@dotsetlabs/tollgate 0.1.0

package/dist/approval/interactive.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Interactive approval handler for Tollgate
+ *
+ * Serves a web UI for approving tool calls, enabling approval from
+ * any browser rather than just the terminal.
+ */
+import type { ApprovalHandler, ApprovalRequest, ApprovalResponse } from './types.js';
+/**
+ * Interactive approval handler that serves a web UI.
+ *
+ * When an approval is needed, the handler:
+ * 1. Adds the request to a pending queue
+ * 2. Notifies connected browsers via Server-Sent Events
+ * 3. Waits for a response from the web UI
+ * 4. Returns the approval decision
+ *
+ * @example
+ * ```typescript
+ * const handler = new InteractiveApprovalHandler({ port: 9847, timeoutMs: 60000 });
+ * await handler.start();
+ *
+ * // Open http://localhost:9847 to see pending approvals
+ * const response = await handler.prompt(request);
+ * ```
+ */
+export declare class InteractiveApprovalHandler implements ApprovalHandler {
+    private server;
+    private pendingRequests;
+    private sseClients;
+    private port;
+    private timeoutMs;
+    private isStarted;
+    constructor(options?: {
+        port?: number;
+        timeoutMs?: number;
+    });
+    /**
+     * Starts the HTTP server for the web UI.
+     */
+    start(): Promise<void>;
+    prompt(request: ApprovalRequest): Promise<ApprovalResponse>;
+    close(): void;
+    /**
+     * Handles incoming HTTP requests.
+     */
+    private handleRequest;
+    /**
+     * Serves the main approval UI.
+     */
+    private serveUI;
+    /**
+     * Returns current pending requests as JSON.
+     */
+    private serveRequests;
+    /**
+     * Handles Server-Sent Events for real-time updates.
+     */
+    private handleSSE;
+    /**
+     * Broadcasts updates to all SSE clients.
+     */
+    private broadcastUpdate;
+    /**
+     * Handles approval/denial responses from the UI.
+     */
+    private handleResponse;
+    /**
+     * Generates the HTML for the approval UI.
+     */
+    private generateHTML;
+}
+//# sourceMappingURL=interactive.d.ts.map

package/dist/approval/interactive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactive.d.ts","sourceRoot":"","sources":["../../src/approval/interactive.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAGjB,MAAM,YAAY,CAAC;AAgBpB;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,0BAA2B,YAAW,eAAe;IAChE,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,eAAe,CAAqC;IAC5D,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,SAAS,CAAS;gBAEd,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAK/D;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBtB,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8CjE,KAAK,IAAI,IAAI;IA0Bb;;OAEG;IACH,OAAO,CAAC,aAAa;IA6BrB;;OAEG;IACH,OAAO,CAAC,OAAO;IAKf;;OAEG;IACH,OAAO,CAAC,aAAa;IAkBrB;;OAEG;IACH,OAAO,CAAC,SAAS;IAkBjB;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,cAAc;IAkEtB;;OAEG;IACH,OAAO,CAAC,YAAY;CA0RrB"}

package/dist/approval/interactive.js

@@ -0,0 +1,550 @@
+/**
+ * Interactive approval handler for Tollgate
+ *
+ * Serves a web UI for approving tool calls, enabling approval from
+ * any browser rather than just the terminal.
+ */
+import * as http from 'node:http';
+import { approvalLogger as logger } from '../utils/logger.js';
+import { DEFAULT_APPROVAL_TIMEOUT_MS, DEFAULT_APPROVAL_PORT, MAX_APPROVAL_REQUEST_BODY_BYTES, } from '../constants.js';
+/**
+ * Interactive approval handler that serves a web UI.
+ *
+ * When an approval is needed, the handler:
+ * 1. Adds the request to a pending queue
+ * 2. Notifies connected browsers via Server-Sent Events
+ * 3. Waits for a response from the web UI
+ * 4. Returns the approval decision
+ *
+ * @example
+ * ```typescript
+ * const handler = new InteractiveApprovalHandler({ port: 9847, timeoutMs: 60000 });
+ * await handler.start();
+ *
+ * // Open http://localhost:9847 to see pending approvals
+ * const response = await handler.prompt(request);
+ * ```
+ */
+export class InteractiveApprovalHandler {
+    server = null;
+    pendingRequests = new Map();
+    sseClients = new Set();
+    port;
+    timeoutMs;
+    isStarted = false;
+    constructor(options = {}) {
+        this.port = options.port ?? DEFAULT_APPROVAL_PORT;
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_APPROVAL_TIMEOUT_MS;
+    }
+    /**
+     * Starts the HTTP server for the web UI.
+     */
+    async start() {
+        if (this.isStarted)
+            return;
+        return new Promise((resolve, reject) => {
+            this.server = http.createServer((req, res) => this.handleRequest(req, res));
+            this.server.on('error', (err) => {
+                if (err.code === 'EADDRINUSE') {
+                    reject(new Error(`Port ${this.port} is already in use. Choose a different port for the approval UI.`));
+                }
+                else {
+                    reject(err);
+                }
+            });
+            this.server.listen(this.port, () => {
+                this.isStarted = true;
+                logger.info('Approval UI available', { url: `http://localhost:${this.port}` });
+                resolve();
+            });
+        });
+    }
+    async prompt(request) {
+        // Auto-start if not started
+        if (!this.isStarted) {
+            await this.start();
+        }
+        const startTime = Date.now();
+        return new Promise((resolve) => {
+            // Set up timeout
+            const timeout = setTimeout(() => {
+                this.pendingRequests.delete(request.id);
+                this.broadcastUpdate();
+                logger.warn('Approval request timed out', { requestId: request.id });
+                resolve({
+                    result: 'timeout',
+                    respondedAt: new Date(),
+                    durationMs: Date.now() - startTime,
+                });
+            }, this.timeoutMs);
+            // Store pending request
+            this.pendingRequests.set(request.id, {
+                request,
+                resolve: (response) => {
+                    clearTimeout(timeout);
+                    this.pendingRequests.delete(request.id);
+                    this.broadcastUpdate();
+                    resolve(response);
+                },
+                startTime,
+                timeout,
+            });
+            // Notify UI of new request
+            this.broadcastUpdate();
+            // Also log to terminal as a fallback notification
+            logger.info('Approval required - open web UI to respond', {
+                url: `http://localhost:${this.port}`,
+                server: request.context.server,
+                tool: request.context.tool,
+            });
+        });
+    }
+    close() {
+        // Resolve all pending requests as denied
+        for (const pending of this.pendingRequests.values()) {
+            clearTimeout(pending.timeout);
+            pending.resolve({
+                result: 'denied',
+                respondedAt: new Date(),
+                durationMs: Date.now() - pending.startTime,
+            });
+        }
+        this.pendingRequests.clear();
+        // Close SSE connections
+        for (const client of this.sseClients) {
+            client.end();
+        }
+        this.sseClients.clear();
+        // Close server
+        if (this.server) {
+            this.server.close();
+            this.server = null;
+            this.isStarted = false;
+        }
+    }
+    /**
+     * Handles incoming HTTP requests.
+     */
+    handleRequest(req, res) {
+        const url = new URL(req.url ?? '/', `http://localhost:${this.port}`);
+        // Enable CORS for local development
+        res.setHeader('Access-Control-Allow-Origin', '*');
+        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+        if (req.method === 'OPTIONS') {
+            res.writeHead(204);
+            res.end();
+            return;
+        }
+        // Route requests
+        if (url.pathname === '/' && req.method === 'GET') {
+            this.serveUI(res);
+        }
+        else if (url.pathname === '/api/requests' && req.method === 'GET') {
+            this.serveRequests(res);
+        }
+        else if (url.pathname === '/api/events' && req.method === 'GET') {
+            this.handleSSE(res);
+        }
+        else if (url.pathname === '/api/respond' && req.method === 'POST') {
+            this.handleResponse(req, res);
+        }
+        else {
+            res.writeHead(404, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Not found' }));
+        }
+    }
+    /**
+     * Serves the main approval UI.
+     */
+    serveUI(res) {
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(this.generateHTML());
+    }
+    /**
+     * Returns current pending requests as JSON.
+     */
+    serveRequests(res) {
+        const requests = Array.from(this.pendingRequests.values()).map((p) => ({
+            id: p.request.id,
+            server: p.request.context.server,
+            tool: p.request.context.tool,
+            args: p.request.context.args,
+            risk: p.request.decision.analysis?.risk ?? 'unknown',
+            rule: p.request.decision.matchedRule ?? 'default',
+            message: p.request.decision.message,
+            timestamp: p.request.timestamp.toISOString(),
+            elapsedMs: Date.now() - p.startTime,
+            timeoutMs: this.timeoutMs,
+        }));
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ requests }));
+    }
+    /**
+     * Handles Server-Sent Events for real-time updates.
+     */
+    handleSSE(res) {
+        res.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            'Connection': 'keep-alive',
+        });
+        this.sseClients.add(res);
+        // Send initial data
+        res.write(`data: ${JSON.stringify({ type: 'connected' })}\n\n`);
+        // Handle client disconnect
+        res.on('close', () => {
+            this.sseClients.delete(res);
+        });
+    }
+    /**
+     * Broadcasts updates to all SSE clients.
+     */
+    broadcastUpdate() {
+        const message = `data: ${JSON.stringify({ type: 'update' })}\n\n`;
+        for (const client of this.sseClients) {
+            client.write(message);
+        }
+    }
+    /**
+     * Handles approval/denial responses from the UI.
+     */
+    handleResponse(req, res) {
+        let body = '';
+        let bodySize = 0;
+        req.on('data', (chunk) => {
+            const chunkSize = Buffer.isBuffer(chunk) ? chunk.length : Buffer.byteLength(chunk);
+            bodySize += chunkSize;
+            // Reject oversized requests to prevent DoS
+            if (bodySize > MAX_APPROVAL_REQUEST_BODY_BYTES) {
+                res.writeHead(413, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Request body too large' }));
+                req.destroy();
+                return;
+            }
+            body += chunk;
+        });
+        req.on('end', () => {
+            try {
+                const data = JSON.parse(body);
+                const pending = this.pendingRequests.get(data.requestId);
+                if (!pending) {
+                    res.writeHead(404, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Request not found or already responded' }));
+                    return;
+                }
+                // Build session grant if duration provided
+                let sessionGrant;
+                if (data.result === 'approved' && data.duration && data.duration !== 'once') {
+                    sessionGrant = {
+                        scope: data.scope ?? 'tool',
+                        duration: data.duration,
+                    };
+                }
+                // Resolve the pending request
+                pending.resolve({
+                    result: data.result,
+                    respondedAt: new Date(),
+                    durationMs: Date.now() - pending.startTime,
+                    sessionGrant,
+                });
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ success: true }));
+                logger.info('Request resolved via web UI', {
+                    requestId: data.requestId,
+                    result: data.result,
+                });
+            }
+            catch (_err) {
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Invalid request body' }));
+            }
+        });
+    }
+    /**
+     * Generates the HTML for the approval UI.
+     */
+    generateHTML() {
+        return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Tollgate Approval</title>
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+      background: #0f1419;
+      color: #e7e9ea;
+      min-height: 100vh;
+      padding: 2rem;
+    }
+    .container { max-width: 800px; margin: 0 auto; }
+    h1 {
+      font-size: 1.5rem;
+      margin-bottom: 0.5rem;
+      display: flex;
+      align-items: center;
+      gap: 0.5rem;
+    }
+    .subtitle { color: #71767b; margin-bottom: 2rem; }
+    .badge {
+      font-size: 0.75rem;
+      padding: 0.25rem 0.5rem;
+      border-radius: 9999px;
+      background: #22c55e20;
+      color: #22c55e;
+    }
+    .no-requests {
+      text-align: center;
+      padding: 4rem 2rem;
+      background: #16181c;
+      border-radius: 1rem;
+      border: 1px dashed #2f3336;
+    }
+    .no-requests h2 { color: #71767b; margin-bottom: 0.5rem; }
+    .request-card {
+      background: #16181c;
+      border: 1px solid #2f3336;
+      border-radius: 1rem;
+      padding: 1.5rem;
+      margin-bottom: 1rem;
+    }
+    .request-header {
+      display: flex;
+      justify-content: space-between;
+      align-items: flex-start;
+      margin-bottom: 1rem;
+    }
+    .request-title {
+      font-size: 1.125rem;
+      font-weight: 600;
+    }
+    .request-meta { font-size: 0.875rem; color: #71767b; }
+    .risk-badge {
+      font-size: 0.75rem;
+      padding: 0.25rem 0.75rem;
+      border-radius: 9999px;
+      font-weight: 600;
+    }
+    .risk-safe { background: #22c55e20; color: #22c55e; }
+    .risk-read { background: #3b82f620; color: #3b82f6; }
+    .risk-write { background: #f59e0b20; color: #f59e0b; }
+    .risk-destructive { background: #f97316; color: white; }
+    .risk-dangerous { background: #ef4444; color: white; }
+    .risk-unknown { background: #71767b20; color: #71767b; }
+    .args-section {
+      background: #0f1419;
+      border-radius: 0.5rem;
+      padding: 1rem;
+      margin: 1rem 0;
+      font-family: 'Monaco', 'Menlo', monospace;
+      font-size: 0.8125rem;
+      overflow-x: auto;
+      white-space: pre-wrap;
+      word-break: break-all;
+    }
+    .message {
+      padding: 0.75rem 1rem;
+      background: #f59e0b15;
+      border-left: 3px solid #f59e0b;
+      border-radius: 0 0.5rem 0.5rem 0;
+      margin: 1rem 0;
+      font-size: 0.875rem;
+    }
+    .actions {
+      display: flex;
+      gap: 0.5rem;
+      flex-wrap: wrap;
+      margin-top: 1rem;
+    }
+    button {
+      padding: 0.625rem 1rem;
+      border-radius: 0.5rem;
+      font-weight: 600;
+      font-size: 0.875rem;
+      cursor: pointer;
+      border: none;
+      transition: all 0.15s;
+    }
+    button:hover { filter: brightness(1.1); }
+    button:disabled { opacity: 0.5; cursor: not-allowed; }
+    .btn-approve { background: #22c55e; color: white; }
+    .btn-approve-session { background: #3b82f6; color: white; }
+    .btn-deny { background: #ef4444; color: white; }
+    .timer {
+      font-size: 0.75rem;
+      color: #71767b;
+      margin-top: 0.5rem;
+    }
+    .timer.urgent { color: #f59e0b; }
+    .timer.critical { color: #ef4444; }
+    .connected-status {
+      position: fixed;
+      bottom: 1rem;
+      right: 1rem;
+      padding: 0.5rem 1rem;
+      border-radius: 9999px;
+      font-size: 0.75rem;
+      background: #16181c;
+      border: 1px solid #2f3336;
+    }
+    .connected-status.online { border-color: #22c55e; color: #22c55e; }
+    .connected-status.offline { border-color: #ef4444; color: #ef4444; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <h1>
+      <svg width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+        <path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/>
+      </svg>
+      Tollgate Approval
+      <span class="badge" id="count">0 pending</span>
+    </h1>
+    <p class="subtitle">Review and approve AI agent actions</p>
+
+    <div id="requests"></div>
+  </div>
+
+  <div class="connected-status" id="status">Connecting...</div>
+
+  <script>
+    let requests = [];
+    let eventSource = null;
+
+    function formatArgs(args) {
+      return JSON.stringify(args, null, 2);
+    }
+
+    function getRiskClass(risk) {
+      const classes = {
+        safe: 'risk-safe',
+        read: 'risk-read',
+        write: 'risk-write',
+        destructive: 'risk-destructive',
+        dangerous: 'risk-dangerous',
+      };
+      return classes[risk] || 'risk-unknown';
+    }
+
+    function renderRequests() {
+      const container = document.getElementById('requests');
+      const countEl = document.getElementById('count');
+
+      countEl.textContent = requests.length + ' pending';
+
+      if (requests.length === 0) {
+        container.innerHTML = \`
+          <div class="no-requests">
+            <h2>No pending approvals</h2>
+            <p>When an AI agent needs approval, it will appear here.</p>
+          </div>
+        \`;
+        return;
+      }
+
+      container.innerHTML = requests.map(req => {
+        const remaining = Math.max(0, req.timeoutMs - req.elapsedMs);
+        const seconds = Math.ceil(remaining / 1000);
+        const timerClass = seconds < 10 ? 'critical' : seconds < 30 ? 'urgent' : '';
+
+        return \`
+          <div class="request-card" data-id="\${req.id}">
+            <div class="request-header">
+              <div>
+                <div class="request-title">\${req.server} → \${req.tool}</div>
+                <div class="request-meta">Rule: \${req.rule}</div>
+              </div>
+              <span class="risk-badge \${getRiskClass(req.risk)}">\${req.risk}</span>
+            </div>
+
+            \${req.message ? \`<div class="message">\${req.message}</div>\` : ''}
+
+            <div class="args-section">\${formatArgs(req.args)}</div>
+
+            <div class="actions">
+              <button class="btn-deny" onclick="respond('\${req.id}', 'denied')">Deny</button>
+              <button class="btn-approve" onclick="respond('\${req.id}', 'approved', null, 'once')">Allow Once</button>
+              <button class="btn-approve-session" onclick="respond('\${req.id}', 'approved', 'tool', '5min')">Allow 5 min</button>
+              <button class="btn-approve-session" onclick="respond('\${req.id}', 'approved', 'tool', '15min')">Allow 15 min</button>
+              <button class="btn-approve-session" onclick="respond('\${req.id}', 'approved', 'tool', 'session')">Allow Session</button>
+            </div>
+
+            <div class="timer \${timerClass}">Auto-deny in \${seconds}s</div>
+          </div>
+        \`;
+      }).join('');
+    }
+
+    async function fetchRequests() {
+      try {
+        const res = await fetch('/api/requests');
+        const data = await res.json();
+        requests = data.requests;
+        renderRequests();
+      } catch (err) {
+        console.error('Failed to fetch requests:', err);
+      }
+    }
+
+    async function respond(requestId, result, scope, duration) {
+      const buttons = document.querySelectorAll(\`[data-id="\${requestId}"] button\`);
+      buttons.forEach(btn => btn.disabled = true);
+
+      try {
+        await fetch('/api/respond', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ requestId, result, scope, duration }),
+        });
+      } catch (err) {
+        console.error('Failed to respond:', err);
+        buttons.forEach(btn => btn.disabled = false);
+      }
+    }
+
+    function connectSSE() {
+      const statusEl = document.getElementById('status');
+
+      eventSource = new EventSource('/api/events');
+
+      eventSource.onopen = () => {
+        statusEl.textContent = 'Connected';
+        statusEl.className = 'connected-status online';
+      };
+
+      eventSource.onmessage = (event) => {
+        const data = JSON.parse(event.data);
+        if (data.type === 'update') {
+          fetchRequests();
+        }
+      };
+
+      eventSource.onerror = () => {
+        statusEl.textContent = 'Disconnected';
+        statusEl.className = 'connected-status offline';
+        eventSource.close();
+        setTimeout(connectSSE, 2000);
+      };
+    }
+
+    // Update timers every second
+    setInterval(() => {
+      requests = requests.map(req => ({
+        ...req,
+        elapsedMs: req.elapsedMs + 1000,
+      }));
+      renderRequests();
+    }, 1000);
+
+    // Initial load
+    fetchRequests();
+    connectSSE();
+  </script>
+</body>
+</html>`;
+    }
+}
+//# sourceMappingURL=interactive.js.map

package/dist/approval/interactive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactive.js","sourceRoot":"","sources":["../../src/approval/interactive.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AASlC,OAAO,EAAE,cAAc,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,+BAA+B,GAChC,MAAM,iBAAiB,CAAC;AASzB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,0BAA0B;IAC7B,MAAM,GAAuB,IAAI,CAAC;IAClC,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,UAAiD,EAAE;QAC7D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,qBAAqB,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,2BAA2B,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAE3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAE5E,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;gBACrD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,kEAAkE,CAAC,CAAC,CAAC;gBACzG,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACjC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC/E,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAwB;QACnC,4BAA4B;QAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,iBAAiB;YACjB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrE,OAAO,CAAC;oBACN,MAAM,EAAE,SAAS;oBACjB,WAAW,EAAE,IAAI,IAAI,EAAE;oBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACnC,CAAC,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAEnB,wBAAwB;YACxB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;gBACnC,OAAO;gBACP,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;oBACpB,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACxC,IAAI,CAAC,eAAe,EAAE,CAAC;oBACvB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACpB,CAAC;gBACD,SAAS;gBACT,OAAO;aACR,CAAC,CAAC;YAEH,2BAA2B;YAC3B,IAAI,CAAC,eAAe,EAAE,CAAC;YAEvB,kDAAkD;YAClD,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACxD,GAAG,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;gBACpC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;gBAC9B,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,yCAAyC;QACzC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;YACpD,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,OAAO,CAAC;gBACd,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAE7B,wBAAwB;QACxB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAExB,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAyB,EAAE,GAAwB;QACvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAErE,oCAAoC;QACpC,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAE9D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,iBAAiB;QACjB,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACpE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAClE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACpE,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,GAAwB;QACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,GAAwB;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;YAChB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM;YAChC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI;YAC5B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS;YACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,SAAS;YACjD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO;YACnC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;YAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC,CAAC;QAEJ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAwB;QACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,YAAY,EAAE,YAAY;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzB,oBAAoB;QACpB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QAEhE,2BAA2B;QAC3B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,MAAM,OAAO,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAyB,EAAE,GAAwB;QACxE,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACnF,QAAQ,IAAI,SAAS,CAAC;YAEtB,2CAA2C;YAC3C,IAAI,QAAQ,GAAG,+BAA+B,EAAE,CAAC;gBAC/C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;gBAC7D,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YAED,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAK3B,CAAC;gBAEF,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBAED,2CAA2C;gBAC3C,IAAI,YAA0C,CAAC;gBAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC5E,YAAY,GAAG;wBACb,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,MAAM;wBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;qBACxB,CAAC;gBACJ,CAAC;gBAED,8BAA8B;gBAC9B,OAAO,CAAC,OAAO,CAAC;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,WAAW,EAAE,IAAI,IAAI,EAAE;oBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;oBAC1C,YAAY;iBACb,CAAC,CAAC;gBAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAE3C,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBACzC,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAuRH,CAAC;IACP,CAAC;CACF"}