@nexus-cortex/core 4.26.0

package/dist/middleware/permissions/BlacklistPolicy.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Blacklist Permission Policy
+ *
+ * Blocks specific tools from being executed. Any tool in the blacklist
+ * is denied without the option for approval.
+ *
+ * Priority: CRITICAL (100) - Evaluated first for security
+ *
+ * @module permissions/BlacklistPolicy
+ */
+import type { PermissionPolicy, PermissionDecision, PermissionContext } from '../contracts/MiddlewareContracts.js';
+import { BasePermissionPolicy } from './PermissionPolicy.js';
+/**
+ * Blacklist permission policy
+ *
+ * @example
+ * ```typescript
+ * const policy = new BlacklistPolicy(['delete_file', 'format_disk']);
+ *
+ * await policy.evaluate({
+ *   toolName: 'delete_file',
+ *   toolInput: {},
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: false, reason: '...', canApprove: false }
+ *
+ * await policy.evaluate({
+ *   toolName: 'read_file',
+ *   toolInput: {},
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: true }
+ * ```
+ */
+export declare class BlacklistPolicy extends BasePermissionPolicy implements PermissionPolicy {
+    private blockedTools;
+    /**
+     * Create a new blacklist policy
+     *
+     * @param blockedTools Array of tool names that are blocked
+     * @param priority Policy priority (default: PolicyPriority.CRITICAL)
+     * @param enabled Whether the policy is enabled (default: true)
+     */
+    constructor(blockedTools: string[], priority?: number, enabled?: boolean);
+    /**
+     * Evaluate if a tool is in the blacklist
+     */
+    evaluate(context: PermissionContext): Promise<PermissionDecision>;
+    /**
+     * Add a tool to the blacklist
+     */
+    addTool(toolName: string): void;
+    /**
+     * Remove a tool from the blacklist
+     */
+    removeTool(toolName: string): boolean;
+    /**
+     * Check if a tool is in the blacklist
+     */
+    hasTool(toolName: string): boolean;
+    /**
+     * Get all blacklisted tools
+     */
+    getBlockedTools(): string[];
+}
+//# sourceMappingURL=BlacklistPolicy.d.ts.map

package/dist/middleware/permissions/BlacklistPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BlacklistPolicy.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/BlacklistPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAkB,MAAM,uBAAuB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,eAAgB,SAAQ,oBAAqB,YAAW,gBAAgB;IACnF,OAAO,CAAC,YAAY,CAAc;IAElC;;;;;;OAMG;gBAED,YAAY,EAAE,MAAM,EAAE,EACtB,QAAQ,GAAE,MAAgC,EAC1C,OAAO,GAAE,OAAc;IAMzB;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAWvE;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIrC;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIlC;;OAEG;IACH,eAAe,IAAI,MAAM,EAAE;CAG5B"}

package/dist/middleware/permissions/BlacklistPolicy.js

@@ -0,0 +1,82 @@
+/**
+ * Blacklist Permission Policy
+ *
+ * Blocks specific tools from being executed. Any tool in the blacklist
+ * is denied without the option for approval.
+ *
+ * Priority: CRITICAL (100) - Evaluated first for security
+ *
+ * @module permissions/BlacklistPolicy
+ */
+import { BasePermissionPolicy, PolicyPriority } from './PermissionPolicy.js';
+/**
+ * Blacklist permission policy
+ *
+ * @example
+ * ```typescript
+ * const policy = new BlacklistPolicy(['delete_file', 'format_disk']);
+ *
+ * await policy.evaluate({
+ *   toolName: 'delete_file',
+ *   toolInput: {},
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: false, reason: '...', canApprove: false }
+ *
+ * await policy.evaluate({
+ *   toolName: 'read_file',
+ *   toolInput: {},
+ *   sessionId: '123',
+ *   timestamp: new Date()
+ * }); // Returns { allowed: true }
+ * ```
+ */
+export class BlacklistPolicy extends BasePermissionPolicy {
+    blockedTools;
+    /**
+     * Create a new blacklist policy
+     *
+     * @param blockedTools Array of tool names that are blocked
+     * @param priority Policy priority (default: PolicyPriority.CRITICAL)
+     * @param enabled Whether the policy is enabled (default: true)
+     */
+    constructor(blockedTools, priority = PolicyPriority.CRITICAL, enabled = true) {
+        super('blacklist', priority, enabled);
+        this.blockedTools = new Set(blockedTools);
+    }
+    /**
+     * Evaluate if a tool is in the blacklist
+     */
+    async evaluate(context) {
+        if (this.blockedTools.has(context.toolName)) {
+            return this.deny(`Tool "${context.toolName}" is blacklisted and cannot be executed`, false // Cannot approve - hard block
+            );
+        }
+        return this.allow();
+    }
+    /**
+     * Add a tool to the blacklist
+     */
+    addTool(toolName) {
+        this.blockedTools.add(toolName);
+    }
+    /**
+     * Remove a tool from the blacklist
+     */
+    removeTool(toolName) {
+        return this.blockedTools.delete(toolName);
+    }
+    /**
+     * Check if a tool is in the blacklist
+     */
+    hasTool(toolName) {
+        return this.blockedTools.has(toolName);
+    }
+    /**
+     * Get all blacklisted tools
+     */
+    getBlockedTools() {
+        return Array.from(this.blockedTools);
+    }
+}
+//# sourceMappingURL=BlacklistPolicy.js.map

package/dist/middleware/permissions/BlacklistPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BlacklistPolicy.js","sourceRoot":"","sources":["../../../src/middleware/permissions/BlacklistPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,eAAgB,SAAQ,oBAAoB;IAC/C,YAAY,CAAc;IAElC;;;;;;OAMG;IACH,YACE,YAAsB,EACtB,WAAmB,cAAc,CAAC,QAAQ,EAC1C,UAAmB,IAAI;QAEvB,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA0B;QACvC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,IAAI,CACd,SAAS,OAAO,CAAC,QAAQ,yCAAyC,EAClE,KAAK,CAAC,8BAA8B;aACrC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAgB;QACtB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,QAAgB;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/middleware/permissions/CLIApprovalHandler.d.ts

@@ -0,0 +1,124 @@
+/**
+ * CLI Approval Handler
+ *
+ * Interactive command-line approval handler that prompts the user
+ * for confirmation before executing potentially dangerous operations.
+ *
+ * @module permissions/CLIApprovalHandler
+ */
+import type { ApprovalHandler, ApprovalRequest } from '../contracts/MiddlewareContracts.js';
+/**
+ * Options for CLI approval handler
+ */
+export interface CLIApprovalHandlerOptions {
+    /**
+     * Timeout for approval requests (ms)
+     * @default 60000 (60 seconds)
+     */
+    timeoutMs?: number;
+    /**
+     * Whether to show detailed tool input
+     * @default true
+     */
+    showToolInput?: boolean;
+    /**
+     * Maximum length of tool input to display
+     * @default 500
+     */
+    maxInputDisplay?: number;
+    /**
+     * Callback to toggle auto-approve mode (for shift+tab functionality)
+     * When called, should toggle orchestrator.approvalMode.autoApproveActions
+     */
+    onToggleAutoApprove?: () => void;
+    /**
+     * Getter for current auto-approve status
+     * Returns orchestrator.approvalMode.autoApproveActions
+     */
+    getAutoApproveStatus?: () => boolean;
+    /**
+     * Callback invoked before showing approval dialog
+     * CLI can use this to pause any custom input handling (e.g., persistent input)
+     */
+    onBeforeApproval?: () => void;
+    /**
+     * Callback invoked after approval dialog is dismissed
+     * CLI can use this to resume any custom input handling
+     */
+    onAfterApproval?: () => void;
+    /**
+     * Callback to render a preview before showing the approval prompt
+     * Called with the approval request so CLI can render tool-specific previews
+     * (e.g., diff preview for Edit tool)
+     */
+    onRenderPreview?: (request: ApprovalRequest) => void;
+}
+/**
+ * CLI-based approval handler with interactive prompts
+ *
+ * @example
+ * ```typescript
+ * const handler = new CLIApprovalHandler({
+ *   timeoutMs: 60000,
+ *   showToolInput: true
+ * });
+ *
+ * const approved = await handler.requestApproval({
+ *   toolName: 'delete_file',
+ *   toolInput: { file_path: '/workspace/file.txt' },
+ *   reason: 'Delete operation requires approval',
+ *   timestamp: new Date()
+ * });
+ * ```
+ */
+export declare class CLIApprovalHandler implements ApprovalHandler {
+    private options;
+    private onToggleAutoApprove?;
+    private getAutoApproveStatus?;
+    private onBeforeApproval?;
+    private onAfterApproval?;
+    private onRenderPreview?;
+    constructor(options?: CLIApprovalHandlerOptions);
+    /**
+     * Set the approval mode toggle callback (called after orchestrator is created)
+     */
+    setApprovalModeCallbacks(callbacks: {
+        onToggle: () => void;
+        getStatus: () => boolean;
+    }): void;
+    /**
+     * Set pause/resume callbacks for custom input handling (e.g., persistent input)
+     */
+    setInputHandlerCallbacks(callbacks: {
+        onBeforeApproval: () => void;
+        onAfterApproval: () => void;
+    }): void;
+    /**
+     * Set preview renderer callback (called before approval prompt to show tool-specific previews)
+     */
+    setPreviewRenderer(renderer: (request: ApprovalRequest) => void): void;
+    /**
+     * Request approval for a tool operation
+     */
+    requestApproval(request: ApprovalRequest, signal?: AbortSignal): Promise<boolean>;
+    /**
+     * Clear the approval prompt from the terminal
+     */
+    private clearPrompt;
+    /**
+     * Extract file name from tool input
+     */
+    private extractFileName;
+    private static readonly OPTION_LABELS;
+    private static readonly OPTION_RESPONSES;
+    /**
+     * Redraw the 3 option lines in-place (cursor stays on option area).
+     * Moves up 3 lines, redraws each, then positions cursor at the end.
+     */
+    private redrawOptions;
+    /**
+     * Prompt user for multi-choice selection with arrow key navigation.
+     */
+    private promptMultiChoice;
+}
+//# sourceMappingURL=CLIApprovalHandler.d.ts.map

package/dist/middleware/permissions/CLIApprovalHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CLIApprovalHandler.d.ts","sourceRoot":"","sources":["../../../src/middleware/permissions/CLIApprovalHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE5F;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAC;IAEjC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC;IAErC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAE9B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAE7B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAC;CACtD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,kBAAmB,YAAW,eAAe;IACxD,OAAO,CAAC,OAAO,CAAyJ;IACxK,OAAO,CAAC,mBAAmB,CAAC,CAAa;IACzC,OAAO,CAAC,oBAAoB,CAAC,CAAgB;IAC7C,OAAO,CAAC,gBAAgB,CAAC,CAAa;IACtC,OAAO,CAAC,eAAe,CAAC,CAAa;IACrC,OAAO,CAAC,eAAe,CAAC,CAAqC;gBAEjD,OAAO,GAAE,yBAA8B;IAanD;;OAEG;IACH,wBAAwB,CAAC,SAAS,EAAE;QAClC,QAAQ,EAAE,MAAM,IAAI,CAAC;QACrB,SAAS,EAAE,MAAM,OAAO,CAAC;KAC1B,GAAG,IAAI;IAKR;;OAEG;IACH,wBAAwB,CAAC,SAAS,EAAE;QAClC,gBAAgB,EAAE,MAAM,IAAI,CAAC;QAC7B,eAAe,EAAE,MAAM,IAAI,CAAC;KAC7B,GAAG,IAAI;IAKR;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,GAAG,IAAI;IAItE;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAwGvF;;OAEG;IACH,OAAO,CAAC,WAAW;IAanB;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAInC;IAEF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IAE3D;;;OAGG;IACH,OAAO,CAAC,aAAa;IAYrB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAiK1B"}

package/dist/middleware/permissions/CLIApprovalHandler.js

@@ -0,0 +1,366 @@
+/**
+ * CLI Approval Handler
+ *
+ * Interactive command-line approval handler that prompts the user
+ * for confirmation before executing potentially dangerous operations.
+ *
+ * @module permissions/CLIApprovalHandler
+ */
+/**
+ * CLI-based approval handler with interactive prompts
+ *
+ * @example
+ * ```typescript
+ * const handler = new CLIApprovalHandler({
+ *   timeoutMs: 60000,
+ *   showToolInput: true
+ * });
+ *
+ * const approved = await handler.requestApproval({
+ *   toolName: 'delete_file',
+ *   toolInput: { file_path: '/workspace/file.txt' },
+ *   reason: 'Delete operation requires approval',
+ *   timestamp: new Date()
+ * });
+ * ```
+ */
+export class CLIApprovalHandler {
+    options;
+    onToggleAutoApprove;
+    getAutoApproveStatus;
+    onBeforeApproval;
+    onAfterApproval;
+    onRenderPreview;
+    constructor(options = {}) {
+        this.options = {
+            timeoutMs: options.timeoutMs ?? 0, // No timeout by default - wait indefinitely
+            showToolInput: options.showToolInput ?? true,
+            maxInputDisplay: options.maxInputDisplay ?? 500,
+        };
+        this.onToggleAutoApprove = options.onToggleAutoApprove;
+        this.getAutoApproveStatus = options.getAutoApproveStatus;
+        this.onBeforeApproval = options.onBeforeApproval;
+        this.onAfterApproval = options.onAfterApproval;
+        this.onRenderPreview = options.onRenderPreview;
+    }
+    /**
+     * Set the approval mode toggle callback (called after orchestrator is created)
+     */
+    setApprovalModeCallbacks(callbacks) {
+        this.onToggleAutoApprove = callbacks.onToggle;
+        this.getAutoApproveStatus = callbacks.getStatus;
+    }
+    /**
+     * Set pause/resume callbacks for custom input handling (e.g., persistent input)
+     */
+    setInputHandlerCallbacks(callbacks) {
+        this.onBeforeApproval = callbacks.onBeforeApproval;
+        this.onAfterApproval = callbacks.onAfterApproval;
+    }
+    /**
+     * Set preview renderer callback (called before approval prompt to show tool-specific previews)
+     */
+    setPreviewRenderer(renderer) {
+        this.onRenderPreview = renderer;
+    }
+    /**
+     * Request approval for a tool operation
+     */
+    async requestApproval(request, signal) {
+        // FAIL-FAST: Headless mode (no TTY) cannot prompt for interactive approval.
+        // Without this check, promptMultiChoice() waits on stdin forever, which
+        // causes tool-execution timeout to fire (at TOOL_TIMEOUT_MS) but the
+        // abort signal isn't honored — the whole session hangs.
+        // Users running headlessly should set YOLO=true / --yolo to use AutoApproveHandler instead.
+        if (typeof process !== 'undefined' && process.stdin && !process.stdin.isTTY) {
+            console.warn(`[CLIApprovalHandler] Headless mode detected (no TTY). Cannot prompt interactively for "${request.toolName}". ` +
+                `Denying request. To run non-interactively, set YOLO=true env var or pass --yolo flag to enable auto-approval.`);
+            return false;
+        }
+        // Short-circuit if already aborted (e.g., tool timeout fired before we got here)
+        if (signal?.aborted) {
+            console.warn(`[CLIApprovalHandler] Request already aborted for "${request.toolName}" — denying.`);
+            return false;
+        }
+        // Pause any custom input handling (e.g., persistent input) before showing dialog
+        if (this.onBeforeApproval) {
+            this.onBeforeApproval();
+        }
+        try {
+            // Render tool-specific preview (e.g., diff for Edit tool) before approval prompt
+            if (this.onRenderPreview) {
+                this.onRenderPreview(request);
+            }
+            // Format the file name/path for display
+            const fileName = this.extractFileName(request.toolInput);
+            const actionVerb = request.toolName === 'Write' ? 'create'
+                : request.toolName === 'Edit' ? 'make this edit to'
+                    : request.toolName === 'Read' ? 'read'
+                        : request.toolName === 'Bash' ? 'run'
+                            : `execute ${request.toolName} on`;
+            // Check current auto-approve status
+            const currentAutoApprove = this.getAutoApproveStatus ? this.getAutoApproveStatus() : false;
+            const statusHint = currentAutoApprove ? ' (auto-approve: ON)' : '';
+            // Show prompt — initial render with cursor on option 1
+            console.log(`\n Do you want to ${actionVerb} ${fileName}?${statusHint}`);
+            console.log(` > 1. Yes`);
+            console.log(` 2. Yes, auto-approve all actions this session (shift+tab to toggle)`);
+            console.log(` 3. No, skip this operation (esc)`);
+            try {
+                if (process.env.DEBUG === 'true') {
+                    console.log(`[Approval] Awaiting promptMultiChoice (timeoutMs=${this.options.timeoutMs}, signal.aborted=${signal?.aborted})`);
+                    console.log(`[Approval] stdin: isTTY=${process.stdin.isTTY}, isRaw=${process.stdin.isRaw}, isPaused=${process.stdin.isPaused()}, listenerCount=${process.stdin.listenerCount('data')}`);
+                }
+                const response = await this.promptMultiChoice(this.options.timeoutMs, signal);
+                if (process.env.DEBUG === 'true') {
+                    console.log(`[Approval] Got response: ${JSON.stringify(response)}`);
+                }
+                // Clear the prompt (5 lines: empty line + question + 3 options)
+                this.clearPrompt(5);
+                switch (response) {
+                    case '1':
+                        console.log('[OK] Operation approved');
+                        return true;
+                    case '2':
+                    case 'toggle':
+                        if (this.onToggleAutoApprove) {
+                            this.onToggleAutoApprove();
+                            const newStatus = this.getAutoApproveStatus ? this.getAutoApproveStatus() : false;
+                            console.log(`[OK] Operation approved (auto-approve: ${newStatus ? 'ON' : 'OFF'})`);
+                        }
+                        else {
+                            console.log('[OK] Operation approved');
+                        }
+                        return true;
+                    case '3':
+                    case 'esc':
+                        console.log('[--] Operation skipped');
+                        return false;
+                    default:
+                        console.log('[--] Invalid response, operation skipped');
+                        return false;
+                }
+            }
+            catch (error) {
+                this.clearPrompt(5);
+                if (process.env.DEBUG === 'true') {
+                    console.log(`[Approval] CATCH: ${error.message}`);
+                }
+                console.log(`[WARN] Approval failed: ${error.message}`);
+                return false;
+            }
+        }
+        finally {
+            // Resume custom input handling after dialog is dismissed
+            if (this.onAfterApproval) {
+                this.onAfterApproval();
+            }
+        }
+    }
+    /**
+     * Clear the approval prompt from the terminal
+     */
+    clearPrompt(lines) {
+        // Clear current line first
+        process.stdout.write('\x1b[2K'); // Clear entire line
+        process.stdout.write('\x1b[0G'); // Move cursor to beginning
+        // Move cursor up and clear each previous line
+        for (let i = 0; i < lines; i++) {
+            process.stdout.write('\x1b[A'); // Move cursor up
+            process.stdout.write('\x1b[2K'); // Clear entire line
+            process.stdout.write('\x1b[0G'); // Move cursor to beginning
+        }
+    }
+    /**
+     * Extract file name from tool input
+     */
+    extractFileName(toolInput) {
+        if (toolInput?.file_path) {
+            const parts = toolInput.file_path.split('/');
+            return parts[parts.length - 1] || toolInput.file_path;
+        }
+        return 'file';
+    }
+    static OPTION_LABELS = [
+        '1. Yes',
+        '2. Yes, auto-approve all actions this session (shift+tab to toggle)',
+        '3. No, skip this operation (esc)',
+    ];
+    static OPTION_RESPONSES = ['1', '2', '3'];
+    /**
+     * Redraw the 3 option lines in-place (cursor stays on option area).
+     * Moves up 3 lines, redraws each, then positions cursor at the end.
+     */
+    redrawOptions(selectedIndex) {
+        // Move cursor up 3 lines (we're below the options)
+        process.stdout.write('\x1b[3A');
+        for (let i = 0; i < 3; i++) {
+            process.stdout.write('\x1b[2K\x1b[0G'); // clear line, cursor to col 0
+            const prefix = i === selectedIndex ? ' > ' : ' ';
+            process.stdout.write(`${prefix}${CLIApprovalHandler.OPTION_LABELS[i]}`);
+            if (i < 2)
+                process.stdout.write('\n');
+        }
+        process.stdout.write('\n'); // move below options
+    }
+    /**
+     * Prompt user for multi-choice selection with arrow key navigation.
+     */
+    promptMultiChoice(timeoutMs, signal) {
+        return new Promise((resolve, reject) => {
+            const wasRaw = process.stdin.isRaw;
+            const wasPaused = process.stdin.isPaused();
+            const existingListeners = process.stdin.listeners('data');
+            existingListeners.forEach(listener => {
+                process.stdin.removeListener('data', listener);
+            });
+            let selectedIndex = 0;
+            let timeout = null;
+            if (timeoutMs > 0) {
+                timeout = setTimeout(() => {
+                    cleanup();
+                    reject(new Error('Timeout'));
+                }, timeoutMs);
+            }
+            const onAbort = () => {
+                cleanup();
+                reject(new Error('Aborted'));
+            };
+            if (signal) {
+                if (signal.aborted) {
+                    queueMicrotask(() => { cleanup(); reject(new Error('Aborted')); });
+                    return;
+                }
+                signal.addEventListener('abort', onAbort, { once: true });
+            }
+            const cleanup = () => {
+                if (timeout)
+                    clearTimeout(timeout);
+                if (escTimer) {
+                    clearTimeout(escTimer);
+                    escTimer = null;
+                }
+                if (signal)
+                    signal.removeEventListener('abort', onAbort);
+                process.stdin.removeListener('data', onData);
+                if (process.stdin.setRawMode) {
+                    process.stdin.setRawMode(wasRaw || false);
+                }
+                existingListeners.forEach(listener => {
+                    process.stdin.on('data', listener);
+                });
+                if (wasPaused) {
+                    process.stdin.pause();
+                }
+                else {
+                    process.stdin.resume();
+                }
+            };
+            let escTimer = null;
+            const onData = (data) => {
+                const char = data.toString();
+                if (process.env.DEBUG === 'true') {
+                    const hex = data.toString('hex');
+                    console.log(`[Approval:onData] hex=${hex} len=${data.length} char=${JSON.stringify(char)}`);
+                }
+                // Shift+Tab — toggle auto-approve
+                if (char === '\x1b[Z') {
+                    if (escTimer) {
+                        clearTimeout(escTimer);
+                        escTimer = null;
+                    }
+                    cleanup();
+                    resolve('toggle');
+                    return;
+                }
+                // Arrow keys arrive as \x1b[A (up) / \x1b[B (down) — 3-byte sequence
+                if (char === '\x1b[A') {
+                    if (escTimer) {
+                        clearTimeout(escTimer);
+                        escTimer = null;
+                    }
+                    if (selectedIndex > 0) {
+                        selectedIndex--;
+                        this.redrawOptions(selectedIndex);
+                    }
+                    return;
+                }
+                if (char === '\x1b[B') {
+                    if (escTimer) {
+                        clearTimeout(escTimer);
+                        escTimer = null;
+                    }
+                    if (selectedIndex < 2) {
+                        selectedIndex++;
+                        this.redrawOptions(selectedIndex);
+                    }
+                    return;
+                }
+                // Bare ESC — defer to distinguish from multi-byte sequences
+                if (char === '\x1b' && data.length === 1) {
+                    if (escTimer)
+                        clearTimeout(escTimer);
+                    escTimer = setTimeout(() => {
+                        escTimer = null;
+                        cleanup();
+                        resolve('esc');
+                    }, 80);
+                    return;
+                }
+                // Tail of a split escape sequence (e.g. "[A" after bare \x1b)
+                if (escTimer) {
+                    clearTimeout(escTimer);
+                    escTimer = null;
+                    const seq = '\x1b' + char;
+                    if (seq === '\x1b[A' && selectedIndex > 0) {
+                        selectedIndex--;
+                        this.redrawOptions(selectedIndex);
+                    }
+                    else if (seq === '\x1b[B' && selectedIndex < 2) {
+                        selectedIndex++;
+                        this.redrawOptions(selectedIndex);
+                    }
+                    else if (seq === '\x1b[Z') {
+                        cleanup();
+                        resolve('toggle');
+                    }
+                    return;
+                }
+                // Direct number keys (no Enter required)
+                if (char === '1' || char === '2' || char === '3') {
+                    cleanup();
+                    resolve(char);
+                    return;
+                }
+                // Enter — confirm currently selected option
+                if (char === '\r' || char === '\n') {
+                    cleanup();
+                    resolve(CLIApprovalHandler.OPTION_RESPONSES[selectedIndex] ?? '1');
+                    return;
+                }
+                // Ctrl+C
+                if (char === '\x03') {
+                    cleanup();
+                    process.exit(0);
+                }
+                // y/n shortcuts
+                if (char === 'y' || char === 'Y') {
+                    cleanup();
+                    resolve('1');
+                    return;
+                }
+                if (char === 'n' || char === 'N') {
+                    cleanup();
+                    resolve('3');
+                    return;
+                }
+            };
+            if (process.stdin.setRawMode) {
+                process.stdin.setRawMode(true);
+            }
+            process.stdin.resume();
+            process.stdin.on('data', onData);
+        });
+    }
+}
+//# sourceMappingURL=CLIApprovalHandler.js.map

package/dist/middleware/permissions/CLIApprovalHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CLIApprovalHandler.js","sourceRoot":"","sources":["../../../src/middleware/permissions/CLIApprovalHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0DH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,kBAAkB;IACrB,OAAO,CAAyJ;IAChK,mBAAmB,CAAc;IACjC,oBAAoB,CAAiB;IACrC,gBAAgB,CAAc;IAC9B,eAAe,CAAc;IAC7B,eAAe,CAAsC;IAE7D,YAAY,UAAqC,EAAE;QACjD,IAAI,CAAC,OAAO,GAAG;YACb,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,CAAC,EAAE,4CAA4C;YAC/E,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,GAAG;SAChD,CAAC;QACF,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACvD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACzD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,wBAAwB,CAAC,SAGxB;QACC,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC9C,IAAI,CAAC,oBAAoB,GAAG,SAAS,CAAC,SAAS,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,wBAAwB,CAAC,SAGxB;QACC,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,CAAC;QACnD,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC,eAAe,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,QAA4C;QAC7D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAAwB,EAAE,MAAoB;QAClE,4EAA4E;QAC5E,wEAAwE;QACxE,qEAAqE;QACrE,wDAAwD;QACxD,4FAA4F;QAC5F,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5E,OAAO,CAAC,IAAI,CACV,0FAA0F,OAAO,CAAC,QAAQ,KAAK;gBAC/G,+GAA+G,CAChH,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iFAAiF;QACjF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,qDAAqD,OAAO,CAAC,QAAQ,cAAc,CAAC,CAAC;YAClG,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iFAAiF;QACjF,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,iFAAiF;YACjF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;YAED,wCAAwC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ;gBACxD,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,mBAAmB;oBACnD,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM;wBACtC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK;4BACrC,CAAC,CAAC,WAAW,OAAO,CAAC,QAAQ,KAAK,CAAC;YAErC,oCAAoC;YACpC,MAAM,kBAAkB,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3F,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;YAEnE,uDAAuD;YACvD,OAAO,CAAC,GAAG,CAAC,qBAAqB,UAAU,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YAEjD,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;oBACjC,OAAO,CAAC,GAAG,CAAC,oDAAoD,IAAI,CAAC,OAAO,CAAC,SAAS,oBAAoB,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC;oBAC9H,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,OAAO,CAAC,KAAK,CAAC,KAAK,cAAc,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,mBAAmB,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1L,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAE9E,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;oBACjC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACtE,CAAC;gBAED,gEAAgE;gBAChE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBAEpB,QAAQ,QAAQ,EAAE,CAAC;oBACjB,KAAK,GAAG;wBACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;wBACvC,OAAO,IAAI,CAAC;oBAEd,KAAK,GAAG,CAAC;oBACT,KAAK,QAAQ;wBACX,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;4BAC7B,IAAI,CAAC,mBAAmB,EAAE,CAAC;4BAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;4BAClF,OAAO,CAAC,GAAG,CAAC,0CAA0C,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;wBACrF,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;wBACzC,CAAC;wBACD,OAAO,IAAI,CAAC;oBAEd,KAAK,GAAG,CAAC;oBACT,KAAK,KAAK;wBACR,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;wBACtC,OAAO,KAAK,CAAC;oBAEf;wBACE,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;wBACxD,OAAO,KAAK,CAAC;gBACjB,CAAC;YACH,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBACpB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;oBACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,yDAAyD;YACzD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,KAAa;QAC/B,2BAA2B;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;QACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B;QAE5D,8CAA8C;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B;QAC9D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,SAAc;QACpC,IAAI,SAAS,EAAE,SAAS,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,MAAM,CAAU,aAAa,GAAG;QACtC,QAAQ;QACR,qEAAqE;QACrE,kCAAkC;KACnC,CAAC;IAEM,MAAM,CAAU,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAE3D;;;OAGG;IACK,aAAa,CAAC,aAAqB;QACzC,mDAAmD;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,8BAA8B;YACtE,MAAM,MAAM,GAAG,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB;IACnD,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,SAAiB,EAAE,MAAoB;QAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YACnC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAE3C,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAoC,CAAC;YAC7F,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;gBACnC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YAEH,IAAI,aAAa,GAAG,CAAC,CAAC;YAEtB,IAAI,OAAO,GAA0B,IAAI,CAAC;YAC1C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBACxB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC/B,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,cAAc,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,OAAO;oBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,QAAQ,EAAE,CAAC;oBAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,CAAC;gBAC1D,IAAI,MAAM;oBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAEzD,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAE7C,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC7B,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;gBAC5C,CAAC;gBAED,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;oBACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACrC,CAAC,CAAC,CAAC;gBAEH,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACxB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,QAAQ,GAAyC,IAAI,CAAC;YAE1D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;gBAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAE7B,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;oBACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,QAAQ,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9F,CAAC;gBAED,kCAAkC;gBAClC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,IAAI,QAAQ,EAAE,CAAC;wBAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;wBAAC,QAAQ,GAAG,IAAI,CAAC;oBAAC,CAAC;oBAC1D,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAClB,OAAO;gBACT,CAAC;gBAED,qEAAqE;gBACrE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,IAAI,QAAQ,EAAE,CAAC;wBAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;wBAAC,QAAQ,GAAG,IAAI,CAAC;oBAAC,CAAC;oBAC1D,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;wBACtB,aAAa,EAAE,CAAC;wBAChB,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;oBACpC,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,IAAI,QAAQ,EAAE,CAAC;wBAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;wBAAC,QAAQ,GAAG,IAAI,CAAC;oBAAC,CAAC;oBAC1D,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;wBACtB,aAAa,EAAE,CAAC;wBAChB,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;oBACpC,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,4DAA4D;gBAC5D,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzC,IAAI,QAAQ;wBAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;oBACrC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;wBACzB,QAAQ,GAAG,IAAI,CAAC;wBAChB,OAAO,EAAE,CAAC;wBACV,OAAO,CAAC,KAAK,CAAC,CAAC;oBACjB,CAAC,EAAE,EAAE,CAAC,CAAC;oBACP,OAAO;gBACT,CAAC;gBAED,8DAA8D;gBAC9D,IAAI,QAAQ,EAAE,CAAC;oBACb,YAAY,CAAC,QAAQ,CAAC,CAAC;oBACvB,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC;oBAC1B,IAAI,GAAG,KAAK,QAAQ,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;wBAC1C,aAAa,EAAE,CAAC;wBAChB,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;oBACpC,CAAC;yBAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;wBACjD,aAAa,EAAE,CAAC;wBAChB,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;oBACpC,CAAC;yBAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;wBAC5B,OAAO,EAAE,CAAC;wBACV,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACpB,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,yCAAyC;gBACzC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACjD,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBAED,4CAA4C;gBAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnC,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;gBAED,SAAS;gBACT,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpB,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBAED,gBAAgB;gBAChB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACjC,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACjC,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,CAAC;oBACb,OAAO;gBACT,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC"}