@provos/ironcurtain 0.4.1 → 0.5.0

package/dist/escalation/listener-command.js

@@ -0,0 +1,407 @@
+/**
+ * Escalation listener CLI command.
+ *
+ * Polls the PTY session registry directory for active sessions, watches
+ * each session's escalation directory for new requests, and presents
+ * a terminal dashboard where the user can approve or deny escalations.
+ *
+ * Usage: ironcurtain escalation-listener
+ */
+import { createInterface } from 'node:readline';
+import { existsSync, mkdirSync, writeSync, readFileSync, unlinkSync, openSync, closeSync, constants } from 'node:fs';
+import chalk from 'chalk';
+import { getPtyRegistryDir, getListenerLockPath } from '../config/paths.js';
+import { readActiveRegistrations } from './session-registry.js';
+import { createEscalationWatcher } from './escalation-watcher.js';
+import { createInitialState, addSession, removeSession, addEscalation, resolveEscalation, expireEscalation, } from './listener-state.js';
+/** Poll interval for the session registry directory (ms). */
+const REGISTRY_POLL_INTERVAL_MS = 1000;
+export async function main() {
+    // Single-instance enforcement
+    const lockPath = getListenerLockPath();
+    if (!acquireLock(lockPath)) {
+        process.stderr.write(chalk.red('Another escalation listener is already running.\n'));
+        process.exit(1);
+    }
+    const registryDir = getPtyRegistryDir();
+    mkdirSync(registryDir, { recursive: true, mode: 0o700 });
+    let state = createInitialState();
+    let running = true;
+    let lastRenderedContent = '';
+    // Set up readline for command input
+    const rl = createInterface({
+        input: process.stdin,
+        output: process.stderr,
+        terminal: true,
+    });
+    /**
+     * Renders the dashboard only if the content has actually changed.
+     * Uses cursor repositioning (move to home) instead of screen clear
+     * to avoid destroying readline's input buffer.
+     */
+    const render = () => {
+        const content = buildDashboard(state);
+        if (content === lastRenderedContent)
+            return;
+        lastRenderedContent = content;
+        // Move cursor to home position, write content with per-line clearing,
+        // then clear any remaining lines below. The per-line \x1b[K (clear to
+        // end of line) is needed because shorter new lines would otherwise leave
+        // leftover characters from the previous (longer) dashboard render.
+        process.stderr.write('\x1b[H\x1b[K' + content.replace(/\n/g, '\x1b[K\n') + '\x1b[J');
+        // Force readline to redisplay its prompt + current input buffer
+        rl.prompt(true);
+    };
+    // Poll for new/removed sessions
+    const registryPollInterval = setInterval(() => {
+        const registrations = readActiveRegistrations(registryDir);
+        const currentIds = new Set(registrations.map((r) => r.sessionId));
+        const stateIds = new Set(state.sessions.keys());
+        let changed = false;
+        // Add new sessions
+        for (const reg of registrations) {
+            if (!stateIds.has(reg.sessionId)) {
+                const watcher = createWatcherForSession(reg, (newState) => {
+                    state = newState;
+                    render();
+                }, () => state);
+                state = addSession(state, reg, watcher);
+                watcher.start();
+                changed = true;
+            }
+        }
+        // Remove gone sessions
+        for (const id of stateIds) {
+            if (!currentIds.has(id)) {
+                const session = state.sessions.get(id);
+                session?.watcher.stop();
+                state = removeSession(state, id);
+                changed = true;
+            }
+        }
+        if (changed)
+            render();
+    }, REGISTRY_POLL_INTERVAL_MS);
+    // Initial render: clear screen once, then use repositioning from now on
+    rl.setPrompt('  > ');
+    process.stderr.write('\x1b[2J');
+    render();
+    // Handle commands
+    rl.on('line', (line) => {
+        const trimmed = line.trim();
+        if (!trimmed) {
+            render();
+            return;
+        }
+        const result = handleCommand(trimmed, state);
+        state = result.state;
+        if (result.quit) {
+            if (result.message) {
+                process.stderr.write(result.message + '\n');
+            }
+            running = false;
+            rl.close();
+            return;
+        }
+        // Force a re-render by invalidating the cache
+        lastRenderedContent = '';
+        if (result.message) {
+            // Render first so the message appears below the dashboard
+            render();
+            process.stderr.write(result.message + '\n');
+            rl.prompt(true);
+        }
+        else {
+            render();
+        }
+    });
+    rl.on('close', () => {
+        running = false;
+    });
+    // Wait until quit
+    await new Promise((resolve) => {
+        const checkInterval = setInterval(() => {
+            if (!running) {
+                clearInterval(checkInterval);
+                resolve();
+            }
+        }, 100);
+    });
+    // Cleanup
+    clearInterval(registryPollInterval);
+    for (const session of state.sessions.values()) {
+        session.watcher.stop();
+    }
+    releaseLock(lockPath);
+}
+// --- Lock management ---
+/**
+ * Acquires the listener lock file using O_EXCL for atomicity.
+ * Returns true if the lock was acquired, false if another instance holds it.
+ */
+function acquireLock(lockPath) {
+    if (existsSync(lockPath)) {
+        // Check if the PID in the lock file is still alive
+        try {
+            const content = readFileSync(lockPath, 'utf-8');
+            const pid = parseInt(content.trim(), 10);
+            if (!isNaN(pid) && isPidAlive(pid)) {
+                return false; // Another instance is running
+            }
+            // Stale lock -- remove and try again
+            unlinkSync(lockPath);
+        }
+        catch {
+            // If we can't read the lock, try to recreate it
+            try {
+                unlinkSync(lockPath);
+            }
+            catch {
+                return false;
+            }
+        }
+    }
+    try {
+        const fd = openSync(lockPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 0o600);
+        const content = Buffer.from(String(process.pid));
+        writeSync(fd, content);
+        closeSync(fd);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function releaseLock(lockPath) {
+    try {
+        unlinkSync(lockPath);
+    }
+    catch {
+        /* best effort */
+    }
+}
+function isPidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// --- Watcher creation ---
+function createWatcherForSession(registration, onStateChange, getState) {
+    return createEscalationWatcher(registration.escalationDir, {
+        onEscalation: (request) => {
+            const newState = addEscalation(getState(), registration.sessionId, request);
+            onStateChange(newState);
+            // BEL character alerts the user
+            process.stderr.write('\x07');
+        },
+        onEscalationExpired: (escalationId) => {
+            const newState = expireEscalation(getState(), registration.sessionId, escalationId);
+            onStateChange(newState);
+        },
+    }, { pollIntervalMs: 300 });
+}
+function handleCommand(input, state) {
+    const parts = input.split(/\s+/);
+    const command = parts[0].toLowerCase();
+    switch (command) {
+        case '/approve': {
+            const arg = parts[1];
+            if (!arg)
+                return { state, message: chalk.yellow('Usage: /approve <number> or /approve all') };
+            if (arg === 'all') {
+                return approveOrDenyAll(state, 'approved');
+            }
+            const num = parseInt(arg, 10);
+            if (isNaN(num))
+                return { state, message: chalk.yellow('Invalid escalation number') };
+            return approveOrDeny(state, num, 'approved');
+        }
+        case '/deny': {
+            const arg = parts[1];
+            if (!arg)
+                return { state, message: chalk.yellow('Usage: /deny <number> or /deny all') };
+            if (arg === 'all') {
+                return approveOrDenyAll(state, 'denied');
+            }
+            const num = parseInt(arg, 10);
+            if (isNaN(num))
+                return { state, message: chalk.yellow('Invalid escalation number') };
+            return approveOrDeny(state, num, 'denied');
+        }
+        case '/sessions':
+            return { state, message: formatSessionDetails(state) };
+        case '/quit':
+        case '/q':
+            return { state, quit: true };
+        default:
+            return {
+                state,
+                message: chalk.yellow('Unknown command. Available: /approve <N>, /deny <N>, /approve all, /deny all, /sessions, /quit'),
+            };
+    }
+}
+function approveOrDeny(state, displayNumber, decision) {
+    const escalation = state.pendingEscalations.get(displayNumber);
+    if (!escalation) {
+        return { state, message: chalk.yellow(`No pending escalation #${displayNumber}`) };
+    }
+    const session = state.sessions.get(escalation.sessionId);
+    if (!session) {
+        return { state, message: chalk.yellow(`Session for escalation #${displayNumber} no longer active`) };
+    }
+    try {
+        const accepted = session.watcher.resolve(escalation.request.escalationId, decision);
+        const newState = resolveEscalation(state, displayNumber, decision);
+        if (!accepted) {
+            return {
+                state: newState,
+                message: chalk.yellow(`Escalation #${displayNumber} expired (response was too late)`),
+            };
+        }
+        const label = decision === 'approved' ? chalk.green('APPROVED') : chalk.red('DENIED');
+        return {
+            state: newState,
+            message: `Escalation #${displayNumber} ${label}`,
+        };
+    }
+    catch (err) {
+        return { state, message: chalk.red(`Error: ${err instanceof Error ? err.message : String(err)}`) };
+    }
+}
+function approveOrDenyAll(state, decision) {
+    if (state.pendingEscalations.size === 0) {
+        return { state, message: chalk.yellow('No pending escalations') };
+    }
+    let currentState = state;
+    const messages = [];
+    const nums = [...state.pendingEscalations.keys()].sort((a, b) => a - b);
+    for (const num of nums) {
+        const result = approveOrDeny(currentState, num, decision);
+        currentState = result.state;
+        if (result.message)
+            messages.push(result.message);
+    }
+    return { state: currentState, message: messages.join('\n') };
+}
+function formatSessionDetails(state) {
+    if (state.sessions.size === 0) {
+        return chalk.dim('No active sessions');
+    }
+    const lines = [];
+    for (const session of state.sessions.values()) {
+        const reg = session.registration;
+        const ago = formatTimeAgo(new Date(reg.startedAt));
+        lines.push(`  [${session.displayNumber}] ${reg.sessionId.substring(0, 8)}  ${reg.label}  ${chalk.dim(ago)}`);
+    }
+    return lines.join('\n');
+}
+// --- Rendering ---
+/**
+ * Builds the dashboard content as a string.
+ * Pure function — no side effects. The caller handles writing to the terminal
+ * and coordinating with readline's prompt.
+ */
+function buildDashboard(state) {
+    const lines = [];
+    const sessionCount = state.sessions.size;
+    const pendingCount = state.pendingEscalations.size;
+    // Header
+    lines.push(chalk.bold.cyan('  IronCurtain Escalation Listener') +
+        chalk.dim(`              ${sessionCount} session${sessionCount !== 1 ? 's' : ''} active`));
+    lines.push(chalk.dim('  ' + '\u2500'.repeat(60)));
+    // Active Sessions
+    lines.push('');
+    lines.push(chalk.bold('  Active Sessions:'));
+    if (sessionCount === 0) {
+        lines.push(chalk.dim('    Waiting for PTY sessions...'));
+    }
+    else {
+        for (const session of state.sessions.values()) {
+            const reg = session.registration;
+            const ago = formatTimeAgo(new Date(reg.startedAt));
+            const sessionPending = countPendingForSession(state, reg.sessionId);
+            const pendingLabel = sessionPending > 0 ? chalk.yellow(` ${sessionPending} pending`) : chalk.dim(' 0 pending');
+            lines.push(`    [${chalk.bold(String(session.displayNumber))}] ` +
+                `${reg.sessionId.substring(0, 8)}  ` +
+                `${reg.label.substring(0, 40)}  ` +
+                chalk.dim(ago) +
+                pendingLabel);
+        }
+    }
+    // Pending Escalations
+    lines.push('');
+    lines.push(chalk.dim('  ' + '\u2500'.repeat(60)));
+    lines.push('');
+    lines.push(chalk.bold('  Pending Escalations:') + (pendingCount === 0 ? chalk.dim(' (none)') : ''));
+    if (pendingCount > 0) {
+        const sorted = [...state.pendingEscalations.values()].sort((a, b) => a.displayNumber - b.displayNumber);
+        for (const esc of sorted) {
+            lines.push('');
+            lines.push(`    [${chalk.bold.yellow(String(esc.displayNumber))}] ` +
+                `Session #${esc.sessionDisplayNumber} (${esc.sessionId.substring(0, 8)})`);
+            lines.push(`        Tool:    ${chalk.cyan(esc.request.serverName + '/' + esc.request.toolName)}`);
+            const argPreview = formatArgPreview(esc.request.arguments);
+            if (argPreview) {
+                lines.push(`        Args:    ${argPreview}`);
+            }
+            lines.push(`        Reason:  ${esc.request.reason}`);
+            if (esc.request.context) {
+                for (const [k, v] of Object.entries(esc.request.context)) {
+                    lines.push(`        ${k}: ${chalk.yellow(v)}`);
+                }
+            }
+        }
+    }
+    // History
+    if (state.history.length > 0) {
+        lines.push('');
+        lines.push(chalk.dim('  ' + '\u2500'.repeat(60)));
+        lines.push('');
+        lines.push(chalk.bold('  History (last 10):'));
+        const recent = state.history.slice(0, 10);
+        for (const entry of recent) {
+            const time = entry.resolvedAt.toLocaleTimeString();
+            const decisionLabel = entry.decision === 'approved' ? chalk.green('APPROVED') : chalk.red('DENIED');
+            lines.push(`    [${chalk.dim(time)}] ` + `${entry.serverName}/${entry.toolName}  ` + decisionLabel);
+        }
+    }
+    // Command hint (prompt itself is handled by readline)
+    lines.push('');
+    lines.push(chalk.dim('  ' + '\u2500'.repeat(60)));
+    lines.push(chalk.dim('  /approve N | /deny N | /approve all | /deny all | /quit'));
+    return lines.join('\n') + '\n';
+}
+// --- Helpers ---
+function countPendingForSession(state, sessionId) {
+    let count = 0;
+    for (const esc of state.pendingEscalations.values()) {
+        if (esc.sessionId === sessionId)
+            count++;
+    }
+    return count;
+}
+function formatTimeAgo(date) {
+    const seconds = Math.floor((Date.now() - date.getTime()) / 1000);
+    if (seconds < 60)
+        return `${seconds}s ago`;
+    const minutes = Math.floor(seconds / 60);
+    if (minutes < 60)
+        return `${minutes}m ago`;
+    const hours = Math.floor(minutes / 60);
+    return `${hours}h ago`;
+}
+function formatArgPreview(args) {
+    const parts = [];
+    for (const [key, value] of Object.entries(args)) {
+        if (typeof value === 'string') {
+            const display = value.length > 60 ? value.substring(0, 57) + '...' : value;
+            parts.push(`${key}: ${display}`);
+        }
+    }
+    return parts.slice(0, 3).join(', ');
+}
+//# sourceMappingURL=listener-command.js.map

package/dist/escalation/listener-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener-command.js","sourceRoot":"","sources":["../../src/escalation/listener-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACrH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAGlE,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAE7B,6DAA6D;AAC7D,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;IACxC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEzD,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,mBAAmB,GAAG,EAAE,CAAC;IAE7B,oCAAoC;IACpC,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,mBAAmB;YAAE,OAAO;QAC5C,mBAAmB,GAAG,OAAO,CAAC;QAE9B,sEAAsE;QACtE,sEAAsE;QACtE,yEAAyE;QACzE,mEAAmE;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC;QAErF,gEAAgE;QAChE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,gCAAgC;IAChC,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;QAC5C,MAAM,aAAa,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAEhD,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,mBAAmB;QACnB,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,uBAAuB,CACrC,GAAG,EACH,CAAC,QAAQ,EAAE,EAAE;oBACX,KAAK,GAAG,QAAQ,CAAC;oBACjB,MAAM,EAAE,CAAC;gBACX,CAAC,EACD,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;gBACF,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBACxC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gBACxB,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACjC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,IAAI,OAAO;YAAE,MAAM,EAAE,CAAC;IACxB,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAE9B,wEAAwE;IACxE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC;IAET,kBAAkB;IAClB,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,EAAE,CAAC;YACT,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAErB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,GAAG,KAAK,CAAC;YAChB,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,8CAA8C;QAC9C,mBAAmB,GAAG,EAAE,CAAC;QAEzB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,0DAA0D;YAC1D,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;YAC5C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,aAAa,CAAC,aAAa,CAAC,CAAC;gBAC7B,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IAEH,UAAU;IACV,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,WAAW,CAAC,QAAQ,CAAC,CAAC;AACxB,CAAC;AAED,0BAA0B;AAE1B;;;GAGG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,mDAAmD;QACnD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC,CAAC,8BAA8B;YAC9C,CAAC;YACD,qCAAqC;YACrC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;YAChD,IAAI,CAAC;gBACH,UAAU,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2BAA2B;AAE3B,SAAS,uBAAuB,CAC9B,YAAoC,EACpC,aAA6C,EAC7C,QAA6B;IAE7B,OAAO,uBAAuB,CAC5B,YAAY,CAAC,aAAa,EAC1B;QACE,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;YACxB,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC5E,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,gCAAgC;YAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,mBAAmB,EAAE,CAAC,YAAY,EAAE,EAAE;YACpC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACpF,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;KACF,EACD,EAAE,cAAc,EAAE,GAAG,EAAE,CACxB,CAAC;AACJ,CAAC;AAUD,SAAS,aAAa,CAAC,KAAa,EAAE,KAAoB;IACxD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAEvC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,0CAA0C,CAAC,EAAE,CAAC;YAE9F,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,OAAO,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,EAAE,CAAC;YACrF,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC/C,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,oCAAoC,CAAC,EAAE,CAAC;YAExF,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,OAAO,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,EAAE,CAAC;YACrF,OAAO,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,WAAW;YACd,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAEzD,KAAK,OAAO,CAAC;QACb,KAAK,IAAI;YACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAE/B;YACE,OAAO;gBACL,KAAK;gBACL,OAAO,EAAE,KAAK,CAAC,MAAM,CACnB,gGAAgG,CACjG;aACF,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB,EAAE,aAAqB,EAAE,QAA+B;IACjG,MAAM,UAAU,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,0BAA0B,aAAa,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,2BAA2B,aAAa,mBAAmB,CAAC,EAAE,CAAC;IACvG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe,aAAa,kCAAkC,CAAC;aACtF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtF,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,eAAe,aAAa,IAAI,KAAK,EAAE;SACjD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB,EAAE,QAA+B;IAC7E,IAAI,KAAK,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAExE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1D,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,IAAI,MAAM,CAAC,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAoB;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;QACjC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,aAAa,KAAK,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,oBAAoB;AAEpB;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAoB;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;IACzC,MAAM,YAAY,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC;IAEnD,SAAS;IACT,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC;QAClD,KAAK,CAAC,GAAG,CAAC,iBAAiB,YAAY,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAC5F,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAElD,kBAAkB;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC7C,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;YACjC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACnD,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YACpE,MAAM,YAAY,GAAG,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,cAAc,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/G,KAAK,CAAC,IAAI,CACR,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI;gBACnD,GAAG,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;gBACpC,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;gBACjC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBACd,YAAY,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEpG,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QACxG,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CACR,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI;gBACtD,YAAY,GAAG,CAAC,oBAAoB,KAAK,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAC5E,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAElG,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,UAAU,EAAE,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAErD,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU;IACV,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;YACnD,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpG,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,GAAG,aAAa,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC,CAAC;IAEnF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,kBAAkB;AAElB,SAAS,sBAAsB,CAAC,KAAoB,EAAE,SAAiB;IACrE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,EAAE,CAAC;QACpD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;YAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,IAAU;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,OAAO,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,OAAO,GAAG,KAAK,OAAO,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/dist/escalation/listener-state.d.ts

@@ -0,0 +1,49 @@
+/**
+ * State management for the escalation listener TUI.
+ *
+ * Immutable state updates -- each mutation returns a new state object.
+ * The rendering layer reads state and redraws on change.
+ */
+import type { PtySessionRegistration } from '../docker/pty-types.js';
+import type { EscalationWatcher } from './escalation-watcher.js';
+import type { EscalationRequest } from '../session/types.js';
+export interface ActiveSession {
+    readonly registration: PtySessionRegistration;
+    readonly watcher: EscalationWatcher;
+    /** Sequential display number assigned when the session was first detected. */
+    readonly displayNumber: number;
+}
+export interface PendingEscalation {
+    readonly sessionId: string;
+    readonly sessionDisplayNumber: number;
+    readonly request: EscalationRequest;
+    /** Monotonically increasing display number for /approve and /deny commands. */
+    readonly displayNumber: number;
+    readonly receivedAt: Date;
+}
+export interface ResolvedEscalation {
+    readonly sessionId: string;
+    readonly toolName: string;
+    readonly serverName: string;
+    readonly decision: 'approved' | 'denied';
+    readonly resolvedAt: Date;
+}
+export interface ListenerState {
+    readonly sessions: ReadonlyMap<string, ActiveSession>;
+    readonly pendingEscalations: ReadonlyMap<number, PendingEscalation>;
+    readonly history: readonly ResolvedEscalation[];
+    readonly nextEscalationNumber: number;
+    readonly nextSessionNumber: number;
+}
+/** Creates an empty initial state. */
+export declare function createInitialState(): ListenerState;
+/** Adds a new session to the state. */
+export declare function addSession(state: ListenerState, registration: PtySessionRegistration, watcher: EscalationWatcher): ListenerState;
+/** Removes a session and its pending escalations from the state. */
+export declare function removeSession(state: ListenerState, sessionId: string): ListenerState;
+/** Adds a new pending escalation to the state. */
+export declare function addEscalation(state: ListenerState, sessionId: string, request: EscalationRequest): ListenerState;
+/** Resolves a pending escalation and moves it to history. */
+export declare function resolveEscalation(state: ListenerState, displayNumber: number, decision: 'approved' | 'denied'): ListenerState;
+/** Removes a pending escalation that expired. */
+export declare function expireEscalation(state: ListenerState, sessionId: string, escalationId: string): ListenerState;

package/dist/escalation/listener-state.js

@@ -0,0 +1,104 @@
+/**
+ * State management for the escalation listener TUI.
+ *
+ * Immutable state updates -- each mutation returns a new state object.
+ * The rendering layer reads state and redraws on change.
+ */
+/** Maximum number of resolved escalations to keep in history. */
+const MAX_HISTORY = 20;
+/** Creates an empty initial state. */
+export function createInitialState() {
+    return {
+        sessions: new Map(),
+        pendingEscalations: new Map(),
+        history: [],
+        nextEscalationNumber: 1,
+        nextSessionNumber: 1,
+    };
+}
+/** Adds a new session to the state. */
+export function addSession(state, registration, watcher) {
+    const sessions = new Map(state.sessions);
+    sessions.set(registration.sessionId, {
+        registration,
+        watcher,
+        displayNumber: state.nextSessionNumber,
+    });
+    return {
+        ...state,
+        sessions,
+        nextSessionNumber: state.nextSessionNumber + 1,
+    };
+}
+/** Removes a session and its pending escalations from the state. */
+export function removeSession(state, sessionId) {
+    const sessions = new Map(state.sessions);
+    sessions.delete(sessionId);
+    // Remove any pending escalations for this session
+    const pendingEscalations = new Map(state.pendingEscalations);
+    for (const [num, esc] of pendingEscalations) {
+        if (esc.sessionId === sessionId) {
+            pendingEscalations.delete(num);
+        }
+    }
+    return { ...state, sessions, pendingEscalations };
+}
+/** Adds a new pending escalation to the state. */
+export function addEscalation(state, sessionId, request) {
+    const session = state.sessions.get(sessionId);
+    if (!session)
+        return state;
+    const displayNumber = state.nextEscalationNumber;
+    const pendingEscalations = new Map(state.pendingEscalations);
+    pendingEscalations.set(displayNumber, {
+        sessionId,
+        sessionDisplayNumber: session.displayNumber,
+        request,
+        displayNumber,
+        receivedAt: new Date(),
+    });
+    return {
+        ...state,
+        pendingEscalations,
+        nextEscalationNumber: displayNumber + 1,
+    };
+}
+/** Resolves a pending escalation and moves it to history. */
+export function resolveEscalation(state, displayNumber, decision) {
+    const escalation = state.pendingEscalations.get(displayNumber);
+    if (!escalation)
+        return state;
+    const pendingEscalations = new Map(state.pendingEscalations);
+    pendingEscalations.delete(displayNumber);
+    const resolved = {
+        sessionId: escalation.sessionId,
+        toolName: escalation.request.toolName,
+        serverName: escalation.request.serverName,
+        decision,
+        resolvedAt: new Date(),
+    };
+    // Prepend to history and trim to MAX_HISTORY
+    const history = [resolved, ...state.history].slice(0, MAX_HISTORY);
+    return { ...state, pendingEscalations, history };
+}
+/** Removes a pending escalation that expired. */
+export function expireEscalation(state, sessionId, escalationId) {
+    const pendingEscalations = new Map(state.pendingEscalations);
+    for (const [num, esc] of pendingEscalations) {
+        if (esc.sessionId === sessionId && esc.request.escalationId === escalationId) {
+            pendingEscalations.delete(num);
+            // Add to history as expired
+            const resolved = {
+                sessionId: esc.sessionId,
+                toolName: esc.request.toolName,
+                serverName: esc.request.serverName,
+                decision: 'denied',
+                resolvedAt: new Date(),
+            };
+            const history = [resolved, ...state.history].slice(0, MAX_HISTORY);
+            return { ...state, pendingEscalations, history };
+        }
+    }
+    return state;
+}
+//# sourceMappingURL=listener-state.js.map

package/dist/escalation/listener-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener-state.js","sourceRoot":"","sources":["../../src/escalation/listener-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsCH,iEAAiE;AACjE,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,sCAAsC;AACtC,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,kBAAkB,EAAE,IAAI,GAAG,EAAE;QAC7B,OAAO,EAAE,EAAE;QACX,oBAAoB,EAAE,CAAC;QACvB,iBAAiB,EAAE,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,UAAU,CACxB,KAAoB,EACpB,YAAoC,EACpC,OAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE;QACnC,YAAY;QACZ,OAAO;QACP,aAAa,EAAE,KAAK,CAAC,iBAAiB;KACvC,CAAC,CAAC;IACH,OAAO;QACL,GAAG,KAAK;QACR,QAAQ;QACR,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,GAAG,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,KAAoB,EAAE,SAAiB;IACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAE3B,kDAAkD;IAClD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;AACpD,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,aAAa,CAAC,KAAoB,EAAE,SAAiB,EAAE,OAA0B;IAC/F,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,MAAM,aAAa,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACjD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC7D,kBAAkB,CAAC,GAAG,CAAC,aAAa,EAAE;QACpC,SAAS;QACT,oBAAoB,EAAE,OAAO,CAAC,aAAa;QAC3C,OAAO;QACP,aAAa;QACb,UAAU,EAAE,IAAI,IAAI,EAAE;KACvB,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,KAAK;QACR,kBAAkB;QAClB,oBAAoB,EAAE,aAAa,GAAG,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,iBAAiB,CAC/B,KAAoB,EACpB,aAAqB,EACrB,QAA+B;IAE/B,MAAM,UAAU,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC7D,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAuB;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ;QACrC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,UAAU;QACzC,QAAQ;QACR,UAAU,EAAE,IAAI,IAAI,EAAE;KACvB,CAAC;IAEF,6CAA6C;IAC7C,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAEnE,OAAO,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;AACnD,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,gBAAgB,CAAC,KAAoB,EAAE,SAAiB,EAAE,YAAoB;IAC5F,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAE7D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAC5C,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YAC7E,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAE/B,4BAA4B;YAC5B,MAAM,QAAQ,GAAuB;gBACnC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;gBAC9B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;gBAClC,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,IAAI,IAAI,EAAE;aACvB,CAAC;YACF,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;YAEnE,OAAO,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/escalation/session-registry.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Session registry -- reads and validates PTY session registration files.
+ *
+ * PTY sessions write registration files to ~/.ironcurtain/pty-registry/
+ * when they start, and delete them on shutdown. The escalation listener
+ * polls this directory to discover active sessions.
+ *
+ * Stale session detection: if a registration file exists but the PID
+ * is no longer alive, the session crashed without cleanup. The registry
+ * removes stale registrations.
+ */
+import type { PtySessionRegistration } from '../docker/pty-types.js';
+/**
+ * Reads all valid, non-stale session registrations from the registry directory.
+ * Removes stale registrations (PID no longer alive) as a side effect.
+ */
+export declare function readActiveRegistrations(registryDir: string): PtySessionRegistration[];