gnoman 0.1.0

package/dist/cli/src/core/backends/systemBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemBackend.js","sourceRoot":"","sources":["../../../../../src/core/backends/systemBackend.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAkE;AAElE,MAAa,aAAa;IAKxB,YAAY,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,QAAQ;QACtE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,kDAAO,QAAQ,IAAE,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnD,MAAM,IAAI,+BAAuB,CAC/B,+BAAgC,KAAe,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAC3E,QAAQ,CACT,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,UAAU,CAAI,OAAwD;QAClF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,+BAAuB,CAC/B,oCAAqC,KAAe,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAChF,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACnE,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC;YACnD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA7DD,sCA6DC;AAED,kBAAe,aAAa,CAAC"}

package/dist/cli/src/core/backends/types.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackendUnavailableError = void 0;
+class BackendUnavailableError extends Error {
+    constructor(message, backend) {
+        super(message);
+        this.backend = backend;
+        this.name = 'BackendUnavailableError';
+    }
+}
+exports.BackendUnavailableError = BackendUnavailableError;
+//# sourceMappingURL=types.js.map

package/dist/cli/src/core/backends/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/backends/types.ts"],"names":[],"mappings":";;;AAWA,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe,EAAkB,OAA2B;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,YAAO,GAAP,OAAO,CAAoB;QAEtE,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC"}

package/dist/cli/src/core/keyringManager.js

@@ -0,0 +1,178 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.keyringManager = exports.KeyringManager = void 0;
+const promises_1 = __importDefault(require("fs/promises"));
+const path_1 = __importDefault(require("path"));
+const types_1 = require("./backends/types");
+const fileBackend_1 = require("./backends/fileBackend");
+const systemBackend_1 = require("./backends/systemBackend");
+const memoryBackend_1 = require("./backends/memoryBackend");
+const FALLBACK_ORDER = ['system', 'file', 'memory'];
+const maskKey = (key) => {
+    if (!key) {
+        return '...';
+    }
+    const sanitized = key.replace(/[^A-Za-z0-9]/g, '');
+    if (!sanitized) {
+        return '...';
+    }
+    const prefix = sanitized
+        .slice(0, 3)
+        .toUpperCase()
+        .split('')
+        .join('_');
+    return `${prefix}${prefix ? '_' : ''}...`;
+};
+const defaultAuditLogPath = () => {
+    const base = process.env.GNOMAN_AUDIT_DIR ?? path_1.default.join(process.cwd(), 'logs');
+    return path_1.default.join(base, 'keyring_audit.log');
+};
+class KeyringManager {
+    constructor(options) {
+        this.cache = new Map();
+        this.factories = {
+            system: options?.backendFactories?.system ?? (() => new systemBackend_1.SystemBackend()),
+            file: options?.backendFactories?.file ?? (() => new fileBackend_1.FileBackend()),
+            memory: options?.backendFactories?.memory ?? (() => new memoryBackend_1.MemoryBackend())
+        };
+        this.auditLogPath = options?.auditLogPath ?? defaultAuditLogPath();
+    }
+    currentBackend() {
+        return this.activeBackendName ?? 'memory';
+    }
+    async ensureAuditLogDirectory() {
+        const directory = path_1.default.dirname(this.auditLogPath);
+        await promises_1.default.mkdir(directory, { recursive: true, mode: 0o700 });
+    }
+    async record(operation, key, backend = this.currentBackend()) {
+        try {
+            await this.ensureAuditLogDirectory();
+            const timestamp = new Date().toISOString();
+            const entry = `${timestamp}\t${backend}\t${operation}\t${maskKey(key)}\n`;
+            await promises_1.default.appendFile(this.auditLogPath, entry, { encoding: 'utf8' });
+        }
+        catch (error) {
+            console.warn('Unable to record keyring audit entry.', error);
+        }
+    }
+    async setActiveBackend(name, backend) {
+        this.activeBackendName = name;
+        this.activeBackend = backend;
+        this.cache = new Map();
+        const state = await backend.list();
+        this.cache = new Map(Object.entries(state));
+    }
+    computeFallbackOrder(requested) {
+        const index = FALLBACK_ORDER.indexOf(requested);
+        if (index === -1) {
+            return [...FALLBACK_ORDER];
+        }
+        return FALLBACK_ORDER.slice(index);
+    }
+    createBackend(name) {
+        const factory = this.factories[name];
+        if (!factory) {
+            throw new Error(`Unsupported keyring backend: ${name}`);
+        }
+        return factory();
+    }
+    async switchBackend(requested) {
+        const attempts = this.computeFallbackOrder(requested);
+        for (const candidate of attempts) {
+            const backend = this.createBackend(candidate);
+            try {
+                await backend.initialize();
+                if (this.activeBackend?.shutdown) {
+                    await this.activeBackend.shutdown();
+                }
+                await this.setActiveBackend(candidate, backend);
+                await this.record('switch', null, candidate);
+                return;
+            }
+            catch (error) {
+                if (error instanceof types_1.BackendUnavailableError) {
+                    console.warn(`Keyring backend '${candidate}' unavailable.`, error.message);
+                    continue;
+                }
+                throw error;
+            }
+        }
+        throw new Error('No available keyring backend.');
+    }
+    async ensureBackend() {
+        if (!this.activeBackend) {
+            await this.switchBackend('system');
+        }
+        if (!this.activeBackend) {
+            throw new Error('No available keyring backend.');
+        }
+        return this.activeBackend;
+    }
+    nextFallback(current) {
+        const index = FALLBACK_ORDER.indexOf(current);
+        if (index === -1 || index === FALLBACK_ORDER.length - 1) {
+            return undefined;
+        }
+        return FALLBACK_ORDER[index + 1];
+    }
+    async execute(operation, name, key) {
+        const backend = await this.ensureBackend();
+        try {
+            const result = await operation(backend);
+            await this.record(name, key);
+            return result;
+        }
+        catch (error) {
+            if (error instanceof types_1.BackendUnavailableError) {
+                const fallback = this.nextFallback(this.currentBackend());
+                if (!fallback) {
+                    throw new Error('All keyring backends are unavailable.');
+                }
+                console.warn(`Keyring backend '${this.currentBackend()}' failed (${error.message}). Falling back to '${fallback}'.`);
+                await this.switchBackend(fallback);
+                return this.execute(operation, name, key);
+            }
+            throw error;
+        }
+    }
+    async get(key) {
+        const value = await this.execute(async (backend) => {
+            const result = await backend.get(key);
+            if (result === null) {
+                this.cache.delete(key);
+            }
+            else {
+                this.cache.set(key, result);
+            }
+            return result;
+        }, 'get', key);
+        return value;
+    }
+    async set(key, value) {
+        await this.execute(async (backend) => {
+            await backend.set(key, value);
+            this.cache.set(key, value);
+        }, 'set', key);
+    }
+    async delete(key) {
+        await this.execute(async (backend) => {
+            await backend.delete(key);
+            this.cache.delete(key);
+        }, 'delete', key);
+    }
+    async list() {
+        const state = await this.execute(async (backend) => {
+            const snapshot = await backend.list();
+            this.cache = new Map(Object.entries(snapshot));
+            return snapshot;
+        }, 'list', 'ALL');
+        return state;
+    }
+}
+exports.KeyringManager = KeyringManager;
+exports.keyringManager = new KeyringManager();
+exports.default = exports.keyringManager;
+//# sourceMappingURL=keyringManager.js.map

package/dist/cli/src/core/keyringManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyringManager.js","sourceRoot":"","sources":["../../../../src/core/keyringManager.ts"],"names":[],"mappings":";;;;;;AAAA,2DAA6B;AAC7B,gDAAwB;AACxB,4CAA+F;AAC/F,wDAAqD;AACrD,4DAAyD;AACzD,4DAAyD;AASzD,MAAM,cAAc,GAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE1E,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAE,EAAE;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,SAAS;SACrB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,WAAW,EAAE;SACb,KAAK,CAAC,EAAE,CAAC;SACT,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,GAAG,EAAE;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9E,OAAO,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF,MAAa,cAAc;IAWzB,YAAY,OAA+B;QAFnC,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAGxC,IAAI,CAAC,SAAS,GAAG;YACf,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,6BAAa,EAAE,CAAC;YACxE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,yBAAW,EAAE,CAAC;YAClE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,6BAAa,EAAE,CAAC;SACrB,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,CAAC;IACrE,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,uBAAuB;QACnC,MAAM,SAAS,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,SAAwB,EAAE,GAAmB,EAAE,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE;QACjG,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,GAAG,SAAS,KAAK,OAAO,KAAK,SAAS,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1E,MAAM,kBAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,IAAwB,EAAE,OAAuB;QAC9E,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEO,oBAAoB,CAAC,SAA6B;QACxD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAEO,aAAa,CAAC,IAAwB;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAA6B;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtD,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC;oBACjC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;gBACtC,CAAC;gBACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,+BAAuB,EAAE,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,oBAAoB,SAAS,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC3E,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEO,YAAY,CAAC,OAA2B;QAC9C,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,cAAc,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,SAAkD,EAClD,IAAmB,EACnB,GAAmB;QAEnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,+BAAuB,EAAE,CAAC;gBAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,CAAC,IAAI,CACV,oBAAoB,IAAI,CAAC,cAAc,EAAE,aAAa,KAAK,CAAC,OAAO,uBAAuB,QAAQ,IAAI,CACvG,CAAC;gBACF,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnC,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACjD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,OAAO,QAAQ,CAAC;QAClB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAtKD,wCAsKC;AAEY,QAAA,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;AAEnD,kBAAe,sBAAc,CAAC"}

package/dist/cli/src/utils/abiResolver.js

@@ -0,0 +1,180 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.abiResolver = exports.AbiResolver = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const ethers_1 = require("ethers");
+const http_1 = require("../../backend/utils/http");
+const secretsResolver_1 = require("./secretsResolver");
+const runtimeObservability_1 = require("./runtimeObservability");
+const CACHE_ROOT = path_1.default.join(process.cwd(), 'abi-cache');
+const normalizeAddress = (address) => {
+    if (!(0, ethers_1.isAddress)(address)) {
+        throw new Error(`Invalid address ${address}`);
+    }
+    return (0, ethers_1.getAddress)(address).toLowerCase();
+};
+const cachePath = (chainId, address) => path_1.default.join(CACHE_ROOT, String(chainId), `${address}.json`);
+const indexPath = (chainId) => path_1.default.join(CACHE_ROOT, String(chainId), 'index.json');
+const readIndex = (chainId) => {
+    const file = indexPath(chainId);
+    if (!fs_1.default.existsSync(file)) {
+        return {};
+    }
+    return JSON.parse(fs_1.default.readFileSync(file, 'utf8'));
+};
+const writeIndex = (chainId, index) => {
+    const file = indexPath(chainId);
+    fs_1.default.mkdirSync(path_1.default.dirname(file), { recursive: true });
+    fs_1.default.writeFileSync(file, JSON.stringify(index, null, 2), 'utf8');
+};
+const writeCache = (chainId, address, payload) => {
+    const file = cachePath(chainId, address);
+    fs_1.default.mkdirSync(path_1.default.dirname(file), { recursive: true });
+    fs_1.default.writeFileSync(file, JSON.stringify(payload, null, 2), 'utf8');
+    const index = readIndex(chainId);
+    index[address] = {
+        contractName: payload.contractName,
+        source: payload.source,
+        abiHash: crypto_1.default.createHash('sha256').update(JSON.stringify(payload.abi)).digest('hex'),
+        address
+    };
+    writeIndex(chainId, index);
+    return file;
+};
+const parseJsonIfNeeded = (abi) => {
+    if (Array.isArray(abi)) {
+        return abi;
+    }
+    if (typeof abi === 'string') {
+        const parsed = JSON.parse(abi);
+        if (Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    throw new Error('ABI fragments are required.');
+};
+const resolveFromSourcify = async (chainId, address) => {
+    const url = `https://repo.sourcify.dev/contracts/full_match/${chainId}/${address}/metadata.json`;
+    try {
+        const response = await http_1.http.get(url);
+        const output = response.data ?? {};
+        const abi = output.output?.abi;
+        if (!Array.isArray(abi) || abi.length === 0) {
+            return null;
+        }
+        const contractName = Object.values(output.settings?.compilationTarget ?? {})[0] ?? null;
+        return { abi, contractName: typeof contractName === 'string' ? contractName : null, source: 'sourcify', verified: true };
+    }
+    catch (_error) {
+        return null;
+    }
+};
+const resolveFromEtherscan = async (chainId, address) => {
+    const { value: apiKey } = await (0, secretsResolver_1.resolveSecret)('ETHERSCAN_API_KEY', true);
+    const sourceResponse = await http_1.http.get('', {
+        params: {
+            module: 'contract',
+            action: 'getsourcecode',
+            chainid: chainId,
+            address,
+            apikey: apiKey
+        }
+    });
+    const source = sourceResponse.data;
+    const impl = source.result?.[0]?.Implementation?.trim();
+    const abiAddress = impl && /^0x[a-fA-F0-9]{40}$/.test(impl) && impl !== '0x0000000000000000000000000000000000000000' ? normalizeAddress(impl) : address;
+    const abiResponse = await http_1.http.get('', {
+        params: {
+            module: 'contract',
+            action: 'getabi',
+            chainid: chainId,
+            address: abiAddress,
+            apikey: apiKey
+        }
+    });
+    const abiData = abiResponse.data;
+    if (abiData.status !== '1' || !abiData.result) {
+        throw new Error(`Failed to fetch ABI from Etherscan for ${address}: ${abiData.result}`);
+    }
+    const abi = parseJsonIfNeeded(abiData.result);
+    return {
+        abi,
+        contractName: source.result?.[0]?.ContractName?.trim() || null,
+        source: 'etherscan',
+        verified: true
+    };
+};
+const resolveFromManualRegistry = (chainId, address) => {
+    const registryPath = process.env.ABI_MANUAL_REGISTRY_PATH?.trim();
+    if (!registryPath) {
+        return null;
+    }
+    const payload = JSON.parse(fs_1.default.readFileSync(registryPath, 'utf8'));
+    const chain = payload[String(chainId)] ?? {};
+    const hit = chain[address];
+    if (!hit) {
+        return null;
+    }
+    return {
+        abi: hit.abi,
+        contractName: hit.contractName ?? null,
+        source: 'manual',
+        verified: false
+    };
+};
+class AbiResolver {
+    async resolve(chainId, inputAddress) {
+        const address = normalizeAddress(inputAddress);
+        const fromCachePath = cachePath(chainId, address);
+        if (fs_1.default.existsSync(fromCachePath)) {
+            const cached = JSON.parse(fs_1.default.readFileSync(fromCachePath, 'utf8'));
+            console.info(JSON.stringify({ event: 'ABI_RESOLVED', chainId, address, contractName: cached.contractName, source: 'cache', cached: true, functionsCount: cached.abi.length }));
+            runtimeObservability_1.runtimeObservability.pushAbiResolved({ chainId, address, contractName: cached.contractName, source: 'cache', cached: true, functionsCount: cached.abi.length, fetchedAt: cached.fetchedAt, cachePath: fromCachePath, verified: cached.verified });
+            return cached;
+        }
+        const legacyPath = path_1.default.join(process.cwd(), 'abi', 'address', String(chainId), `${address}.json`);
+        if (fs_1.default.existsSync(legacyPath)) {
+            const parsed = JSON.parse(fs_1.default.readFileSync(legacyPath, 'utf8'));
+            const abi = Array.isArray(parsed) ? parsed : parsed.abi ?? [];
+            const payload = {
+                abi,
+                contractName: readIndex(chainId)[address]?.contractName ?? null,
+                source: 'cache',
+                fetchedAt: new Date().toISOString(),
+                cachePath: fromCachePath,
+                verified: false
+            };
+            writeCache(chainId, address, payload);
+            console.info(JSON.stringify({ event: 'ABI_RESOLVED', chainId, address, contractName: payload.contractName, source: 'cache', cached: true, functionsCount: payload.abi.length }));
+            runtimeObservability_1.runtimeObservability.pushAbiResolved({ chainId, address, contractName: payload.contractName, source: 'cache', cached: true, functionsCount: payload.abi.length, fetchedAt: payload.fetchedAt, cachePath: fromCachePath, verified: payload.verified });
+            return payload;
+        }
+        const sourcify = await resolveFromSourcify(chainId, address);
+        const etherscan = sourcify ? null : await resolveFromEtherscan(chainId, address);
+        const manual = sourcify || etherscan ? null : resolveFromManualRegistry(chainId, address);
+        const resolved = sourcify ?? etherscan ?? manual;
+        if (!resolved) {
+            throw new Error(`Unable to resolve ABI for ${address} on chain ${chainId}`);
+        }
+        const payload = {
+            abi: resolved.abi,
+            contractName: resolved.contractName,
+            source: resolved.source,
+            fetchedAt: new Date().toISOString(),
+            cachePath: fromCachePath,
+            verified: resolved.verified
+        };
+        writeCache(chainId, address, payload);
+        console.info(JSON.stringify({ event: 'ABI_RESOLVED', chainId, address, contractName: payload.contractName, source: payload.source, cached: false, functionsCount: payload.abi.length }));
+        runtimeObservability_1.runtimeObservability.pushAbiResolved({ chainId, address, contractName: payload.contractName, source: payload.source, cached: false, functionsCount: payload.abi.length, fetchedAt: payload.fetchedAt, cachePath: fromCachePath, verified: payload.verified });
+        return payload;
+    }
+}
+exports.AbiResolver = AbiResolver;
+exports.abiResolver = new AbiResolver();
+//# sourceMappingURL=abiResolver.js.map

package/dist/cli/src/utils/abiResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abiResolver.js","sourceRoot":"","sources":["../../../../src/utils/abiResolver.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,4CAAoB;AACpB,gDAAwB;AACxB,mCAA+C;AAC/C,mDAAgD;AAChD,uDAAkD;AAClD,iEAA8D;AAW9D,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;AAEzD,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,EAAE;IAC3C,IAAI,CAAC,IAAA,kBAAS,EAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAA,mBAAU,EAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3C,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AAClH,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;AAI5F,MAAM,SAAS,GAAG,CAAC,OAAe,EAA8B,EAAE;IAChE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA+B,CAAC;AACjF,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,KAAiC,EAAE,EAAE;IACxE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,YAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,OAAyB,EAAE,EAAE;IACjF,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzC,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,YAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,OAAO,CAAC,GAAG;QACf,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACtF,OAAO;KACR,CAAC;IACF,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,GAAY,EAAa,EAAE;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAAE,EAAE;IACrE,MAAM,GAAG,GAAG,kDAAkD,OAAO,IAAI,OAAO,gBAAgB,CAAC;IACjG,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,WAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,GAAI,QAAQ,CAAC,IAAoG,IAAI,EAAE,CAAC;QACpI,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACxF,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,UAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACpI,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAAE,EAAE;IACtE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,+BAAa,EAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,MAAM,WAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACxC,MAAM,EAAE;YACN,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,OAAO;YAChB,OAAO;YACP,MAAM,EAAE,MAAM;SACf;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,cAAc,CAAC,IAA8E,CAAC;IAC7G,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,4CAA4C,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAExJ,MAAM,WAAW,GAAG,MAAM,WAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACrC,MAAM,EAAE;YACN,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,MAAM;SACf;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,WAAW,CAAC,IAA4C,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO;QACL,GAAG;QACH,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI;QAC9D,MAAM,EAAE,WAAoB;QAC5B,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,EAAE;IACrE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAA8E,CAAC;IAC/I,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;QACtC,MAAM,EAAE,QAAiB;QACzB,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAa,WAAW;IACtB,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,YAAoB;QACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,YAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAqB,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC/K,2CAAoB,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClP,OAAO,MAAM,CAAC;QAChB,CAAC;QAGD,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;QAClG,IAAI,YAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAoC,CAAC;YAClG,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAqB;gBAChC,GAAG;gBACH,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,IAAI,IAAI;gBAC/D,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,KAAK;aAChB,CAAC;YACF,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACjL,2CAAoB,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtP,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,QAAQ,IAAI,SAAS,IAAI,MAAM,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,aAAa,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,OAAO,GAAqB;YAChC,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;QACF,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAEtC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzL,2CAAoB,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9P,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AApDD,kCAoDC;AAEY,QAAA,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC"}

package/dist/cli/src/utils/runtimeObservability.js

@@ -0,0 +1,78 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runtimeObservability = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const MAX_EVENTS = 20;
+const debugPath = path_1.default.join(process.cwd(), '.gnoman', 'run-debug.jsonl');
+const state = {
+    secrets: [],
+    abiResolves: [],
+    robinhoodEnabled: false,
+    robinhoodAuth: { ok: false, reason: 'Not attempted' },
+    robinhoodRequests: [],
+    robinhoodOrders: [],
+    noBroadcastReason: null,
+    safeExecutionTrace: null
+};
+const pushBounded = (arr, value) => {
+    arr.unshift(value);
+    if (arr.length > MAX_EVENTS) {
+        arr.splice(MAX_EVENTS);
+    }
+};
+const appendArtifact = (type, payload) => {
+    fs_1.default.mkdirSync(path_1.default.dirname(debugPath), { recursive: true });
+    fs_1.default.appendFileSync(debugPath, `${JSON.stringify({ type, at: new Date().toISOString(), payload })}\n`, 'utf8');
+};
+exports.runtimeObservability = {
+    setSecretAudit(records) {
+        state.secrets = records;
+        appendArtifact('SECRET_AUDIT', records);
+    },
+    pushAbiResolved(event) {
+        pushBounded(state.abiResolves, event);
+        appendArtifact('ABI_RESOLVED', event);
+    },
+    setRobinhoodEnabled(enabled) {
+        state.robinhoodEnabled = enabled;
+    },
+    setRobinhoodAuth(ok, reason) {
+        state.robinhoodAuth = { ok, reason };
+        appendArtifact('ROBINHOOD_AUTH', state.robinhoodAuth);
+    },
+    pushRobinhoodRequest(event) {
+        pushBounded(state.robinhoodRequests, event);
+        appendArtifact('ROBINHOOD_REQUEST', event);
+    },
+    pushRobinhoodOrder(event) {
+        pushBounded(state.robinhoodOrders, event);
+        appendArtifact('ROBINHOOD_ORDER', event);
+    },
+    setNoBroadcastReason(reason) {
+        state.noBroadcastReason = reason;
+        appendArtifact('NO_BROADCAST_REASON', reason);
+    },
+    setSafeExecutionTrace(trace) {
+        state.safeExecutionTrace = trace;
+        appendArtifact('SAFE_EXECUTION_TRACE', trace);
+    },
+    snapshot() {
+        return {
+            secrets: state.secrets,
+            abiResolves: state.abiResolves,
+            robinhood: {
+                enabled: state.robinhoodEnabled,
+                auth: state.robinhoodAuth,
+                requests: state.robinhoodRequests,
+                orders: state.robinhoodOrders
+            },
+            noBroadcastReason: state.noBroadcastReason,
+            safeExecutionTrace: state.safeExecutionTrace
+        };
+    }
+};
+//# sourceMappingURL=runtimeObservability.js.map

package/dist/cli/src/utils/runtimeObservability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeObservability.js","sourceRoot":"","sources":["../../../../src/utils/runtimeObservability.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AAoCxB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAEzE,MAAM,KAAK,GAAG;IACZ,OAAO,EAAE,EAAyB;IAClC,WAAW,EAAE,EAAuB;IACpC,gBAAgB,EAAE,KAAK;IACvB,aAAa,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;IACrD,iBAAiB,EAAE,EAA6B;IAChD,eAAe,EAAE,EAA2B;IAC5C,iBAAiB,EAAE,IAAsC;IACzD,kBAAkB,EAAE,IAAsC;CAC3D,CAAC;AAEF,MAAM,WAAW,GAAG,CAAI,GAAQ,EAAE,KAAQ,EAAE,EAAE;IAC5C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnB,IAAI,GAAG,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,OAAgB,EAAE,EAAE;IACxD,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,YAAE,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC/G,CAAC,CAAC;AAEW,QAAA,oBAAoB,GAAG;IAClC,cAAc,CAAC,OAA4B;QACzC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,cAAc,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,eAAe,CAAC,KAAsB;QACpC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACtC,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,mBAAmB,CAAC,OAAgB;QAClC,KAAK,CAAC,gBAAgB,GAAG,OAAO,CAAC;IACnC,CAAC;IACD,gBAAgB,CAAC,EAAW,EAAE,MAAc;QAC1C,KAAK,CAAC,aAAa,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QACrC,cAAc,CAAC,gBAAgB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IACD,oBAAoB,CAAC,KAA4B;QAC/C,WAAW,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC5C,cAAc,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,kBAAkB,CAAC,KAA0B;QAC3C,WAAW,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC1C,cAAc,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,oBAAoB,CAAC,MAA+B;QAClD,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC;QACjC,cAAc,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,qBAAqB,CAAC,KAA8B;QAClD,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC;QACjC,cAAc,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,QAAQ;QACN,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE;gBACT,OAAO,EAAE,KAAK,CAAC,gBAAgB;gBAC/B,IAAI,EAAE,KAAK,CAAC,aAAa;gBACzB,QAAQ,EAAE,KAAK,CAAC,iBAAiB;gBACjC,MAAM,EAAE,KAAK,CAAC,eAAe;aAC9B;YACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/cli/src/utils/secretsResolver.js

@@ -0,0 +1,138 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditSecretsAtBoot = exports.resolveSecret = void 0;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const fileBackend_1 = require("../core/backends/fileBackend");
+const keyringAccessor_1 = __importDefault(require("../../backend/services/keyringAccessor"));
+const runtimeObservability_1 = require("./runtimeObservability");
+const bootEnvKeys = new Set(Object.keys(process.env));
+let dotenvLoaded = false;
+let fileBackend = null;
+let fileSecrets = new Map();
+const GUI_KEYRING_ALLOWED = Boolean(process.env.DISPLAY && process.env.DBUS_SESSION_BUS_ADDRESS);
+const redact = (value) => {
+    if (!value) {
+        return 'MISSING';
+    }
+    const trimmed = value.trim();
+    if (trimmed.length <= 4) {
+        return '****';
+    }
+    return `****${trimmed.slice(-4)}`;
+};
+const loadDotenvFile = () => {
+    const envPath = path_1.default.join(process.cwd(), '.env');
+    if (!fs_1.default.existsSync(envPath)) {
+        return;
+    }
+    const raw = fs_1.default.readFileSync(envPath, 'utf8');
+    for (const line of raw.split(/\r?\n/)) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#')) {
+            continue;
+        }
+        const eq = trimmed.indexOf('=');
+        if (eq === -1) {
+            continue;
+        }
+        const key = trimmed.slice(0, eq).trim();
+        const value = trimmed.slice(eq + 1).trim().replace(/^['"]|['"]$/g, '');
+        if (!(key in process.env)) {
+            process.env[key] = value;
+        }
+    }
+};
+const ensureDotenvLoaded = () => {
+    if (dotenvLoaded) {
+        return;
+    }
+    loadDotenvFile();
+    dotenvLoaded = true;
+};
+const ensureFileSecretsLoaded = async () => {
+    if (fileBackend) {
+        return;
+    }
+    const filePath = process.env.GNOMAN_KEYRING_FILE ?? path_1.default.join(process.cwd(), '.gnoman', 'secrets.enc');
+    fileBackend = new fileBackend_1.FileBackend(filePath);
+    try {
+        await fileBackend.initialize();
+        const listed = await fileBackend.list();
+        fileSecrets = new Map(Object.entries(listed));
+    }
+    catch (error) {
+        console.error(JSON.stringify({ event: 'FILE_SECRET_BACKEND_ERROR', message: String(error) }));
+    }
+};
+const detectEnvSource = (key) => {
+    const value = process.env[key];
+    if (!value?.trim()) {
+        return null;
+    }
+    return bootEnvKeys.has(key) ? 'env' : 'dotenv';
+};
+const resolveSecret = async (key, required = false) => {
+    ensureDotenvLoaded();
+    await ensureFileSecretsLoaded();
+    const checkedSources = ['env', 'dotenv', 'file'];
+    const envSource = detectEnvSource(key);
+    if (envSource) {
+        return { value: process.env[key].trim(), source: envSource, checkedSources };
+    }
+    const fileValue = fileSecrets.get(key)?.trim();
+    if (fileValue) {
+        return { value: fileValue, source: 'file', checkedSources };
+    }
+    if (GUI_KEYRING_ALLOWED) {
+        checkedSources.push('keyring');
+        try {
+            const keyringValue = await keyringAccessor_1.default.get(key);
+            if (keyringValue?.trim()) {
+                return { value: keyringValue.trim(), source: 'keyring', checkedSources };
+            }
+        }
+        catch (error) {
+            console.warn(`Unable to resolve ${key} from keyring`, error);
+        }
+    }
+    const missing = { event: 'MISSING_SECRET', key, checkedSources };
+    console.error(JSON.stringify(missing));
+    if (required) {
+        throw new Error(`${key} is required for this run mode.`);
+    }
+    return { value: undefined, source: 'missing', checkedSources };
+};
+exports.resolveSecret = resolveSecret;
+const auditSecretsAtBoot = async (keys) => {
+    ensureDotenvLoaded();
+    await ensureFileSecretsLoaded();
+    const records = [];
+    for (const { key, required } of keys) {
+        const resolved = await (0, exports.resolveSecret)(key, false);
+        records.push({
+            key,
+            required,
+            present: Boolean(resolved.value),
+            source: resolved.source,
+            redacted: redact(resolved.value),
+            checkedSources: resolved.checkedSources
+        });
+    }
+    runtimeObservability_1.runtimeObservability.setSecretAudit(records);
+    console.info(JSON.stringify({
+        event: 'SECRETS_AUDIT',
+        secrets: records.map((r) => ({
+            key: r.key,
+            required: r.required,
+            present: r.present,
+            source: r.source,
+            value: r.redacted
+        }))
+    }));
+};
+exports.auditSecretsAtBoot = auditSecretsAtBoot;
+//# sourceMappingURL=secretsResolver.js.map

package/dist/cli/src/utils/secretsResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretsResolver.js","sourceRoot":"","sources":["../../../../src/utils/secretsResolver.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AACxB,8DAA2D;AAC3D,6FAAqE;AACrE,iEAAsF;AAItF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,WAAW,GAAuB,IAAI,CAAC;AAC3C,IAAI,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE5C,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAEjG,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAE,EAAE;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,GAAG,EAAE;IAC1B,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,GAAG,EAAE;IAC9B,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,cAAc,EAAE,CAAC;IACjB,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,KAAK,IAAI,EAAE;IACzC,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IACvG,WAAW,GAAG,IAAI,yBAAW,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QACxC,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,GAAW,EAAuB,EAAE;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjD,CAAC,CAAC;AAEK,MAAM,aAAa,GAAG,KAAK,EAAE,GAAW,EAAE,QAAQ,GAAG,KAAK,EAAE,EAAE;IACnE,kBAAkB,EAAE,CAAC;IACrB,MAAM,uBAAuB,EAAE,CAAC;IAChC,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAe,EAAE,cAAc,EAAE,CAAC;IACvE,CAAC;IAED,IAAI,mBAAmB,EAAE,CAAC;QACxB,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,yBAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpD,IAAI,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAkB,EAAE,cAAc,EAAE,CAAC;YACpF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,qBAAqB,GAAG,eAAe,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAkB,EAAE,cAAc,EAAE,CAAC;AAC1E,CAAC,CAAC;AAjCW,QAAA,aAAa,iBAiCxB;AAEK,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAA+C,EAAE,EAAE;IAC1F,kBAAkB,EAAE,CAAC;IACrB,MAAM,uBAAuB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAA,qBAAa,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChC,cAAc,EAAE,QAAQ,CAAC,cAAc;SACxC,CAAC,CAAC;IACL,CAAC;IACD,2CAAoB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,QAAQ;SAClB,CAAC,CAAC;KACJ,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AA5BW,QAAA,kBAAkB,sBA4B7B"}