iranti 0.1.0

package/dist/scripts/seed.js

@@ -0,0 +1,121 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+require("dotenv/config");
+const client_1 = require("../src/library/client");
+const queries_1 = require("../src/library/queries");
+// Initialize DB
+if (!process.env.DATABASE_URL) {
+    throw new Error('DATABASE_URL environment variable is required');
+}
+(0, client_1.initDb)(process.env.DATABASE_URL);
+// ─── Staff Operating Rules ───────────────────────────────────────────────────
+const STAFF_ENTRIES = [
+    {
+        entityType: 'system',
+        entityId: 'librarian',
+        key: 'operating_rules',
+        valueRaw: {
+            version: '0.1.0',
+            rules: [
+                'All writes from external agents go through the Librarian — never directly to the database',
+                'Check for existing entries before every write',
+                'Log every decision with a reason — nothing is silently overwritten',
+                'Deterministic resolution for exact duplicates — keep the higher confidence entry',
+                'Model-assisted resolution for ambiguous conflicts',
+                'Write to escalation/active/ when confidence in resolution is below threshold',
+                'Never modify entries where isProtected = true',
+                'Run initialization pass on blank Library before any agent is allowed to write',
+            ],
+            conflictThreshold: 10,
+        },
+        valueSummary: 'Librarian manages all Library writes, detects and resolves conflicts, escalates when uncertain.',
+        confidence: 100,
+        source: 'seed',
+        createdBy: 'Seed',
+        isProtected: true,
+    },
+    {
+        entityType: 'system',
+        entityId: 'attendant',
+        key: 'operating_rules',
+        valueRaw: {
+            version: '0.1.0',
+            rules: [
+                'Assigned one-per-external-agent — serve the agent, not the user',
+                'On handshake: read AGENTS.md and MCP config, query Librarian for relevant rules and task context',
+                'Deliver a compressed working memory brief — not the full KB',
+                'Infer task context by observing the agent\'s recent messages',
+                'Load only what is relevant to the current task',
+                'Reconvene periodically to update working memory as task context shifts',
+                'If context window runs low, re-read operating rules from Staff Namespace',
+            ],
+        },
+        valueSummary: 'Attendant manages per-agent working memory via handshake, relevance filtering, and periodic reconvene.',
+        confidence: 100,
+        source: 'seed',
+        createdBy: 'Seed',
+        isProtected: true,
+    },
+    {
+        entityType: 'system',
+        entityId: 'archivist',
+        key: 'operating_rules',
+        valueRaw: {
+            version: '0.1.0',
+            rules: [
+                'Run on schedule or when conflict flags exceed threshold — not on every write',
+                'Scan for expired, low-confidence, flagged, and duplicate entries',
+                'Merge duplicates into single canonical entries',
+                'Move challenged entries to Archive with full provenance — never delete',
+                'Watch escalation/active/ for RESOLVED files',
+                'Write human-resolved entries to KB as source = HumanReview, confidence = 100',
+                'Move processed escalation files to escalation/resolved/',
+            ],
+        },
+        valueSummary: 'Archivist runs periodic cleanup, archives challenged entries, and processes human-resolved escalations.',
+        confidence: 100,
+        source: 'seed',
+        createdBy: 'Seed',
+        isProtected: true,
+    },
+    {
+        entityType: 'system',
+        entityId: 'library',
+        key: 'schema_version',
+        valueRaw: { version: '0.1.0' },
+        valueSummary: 'Current Library schema version.',
+        confidence: 100,
+        source: 'seed',
+        createdBy: 'Seed',
+        isProtected: true,
+    },
+    {
+        entityType: 'system',
+        entityId: 'library',
+        key: 'initialization_log',
+        valueRaw: {
+            initializedAt: new Date().toISOString(),
+            seedVersion: '0.1.0',
+        },
+        valueSummary: 'Record of when and how this Library was initialized.',
+        confidence: 100,
+        source: 'seed',
+        createdBy: 'Seed',
+        isProtected: true,
+    },
+];
+// ─── Seed ────────────────────────────────────────────────────────────────────
+async function seed() {
+    console.log('Seeding Staff Namespace...');
+    for (const entry of STAFF_ENTRIES) {
+        await (0, queries_1.createEntry)(entry);
+        console.log(`  ✓ system / ${entry.entityId} / ${entry.key}`);
+    }
+    console.log('Staff Namespace seeded successfully.');
+    process.exit(0);
+}
+seed().catch((err) => {
+    console.error('Seed failed:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=seed.js.map

package/dist/scripts/setup.js

@@ -0,0 +1,86 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const child_process_1 = require("child_process");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const client_1 = require("../src/library/client");
+const escalationPaths_1 = require("../src/lib/escalationPaths");
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+function run(command, label) {
+    console.log(`  Running: ${label}...`);
+    try {
+        (0, child_process_1.execSync)(command, { stdio: 'inherit' });
+    }
+    catch {
+        console.error(`  Failed: ${label}`);
+        process.exit(1);
+    }
+}
+function scriptCommand(distScriptName, sourceScriptPath) {
+    const distScriptPath = path_1.default.resolve(__dirname, '..', 'dist', 'scripts', distScriptName);
+    if (fs_1.default.existsSync(distScriptPath)) {
+        return `node ${JSON.stringify(distScriptPath)}`;
+    }
+    return `npx ts-node ${sourceScriptPath}`;
+}
+async function isSeeded() {
+    try {
+        const entry = await (0, client_1.getDb)().knowledgeEntry.findUnique({
+            where: {
+                entityType_entityId_key: {
+                    entityType: 'system',
+                    entityId: 'library',
+                    key: 'initialization_log',
+                },
+            },
+        });
+        return entry !== null;
+    }
+    catch {
+        return false;
+    }
+}
+// ─── Setup ───────────────────────────────────────────────────────────────────
+async function setup() {
+    console.log('\n🔧 Iranti Setup\n');
+    // 1. Run migrations
+    console.log('Step 1 — Running database migrations...');
+    run('npx prisma migrate deploy', 'prisma migrate deploy');
+    console.log('  ✓ Migrations complete\n');
+    // 2. Generate Prisma client
+    console.log('Step 2 — Generating Prisma client...');
+    run('npx prisma generate', 'prisma generate');
+    console.log('  ✓ Client generated\n');
+    // 3. Seed Staff Namespace if not already seeded
+    console.log('Step 3 — Seeding Staff Namespace...');
+    const seeded = await isSeeded();
+    if (seeded) {
+        console.log('  ✓ Already seeded, skipping\n');
+    }
+    else {
+        run(scriptCommand('seed.js', 'scripts/seed.ts'), 'seed Staff Namespace');
+        console.log('  ✓ Staff Namespace seeded\n');
+    }
+    // 4. Pre-populate codebase knowledge
+    console.log('Step 4 — Pre-populating codebase knowledge...');
+    run(scriptCommand('seed-codebase.js', 'scripts/seed-codebase.ts'), 'seed codebase knowledge');
+    console.log('  ✓ Codebase knowledge seeded\n');
+    // 5. Ensure escalation folders exist
+    console.log('Step 5 — Ensuring escalation folders...');
+    const escalationPaths = await (0, escalationPaths_1.ensureEscalationFolders)();
+    console.log(`  ✓ Escalation folders ready at: ${escalationPaths.root}\n`);
+    console.log('✅ Iranti setup complete.\n');
+    console.log('Next steps:');
+    console.log('  npm run test:integration   — verify everything works');
+    console.log('  npm run dev                — start development\n');
+    await (0, client_1.getDb)().$disconnect();
+    process.exit(0);
+}
+setup().catch((err) => {
+    console.error('Setup failed:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=setup.js.map

package/dist/src/api/archivistScheduler.d.ts

@@ -0,0 +1,8 @@
+import { Iranti } from '../sdk';
+type SchedulerHandle = {
+    stop: () => void;
+    started: boolean;
+};
+export declare function startArchivistScheduler(iranti: Iranti): Promise<SchedulerHandle>;
+export {};
+//# sourceMappingURL=archivistScheduler.d.ts.map

package/dist/src/api/archivistScheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archivistScheduler.d.ts","sourceRoot":"","sources":["../../../src/api/archivistScheduler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhC,KAAK,eAAe,GAAG;IACnB,IAAI,EAAE,MAAM,IAAI,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAgBF,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA4EtF"}

package/dist/src/api/archivistScheduler.js

@@ -0,0 +1,100 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startArchivistScheduler = startArchivistScheduler;
+const fs_1 = __importDefault(require("fs"));
+const escalationPaths_1 = require("../lib/escalationPaths");
+function parsePositiveInt(value, fallback) {
+    if (!value)
+        return fallback;
+    const parsed = Number.parseInt(value, 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+function parseBoolean(value, fallback) {
+    if (value === undefined)
+        return fallback;
+    const normalized = value.trim().toLowerCase();
+    if (['1', 'true', 'yes', 'on'].includes(normalized))
+        return true;
+    if (['0', 'false', 'no', 'off'].includes(normalized))
+        return false;
+    return fallback;
+}
+async function startArchivistScheduler(iranti) {
+    const intervalMs = parsePositiveInt(process.env.IRANTI_ARCHIVIST_INTERVAL_MS, 0);
+    const debounceMs = parsePositiveInt(process.env.IRANTI_ARCHIVIST_DEBOUNCE_MS, 60000);
+    const watchEscalations = parseBoolean(process.env.IRANTI_ARCHIVIST_WATCH, true);
+    if (intervalMs <= 0 && !watchEscalations) {
+        return { started: false, stop: () => { } };
+    }
+    const escalationPaths = await (0, escalationPaths_1.ensureEscalationFolders)();
+    let running = false;
+    let pendingRun = false;
+    let disposed = false;
+    let intervalHandle = null;
+    let debounceHandle = null;
+    let watcher = null;
+    const runMaintenance = async (reason) => {
+        if (disposed)
+            return;
+        if (running) {
+            pendingRun = true;
+            return;
+        }
+        running = true;
+        try {
+            const report = await iranti.runMaintenance();
+            console.log(`[archivist] run=${reason} processed=${report.escalationsProcessed} ` +
+                `expired=${report.expiredArchived} low_conf=${report.lowConfidenceArchived} errors=${report.errors.length}`);
+        }
+        catch (err) {
+            console.error('[archivist] scheduled maintenance failed:', err);
+        }
+        finally {
+            running = false;
+            if (pendingRun && !disposed) {
+                pendingRun = false;
+                setImmediate(() => {
+                    void runMaintenance('pending');
+                });
+            }
+        }
+    };
+    const scheduleDebouncedRun = () => {
+        if (disposed)
+            return;
+        if (debounceHandle)
+            clearTimeout(debounceHandle);
+        debounceHandle = setTimeout(() => {
+            debounceHandle = null;
+            void runMaintenance('escalation_change');
+        }, debounceMs);
+    };
+    if (intervalMs > 0) {
+        intervalHandle = setInterval(() => {
+            void runMaintenance('interval');
+        }, intervalMs);
+    }
+    if (watchEscalations) {
+        watcher = fs_1.default.watch(escalationPaths.active, (_eventType, filename) => {
+            if (!filename || !filename.endsWith('.md'))
+                return;
+            scheduleDebouncedRun();
+        });
+    }
+    return {
+        started: true,
+        stop: () => {
+            disposed = true;
+            if (intervalHandle)
+                clearInterval(intervalHandle);
+            if (debounceHandle)
+                clearTimeout(debounceHandle);
+            if (watcher)
+                watcher.close();
+        },
+    };
+}
+//# sourceMappingURL=archivistScheduler.js.map

package/dist/src/api/archivistScheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archivistScheduler.js","sourceRoot":"","sources":["../../../src/api/archivistScheduler.ts"],"names":[],"mappings":";;;;;AAuBA,0DA4EC;AAnGD,4CAAoB;AAEpB,4DAAiE;AAOjE,SAAS,gBAAgB,CAAC,KAAyB,EAAE,QAAgB;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrE,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAiB;IAC9D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,OAAO,QAAQ,CAAC;AACpB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAAC,MAAc;IACxD,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAM,CAAC,CAAC;IACtF,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;IAEhF,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,IAAA,yCAAuB,GAAE,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,IAAI,cAAc,GAA0B,IAAI,CAAC;IACjD,IAAI,cAAc,GAA0B,IAAI,CAAC;IACjD,IAAI,OAAO,GAAwB,IAAI,CAAC;IAExC,MAAM,cAAc,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QAC3D,IAAI,QAAQ;YAAE,OAAO;QACrB,IAAI,OAAO,EAAE,CAAC;YACV,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO;QACX,CAAC;QAED,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CACP,mBAAmB,MAAM,cAAc,MAAM,CAAC,oBAAoB,GAAG;gBACrE,WAAW,MAAM,CAAC,eAAe,aAAa,MAAM,CAAC,qBAAqB,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAC9G,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;gBAAS,CAAC;YACP,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,UAAU,GAAG,KAAK,CAAC;gBACnB,YAAY,CAAC,GAAG,EAAE;oBACd,KAAK,cAAc,CAAC,SAAS,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,GAAS,EAAE;QACpC,IAAI,QAAQ;YAAE,OAAO;QACrB,IAAI,cAAc;YAAE,YAAY,CAAC,cAAc,CAAC,CAAC;QACjD,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,cAAc,GAAG,IAAI,CAAC;YACtB,KAAK,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAC7C,CAAC,EAAE,UAAU,CAAC,CAAC;IACnB,CAAC,CAAC;IAEF,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACjB,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YAC9B,KAAK,cAAc,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC,EAAE,UAAU,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACnB,OAAO,GAAG,YAAE,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE;YAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO;YACnD,oBAAoB,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACH,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,GAAG,EAAE;YACP,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,cAAc;gBAAE,aAAa,CAAC,cAAc,CAAC,CAAC;YAClD,IAAI,cAAc;gBAAE,YAAY,CAAC,cAAc,CAAC,CAAC;YACjD,IAAI,OAAO;gBAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/src/api/diag.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=diag.d.ts.map

package/dist/src/api/diag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diag.d.ts","sourceRoot":"","sources":["../../../src/api/diag.ts"],"names":[],"mappings":""}

package/dist/src/api/diag.js

@@ -0,0 +1,54 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = __importDefault(require("express"));
+const http_1 = __importDefault(require("http"));
+function logHandles(label) {
+    console.log(`--- ${label} ---`);
+    const handles = process._getActiveHandles();
+    const requests = process._getActiveRequests();
+    console.log(`Active Handles: ${handles.length}`);
+    handles.forEach((h, i) => {
+        console.log(`  Handle ${i}: ${h.constructor.name} ${h.fd ? `(fd: ${h.fd})` : ''}`);
+    });
+    console.log(`Active Requests: ${requests.length}`);
+    console.log(`------------------\n`);
+}
+async function testExpress() {
+    console.log('Testing Express 5 app.listen...');
+    const app = (0, express_1.default)();
+    const server = app.listen(3001, () => {
+        console.log('Express listening on 3001');
+        logHandles('After Express listen');
+        // Check if server handle is ref'd
+        if (server._handle && typeof server._handle.hasRef === 'function') {
+            console.log(`Server handle hasRef: ${server._handle.hasRef()}`);
+        }
+        // Wait a bit and check again
+        setTimeout(() => {
+            logHandles('After 1s (Express)');
+            server.close();
+            testRawHttp();
+        }, 1000);
+    });
+}
+function testRawHttp() {
+    console.log('Testing Raw http.createServer listen...');
+    const server = http_1.default.createServer((req, res) => {
+        res.end('ok');
+    });
+    server.listen(3002, () => {
+        console.log('Raw HTTP listening on 3002');
+        logHandles('After Raw HTTP listen');
+        setTimeout(() => {
+            logHandles('After 1s (Raw HTTP)');
+            server.close();
+            console.log('Diagnosis complete.');
+        }, 1000);
+    });
+}
+logHandles('Startup');
+testExpress();
+//# sourceMappingURL=diag.js.map

package/dist/src/api/diag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diag.js","sourceRoot":"","sources":["../../../src/api/diag.ts"],"names":[],"mappings":";;;;;AAAA,sDAA8B;AAC9B,gDAAwB;AAExB,SAAS,UAAU,CAAC,KAAa;IAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAChC,MAAM,OAAO,GAAI,OAAe,CAAC,iBAAiB,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAI,OAAe,CAAC,kBAAkB,EAAE,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,CAAS,EAAE,EAAE;QAClC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,WAAW;IACtB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,UAAU,CAAC,sBAAsB,CAAC,CAAC;QAEnC,kCAAkC;QAClC,IAAK,MAAc,CAAC,OAAO,IAAI,OAAQ,MAAc,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,yBAA0B,MAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,6BAA6B;QAC7B,UAAU,CAAC,GAAG,EAAE;YACZ,UAAU,CAAC,oBAAoB,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,WAAW,EAAE,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,CAAC;IACb,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,WAAW;IAChB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACrB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,UAAU,CAAC,uBAAuB,CAAC,CAAC;QAEpC,UAAU,CAAC,GAAG,EAAE;YACZ,UAAU,CAAC,qBAAqB,CAAC,CAAC;YAClC,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACvC,CAAC,EAAE,IAAI,CAAC,CAAC;IACb,CAAC,CAAC,CAAC;AACP,CAAC;AAED,UAAU,CAAC,SAAS,CAAC,CAAC;AACtB,WAAW,EAAE,CAAC"}

package/dist/src/api/middleware/auth.d.ts

@@ -0,0 +1,3 @@
+import { Request, Response, NextFunction } from 'express';
+export declare function authenticate(req: Request, res: Response, next: NextFunction): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/src/api/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/api/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAoB1D,wBAAsB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBjG"}

package/dist/src/api/middleware/auth.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticate = authenticate;
+const apiKeys_1 = require("../../security/apiKeys");
+function extractApiKey(req) {
+    const fromHeader = req.headers['x-iranti-key'];
+    const keyHeader = Array.isArray(fromHeader) ? fromHeader[0] : fromHeader;
+    if (typeof keyHeader === 'string' && keyHeader.trim().length > 0) {
+        return keyHeader.trim();
+    }
+    const authHeader = req.headers['authorization'];
+    const auth = Array.isArray(authHeader) ? authHeader[0] : authHeader;
+    if (!auth)
+        return undefined;
+    const match = auth.match(/^Bearer\s+(.+)$/i);
+    if (!match)
+        return undefined;
+    const token = match[1].trim();
+    return token.length > 0 ? token : undefined;
+}
+async function authenticate(req, res, next) {
+    const providedStr = extractApiKey(req);
+    const result = await (0, apiKeys_1.validateApiKey)(providedStr);
+    if (!result.ok) {
+        res.status(result.status ?? 401).json({ error: result.error ?? 'Unauthorized. Provide a valid X-Iranti-Key header.' });
+        return;
+    }
+    req.irantiAuth = {
+        mode: result.mode ?? 'registry',
+        keyId: result.keyId ?? 'unknown',
+        owner: result.owner ?? 'unknown',
+        scopes: result.scopes ?? ['*'],
+    };
+    next();
+}
+//# sourceMappingURL=auth.js.map

package/dist/src/api/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/api/middleware/auth.ts"],"names":[],"mappings":";;AAoBA,oCAiBC;AApCD,oDAAwD;AAExD,SAAS,aAAa,CAAC,GAAY;IAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACpE,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC9E,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAc,EAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,oDAAoD,EAAE,CAAC,CAAC;QACvH,OAAO;IACX,CAAC;IAEA,GAAW,CAAC,UAAU,GAAG;QACtB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,UAAU;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;QAChC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC;KACjC,CAAC;IAEF,IAAI,EAAE,CAAC;AACX,CAAC"}

package/dist/src/api/middleware/authorization.d.ts

@@ -0,0 +1,4 @@
+import { NextFunction, Request, Response } from 'express';
+export declare function requireAnyScope(requiredScopes: string[]): (req: Request, res: Response, next: NextFunction) => void;
+export declare function requireScopeByMethod(readScope: string, writeScope: string): (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/src/api/middleware/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../../../src/api/middleware/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAuB1D,wBAAgB,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,IAG5C,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CAkBjE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,IAC9D,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CAKjE"}

package/dist/src/api/middleware/authorization.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireAnyScope = requireAnyScope;
+exports.requireScopeByMethod = requireScopeByMethod;
+function normalizeScopes(scopes) {
+    if (!Array.isArray(scopes))
+        return ['*'];
+    const normalized = scopes
+        .map((scope) => String(scope).trim().toLowerCase())
+        .filter(Boolean);
+    return normalized.length > 0 ? normalized : ['*'];
+}
+function hasScope(grantedScopes, requiredScope) {
+    const required = requiredScope.toLowerCase();
+    if (grantedScopes.includes('*'))
+        return true;
+    if (grantedScopes.includes(required))
+        return true;
+    for (const granted of grantedScopes) {
+        if (!granted.endsWith(':*'))
+            continue;
+        const prefix = granted.slice(0, -1); // keep trailing ":"
+        if (required.startsWith(prefix))
+            return true;
+    }
+    return false;
+}
+function requireAnyScope(requiredScopes) {
+    const required = requiredScopes.map((scope) => scope.trim().toLowerCase()).filter(Boolean);
+    return (req, res, next) => {
+        const auth = req.irantiAuth;
+        if (!auth) {
+            res.status(401).json({ error: 'Unauthorized. Authentication is required.' });
+            return;
+        }
+        const granted = normalizeScopes(auth.scopes);
+        const allowed = required.length === 0 || required.some((scope) => hasScope(granted, scope));
+        if (!allowed) {
+            res.status(403).json({
+                error: `Forbidden. Missing required scope. Need one of: ${required.join(', ')}`,
+            });
+            return;
+        }
+        next();
+    };
+}
+function requireScopeByMethod(readScope, writeScope) {
+    return (req, res, next) => {
+        const isRead = req.method === 'GET' || req.method === 'HEAD' || req.method === 'OPTIONS';
+        const middleware = requireAnyScope([isRead ? readScope : writeScope]);
+        middleware(req, res, next);
+    };
+}
+//# sourceMappingURL=authorization.js.map

package/dist/src/api/middleware/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../../src/api/middleware/authorization.ts"],"names":[],"mappings":";;AAuBA,0CAqBC;AAED,oDAMC;AAlDD,SAAS,eAAe,CAAC,MAAe;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM;SACpB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClD,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,aAAuB,EAAE,aAAqB;IAC5D,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAElD,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;QACzD,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAgB,eAAe,CAAC,cAAwB;IACpD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE3F,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC7D,MAAM,IAAI,GAAI,GAAW,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;YAC7E,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,KAAK,EAAE,mDAAmD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAClF,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAAiB,EAAE,UAAkB;IACtE,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;QACzF,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACtE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;AACN,CAAC"}

package/dist/src/api/middleware/rateLimit.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Rate Limiting Middleware
+ * Prevents API abuse by limiting requests per identity.
+ * Uses authenticated keyId when available, otherwise request IP.
+ */
+import { NextFunction, Request, Response } from 'express';
+declare class RateLimiter {
+    private limits;
+    private readonly windowMs;
+    private readonly maxRequests;
+    constructor(windowMs?: number, maxRequests?: number);
+    check(apiKey: string): {
+        allowed: boolean;
+        remaining: number;
+        resetAt: number;
+    };
+    private cleanup;
+    get limit(): number;
+}
+export declare const rateLimiter: RateLimiter;
+export declare function rateLimitMiddleware(req: Request, res: Response, next: NextFunction): Response<any, Record<string, any>> | undefined;
+export {};
+//# sourceMappingURL=rateLimit.d.ts.map

package/dist/src/api/middleware/rateLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.d.ts","sourceRoot":"","sources":["../../../../src/api/middleware/rateLimit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAO1D,cAAM,WAAW;IACf,OAAO,CAAC,MAAM,CAA0C;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,QAAQ,GAAE,MAAc,EAAE,WAAW,GAAE,MAAY;IAQ/D,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAsB/E,OAAO,CAAC,OAAO;IASf,IAAI,KAAK,IAAI,MAAM,CAElB;CACF;AAGD,eAAO,MAAM,WAAW,aAGvB,CAAC;AAaF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,kDAkBlF"}

package/dist/src/api/middleware/rateLimit.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rateLimiter = void 0;
+exports.rateLimitMiddleware = rateLimitMiddleware;
+class RateLimiter {
+    constructor(windowMs = 60000, maxRequests = 100) {
+        this.limits = new Map();
+        this.windowMs = windowMs;
+        this.maxRequests = maxRequests;
+        // Cleanup old entries every minute
+        setInterval(() => this.cleanup(), 60000);
+    }
+    check(apiKey) {
+        const now = Date.now();
+        const entry = this.limits.get(apiKey);
+        if (!entry || now > entry.resetAt) {
+            // New window
+            const resetAt = now + this.windowMs;
+            this.limits.set(apiKey, { count: 1, resetAt });
+            return { allowed: true, remaining: this.maxRequests - 1, resetAt };
+        }
+        if (entry.count >= this.maxRequests) {
+            // Rate limit exceeded
+            return { allowed: false, remaining: 0, resetAt: entry.resetAt };
+        }
+        // Increment count
+        entry.count++;
+        this.limits.set(apiKey, entry);
+        return { allowed: true, remaining: this.maxRequests - entry.count, resetAt: entry.resetAt };
+    }
+    cleanup() {
+        const now = Date.now();
+        for (const [key, entry] of this.limits.entries()) {
+            if (now > entry.resetAt) {
+                this.limits.delete(key);
+            }
+        }
+    }
+    get limit() {
+        return this.maxRequests;
+    }
+}
+// Export singleton instance
+exports.rateLimiter = new RateLimiter(parseInt(process.env.RATE_LIMIT_WINDOW_MS || '60000'), parseInt(process.env.RATE_LIMIT_MAX_REQUESTS || '100'));
+function getRequestIdentity(req) {
+    const auth = req.irantiAuth;
+    if (auth?.keyId) {
+        return `key:${String(auth.keyId).toLowerCase()}`;
+    }
+    const ip = req.ip || req.socket?.remoteAddress || 'unknown';
+    return `ip:${ip}`;
+}
+// Express middleware
+function rateLimitMiddleware(req, res, next) {
+    const identity = getRequestIdentity(req);
+    const result = exports.rateLimiter.check(identity);
+    // Add rate limit headers
+    res.setHeader('X-RateLimit-Limit', exports.rateLimiter.limit);
+    res.setHeader('X-RateLimit-Remaining', result.remaining);
+    res.setHeader('X-RateLimit-Reset', new Date(result.resetAt).toISOString());
+    if (!result.allowed) {
+        return res.status(429).json({
+            error: 'Rate limit exceeded',
+            code: 'RATE_LIMIT_EXCEEDED',
+            retryAfter: Math.ceil((result.resetAt - Date.now()) / 1000)
+        });
+    }
+    next();
+}
+//# sourceMappingURL=rateLimit.js.map

package/dist/src/api/middleware/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../../../../src/api/middleware/rateLimit.ts"],"names":[],"mappings":";;;AA8EA,kDAkBC;AApFD,MAAM,WAAW;IAKf,YAAY,WAAmB,KAAK,EAAE,cAAsB,GAAG;QAJvD,WAAM,GAAgC,IAAI,GAAG,EAAE,CAAC;QAKtD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAE/B,mCAAmC;QACnC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAc;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,aAAa;YACb,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,sBAAsB;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClE,CAAC;QAED,kBAAkB;QAClB,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC9F,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,4BAA4B;AACf,QAAA,WAAW,GAAG,IAAI,WAAW,CACxC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,EACrD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,KAAK,CAAC,CACvD,CAAC;AAEF,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,IAAI,GAAI,GAAW,CAAC,UAAU,CAAC;IACrC,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;IAC5D,OAAO,MAAM,EAAE,EAAE,CAAC;AACpB,CAAC;AAED,qBAAqB;AACrB,SAAgB,mBAAmB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACjF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,mBAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE3C,yBAAyB;IACzB,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,mBAAW,CAAC,KAAK,CAAC,CAAC;IACtD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACzD,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAE3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,KAAK,EAAE,qBAAqB;YAC5B,IAAI,EAAE,qBAAqB;YAC3B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC"}