onboardconnect-agent 0.1.1

package/dist/ldap.js

@@ -0,0 +1,420 @@
+import { Attribute, Change, Client } from "ldapts";
+import { OcLogger } from "./logger.js";
+const RETRY_DELAYS = [1000, 2000, 4000];
+export class OcCommandExecutor {
+    config;
+    logger = new OcLogger("ldap");
+    client = null;
+    constructor(config) {
+        this.config = config;
+    }
+    async execute(command) {
+        const startedAt = Date.now();
+        const { commandId, commandType, dryRun } = command;
+        this.logger.info("Executing command", { commandId, commandType, dryRun });
+        if (commandType === "read_groups") {
+            for (let attempt = 0; attempt <= RETRY_DELAYS.length; attempt++) {
+                try {
+                    await this.ensureConnected();
+                    const groups = await this.readGroups(command.payload);
+                    return { commandId, success: true, groups, executedAt: new Date().toISOString() };
+                }
+                catch (err) {
+                    const error = err instanceof Error ? err.message : String(err);
+                    if (attempt < RETRY_DELAYS.length) {
+                        await new Promise((r) => setTimeout(r, RETRY_DELAYS[attempt] ?? 4000));
+                        this.client = null;
+                    }
+                    else {
+                        return { commandId, success: false, error, executedAt: new Date().toISOString() };
+                    }
+                }
+            }
+            return { commandId, success: false, error: "Max retries exceeded", executedAt: new Date().toISOString() };
+        }
+        if (commandType === "get_schema") {
+            for (let attempt = 0; attempt <= RETRY_DELAYS.length; attempt++) {
+                try {
+                    await this.ensureConnected();
+                    const schema = await this.getSchema();
+                    this.logger.info("get_schema success", { commandId, count: schema.length });
+                    return { commandId, success: true, schema, executedAt: new Date().toISOString() };
+                }
+                catch (err) {
+                    const error = err instanceof Error ? err.message : String(err);
+                    this.logger.warn("get_schema attempt failed", { commandId, attempt, error });
+                    if (attempt < RETRY_DELAYS.length) {
+                        await new Promise((r) => setTimeout(r, RETRY_DELAYS[attempt] ?? 4000));
+                        this.client = null;
+                    }
+                    else {
+                        return { commandId, success: false, error, executedAt: new Date().toISOString() };
+                    }
+                }
+            }
+            return { commandId, success: false, error: "Max retries exceeded", executedAt: new Date().toISOString() };
+        }
+        if (commandType === "search_users") {
+            for (let attempt = 0; attempt <= RETRY_DELAYS.length; attempt++) {
+                try {
+                    await this.ensureConnected();
+                    const users = await this.searchUsers(command.payload);
+                    this.logger.info("search_users success", { commandId, count: users.length });
+                    return { commandId, success: true, users, executedAt: new Date().toISOString() };
+                }
+                catch (err) {
+                    const error = err instanceof Error ? err.message : String(err);
+                    this.logger.warn("search_users attempt failed", { commandId, attempt, error });
+                    if (attempt < RETRY_DELAYS.length) {
+                        await new Promise((r) => setTimeout(r, RETRY_DELAYS[attempt] ?? 4000));
+                        this.client = null;
+                    }
+                    else {
+                        return { commandId, success: false, error, executedAt: new Date().toISOString() };
+                    }
+                }
+            }
+            return { commandId, success: false, error: "Max retries exceeded", executedAt: new Date().toISOString() };
+        }
+        // read_users returns rows, not a DN — handle separately but still uses LDAP
+        if (commandType === "read_users") {
+            for (let attempt = 0; attempt <= RETRY_DELAYS.length; attempt++) {
+                try {
+                    await this.ensureConnected();
+                    const users = await this.readUsers(command.payload);
+                    this.logger.info("read_users success", { commandId, count: users.length });
+                    return { commandId, success: true, users, executedAt: new Date().toISOString() };
+                }
+                catch (err) {
+                    const error = err instanceof Error ? err.message : String(err);
+                    this.logger.warn("read_users attempt failed", { commandId, attempt, error });
+                    if (attempt < RETRY_DELAYS.length) {
+                        await new Promise((r) => setTimeout(r, RETRY_DELAYS[attempt] ?? 4000));
+                        this.client = null;
+                    }
+                    else {
+                        return { commandId, success: false, error, executedAt: new Date().toISOString() };
+                    }
+                }
+            }
+            return { commandId, success: false, error: "Max retries exceeded", executedAt: new Date().toISOString() };
+        }
+        // Standard LDAP write operations with retry
+        for (let attempt = 0; attempt <= RETRY_DELAYS.length; attempt++) {
+            try {
+                await this.ensureConnected();
+                const adObjectDn = await this.dispatch(command);
+                const duration = Date.now() - startedAt;
+                this.logger.info("Command success", { commandId, commandType, duration });
+                const result = { commandId, success: true, executedAt: new Date().toISOString() };
+                if (adObjectDn !== undefined)
+                    result.adObjectDn = adObjectDn;
+                return result;
+            }
+            catch (err) {
+                const error = err instanceof Error ? err.message : String(err);
+                this.logger.warn("Command attempt failed", { commandId, attempt, error });
+                if (attempt < RETRY_DELAYS.length) {
+                    const delay = RETRY_DELAYS[attempt] ?? 4000;
+                    await new Promise((r) => setTimeout(r, delay));
+                    this.client = null;
+                }
+                else {
+                    return { commandId, success: false, error, executedAt: new Date().toISOString() };
+                }
+            }
+        }
+        return { commandId, success: false, error: "Max retries exceeded", executedAt: new Date().toISOString() };
+    }
+    async dispatch(command) {
+        const payload = command.payload;
+        if (command.dryRun) {
+            this.logger.info("Dry run — no AD write", { commandId: command.commandId });
+            return undefined;
+        }
+        switch (command.commandType) {
+            case "create_user":
+                return this.createUser(payload);
+            case "disable_user":
+                return this.disableUser(payload);
+            case "activate_user":
+                return this.activateUser(payload);
+            case "move_ou":
+                return this.moveOu(payload);
+            case "set_password":
+            case "reset_password":
+                return this.setPassword(payload);
+            case "delete_user":
+                return this.deleteUser(payload);
+            case "update_user":
+                return this.updateUser(payload);
+            default:
+                throw new Error(`Unknown command type: ${command.commandType}`);
+        }
+    }
+    async ensureConnected() {
+        if (this.client)
+            return;
+        const useTls = this.config.port === 636;
+        this.client = new Client({
+            url: `${useTls ? "ldaps" : "ldap"}://${this.config.host}:${this.config.port}`,
+            ...(useTls ? { tlsOptions: { rejectUnauthorized: true } } : {}),
+        });
+        if ((this.config.authMode ?? "explicit") === "explicit") {
+            await this.client.bind(this.config.bindDn, this.config.bindPassword);
+        }
+    }
+    async createUser(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const dn = `CN=${p.firstName} ${p.lastName},${p.ouPath}`;
+        await this.client.add(dn, {
+            objectClass: ["top", "person", "organizationalPerson", "user"],
+            cn: `${p.firstName} ${p.lastName}`,
+            givenName: p.firstName,
+            sn: p.lastName,
+            sAMAccountName: p.samAccountName,
+            userPrincipalName: p.email,
+            mail: p.email,
+            userAccountControl: "512",
+        });
+        return dn;
+    }
+    async disableUser(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const entries = await this.client.search(this.config.baseDn, {
+            filter: `(sAMAccountName=${p.samAccountName})`,
+            attributes: ["distinguishedName", "userAccountControl"],
+        });
+        const entry = entries.searchEntries[0];
+        if (!entry)
+            throw new Error(`User not found: ${p.samAccountName}`);
+        let dn = entry["distinguishedName"];
+        await this.client.modify(dn, [
+            new Change({ operation: "replace", modification: new Attribute({ type: "userAccountControl", values: ["514"] }) }),
+        ]);
+        if (p.moveToOu) {
+            const cn = dn.split(",")[0];
+            if (!cn)
+                throw new Error("Could not parse CN from DN");
+            const newDn = `${cn},${p.moveToOu}`;
+            await this.client.modifyDN(dn, newDn);
+            dn = newDn;
+        }
+        return dn;
+    }
+    async activateUser(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const entries = await this.client.search(this.config.baseDn, {
+            filter: `(sAMAccountName=${p.samAccountName})`,
+            attributes: ["distinguishedName"],
+        });
+        const entry = entries.searchEntries[0];
+        if (!entry)
+            throw new Error(`User not found: ${p.samAccountName}`);
+        const dn = entry["distinguishedName"];
+        await this.client.modify(dn, [
+            new Change({ operation: "replace", modification: new Attribute({ type: "userAccountControl", values: ["512"] }) }),
+        ]);
+        return dn;
+    }
+    async moveOu(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const entries = await this.client.search(this.config.baseDn, {
+            filter: `(sAMAccountName=${p.samAccountName})`,
+            attributes: ["distinguishedName"],
+        });
+        const entry = entries.searchEntries[0];
+        if (!entry)
+            throw new Error(`User not found: ${p.samAccountName}`);
+        const dn = entry["distinguishedName"];
+        const cn = dn.split(",")[0];
+        if (!cn)
+            throw new Error("Could not parse CN from DN");
+        const newDn = `${cn},${p.targetOu}`;
+        await this.client.modifyDN(dn, newDn);
+        return newDn;
+    }
+    async setPassword(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const entries = await this.client.search(this.config.baseDn, {
+            filter: `(sAMAccountName=${p.samAccountName})`,
+            attributes: ["distinguishedName"],
+        });
+        const entry = entries.searchEntries[0];
+        if (!entry)
+            throw new Error(`User not found: ${p.samAccountName}`);
+        const dn = entry["distinguishedName"];
+        const encodedPw = Buffer.from(`"${p.password}"`, "utf16le").toString("base64");
+        await this.client.modify(dn, [
+            new Change({ operation: "replace", modification: new Attribute({ type: "unicodePwd", values: [encodedPw] }) }),
+        ]);
+        if (p.mustChangeOnLogon) {
+            await this.client.modify(dn, [
+                new Change({ operation: "replace", modification: new Attribute({ type: "pwdLastSet", values: ["0"] }) }),
+            ]);
+        }
+        return dn;
+    }
+    async deleteUser(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        await this.client.del(p.distinguishedName);
+        return p.distinguishedName;
+    }
+    async updateUser(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const entries = await this.client.search(this.config.baseDn, {
+            filter: `(sAMAccountName=${p.samAccountName})`,
+            attributes: ["distinguishedName"],
+        });
+        const entry = entries.searchEntries[0];
+        if (!entry)
+            throw new Error(`User not found: ${p.samAccountName}`);
+        const dn = entry["distinguishedName"];
+        const changes = Object.entries(p.attributes).map(([attr, value]) => new Change({
+            operation: "replace",
+            modification: new Attribute({ type: attr, values: [value] }),
+        }));
+        if (changes.length > 0) {
+            await this.client.modify(dn, changes);
+        }
+        return dn;
+    }
+    async readGroups(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const userResult = await this.client.search(this.config.baseDn, {
+            filter: `(sAMAccountName=${p.samAccountName})`,
+            attributes: ["distinguishedName"],
+        });
+        const user = userResult.searchEntries[0];
+        if (!user)
+            throw new Error(`User not found: ${p.samAccountName}`);
+        const userDn = user["distinguishedName"];
+        let groupFilter;
+        if (p.groupType === "security") {
+            groupFilter = `(&(objectClass=group)(groupType:1.2.840.113556.1.4.803:=2147483648)(member=${userDn}))`;
+        }
+        else if (p.groupType === "distribution") {
+            groupFilter = `(&(objectClass=group)(!(groupType:1.2.840.113556.1.4.803:=2147483648))(member=${userDn}))`;
+        }
+        else {
+            groupFilter = `(&(objectClass=group)(member=${userDn}))`;
+        }
+        const groupResult = await this.client.search(this.config.baseDn, {
+            filter: groupFilter,
+            attributes: ["distinguishedName", "cn", "mail"],
+        });
+        return groupResult.searchEntries.map((entry) => ({
+            dn: entry["distinguishedName"] ?? "",
+            name: entry["cn"] ?? "",
+            ...(entry["mail"] ? { mail: entry["mail"] } : {}),
+        }));
+    }
+    async getSchema() {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        // Fetch a sample of enabled users and collect all attribute names across entries
+        const result = await this.client.search(this.config.baseDn, {
+            filter: "(&(objectClass=user)(objectCategory=person))",
+            attributes: ["*"],
+            sizeLimit: 5,
+        });
+        const knownAttrs = new Set();
+        for (const entry of result.searchEntries) {
+            for (const key of Object.keys(entry)) {
+                if (key !== "dn" && !key.startsWith("_"))
+                    knownAttrs.add(key);
+            }
+        }
+        const typeMap = {
+            mail: "email", userPrincipalName: "email",
+            accountEnabled: "boolean",
+            givenName: "text", sn: "text", displayName: "text",
+            sAMAccountName: "text", department: "text", title: "text",
+            userAccountControl: "number",
+        };
+        const labelMap = {
+            sAMAccountName: "SAM Account", sn: "Last Name", givenName: "First Name",
+            displayName: "Display Name", mail: "Email", userPrincipalName: "UPN",
+            department: "Department", title: "Job Title", userAccountControl: "Account Control",
+        };
+        const skip = new Set(["objectClass", "objectCategory", "objectGUID", "objectSid", "distinguishedName", "pwdLastSet", "lastLogon", "badPasswordTime", "whenCreated", "whenChanged", "uSNCreated", "uSNChanged", "memberOf"]);
+        return Array.from(knownAttrs)
+            .filter((a) => !skip.has(a))
+            .map((name) => ({
+            name,
+            label: labelMap[name] ?? name.replace(/([A-Z])/g, " $1").replace(/^./, (s) => s.toUpperCase()),
+            type: typeMap[name] ?? "text",
+        }))
+            .sort((a, b) => a.label.localeCompare(b.label));
+    }
+    async searchUsers(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const escaped = p.query.replace(/[*()\\]/g, "\\$&");
+        const filter = `(&(objectClass=user)(objectCategory=person)(|(displayName=*${escaped}*)(sAMAccountName=*${escaped}*)(mail=*${escaped}*)))`;
+        const extAttrs = Array.from({ length: 15 }, (_, i) => `extensionAttribute${i + 1}`);
+        const attrs = [
+            "objectGUID", "displayName", "givenName", "sn", "mail", "userPrincipalName",
+            "department", "title", "sAMAccountName", "userAccountControl",
+            ...extAttrs,
+        ];
+        const result = await this.client.search(this.config.baseDn, {
+            filter,
+            attributes: attrs,
+            sizeLimit: p.maxResults ?? 25,
+        });
+        return result.searchEntries.map((entry) => {
+            const row = {};
+            for (const attr of attrs) {
+                if (attr === "objectGUID") {
+                    const v = entry[attr];
+                    row[attr] = Buffer.isBuffer(v) ? v.toString("hex") : (v != null ? String(v) : "");
+                }
+                else {
+                    const v = entry[attr];
+                    row[attr] = Array.isArray(v) ? (v[0]?.toString() ?? "") : (v != null ? String(v) : "");
+                }
+            }
+            return row;
+        });
+    }
+    async readUsers(p) {
+        if (!this.client)
+            throw new Error("LDAP not connected");
+        const searchBase = p.searchBase ?? this.config.baseDn;
+        const filter = p.filter ?? "(objectClass=user)";
+        const requestedAttrs = p.attributes ?? [
+            "sAMAccountName", "displayName", "givenName", "sn",
+            "mail", "userAccountControl", "distinguishedName", "department",
+        ];
+        const result = await this.client.search(searchBase, {
+            filter,
+            attributes: requestedAttrs,
+        });
+        return result.searchEntries.map((entry) => {
+            const row = {};
+            for (const attr of requestedAttrs) {
+                const val = entry[attr];
+                if (Array.isArray(val)) {
+                    row[attr] = val[0]?.toString() ?? "";
+                }
+                else if (val !== undefined && val !== null) {
+                    row[attr] = val.toString();
+                }
+                else {
+                    row[attr] = "";
+                }
+            }
+            return row;
+        });
+    }
+}
+//# sourceMappingURL=ldap.js.map

package/dist/ldap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ldap.js","sourceRoot":"","sources":["../src/ldap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAiBnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAYvC,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAExC,MAAM,OAAO,iBAAiB;IAIC;IAHZ,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,GAAkB,IAAI,CAAC;IAErC,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE1D,KAAK,CAAC,OAAO,CAAC,OAA2B;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAEnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAE1E,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;YAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAA8B,CAAC,CAAC;oBAC7E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC/D,IAAI,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;wBAClC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;wBACvE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBACpF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5G,CAAC;QAED,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;oBACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC5E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC7E,IAAI,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;wBAClC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;wBACvE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBACpF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5G,CAAC;QAED,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YACnC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAA+B,CAAC,CAAC;oBAC9E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC7E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC/E,IAAI,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;wBAClC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;wBACvE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBACpF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5G,CAAC;QAED,4EAA4E;QAC5E,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAA6B,CAAC,CAAC;oBAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC3E,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC7E,IAAI,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;wBAClC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;wBACvE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBACpF,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5G,CAAC;QAED,4CAA4C;QAC5C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC1E,MAAM,MAAM,GAAyB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxG,IAAI,UAAU,KAAK,SAAS;oBAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;gBAC7D,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAE1E,IAAI,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;oBAClC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;oBAC5C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC5G,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAA2B;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5E,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,QAAQ,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,UAAU,CAAC,OAA8B,CAAC,CAAC;YACzD,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,WAAW,CAAC,OAA+B,CAAC,CAAC;YAC3D,KAAK,eAAe;gBAClB,OAAO,IAAI,CAAC,YAAY,CAAC,OAAgC,CAAC,CAAC;YAC7D,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,OAA0B,CAAC,CAAC;YACjD,KAAK,cAAc,CAAC;YACpB,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,WAAW,CAAC,OAA+B,CAAC,CAAC;YAC3D,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,UAAU,CAAC,OAA8B,CAAC,CAAC;YACzD,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,UAAU,CAAC,OAA8B,CAAC,CAAC;YACzD;gBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACvB,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC7E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,UAAU,CAAC,KAAK,UAAU,EAAE,CAAC;YACxD,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,CAAsB;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE;YACxB,WAAW,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,CAAC;YAC9D,EAAE,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE;YAClC,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,EAAE,EAAE,CAAC,CAAC,QAAQ;YACd,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,iBAAiB,EAAE,CAAC,CAAC,KAAK;YAC1B,IAAI,EAAE,CAAC,CAAC,KAAK;YACb,kBAAkB,EAAE,KAAK;SAC1B,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,CAAuB;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC3D,MAAM,EAAE,mBAAmB,CAAC,CAAC,cAAc,GAAG;YAC9C,UAAU,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;SACxD,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACnE,IAAI,EAAE,GAAG,KAAK,CAAC,mBAAmB,CAAW,CAAC;QAC9C,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;YAC3B,IAAI,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;SACnH,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACtC,EAAE,GAAG,KAAK,CAAC;QACb,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,CAAwB;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC3D,MAAM,EAAE,mBAAmB,CAAC,CAAC,cAAc,GAAG;YAC9C,UAAU,EAAE,CAAC,mBAAmB,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,KAAK,CAAC,mBAAmB,CAAW,CAAC;QAChD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;YAC3B,IAAI,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;SACnH,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,CAAkB;QACrC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC3D,MAAM,EAAE,mBAAmB,CAAC,CAAC,cAAc,GAAG;YAC9C,UAAU,EAAE,CAAC,mBAAmB,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,KAAK,CAAC,mBAAmB,CAAW,CAAC;QAChD,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,CAAuB;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC3D,MAAM,EAAE,mBAAmB,CAAC,CAAC,cAAc,GAAG;YAC9C,UAAU,EAAE,CAAC,mBAAmB,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,KAAK,CAAC,mBAAmB,CAAW,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/E,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;YAC3B,IAAI,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;SAC/G,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;gBAC3B,IAAI,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;aACzG,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,CAAsB;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC,iBAAiB,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,CAAsB;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC3D,MAAM,EAAE,mBAAmB,CAAC,CAAC,cAAc,GAAG;YAC9C,UAAU,EAAE,CAAC,mBAAmB,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,KAAK,CAAC,mBAAmB,CAAW,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAC9C,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;YAC5B,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SAC7D,CAAC,CACH,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,CAAsB;QAC7C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC9D,MAAM,EAAE,mBAAmB,CAAC,CAAC,cAAc,GAAG;YAC9C,UAAU,EAAE,CAAC,mBAAmB,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAW,CAAC;QAEnD,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC/B,WAAW,GAAG,8EAA8E,MAAM,IAAI,CAAC;QACzG,CAAC;aAAM,IAAI,CAAC,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;YAC1C,WAAW,GAAG,iFAAiF,MAAM,IAAI,CAAC;QAC5G,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,gCAAgC,MAAM,IAAI,CAAC;QAC3D,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC/D,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,CAAC,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC;SAChD,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/C,EAAE,EAAG,KAAK,CAAC,mBAAmB,CAAY,IAAI,EAAE;YAChD,IAAI,EAAG,KAAK,CAAC,IAAI,CAAY,IAAI,EAAE;YACnC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,iFAAiF;QACjF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC1D,MAAM,EAAE,8CAA8C;YACtD,UAAU,EAAE,CAAC,GAAG,CAAC;YACjB,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAA8C;YACzD,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO;YACzC,cAAc,EAAE,SAAS;YACzB,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;YAClD,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;YACzD,kBAAkB,EAAE,QAAQ;SAC7B,CAAC;QACF,MAAM,QAAQ,GAA2B;YACvC,cAAc,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY;YACvE,WAAW,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK;YACpE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,iBAAiB;SACpF,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5N,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC3B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACd,IAAI;YACJ,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9F,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM;SAC9B,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,CAAuB;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,8DAA8D,OAAO,sBAAsB,OAAO,YAAY,OAAO,MAAM,CAAC;QAC3I,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG;YACZ,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB;YAC3E,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB;YAC7D,GAAG,QAAQ;SACZ,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC1D,MAAM;YACN,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE;SAC9B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACxC,MAAM,GAAG,GAA2B,EAAE,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC1B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBACtB,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChG,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBACtB,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,CAAqB;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACtD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,oBAAoB,CAAC;QAChD,MAAM,cAAc,GAAG,CAAC,CAAC,UAAU,IAAI;YACrC,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI;YAClD,MAAM,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,YAAY;SAChE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;YAClD,MAAM;YACN,UAAU,EAAE,cAAc;SAC3B,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACxC,MAAM,GAAG,GAA2B,EAAE,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACvC,CAAC;qBAAM,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBAC7C,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/logger.d.ts

@@ -0,0 +1,9 @@
+export declare class OcLogger {
+    private readonly logger;
+    constructor(context: string);
+    info(message: string, meta?: Record<string, unknown>): void;
+    error(message: string, meta?: Record<string, unknown>): void;
+    warn(message: string, meta?: Record<string, unknown>): void;
+    debug(message: string, meta?: Record<string, unknown>): void;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAQA,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAEZ,OAAO,EAAE,MAAM;IAgC3B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI3D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI3D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;CAG7D"}

package/dist/logger.js

@@ -0,0 +1,47 @@
+import { createLogger, format, transports } from "winston";
+import DailyRotateFile from "winston-daily-rotate-file";
+import { join } from "path";
+import { homedir } from "os";
+const OC_LOG_LEVEL = process.env["OC_LOG_LEVEL"] ?? "info";
+const OC_LOG_DIR = join(homedir(), ".oc-agent", "logs");
+export class OcLogger {
+    logger;
+    constructor(context) {
+        this.logger = createLogger({
+            level: OC_LOG_LEVEL,
+            format: format.combine(format.timestamp(), format.json()),
+            defaultMeta: { context },
+            transports: [
+                new transports.Console({
+                    format: format.combine(format.colorize(), format.printf(({ timestamp, level, message, context: ctx, ...rest }) => {
+                        const meta = Object.keys(rest).length
+                            ? ` ${JSON.stringify(rest)}`
+                            : "";
+                        return `${timestamp} [${level}] [${ctx}] ${message}${meta}`;
+                    })),
+                }),
+                new DailyRotateFile({
+                    dirname: OC_LOG_DIR,
+                    filename: "agent-%DATE%.log",
+                    datePattern: "YYYY-MM-DD",
+                    maxSize: "10m",
+                    maxFiles: "5",
+                    format: format.combine(format.timestamp(), format.json()),
+                }),
+            ],
+        });
+    }
+    info(message, meta) {
+        this.logger.info(message, meta);
+    }
+    error(message, meta) {
+        this.logger.error(message, meta);
+    }
+    warn(message, meta) {
+        this.logger.warn(message, meta);
+    }
+    debug(message, meta) {
+        this.logger.debug(message, meta);
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,eAAe,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC;AAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AAExD,MAAM,OAAO,QAAQ;IACF,MAAM,CAAC;IAExB,YAAY,OAAe;QACzB,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;YACzB,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,MAAM,CAAC,OAAO,CACpB,MAAM,CAAC,SAAS,EAAE,EAClB,MAAM,CAAC,IAAI,EAAE,CACd;YACD,WAAW,EAAE,EAAE,OAAO,EAAE;YACxB,UAAU,EAAE;gBACV,IAAI,UAAU,CAAC,OAAO,CAAC;oBACrB,MAAM,EAAE,MAAM,CAAC,OAAO,CACpB,MAAM,CAAC,QAAQ,EAAE,EACjB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;wBACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;4BACnC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;4BAC5B,CAAC,CAAC,EAAE,CAAC;wBACP,OAAO,GAAG,SAAS,KAAK,KAAK,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,EAAE,CAAC;oBAC9D,CAAC,CAAC,CACH;iBACF,CAAC;gBACF,IAAI,eAAe,CAAC;oBAClB,OAAO,EAAE,UAAU;oBACnB,QAAQ,EAAE,kBAAkB;oBAC5B,WAAW,EAAE,YAAY;oBACzB,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,GAAG;oBACb,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;iBAC1D,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/relay.d.ts

@@ -0,0 +1,38 @@
+import { type OcAgentCredentials } from "./store.js";
+export declare class OcRelay {
+    private credentials;
+    private ws;
+    private _reconnectAttempts;
+    private isConnected;
+    private _paused;
+    private _canRun;
+    private _runBlockedReason;
+    private readonly logger;
+    private readonly executedCommands;
+    private executor;
+    private readonly store;
+    private allowedCommandTypes;
+    constructor(credentials: OcAgentCredentials | null);
+    connect(): Promise<void>;
+    private checkPreflight;
+    private isPermanentBlock;
+    private schedulePreflightRetry;
+    setBlockedByHeartbeat(reason: string): void;
+    private establishConnection;
+    private scheduleReconnect;
+    reconnect(): void;
+    pause(): void;
+    resume(): void;
+    reconnectWithNewCredentials(creds: OcAgentCredentials): Promise<void>;
+    get reconnectAttempts(): number;
+    get paused(): boolean;
+    get canRun(): boolean;
+    get runBlockedReason(): string | null;
+    private handleCommand;
+    private handleReadFile;
+    private handleWriteFile;
+    private sendResult;
+    disconnect(): Promise<void>;
+    get connected(): boolean;
+}
+//# sourceMappingURL=relay.d.ts.map

package/dist/relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.d.ts","sourceRoot":"","sources":["../src/relay.ts"],"names":[],"mappings":"AAWA,OAAO,EAAW,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAO9D,qBAAa,OAAO;IAiBN,OAAO,CAAC,WAAW;IAhB/B,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,iBAAiB,CAAuB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyB;IAChD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAG9B;IACH,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiB;IAEvC,OAAO,CAAC,mBAAmB,CAAyB;gBAEhC,WAAW,EAAE,kBAAkB,GAAG,IAAI;IAEpD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YA4BhB,cAAc;IAiB5B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,sBAAsB;IAM9B,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;YAU7B,mBAAmB;IAyCjC,OAAO,CAAC,iBAAiB;IAQzB,SAAS,IAAI,IAAI;IAQjB,KAAK,IAAI,IAAI;IAKb,MAAM,IAAI,IAAI;IAKR,2BAA2B,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3E,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAEpC;YAEa,aAAa;YA6Fb,cAAc;YAYd,eAAe;IAY7B,OAAO,CAAC,UAAU;IAMZ,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAOjC,IAAI,SAAS,IAAI,OAAO,CAEvB;CACF"}