@commandgarden/cli 1.1.0 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (102) hide show
  1. package/dist/main.js +379 -4376
  2. package/node_modules/@commandgarden/app/dist/client/assets/index-58UrF1aG.js +197 -0
  3. package/node_modules/@commandgarden/app/dist/client/assets/index-DErcb2Kp.css +1 -0
  4. package/node_modules/@commandgarden/app/dist/client/index.html +19 -0
  5. package/node_modules/@commandgarden/app/dist/server/daemon-client.js +61 -0
  6. package/node_modules/@commandgarden/app/dist/server/main.js +63 -0
  7. package/node_modules/@commandgarden/app/dist/server/routes/audit.js +20 -0
  8. package/node_modules/@commandgarden/app/dist/server/routes/config.js +13 -0
  9. package/node_modules/@commandgarden/app/dist/server/routes/connectors.js +35 -0
  10. package/node_modules/@commandgarden/app/dist/server/routes/index.js +14 -0
  11. package/node_modules/@commandgarden/app/dist/server/routes/preferences.js +32 -0
  12. package/node_modules/@commandgarden/app/dist/server/routes/run.js +46 -0
  13. package/node_modules/@commandgarden/app/dist/server/routes/status.js +11 -0
  14. package/node_modules/@commandgarden/app/dist/server/store.js +55 -0
  15. package/node_modules/@commandgarden/app/package.json +42 -0
  16. package/node_modules/@commandgarden/daemon/dist/audit-store.d.ts +18 -0
  17. package/node_modules/@commandgarden/daemon/dist/audit-store.d.ts.map +1 -0
  18. package/node_modules/@commandgarden/daemon/dist/audit-store.js +97 -0
  19. package/node_modules/@commandgarden/daemon/dist/audit-store.js.map +1 -0
  20. package/node_modules/@commandgarden/daemon/dist/auth.d.ts +5 -0
  21. package/node_modules/@commandgarden/daemon/dist/auth.d.ts.map +1 -0
  22. package/node_modules/@commandgarden/daemon/dist/auth.js +27 -0
  23. package/node_modules/@commandgarden/daemon/dist/auth.js.map +1 -0
  24. package/node_modules/@commandgarden/daemon/dist/config.d.ts +109 -0
  25. package/node_modules/@commandgarden/daemon/dist/config.d.ts.map +1 -0
  26. package/node_modules/@commandgarden/daemon/dist/config.js +45 -0
  27. package/node_modules/@commandgarden/daemon/dist/config.js.map +1 -0
  28. package/node_modules/@commandgarden/daemon/dist/main.d.ts +2 -0
  29. package/node_modules/@commandgarden/daemon/dist/main.d.ts.map +1 -0
  30. package/node_modules/@commandgarden/daemon/dist/main.js +58 -0
  31. package/node_modules/@commandgarden/daemon/dist/main.js.map +1 -0
  32. package/node_modules/@commandgarden/daemon/dist/registry.d.ts +21 -0
  33. package/node_modules/@commandgarden/daemon/dist/registry.d.ts.map +1 -0
  34. package/node_modules/@commandgarden/daemon/dist/registry.js +70 -0
  35. package/node_modules/@commandgarden/daemon/dist/registry.js.map +1 -0
  36. package/node_modules/@commandgarden/daemon/dist/server.d.ts +15 -0
  37. package/node_modules/@commandgarden/daemon/dist/server.d.ts.map +1 -0
  38. package/node_modules/@commandgarden/daemon/dist/server.js +336 -0
  39. package/node_modules/@commandgarden/daemon/dist/server.js.map +1 -0
  40. package/node_modules/@commandgarden/daemon/dist/sse-manager.d.ts +10 -0
  41. package/node_modules/@commandgarden/daemon/dist/sse-manager.d.ts.map +1 -0
  42. package/node_modules/@commandgarden/daemon/dist/sse-manager.js +37 -0
  43. package/node_modules/@commandgarden/daemon/dist/sse-manager.js.map +1 -0
  44. package/node_modules/@commandgarden/daemon/dist/validator.d.ts +10 -0
  45. package/node_modules/@commandgarden/daemon/dist/validator.d.ts.map +1 -0
  46. package/node_modules/@commandgarden/daemon/dist/validator.js +19 -0
  47. package/node_modules/@commandgarden/daemon/dist/validator.js.map +1 -0
  48. package/node_modules/@commandgarden/daemon/dist/ws-relay.d.ts +30 -0
  49. package/node_modules/@commandgarden/daemon/dist/ws-relay.d.ts.map +1 -0
  50. package/node_modules/@commandgarden/daemon/dist/ws-relay.js +111 -0
  51. package/node_modules/@commandgarden/daemon/dist/ws-relay.js.map +1 -0
  52. package/node_modules/@commandgarden/daemon/package.json +30 -0
  53. package/node_modules/@commandgarden/shared/dist/capabilities.d.ts +7 -0
  54. package/node_modules/@commandgarden/shared/dist/capabilities.d.ts.map +1 -0
  55. package/node_modules/@commandgarden/shared/dist/capabilities.js +23 -0
  56. package/node_modules/@commandgarden/shared/dist/capabilities.js.map +1 -0
  57. package/node_modules/@commandgarden/shared/dist/connector.d.ts +377 -0
  58. package/node_modules/@commandgarden/shared/dist/connector.d.ts.map +1 -0
  59. package/node_modules/@commandgarden/shared/dist/connector.js +29 -0
  60. package/node_modules/@commandgarden/shared/dist/connector.js.map +1 -0
  61. package/node_modules/@commandgarden/shared/dist/events.d.ts +33 -0
  62. package/node_modules/@commandgarden/shared/dist/events.d.ts.map +1 -0
  63. package/node_modules/@commandgarden/shared/dist/events.js +34 -0
  64. package/node_modules/@commandgarden/shared/dist/events.js.map +1 -0
  65. package/node_modules/@commandgarden/shared/dist/expression/evaluator.d.ts +8 -0
  66. package/node_modules/@commandgarden/shared/dist/expression/evaluator.d.ts.map +1 -0
  67. package/node_modules/@commandgarden/shared/dist/expression/evaluator.js +49 -0
  68. package/node_modules/@commandgarden/shared/dist/expression/evaluator.js.map +1 -0
  69. package/node_modules/@commandgarden/shared/dist/expression/filters.d.ts +3 -0
  70. package/node_modules/@commandgarden/shared/dist/expression/filters.d.ts.map +1 -0
  71. package/node_modules/@commandgarden/shared/dist/expression/filters.js +8 -0
  72. package/node_modules/@commandgarden/shared/dist/expression/filters.js.map +1 -0
  73. package/node_modules/@commandgarden/shared/dist/expression/index.d.ts +5 -0
  74. package/node_modules/@commandgarden/shared/dist/expression/index.d.ts.map +1 -0
  75. package/node_modules/@commandgarden/shared/dist/expression/index.js +5 -0
  76. package/node_modules/@commandgarden/shared/dist/expression/index.js.map +1 -0
  77. package/node_modules/@commandgarden/shared/dist/expression/parser.d.ts +22 -0
  78. package/node_modules/@commandgarden/shared/dist/expression/parser.d.ts.map +1 -0
  79. package/node_modules/@commandgarden/shared/dist/expression/parser.js +85 -0
  80. package/node_modules/@commandgarden/shared/dist/expression/parser.js.map +1 -0
  81. package/node_modules/@commandgarden/shared/dist/expression/tokenizer.d.ts +7 -0
  82. package/node_modules/@commandgarden/shared/dist/expression/tokenizer.d.ts.map +1 -0
  83. package/node_modules/@commandgarden/shared/dist/expression/tokenizer.js +76 -0
  84. package/node_modules/@commandgarden/shared/dist/expression/tokenizer.js.map +1 -0
  85. package/node_modules/@commandgarden/shared/dist/index.d.ts +8 -0
  86. package/node_modules/@commandgarden/shared/dist/index.d.ts.map +1 -0
  87. package/node_modules/@commandgarden/shared/dist/index.js +15 -0
  88. package/node_modules/@commandgarden/shared/dist/index.js.map +1 -0
  89. package/node_modules/@commandgarden/shared/dist/loader.d.ts +17 -0
  90. package/node_modules/@commandgarden/shared/dist/loader.d.ts.map +1 -0
  91. package/node_modules/@commandgarden/shared/dist/loader.js +76 -0
  92. package/node_modules/@commandgarden/shared/dist/loader.js.map +1 -0
  93. package/node_modules/@commandgarden/shared/dist/pipeline.d.ts +339 -0
  94. package/node_modules/@commandgarden/shared/dist/pipeline.d.ts.map +1 -0
  95. package/node_modules/@commandgarden/shared/dist/pipeline.js +97 -0
  96. package/node_modules/@commandgarden/shared/dist/pipeline.js.map +1 -0
  97. package/node_modules/@commandgarden/shared/dist/protocol.d.ts +58 -0
  98. package/node_modules/@commandgarden/shared/dist/protocol.d.ts.map +1 -0
  99. package/node_modules/@commandgarden/shared/dist/protocol.js +26 -0
  100. package/node_modules/@commandgarden/shared/dist/protocol.js.map +1 -0
  101. package/node_modules/@commandgarden/shared/package.json +32 -0
  102. package/package.json +55 -42
@@ -0,0 +1,336 @@
1
+ // src/server.ts
2
+ import Fastify from 'fastify';
3
+ import websocket from '@fastify/websocket';
4
+ import { randomUUID, createHash } from 'node:crypto';
5
+ import { isRunCommandRequest, createAuditEvent, STEP_CAPABILITY_MAP } from '@commandgarden/shared';
6
+ import { userInfo } from 'node:os';
7
+ import { validateCommand } from './validator.js';
8
+ import { validateToken } from './auth.js';
9
+ import { SseManager } from './sse-manager.js';
10
+ export async function createServer(deps) {
11
+ const app = Fastify({ bodyLimit: 1024 * 1024 });
12
+ await app.register(websocket);
13
+ const user = userInfo().username;
14
+ // Auth + CSRF hook (skip for /api/status and WS upgrade)
15
+ app.addHook('preHandler', async (req, reply) => {
16
+ if (req.url === '/api/status' || req.url === '/ws/extension')
17
+ return;
18
+ const csrf = req.headers['x-commandgarden'];
19
+ if (!csrf) {
20
+ try {
21
+ deps.auditStore.insert(createAuditEvent({ type: 'auth.failed', connector: '', user, source: req.url }));
22
+ }
23
+ catch { /* audit best-effort for auth failures */ }
24
+ reply.code(403).send({ ok: false, error: 'Missing X-CommandGarden header' });
25
+ return;
26
+ }
27
+ const auth = req.headers.authorization;
28
+ if (!auth?.startsWith('Bearer ')) {
29
+ try {
30
+ deps.auditStore.insert(createAuditEvent({ type: 'auth.failed', connector: '', user, source: req.url }));
31
+ }
32
+ catch { /* audit best-effort */ }
33
+ reply.code(401).send({ ok: false, error: 'Unauthorized' });
34
+ return;
35
+ }
36
+ if (!validateToken(auth.slice(7), deps.sessionToken)) {
37
+ try {
38
+ deps.auditStore.insert(createAuditEvent({ type: 'auth.failed', connector: '', user, source: req.url }));
39
+ }
40
+ catch { /* audit best-effort */ }
41
+ reply.code(401).send({ ok: false, error: 'Invalid token' });
42
+ return;
43
+ }
44
+ });
45
+ app.get('/api/status', async () => ({
46
+ ok: true,
47
+ extensionConnected: deps.wsRelay.connected,
48
+ connectorCount: deps.registry.keys().length,
49
+ }));
50
+ app.get('/api/connectors', async () => ({
51
+ ok: true,
52
+ connectors: deps.registry.list().map(c => ({
53
+ key: `${c.site}/${c.name}`, description: c.description,
54
+ access: c.access, domains: c.domains, capabilities: c.capabilities,
55
+ })),
56
+ }));
57
+ app.get('/api/connectors/:site/:name', async (req, reply) => {
58
+ const { site, name } = req.params;
59
+ const key = `${site}/${name}`;
60
+ const connector = deps.registry.get(key);
61
+ if (!connector) {
62
+ reply.code(404).send({ ok: false, error: `Connector "${key}" not found` });
63
+ return;
64
+ }
65
+ return { ok: true, connector };
66
+ });
67
+ app.get('/api/audit', async (req) => {
68
+ const query = req.query;
69
+ const since = query.since ? new Date(query.since) : undefined;
70
+ const connector = query.connector;
71
+ const type = query.type;
72
+ const limit = query.limit ? parseInt(query.limit, 10) : 100;
73
+ const events = deps.auditStore.list({ since, connector, type, limit });
74
+ return { ok: true, events, count: events.length };
75
+ });
76
+ app.get('/api/audit/:id', async (req, reply) => {
77
+ const { id } = req.params;
78
+ const event = deps.auditStore.getById(id);
79
+ if (!event) {
80
+ reply.code(404).send({ ok: false, error: 'Event not found' });
81
+ return;
82
+ }
83
+ return { ok: true, event };
84
+ });
85
+ app.get('/api/config', async () => {
86
+ const { readFileSync, existsSync } = await import('node:fs');
87
+ const { parse: parseYaml } = await import('yaml');
88
+ let config = {};
89
+ if (existsSync(deps.configPath)) {
90
+ config = parseYaml(readFileSync(deps.configPath, 'utf-8')) ?? {};
91
+ }
92
+ return { ok: true, config };
93
+ });
94
+ const SSE_CONNECT_TIMEOUT_MS = 30_000;
95
+ const sse = new SseManager();
96
+ function buildApprovalConfig() {
97
+ return {
98
+ approvalRequired: deps.config.security.approvalRequired,
99
+ autoApproveConnectors: deps.config.security.autoApproveConnectors,
100
+ approvalTimeoutMs: deps.config.security.approvalTimeoutMs,
101
+ };
102
+ }
103
+ function connectorNeedsApproval(connectorKey, connector) {
104
+ const approvalRequired = new Set(deps.config.security.approvalRequired);
105
+ if (approvalRequired.size === 0)
106
+ return false;
107
+ if (deps.config.security.autoApproveConnectors.includes(connectorKey))
108
+ return false;
109
+ return connector.pipeline.some(s => {
110
+ const cap = STEP_CAPABILITY_MAP[s.step];
111
+ return cap != null && approvalRequired.has(cap);
112
+ });
113
+ }
114
+ deps.wsRelay.onApprovalRequest((request) => {
115
+ sse.send(request.requestId, 'approval', request);
116
+ deps.wsRelay.registerApproval(request, deps.config.security.approvalTimeoutMs);
117
+ });
118
+ deps.wsRelay.onApprovalResolved((approvalId, approved, request) => {
119
+ try {
120
+ deps.auditStore.insert(createAuditEvent({
121
+ type: approved ? 'approval.granted' : 'approval.rejected',
122
+ connector: request.connectorKey,
123
+ user,
124
+ source: 'extension',
125
+ correlationId: request.requestId,
126
+ }));
127
+ }
128
+ catch { /* audit best-effort */ }
129
+ });
130
+ app.get('/api/run/events/:requestId', async (req, reply) => {
131
+ const { requestId } = req.params;
132
+ reply.raw.writeHead(200, {
133
+ 'Content-Type': 'text/event-stream',
134
+ 'Cache-Control': 'no-cache',
135
+ 'Connection': 'keep-alive',
136
+ });
137
+ sse.register(requestId, (event, data) => {
138
+ reply.raw.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
139
+ });
140
+ req.raw.on('close', () => {
141
+ sse.remove(requestId);
142
+ });
143
+ });
144
+ app.post('/api/approval', async (req, reply) => {
145
+ const body = req.body;
146
+ if (!body.approvalId || typeof body.approved !== 'boolean') {
147
+ reply.code(400).send({ ok: false, error: 'Missing approvalId or approved field' });
148
+ return;
149
+ }
150
+ // Look up pending approval BEFORE resolving (resolve deletes the entry)
151
+ const pending = deps.wsRelay.getPendingApproval(body.approvalId);
152
+ const resolved = deps.wsRelay.resolveApproval(body.approvalId, body.approved);
153
+ if (!resolved) {
154
+ reply.code(404).send({ ok: false, error: 'No pending approval with that ID' });
155
+ return;
156
+ }
157
+ try {
158
+ deps.auditStore.insert(createAuditEvent({
159
+ type: body.approved ? 'approval.granted' : 'approval.rejected',
160
+ connector: pending?.request.connectorKey ?? '',
161
+ user,
162
+ source: 'cli',
163
+ correlationId: pending?.request.requestId,
164
+ }));
165
+ }
166
+ catch { /* audit best-effort for approvals */ }
167
+ return { ok: true };
168
+ });
169
+ app.post('/api/run', async (req, reply) => {
170
+ if (!isRunCommandRequest(req.body)) {
171
+ reply.code(400).send({ ok: false, error: 'Invalid request' });
172
+ return;
173
+ }
174
+ const body = req.body;
175
+ const validation = validateCommand(body.connector, deps.registry, deps.config);
176
+ if (!validation.ok) {
177
+ deps.auditStore.insert(createAuditEvent({
178
+ type: 'command.denied', connector: body.connector, user,
179
+ denialReason: validation.denialReason,
180
+ args: body.args,
181
+ }));
182
+ reply.code(404).send({ ok: false, error: validation.denialReason });
183
+ return;
184
+ }
185
+ if (!deps.wsRelay.connected) {
186
+ reply.code(503).send({ ok: false, error: 'Extension not connected' });
187
+ return;
188
+ }
189
+ const connector = validation.connector;
190
+ const requiresApproval = connectorNeedsApproval(body.connector, connector);
191
+ const approvalConfig = requiresApproval ? buildApprovalConfig() : undefined;
192
+ const correlationId = randomUUID();
193
+ const meta = deps.registry.getWithMeta(body.connector);
194
+ const connectorHash = meta
195
+ ? createHash('sha256').update(meta.yamlContent).digest('hex').slice(0, 16)
196
+ : undefined;
197
+ const startTime = Date.now();
198
+ try {
199
+ deps.auditStore.insert(createAuditEvent({
200
+ type: 'command.start', connector: body.connector, user,
201
+ args: body.args,
202
+ domains: connector.domains, capabilities: [...connector.capabilities],
203
+ correlationId, connectorHash,
204
+ }));
205
+ }
206
+ catch {
207
+ reply.code(500).send({ ok: false, error: 'Audit system unavailable \u2014 command blocked' });
208
+ return;
209
+ }
210
+ const runPipeline = async (requestId) => {
211
+ try {
212
+ const resp = await deps.wsRelay.send(connector, body.args, approvalConfig, undefined, requestId || undefined);
213
+ const durationMs = Date.now() - startTime;
214
+ deps.auditStore.insert(createAuditEvent({
215
+ type: resp.ok ? 'command.success' : 'command.error',
216
+ connector: body.connector, user,
217
+ args: body.args,
218
+ domains: connector.domains, capabilities: [...connector.capabilities],
219
+ rowCount: resp.data.length,
220
+ columns: connector.columns?.map(c => c.name),
221
+ durationMs, error: resp.error,
222
+ correlationId, connectorHash, steps: resp.steps,
223
+ }));
224
+ return {
225
+ ok: resp.ok, connector: body.connector, rowCount: resp.data.length,
226
+ columns: connector.columns?.map(c => c.name) ?? [],
227
+ data: resp.data, error: resp.error, durationMs,
228
+ requestId, requiresApproval,
229
+ };
230
+ }
231
+ catch (err) {
232
+ const durationMs = Date.now() - startTime;
233
+ const error = err instanceof Error ? err.message : 'Unknown error';
234
+ deps.auditStore.insert(createAuditEvent({
235
+ type: 'command.error', connector: body.connector, user,
236
+ args: body.args, durationMs, error,
237
+ correlationId, connectorHash,
238
+ }));
239
+ return { ok: false, data: [], error, durationMs, requestId, requiresApproval };
240
+ }
241
+ };
242
+ if (requiresApproval) {
243
+ const requestId = randomUUID();
244
+ sse.waitForConnection(requestId, SSE_CONNECT_TIMEOUT_MS)
245
+ .then(() => runPipeline(requestId))
246
+ .then(result => {
247
+ sse.send(requestId, 'result', result);
248
+ sse.remove(requestId);
249
+ })
250
+ .catch((err) => {
251
+ const durationMs = Date.now() - startTime;
252
+ deps.auditStore.insert(createAuditEvent({
253
+ type: 'command.error', connector: body.connector, user,
254
+ args: body.args, durationMs,
255
+ error: err instanceof Error ? err.message : 'SSE timeout',
256
+ }));
257
+ });
258
+ reply.code(202).send({
259
+ ok: true, requestId, requiresApproval: true,
260
+ connector: body.connector,
261
+ });
262
+ }
263
+ else {
264
+ const result = await runPipeline('');
265
+ if (!result.ok) {
266
+ reply.code(500).send(result);
267
+ return;
268
+ }
269
+ return result;
270
+ }
271
+ });
272
+ app.post('/api/config', async (req, reply) => {
273
+ const body = req.body;
274
+ if (!body.key || body.value === undefined) {
275
+ reply.code(400).send({ ok: false, error: 'Missing key or value' });
276
+ return;
277
+ }
278
+ const parts = body.key.split('.');
279
+ if (parts.length !== 2) {
280
+ reply.code(400).send({ ok: false, error: 'Key must be section.property' });
281
+ return;
282
+ }
283
+ const { readFileSync, writeFileSync, mkdirSync, existsSync } = await import('node:fs');
284
+ const { dirname } = await import('node:path');
285
+ const { parse: parseYaml, stringify: stringifyYaml } = await import('yaml');
286
+ let configObj = {};
287
+ if (existsSync(deps.configPath)) {
288
+ configObj = parseYaml(readFileSync(deps.configPath, 'utf-8')) ?? {};
289
+ }
290
+ const [section, prop] = parts;
291
+ const previousValue = JSON.stringify(configObj[section]?.[prop] ?? null);
292
+ if (!configObj[section])
293
+ configObj[section] = {};
294
+ let parsed = body.value;
295
+ try {
296
+ parsed = JSON.parse(body.value);
297
+ }
298
+ catch {
299
+ if (body.value === 'true')
300
+ parsed = true;
301
+ else if (body.value === 'false')
302
+ parsed = false;
303
+ else if (!isNaN(Number(body.value)) && body.value !== '')
304
+ parsed = Number(body.value);
305
+ }
306
+ configObj[section][prop] = parsed;
307
+ // Validate the entire config against the schema before writing
308
+ const { configSchema } = await import('./config.js');
309
+ const validation = configSchema.safeParse(configObj);
310
+ if (!validation.success) {
311
+ const issue = validation.error.issues[0];
312
+ reply.code(400).send({ ok: false, error: `Invalid config value: ${issue.path.join('.')} — ${issue.message}` });
313
+ return;
314
+ }
315
+ mkdirSync(dirname(deps.configPath), { recursive: true });
316
+ writeFileSync(deps.configPath, stringifyYaml(configObj), 'utf-8');
317
+ // Hot-reload: update in-memory config so changes take effect immediately
318
+ deps.config = validation.data;
319
+ deps.auditStore.insert(createAuditEvent({
320
+ type: 'config.changed', connector: '_system/config', user,
321
+ source: body.key, previousValue, newValue: JSON.stringify(parsed),
322
+ }));
323
+ return { ok: true, key: body.key, value: body.value };
324
+ });
325
+ app.get('/ws/extension', { websocket: true }, (socket, req) => {
326
+ const origin = req.headers.origin ?? '';
327
+ if (deps.config.security.extensionId &&
328
+ origin !== `chrome-extension://${deps.config.security.extensionId}`) {
329
+ socket.close(4001, 'Invalid origin');
330
+ return;
331
+ }
332
+ deps.wsRelay.attach(socket);
333
+ });
334
+ return app;
335
+ }
336
+ //# sourceMappingURL=server.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,gBAAgB;AAChB,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEnG,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKnC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAW9C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAgB;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC;IAEjC,yDAAyD;IACzD,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,CAAC,GAAG,KAAK,eAAe;YAAE,OAAO;QACrE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC;gBAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;YACpK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAAC,OAAO;QACvF,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC;gBAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAClJ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAAC,OAAO;QACrE,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC;gBAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAClJ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO;QACtE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAClC,EAAE,EAAE,IAAI;QACR,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QAC1C,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM;KAC5C,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACtC,EAAE,EAAE,IAAI;QACR,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW;YACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY;SACnE,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1D,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAwC,CAAC;QACpE,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,GAAG,aAAa,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAA+B,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAAC,OAAO;QACxE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;QAChC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,MAAM,GAA4B,EAAE,CAAC;QACzC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,MAAM,GAAI,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAA6B,IAAI,EAAE,CAAC;QAChG,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,MAAM,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;IAE7B,SAAS,mBAAmB;QAC1B,OAAO;YACL,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB;YACvD,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB;YACjE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB;SAC1D,CAAC;IACJ,CAAC;IAED,SAAS,sBAAsB,CAAC,YAAoB,EAAE,SAAmE;QACvH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACxE,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QACpF,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACjC,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAwC,CAAC,CAAC;YAC5E,OAAO,GAAG,IAAI,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAwB,EAAE,EAAE;QAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAChE,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACtC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB;gBACzD,SAAS,EAAE,OAAO,CAAC,YAAY;gBAC/B,IAAI;gBACJ,MAAM,EAAE,WAAW;gBACnB,aAAa,EAAE,OAAO,CAAC,SAAS;aACjC,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAA+B,CAAC;QAC1D,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,YAAY,EAAE,YAAY;SAC3B,CAAC,CAAC;QAEH,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACtC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAmD,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAAC,OAAO;QAC7F,CAAC;QACD,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAAC,OAAO;QACzF,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACtC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB;gBAC9D,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;gBAC9C,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS;aAC1C,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAAC,OAAO;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACtC,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI;gBACvD,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,IAAI,EAAE,IAAI,CAAC,IAA8B;aAC1C,CAAC,CAAC,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;YAAC,OAAO;QAC9E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAAC,OAAO;QAChF,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAU,CAAC;QACxC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,IAAI;YACxB,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC1E,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACtC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI;gBACtD,IAAI,EAAE,IAAI,CAAC,IAA8B;gBACzC,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC;gBACrE,aAAa,EAAE,aAAa;aAC7B,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;YAAC,OAAO;QACxG,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,EAAE,SAAiB,EAAE,EAAE;YAC9C,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,CAAC,CAAC;gBAC9G,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;oBACtC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe;oBACnD,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI;oBAC/B,IAAI,EAAE,IAAI,CAAC,IAA8B;oBACzC,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC;oBACrE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;oBAC1B,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC5C,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;oBAC7B,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;iBAChD,CAAC,CAAC,CAAC;gBACJ,OAAO;oBACL,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;oBAClE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;oBAClD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU;oBAC9C,SAAS,EAAE,gBAAgB;iBAC5B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACnE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;oBACtC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI;oBACtD,IAAI,EAAE,IAAI,CAAC,IAA8B,EAAE,UAAU,EAAE,KAAK;oBAC5D,aAAa,EAAE,aAAa;iBAC7B,CAAC,CAAC,CAAC;gBACJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;YACjF,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;YAC/B,GAAG,CAAC,iBAAiB,CAAC,SAAS,EAAE,sBAAsB,CAAC;iBACrD,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;iBAClC,IAAI,CAAC,MAAM,CAAC,EAAE;gBACb,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACtC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;oBACtC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI;oBACtD,IAAI,EAAE,IAAI,CAAC,IAA8B,EAAE,UAAU;oBACrD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;iBAC1D,CAAC,CAAC,CAAC;YACN,CAAC,CAAC,CAAC;YACL,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI;gBAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAC,OAAO;YACvC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAwC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAAC,OAAO;QAC7E,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAAC,OAAO;QACrF,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACvF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAE5E,IAAI,SAAS,GAA4C,EAAE,CAAC;QAC5D,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,SAAS,GAAI,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAA6C,IAAI,EAAE,CAAC;QACnH,CAAC;QAED,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QAEzE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjD,IAAI,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC;QACjC,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAC9C,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;gBAAE,MAAM,GAAG,IAAI,CAAC;iBACpC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO;gBAAE,MAAM,GAAG,KAAK,CAAC;iBAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE;gBAAE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxF,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAElC,+DAA+D;QAC/D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QAED,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QAElE,yEAAyE;QACzE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC;QAE9B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACtC,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI;YACzD,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAClE,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW;YAChC,MAAM,KAAK,sBAAsB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YACxE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
@@ -0,0 +1,10 @@
1
+ export type SseWriter = (event: string, data: unknown) => void;
2
+ export declare class SseManager {
3
+ private clients;
4
+ private readyResolvers;
5
+ waitForConnection(requestId: string, timeoutMs: number): Promise<void>;
6
+ register(requestId: string, writer: SseWriter): void;
7
+ send(requestId: string, event: string, data: unknown): boolean;
8
+ remove(requestId: string): void;
9
+ }
10
+ //# sourceMappingURL=sse-manager.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sse-manager.d.ts","sourceRoot":"","sources":["../src/sse-manager.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;AAE/D,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAgC;IAC/C,OAAO,CAAC,cAAc,CAA4E;IAElG,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IActE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI;IASpD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO;IAO9D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAGhC"}
@@ -0,0 +1,37 @@
1
+ // src/sse-manager.ts
2
+ export class SseManager {
3
+ clients = new Map();
4
+ readyResolvers = new Map();
5
+ waitForConnection(requestId, timeoutMs) {
6
+ return new Promise((resolve, reject) => {
7
+ const timer = setTimeout(() => {
8
+ if (this.readyResolvers.delete(requestId)) {
9
+ reject(new Error('SSE connection timeout'));
10
+ }
11
+ }, timeoutMs);
12
+ this.readyResolvers.set(requestId, {
13
+ resolve: () => { clearTimeout(timer); resolve(); },
14
+ reject: (err) => { clearTimeout(timer); reject(err); },
15
+ });
16
+ });
17
+ }
18
+ register(requestId, writer) {
19
+ this.clients.set(requestId, writer);
20
+ const entry = this.readyResolvers.get(requestId);
21
+ if (entry) {
22
+ this.readyResolvers.delete(requestId);
23
+ entry.resolve();
24
+ }
25
+ }
26
+ send(requestId, event, data) {
27
+ const writer = this.clients.get(requestId);
28
+ if (!writer)
29
+ return false;
30
+ writer(event, data);
31
+ return true;
32
+ }
33
+ remove(requestId) {
34
+ this.clients.delete(requestId);
35
+ }
36
+ }
37
+ //# sourceMappingURL=sse-manager.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sse-manager.js","sourceRoot":"","sources":["../src/sse-manager.ts"],"names":[],"mappings":"AAAA,qBAAqB;AAIrB,MAAM,OAAO,UAAU;IACb,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IACvC,cAAc,GAAG,IAAI,GAAG,EAAiE,CAAC;IAElG,iBAAiB,CAAC,SAAiB,EAAE,SAAiB;QACpD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE;gBACjC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAClD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACvD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,SAAiB,EAAE,MAAiB;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACtC,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAiB,EAAE,KAAa,EAAE,IAAa;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;CACF"}
@@ -0,0 +1,10 @@
1
+ import type { ConnectorDef } from '@commandgarden/shared';
2
+ import type { DaemonConfig } from './config.js';
3
+ import type { ConnectorRegistry } from './registry.js';
4
+ export interface ValidationResult {
5
+ ok: boolean;
6
+ connector?: ConnectorDef;
7
+ denialReason?: string;
8
+ }
9
+ export declare function validateCommand(connectorKey: string, registry: ConnectorRegistry, config: DaemonConfig): ValidationResult;
10
+ //# sourceMappingURL=validator.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../src/validator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,eAAe,CAC7B,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,YAAY,GACnB,gBAAgB,CAiBlB"}
@@ -0,0 +1,19 @@
1
+ export function validateCommand(connectorKey, registry, config) {
2
+ const connector = registry.get(connectorKey);
3
+ if (!connector) {
4
+ return { ok: false, denialReason: `Connector "${connectorKey}" not found` };
5
+ }
6
+ const highRiskCaps = config.security.highRiskCapabilities;
7
+ const usesHighRisk = connector.capabilities.filter(c => highRiskCaps.includes(c));
8
+ if (usesHighRisk.length > 0) {
9
+ const approved = new Set(config.security.approvedHighRisk);
10
+ if (!approved.has(connectorKey)) {
11
+ return {
12
+ ok: false,
13
+ denialReason: `Connector "${connectorKey}" uses high-risk capabilities [${usesHighRisk.join(', ')}] but is not approved`,
14
+ };
15
+ }
16
+ }
17
+ return { ok: true, connector };
18
+ }
19
+ //# sourceMappingURL=validator.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"validator.js","sourceRoot":"","sources":["../src/validator.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,QAA2B,EAC3B,MAAoB;IAEpB,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc,YAAY,aAAa,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC1D,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,cAAc,YAAY,kCAAkC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB;aACzH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}
@@ -0,0 +1,30 @@
1
+ import type { ConnectorDef, ExtensionResponse, ApprovalRequest, ApprovalConfig } from '@commandgarden/shared';
2
+ interface PendingApproval {
3
+ resolve: (approved: boolean) => void;
4
+ timer: ReturnType<typeof setTimeout>;
5
+ request: ApprovalRequest;
6
+ }
7
+ export type ApprovalRequestHandler = (request: ApprovalRequest) => void;
8
+ interface SocketLike {
9
+ on(event: string, cb: (...args: unknown[]) => void): void;
10
+ send(data: string): void;
11
+ close(): void;
12
+ }
13
+ export declare class WsRelay {
14
+ private ws;
15
+ private pending;
16
+ private pendingApprovals;
17
+ private approvalHandler;
18
+ private approvalResolvedHandler;
19
+ get connected(): boolean;
20
+ onApprovalRequest(handler: ApprovalRequestHandler): void;
21
+ onApprovalResolved(handler: (id: string, approved: boolean, req: ApprovalRequest) => void): void;
22
+ attach(ws: SocketLike): void;
23
+ send(connector: ConnectorDef, args: Record<string, string | number | boolean>, approvalConfig?: ApprovalConfig, timeoutMs?: number, requestId?: string): Promise<ExtensionResponse>;
24
+ resolveApproval(approvalId: string, approved: boolean): boolean;
25
+ registerApproval(request: ApprovalRequest, timeoutMs: number): Promise<boolean>;
26
+ getPendingApproval(approvalId: string): PendingApproval | undefined;
27
+ detach(): void;
28
+ }
29
+ export {};
30
+ //# sourceMappingURL=ws-relay.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ws-relay.d.ts","sourceRoot":"","sources":["../src/ws-relay.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,YAAY,EAAoB,iBAAiB,EACjD,eAAe,EAAoB,cAAc,EAClD,MAAM,uBAAuB,CAAC;AAS/B,UAAU,eAAe;IACvB,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IACrC,KAAK,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IACrC,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;AAExE,UAAU,UAAU;IAClB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,EAAE,CAA2B;IACrC,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,gBAAgB,CAAsC;IAC9D,OAAO,CAAC,eAAe,CAAuC;IAC9D,OAAO,CAAC,uBAAuB,CAAgF;IAE/G,IAAI,SAAS,IAAI,OAAO,CAA6B;IAErD,iBAAiB,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI;IAIxD,kBAAkB,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,KAAK,IAAI,GAAG,IAAI;IAIhG,MAAM,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IA8CtB,IAAI,CACR,SAAS,EAAE,YAAY,EACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAC/C,cAAc,CAAC,EAAE,cAAc,EAC/B,SAAS,SAAU,EACnB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,iBAAiB,CAAC;IAc7B,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO;IAW/D,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU/E,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAInE,MAAM,IAAI,IAAI;CAGf"}
@@ -0,0 +1,111 @@
1
+ // src/ws-relay.ts
2
+ import { randomUUID } from 'node:crypto';
3
+ import { isExtensionResponse, isApprovalRequest, isApprovalResponse } from '@commandgarden/shared';
4
+ export class WsRelay {
5
+ ws = null;
6
+ pending = new Map();
7
+ pendingApprovals = new Map();
8
+ approvalHandler = null;
9
+ approvalResolvedHandler = null;
10
+ get connected() { return this.ws !== null; }
11
+ onApprovalRequest(handler) {
12
+ this.approvalHandler = handler;
13
+ }
14
+ onApprovalResolved(handler) {
15
+ this.approvalResolvedHandler = handler;
16
+ }
17
+ attach(ws) {
18
+ if (this.ws)
19
+ this.ws.close();
20
+ this.ws = ws;
21
+ ws.on('message', (raw) => {
22
+ const data = JSON.parse(String(raw));
23
+ if (data.type === 'ping')
24
+ return;
25
+ if (isExtensionResponse(data)) {
26
+ const entry = this.pending.get(data.id);
27
+ if (entry) {
28
+ clearTimeout(entry.timer);
29
+ this.pending.delete(data.id);
30
+ entry.resolve(data);
31
+ }
32
+ }
33
+ else if (isApprovalRequest(data)) {
34
+ if (this.approvalHandler) {
35
+ this.approvalHandler(data);
36
+ }
37
+ }
38
+ else if (isApprovalResponse(data)) {
39
+ // Extension user approved/rejected via notification — resolve pending approval
40
+ // without sending response back to extension (it came from there)
41
+ const entry = this.pendingApprovals.get(data.approvalId);
42
+ if (entry) {
43
+ if (this.approvalResolvedHandler) {
44
+ this.approvalResolvedHandler(data.approvalId, data.approved, entry.request);
45
+ }
46
+ clearTimeout(entry.timer);
47
+ this.pendingApprovals.delete(data.approvalId);
48
+ entry.resolve(data.approved);
49
+ }
50
+ }
51
+ });
52
+ ws.on('close', () => {
53
+ this.ws = null;
54
+ for (const [, entry] of this.pending) {
55
+ clearTimeout(entry.timer);
56
+ entry.reject(new Error('Extension disconnected'));
57
+ }
58
+ this.pending.clear();
59
+ for (const [, entry] of this.pendingApprovals) {
60
+ clearTimeout(entry.timer);
61
+ entry.resolve(false);
62
+ }
63
+ this.pendingApprovals.clear();
64
+ });
65
+ }
66
+ async send(connector, args, approvalConfig, timeoutMs = 120_000, requestId) {
67
+ if (!this.ws)
68
+ throw new Error('Extension not connected');
69
+ const id = requestId ?? randomUUID();
70
+ const request = { id, connector, args, approvalConfig };
71
+ return new Promise((resolve, reject) => {
72
+ const timer = setTimeout(() => {
73
+ this.pending.delete(id);
74
+ reject(new Error('Extension request timed out'));
75
+ }, timeoutMs);
76
+ this.pending.set(id, { resolve, reject, timer });
77
+ this.ws.send(JSON.stringify(request));
78
+ });
79
+ }
80
+ resolveApproval(approvalId, approved) {
81
+ const entry = this.pendingApprovals.get(approvalId);
82
+ if (!entry)
83
+ return false;
84
+ clearTimeout(entry.timer);
85
+ this.pendingApprovals.delete(approvalId);
86
+ entry.resolve(approved);
87
+ const response = { type: 'approval.response', approvalId, approved };
88
+ if (this.ws)
89
+ this.ws.send(JSON.stringify(response));
90
+ return true;
91
+ }
92
+ registerApproval(request, timeoutMs) {
93
+ return new Promise((resolve) => {
94
+ const timer = setTimeout(() => {
95
+ this.pendingApprovals.delete(request.approvalId);
96
+ resolve(false);
97
+ }, timeoutMs);
98
+ this.pendingApprovals.set(request.approvalId, { resolve, timer, request });
99
+ });
100
+ }
101
+ getPendingApproval(approvalId) {
102
+ return this.pendingApprovals.get(approvalId);
103
+ }
104
+ detach() {
105
+ if (this.ws) {
106
+ this.ws.close();
107
+ this.ws = null;
108
+ }
109
+ }
110
+ }
111
+ //# sourceMappingURL=ws-relay.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ws-relay.js","sourceRoot":"","sources":["../src/ws-relay.ts"],"names":[],"mappings":"AAAA,kBAAkB;AAClB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAsBnG,MAAM,OAAO,OAAO;IACV,EAAE,GAAsB,IAAI,CAAC;IAC7B,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,eAAe,GAAkC,IAAI,CAAC;IACtD,uBAAuB,GAA2E,IAAI,CAAC;IAE/G,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;IAErD,iBAAiB,CAAC,OAA+B;QAC/C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;IACjC,CAAC;IAED,kBAAkB,CAAC,OAAsE;QACvF,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,EAAc;QACnB,IAAI,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO;YACjC,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxC,IAAI,KAAK,EAAE,CAAC;oBACV,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC7B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;iBAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;oBACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,+EAA+E;gBAC/E,kEAAkE;gBAClE,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACzD,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;wBACjC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC9E,CAAC;oBACD,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC1B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC9C,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9C,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACR,SAAuB,EACvB,IAA+C,EAC/C,cAA+B,EAC/B,SAAS,GAAG,OAAO,EACnB,SAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QACrC,MAAM,OAAO,GAAqB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAC1E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACnD,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,EAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,UAAkB,EAAE,QAAiB;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAqB,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QACvF,IAAI,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,OAAwB,EAAE,SAAiB;QAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACjD,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,UAAkB;QACnC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QAAC,CAAC;IACnD,CAAC;CACF"}
@@ -0,0 +1,30 @@
1
+ {
2
+ "name": "@commandgarden/daemon",
3
+ "version": "0.1.0",
4
+ "private": true,
5
+ "type": "module",
6
+ "main": "./dist/main.js",
7
+ "files": [
8
+ "dist"
9
+ ],
10
+ "scripts": {
11
+ "build": "tsc",
12
+ "start": "node dist/main.js",
13
+ "test": "vitest run",
14
+ "test:watch": "vitest"
15
+ },
16
+ "dependencies": {
17
+ "@commandgarden/shared": "*",
18
+ "better-sqlite3": "^11.0.0",
19
+ "fastify": "^5.0.0",
20
+ "@fastify/websocket": "^11.0.0",
21
+ "yaml": "^2.4.0"
22
+ },
23
+ "devDependencies": {
24
+ "@types/better-sqlite3": "^7.6.0",
25
+ "@types/node": "^22.0.0",
26
+ "@types/ws": "^8.5.0",
27
+ "typescript": "^5.4.0",
28
+ "vitest": "^2.0.0"
29
+ }
30
+ }