erosolar-cli 1.7.439 → 1.7.440

package/dist/core/schemaValidator.js

@@ -0,0 +1,155 @@
+/**
+ * Enhanced validation error with structured error information
+ */
+export class ToolArgumentValidationError extends Error {
+    issues;
+    toolName;
+    constructor(toolName, issues) {
+        super(formatMessage(toolName, issues));
+        this.name = 'ToolArgumentValidationError';
+        this.issues = issues;
+        this.toolName = toolName;
+    }
+}
+/**
+ * Runtime type guards for tool argument validation
+ */
+export var TypeGuards;
+(function (TypeGuards) {
+    /**
+     * Type guard for string values
+     */
+    function isString(value) {
+        return typeof value === 'string';
+    }
+    TypeGuards.isString = isString;
+    /**
+     * Type guard for number values
+     */
+    function isNumber(value) {
+        return typeof value === 'number' && !Number.isNaN(value);
+    }
+    TypeGuards.isNumber = isNumber;
+    /**
+     * Type guard for boolean values
+     */
+    function isBoolean(value) {
+        return typeof value === 'boolean';
+    }
+    TypeGuards.isBoolean = isBoolean;
+    /**
+     * Type guard for array values
+     */
+    function isArray(value) {
+        return Array.isArray(value);
+    }
+    TypeGuards.isArray = isArray;
+    /**
+     * Type guard for object values
+     */
+    function isObject(value) {
+        return typeof value === 'object' && value !== null && !Array.isArray(value);
+    }
+    TypeGuards.isObject = isObject;
+    /**
+     * Type guard for non-null values
+     */
+    function isNotNull(value) {
+        return value !== undefined && value !== null;
+    }
+    TypeGuards.isNotNull = isNotNull;
+    /**
+     * Type guard for enum values
+     */
+    function isEnum(value, enumValues) {
+        return TypeGuards.isString(value) && enumValues.includes(value);
+    }
+    TypeGuards.isEnum = isEnum;
+})(TypeGuards || (TypeGuards = {}));
+export function validateToolArguments(toolName, schema, args) {
+    if (!schema || schema.type !== 'object') {
+        return;
+    }
+    const errors = [];
+    const properties = schema.properties ?? {};
+    const required = Array.isArray(schema.required) ? schema.required : [];
+    for (const property of required) {
+        if (!hasArgument(args, property)) {
+            errors.push(`Missing required property "${property}".`);
+        }
+    }
+    for (const [key, value] of Object.entries(args)) {
+        const definition = properties[key];
+        if (!definition) {
+            if (schema.additionalProperties === false) {
+                errors.push(`Property "${key}" is not allowed.`);
+            }
+            continue;
+        }
+        validateSchemaProperty(definition, value, key, errors);
+    }
+    if (errors.length) {
+        throw new ToolArgumentValidationError(toolName, errors);
+    }
+}
+function validateSchemaProperty(definition, value, path, errors) {
+    switch (definition.type) {
+        case 'string': {
+            if (typeof value !== 'string') {
+                errors.push(`Argument "${path}" must be a string.`);
+                return;
+            }
+            if (definition.enum && !definition.enum.includes(value)) {
+                errors.push(`Argument "${path}" must be one of: ${definition.enum.map((entry) => `"${entry}"`).join(', ')}.`);
+            }
+            if (typeof definition.minLength === 'number' && value.length < definition.minLength) {
+                errors.push(`Argument "${path}" must be at least ${definition.minLength} character${definition.minLength === 1 ? '' : 's'} long.`);
+            }
+            return;
+        }
+        case 'number': {
+            if (typeof value !== 'number' || Number.isNaN(value)) {
+                errors.push(`Argument "${path}" must be a number.`);
+            }
+            return;
+        }
+        case 'boolean': {
+            if (typeof value !== 'boolean') {
+                errors.push(`Argument "${path}" must be a boolean.`);
+            }
+            return;
+        }
+        case 'array': {
+            if (!Array.isArray(value)) {
+                errors.push(`Argument "${path}" must be an array.`);
+                return;
+            }
+            validateArrayItems(definition, value, path, errors);
+            return;
+        }
+        default:
+            return;
+    }
+}
+function validateArrayItems(definition, value, path, errors) {
+    const itemSchema = definition.items;
+    if (!itemSchema) {
+        return;
+    }
+    for (let index = 0; index < value.length; index += 1) {
+        const entry = value[index];
+        validateSchemaProperty(itemSchema, entry, `${path}[${index}]`, errors);
+    }
+}
+function hasArgument(args, key) {
+    if (!Object.hasOwn(args, key)) {
+        return false;
+    }
+    const value = args[key];
+    return value !== undefined && value !== null;
+}
+function formatMessage(toolName, issues) {
+    const detail = issues.join(' ');
+    return `Invalid arguments for "${toolName}": ${detail}`;
+}
+//# sourceMappingURL=schemaValidator.js.map

package/dist/core/schemaValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaValidator.js","sourceRoot":"","sources":["../../src/core/schemaValidator.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,MAAM,CAAoB;IAC1B,QAAQ,CAAS;IAE1B,YAAY,QAAgB,EAAE,MAAgB;QAC5C,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,KAAW,UAAU,CAiD1B;AAjDD,WAAiB,UAAU;IACzB;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;IACnC,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAc;QACtC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;IACpC,CAAC;IAFe,oBAAS,YAExB,CAAA;IAED;;OAEG;IACH,SAAgB,OAAO,CAAC,KAAc;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAFe,kBAAO,UAEtB,CAAA;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAc;QACtC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;IAC/C,CAAC;IAFe,oBAAS,YAExB,CAAA;IAED;;OAEG;IACH,SAAgB,MAAM,CAAmB,KAAc,EAAE,UAAwB;QAC/E,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAU,CAAC,CAAC;IACvE,CAAC;IAFe,iBAAM,SAErB,CAAA;AACH,CAAC,EAjDgB,UAAU,KAAV,UAAU,QAiD1B;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,MAAoC,EACpC,IAA6B;IAE7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,8BAA8B,QAAQ,IAAI,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,mBAAmB,CAAC,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QACD,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAA8B,EAC9B,KAAc,EACd,IAAY,EACZ,MAAgB;IAEhB,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,aAAa,IAAI,qBAAqB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;gBACpF,MAAM,CAAC,IAAI,CACT,aAAa,IAAI,sBAAsB,UAAU,CAAC,SAAS,aACzD,UAAU,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACpC,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;YACtD,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC,CAAC;YACvD,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,kBAAkB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,UAA2B,EAC3B,KAAgB,EAChB,IAAY,EACZ,MAAgB;IAEhB,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,GAAW;IAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAgB;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,0BAA0B,QAAQ,MAAM,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/core/secretStore.d.ts

@@ -0,0 +1,48 @@
+import type { ProviderId } from './types.js';
+export type SecretName = 'OPENAI_API_KEY' | 'ANTHROPIC_API_KEY' | 'DEEPSEEK_API_KEY' | 'XAI_API_KEY' | 'GEMINI_API_KEY' | 'BRAVE_SEARCH_API_KEY' | 'SERPAPI_API_KEY' | 'TAVILY_API_KEY' | 'SMTP_USER' | 'SMTP_PASSWORD' | 'SMTP_PROVIDER' | 'SMTP_FROM_NAME' | 'SMTP_HOST' | 'SMTP_PORT';
+export interface SecretDefinition {
+    id: SecretName;
+    label: string;
+    description: string;
+    envVar: SecretName;
+    providers: ProviderId[];
+}
+export declare class MissingSecretError extends Error {
+    readonly secret: SecretDefinition;
+    constructor(secret: SecretDefinition);
+}
+export declare function listSecretDefinitions(): SecretDefinition[];
+export declare function getSecretDefinition(id: SecretName): SecretDefinition | null;
+export declare function getSecretValue(id: SecretName): string | null;
+/**
+ * Load all stored secrets into process.env at startup.
+ * This ensures secrets are available before any provider checks.
+ *
+ * IMPORTANT: Stored secrets always take precedence over environment variables
+ * for provider API keys. This ensures keys set via /secrets are used even if
+ * the user has old/stale keys exported in their shell environment.
+ */
+export declare function loadAllSecrets(): void;
+export declare function setSecretValue(id: SecretName, rawValue: string): void;
+export declare function maskSecret(value: string): string;
+export declare function ensureSecretForProvider(provider: ProviderId): string;
+export declare function getSecretDefinitionForProvider(provider: ProviderId): SecretDefinition | null;
+/**
+ * Sanitize error messages to remove potential API keys and secrets.
+ * This prevents accidental token leakage in logs, error reports, and console output.
+ *
+ * @param message - The error message or string to sanitize
+ * @returns The sanitized string with secrets replaced by [REDACTED]
+ */
+export declare function sanitizeErrorMessage(message: string): string;
+/**
+ * Sanitize an Error object's message and stack trace.
+ * Returns a new error message string with secrets removed.
+ */
+export declare function sanitizeError(error: Error): string;
+/**
+ * Create a safe error message from an unknown error value.
+ * Ensures no secrets are leaked regardless of error type.
+ */
+export declare function safeErrorMessage(error: unknown): string;
+//# sourceMappingURL=secretStore.d.ts.map

package/dist/core/secretStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretStore.d.ts","sourceRoot":"","sources":["../../src/core/secretStore.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,UAAU,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAClB,aAAa,GACb,gBAAgB,GAChB,sBAAsB,GACtB,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,GACX,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,UAAU,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,UAAU,EAAE,CAAC;CACzB;AA+GD,qBAAa,kBAAmB,SAAQ,KAAK;aACf,MAAM,EAAE,gBAAgB;gBAAxB,MAAM,EAAE,gBAAgB;CAIrD;AAED,wBAAgB,qBAAqB,IAAI,gBAAgB,EAAE,CAE1D;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAE3E;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAc5D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAerC;AAyBD,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAerE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAQpE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAE5F;AAwED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA4B5D;AAmCD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAQlD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQvD"}

package/dist/core/secretStore.js

@@ -0,0 +1,367 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+const SECRET_DEFINITIONS = [
+    {
+        id: 'OPENAI_API_KEY',
+        label: 'OpenAI API Key',
+        description: 'Required to run OpenAI GPT and Erosolar Code models.',
+        envVar: 'OPENAI_API_KEY',
+        providers: ['openai'],
+    },
+    {
+        id: 'ANTHROPIC_API_KEY',
+        label: 'Anthropic API Key',
+        description: 'Required to run Anthropic Sonnet, Opus, or Haiku models.',
+        envVar: 'ANTHROPIC_API_KEY',
+        providers: ['anthropic'],
+    },
+    {
+        id: 'DEEPSEEK_API_KEY',
+        label: 'DeepSeek API Key',
+        description: 'Required to run DeepSeek Reasoner or Chat models.',
+        envVar: 'DEEPSEEK_API_KEY',
+        providers: ['deepseek'],
+    },
+    {
+        id: 'XAI_API_KEY',
+        label: 'xAI API Key',
+        description: 'Required to run Grok models from xAI.',
+        envVar: 'XAI_API_KEY',
+        providers: ['xai'],
+    },
+    {
+        id: 'GEMINI_API_KEY',
+        label: 'Google Gemini API Key',
+        description: 'Required to run Gemini 2.5 Pro or Flash models.',
+        envVar: 'GEMINI_API_KEY',
+        providers: ['google'],
+    },
+    {
+        id: 'BRAVE_SEARCH_API_KEY',
+        label: 'Brave Search API Key',
+        description: 'Optional: unlock WebSearch using the Brave Search API.',
+        envVar: 'BRAVE_SEARCH_API_KEY',
+        providers: [],
+    },
+    {
+        id: 'SERPAPI_API_KEY',
+        label: 'SerpAPI Key',
+        description: 'Optional: fallback WebSearch provider via SerpAPI.',
+        envVar: 'SERPAPI_API_KEY',
+        providers: [],
+    },
+    {
+        id: 'TAVILY_API_KEY',
+        label: 'Tavily API Key',
+        description: 'Recommended: Primary WebSearch and WebExtract provider. Get yours at https://tavily.com',
+        envVar: 'TAVILY_API_KEY',
+        providers: [],
+    },
+    {
+        id: 'SMTP_USER',
+        label: 'Email Address',
+        description: 'Your email address for sending emails (e.g., you@gmail.com).',
+        envVar: 'SMTP_USER',
+        providers: [],
+    },
+    {
+        id: 'SMTP_PASSWORD',
+        label: 'Email App Password',
+        description: 'App password for your email (NOT your regular password). For Gmail: https://myaccount.google.com/apppasswords',
+        envVar: 'SMTP_PASSWORD',
+        providers: [],
+    },
+    {
+        id: 'SMTP_PROVIDER',
+        label: 'Email Provider',
+        description: 'Email provider: gmail, outlook, yahoo, icloud, zoho (default: gmail).',
+        envVar: 'SMTP_PROVIDER',
+        providers: [],
+    },
+    {
+        id: 'SMTP_FROM_NAME',
+        label: 'Email Display Name',
+        description: 'Optional: Display name shown in sent emails (e.g., "John Doe").',
+        envVar: 'SMTP_FROM_NAME',
+        providers: [],
+    },
+    {
+        id: 'SMTP_HOST',
+        label: 'Custom SMTP Host',
+        description: 'Optional: Custom SMTP server hostname (only for non-standard providers).',
+        envVar: 'SMTP_HOST',
+        providers: [],
+    },
+    {
+        id: 'SMTP_PORT',
+        label: 'Custom SMTP Port',
+        description: 'Optional: Custom SMTP port (only for non-standard providers, default: 587).',
+        envVar: 'SMTP_PORT',
+        providers: [],
+    },
+];
+const envErosolarHome = process.env['EROSOLAR_HOME'];
+const SECRET_DIR = envErosolarHome ? resolve(envErosolarHome) : join(homedir(), '.erosolar');
+const SECRET_FILE = join(SECRET_DIR, 'secrets.json');
+export class MissingSecretError extends Error {
+    secret;
+    constructor(secret) {
+        super(`${secret.label} is not configured.`);
+        this.secret = secret;
+        this.name = 'MissingSecretError';
+    }
+}
+export function listSecretDefinitions() {
+    return [...SECRET_DEFINITIONS];
+}
+export function getSecretDefinition(id) {
+    return SECRET_DEFINITIONS.find((entry) => entry.id === id) ?? null;
+}
+export function getSecretValue(id) {
+    const envValue = sanitize(process.env[id]);
+    if (envValue) {
+        return envValue;
+    }
+    const store = readSecretStore();
+    const storedValue = sanitize(store[id]);
+    if (!storedValue) {
+        return null;
+    }
+    process.env[id] = storedValue;
+    return storedValue;
+}
+/**
+ * Load all stored secrets into process.env at startup.
+ * This ensures secrets are available before any provider checks.
+ *
+ * IMPORTANT: Stored secrets always take precedence over environment variables
+ * for provider API keys. This ensures keys set via /secrets are used even if
+ * the user has old/stale keys exported in their shell environment.
+ */
+export function loadAllSecrets() {
+    const store = readSecretStore();
+    for (const definition of SECRET_DEFINITIONS) {
+        const storedValue = sanitize(store[definition.id]);
+        if (storedValue) {
+            // Always use stored value for API keys to ensure /secrets takes precedence
+            // over potentially stale environment variables
+            process.env[definition.id] = storedValue;
+        }
+    }
+    // Sync GEMINI_API_KEY and GOOGLE_API_KEY for Google SDK compatibility
+    // The Google SDK checks both vars and warns if both are set
+    // We standardize on GEMINI_API_KEY as the canonical key
+    syncGoogleApiKeys();
+}
+/**
+ * Sync GEMINI_API_KEY and GOOGLE_API_KEY environment variables.
+ * The Google SDK prefers GOOGLE_API_KEY if both are set, but we use GEMINI_API_KEY
+ * as the canonical stored key. This function ensures consistency.
+ */
+function syncGoogleApiKeys() {
+    const geminiKey = process.env['GEMINI_API_KEY'];
+    const googleKey = process.env['GOOGLE_API_KEY'];
+    if (geminiKey && !googleKey) {
+        // Only GEMINI_API_KEY set - also set GOOGLE_API_KEY to avoid SDK confusion
+        process.env['GOOGLE_API_KEY'] = geminiKey;
+    }
+    else if (googleKey && !geminiKey) {
+        // Only GOOGLE_API_KEY set (from env export) - copy to GEMINI_API_KEY
+        process.env['GEMINI_API_KEY'] = googleKey;
+    }
+    else if (geminiKey && googleKey && geminiKey !== googleKey) {
+        // Both set with different values - prefer GEMINI_API_KEY (the stored one)
+        // and sync GOOGLE_API_KEY to match
+        process.env['GOOGLE_API_KEY'] = geminiKey;
+    }
+    // If both are set and equal, no action needed
+}
+export function setSecretValue(id, rawValue) {
+    const value = sanitize(rawValue);
+    if (!value) {
+        throw new Error('Secret value cannot be blank.');
+    }
+    const store = readSecretStore();
+    store[id] = value;
+    writeSecretStore(store);
+    process.env[id] = value;
+    // If setting GEMINI_API_KEY, also sync GOOGLE_API_KEY for SDK compatibility
+    if (id === 'GEMINI_API_KEY') {
+        process.env['GOOGLE_API_KEY'] = value;
+    }
+}
+export function maskSecret(value) {
+    if (!value) {
+        return '';
+    }
+    if (value.length <= 4) {
+        return '*'.repeat(value.length);
+    }
+    const suffix = value.slice(-4);
+    const prefix = '*'.repeat(Math.max(0, value.length - 4));
+    return `${prefix}${suffix}`;
+}
+export function ensureSecretForProvider(provider) {
+    const definition = findDefinitionForProvider(provider);
+    const value = getSecretValue(definition.id);
+    if (!value) {
+        throw new MissingSecretError(definition);
+    }
+    process.env[definition.envVar] = value;
+    return value;
+}
+export function getSecretDefinitionForProvider(provider) {
+    return SECRET_DEFINITIONS.find((entry) => entry.providers.includes(provider)) ?? null;
+}
+function readSecretStore() {
+    if (!existsSync(SECRET_FILE)) {
+        return {};
+    }
+    try {
+        const content = readFileSync(SECRET_FILE, 'utf8');
+        const parsed = JSON.parse(content);
+        if (parsed && typeof parsed === 'object') {
+            return parsed;
+        }
+    }
+    catch {
+        return {};
+    }
+    return {};
+}
+function writeSecretStore(store) {
+    const directory = dirname(SECRET_FILE);
+    mkdirSync(directory, { recursive: true });
+    const payload = JSON.stringify(store, null, 2);
+    writeFileSync(SECRET_FILE, `${payload}
+`);
+}
+function findDefinitionForProvider(provider) {
+    const definition = getSecretDefinitionForProvider(provider);
+    if (!definition) {
+        throw new Error(`No secret configuration for provider "${provider}".`);
+    }
+    return definition;
+}
+function sanitize(value) {
+    if (typeof value !== 'string') {
+        return null;
+    }
+    const trimmed = value.trim();
+    return trimmed.length ? trimmed : null;
+}
+// ============================================================================
+// Secret Sanitization for Error Messages
+// ============================================================================
+/**
+ * Known API key patterns to detect and sanitize in error messages.
+ * These patterns match common API key formats from various providers.
+ */
+const API_KEY_PATTERNS = [
+    // Anthropic API keys: sk-ant-api03-...
+    /sk-ant-api\d{2}-[A-Za-z0-9_-]{20,}/g,
+    // OpenAI API keys: sk-proj-... or sk-...
+    /sk-(?:proj-)?[A-Za-z0-9_-]{20,}/g,
+    // Generic Bearer tokens in headers
+    /Bearer\s+[A-Za-z0-9_.-]{20,}/gi,
+    // x-api-key header values
+    /x-api-key['":\s]+[A-Za-z0-9_.-]{20,}/gi,
+    // API keys in URLs (key=value pattern)
+    /[?&](?:key|api_key|apiKey|api-key|token|access_token)=([A-Za-z0-9_.-]{16,})/gi,
+    // DeepSeek keys
+    /sk-[a-f0-9]{32,}/gi,
+    // xAI/Grok keys
+    /xai-[A-Za-z0-9_-]{20,}/gi,
+    // Google/Gemini API keys (AIza...)
+    /AIza[A-Za-z0-9_-]{30,}/g,
+    // Generic long alphanumeric tokens that look like API keys
+    /(?:api[_-]?key|token|secret|password|credential)['"]?\s*[:=]\s*['"]?([A-Za-z0-9_.-]{20,})['"]?/gi,
+];
+/**
+ * Sanitize error messages to remove potential API keys and secrets.
+ * This prevents accidental token leakage in logs, error reports, and console output.
+ *
+ * @param message - The error message or string to sanitize
+ * @returns The sanitized string with secrets replaced by [REDACTED]
+ */
+export function sanitizeErrorMessage(message) {
+    if (!message || typeof message !== 'string') {
+        return message;
+    }
+    let sanitized = message;
+    // Apply all API key patterns
+    for (const pattern of API_KEY_PATTERNS) {
+        // Reset lastIndex for global patterns
+        pattern.lastIndex = 0;
+        sanitized = sanitized.replace(pattern, (match) => {
+            // For patterns with capture groups, try to preserve context
+            if (match.includes('=') || match.includes(':')) {
+                const separator = match.includes('=') ? '=' : ':';
+                const parts = match.split(separator);
+                if (parts.length === 2) {
+                    return `${parts[0]}${separator}[REDACTED]`;
+                }
+            }
+            return '[REDACTED]';
+        });
+    }
+    // Additionally sanitize any env var values that are currently loaded
+    sanitized = sanitizeAgainstLoadedSecrets(sanitized);
+    return sanitized;
+}
+/**
+ * Sanitize a string against currently loaded secret values.
+ * This catches any secrets that might not match the pattern-based detection.
+ */
+function sanitizeAgainstLoadedSecrets(message) {
+    const secretNames = [
+        'OPENAI_API_KEY',
+        'ANTHROPIC_API_KEY',
+        'DEEPSEEK_API_KEY',
+        'XAI_API_KEY',
+        'GEMINI_API_KEY',
+        'BRAVE_SEARCH_API_KEY',
+        'SERPAPI_API_KEY',
+        'TAVILY_API_KEY',
+        'SMTP_PASSWORD',
+    ];
+    let sanitized = message;
+    for (const name of secretNames) {
+        const value = process.env[name];
+        if (value && value.length >= 8) {
+            // Only sanitize if the value appears in the message
+            // Use a case-sensitive exact match to avoid false positives
+            if (sanitized.includes(value)) {
+                sanitized = sanitized.split(value).join('[REDACTED]');
+            }
+        }
+    }
+    return sanitized;
+}
+/**
+ * Sanitize an Error object's message and stack trace.
+ * Returns a new error message string with secrets removed.
+ */
+export function sanitizeError(error) {
+    const message = sanitizeErrorMessage(error.message);
+    const stack = error.stack ? sanitizeErrorMessage(error.stack) : '';
+    if (stack && stack !== message) {
+        return `${message}\n${stack}`;
+    }
+    return message;
+}
+/**
+ * Create a safe error message from an unknown error value.
+ * Ensures no secrets are leaked regardless of error type.
+ */
+export function safeErrorMessage(error) {
+    if (error instanceof Error) {
+        return sanitizeErrorMessage(error.message);
+    }
+    if (typeof error === 'string') {
+        return sanitizeErrorMessage(error);
+    }
+    return 'Unknown error occurred';
+}
+//# sourceMappingURL=secretStore.js.map

package/dist/core/secretStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretStore.js","sourceRoot":"","sources":["../../src/core/secretStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BnD,MAAM,kBAAkB,GAAuB;IAC7C;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,sDAAsD;QACnE,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,0DAA0D;QACvE,MAAM,EAAE,mBAAmB;QAC3B,SAAS,EAAE,CAAC,WAAW,CAAC;KACzB;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,mDAAmD;QAChE,MAAM,EAAE,kBAAkB;QAC1B,SAAS,EAAE,CAAC,UAAU,CAAC;KACxB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,uCAAuC;QACpD,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,CAAC,KAAK,CAAC;KACnB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,iDAAiD;QAC9D,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,wDAAwD;QACrE,MAAM,EAAE,sBAAsB;QAC9B,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,oDAAoD;QACjE,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,yFAAyF;QACtG,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,8DAA8D;QAC3E,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,+GAA+G;QAC5H,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,uEAAuE;QACpF,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,iEAAiE;QAC9E,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,0EAA0E;QACvF,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,EAAE;KACd;IACD;QACE,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,6EAA6E;QAC1F,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,EAAE;KACd;CACF,CAAC;AAEF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AACrD,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAC7F,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AAErD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACf;IAA5B,YAA4B,MAAwB;QAClD,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,qBAAqB,CAAC,CAAC;QADlB,WAAM,GAAN,MAAM,CAAkB;QAElD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAc;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAc;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC;IAC9B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,MAAM,UAAU,IAAI,kBAAkB,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,2EAA2E;YAC3E,+CAA+C;YAC/C,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,4DAA4D;IAC5D,wDAAwD;IACxD,iBAAiB,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB;IACxB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAEhD,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,2EAA2E;QAC3E,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC;IAC5C,CAAC;SAAM,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,qEAAqE;QACrE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC;IAC5C,CAAC;SAAM,IAAI,SAAS,IAAI,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7D,0EAA0E;QAC1E,mCAAmC;QACnC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC;IAC5C,CAAC;IACD,8CAA8C;AAChD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAc,EAAE,QAAgB;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IAClB,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IAExB,4EAA4E;IAC5E,IAAI,EAAE,KAAK,gBAAgB,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC;IACxC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAoB;IAC1D,MAAM,UAAU,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACvC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAAoB;IACjE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,MAAyB,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAsB;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,aAAa,CAAC,WAAW,EAAE,GAAG,OAAO;CACtC,CAAC,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAoB;IACrD,MAAM,UAAU,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,gBAAgB,GAAa;IACjC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,kCAAkC;IAClC,mCAAmC;IACnC,gCAAgC;IAChC,0BAA0B;IAC1B,wCAAwC;IACxC,uCAAuC;IACvC,+EAA+E;IAC/E,gBAAgB;IAChB,oBAAoB;IACpB,gBAAgB;IAChB,0BAA0B;IAC1B,mCAAmC;IACnC,yBAAyB;IACzB,2DAA2D;IAC3D,kGAAkG;CACnG,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,6BAA6B;IAC7B,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,sCAAsC;QACtC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/C,4DAA4D;YAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,YAAY,CAAC;gBAC7C,CAAC;YACH,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,SAAS,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,4BAA4B,CAAC,OAAe;IACnD,MAAM,WAAW,GAAiB;QAChC,gBAAgB;QAChB,mBAAmB;QACnB,kBAAkB;QAClB,aAAa;QACb,gBAAgB;QAChB,sBAAsB;QACtB,iBAAiB;QACjB,gBAAgB;QAChB,eAAe;KAChB,CAAC;IAEF,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC/B,oDAAoD;YACpD,4DAA4D;YAC5D,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAY;IACxC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnE,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,GAAG,OAAO,KAAK,KAAK,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC"}