@congzhen/changewayguard 6.8.12

package/dist/gateway/activity.js

@@ -0,0 +1,111 @@
+/**
+ * Gateway Activity Logger
+ *
+ * Tracks sanitization and restoration events for monitoring.
+ */
+// Activity listeners
+const listeners = [];
+// Request counter for generating IDs
+let requestCounter = 0;
+/**
+ * Generate a unique request ID
+ */
+export function generateRequestId() {
+    return `gw-${Date.now()}-${++requestCounter}`;
+}
+/**
+ * Register an activity listener
+ */
+export function addActivityListener(listener) {
+    listeners.push(listener);
+}
+/**
+ * Remove an activity listener
+ */
+export function removeActivityListener(listener) {
+    const index = listeners.indexOf(listener);
+    if (index !== -1) {
+        listeners.splice(index, 1);
+    }
+}
+/**
+ * Clear all activity listeners
+ */
+export function clearActivityListeners() {
+    listeners.length = 0;
+}
+/**
+ * Emit an activity event to all listeners
+ */
+function emitActivity(event) {
+    for (const listener of listeners) {
+        try {
+            listener(event);
+        }
+        catch (err) {
+            console.error("[gateway-activity] Listener error:", err);
+        }
+    }
+}
+/**
+ * Count categories from mapping table
+ * Handles both old format (__email_1__) and new format (__PII_EMAIL_ADDRESS_00000001__)
+ */
+export function countCategories(mappingTable) {
+    const categories = {};
+    for (const placeholder of mappingTable.keys()) {
+        // Try new format first: __PII_EMAIL_ADDRESS_00000001__
+        const newMatch = placeholder.match(/^__PII_([A-Z_]+)_\d+__$/);
+        if (newMatch) {
+            const category = newMatch[1].toLowerCase();
+            categories[category] = (categories[category] || 0) + 1;
+            continue;
+        }
+        // Fallback to old format: __email_1__
+        const oldMatch = placeholder.match(/^__([a-z_]+)_\d+__$/);
+        if (oldMatch) {
+            const category = oldMatch[1];
+            categories[category] = (categories[category] || 0) + 1;
+        }
+    }
+    return categories;
+}
+/**
+ * Log a sanitization event (request going out)
+ */
+export function logSanitizeEvent(params) {
+    const event = {
+        id: `${params.requestId}-sanitize`,
+        timestamp: new Date().toISOString(),
+        requestId: params.requestId,
+        type: "sanitize",
+        direction: "request",
+        backend: params.backend,
+        endpoint: params.endpoint,
+        model: params.model,
+        redactionCount: params.redactionCount,
+        categories: countCategories(params.mappingTable),
+        durationMs: params.durationMs,
+    };
+    emitActivity(event);
+}
+/**
+ * Log a restoration event (response coming back)
+ */
+export function logRestoreEvent(params) {
+    const event = {
+        id: `${params.requestId}-restore`,
+        timestamp: new Date().toISOString(),
+        requestId: params.requestId,
+        type: "restore",
+        direction: "response",
+        backend: params.backend,
+        endpoint: params.endpoint,
+        model: params.model,
+        redactionCount: params.restorationCount,
+        categories: countCategories(params.mappingTable),
+        durationMs: params.durationMs,
+    };
+    emitActivity(event);
+}
+//# sourceMappingURL=activity.js.map

package/dist/gateway/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../src/activity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,qBAAqB;AACrB,MAAM,SAAS,GAAuB,EAAE,CAAC;AAEzC,qCAAqC;AACrC,IAAI,cAAc,GAAG,CAAC,CAAC;AAEvB;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA0B;IAC5D,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA0B;IAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,KAA2B;IAC/C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,YAA0B;IACxD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,WAAW,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,uDAAuD;QACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3C,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QAED,sCAAsC;QACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAQhC;IACC,MAAM,KAAK,GAAyB;QAClC,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,WAAW;QAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;QAChD,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;IAEF,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAQ/B;IACC,MAAM,KAAK,GAAyB;QAClC,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,UAAU;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,gBAAgB;QACvC,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;QAChD,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;IAEF,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/dist/gateway/config.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Gateway configuration management
+ */
+import type { GatewayConfig, ApiType } from "./types.js";
+/**
+ * Load gateway configuration from file or environment
+ */
+export declare function loadConfig(configPath?: string): GatewayConfig;
+/**
+ * Validate configuration
+ */
+export declare function validateConfig(config: GatewayConfig): void;
+/**
+ * Infer API type from backend name
+ */
+export declare function inferApiType(name: string): ApiType;
+/**
+ * Get API type for a backend
+ */
+export declare function getBackendApiType(name: string, config: GatewayConfig): ApiType;
+/**
+ * Find backend by API key
+ */
+export declare function findBackendByApiKey(apiKey: string, config: GatewayConfig): {
+    name: string;
+    backend: typeof config.backends[string];
+} | null;
+/**
+ * Find default backend for an API type
+ */
+export declare function findDefaultBackend(apiType: ApiType, config: GatewayConfig): {
+    name: string;
+    backend: typeof config.backends[string];
+} | null;
+/**
+ * Find backend by request path prefix
+ * Matches the longest pathPrefix that is a prefix of the request path
+ */
+export declare function findBackendByPathPrefix(requestPath: string, config: GatewayConfig): {
+    name: string;
+    backend: typeof config.backends[string];
+} | null;
+/**
+ * Find backend by model name
+ */
+export declare function findBackendByModel(modelName: string, config: GatewayConfig): {
+    name: string;
+    backend: typeof config.backends[string];
+} | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/gateway/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAIzD;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,aAAa,CAyB7D;AAmFD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAkB1D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUlD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAM9E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAOlE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,aAAa,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAelE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,aAAa,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAclE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAOlE"}

package/dist/gateway/config.js

@@ -0,0 +1,200 @@
+/**
+ * Gateway configuration management
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+const DEFAULT_CONFIG_PATH = join(homedir(), ".openclaw", "extensions", "moltguard", "data", "gateway.json");
+/**
+ * Load gateway configuration from file or environment
+ */
+export function loadConfig(configPath) {
+    const path = configPath || DEFAULT_CONFIG_PATH;
+    // Default configuration
+    const defaultConfig = {
+        port: parseInt(process.env.GATEWAY_PORT || "53669", 10),
+        backends: {},
+    };
+    // Try to load from file
+    if (existsSync(path)) {
+        try {
+            const fileContent = readFileSync(path, "utf-8");
+            const fileConfig = JSON.parse(fileContent);
+            return mergeConfig(defaultConfig, fileConfig);
+        }
+        catch (error) {
+            console.warn(`[ai-security-gateway] Failed to load config from ${path}:`, error);
+        }
+    }
+    // Load from environment variables
+    return loadFromEnv(defaultConfig);
+}
+/**
+ * Load backend configs from environment variables
+ */
+function loadFromEnv(config) {
+    // Anthropic
+    if (process.env.ANTHROPIC_API_KEY) {
+        config.backends.anthropic = {
+            baseUrl: process.env.ANTHROPIC_BASE_URL || "https://api.anthropic.com",
+            apiKey: process.env.ANTHROPIC_API_KEY,
+            type: "anthropic",
+        };
+    }
+    // OpenAI
+    if (process.env.OPENAI_API_KEY) {
+        config.backends.openai = {
+            baseUrl: process.env.OPENAI_BASE_URL || "https://api.openai.com",
+            apiKey: process.env.OPENAI_API_KEY,
+            type: "openai",
+        };
+    }
+    // Kimi (Moonshot) — only set if openai backend not already configured
+    if ((process.env.KIMI_API_KEY || process.env.MOONSHOT_API_KEY) &&
+        !config.backends.openai) {
+        config.backends.kimi = {
+            baseUrl: process.env.KIMI_BASE_URL || "https://api.moonshot.cn",
+            apiKey: process.env.KIMI_API_KEY || process.env.MOONSHOT_API_KEY || "",
+            type: "openai",
+        };
+    }
+    // Gemini
+    if (process.env.GEMINI_API_KEY || process.env.GOOGLE_API_KEY) {
+        config.backends.gemini = {
+            baseUrl: process.env.GEMINI_BASE_URL ||
+                "https://generativelanguage.googleapis.com",
+            apiKey: process.env.GEMINI_API_KEY || process.env.GOOGLE_API_KEY || "",
+            type: "gemini",
+        };
+    }
+    // OpenRouter
+    if (process.env.OPENROUTER_API_KEY) {
+        config.backends.openrouter = {
+            baseUrl: process.env.OPENROUTER_BASE_URL || "https://openrouter.ai/api",
+            apiKey: process.env.OPENROUTER_API_KEY,
+            type: "openai",
+            ...(process.env.OPENROUTER_REFERER && {
+                referer: process.env.OPENROUTER_REFERER,
+            }),
+            ...(process.env.OPENROUTER_TITLE && {
+                title: process.env.OPENROUTER_TITLE,
+            }),
+        };
+    }
+    return config;
+}
+/**
+ * Merge file config with default config
+ */
+function mergeConfig(defaultConfig, fileConfig) {
+    return {
+        port: fileConfig.port ?? defaultConfig.port,
+        backends: {
+            ...defaultConfig.backends,
+            ...fileConfig.backends,
+        },
+        routing: fileConfig.routing,
+        defaultBackends: fileConfig.defaultBackends,
+    };
+}
+/**
+ * Validate configuration
+ */
+export function validateConfig(config) {
+    if (config.port < 1 || config.port > 65535) {
+        throw new Error(`Invalid port: ${config.port}`);
+    }
+    // Note: Backends are now optional. Gateway will act as transparent proxy.
+    // If no backends configured, gateway will forward requests based on routing rules
+    // or pass through to the original target.
+    // Validate each backend (if any)
+    for (const [name, backend] of Object.entries(config.backends)) {
+        if (!backend.baseUrl) {
+            throw new Error(`Backend ${name} missing baseUrl`);
+        }
+        if (!backend.apiKey) {
+            throw new Error(`Backend ${name} missing apiKey`);
+        }
+    }
+}
+/**
+ * Infer API type from backend name
+ */
+export function inferApiType(name) {
+    const lower = name.toLowerCase();
+    if (lower.includes("anthropic") || lower.includes("claude")) {
+        return "anthropic";
+    }
+    if (lower.includes("gemini") || lower.includes("google")) {
+        return "gemini";
+    }
+    // Default to OpenAI-compatible for everything else
+    return "openai";
+}
+/**
+ * Get API type for a backend
+ */
+export function getBackendApiType(name, config) {
+    const backend = config.backends[name];
+    if (backend?.type) {
+        return backend.type;
+    }
+    return inferApiType(name);
+}
+/**
+ * Find backend by API key
+ */
+export function findBackendByApiKey(apiKey, config) {
+    for (const [name, backend] of Object.entries(config.backends)) {
+        if (backend.apiKey === apiKey) {
+            return { name, backend };
+        }
+    }
+    return null;
+}
+/**
+ * Find default backend for an API type
+ */
+export function findDefaultBackend(apiType, config) {
+    // Check explicit default first
+    const defaultName = config.defaultBackends?.[apiType];
+    if (defaultName && config.backends[defaultName]) {
+        return { name: defaultName, backend: config.backends[defaultName] };
+    }
+    // Find first backend matching the API type
+    for (const [name, backend] of Object.entries(config.backends)) {
+        if (getBackendApiType(name, config) === apiType) {
+            return { name, backend };
+        }
+    }
+    return null;
+}
+/**
+ * Find backend by request path prefix
+ * Matches the longest pathPrefix that is a prefix of the request path
+ */
+export function findBackendByPathPrefix(requestPath, config) {
+    let bestMatch = null;
+    let bestMatchLength = 0;
+    for (const [name, backend] of Object.entries(config.backends)) {
+        if (backend.pathPrefix && requestPath.startsWith(backend.pathPrefix)) {
+            if (backend.pathPrefix.length > bestMatchLength) {
+                bestMatch = { name, backend };
+                bestMatchLength = backend.pathPrefix.length;
+            }
+        }
+    }
+    return bestMatch;
+}
+/**
+ * Find backend by model name
+ */
+export function findBackendByModel(modelName, config) {
+    for (const [name, backend] of Object.entries(config.backends)) {
+        if (backend.models?.includes(modelName)) {
+            return { name, backend };
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=config.js.map

package/dist/gateway/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAE5G;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,IAAI,GAAG,UAAU,IAAI,mBAAmB,CAAC;IAE/C,wBAAwB;IACxB,MAAM,aAAa,GAAkB;QACnC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,EAAE,EAAE,CAAC;QACvD,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,wBAAwB;IACxB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC3C,OAAO,WAAW,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,oDAAoD,IAAI,GAAG,EAC3D,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,OAAO,WAAW,CAAC,aAAa,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,MAAqB;IACxC,YAAY;IACZ,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG;YAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,2BAA2B;YACtE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;YACrC,IAAI,EAAE,WAAW;SAClB,CAAC;IACJ,CAAC;IAED,SAAS;IACT,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;YACvB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,wBAAwB;YAChE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;YAClC,IAAI,EAAE,QAAQ;SACf,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,IACE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC1D,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EACvB,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG;YACrB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,yBAAyB;YAC/D,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE;YACtE,IAAI,EAAE,QAAQ;SACf,CAAC;IACJ,CAAC;IAED,SAAS;IACT,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;YACvB,OAAO,EACL,OAAO,CAAC,GAAG,CAAC,eAAe;gBAC3B,2CAA2C;YAC7C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;YACtE,IAAI,EAAE,QAAQ;SACf,CAAC;IACJ,CAAC;IAED,aAAa;IACb,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACnC,MAAM,CAAC,QAAQ,CAAC,UAAU,GAAG;YAC3B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,2BAA2B;YACvE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;YACtC,IAAI,EAAE,QAAQ;YACd,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI;gBACpC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;aACxC,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI;gBAClC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;aACpC,CAAC;SACH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,aAA4B,EAC5B,UAAkC;IAElC,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI;QAC3C,QAAQ,EAAE;YACR,GAAG,aAAa,CAAC,QAAQ;YACzB,GAAG,UAAU,CAAC,QAAQ;SACvB;QACD,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,0EAA0E;IAC1E,kFAAkF;IAClF,0CAA0C;IAE1C,iCAAiC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,iBAAiB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,mDAAmD;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAqB;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,IAAI,CAAC;IACtB,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,MAAqB;IAErB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAgB,EAChB,MAAqB;IAErB,+BAA+B;IAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,2CAA2C;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;YAChD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,MAAqB;IAErB,IAAI,SAAS,GAAqE,IAAI,CAAC;IACvF,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBAChD,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBAC9B,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,MAAqB;IAErB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/gateway/gateway/activity.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Gateway Activity Logger
+ *
+ * Tracks sanitization and restoration events for monitoring.
+ */
+import type { ActivityListener, MappingTable } from "./types.js";
+/**
+ * Generate a unique request ID
+ */
+export declare function generateRequestId(): string;
+/**
+ * Register an activity listener
+ */
+export declare function addActivityListener(listener: ActivityListener): void;
+/**
+ * Remove an activity listener
+ */
+export declare function removeActivityListener(listener: ActivityListener): void;
+/**
+ * Clear all activity listeners
+ */
+export declare function clearActivityListeners(): void;
+/**
+ * Count categories from mapping table
+ * Handles both old format (__email_1__) and new format (__PII_EMAIL_ADDRESS_00000001__)
+ */
+export declare function countCategories(mappingTable: MappingTable): Record<string, number>;
+/**
+ * Log a sanitization event (request going out)
+ */
+export declare function logSanitizeEvent(params: {
+    requestId: string;
+    backend: string;
+    endpoint: string;
+    model?: string;
+    mappingTable: MappingTable;
+    redactionCount: number;
+    durationMs?: number;
+}): void;
+/**
+ * Log a restoration event (response coming back)
+ */
+export declare function logRestoreEvent(params: {
+    requestId: string;
+    backend: string;
+    endpoint: string;
+    model?: string;
+    mappingTable: MappingTable;
+    restorationCount: number;
+    durationMs?: number;
+}): void;
+//# sourceMappingURL=activity.d.ts.map

package/dist/gateway/gateway/activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../src/activity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAwB,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAQvF;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAEpE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAKvE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAeD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBlF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAgBP;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,YAAY,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAgBP"}

package/dist/gateway/gateway/activity.js

@@ -0,0 +1,111 @@
+/**
+ * Gateway Activity Logger
+ *
+ * Tracks sanitization and restoration events for monitoring.
+ */
+// Activity listeners
+const listeners = [];
+// Request counter for generating IDs
+let requestCounter = 0;
+/**
+ * Generate a unique request ID
+ */
+export function generateRequestId() {
+    return `gw-${Date.now()}-${++requestCounter}`;
+}
+/**
+ * Register an activity listener
+ */
+export function addActivityListener(listener) {
+    listeners.push(listener);
+}
+/**
+ * Remove an activity listener
+ */
+export function removeActivityListener(listener) {
+    const index = listeners.indexOf(listener);
+    if (index !== -1) {
+        listeners.splice(index, 1);
+    }
+}
+/**
+ * Clear all activity listeners
+ */
+export function clearActivityListeners() {
+    listeners.length = 0;
+}
+/**
+ * Emit an activity event to all listeners
+ */
+function emitActivity(event) {
+    for (const listener of listeners) {
+        try {
+            listener(event);
+        }
+        catch (err) {
+            console.error("[gateway-activity] Listener error:", err);
+        }
+    }
+}
+/**
+ * Count categories from mapping table
+ * Handles both old format (__email_1__) and new format (__PII_EMAIL_ADDRESS_00000001__)
+ */
+export function countCategories(mappingTable) {
+    const categories = {};
+    for (const placeholder of mappingTable.keys()) {
+        // Try new format first: __PII_EMAIL_ADDRESS_00000001__
+        const newMatch = placeholder.match(/^__PII_([A-Z_]+)_\d+__$/);
+        if (newMatch) {
+            const category = newMatch[1].toLowerCase();
+            categories[category] = (categories[category] || 0) + 1;
+            continue;
+        }
+        // Fallback to old format: __email_1__
+        const oldMatch = placeholder.match(/^__([a-z_]+)_\d+__$/);
+        if (oldMatch) {
+            const category = oldMatch[1];
+            categories[category] = (categories[category] || 0) + 1;
+        }
+    }
+    return categories;
+}
+/**
+ * Log a sanitization event (request going out)
+ */
+export function logSanitizeEvent(params) {
+    const event = {
+        id: `${params.requestId}-sanitize`,
+        timestamp: new Date().toISOString(),
+        requestId: params.requestId,
+        type: "sanitize",
+        direction: "request",
+        backend: params.backend,
+        endpoint: params.endpoint,
+        model: params.model,
+        redactionCount: params.redactionCount,
+        categories: countCategories(params.mappingTable),
+        durationMs: params.durationMs,
+    };
+    emitActivity(event);
+}
+/**
+ * Log a restoration event (response coming back)
+ */
+export function logRestoreEvent(params) {
+    const event = {
+        id: `${params.requestId}-restore`,
+        timestamp: new Date().toISOString(),
+        requestId: params.requestId,
+        type: "restore",
+        direction: "response",
+        backend: params.backend,
+        endpoint: params.endpoint,
+        model: params.model,
+        redactionCount: params.restorationCount,
+        categories: countCategories(params.mappingTable),
+        durationMs: params.durationMs,
+    };
+    emitActivity(event);
+}
+//# sourceMappingURL=activity.js.map

package/dist/gateway/gateway/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","sourceRoot":"","sources":["../src/activity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,qBAAqB;AACrB,MAAM,SAAS,GAAuB,EAAE,CAAC;AAEzC,qCAAqC;AACrC,IAAI,cAAc,GAAG,CAAC,CAAC;AAEvB;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA0B;IAC5D,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA0B;IAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,KAA2B;IAC/C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,YAA0B;IACxD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,WAAW,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,uDAAuD;QACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC9D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3C,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QAED,sCAAsC;QACtC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAQhC;IACC,MAAM,KAAK,GAAyB;QAClC,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,WAAW;QAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;QAChD,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;IAEF,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAQ/B;IACC,MAAM,KAAK,GAAyB;QAClC,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,UAAU;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,cAAc,EAAE,MAAM,CAAC,gBAAgB;QACvC,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;QAChD,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;IAEF,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC"}

package/dist/gateway/gateway/config.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Gateway configuration management
+ */
+import type { GatewayConfig, ApiType } from "./types.js";
+/**
+ * Load gateway configuration from file or environment
+ */
+export declare function loadConfig(configPath?: string): GatewayConfig;
+/**
+ * Validate configuration
+ */
+export declare function validateConfig(config: GatewayConfig): void;
+/**
+ * Infer API type from backend name
+ */
+export declare function inferApiType(name: string): ApiType;
+/**
+ * Get API type for a backend
+ */
+export declare function getBackendApiType(name: string, config: GatewayConfig): ApiType;
+/**
+ * Find backend by API key
+ */
+export declare function findBackendByApiKey(apiKey: string, config: GatewayConfig): {
+    name: string;
+    backend: typeof config.backends[string];
+} | null;
+/**
+ * Find default backend for an API type
+ */
+export declare function findDefaultBackend(apiType: ApiType, config: GatewayConfig): {
+    name: string;
+    backend: typeof config.backends[string];
+} | null;
+/**
+ * Find backend by request path prefix
+ * Matches the longest pathPrefix that is a prefix of the request path
+ */
+export declare function findBackendByPathPrefix(requestPath: string, config: GatewayConfig): {
+    name: string;
+    backend: typeof config.backends[string];
+} | null;
+/**
+ * Find backend by model name
+ */
+export declare function findBackendByModel(modelName: string, config: GatewayConfig): {
+    name: string;
+    backend: typeof config.backends[string];
+} | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/gateway/gateway/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAIzD;;GAEG;AACH,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,aAAa,CAyB7D;AAmFD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAkB1D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUlD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAM9E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAOlE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,aAAa,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAelE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,aAAa,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAclE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAAE,GAAG,IAAI,CAOlE"}