kemdicode-mcp 1.15.0

package/dist/mpc/redis-store.js

@@ -0,0 +1,337 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * MPC Redis Store
+ *
+ * Persistent storage for MPC shares and secret metadata using Redis.
+ */
+import { RedisBackedService } from '../infrastructure/redis/redis-backed-service.js';
+import { MPC_KEYS } from './types.js';
+import { getKeyManager } from './crypto.js';
+function safeJsonParse(value, fallback) {
+    try {
+        return JSON.parse(value || '') ?? fallback;
+    }
+    catch {
+        return fallback;
+    }
+}
+/**
+ * MPC Redis Store
+ */
+export class MpcRedisStore extends RedisBackedService {
+    get serviceName() { return 'MpcRedisStore'; }
+    constructor(_config = {}) {
+        super();
+    }
+    /**
+     * Save secret metadata
+     */
+    async saveSecretMetadata(metadata) {
+        if (!this.isConnected() || !this.redis)
+            return false;
+        try {
+            const key = MPC_KEYS.secret(metadata.sessionId, metadata.id);
+            await this.redis.hset(key, {
+                ...metadata,
+                holders: JSON.stringify(metadata.holders),
+                tags: JSON.stringify(metadata.tags || []),
+            });
+            // Set TTL if specified
+            if (metadata.ttl) {
+                await this.redis.expire(key, metadata.ttl);
+            }
+            // Add to session index
+            const sessionIndexKey = MPC_KEYS.sessionIndex(metadata.sessionId);
+            await this.redis.sadd(sessionIndexKey, metadata.id);
+            return true;
+        }
+        catch (error) {
+            console.error('[MPC Store] Error saving secret metadata:', error);
+            return false;
+        }
+    }
+    /**
+     * Get secret metadata
+     */
+    async getSecretMetadata(sessionId, secretId) {
+        if (!this.isConnected() || !this.redis)
+            return null;
+        try {
+            const key = MPC_KEYS.secret(sessionId, secretId);
+            const data = await this.redis.hgetall(key);
+            if (!data || Object.keys(data).length === 0) {
+                return null;
+            }
+            return {
+                id: data.id,
+                sessionId: data.sessionId,
+                totalShares: parseInt(data.totalShares, 10) || 0,
+                threshold: parseInt(data.threshold, 10) || 0,
+                holders: safeJsonParse(data.holders, []),
+                creatorAgentId: data.creatorAgentId,
+                createdAt: parseInt(data.createdAt, 10) || 0,
+                ttl: data.ttl ? (parseInt(data.ttl, 10) || undefined) : undefined,
+                label: data.label || undefined,
+                tags: safeJsonParse(data.tags, []),
+                secretType: data.secretType,
+                verificationHash: data.verificationHash || undefined,
+            };
+        }
+        catch (error) {
+            console.error('[MPC Store] Error getting secret metadata:', error);
+            return null;
+        }
+    }
+    /**
+     * Update holders list in metadata
+     */
+    async updateHolders(sessionId, secretId, holders) {
+        if (!this.isConnected() || !this.redis)
+            return false;
+        try {
+            const key = MPC_KEYS.secret(sessionId, secretId);
+            await this.redis.hset(key, 'holders', JSON.stringify(holders));
+            return true;
+        }
+        catch (error) {
+            console.error('[MPC Store] Error updating holders:', error);
+            return false;
+        }
+    }
+    /**
+     * Save a share (always encrypted)
+     *
+     * SECURITY: Shares are always encrypted with AES-256-GCM using session-derived keys.
+     * Plaintext storage is not supported to prevent accidental data exposure.
+     */
+    async saveShare(share) {
+        if (!this.isConnected() || !this.redis)
+            return false;
+        try {
+            const key = MPC_KEYS.share(share.sessionId, share.secretId, share.agentId);
+            // Always encrypt shares - plaintext storage is a security risk
+            const keyManager = getKeyManager();
+            const encrypted = keyManager.encryptForSession(share.sessionId, share.data);
+            const shareData = {
+                id: share.id,
+                index: share.index,
+                data: JSON.stringify(encrypted),
+                agentId: share.agentId,
+                secretId: share.secretId,
+                sessionId: share.sessionId,
+                createdAt: share.createdAt,
+                encrypted: true,
+            };
+            await this.redis.hset(key, shareData);
+            // Add to agent index
+            const agentIndexKey = MPC_KEYS.agentIndex(share.agentId);
+            await this.redis.sadd(agentIndexKey, share.secretId);
+            return true;
+        }
+        catch (error) {
+            console.error('[MPC Store] Error saving share:', error);
+            return false;
+        }
+    }
+    /**
+     * Get a share (decrypted)
+     */
+    async getShare(sessionId, secretId, agentId) {
+        if (!this.isConnected() || !this.redis)
+            return null;
+        try {
+            const key = MPC_KEYS.share(sessionId, secretId, agentId);
+            const data = await this.redis.hgetall(key);
+            if (!data || Object.keys(data).length === 0) {
+                return null;
+            }
+            let shareData = data.data;
+            const isEncrypted = data.encrypted === 'true' || data.encrypted === '1';
+            if (isEncrypted) {
+                try {
+                    const keyManager = getKeyManager();
+                    // SECURITY: Validate JSON structure before parsing
+                    let encrypted;
+                    try {
+                        const parsed = JSON.parse(data.data);
+                        // Validate required EncryptedData fields
+                        if (typeof parsed !== 'object' ||
+                            parsed === null ||
+                            typeof parsed.ciphertext !== 'string' ||
+                            typeof parsed.iv !== 'string' ||
+                            typeof parsed.authTag !== 'string') {
+                            throw new Error('Invalid encrypted data structure');
+                        }
+                        encrypted = parsed;
+                    }
+                    catch (parseError) {
+                        console.error('[MPC Store] Invalid JSON in encrypted share:', parseError);
+                        return null;
+                    }
+                    shareData = keyManager.decryptForSession(sessionId, encrypted);
+                }
+                catch (decryptError) {
+                    console.error('[MPC Store] Error decrypting share:', decryptError);
+                    return null;
+                }
+            }
+            return {
+                id: data.id,
+                index: parseInt(data.index, 10) || 0,
+                data: shareData,
+                agentId: data.agentId,
+                secretId: data.secretId,
+                sessionId: data.sessionId,
+                createdAt: parseInt(data.createdAt, 10) || 0,
+                encrypted: isEncrypted,
+            };
+        }
+        catch (error) {
+            console.error('[MPC Store] Error getting share:', error);
+            return null;
+        }
+    }
+    /**
+     * Get all shares for a secret from specific agents
+     */
+    async getSharesForReconstruction(sessionId, secretId, agentIds) {
+        const shares = [];
+        for (const agentId of agentIds) {
+            const share = await this.getShare(sessionId, secretId, agentId);
+            if (share) {
+                shares.push(share);
+            }
+        }
+        return shares;
+    }
+    /**
+     * Get all secrets for a session
+     */
+    async getSessionSecrets(sessionId) {
+        if (!this.isConnected() || !this.redis)
+            return [];
+        try {
+            const indexKey = MPC_KEYS.sessionIndex(sessionId);
+            const secretIds = await this.redis.smembers(indexKey);
+            const secrets = [];
+            for (const secretId of secretIds) {
+                const metadata = await this.getSecretMetadata(sessionId, secretId);
+                if (metadata) {
+                    secrets.push(metadata);
+                }
+            }
+            return secrets;
+        }
+        catch (error) {
+            console.error('[MPC Store] Error getting session secrets:', error);
+            return [];
+        }
+    }
+    /**
+     * Get secrets held by an agent
+     */
+    async getAgentSecrets(agentId) {
+        if (!this.isConnected() || !this.redis)
+            return [];
+        try {
+            const indexKey = MPC_KEYS.agentIndex(agentId);
+            return await this.redis.smembers(indexKey);
+        }
+        catch (error) {
+            console.error('[MPC Store] Error getting agent secrets:', error);
+            return [];
+        }
+    }
+    /**
+     * Get secret status including distribution info
+     */
+    async getSecretStatus(sessionId, secretId) {
+        const metadata = await this.getSecretMetadata(sessionId, secretId);
+        if (!metadata)
+            return null;
+        const distribution = [];
+        for (const agentId of metadata.holders) {
+            const share = await this.getShare(sessionId, secretId, agentId);
+            distribution.push({
+                agentId,
+                shareIndex: share?.index || 0,
+                delivered: share !== null,
+                acknowledgedAt: share?.createdAt,
+            });
+        }
+        return {
+            metadata,
+            distribution,
+            reconstructable: distribution.filter((d) => d.delivered).length >= metadata.threshold,
+            acknowledgedCount: distribution.filter((d) => d.delivered).length,
+        };
+    }
+    /**
+     * Delete a secret and all its shares
+     */
+    async deleteSecret(sessionId, secretId) {
+        if (!this.isConnected() || !this.redis)
+            return false;
+        try {
+            const metadata = await this.getSecretMetadata(sessionId, secretId);
+            if (!metadata)
+                return false;
+            // Delete all shares
+            for (const agentId of metadata.holders) {
+                const shareKey = MPC_KEYS.share(sessionId, secretId, agentId);
+                await this.redis.del(shareKey);
+                // Remove from agent index
+                const agentIndexKey = MPC_KEYS.agentIndex(agentId);
+                await this.redis.srem(agentIndexKey, secretId);
+            }
+            // Delete metadata
+            const metadataKey = MPC_KEYS.secret(sessionId, secretId);
+            await this.redis.del(metadataKey);
+            // Remove from session index
+            const sessionIndexKey = MPC_KEYS.sessionIndex(sessionId);
+            await this.redis.srem(sessionIndexKey, secretId);
+            return true;
+        }
+        catch (error) {
+            console.error('[MPC Store] Error deleting secret:', error);
+            return false;
+        }
+    }
+}
+// Singleton instance
+let mpcStore = null;
+/**
+ * Get the global MPC store
+ */
+export function getMpcStore() {
+    if (!mpcStore) {
+        mpcStore = new MpcRedisStore();
+    }
+    return mpcStore;
+}
+/**
+ * Reset the global MPC store (for testing)
+ */
+export function resetMpcStore() {
+    if (mpcStore) {
+        mpcStore.disconnect().catch(console.error);
+    }
+    mpcStore = null;
+}
+//# sourceMappingURL=redis-store.js.map

package/dist/mpc/redis-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-store.js","sourceRoot":"","sources":["../../src/mpc/redis-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAErF,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAEhE,SAAS,aAAa,CAAI,KAAyB,EAAE,QAAW;IAC9D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AASD;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,kBAAkB;IACnD,IAAc,WAAW,KAAK,OAAO,eAAe,CAAC,CAAC,CAAC;IAEvD,YAAY,UAA+B,EAAE;QAC3C,KAAK,EAAE,CAAC;IACV,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,QAA2B;QAClD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzB,GAAG,QAAQ;gBACX,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACzC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;aAC1C,CAAC,CAAC;YAEH,uBAAuB;YACvB,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;YAED,uBAAuB;YACvB,MAAM,eAAe,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAEpD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,QAAgB;QACzD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAE3C,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC;gBAChD,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC;gBAC5C,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBACxC,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC;gBAC5C,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;gBACjE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;gBAC9B,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClC,UAAU,EAAE,IAAI,CAAC,UAA6C;gBAC9D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,SAAS;aACrD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,QAAgB,EAAE,OAAiB;QACxE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,KAAe;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAE3E,+DAA+D;YAC/D,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5E,MAAM,SAAS,GAA8C;gBAC3D,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,IAAI;aAChB,CAAC;YAEF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAEtC,qBAAqB;YACrB,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAErD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,QAAgB,EAAE,OAAe;QACjE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAE3C,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;YAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC;YAExE,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;oBACnC,mDAAmD;oBACnD,IAAI,SAAwB,CAAC;oBAC7B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACrC,yCAAyC;wBACzC,IACE,OAAO,MAAM,KAAK,QAAQ;4BAC1B,MAAM,KAAK,IAAI;4BACf,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;4BACrC,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;4BAC7B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAClC,CAAC;4BACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;wBACtD,CAAC;wBACD,SAAS,GAAG,MAAuB,CAAC;oBACtC,CAAC;oBAAC,OAAO,UAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,UAAU,CAAC,CAAC;wBAC1E,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,SAAS,GAAG,UAAU,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACjE,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,YAAY,CAAC,CAAC;oBACnE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,OAAO;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC;gBACpC,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC;gBAC5C,SAAS,EAAE,WAAW;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,0BAA0B,CAC9B,SAAiB,EACjB,QAAgB,EAChB,QAAkB;QAElB,MAAM,MAAM,GAAe,EAAE,CAAC;QAE9B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChE,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEtD,MAAM,OAAO,GAAwB,EAAE,CAAC;YACxC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACnE,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;YACnE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;YACjE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,QAAgB;QACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,YAAY,GAAoC,EAAE,CAAC;QAEzD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChE,YAAY,CAAC,IAAI,CAAC;gBAChB,OAAO;gBACP,UAAU,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC;gBAC7B,SAAS,EAAE,KAAK,KAAK,IAAI;gBACzB,cAAc,EAAE,KAAK,EAAE,SAAS;aACjC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,QAAQ;YACR,YAAY;YACZ,eAAe,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS;YACrF,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;SAClE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,QAAgB;QACpD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACnE,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAE5B,oBAAoB;YACpB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAE/B,0BAA0B;gBAC1B,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACnD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACjD,CAAC;YAED,kBAAkB;YAClB,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAElC,4BAA4B;YAC5B,MAAM,eAAe,GAAG,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAEjD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CAEF;AAED,qBAAqB;AACrB,IAAI,QAAQ,GAAyB,IAAI,CAAC;AAE1C;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/dist/mpc/share-manager.d.ts

@@ -0,0 +1,59 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+import type { MpcShare, MpcSecretMetadata, MpcSplitConfig, MpcSplitResult, MpcDistribution, MpcReconstructResult } from './types.js';
+/**
+ * Split a secret into shares
+ */
+export declare function splitSecret(config: MpcSplitConfig): Promise<MpcSplitResult>;
+/**
+ * Distribute shares to agents
+ */
+export declare function distributeShares(shares: MpcShare[], distribution: MpcDistribution): {
+    distributedShares: MpcShare[];
+    holders: string[];
+};
+/**
+ * Validate shares before reconstruction
+ */
+export declare function validateSharesForReconstruction(shares: MpcShare[], metadata: MpcSecretMetadata): {
+    valid: boolean;
+    error?: string;
+};
+/**
+ * Reconstruct a secret from shares
+ */
+export declare function reconstructSecret(shares: MpcShare[], metadata: MpcSecretMetadata): Promise<MpcReconstructResult>;
+/**
+ * Generate a random secret for testing
+ */
+export declare function generateRandomSecret(length?: number): string;
+/**
+ * Check if an agent role can perform an MPC operation
+ */
+export declare function canPerformMpcOperation(operation: 'split' | 'distribute' | 'reconstruct' | 'viewStatus', role: string): boolean;
+/**
+ * Calculate share distribution statistics
+ */
+export declare function calculateDistributionStats(metadata: MpcSecretMetadata): {
+    totalShares: number;
+    distributed: number;
+    threshold: number;
+    reconstructable: boolean;
+    redundancy: number;
+};
+//# sourceMappingURL=share-manager.d.ts.map

package/dist/mpc/share-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-manager.d.ts","sourceRoot":"","sources":["../../src/mpc/share-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAWH,OAAO,KAAK,EACV,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,eAAe,EACf,oBAAoB,EACrB,MAAM,YAAY,CAAC;AA0CpB;;GAEG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CA6DjF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,QAAQ,EAAE,EAClB,YAAY,EAAE,eAAe,GAC5B;IAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CA4BtD;AAED;;GAEG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,QAAQ,EAAE,EAClB,QAAQ,EAAE,iBAAiB,GAC1B;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAuCpC;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,QAAQ,EAAE,EAClB,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAgD/B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM,CAEhE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,OAAO,GAAG,YAAY,GAAG,aAAa,GAAG,YAAY,EAChE,IAAI,EAAE,MAAM,GACX,OAAO,CAUT;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,iBAAiB,GAAG;IACvE,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CASA"}

package/dist/mpc/share-manager.js

@@ -0,0 +1,254 @@
+/**
+ * KemdiCode MCP Server
+ * Copyright (C) 2025-2026 Kemdi Sp. z o.o.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+/**
+ * MPC Share Manager
+ *
+ * Manages splitting secrets into shares and reconstructing them using
+ * Shamir's Secret Sharing scheme.
+ */
+import { split, combine } from 'shamir-secret-sharing';
+import { randomBytes } from 'crypto';
+import { generateSecretId, generateShareId, generateVerificationHash, verifySecretHash, } from './crypto.js';
+/**
+ * Convert string to Uint8Array
+ */
+function stringToBytes(str) {
+    return new TextEncoder().encode(str);
+}
+/**
+ * Convert Uint8Array to string
+ */
+function bytesToString(bytes) {
+    return new TextDecoder().decode(bytes);
+}
+/**
+ * Convert Uint8Array to hex string
+ */
+function bytesToHex(bytes) {
+    return Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+/**
+ * Convert hex string to Uint8Array
+ */
+function hexToBytes(hex) {
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        bytes[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+    }
+    return bytes;
+}
+/**
+ * Split a secret into shares
+ */
+export async function splitSecret(config) {
+    const { secret, totalShares, threshold, sessionId, creatorAgentId, label, ttl, tags, secretType, } = config;
+    // Validate parameters
+    if (totalShares < 2 || totalShares > 255) {
+        throw new Error('Total shares must be between 2 and 255');
+    }
+    if (threshold < 2 || threshold > totalShares) {
+        throw new Error('Threshold must be between 2 and totalShares');
+    }
+    if (!secret || secret.length === 0) {
+        throw new Error('Secret cannot be empty');
+    }
+    // Generate secret ID
+    const secretId = generateSecretId();
+    const now = Date.now();
+    // Convert secret to bytes and split
+    const secretBytes = stringToBytes(secret);
+    const shareBytes = await split(secretBytes, totalShares, threshold);
+    // Create share objects
+    const shares = shareBytes.map((shareData, index) => ({
+        id: generateShareId(secretId, index + 1),
+        index: index + 1, // 1-based indexing
+        data: bytesToHex(shareData),
+        agentId: '', // Will be assigned during distribution
+        secretId,
+        sessionId,
+        createdAt: now,
+        encrypted: false,
+    }));
+    // Create metadata
+    const metadata = {
+        id: secretId,
+        sessionId,
+        totalShares,
+        threshold,
+        holders: [],
+        creatorAgentId,
+        createdAt: now,
+        ttl,
+        label,
+        tags,
+        secretType,
+        verificationHash: generateVerificationHash(secret),
+    };
+    return { metadata, shares };
+}
+/**
+ * Distribute shares to agents
+ */
+export function distributeShares(shares, distribution) {
+    const { assignments } = distribution;
+    // Validate assignments
+    const assignedIndices = new Set();
+    const holders = [];
+    for (const assignment of assignments) {
+        if (assignedIndices.has(assignment.shareIndex)) {
+            throw new Error(`Share index ${assignment.shareIndex} assigned multiple times`);
+        }
+        assignedIndices.add(assignment.shareIndex);
+    }
+    // Apply assignments
+    const distributedShares = shares.map((share) => {
+        const assignment = assignments.find((a) => a.shareIndex === share.index);
+        if (assignment) {
+            holders.push(assignment.agentId);
+            return {
+                ...share,
+                agentId: assignment.agentId,
+            };
+        }
+        return share;
+    });
+    return { distributedShares, holders };
+}
+/**
+ * Validate shares before reconstruction
+ */
+export function validateSharesForReconstruction(shares, metadata) {
+    // Check if we have enough shares
+    if (shares.length < metadata.threshold) {
+        return {
+            valid: false,
+            error: `Need at least ${metadata.threshold} shares, but only have ${shares.length}`,
+        };
+    }
+    // Check if all shares belong to the same secret
+    const secretIds = new Set(shares.map((s) => s.secretId));
+    if (secretIds.size > 1) {
+        return {
+            valid: false,
+            error: 'Shares belong to different secrets',
+        };
+    }
+    // Check for duplicate indices
+    const indices = shares.map((s) => s.index);
+    const uniqueIndices = new Set(indices);
+    if (uniqueIndices.size !== indices.length) {
+        return {
+            valid: false,
+            error: 'Duplicate share indices detected',
+        };
+    }
+    // Check indices are valid
+    for (const index of indices) {
+        if (index < 1 || index > metadata.totalShares) {
+            return {
+                valid: false,
+                error: `Invalid share index: ${index}`,
+            };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Reconstruct a secret from shares
+ */
+export async function reconstructSecret(shares, metadata) {
+    // Validate shares
+    const validation = validateSharesForReconstruction(shares, metadata);
+    if (!validation.valid) {
+        return {
+            success: false,
+            sharesCollected: shares.length,
+            thresholdRequired: metadata.threshold,
+            error: validation.error,
+        };
+    }
+    try {
+        // Convert shares back to Uint8Array
+        // Sort shares by index to ensure consistent reconstruction
+        const sortedShares = [...shares].sort((a, b) => a.index - b.index);
+        const shareBytes = sortedShares.map((s) => hexToBytes(s.data));
+        // Reconstruct the secret
+        const secretBytes = await combine(shareBytes);
+        const secret = bytesToString(secretBytes);
+        // Verify the reconstructed secret
+        if (metadata.verificationHash) {
+            if (!verifySecretHash(secret, metadata.verificationHash)) {
+                return {
+                    success: false,
+                    sharesCollected: shares.length,
+                    thresholdRequired: metadata.threshold,
+                    error: 'Reconstructed secret verification failed',
+                };
+            }
+        }
+        return {
+            success: true,
+            secret,
+            sharesCollected: shares.length,
+            thresholdRequired: metadata.threshold,
+        };
+    }
+    catch (error) {
+        return {
+            success: false,
+            sharesCollected: shares.length,
+            thresholdRequired: metadata.threshold,
+            error: error instanceof Error ? error.message : 'Unknown reconstruction error',
+        };
+    }
+}
+/**
+ * Generate a random secret for testing
+ */
+export function generateRandomSecret(length = 32) {
+    return randomBytes(length).toString('hex');
+}
+/**
+ * Check if an agent role can perform an MPC operation
+ */
+export function canPerformMpcOperation(operation, role) {
+    const allowedRoles = {
+        split: ['supervisor', 'coordinator'],
+        distribute: ['supervisor', 'coordinator'],
+        reconstruct: ['supervisor', 'coordinator'],
+        viewStatus: ['supervisor', 'coordinator', 'worker', 'specialist'],
+    };
+    const allowed = allowedRoles[operation];
+    return allowed ? allowed.includes(role) : false;
+}
+/**
+ * Calculate share distribution statistics
+ */
+export function calculateDistributionStats(metadata) {
+    const distributed = metadata.holders.length;
+    return {
+        totalShares: metadata.totalShares,
+        distributed,
+        threshold: metadata.threshold,
+        reconstructable: distributed >= metadata.threshold,
+        redundancy: distributed - metadata.threshold,
+    };
+}
+//# sourceMappingURL=share-manager.js.map

package/dist/mpc/share-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share-manager.js","sourceRoot":"","sources":["../../src/mpc/share-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AASrC,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAiB;IACtC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAsB;IACtD,MAAM,EACJ,MAAM,EACN,WAAW,EACX,SAAS,EACT,SAAS,EACT,cAAc,EACd,KAAK,EACL,GAAG,EACH,IAAI,EACJ,UAAU,GACX,GAAG,MAAM,CAAC;IAEX,sBAAsB;IACtB,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,oCAAoC;IACpC,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAEpE,uBAAuB;IACvB,MAAM,MAAM,GAAe,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/D,EAAE,EAAE,eAAe,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC;QACxC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,mBAAmB;QACrC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,uCAAuC;QACpD,QAAQ;QACR,SAAS;QACT,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC,CAAC;IAEJ,kBAAkB;IAClB,MAAM,QAAQ,GAAsB;QAClC,EAAE,EAAE,QAAQ;QACZ,SAAS;QACT,WAAW;QACX,SAAS;QACT,OAAO,EAAE,EAAE;QACX,cAAc;QACd,SAAS,EAAE,GAAG;QACd,GAAG;QACH,KAAK;QACL,IAAI;QACJ,UAAU;QACV,gBAAgB,EAAE,wBAAwB,CAAC,MAAM,CAAC;KACnD,CAAC;IAEF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAkB,EAClB,YAA6B;IAE7B,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC;IAErC,uBAAuB;IACvB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,CAAC,UAAU,0BAA0B,CAAC,CAAC;QAClF,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,oBAAoB;IACpB,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;gBACL,GAAG,KAAK;gBACR,OAAO,EAAE,UAAU,CAAC,OAAO;aAC5B,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B,CAC7C,MAAkB,EAClB,QAA2B;IAE3B,iCAAiC;IACjC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,iBAAiB,QAAQ,CAAC,SAAS,0BAA0B,MAAM,CAAC,MAAM,EAAE;SACpF,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oCAAoC;SAC5C,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,kCAAkC;SAC1C,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,wBAAwB,KAAK,EAAE;aACvC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAkB,EAClB,QAA2B;IAE3B,kBAAkB;IAClB,MAAM,UAAU,GAAG,+BAA+B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,MAAM,CAAC,MAAM;YAC9B,iBAAiB,EAAE,QAAQ,CAAC,SAAS;YACrC,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,oCAAoC;QACpC,2DAA2D;QAC3D,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/D,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QAE1C,kCAAkC;QAClC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC9B,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACzD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,eAAe,EAAE,MAAM,CAAC,MAAM;oBAC9B,iBAAiB,EAAE,QAAQ,CAAC,SAAS;oBACrC,KAAK,EAAE,0CAA0C;iBAClD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM;YACN,eAAe,EAAE,MAAM,CAAC,MAAM;YAC9B,iBAAiB,EAAE,QAAQ,CAAC,SAAS;SACtC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,eAAe,EAAE,MAAM,CAAC,MAAM;YAC9B,iBAAiB,EAAE,QAAQ,CAAC,SAAS;YACrC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;SAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE;IACtD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAgE,EAChE,IAAY;IAEZ,MAAM,YAAY,GAAsC;QACtD,KAAK,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACpC,UAAU,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACzC,WAAW,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QAC1C,UAAU,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC;KAClE,CAAC;IAEF,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAA2B;IAOpE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5C,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW;QACX,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,eAAe,EAAE,WAAW,IAAI,QAAQ,CAAC,SAAS;QAClD,UAAU,EAAE,WAAW,GAAG,QAAQ,CAAC,SAAS;KAC7C,CAAC;AACJ,CAAC"}