mstro-app 0.4.38 → 0.4.43

package/dist/server/services/deploy/board-execution-handler.js

@@ -1,621 +0,0 @@
-// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
-// Licensed under the MIT License. See LICENSE file for details.
-/**
- * Board Execution Handler
- *
- * Handles PM Board execution requests from a developer's backend on behalf
- * of end users. Each execution is isolated — no shared context between
- * end users.
- *
- * Flow:
- * 1. Validate boardTemplateId against deployment's allowedBoardTemplateIds
- * 2. Load the referenced board template from .mstro/pm/boards/
- * 3. Create an isolated working directory (git worktree)
- * 4. Use headless Claude Code to customize the board from end-user prompt
- * 5. Trigger PM Board "implement all" execution via PlanExecutor
- * 6. Collect results and return them
- *
- * Board executions are long-running — returns a job ID immediately with
- * polling for status and results.
- *
- * Security: End-user prompts are untrusted input. They are always passed
- * as user messages, never injected into system instructions.
- */
-import { execSync } from 'node:child_process';
-import { randomUUID } from 'node:crypto';
-import { cpSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { HeadlessRunner } from '../../cli/headless/runner.js';
-import { PlanExecutor } from '../plan/executor.js';
-import { parseBoardDirectory, resolvePmDir } from '../plan/parser.js';
-import { readOwnerApiCredential } from './deploy-ai-service.js';
-// ========== Prompt Sanitization ==========
-/**
- * Maximum allowed length for an end-user prompt.
- * Prevents memory abuse and ensures reasonable prompt sizes.
- */
-const MAX_END_USER_PROMPT_LENGTH = 100_000;
-/**
- * Sanitize an end-user prompt before passing it to the AI.
- *
- * SECURITY: End-user prompts are untrusted. This function:
- * 1. Strips system instruction XML delimiters to prevent prompt escape
- * 2. Removes null bytes and zero-width characters used for evasion
- * 3. Truncates to MAX_END_USER_PROMPT_LENGTH
- *
- * Note: This does NOT strip tool-use instructions or path traversal text —
- * those are handled by the Security Bouncer (tool execution level) and
- * the isolated working directory (filesystem level).
- */
-export function sanitizeEndUserPrompt(prompt) {
-    let sanitized = prompt;
-    // Strip system instruction XML tags that could break prompt structure
-    sanitized = sanitized.replace(/<\/?system-instruction>/gi, '');
-    // Remove null bytes
-    sanitized = sanitized.replace(/\x00/g, '');
-    // Remove zero-width characters used for evasion
-    // U+200B Zero Width Space, U+200C Zero Width Non-Joiner,
-    // U+200D Zero Width Joiner, U+FEFF Byte Order Mark
-    sanitized = sanitized.replace(/\u200B|\u200C|\u200D|\uFEFF/g, '');
-    // Truncate to max length
-    if (sanitized.length > MAX_END_USER_PROMPT_LENGTH) {
-        sanitized = sanitized.slice(0, MAX_END_USER_PROMPT_LENGTH);
-    }
-    return sanitized;
-}
-const rateBuckets = new Map();
-function getBucket(deploymentId) {
-    let bucket = rateBuckets.get(deploymentId);
-    if (!bucket) {
-        bucket = { timestamps: [], activeExecutions: 0 };
-        rateBuckets.set(deploymentId, bucket);
-    }
-    return bucket;
-}
-function pruneTimestamps(bucket) {
-    const oneMinuteAgo = Date.now() - 60_000;
-    while (bucket.timestamps.length > 0 && bucket.timestamps[0] < oneMinuteAgo) {
-        bucket.timestamps.shift();
-    }
-}
-function checkRateLimit(config) {
-    const bucket = getBucket(config.deploymentId);
-    // Check concurrent executions
-    if (bucket.activeExecutions >= config.maxConcurrentBoardExecutions) {
-        return {
-            code: 'CONCURRENT_LIMIT_EXCEEDED',
-            message: `Deployment has reached the maximum of ${config.maxConcurrentBoardExecutions} concurrent board executions. Wait for an existing execution to complete.`,
-        };
-    }
-    // Check executions per minute
-    if (config.maxBoardExecutionsPerMinute !== null) {
-        pruneTimestamps(bucket);
-        if (bucket.timestamps.length >= config.maxBoardExecutionsPerMinute) {
-            return {
-                code: 'RATE_LIMIT_EXCEEDED',
-                message: `Deployment has exceeded the rate limit of ${config.maxBoardExecutionsPerMinute} board executions per minute. Try again shortly.`,
-            };
-        }
-    }
-    return null;
-}
-function recordExecutionStart(deploymentId) {
-    const bucket = getBucket(deploymentId);
-    bucket.timestamps.push(Date.now());
-    bucket.activeExecutions++;
-}
-function recordExecutionEnd(deploymentId) {
-    const bucket = getBucket(deploymentId);
-    bucket.activeExecutions = Math.max(0, bucket.activeExecutions - 1);
-}
-// ========== Job Store ==========
-/** Retention window for completed/failed jobs before cleanup (5 minutes) */
-const JOB_RETENTION_MS = 300_000;
-const jobs = new Map();
-function createJob(request) {
-    const jobId = `board-exec-${request.deploymentId}-${randomUUID()}`;
-    const now = Date.now();
-    const job = {
-        jobId,
-        deploymentId: request.deploymentId,
-        endUserId: request.endUserId,
-        boardTemplateId: request.boardTemplateId,
-        endUserPrompt: request.endUserPrompt,
-        status: 'customizing',
-        progress: {
-            phase: 'isolating',
-            issuesTotal: 0,
-            issuesCompleted: 0,
-            currentWaveIds: [],
-        },
-        result: null,
-        error: null,
-        createdAt: now,
-        updatedAt: now,
-        isolatedDir: null,
-    };
-    jobs.set(jobId, job);
-    return job;
-}
-function updateJob(jobId, updates) {
-    const job = jobs.get(jobId);
-    if (!job)
-        return;
-    Object.assign(job, updates, { updatedAt: Date.now() });
-}
-function scheduleJobCleanup(jobId) {
-    setTimeout(() => {
-        const job = jobs.get(jobId);
-        if (job && job.status !== 'customizing' && job.status !== 'executing') {
-            if (job.isolatedDir) {
-                cleanupIsolatedDir(job.isolatedDir);
-            }
-            jobs.delete(jobId);
-        }
-    }, JOB_RETENTION_MS);
-}
-// ========== Isolation ==========
-function isGitRepo(dir) {
-    try {
-        execSync('git rev-parse --is-inside-work-tree', { cwd: dir, stdio: 'pipe' });
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Create an isolated working directory for a board execution.
- *
- * Uses git worktree for git repos (efficient — shares object store).
- * Falls back to a filtered directory copy for non-git repos.
- *
- * .mstro/pm/ is gitignored, so it is always copied manually.
- */
-function createIsolatedDir(workingDir) {
-    const prefix = join(tmpdir(), 'mstro-board-exec-');
-    if (isGitRepo(workingDir)) {
-        const isolatedDir = mkdtempSync(prefix);
-        // git worktree needs a non-existent path
-        rmSync(isolatedDir, { recursive: true, force: true });
-        execSync(`git worktree add --detach "${isolatedDir}"`, {
-            cwd: workingDir,
-            stdio: 'pipe',
-        });
-        // .mstro/ is gitignored — copy the PM directory manually
-        const pmDir = join(workingDir, '.mstro', 'pm');
-        const isolatedPmDir = join(isolatedDir, '.mstro', 'pm');
-        if (existsSync(pmDir) && !existsSync(isolatedPmDir)) {
-            mkdirSync(join(isolatedDir, '.mstro'), { recursive: true });
-            cpSync(pmDir, isolatedPmDir, { recursive: true });
-        }
-        return isolatedDir;
-    }
-    // Fallback: filtered directory copy for non-git repos
-    const isolatedDir = mkdtempSync(prefix);
-    cpSync(workingDir, isolatedDir, {
-        recursive: true,
-        filter: (src) => !src.includes('node_modules') && !src.includes('.git'),
-    });
-    return isolatedDir;
-}
-function cleanupIsolatedDir(isolatedDir) {
-    try {
-        // Try git worktree remove first
-        execSync(`git worktree remove --force "${isolatedDir}"`, { stdio: 'pipe' });
-    }
-    catch {
-        // Fallback: direct removal
-        try {
-            rmSync(isolatedDir, { recursive: true, force: true });
-        }
-        catch { /* best-effort cleanup */ }
-    }
-}
-// ========== Board Template Loading ==========
-function validateBoardTemplate(workingDir, boardTemplateId) {
-    const pmDir = resolvePmDir(workingDir);
-    if (!pmDir)
-        return null;
-    const boardState = parseBoardDirectory(pmDir, boardTemplateId);
-    if (!boardState)
-        return null;
-    return {
-        issueCount: boardState.issues.filter(i => i.type !== 'epic').length,
-    };
-}
-// ========== Board Customization ==========
-/**
- * Build the customization prompt. The system instruction explains the task;
- * the end-user prompt is in a separate, clearly delimited section.
- *
- * SECURITY: The end-user prompt is never interpolated into the system
- * instruction. It appears in the user-message section only.
- */
-function buildCustomizationPrompt(boardTemplateId, endUserPrompt, isolatedDir) {
-    const pmDir = resolvePmDir(isolatedDir);
-    const boardDir = pmDir ? join(pmDir, 'boards', boardTemplateId) : '';
-    const backlogDir = boardDir ? join(boardDir, 'backlog') : '';
-    const systemInstruction = `You are customizing a PM Board template for an end user's specific needs.
-
-## Board Template
-Board ID: ${boardTemplateId}
-Board directory: ${boardDir}
-Backlog directory: ${backlogDir}
-
-## Task
-
-Read all issue files in the board's backlog directory. Then adapt every issue to fulfill the end user's request below. For each issue:
-
-1. Update the description to be specific to the end user's needs
-2. Update acceptance criteria to match their requirements
-3. Update technical notes with relevant implementation details
-4. Update "Files to Modify" if applicable
-5. Preserve all YAML front matter fields (id, type, status, priority, blocked_by, etc.)
-6. Do NOT change issue IDs, dependency edges, or the overall board structure
-
-If issues need to be added or removed to properly serve the end user's request, you may do so — but preserve the dependency graph's integrity.
-
-## Rules
-
-- All changes must be within ${backlogDir}
-- Preserve YAML front matter structure exactly
-- Keep issue scoping appropriate (1-5 story points each)
-- Ensure blocked_by references remain valid
-- Do NOT modify board.md, STATE.md, or any files outside the backlog
-- Respond briefly describing what you changed`;
-    return [
-        '<system-instruction>',
-        systemInstruction,
-        '</system-instruction>',
-        '',
-        endUserPrompt,
-    ].join('\n');
-}
-/**
- * Customize a board template via headless Claude Code session.
- * Claude reads the board's issues and adapts them for the end user's prompt.
- */
-async function customizeBoard(boardTemplateId, endUserPrompt, isolatedDir, apiKey) {
-    const prompt = buildCustomizationPrompt(boardTemplateId, endUserPrompt, isolatedDir);
-    const runner = new HeadlessRunner({
-        workingDir: isolatedDir,
-        directPrompt: prompt,
-        stallWarningMs: 300_000, // 5 min
-        stallKillMs: 900_000, // 15 min
-        stallHardCapMs: 1_800_000, // 30 min hard cap
-        extraEnv: { ANTHROPIC_API_KEY: apiKey },
-        verbose: false,
-        deployMode: true, // Activate deploy-specific bouncer patterns
-    });
-    const result = await runner.run();
-    return { completed: result.completed, error: result.error };
-}
-// ========== Board Execution ==========
-/**
- * Run the full board execution ("implement all") via PlanExecutor.
- * Listens to executor events to track progress on the parent job.
- */
-async function executeBoard(boardTemplateId, isolatedDir, job, apiKey) {
-    const startTime = Date.now();
-    const executor = new PlanExecutor(isolatedDir, {
-        extraEnv: { ANTHROPIC_API_KEY: apiKey },
-    });
-    // Track progress via executor events
-    executor.on('waveStarted', (data) => {
-        const current = jobs.get(job.jobId);
-        if (current) {
-            updateJob(job.jobId, {
-                progress: { ...current.progress, currentWaveIds: data.issueIds },
-            });
-        }
-    });
-    executor.on('issueCompleted', () => {
-        const current = jobs.get(job.jobId);
-        if (current) {
-            updateJob(job.jobId, {
-                progress: {
-                    ...current.progress,
-                    issuesCompleted: current.progress.issuesCompleted + 1,
-                    currentWaveIds: [],
-                },
-            });
-        }
-    });
-    await executor.startBoard(boardTemplateId);
-    // Collect output artifacts
-    const outputs = collectOutputs(isolatedDir, boardTemplateId);
-    const metrics = executor.getMetrics();
-    return {
-        completed: executor.getStatus() === 'complete',
-        issuesTotal: metrics.issuesAttempted,
-        issuesCompleted: metrics.issuesCompleted,
-        issuesFailed: metrics.issuesAttempted - metrics.issuesCompleted,
-        outputs,
-        durationMs: Date.now() - startTime,
-    };
-}
-// ========== Result Collection ==========
-function collectOutputs(isolatedDir, boardTemplateId) {
-    const pmDir = resolvePmDir(isolatedDir);
-    if (!pmDir)
-        return {};
-    const outDir = join(pmDir, 'boards', boardTemplateId, 'out');
-    if (!existsSync(outDir))
-        return {};
-    const outputs = {};
-    try {
-        for (const file of readdirSync(outDir)) {
-            if (file.endsWith('.md')) {
-                outputs[file] = readFileSync(join(outDir, file), 'utf-8');
-            }
-        }
-    }
-    catch { /* non-fatal */ }
-    return outputs;
-}
-// ========== Background Execution ==========
-/**
- * Orchestrates the full board execution lifecycle. Updates job state
- * as it progresses through isolation, customization, execution, and
- * result collection phases.
- */
-async function runBoardExecution(job, config, apiKey) {
-    try {
-        // Phase 1: Create isolated working directory
-        updateJob(job.jobId, {
-            progress: { ...job.progress, phase: 'isolating' },
-        });
-        let isolatedDir;
-        try {
-            isolatedDir = createIsolatedDir(config.workingDir);
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            updateJob(job.jobId, {
-                status: 'failed',
-                error: `Failed to create isolated directory: ${message}`,
-            });
-            return;
-        }
-        updateJob(job.jobId, { isolatedDir });
-        // Phase 2: Customize board via headless Claude Code
-        updateJob(job.jobId, {
-            status: 'customizing',
-            progress: { ...job.progress, phase: 'customizing' },
-        });
-        const customization = await customizeBoard(job.boardTemplateId, sanitizeEndUserPrompt(job.endUserPrompt), isolatedDir, apiKey);
-        if (!customization.completed) {
-            updateJob(job.jobId, {
-                status: 'failed',
-                error: `Board customization failed: ${customization.error || 'Unknown error'}`,
-            });
-            return;
-        }
-        // Phase 3: Execute board ("implement all")
-        updateJob(job.jobId, {
-            status: 'executing',
-            progress: { ...job.progress, phase: 'executing' },
-        });
-        const result = await executeBoard(job.boardTemplateId, isolatedDir, job, apiKey);
-        // Phase 4: Store results
-        updateJob(job.jobId, {
-            status: result.completed ? 'completed' : 'failed',
-            progress: {
-                phase: 'done',
-                issuesTotal: result.issuesTotal,
-                issuesCompleted: result.issuesCompleted,
-                currentWaveIds: [],
-            },
-            result,
-            error: result.completed ? null : 'Board execution did not complete all issues',
-        });
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        updateJob(job.jobId, {
-            status: 'failed',
-            error: message,
-        });
-    }
-    finally {
-        recordExecutionEnd(job.deploymentId);
-        scheduleJobCleanup(job.jobId);
-    }
-}
-// ========== Public API ==========
-/**
- * Start a board execution for an end user. Returns a job ID immediately.
- * The execution runs asynchronously — poll with getBoardExecutionStatus().
- *
- * Validates the deployment config, checks rate limits, verifies the board
- * template exists and is allowed, then launches the background execution.
- *
- * @returns Structured result with either the job ID or an error.
- */
-export function startBoardExecution(request, config) {
-    // ── Validate request ───────────────────────────────────────
-    if (!request.endUserPrompt || request.endUserPrompt.trim().length === 0) {
-        return {
-            ok: false,
-            error: { code: 'INVALID_REQUEST', message: 'endUserPrompt is required and must not be empty.' },
-        };
-    }
-    if (request.endUserPrompt.length > MAX_END_USER_PROMPT_LENGTH) {
-        return {
-            ok: false,
-            error: {
-                code: 'INVALID_REQUEST',
-                message: `endUserPrompt exceeds the maximum allowed length of ${MAX_END_USER_PROMPT_LENGTH.toLocaleString()} characters.`,
-            },
-        };
-    }
-    if (!request.endUserId || request.endUserId.trim().length === 0) {
-        return {
-            ok: false,
-            error: { code: 'INVALID_REQUEST', message: 'endUserId is required.' },
-        };
-    }
-    if (!request.boardTemplateId || request.boardTemplateId.trim().length === 0) {
-        return {
-            ok: false,
-            error: { code: 'INVALID_REQUEST', message: 'boardTemplateId is required.' },
-        };
-    }
-    // ── Validate boardTemplateId format (path traversal defense) ─
-    if (/[/\\]|\.\.|\x00/.test(request.boardTemplateId)) {
-        return {
-            ok: false,
-            error: {
-                code: 'INVALID_BOARD_TEMPLATE',
-                message: 'boardTemplateId contains invalid characters (/, \\, .., or null bytes).',
-            },
-        };
-    }
-    // ── Validate AI is enabled ─────────────────────────────────
-    if (!config.aiEnabled) {
-        return {
-            ok: false,
-            error: { code: 'AI_DISABLED', message: 'AI features are not enabled for this deployment.' },
-        };
-    }
-    // ── Validate board-execution capability ────────────────────
-    if (!config.allowedAiCapabilities.includes('board-execution')) {
-        return {
-            ok: false,
-            error: {
-                code: 'CAPABILITY_DENIED',
-                message: "This deployment does not have the 'board-execution' AI capability enabled.",
-            },
-        };
-    }
-    // ── Validate board template is allowed ─────────────────────
-    if (!config.allowedBoardTemplateIds.includes(request.boardTemplateId)) {
-        return {
-            ok: false,
-            error: {
-                code: 'INVALID_BOARD_TEMPLATE',
-                message: `Board template '${request.boardTemplateId}' is not allowed for this deployment.`,
-            },
-        };
-    }
-    // ── Validate board template exists ─────────────────────────
-    const template = validateBoardTemplate(config.workingDir, request.boardTemplateId);
-    if (!template) {
-        return {
-            ok: false,
-            error: {
-                code: 'BOARD_TEMPLATE_NOT_FOUND',
-                message: `Board template '${request.boardTemplateId}' not found in project.`,
-            },
-        };
-    }
-    // ── Rate limit checks ─────────────────────────────────────
-    const rateLimitError = checkRateLimit(config);
-    if (rateLimitError) {
-        return { ok: false, error: rateLimitError };
-    }
-    // ── Verify API key ─────────────────────────────────────────
-    const credential = readOwnerApiCredential();
-    if (!credential || credential.type !== 'api-key') {
-        return {
-            ok: false,
-            error: {
-                code: 'EXECUTION_FAILED',
-                message: 'Deploy requires an Anthropic API key. Add your key in Deploy \u2192 AI Config or set ANTHROPIC_API_KEY in your environment.',
-            },
-        };
-    }
-    // ── Create job and launch background execution ─────────────
-    const job = createJob(request);
-    job.progress.issuesTotal = template.issueCount;
-    recordExecutionStart(config.deploymentId);
-    // Fire-and-forget — execution runs in background, errors captured in job
-    runBoardExecution(job, config, credential.key).catch(() => { });
-    return { ok: true, jobId: job.jobId };
-}
-/**
- * Get the current status of a board execution job.
- *
- * Optionally pass endUserId to enforce isolation — returns null if the
- * job belongs to a different end user.
- *
- * @returns Job status or null if not found / access denied.
- */
-export function getBoardExecutionStatus(jobId, endUserId) {
-    const job = jobs.get(jobId);
-    if (!job)
-        return null;
-    // Enforce end-user isolation when endUserId is provided
-    if (endUserId !== undefined && job.endUserId !== endUserId) {
-        return null;
-    }
-    return {
-        jobId: job.jobId,
-        status: job.status,
-        progress: { ...job.progress },
-        result: job.result,
-        error: job.error,
-    };
-}
-/**
- * Get the current rate limit state for a deployment's board executions.
- * Useful for status/monitoring endpoints.
- */
-export function getDeploymentBoardExecutionState(deploymentId) {
-    const bucket = getBucket(deploymentId);
-    pruneTimestamps(bucket);
-    return {
-        executionsInLastMinute: bucket.timestamps.length,
-        activeExecutions: bucket.activeExecutions,
-    };
-}
-/**
- * Reset rate limit state for a deployment's board executions.
- * Call when a deployment is deleted.
- */
-export function resetDeploymentBoardExecutionRateLimit(deploymentId) {
-    rateBuckets.delete(deploymentId);
-}
-/**
- * Sweep stale isolated directories left behind by crashed executions.
- *
- * Board execution creates temp dirs prefixed with 'mstro-board-exec-'.
- * If the process crashes before cleanup, these dirs leak. This function
- * removes any that are older than the retention window + buffer.
- *
- * Safe to call on startup or periodically.
- */
-export function sweepStaleIsolatedDirs() {
-    const prefix = 'mstro-board-exec-';
-    const maxAgeMs = JOB_RETENTION_MS * 2; // 10 minutes — generous buffer
-    let swept = 0;
-    try {
-        const tmpDir = tmpdir();
-        const entries = readdirSync(tmpDir);
-        const now = Date.now();
-        for (const entry of entries) {
-            if (!entry.startsWith(prefix))
-                continue;
-            const fullPath = join(tmpDir, entry);
-            try {
-                // Extract timestamp from dir name: mstro-board-exec-<random>
-                // Use filesystem stat for age instead of parsing name
-                const { mtimeMs } = statSync(fullPath);
-                if (now - mtimeMs > maxAgeMs) {
-                    cleanupIsolatedDir(fullPath);
-                    swept++;
-                }
-            }
-            catch {
-                // Can't stat or clean — skip
-            }
-        }
-    }
-    catch {
-        // Can't read tmpdir — skip
-    }
-    return swept;
-}
-//# sourceMappingURL=board-execution-handler.js.map

package/dist/server/services/deploy/board-execution-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"board-execution-handler.js","sourceRoot":"","sources":["../../../../server/services/deploy/board-execution-handler.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,gEAAgE;AAEhE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAClH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,4CAA4C;AAE5C;;;GAGG;AACH,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,IAAI,SAAS,GAAG,MAAM,CAAC;IAEvB,sEAAsE;IACtE,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IAE/D,oBAAoB;IACpB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAE3C,gDAAgD;IAChD,yDAAyD;IACzD,mDAAmD;IACnD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;IAElE,yBAAyB;IACzB,IAAI,SAAS,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAClD,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAwGD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAElD,SAAS,SAAS,CAAC,YAAoB;IACrC,IAAI,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACjD,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,MAAkB;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACzC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,YAAY,EAAE,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,MAA4B;IAE5B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE9C,8BAA8B;IAC9B,IAAI,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,4BAA4B,EAAE,CAAC;QACnE,OAAO;YACL,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,yCAAyC,MAAM,CAAC,4BAA4B,2EAA2E;SACjK,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,IAAI,MAAM,CAAC,2BAA2B,KAAK,IAAI,EAAE,CAAC;QAChD,eAAe,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,2BAA2B,EAAE,CAAC;YACnE,OAAO;gBACL,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,6CAA6C,MAAM,CAAC,2BAA2B,kDAAkD;aAC3I,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,gBAAgB,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,kCAAkC;AAElC,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;AAElD,SAAS,SAAS,CAAC,OAA8B;IAC/C,MAAM,KAAK,GAAG,cAAc,OAAO,CAAC,YAAY,IAAI,UAAU,EAAE,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,GAAG,GAAsB;QAC7B,KAAK;QACL,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE;YACR,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,CAAC;YACd,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,EAAE;SACnB;QACD,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,IAAI;KAClB,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,OAAmC;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACtE,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACvB,CAAC;AAED,kCAAkC;AAElC,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,QAAQ,CAAC,qCAAqC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAEnD,IAAI,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACxC,yCAAyC;QACzC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,QAAQ,CAAC,8BAA8B,WAAW,GAAG,EAAE;YACrD,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,yDAAyD;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACpD,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE;QAC9B,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;KACxE,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,IAAI,CAAC;QACH,gCAAgC;QAChC,QAAQ,CAAC,gCAAgC,WAAW,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;QAC3B,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,+CAA+C;AAE/C,SAAS,qBAAqB,CAC5B,UAAkB,EAClB,eAAuB;IAEvB,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,OAAO;QACL,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM;KACpE,CAAC;AACJ,CAAC;AAED,4CAA4C;AAE5C;;;;;;GAMG;AACH,SAAS,wBAAwB,CAC/B,eAAuB,EACvB,aAAqB,EACrB,WAAmB;IAEnB,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7D,MAAM,iBAAiB,GAAG;;;YAGhB,eAAe;mBACR,QAAQ;qBACN,UAAU;;;;;;;;;;;;;;;;;+BAiBA,UAAU;;;;;8CAKK,CAAC;IAE7C,OAAO;QACL,sBAAsB;QACtB,iBAAiB;QACjB,uBAAuB;QACvB,EAAE;QACF,aAAa;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,eAAuB,EACvB,aAAqB,EACrB,WAAmB,EACnB,MAAc;IAEd,MAAM,MAAM,GAAG,wBAAwB,CAAC,eAAe,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAErF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;QAChC,UAAU,EAAE,WAAW;QACvB,YAAY,EAAE,MAAM;QACpB,cAAc,EAAE,OAAO,EAAK,QAAQ;QACpC,WAAW,EAAE,OAAO,EAAQ,SAAS;QACrC,cAAc,EAAE,SAAS,EAAG,kBAAkB;QAC9C,QAAQ,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE;QACvC,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,IAAI,EAAY,4CAA4C;KACzE,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;IAClC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,wCAAwC;AAExC;;;GAGG;AACH,KAAK,UAAU,YAAY,CACzB,eAAuB,EACvB,WAAmB,EACnB,GAAsB,EACtB,MAAc;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,WAAW,EAAE;QAC7C,QAAQ,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE;KACxC,CAAC,CAAC;IAEH,qCAAqC;IACrC,QAAQ,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,IAA4B,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;gBACnB,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;gBACnB,QAAQ,EAAE;oBACR,GAAG,OAAO,CAAC,QAAQ;oBACnB,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC;oBACrD,cAAc,EAAE,EAAE;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAE3C,2BAA2B;IAC3B,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;IAEtC,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,UAAU;QAC9C,WAAW,EAAE,OAAO,CAAC,eAAe;QACpC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,YAAY,EAAE,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe;QAC/D,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,0CAA0C;AAE1C,SAAS,cAAc,CACrB,WAAmB,EACnB,eAAuB;IAEvB,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAE3B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6CAA6C;AAE7C;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAsB,EACtB,MAA4B,EAC5B,MAAc;IAEd,IAAI,CAAC;QACH,6CAA6C;QAC7C,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;SAClD,CAAC,CAAC;QAEH,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;gBACnB,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,wCAAwC,OAAO,EAAE;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAEtC,oDAAoD;QACpD,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE;SACpD,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,MAAM,cAAc,CACxC,GAAG,CAAC,eAAe,EACnB,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,EACxC,WAAW,EACX,MAAM,CACP,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;YAC7B,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;gBACnB,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,+BAA+B,aAAa,CAAC,KAAK,IAAI,eAAe,EAAE;aAC/E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,2CAA2C;QAC3C,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;SAClD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,GAAG,CAAC,eAAe,EACnB,WAAW,EACX,GAAG,EACH,MAAM,CACP,CAAC;QAEF,yBAAyB;QACzB,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YACjD,QAAQ,EAAE;gBACR,KAAK,EAAE,MAAM;gBACb,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,cAAc,EAAE,EAAE;aACnB;YACD,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;SAC/E,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE;YACnB,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,mCAAmC;AAEnC;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA8B,EAC9B,MAA4B;IAE5B,8DAA8D;IAC9D,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kDAAkD,EAAE;SAChG,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uDAAuD,0BAA0B,CAAC,cAAc,EAAE,cAAc;aAC1H;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,wBAAwB,EAAE;SACtE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,yEAAyE;aACnF;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kDAAkD,EAAE;SAC5F,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,4EAA4E;aACtF;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,mBAAmB,OAAO,CAAC,eAAe,uCAAuC;aAC3F;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACnF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,mBAAmB,OAAO,CAAC,eAAe,yBAAyB;aAC7E;SACF,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;IAED,8DAA8D;IAC9D,MAAM,UAAU,GAAG,sBAAsB,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,6HAA6H;aACvI;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC;IAE/C,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE1C,yEAAyE;IACzE,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,SAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,wDAAwD;IACxD,IAAI,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE;QAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAAC,YAAoB;IAInE,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACvC,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO;QACL,sBAAsB,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM;QAChD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sCAAsC,CACpD,YAAoB;IAEpB,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,MAAM,GAAG,mBAAmB,CAAC;IACnC,MAAM,QAAQ,GAAG,gBAAgB,GAAG,CAAC,CAAC,CAAC,+BAA+B;IACtE,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,6DAA6D;gBAC7D,sDAAsD;gBACtD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,GAAG,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;oBAC7B,kBAAkB,CAAC,QAAQ,CAAC,CAAC;oBAC7B,KAAK,EAAE,CAAC;gBACV,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server/services/deploy/credentials.d.ts

@@ -1,35 +0,0 @@
-/**
- * Check if a validation attempt is allowed under the rate limit.
- * Returns true if allowed, false if rate-limited.
- */
-export declare function checkValidationRateLimit(): boolean;
-/**
- * Store an encrypted API key to ~/.mstro/deploy-credentials.json.
- * Creates the directory if it doesn't exist. File is mode 0600.
- */
-export declare function storeApiKey(apiKey: string): {
-    lastFour: string;
-};
-/**
- * Read and decrypt the stored API key. Returns null if missing or corrupted.
- */
-export declare function readApiKey(): string | null;
-/**
- * Get API key status without exposing the key.
- * Checks env var first (highest priority), then stored credentials.
- */
-export declare function getApiKeyStatus(): {
-    status: 'valid' | 'missing';
-    lastFour?: string;
-    source?: 'env' | 'stored';
-};
-/**
- * Delete stored API key.
- */
-export declare function deleteApiKey(): void;
-/**
- * Validate an Anthropic API key by calling GET /v1/models.
- * Returns true if the key is valid, false otherwise.
- */
-export declare function validateAnthropicKey(apiKey: string): Promise<boolean>;
-//# sourceMappingURL=credentials.d.ts.map