {
+        this.store = store;
+        this.ports = ports;
+    }
+    list(kind) { return this.store.db.prepare('SELECT payload FROM ai_settings WHERE kind=? ORDER BY id LIMIT 1000').all(kind).map(r => JSON.parse(r.payload)); }
+    get(kind, id) { const r = this.store.db.prepare('SELECT payload FROM ai_settings WHERE kind=? AND id=?').get(kind, id); return r ? JSON.parse(r.payload) : undefined; }
+    put(kind, id, payload) { this.store.db.prepare('INSERT INTO ai_settings VALUES (?,?,?,?) ON CONFLICT(kind,id) DO UPDATE SET payload=excluded.payload,updated_at=excluded.updated_at').run(kind, id, JSON.stringify(payload), Date.now()); }
+    limits() { return AILimits.parse(this.get('settings', 'limits') ?? {}); }
+    saveLimits(raw) { const value = AILimits.parse(raw); this.put('settings', 'limits', value); return value; }
+    state() { return { presets: PRESETS, connections: this.list('connection').map(c => ({ ...c, credentialPresent: c.credentialStorage === 'session' ? this.credentials.hasSession(c.id) : this.get('credential', c.id) === true })), metadata: this.list('metadata'), probes: this.list('probe'), profiles: this.list('profile'), permissions: this.list('project'), limits: this.limits() }; }
+    async saveConnection(raw, key) {
+        const input = ProviderInput.parse(raw);
+        const c = { ...input, id: input.id ?? newId('ai') };
+        const done = this.edit(c.id);
+        try {
+            validateEndpoint(c, this.ports);
+            const previous = this.get('connection', c.id);
+            if (previous && (previous.baseUrl !== c.baseUrl || previous.protocol !== c.protocol || previous.credentialStorage !== c.credentialStorage) && !key)
+                throw new DodoError('INVALID_INPUT', 'endpoint/protocol/storage change requires entering credentials again; old keys are never forwarded');
+            if (key) {
+                await this.credentials.set(c.id, c.credentialStorage, key);
+                this.put('credential', c.id, true);
+            }
+            if (previous && key && previous.credentialStorage !== c.credentialStorage && this.get('credential', c.id))
+                await this.credentials.delete(c.id, previous.credentialStorage);
+            this.put('connection', c.id, c);
+            return c;
+        }
+        finally {
+            done();
+        }
+    }
+    saveProfile(raw) { const v = ProfileInput.parse(raw); if (!this.get('connection', v.connectionId))
+        throw new DodoError('NOT_FOUND', 'unknown provider connection'); const p = { ...v, id: v.id ?? newId('profile') }; this.put('profile', p.id, p); return p; }
+    savePermission(raw) { const p = ProjectAIInput.parse(raw); for (const id of p.profileIds)
+        if (!this.get('profile', id))
+            throw new DodoError('NOT_FOUND', 'unknown profile'); this.put('project', p.projectId, p); return p; }
+    async remove(kind, id) {
+        const done = kind === 'connection' ? this.edit(id) : () => undefined;
+        try {
+            if (kind === 'connection') {
+                if (this.list('profile').some(p => p.connectionId === id))
+                    throw new DodoError('CONFLICT', 'remove profiles using this connection first');
+                const c = this.get('connection', id);
+                if (c && this.get('credential', id))
+                    await this.credentials.delete(id, c.credentialStorage);
+            }
+            this.store.db.prepare('DELETE FROM ai_settings WHERE kind=? AND id=?').run(kind, id);
+            if (kind === 'connection')
+                this.store.db.prepare("DELETE FROM ai_settings WHERE kind='credential' AND id=?").run(id);
+        }
+        finally {
+            done();
+        }
+    }
+    connection(id) { const c = this.get('connection', id); if (!c?.enabled)
+        throw new DodoError('NOT_SUPPORTED', 'provider connection is missing or disabled'); return c; }
+    async models(id) {
+        const release = this.lease(id);
+        try {
+            const c = this.connection(id);
+            const key = await this.credentials.get(c.id, c.credentialStorage);
+            const response = await providerRequest(c, c.protocol === 'ollama' ? 'tags' : 'models', key, undefined, this.ports);
+            if ((response.status === 401 || response.status === 403) && !key)
+                throw new DodoError('AUTH_REQUIRED', `model listing returned HTTP ${response.status}; edit the connection and enter its API key`);
+            if (response.status >= 400)
+                throw new DodoError('NOT_SUPPORTED', `model listing returned HTTP ${response.status}; enter a model ID manually`);
+            if (key && response.text.includes(key))
+                throw new DodoError('FORBIDDEN', 'provider echoed credentials; response discarded');
+            let parsed;
+            try {
+                parsed = JSON.parse(response.text);
+            }
+            catch {
+                throw new DodoError('NOT_SUPPORTED', 'model listing returned an unsupported response');
+            }
+            if (key && JSON.stringify(parsed).includes(key))
+                throw new DodoError('FORBIDDEN', 'provider echoed credentials; response discarded');
+            return (parsed.data ?? parsed.models ?? []).slice(0, 200).map(v => { const m = v; return { id: String(m.id ?? m.name ?? m.model ?? '').slice(0, 200) }; });
+        }
+        finally {
+            release();
+        }
+    }
+    async inspectModel(profileId) {
+        const p = this.get('profile', profileId);
+        if (!p)
+            throw new DodoError('NOT_FOUND', 'unknown profile');
+        const release = this.lease(p.connectionId);
+        try {
+            const c = this.connection(p.connectionId), key = await this.credentials.get(c.id, c.credentialStorage);
+            if (c.protocol !== 'ollama')
+                throw new DodoError('NOT_SUPPORTED', 'metadata inspection is available for Ollama; use model listing and explicit inference/tool tests for this protocol');
+            const response = await providerRequest(c, 'show', key, { model: p.model, verbose: false }, this.ports);
+            if (response.status >= 400 || (key && response.text.includes(key)))
+                throw new DodoError('NOT_SUPPORTED', 'model metadata unavailable');
+            let m;
+            try {
+                m = JSON.parse(response.text);
+            }
+            catch {
+                throw new DodoError('NOT_SUPPORTED', 'invalid model metadata');
+            }
+            const host = new URL(c.baseUrl).hostname;
+            const local = ['127.0.0.1', 'localhost', '[::1]'].includes(host) && !m.remote_host && !m.remote_model && !/-cloud(?::|$)/i.test(p.model) && m.details?.format === 'gguf' && Number(m.model_info?.['general.parameter_count']) > 0;
+            const result = { profileId, model: p.model, location: local ? 'local' : 'remote-or-unknown', capabilities: (m.capabilities ?? []).filter(v => typeof v === 'string').slice(0, 30), checkedAt: Date.now(), configuration: digestOf({ profile: p, connection: c }), liveInferenceTested: false };
+            this.put('metadata', p.id, result);
+            return result;
+        }
+        finally {
+            release();
+        }
+    }
+    localVerified(p, c) {
+        const m = this.get('metadata', p.id);
+        return p.inferenceLocation === 'local' && m?.location === 'local' && m.configuration === digestOf({ profile: p, connection: c }) && m.checkedAt > Date.now() - 300000;
+    }
+    async probe(profileId, mode) {
+        const p = this.get('profile', profileId);
+        if (!p)
+            throw new DodoError('NOT_FOUND', 'unknown profile');
+        const release = this.lease(p.connectionId);
+        try {
+            const c = this.connection(p.connectionId);
+            const key = await this.credentials.get(c.id, c.credentialStorage);
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(), 60000);
+            try {
+                const first = await generate(c, { ...p, maxOutputTokens: 256 }, key, { task: mode === 'tools' ? 'Call dodo_probe once with value 1, then report its returned value.' : 'Reply with OK.', instructions: 'This is a synthetic connection test. No project data is supplied.', turns: [], tools: mode === 'tools' ? [{ name: 'dodo_probe', description: 'Returns the number 1.', parameters: { type: 'object', properties: { value: { type: 'integer', const: 1 } }, required: ['value'], additionalProperties: false } }] : [] }, this.ports, controller.signal);
+                if (mode === 'tools') {
+                    if (first.calls.length !== 1 || first.calls[0]?.name !== 'dodo_probe' || first.calls[0].args.value !== 1)
+                        throw new DodoError('NOT_SUPPORTED', 'model did not complete the synthetic tool call');
+                    const second = await generate(c, { ...p, maxOutputTokens: 256 }, key, { task: 'Call dodo_probe once with value 1, then report its returned value.', instructions: 'Report the tool result.', tools: [], turns: [{ reply: first, results: [{ id: first.calls[0].id, name: 'dodo_probe', content: '1' }] }] }, this.ports, controller.signal);
+                    if (second.calls.length || !second.text)
+                        throw new DodoError('NOT_SUPPORTED', 'tool result continuation failed');
+                }
+                const result = { profileId, mode, passed: true, checkedAt: Date.now(), connection: c.id, model: p.model, configuration: digestOf({ profile: p, connection: c }) };
+                this.put('probe', `${profileId}:${mode}`, result);
+                return result;
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+        }
+        finally {
+            release();
+        }
+    }
+}
+//# sourceMappingURL=settings.js.map

package/dist/services/ai/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/services/ai/settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAA+C,MAAM,gBAAgB,CAAC;AAC7I,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,MAAM,OAAO,UAAU;IAcA;IAAuB;IAbnC,WAAW,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1B,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C,KAAK,CAAC,EAAU;QACd,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;QACpG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IACO,IAAI,CAAC,EAAU;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,0EAA0E,CAAC,CAAC;QAC5J,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,YAAqB,KAAY,EAAW,KAAe;QAAtC,UAAK,GAAL,KAAK,CAAO;QAAW,UAAK,GAAL,KAAK,CAAU;IAAG,CAAC;IAC/D,IAAI,CAAI,IAAY,IAAS,OAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAgC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAM,CAAC,CAAC,CAAC,CAAC;IAClN,GAAG,CAAI,IAAY,EAAE,EAAU,IAAmB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAoC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACjP,GAAG,CAAC,IAAY,EAAE,EAAU,EAAE,OAAgB,IAAU,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,qIAAqI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1Q,MAAM,KAAK,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,UAAU,CAAC,GAAY,IAAI,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAC,QAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;IAClH,KAAK,KAAK,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAW,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAU,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAY,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1Z,KAAK,CAAC,cAAc,CAAC,GAAY,EAAE,GAAY;QAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC;YACL,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAW,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACxD,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,iBAAiB,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,oGAAoG,CAAC,CAAC;YAC/R,IAAI,GAAG,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAAC,CAAC;YAC5G,IAAI,QAAQ,IAAI,GAAG,IAAI,QAAQ,CAAC,iBAAiB,KAAK,CAAC,CAAC,iBAAiB,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,EAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YAC1K,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IACvB,CAAC;IACD,WAAW,CAAC,GAAY,IAAa,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjR,cAAc,CAAC,GAAY,IAAe,MAAM,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjP,KAAK,CAAC,MAAM,CAAC,IAA8B,EAAE,EAAU;QACrD,MAAM,IAAI,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACrE,IAAI,CAAC;YACL,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,IAAI,CAAU,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,EAAE,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,6CAA6C,CAAC,CAAC;gBACnJ,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAW,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;oBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrF,IAAI,IAAI,KAAK,YAAY;gBAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;gBAAS,CAAC;YAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IACvB,CAAC;IACD,UAAU,CAAC,EAAU,IAAc,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAW,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnM,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC;YACL,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACjG,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACnH,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,+BAA+B,QAAQ,CAAC,MAAM,6CAA6C,CAAC,CAAC;YACpM,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,+BAA+B,QAAQ,CAAC,MAAM,6BAA6B,CAAC,CAAC;YAC9I,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,iDAAiD,CAAC,CAAC;YAC5H,IAAI,MAAgD,CAAC;YACrD,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAkB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAC;YAAC,CAAC;YAC9J,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAC,iDAAiD,CAAC,CAAC;YACpI,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAmD,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7M,CAAC;gBAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAU,SAAS,EAAC,SAAS,CAAC,CAAC;QAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAC,iBAAiB,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACtG,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAC,oHAAoH,CAAC,CAAC;YACvL,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,CAAC,EAAC,MAAM,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,EAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9F,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAC,4BAA4B,CAAC,CAAC;YACtI,IAAI,CAAoI,CAAC;YACzI,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAa,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,SAAS,CAAC,eAAe,EAAC,wBAAwB,CAAC,CAAC;YAAC,CAAC;YAC3H,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;YACzC,MAAM,KAAK,GAAG,CAAC,WAAW,EAAC,WAAW,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC;YAChO,MAAM,MAAM,GAAG,EAAC,SAAS,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,mBAAmB,EAAC,YAAY,EAAC,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,EAAC,SAAS,EAAC,IAAI,CAAC,GAAG,EAAE,EAAC,aAAa,EAAC,QAAQ,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,UAAU,EAAC,CAAC,EAAC,CAAC,EAAC,mBAAmB,EAAC,KAAK,EAAC,CAAC;YACnQ,IAAI,CAAC,GAAG,CAAC,UAAU,EAAC,CAAC,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAClD,CAAC;gBAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC1B,CAAC;IACD,aAAa,CAAC,CAAU,EAAE,CAAW;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAA0D,UAAU,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7F,OAAO,CAAC,CAAC,iBAAiB,KAAK,OAAO,IAAI,CAAC,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,UAAU,EAAC,CAAC,EAAC,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAC,MAAM,CAAC;IACjK,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,IAA2B;QACxD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAU,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,CAAC;YACL,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC7G,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YAAC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;YACtG,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,oEAAoE,CAAC,CAAC,CAAC,gBAAgB,EAAE,YAAY,EAAE,mEAAmE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,uBAAuB,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC/hB,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;oBACrB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAC;oBACjM,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,oEAAoE,EAAE,YAAY,EAAE,yBAAyB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;oBAC5U,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;wBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,iCAAiC,CAAC,CAAC;gBACnH,CAAC;gBACD,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,aAAa,EAAC,QAAQ,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,UAAU,EAAC,CAAC,EAAC,CAAC,EAAE,CAAC;gBAC5J,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YACnE,CAAC;oBAAS,CAAC;gBAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC1B,CAAC;CACF"}