@jasonews/agent-squad-gateway 1.0.0

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 JASONews
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/README.md

@@ -0,0 +1,200 @@
+# Agent Squad Gateway
+
+**A local control plane and OpenAI-compatible API gateway for coding CLI models.**
+
+**English (default)** | [简体中文](https://github.com/JASONews/agent-squad-gateway/blob/main/translations/README.zh-CN.md)
+
+Agent Squad Gateway exposes models from locally installed coding CLIs through a managed Web UI and
+OpenAI-compatible endpoints. Each provider keeps its existing local login; the Gateway adds model
+aliases, API keys, access grants, concurrency controls, streaming, and capability verification.
+
+Agent Squad Core is optional and independent. The Gateway can display Core sessions and pending
+choices for debugging, but Core does not require the Gateway and the Gateway provider runtime can
+operate without Core.
+
+```text
+OpenAI client / LiteLLM / IDE
+            |
+       /v1 API + SSE
+            |
+  Agent Squad Gateway + Web UI
+            |
+ Codex / Claude Code / Cursor Agent / OpenCode / Antigravity / Kimi Code
+```
+
+## Features
+
+- OpenAI-compatible `GET /v1/models`, `POST /v1/chat/completions`, and `POST /v1/responses`.
+- Streaming responses over SSE, including resumable Responses sessions through
+  `previous_response_id`.
+- Client-side function tools: the Gateway returns tool calls, while the API client executes them.
+- Provider-native tools and extensions are disabled where supported and rejected at the adapter
+  boundary where a CLI cannot disable them completely.
+- Web UI for CLI discovery, invocation targets, verification, clients, recoverable local API keys,
+  grants, run metadata, extensions, settings, and optional Core debugging.
+- Per-target model, reasoning effort, isolation, streaming, queue, concurrency, timeout, and
+  workspace controls.
+- Version-aware capability verification: a CLI upgrade keeps the provider available while affected
+  targets require conformance verification again.
+- Metadata-only Gateway persistence: prompts, completions, tool payloads, and raw provider events
+  are not stored in the Gateway database.
+
+## Requirements
+
+- Node.js 20 or newer
+- npm
+- At least one installed and authenticated provider CLI:
+  - Codex (`codex`)
+  - Claude Code (`claude`)
+  - Cursor Agent (`cursor-agent`)
+  - OpenCode (`opencode`)
+  - Antigravity (`agy`)
+  - Kimi Code (`kimi`)
+
+## Install
+
+### npm
+
+Agent Squad Gateway is a public package on the npm registry. No registry token is required:
+
+```bash
+npm install -g @jasonews/agent-squad-gateway
+```
+
+Verify the command:
+
+```bash
+agent-squad-gateway --help
+```
+
+### Build From Source
+
+```bash
+git clone https://github.com/JASONews/agent-squad-gateway.git
+cd agent-squad-gateway
+npm ci
+npm run build
+npm link
+```
+
+## Quick Start
+
+```bash
+agent-squad-gateway start
+agent-squad-gateway open
+```
+
+The default server address is `0.0.0.0:28772`, allowing local containers to connect. On first
+start, the Gateway creates `~/.agent-squad/gateway/config.json`:
+
+```json
+{
+  "address": "0.0.0.0",
+  "port": 28772,
+  "web_ui_auth": "disabled"
+}
+```
+
+For host-only access, change `address` to `127.0.0.1`. Set `web_ui_auth` to `token` when the admin
+UI is reachable from an untrusted network. Restart the Gateway after editing the file.
+
+In the Web UI:
+
+1. Scan installed CLIs.
+2. Create and verify an invocation target. Verification performs real model calls and may consume
+   quota.
+3. Enable the verified target.
+4. Create a client and API key.
+5. Enable the OpenAI extension and grant the client access to the target.
+
+## OpenAI-Compatible API
+
+Use `http://127.0.0.1:28772/v1` as the base URL. Docker Desktop containers can use
+`http://host.docker.internal:28772/v1`.
+
+```bash
+export AGENT_SQUAD_BASE_URL=http://127.0.0.1:28772/v1
+export AGENT_SQUAD_API_KEY=asqsk_your_key
+
+curl "$AGENT_SQUAD_BASE_URL/models" \
+  -H "Authorization: Bearer $AGENT_SQUAD_API_KEY"
+
+curl "$AGENT_SQUAD_BASE_URL/chat/completions" \
+  -H "Authorization: Bearer $AGENT_SQUAD_API_KEY" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "model": "codex-gpt56-max",
+    "messages": [{"role":"user","content":"Explain this repository."}],
+    "stream": true
+  }'
+```
+
+The model name is the enabled invocation target ID or one of its configured aliases. Unconfigured
+models are rejected.
+
+## Tool Calls
+
+API tool calls belong to the client. Send OpenAI function definitions in the request, execute the
+returned calls in the client application, and submit tool results on the next turn. The Gateway
+does not expose the provider CLI's personal tools, MCP servers, skills, or workspace as API tools.
+
+## CLI
+
+```bash
+agent-squad-gateway start [--foreground] [--address ADDRESS] [--port PORT]
+agent-squad-gateway stop
+agent-squad-gateway status
+agent-squad-gateway open
+agent-squad-gateway doctor
+```
+
+Configuration priority, from lowest to highest, is built-in defaults, `config.json`, environment
+variables, and CLI options. Supported overrides include:
+
+```bash
+AGENT_SQUAD_GATEWAY_ADDRESS=127.0.0.1
+AGENT_SQUAD_GATEWAY_PORT=28772
+AGENT_SQUAD_GATEWAY_WEB_UI_AUTH=token
+```
+
+## Managed State
+
+Gateway state is stored under `~/.agent-squad/gateway/`:
+
+| Path | Purpose |
+| --- | --- |
+| `config.json` | Address, port, and Web UI authentication mode |
+| `gateway.db` | Targets, clients, encrypted credentials, grants, and run metadata |
+| `master.key` | Encryption key for recoverable client API keys |
+| `admin-secret` | Local admin bootstrap secret |
+| `gateway.pid` / `gateway.log` | Background lifecycle state |
+| `workspaces/` | Gateway-managed provider workspaces |
+
+Client API keys are encrypted at rest but intentionally recoverable in the local admin UI. Protect
+`gateway.db` and `master.key` together.
+
+## Security
+
+The Gateway is local developer infrastructure, not an internet-facing service. Do not expose it
+through a public router or reverse proxy. Review [SECURITY.md](SECURITY.md) before enabling LAN or
+container access, using fixed workspaces, or sending sensitive content to provider CLIs.
+
+## Development
+
+```bash
+npm ci
+npm run build
+npm test
+```
+
+The default test suite uses fake providers. Real-provider tests are opt-in and may consume quota:
+
+```bash
+GATEWAY_REAL_TARGETS=target_a,target_b npm run test:real-providers
+```
+
+For UI development, run `npm run dev:server` and `npm run dev` in separate terminals.
+
+## License
+
+[MIT](LICENSE)

package/SECURITY.md

@@ -0,0 +1,44 @@
+# Security Policy
+
+Agent Squad Gateway runs local coding CLIs and exposes a network API. Treat it as local developer
+infrastructure, not as an internet-facing service.
+
+## Network Boundary
+
+- The default `0.0.0.0` bind address supports local container access but also exposes the port to
+  reachable host networks. Use `127.0.0.1` when LAN or container access is unnecessary.
+- Do not expose the Gateway through a public router, tunnel, or reverse proxy.
+- Web UI authentication defaults to `disabled`. Use `web_ui_auth: "token"` on any untrusted
+  network. The `/v1` API always requires a Gateway client API key.
+- CORS is disabled and is not a substitute for a firewall or authentication.
+
+## Credentials and State
+
+- Client API keys are encrypted at rest but intentionally recoverable in the local Web UI.
+- Protect `gateway.db` and `master.key` together. Disclosure of both exposes stored client keys;
+  losing `master.key` makes those keys unrecoverable.
+- Never commit GitHub tokens, npm tokens, provider credentials, generated Gateway state, or local
+  `.npmrc` files.
+
+## Provider Boundaries
+
+- Gateway SQLite persistence excludes prompts, completions, tool payloads, and raw provider events,
+  but provider CLIs may retain their own transcripts.
+- Provider isolation, sandboxing, cancellation, and transcript suppression are best-effort CLI
+  integrations, not operating-system security boundaries.
+- API clients own function execution. Provider-native tool activity is disabled where supported and
+  rejected by adapters where a CLI cannot disable tools completely.
+- Antigravity currently receives prompt content as a command-line argument, which can be visible to
+  local process inspection or audit tooling.
+- Fixed workspaces reduce isolation. Review the selected path and acknowledgement before enabling a
+  target.
+
+## Verification
+
+Target verification sends bounded requests to the configured provider model and may consume quota.
+Run it intentionally and review provider account limits before enabling automatic consumers.
+
+## Reporting Vulnerabilities
+
+Report security issues privately to the repository owner. Do not include live credentials, private
+repository content, prompts, or provider transcripts in public issues.

package/dist/bin/agent-squad-gateway.js

@@ -0,0 +1,55 @@
+#!/usr/bin/env node
+import { Command, Option } from 'commander';
+import { fileURLToPath } from 'node:url';
+import { doctorGateway, openGateway, startGateway, statusGateway, stopGateway, } from '../lifecycle/daemon.js';
+const defaultActions = {
+    start: startGateway,
+    stop: stopGateway,
+    status: statusGateway,
+    open: openGateway,
+    doctor: doctorGateway,
+};
+export function createGatewayProgram(actions = defaultActions) {
+    const program = new Command();
+    program
+        .name('agent-squad-gateway')
+        .description('Local Agent Squad Gateway')
+        .version('0.1.0');
+    addEndpointOptions(program.command('start')
+        .option('--foreground', 'run in the foreground'))
+        .addOption(new Option('--web-ui-auth <mode>', 'Web UI authentication mode')
+        .choices(['disabled', 'token'])
+        .env('AGENT_SQUAD_GATEWAY_WEB_UI_AUTH'))
+        .action(async (options) => {
+        await actions.start({
+            foreground: options.foreground,
+            address: options.address,
+            port: options.port,
+            webUiAuth: options.webUiAuth,
+        });
+    });
+    program.command('stop').action(async () => { await actions.stop(); });
+    addEndpointOptions(program.command('status')).action(async (options) => {
+        await actions.status(options);
+    });
+    addEndpointOptions(program.command('open')).action(async (options) => {
+        await actions.open(options);
+    });
+    program.command('doctor').action(async () => { await actions.doctor(); });
+    return program;
+}
+function addEndpointOptions(command) {
+    return command
+        .addOption(new Option('--address <address>', 'Gateway bind address')
+        .env('AGENT_SQUAD_GATEWAY_ADDRESS'))
+        .addOption(new Option('--port <port>', 'Gateway bind port')
+        .env('AGENT_SQUAD_GATEWAY_PORT')
+        .argParser(Number));
+}
+if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
+    void createGatewayProgram().parseAsync(process.argv).catch((error) => {
+        console.error(error);
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=agent-squad-gateway.js.map

package/dist/bin/agent-squad-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-squad-gateway.js","sourceRoot":"","sources":["../../src/bin/agent-squad-gateway.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,aAAa,EACb,WAAW,EACX,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAkBhC,MAAM,cAAc,GAAsB;IACxC,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,aAAa;IACrB,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,UAA6B,cAAc;IAC9E,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO;SACJ,IAAI,CAAC,qBAAqB,CAAC;SAC3B,WAAW,CAAC,2BAA2B,CAAC;SACxC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;SACxC,MAAM,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;SAChD,SAAS,CAAC,IAAI,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SACxE,OAAO,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;SAC9B,GAAG,CAAC,iCAAiC,CAAC,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,OAKd,EAAE,EAAE;QACH,MAAM,OAAO,CAAC,KAAK,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACL,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAkC,EAAE,EAAE;QAChG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAkC,EAAE,EAAE;QAC9F,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,OAAO,OAAO;SACX,SAAS,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,sBAAsB,CAAC;SACjE,GAAG,CAAC,6BAA6B,CAAC,CAAC;SACrC,SAAS,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC;SACxD,GAAG,CAAC,0BAA0B,CAAC;SAC/B,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,KAAK,oBAAoB,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC5E,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/config/config.js

@@ -0,0 +1,124 @@
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { isIP } from 'node:net';
+import { z } from 'zod';
+import { resolveGatewayPaths } from './paths.js';
+export const GATEWAY_BIND_HOST = '0.0.0.0';
+export const GATEWAY_LOOPBACK_HOST = '127.0.0.1';
+const HOSTNAME_PATTERN = /^(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)*[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?$/;
+const gatewayAddressSchema = z.string()
+    .trim()
+    .min(1)
+    .max(253)
+    .refine((value) => isIP(value) !== 0 || HOSTNAME_PATTERN.test(value), 'invalid address')
+    .transform((value) => value.toLowerCase());
+const gatewayConfigFileSchema = z.object({
+    address: gatewayAddressSchema,
+    port: z.number().int().min(1).max(65_535),
+    web_ui_auth: z.enum(['disabled', 'token']),
+}).strict();
+const runtimeGatewayConfigSchema = gatewayConfigFileSchema.extend({
+    port: z.number().int().min(0).max(65_535),
+});
+const DEFAULT_GATEWAY_CONFIG_FILE = {
+    address: GATEWAY_BIND_HOST,
+    port: 28_772,
+    web_ui_auth: 'disabled',
+};
+export function resolveGatewayConfig(input = {}) {
+    const fileConfig = parseRuntimeConfig({
+        address: input.address ?? DEFAULT_GATEWAY_CONFIG_FILE.address,
+        port: input.port ?? DEFAULT_GATEWAY_CONFIG_FILE.port,
+        web_ui_auth: input.webUiAuth ?? DEFAULT_GATEWAY_CONFIG_FILE.web_ui_auth,
+    }, 'Gateway configuration');
+    return {
+        host: fileConfig.address,
+        port: fileConfig.port,
+        coreUrl: (input.coreUrl ?? 'http://127.0.0.1:28771').replace(/\/$/, ''),
+        webUiAuth: fileConfig.web_ui_auth,
+        paths: resolveGatewayPaths(input.baseDir),
+    };
+}
+export function loadGatewayConfig(input = {}) {
+    const paths = resolveGatewayPaths(input.baseDir);
+    const fileConfig = readGatewayConfigFile(paths.configPath) ?? DEFAULT_GATEWAY_CONFIG_FILE;
+    const mergedConfig = parseConfigFile({
+        address: input.address ?? fileConfig.address,
+        port: input.port ?? fileConfig.port,
+        web_ui_auth: input.webUiAuth ?? fileConfig.web_ui_auth,
+    }, 'Gateway configuration');
+    return resolveGatewayConfig({
+        ...input,
+        address: mergedConfig.address,
+        port: mergedConfig.port,
+        webUiAuth: mergedConfig.web_ui_auth,
+    });
+}
+export function ensureGatewayConfigFile(baseDir) {
+    const paths = resolveGatewayPaths(baseDir);
+    mkdirSync(paths.stateDir, { recursive: true, mode: 0o700 });
+    try {
+        writeFileSync(paths.configPath, `${JSON.stringify(DEFAULT_GATEWAY_CONFIG_FILE, null, 2)}\n`, { encoding: 'utf8', flag: 'wx', mode: 0o600 });
+    }
+    catch (error) {
+        if (!isFileExistsError(error))
+            throw error;
+    }
+    return paths.configPath;
+}
+export function gatewayLoopbackOrigin(config) {
+    const host = config.host === GATEWAY_BIND_HOST
+        ? GATEWAY_LOOPBACK_HOST
+        : config.host === '::'
+            ? '::1'
+            : config.host;
+    return `http://${formatGatewayAddress(host, config.port)}`;
+}
+export function formatGatewayAddress(host, port) {
+    return `${host.includes(':') ? `[${host}]` : host}:${port}`;
+}
+export function gatewayBindPolicy(host) {
+    if (host === '0.0.0.0' || host === '::')
+        return 'all-interfaces';
+    if (host === '127.0.0.1' || host === '::1' || host === 'localhost')
+        return 'loopback';
+    return 'configured-address';
+}
+function readGatewayConfigFile(path) {
+    let content;
+    try {
+        content = readFileSync(path, 'utf8');
+    }
+    catch (error) {
+        if (isFileNotFoundError(error))
+            return null;
+        throw error;
+    }
+    try {
+        return parseConfigFile(JSON.parse(content), `Gateway config file ${path}`);
+    }
+    catch (error) {
+        throw new Error(`invalid Gateway config file: ${path}`, { cause: error });
+    }
+}
+function parseConfigFile(value, label) {
+    const result = gatewayConfigFileSchema.safeParse(value);
+    if (!result.success)
+        throw new Error(`invalid ${label}`, { cause: result.error });
+    return result.data;
+}
+function parseRuntimeConfig(value, label) {
+    const result = runtimeGatewayConfigSchema.safeParse(value);
+    if (!result.success)
+        throw new Error(`invalid ${label}`, { cause: result.error });
+    return result.data;
+}
+function isFileNotFoundError(error) {
+    return isNodeError(error) && error.code === 'ENOENT';
+}
+function isFileExistsError(error) {
+    return isNodeError(error) && error.code === 'EEXIST';
+}
+function isNodeError(error) {
+    return error instanceof Error && 'code' in error;
+}
+//# sourceMappingURL=config.js.map

package/dist/config/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAqB,MAAM,YAAY,CAAC;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAkB,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAoB,CAAC;AAG1D,MAAM,gBAAgB,GAAG,qGAAqG,CAAC;AAC/H,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE;KACpC,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;KACvF,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;AAE7C,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,0BAA0B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CAC1C,CAAC,CAAC;AAIH,MAAM,2BAA2B,GAAsB;IACrD,OAAO,EAAE,iBAAiB;IAC1B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,UAAU;CACxB,CAAC;AAkBF,MAAM,UAAU,oBAAoB,CAAC,QAA4B,EAAE;IACjE,MAAM,UAAU,GAAG,kBAAkB,CAAC;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,2BAA2B,CAAC,OAAO;QAC7D,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,2BAA2B,CAAC,IAAI;QACpD,WAAW,EAAE,KAAK,CAAC,SAAS,IAAI,2BAA2B,CAAC,WAAW;KACxE,EAAE,uBAAuB,CAAC,CAAC;IAC5B,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,OAAO;QACxB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACvE,SAAS,EAAE,UAAU,CAAC,WAAW;QACjC,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA4B,EAAE;IAC9D,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,2BAA2B,CAAC;IAC1F,MAAM,YAAY,GAAG,eAAe,CAAC;QACnC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO;QAC5C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI;QACnC,WAAW,EAAE,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC,WAAW;KACvD,EAAE,uBAAuB,CAAC,CAAC;IAC5B,OAAO,oBAAoB,CAAC;QAC1B,GAAG,KAAK;QACR,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,SAAS,EAAE,YAAY,CAAC,WAAW;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3C,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,aAAa,CACX,KAAK,CAAC,UAAU,EAChB,GAAG,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAC3D,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAC9C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC,UAAU,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA4C;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,iBAAiB;QAC5C,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAClB,OAAO,UAAU,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAY;IAC7D,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,gBAAgB,CAAC;IACjE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,UAAU,CAAC;IACtF,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa;IACpD,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa;IACvD,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/config/paths.js

@@ -0,0 +1,16 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export function resolveGatewayPaths(baseDir = homedir()) {
+    const stateDir = join(baseDir, '.agent-squad', 'gateway');
+    return {
+        stateDir,
+        configPath: join(stateDir, 'config.json'),
+        dbPath: join(stateDir, 'gateway.db'),
+        pidPath: join(stateDir, 'gateway.pid'),
+        logPath: join(stateDir, 'gateway.log'),
+        masterKeyPath: join(stateDir, 'master.key'),
+        adminSecretPath: join(stateDir, 'admin-secret'),
+        workspacesDir: join(stateDir, 'workspaces'),
+    };
+}
+//# sourceMappingURL=paths.js.map

package/dist/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAajC,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAAG,OAAO,EAAE;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAC1D,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QACzC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC;QACpC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QACtC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QACtC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC3C,eAAe,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC;QAC/C,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/control-plane/clients.js

@@ -0,0 +1,77 @@
+import { randomUUID } from 'node:crypto';
+function toClientRecord(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        status: row.status,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+export class ClientRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    create(name) {
+        const now = new Date().toISOString();
+        const client = {
+            id: `client_${randomUUID()}`,
+            name,
+            status: 'active',
+            createdAt: now,
+            updatedAt: now,
+        };
+        try {
+            this.db.prepare(`
+        INSERT INTO clients (id, name, status, created_at, updated_at)
+        VALUES (?, ?, ?, ?, ?)
+      `).run(client.id, client.name, client.status, client.createdAt, client.updatedAt);
+        }
+        catch (error) {
+            if (isUniqueNameError(error))
+                throw new Error('client_name_exists');
+            throw error;
+        }
+        return client;
+    }
+    list() {
+        return this.db.prepare(`
+      SELECT id, name, status, created_at, updated_at
+      FROM clients
+      ORDER BY created_at DESC, rowid DESC
+    `).all().map(toClientRecord);
+    }
+    setStatus(id, status) {
+        const result = this.db.prepare(`
+      UPDATE clients SET status = ?, updated_at = ? WHERE id = ?
+    `).run(status, new Date().toISOString(), id);
+        if (result.changes === 0)
+            throw new Error('client_not_found');
+    }
+    delete(id) {
+        const remove = this.db.transaction(() => {
+            const client = this.db.prepare('SELECT id FROM clients WHERE id = ?').get(id);
+            if (!client)
+                throw new Error('client_not_found');
+            const active = this.db.prepare(`
+        SELECT COUNT(*) AS count FROM runs
+        WHERE client_id = ? AND status IN ('queued', 'running')
+      `).get(id);
+            if ((active?.count ?? 0) > 0)
+                throw new Error('client_in_use');
+            this.db.prepare('UPDATE runs SET client_id = NULL WHERE client_id = ?').run(id);
+            const result = this.db.prepare('DELETE FROM clients WHERE id = ?').run(id);
+            if (result.changes !== 1)
+                throw new Error('client_not_found');
+        });
+        remove();
+    }
+}
+function isUniqueNameError(error) {
+    return typeof error === 'object'
+        && error !== null
+        && 'code' in error
+        && error.code === 'SQLITE_CONSTRAINT_UNIQUE';
+}
+//# sourceMappingURL=clients.js.map

package/dist/control-plane/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../src/control-plane/clients.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,SAAS,cAAc,CAAC,GAAc;IACpC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,EAAa;QAAb,OAAE,GAAF,EAAE,CAAW;IAAG,CAAC;IAE9C,MAAM,CAAC,IAAY;QACjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAiB;YAC3B,EAAE,EAAE,UAAU,UAAU,EAAE,EAAE;YAC5B,IAAI;YACJ,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;OAGf,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,iBAAiB,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAgB;;;;KAIrC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IAED,SAAS,CAAC,EAAU,EAAE,MAAoB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE9B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAE7C,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,EAAU;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,qCAAqC,CACtC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACV,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAA8B;;;OAG3D,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACX,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YAE/D,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,CAAC;IACX,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ;WAC3B,KAAK,KAAK,IAAI;WACd,MAAM,IAAI,KAAK;WACf,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC;AACjD,CAAC"}

package/dist/control-plane/core-connection.js

@@ -0,0 +1,54 @@
+import { parseCoreBaseUrl } from '../core-client/client.js';
+export class CoreConnectionRepository {
+    db;
+    now;
+    constructor(db, now = () => new Date()) {
+        this.db = db;
+        this.now = now;
+    }
+    get() {
+        const row = this.db.prepare(`
+      SELECT base_url, last_status, last_version, last_checked_at
+      FROM core_connection WHERE singleton = 1
+    `).get();
+        if (!row)
+            throw new Error('core_connection_missing');
+        return {
+            baseUrl: row.base_url,
+            status: asStatus(row.last_status),
+            version: row.last_version,
+            lastCheckedAt: row.last_checked_at,
+        };
+    }
+    update(baseUrl) {
+        const normalized = parseCoreBaseUrl(baseUrl);
+        const current = this.get();
+        if (current.baseUrl === normalized)
+            return current;
+        this.db.prepare(`
+      UPDATE core_connection
+      SET base_url = ?, last_status = NULL, last_version = NULL, last_checked_at = NULL
+      WHERE singleton = 1
+    `).run(normalized);
+        return this.get();
+    }
+    markHealth(health) {
+        const status = health === undefined
+            ? 'offline'
+            : health.ok && health.db_ok ? 'online' : 'degraded';
+        const checkedAt = toIso(this.now());
+        this.db.prepare(`
+      UPDATE core_connection
+      SET last_status = ?, last_version = COALESCE(?, last_version), last_checked_at = ?
+      WHERE singleton = 1
+    `).run(status, health?.version ?? null, checkedAt);
+        return this.get();
+    }
+}
+function asStatus(value) {
+    return value === 'online' || value === 'degraded' || value === 'offline' ? value : 'unknown';
+}
+function toIso(value) {
+    return typeof value === 'string' ? value : value.toISOString();
+}
+//# sourceMappingURL=core-connection.js.map

package/dist/control-plane/core-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-connection.js","sourceRoot":"","sources":["../../src/control-plane/core-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAoB5D,MAAM,OAAO,wBAAwB;IAEhB;IACA;IAFnB,YACmB,EAAa,EACb,MAA2B,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAD3C,OAAE,GAAF,EAAE,CAAW;QACb,QAAG,GAAH,GAAG,CAAwC;IAC3D,CAAC;IAEJ,GAAG;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAwB;;;KAGlD,CAAC,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACrD,OAAO;YACL,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC;YACjC,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,aAAa,EAAE,GAAG,CAAC,eAAe;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAIf,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAED,UAAU,CAAC,MAAmB;QAC5B,MAAM,MAAM,GAAyB,MAAM,KAAK,SAAS;YACvD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QACtD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAIf,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAoB;IACpC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED,SAAS,KAAK,CAAC,KAAoB;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC"}