@two7722/sentinel-guard 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/__tests__/rules-engine.test.d.ts +1 -0
- package/dist/__tests__/rules-engine.test.js +69 -0
- package/dist/__tests__/rules-engine.test.js.map +1 -0
- package/dist/__tests__/transport-encryption.test.d.ts +1 -0
- package/dist/__tests__/transport-encryption.test.js +95 -0
- package/dist/__tests__/transport-encryption.test.js.map +1 -0
- package/dist/api/client.d.ts +27 -0
- package/dist/api/client.js +91 -0
- package/dist/api/client.js.map +1 -0
- package/dist/cli/bootstrap.d.ts +12 -0
- package/dist/cli/bootstrap.js +132 -0
- package/dist/cli/bootstrap.js.map +1 -0
- package/dist/cli/index.d.ts +2 -0
- package/dist/cli/index.js +534 -0
- package/dist/cli/index.js.map +1 -0
- package/dist/crypto/keys.d.ts +40 -0
- package/dist/crypto/keys.js +125 -0
- package/dist/crypto/keys.js.map +1 -0
- package/dist/crypto/transport-encryption.d.ts +13 -0
- package/dist/crypto/transport-encryption.js +62 -0
- package/dist/crypto/transport-encryption.js.map +1 -0
- package/dist/install/setup.d.ts +2 -0
- package/dist/install/setup.js +80 -0
- package/dist/install/setup.js.map +1 -0
- package/dist/lib/budget.d.ts +14 -0
- package/dist/lib/budget.js +93 -0
- package/dist/lib/budget.js.map +1 -0
- package/dist/lib/claude-process.d.ts +16 -0
- package/dist/lib/claude-process.js +98 -0
- package/dist/lib/claude-process.js.map +1 -0
- package/dist/lib/daemon.d.ts +6 -0
- package/dist/lib/daemon.js +218 -0
- package/dist/lib/daemon.js.map +1 -0
- package/dist/lib/diff.d.ts +5 -0
- package/dist/lib/diff.js +85 -0
- package/dist/lib/diff.js.map +1 -0
- package/dist/lib/doctor.d.ts +1 -0
- package/dist/lib/doctor.js +108 -0
- package/dist/lib/doctor.js.map +1 -0
- package/dist/lib/history.d.ts +22 -0
- package/dist/lib/history.js +62 -0
- package/dist/lib/history.js.map +1 -0
- package/dist/lib/logger.d.ts +11 -0
- package/dist/lib/logger.js +62 -0
- package/dist/lib/logger.js.map +1 -0
- package/dist/lib/modes.d.ts +22 -0
- package/dist/lib/modes.js +58 -0
- package/dist/lib/modes.js.map +1 -0
- package/dist/lib/overrides.d.ts +13 -0
- package/dist/lib/overrides.js +74 -0
- package/dist/lib/overrides.js.map +1 -0
- package/dist/lib/session.d.ts +32 -0
- package/dist/lib/session.js +68 -0
- package/dist/lib/session.js.map +1 -0
- package/dist/lib/summarizer.d.ts +5 -0
- package/dist/lib/summarizer.js +46 -0
- package/dist/lib/summarizer.js.map +1 -0
- package/dist/lib/tunnel.d.ts +2 -0
- package/dist/lib/tunnel.js +48 -0
- package/dist/lib/tunnel.js.map +1 -0
- package/dist/relay/pending.d.ts +27 -0
- package/dist/relay/pending.js +65 -0
- package/dist/relay/pending.js.map +1 -0
- package/dist/rules/engine.d.ts +31 -0
- package/dist/rules/engine.js +203 -0
- package/dist/rules/engine.js.map +1 -0
- package/dist/server/http.d.ts +8 -0
- package/dist/server/http.js +359 -0
- package/dist/server/http.js.map +1 -0
- package/dist/socket/client.d.ts +16 -0
- package/dist/socket/client.js +81 -0
- package/dist/socket/client.js.map +1 -0
- package/dist/transport/cloudkit.d.ts +30 -0
- package/dist/transport/cloudkit.js +162 -0
- package/dist/transport/cloudkit.js.map +1 -0
- package/dist/transport/factory.d.ts +6 -0
- package/dist/transport/factory.js +20 -0
- package/dist/transport/factory.js.map +1 -0
- package/dist/transport/interface.d.ts +25 -0
- package/dist/transport/interface.js +13 -0
- package/dist/transport/interface.js.map +1 -0
- package/dist/transport/local.d.ts +46 -0
- package/dist/transport/local.js +320 -0
- package/dist/transport/local.js.map +1 -0
- package/dist/transport/remote.d.ts +17 -0
- package/dist/transport/remote.js +83 -0
- package/dist/transport/remote.js.map +1 -0
- package/package.json +44 -0
|
@@ -0,0 +1,534 @@
|
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
"use strict";
|
|
3
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
4
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
5
|
+
};
|
|
6
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
|
+
const commander_1 = require("commander");
|
|
8
|
+
const chalk_1 = __importDefault(require("chalk"));
|
|
9
|
+
const qrcode_terminal_1 = __importDefault(require("qrcode-terminal"));
|
|
10
|
+
const client_1 = require("../api/client");
|
|
11
|
+
const setup_1 = require("../install/setup");
|
|
12
|
+
const engine_1 = require("../rules/engine");
|
|
13
|
+
const keys_1 = require("../crypto/keys");
|
|
14
|
+
const interface_1 = require("../transport/interface");
|
|
15
|
+
const local_1 = require("../transport/local");
|
|
16
|
+
const history_1 = require("../lib/history");
|
|
17
|
+
const budget_1 = require("../lib/budget");
|
|
18
|
+
const overrides_1 = require("../lib/overrides");
|
|
19
|
+
const doctor_1 = require("../lib/doctor");
|
|
20
|
+
const daemon_1 = require("../lib/daemon");
|
|
21
|
+
const modes_1 = require("../lib/modes");
|
|
22
|
+
const session_1 = require("../lib/session");
|
|
23
|
+
const logger_1 = require("../lib/logger");
|
|
24
|
+
const claude_process_1 = require("../lib/claude-process");
|
|
25
|
+
const bootstrap_1 = require("./bootstrap");
|
|
26
|
+
const program = new commander_1.Command();
|
|
27
|
+
program
|
|
28
|
+
.name('sentinel')
|
|
29
|
+
.description('Sentinel — Claude Code 移动端审批规则引擎')
|
|
30
|
+
.version('0.1.0');
|
|
31
|
+
function parseMode(value) {
|
|
32
|
+
if (['local', 'cloudkit', 'server'].includes(value))
|
|
33
|
+
return value;
|
|
34
|
+
logger_1.log.error(`Invalid mode: ${value}. Use: local, cloudkit, server`);
|
|
35
|
+
process.exit(1);
|
|
36
|
+
}
|
|
37
|
+
function parseDuration(val) {
|
|
38
|
+
const match = val.match(/^(\d+)(m|h)?$/);
|
|
39
|
+
if (!match)
|
|
40
|
+
return parseInt(val, 10) || 30;
|
|
41
|
+
const num = parseInt(match[1], 10);
|
|
42
|
+
if (match[2] === 'h')
|
|
43
|
+
return num * 60;
|
|
44
|
+
return num; // default minutes
|
|
45
|
+
}
|
|
46
|
+
// ==================== sentinel start ====================
|
|
47
|
+
program
|
|
48
|
+
.command('start')
|
|
49
|
+
.description('启动 Sentinel(HTTP hook 服务 + iOS 连接)')
|
|
50
|
+
.option('-p, --port <port>', 'HTTP hook 端口', '7749')
|
|
51
|
+
.option('-m, --mode <mode>', '连接模式: local | cloudkit | server', 'local')
|
|
52
|
+
.option('-s, --server <url>', '服务器地址(server 模式必须)')
|
|
53
|
+
.option('-d, --daemon', '后台运行')
|
|
54
|
+
.option('-r, --remote', '远程穿透(通过 Cloudflare Tunnel)')
|
|
55
|
+
.action(async (opts) => {
|
|
56
|
+
const port = parseInt(opts.port, 10);
|
|
57
|
+
const mode = parseMode(opts.mode);
|
|
58
|
+
if (opts.daemon) {
|
|
59
|
+
(0, daemon_1.daemonStart)(mode, port, opts.server);
|
|
60
|
+
return;
|
|
61
|
+
}
|
|
62
|
+
console.log(chalk_1.default.bold('\n 🛡️ Sentinel CLI\n'));
|
|
63
|
+
logger_1.log.info(`Mode: ${mode}`);
|
|
64
|
+
const ov = (0, overrides_1.getOverrideState)();
|
|
65
|
+
if (ov.blockAll)
|
|
66
|
+
console.log(chalk_1.default.bgRed.white.bold(' ⛔ BLOCK ALL active '));
|
|
67
|
+
if (ov.allowAll)
|
|
68
|
+
console.log(chalk_1.default.bgGreen.white.bold(' ✅ ALLOW ALL active '));
|
|
69
|
+
if ((0, budget_1.isOverBudget)())
|
|
70
|
+
logger_1.log.warn('⚠ Over daily budget!');
|
|
71
|
+
const cleanup = await (0, bootstrap_1.bootstrapSentinel)({ mode, port, server: opts.server, remote: opts.remote });
|
|
72
|
+
console.log('');
|
|
73
|
+
logger_1.log.success('Sentinel is running. Press Ctrl+C to stop.\n');
|
|
74
|
+
const shutdown = () => { console.log(''); logger_1.log.info('Shutting down...'); cleanup(); process.exit(0); };
|
|
75
|
+
process.on('SIGINT', shutdown);
|
|
76
|
+
process.on('SIGTERM', shutdown);
|
|
77
|
+
});
|
|
78
|
+
// ==================== sentinel run ====================
|
|
79
|
+
program
|
|
80
|
+
.command('run [claudeArgs...]')
|
|
81
|
+
.description('启动 Sentinel 并托管 Claude Code 进程(支持 iPhone 打断)')
|
|
82
|
+
.option('-m, --mode <mode>', '连接模式: local | cloudkit | server', 'local')
|
|
83
|
+
.option('-r, --remote', '远程穿透(Cloudflare Tunnel)')
|
|
84
|
+
.option('-p, --port <port>', 'HTTP hook 端口', '7749')
|
|
85
|
+
.allowUnknownOption(true)
|
|
86
|
+
.action(async (claudeArgs, opts) => {
|
|
87
|
+
const port = parseInt(opts.port, 10);
|
|
88
|
+
const mode = parseMode(opts.mode);
|
|
89
|
+
console.log(chalk_1.default.bold('\n 🛡️ Sentinel Run\n'));
|
|
90
|
+
logger_1.log.info(`Mode: ${mode} | Hosting Claude Code process`);
|
|
91
|
+
const cleanup = await (0, bootstrap_1.bootstrapSentinel)({ mode, port, server: opts.server, remote: opts.remote });
|
|
92
|
+
(0, claude_process_1.startClaude)(claudeArgs.length > 0 ? claudeArgs : []);
|
|
93
|
+
console.log('');
|
|
94
|
+
logger_1.log.success('Sentinel is running with managed Claude process. Press Ctrl+C to stop.');
|
|
95
|
+
logger_1.log.dim('Sentinel logs → ~/.sentinel/run.log (silent while Claude TUI is active)\n');
|
|
96
|
+
const shutdown = () => { console.log(''); logger_1.log.info('Shutting down...'); (0, claude_process_1.stopClaude)(); cleanup(); process.exit(0); };
|
|
97
|
+
process.on('SIGINT', shutdown);
|
|
98
|
+
process.on('SIGTERM', shutdown);
|
|
99
|
+
});
|
|
100
|
+
// ==================== sentinel install / uninstall ====================
|
|
101
|
+
program.command('install').description('注入 PreToolUse hook 到 Claude Code 配置')
|
|
102
|
+
.option('-p, --port <port>', 'HTTP hook 端口', '7749')
|
|
103
|
+
.action((opts) => { (0, setup_1.installHook)(parseInt(opts.port, 10)); });
|
|
104
|
+
program.command('uninstall').description('从 Claude Code 配置移除 Sentinel hook')
|
|
105
|
+
.option('-p, --port <port>', 'HTTP hook 端口', '7749')
|
|
106
|
+
.action((opts) => { (0, setup_1.uninstallHook)(parseInt(opts.port, 10)); });
|
|
107
|
+
// ==================== sentinel pair ====================
|
|
108
|
+
program.command('pair').description('配对 iOS 设备')
|
|
109
|
+
.option('-m, --mode <mode>', '连接模式: local | cloudkit | server', 'local')
|
|
110
|
+
.option('-s, --server <url>', '服务器地址(server 模式必须)')
|
|
111
|
+
.action(async (opts) => {
|
|
112
|
+
const mode = parseMode(opts.mode);
|
|
113
|
+
if (mode === 'local') {
|
|
114
|
+
const transport = new local_1.LocalTransport();
|
|
115
|
+
await transport.start();
|
|
116
|
+
const info = transport.getConnectionInfo();
|
|
117
|
+
console.log(chalk_1.default.bold('\n 📡 局域网模式\n'));
|
|
118
|
+
logger_1.log.success(`TCP server: ${info.ip}:${info.port}`);
|
|
119
|
+
logger_1.log.info('iOS 端选择"局域网"模式,会自动发现\n');
|
|
120
|
+
logger_1.log.dim('等待 iOS 连接... (Ctrl+C 退出)');
|
|
121
|
+
const check = setInterval(() => {
|
|
122
|
+
if (transport.isConnected) {
|
|
123
|
+
clearInterval(check);
|
|
124
|
+
logger_1.log.success('iOS 已连接!');
|
|
125
|
+
setTimeout(() => { transport.stop(); process.exit(0); }, 2000);
|
|
126
|
+
}
|
|
127
|
+
}, 1000);
|
|
128
|
+
process.on('SIGINT', () => { transport.stop(); process.exit(0); });
|
|
129
|
+
}
|
|
130
|
+
else if (mode === 'cloudkit') {
|
|
131
|
+
console.log(chalk_1.default.bold('\n ☁️ CloudKit 模式\n'));
|
|
132
|
+
logger_1.log.info('CloudKit 模式无需配对。确保同一 Apple ID。\n');
|
|
133
|
+
}
|
|
134
|
+
else {
|
|
135
|
+
const serverURL = opts.server ?? (0, client_1.getStoredServerURL)();
|
|
136
|
+
if (!serverURL) {
|
|
137
|
+
logger_1.log.error('Server mode requires -s URL.');
|
|
138
|
+
process.exit(1);
|
|
139
|
+
}
|
|
140
|
+
const tokenData = await (0, client_1.ensureToken)(serverURL);
|
|
141
|
+
logger_1.log.info('Generating pair link...');
|
|
142
|
+
const res = await fetch(`${serverURL}/v1/pair/link`, {
|
|
143
|
+
method: 'POST', headers: { 'Content-Type': 'application/json' },
|
|
144
|
+
body: JSON.stringify({ token: tokenData.token }),
|
|
145
|
+
});
|
|
146
|
+
if (!res.ok) {
|
|
147
|
+
logger_1.log.error(`Failed: ${await res.text()}`);
|
|
148
|
+
process.exit(1);
|
|
149
|
+
}
|
|
150
|
+
const json = (await res.json());
|
|
151
|
+
if (!json.success) {
|
|
152
|
+
logger_1.log.error('Server error');
|
|
153
|
+
process.exit(1);
|
|
154
|
+
}
|
|
155
|
+
const { link, expiresIn } = json.data;
|
|
156
|
+
// Embed server URL in the deep link so iOS doesn't need separate URL input
|
|
157
|
+
const fullLink = `${link}?s=${encodeURIComponent(serverURL)}`;
|
|
158
|
+
console.log(chalk_1.default.bold('\n 📱 Scan QR code:\n'));
|
|
159
|
+
qrcode_terminal_1.default.generate(fullLink, { small: true }, (qr) => { console.log(qr); });
|
|
160
|
+
console.log(` ${chalk_1.default.dim('Link:')} ${chalk_1.default.cyan(fullLink)}\n`);
|
|
161
|
+
const poll = setInterval(async () => {
|
|
162
|
+
try {
|
|
163
|
+
const sr = await fetch(`${serverURL}/v1/pair/status?token=${encodeURIComponent(tokenData.token)}`);
|
|
164
|
+
const sj = (await sr.json());
|
|
165
|
+
if (sj.data?.paired) {
|
|
166
|
+
clearInterval(poll);
|
|
167
|
+
logger_1.log.success(`Paired: ${sj.data.pairedDevice?.name ?? '?'}`);
|
|
168
|
+
process.exit(0);
|
|
169
|
+
}
|
|
170
|
+
}
|
|
171
|
+
catch (err) {
|
|
172
|
+
logger_1.log.dim(`Polling pair status: ${err.message}`);
|
|
173
|
+
}
|
|
174
|
+
}, 2000);
|
|
175
|
+
setTimeout(() => { clearInterval(poll); logger_1.log.warn('Expired.'); process.exit(1); }, expiresIn * 1000);
|
|
176
|
+
}
|
|
177
|
+
});
|
|
178
|
+
// ==================== sentinel status ====================
|
|
179
|
+
program.command('status').description('查看 Sentinel 状态').action(async () => {
|
|
180
|
+
const token = (0, client_1.loadToken)();
|
|
181
|
+
console.log(chalk_1.default.bold('\n 🛡️ Sentinel Status\n'));
|
|
182
|
+
if (token) {
|
|
183
|
+
logger_1.log.success(`Server: ${token.serverURL}`);
|
|
184
|
+
logger_1.log.success(`Device: ${token.deviceId}`);
|
|
185
|
+
}
|
|
186
|
+
else {
|
|
187
|
+
logger_1.log.warn('Not authenticated (server mode)');
|
|
188
|
+
}
|
|
189
|
+
logger_1.log.info(`Public key: ${(0, keys_1.getPublicKeyBase64)().slice(0, 16)}...`);
|
|
190
|
+
try {
|
|
191
|
+
const res = await fetch('http://localhost:7749/status');
|
|
192
|
+
const data = (await res.json());
|
|
193
|
+
logger_1.log.success(`Hook server: running (mode=${data.mode}, ${data.pendingRequests} pending)`);
|
|
194
|
+
logger_1.log.info(`Connected: ${data.connected}`);
|
|
195
|
+
}
|
|
196
|
+
catch {
|
|
197
|
+
logger_1.log.warn('Hook server: not running');
|
|
198
|
+
}
|
|
199
|
+
logger_1.log.info(`Rules: ${(0, engine_1.getRules)().length} loaded`);
|
|
200
|
+
// Overrides
|
|
201
|
+
const ov = (0, overrides_1.getOverrideInfo)();
|
|
202
|
+
if (ov.blockAll)
|
|
203
|
+
logger_1.log.warn(`BLOCK ALL active${ov.blockUntil ? ` (until ${new Date(ov.blockUntil).toLocaleTimeString()})` : ''}`);
|
|
204
|
+
if (ov.allowAll)
|
|
205
|
+
logger_1.log.warn(`ALLOW ALL active${ov.allowUntil ? ` (until ${new Date(ov.allowUntil).toLocaleTimeString()})` : ''}`);
|
|
206
|
+
// Budget
|
|
207
|
+
const b = (0, budget_1.getBudgetStatus)();
|
|
208
|
+
logger_1.log.info(`Budget: $${b.spent.toFixed(4)} / $${b.limit.toFixed(2)} (${b.calls} calls)${b.overBudget ? chalk_1.default.red(' ⚠ OVER') : ''}`);
|
|
209
|
+
// Today stats
|
|
210
|
+
const stats = (0, history_1.getTodayStats)();
|
|
211
|
+
if (stats.total > 0) {
|
|
212
|
+
console.log(`\n ${chalk_1.default.green(`✓ ${stats.allowed} allowed`)} ${chalk_1.default.red(`✗ ${stats.blocked} blocked`)} ${chalk_1.default.yellow(`⏱ ${stats.timeout} timeout`)} ${chalk_1.default.dim(`⚡ ${stats.autoAllow} auto`)}`);
|
|
213
|
+
if (stats.lastRequestTime)
|
|
214
|
+
logger_1.log.dim(` Last: ${new Date(stats.lastRequestTime).toLocaleTimeString()}`);
|
|
215
|
+
}
|
|
216
|
+
console.log('');
|
|
217
|
+
});
|
|
218
|
+
// ==================== sentinel rules ====================
|
|
219
|
+
program.command('rules').description('列出当前规则').action(() => {
|
|
220
|
+
const rules = (0, engine_1.getRules)();
|
|
221
|
+
console.log(chalk_1.default.bold('\n 📋 Rules\n'));
|
|
222
|
+
for (const rule of rules.sort((a, b) => a.priority - b.priority)) {
|
|
223
|
+
const risk = rule.risk === 'auto_allow' ? chalk_1.default.green('allow') : rule.risk === 'require_confirm' ? chalk_1.default.yellow('confirm') : chalk_1.default.red('faceid');
|
|
224
|
+
const tool = rule.toolPattern ? chalk_1.default.cyan(rule.toolPattern) : chalk_1.default.dim('*');
|
|
225
|
+
const path = rule.pathPattern ? chalk_1.default.magenta(rule.pathPattern) : chalk_1.default.dim('*');
|
|
226
|
+
console.log(` ${chalk_1.default.dim(`[${rule.priority}]`)} ${risk} ${tool} ${path} ${chalk_1.default.dim(rule.description)}`);
|
|
227
|
+
}
|
|
228
|
+
console.log('');
|
|
229
|
+
});
|
|
230
|
+
// ==================== sentinel logs ====================
|
|
231
|
+
program.command('logs').description('查看审批历史')
|
|
232
|
+
.option('-n, --count <n>', '显示条数', '20')
|
|
233
|
+
.action((opts) => {
|
|
234
|
+
const count = parseInt(opts.count, 10) || 20;
|
|
235
|
+
const history = (0, history_1.getHistory)().slice(0, count);
|
|
236
|
+
console.log(chalk_1.default.bold('\n 📜 Approval History\n'));
|
|
237
|
+
if (history.length === 0) {
|
|
238
|
+
logger_1.log.dim('No history yet.');
|
|
239
|
+
console.log('');
|
|
240
|
+
return;
|
|
241
|
+
}
|
|
242
|
+
console.log(` ${chalk_1.default.dim('Time'.padEnd(10))} ${chalk_1.default.dim('Tool'.padEnd(12))} ${chalk_1.default.dim('Path'.padEnd(30))} ${chalk_1.default.dim('Risk'.padEnd(10))} ${chalk_1.default.dim('Decision')}`);
|
|
243
|
+
console.log(chalk_1.default.dim(' ' + '─'.repeat(80)));
|
|
244
|
+
for (const e of history) {
|
|
245
|
+
const time = new Date(e.timestamp).toLocaleTimeString('en', { hour12: false, hour: '2-digit', minute: '2-digit', second: '2-digit' });
|
|
246
|
+
const tool = e.toolName.padEnd(12).slice(0, 12);
|
|
247
|
+
const path = (e.filePath ?? '—').padEnd(30).slice(0, 30);
|
|
248
|
+
const risk = e.riskLevel === 'auto_allow' ? chalk_1.default.dim('auto'.padEnd(10)) : e.riskLevel === 'high' ? chalk_1.default.red('high'.padEnd(10)) : chalk_1.default.yellow(e.riskLevel.padEnd(10));
|
|
249
|
+
const dec = e.decision === 'allowed' || e.decision === 'auto_allow' ? chalk_1.default.green(e.decision) : e.decision === 'blocked' ? chalk_1.default.red('blocked') : e.decision === 'timeout' ? chalk_1.default.yellow('timeout') : chalk_1.default.gray(e.decision);
|
|
250
|
+
console.log(` ${chalk_1.default.dim(time)} ${chalk_1.default.cyan(tool)} ${path} ${risk} ${dec}`);
|
|
251
|
+
}
|
|
252
|
+
console.log(chalk_1.default.dim(`\n ${history.length} of ${(0, history_1.getHistory)().length} entries\n`));
|
|
253
|
+
});
|
|
254
|
+
// ==================== sentinel budget ====================
|
|
255
|
+
const budget = program.command('budget').description('预算管理');
|
|
256
|
+
budget.command('set <amount>').description('设置每日上限(美元)').action((amount) => {
|
|
257
|
+
const val = parseFloat(amount);
|
|
258
|
+
if (isNaN(val) || val <= 0) {
|
|
259
|
+
logger_1.log.error('Invalid amount');
|
|
260
|
+
process.exit(1);
|
|
261
|
+
}
|
|
262
|
+
(0, budget_1.setBudgetLimit)(val);
|
|
263
|
+
logger_1.log.success(`Daily budget set to $${val.toFixed(2)}`);
|
|
264
|
+
});
|
|
265
|
+
budget.command('status').description('查看今日花费').action(() => {
|
|
266
|
+
const b = (0, budget_1.getBudgetStatus)();
|
|
267
|
+
console.log(chalk_1.default.bold('\n 💰 Budget\n'));
|
|
268
|
+
console.log(` Limit: $${b.limit.toFixed(2)}`);
|
|
269
|
+
console.log(` Spent: $${b.spent.toFixed(4)} (${b.calls} calls)`);
|
|
270
|
+
console.log(` Remaining: ${b.overBudget ? chalk_1.default.red('$0.00 ⚠ OVER BUDGET') : chalk_1.default.green(`$${b.remaining.toFixed(4)}`)}`);
|
|
271
|
+
console.log('');
|
|
272
|
+
});
|
|
273
|
+
budget.command('reset').description('重置今日统计').action(() => {
|
|
274
|
+
(0, budget_1.setBudgetLimit)((0, budget_1.getBudgetStatus)().limit); // re-save to touch file
|
|
275
|
+
logger_1.log.success('Budget tracking noted. History preserved.');
|
|
276
|
+
});
|
|
277
|
+
// ==================== sentinel block ====================
|
|
278
|
+
const block = program.command('block').description('快速封锁所有请求');
|
|
279
|
+
block.command('on').description('开启全局封锁')
|
|
280
|
+
.option('-u, --until <duration>', '封锁时长(如 30m, 2h)')
|
|
281
|
+
.action((opts) => {
|
|
282
|
+
const minutes = opts.until ? parseDuration(opts.until) : undefined;
|
|
283
|
+
(0, overrides_1.setBlockAll)(true, minutes);
|
|
284
|
+
if (minutes) {
|
|
285
|
+
logger_1.log.success(`Block ALL enabled for ${minutes} minutes (until ${new Date(Date.now() + minutes * 60000).toLocaleTimeString()})`);
|
|
286
|
+
}
|
|
287
|
+
else {
|
|
288
|
+
logger_1.log.success('Block ALL enabled (indefinite). Run `sentinel block off` to disable.');
|
|
289
|
+
}
|
|
290
|
+
});
|
|
291
|
+
block.command('off').description('关闭封锁').action(() => {
|
|
292
|
+
(0, overrides_1.setBlockAll)(false);
|
|
293
|
+
logger_1.log.success('Block ALL disabled. Normal rules restored.');
|
|
294
|
+
});
|
|
295
|
+
// ==================== sentinel allow ====================
|
|
296
|
+
const allow = program.command('allow').description('临时放行所有请求');
|
|
297
|
+
allow.command('on').description('开启全局放行')
|
|
298
|
+
.option('-u, --until <duration>', '放行时长(如 30m, 2h)')
|
|
299
|
+
.action((opts) => {
|
|
300
|
+
const minutes = opts.until ? parseDuration(opts.until) : undefined;
|
|
301
|
+
(0, overrides_1.setAllowAll)(true, minutes);
|
|
302
|
+
if (minutes) {
|
|
303
|
+
logger_1.log.success(`Allow ALL enabled for ${minutes} minutes`);
|
|
304
|
+
}
|
|
305
|
+
else {
|
|
306
|
+
logger_1.log.success('Allow ALL enabled (indefinite). Run `sentinel allow off` to disable.');
|
|
307
|
+
}
|
|
308
|
+
});
|
|
309
|
+
allow.command('off').description('关闭放行').action(() => {
|
|
310
|
+
(0, overrides_1.setAllowAll)(false);
|
|
311
|
+
logger_1.log.success('Allow ALL disabled. Normal rules restored.');
|
|
312
|
+
});
|
|
313
|
+
// ==================== sentinel watch ====================
|
|
314
|
+
program.command('watch').description('实时监控工具调用').action(async () => {
|
|
315
|
+
console.log(chalk_1.default.bold('\n 👁 Sentinel Watch\n'));
|
|
316
|
+
logger_1.log.dim('Streaming events from http://localhost:7749/events ...\n');
|
|
317
|
+
console.log(` ${chalk_1.default.dim('Time'.padEnd(10))} ${chalk_1.default.dim('Tool'.padEnd(12))} ${chalk_1.default.dim('Path'.padEnd(28))} ${chalk_1.default.dim('Decision'.padEnd(10))} ${chalk_1.default.dim('Reason')}`);
|
|
318
|
+
console.log(chalk_1.default.dim(' ' + '─'.repeat(75)));
|
|
319
|
+
try {
|
|
320
|
+
const res = await fetch('http://localhost:7749/events');
|
|
321
|
+
if (!res.ok || !res.body) {
|
|
322
|
+
logger_1.log.error('Failed to connect to SSE endpoint');
|
|
323
|
+
process.exit(1);
|
|
324
|
+
}
|
|
325
|
+
const decoder = new TextDecoder();
|
|
326
|
+
const reader = res.body.getReader();
|
|
327
|
+
let buffer = '';
|
|
328
|
+
while (true) {
|
|
329
|
+
const { done, value } = await reader.read();
|
|
330
|
+
if (done)
|
|
331
|
+
break;
|
|
332
|
+
buffer += decoder.decode(value, { stream: true });
|
|
333
|
+
const lines = buffer.split('\n');
|
|
334
|
+
buffer = lines.pop() ?? '';
|
|
335
|
+
for (const line of lines) {
|
|
336
|
+
if (!line.startsWith('data: '))
|
|
337
|
+
continue;
|
|
338
|
+
try {
|
|
339
|
+
const data = JSON.parse(line.slice(6));
|
|
340
|
+
const time = new Date(data.time).toLocaleTimeString('en', { hour12: false, hour: '2-digit', minute: '2-digit', second: '2-digit' });
|
|
341
|
+
const tool = (data.tool ?? '?').padEnd(12).slice(0, 12);
|
|
342
|
+
const path = (data.path ?? '—').padEnd(28).slice(0, 28);
|
|
343
|
+
const dec = data.decision === 'allowed' ? chalk_1.default.green('allowed'.padEnd(10)) : chalk_1.default.red('blocked'.padEnd(10));
|
|
344
|
+
const reason = chalk_1.default.dim(data.reason ?? '');
|
|
345
|
+
console.log(` ${chalk_1.default.dim(time)} ${chalk_1.default.cyan(tool)} ${path} ${dec} ${reason}`);
|
|
346
|
+
}
|
|
347
|
+
catch { }
|
|
348
|
+
}
|
|
349
|
+
}
|
|
350
|
+
}
|
|
351
|
+
catch (err) {
|
|
352
|
+
logger_1.log.error(`Watch failed: ${err.message}`);
|
|
353
|
+
logger_1.log.dim('Is sentinel start running?');
|
|
354
|
+
}
|
|
355
|
+
});
|
|
356
|
+
// ==================== sentinel test ====================
|
|
357
|
+
const test = program.command('test').description('测试验证');
|
|
358
|
+
test.command('hook').description('发送测试 hook 请求').action(async () => {
|
|
359
|
+
logger_1.log.info('Sending test Write request to localhost:7749/hook ...');
|
|
360
|
+
try {
|
|
361
|
+
const res = await fetch('http://localhost:7749/hook', {
|
|
362
|
+
method: 'POST',
|
|
363
|
+
headers: { 'Content-Type': 'application/json' },
|
|
364
|
+
body: JSON.stringify({ tool_name: 'Write', tool_input: { file_path: '/test/sentinel-test.ts', content: '// test' } }),
|
|
365
|
+
});
|
|
366
|
+
const data = await res.json();
|
|
367
|
+
logger_1.log.success(`Response: ${JSON.stringify(data)}`);
|
|
368
|
+
}
|
|
369
|
+
catch (err) {
|
|
370
|
+
logger_1.log.error(`Failed: ${err.message}. Is \`sentinel start\` running?`);
|
|
371
|
+
}
|
|
372
|
+
});
|
|
373
|
+
test.command('notify').description('发送测试通知到 iOS').action(async () => {
|
|
374
|
+
const transport = (0, interface_1.getTransport)();
|
|
375
|
+
if (!transport) {
|
|
376
|
+
// Try via HTTP
|
|
377
|
+
try {
|
|
378
|
+
const status = await (await fetch('http://localhost:7749/status')).json();
|
|
379
|
+
if (status.connected) {
|
|
380
|
+
logger_1.log.info('Sending test via hook server...');
|
|
381
|
+
const res = await fetch('http://localhost:7749/hook', {
|
|
382
|
+
method: 'POST',
|
|
383
|
+
headers: { 'Content-Type': 'application/json' },
|
|
384
|
+
body: JSON.stringify({ tool_name: 'Bash', tool_input: { command: 'echo sentinel-test' } }),
|
|
385
|
+
});
|
|
386
|
+
logger_1.log.success(`Sent! Response: ${JSON.stringify(await res.json())}`);
|
|
387
|
+
}
|
|
388
|
+
else {
|
|
389
|
+
logger_1.log.warn('No iOS connected. Connect first.');
|
|
390
|
+
}
|
|
391
|
+
}
|
|
392
|
+
catch {
|
|
393
|
+
logger_1.log.error('Hook server not running.');
|
|
394
|
+
}
|
|
395
|
+
return;
|
|
396
|
+
}
|
|
397
|
+
if (!transport.isConnected) {
|
|
398
|
+
logger_1.log.warn('Transport not connected. Connect iOS first.');
|
|
399
|
+
return;
|
|
400
|
+
}
|
|
401
|
+
logger_1.log.info('Sending test approval request to iOS...');
|
|
402
|
+
try {
|
|
403
|
+
const id = await transport.sendApprovalRequest({ toolName: 'Bash', toolInput: { command: 'echo sentinel-test' }, riskLevel: 'medium' });
|
|
404
|
+
logger_1.log.success(`Sent! Request ID: ${id}. Check iOS.`);
|
|
405
|
+
}
|
|
406
|
+
catch (err) {
|
|
407
|
+
logger_1.log.error(`Failed: ${err.message}`);
|
|
408
|
+
}
|
|
409
|
+
});
|
|
410
|
+
test.command('rules').description('测试规则匹配').action(() => {
|
|
411
|
+
console.log(chalk_1.default.bold('\n 🧪 Rules Test\n'));
|
|
412
|
+
const cases = [
|
|
413
|
+
{ tool: 'Read', path: '/src/main.ts' },
|
|
414
|
+
{ tool: 'Write', path: '/src/main.ts' },
|
|
415
|
+
{ tool: 'Edit', path: '/src/main.ts' },
|
|
416
|
+
{ tool: 'Bash', path: null },
|
|
417
|
+
{ tool: 'Glob', path: null },
|
|
418
|
+
{ tool: 'Grep', path: null },
|
|
419
|
+
{ tool: 'Write', path: '/tmp/test.txt' },
|
|
420
|
+
{ tool: 'Write', path: '.env.local' },
|
|
421
|
+
{ tool: 'Read', path: '/secrets/key.pem' },
|
|
422
|
+
{ tool: 'Unknown', path: '/foo/bar' },
|
|
423
|
+
];
|
|
424
|
+
for (const c of cases) {
|
|
425
|
+
const result = (0, engine_1.matchRules)(c.tool, c.path);
|
|
426
|
+
const action = result.action === 'auto_allow' ? chalk_1.default.green('allow') : result.action === 'require_confirm' ? chalk_1.default.yellow('confirm') : chalk_1.default.red('faceid');
|
|
427
|
+
const rule = result.rule ? chalk_1.default.dim(`(${result.rule.id})`) : chalk_1.default.dim('(default)');
|
|
428
|
+
console.log(` ${chalk_1.default.cyan(c.tool.padEnd(8))} ${(c.path ?? '—').padEnd(25)} → ${action} ${rule}`);
|
|
429
|
+
}
|
|
430
|
+
console.log('');
|
|
431
|
+
});
|
|
432
|
+
// ==================== sentinel sessions ====================
|
|
433
|
+
program.command('sessions').description('查看会话历史').action(() => {
|
|
434
|
+
const sessions = (0, session_1.listSessions)(10);
|
|
435
|
+
console.log(chalk_1.default.bold('\n 📁 Recent Sessions\n'));
|
|
436
|
+
if (sessions.length === 0) {
|
|
437
|
+
logger_1.log.dim('No sessions yet.');
|
|
438
|
+
console.log('');
|
|
439
|
+
return;
|
|
440
|
+
}
|
|
441
|
+
for (const s of sessions) {
|
|
442
|
+
const date = new Date(s.startedAt).toLocaleString();
|
|
443
|
+
console.log(` ${chalk_1.default.dim(date)} ${chalk_1.default.cyan(`${s.events} events`)} ${chalk_1.default.green(`✓${s.stats.approved}`)} ${chalk_1.default.red(`✗${s.stats.blocked}`)}`);
|
|
444
|
+
}
|
|
445
|
+
console.log('');
|
|
446
|
+
});
|
|
447
|
+
// ==================== sentinel mode ====================
|
|
448
|
+
program.command('mode [name]').description('查看或切换权限模式')
|
|
449
|
+
.action((name) => {
|
|
450
|
+
if (!name) {
|
|
451
|
+
const info = (0, modes_1.getModeInfo)();
|
|
452
|
+
console.log(chalk_1.default.bold('\n 🎛 Permission Mode\n'));
|
|
453
|
+
console.log(` Current: ${chalk_1.default.cyan.bold(info.mode)}`);
|
|
454
|
+
console.log(` Changed: ${new Date(info.changedAt).toLocaleString()}\n`);
|
|
455
|
+
for (const m of modes_1.ALL_MODES) {
|
|
456
|
+
const marker = m === info.mode ? chalk_1.default.cyan('▸') : ' ';
|
|
457
|
+
const label = m === info.mode ? chalk_1.default.cyan.bold(m.padEnd(10)) : m.padEnd(10);
|
|
458
|
+
console.log(` ${marker} ${label} ${chalk_1.default.dim(modes_1.MODE_DESCRIPTIONS[m])}`);
|
|
459
|
+
}
|
|
460
|
+
console.log(`\n ${chalk_1.default.dim('Usage: sentinel mode <strict|relaxed|yolo|plan|lockdown>')}\n`);
|
|
461
|
+
return;
|
|
462
|
+
}
|
|
463
|
+
if (!modes_1.ALL_MODES.includes(name)) {
|
|
464
|
+
logger_1.log.error(`Invalid mode: ${name}. Use: ${modes_1.ALL_MODES.join(', ')}`);
|
|
465
|
+
process.exit(1);
|
|
466
|
+
}
|
|
467
|
+
(0, modes_1.setMode)(name);
|
|
468
|
+
logger_1.log.success(`Mode set to: ${name}`);
|
|
469
|
+
logger_1.log.dim(` ${modes_1.MODE_DESCRIPTIONS[name]}`);
|
|
470
|
+
});
|
|
471
|
+
// ==================== sentinel doctor ====================
|
|
472
|
+
program.command('doctor').description('系统诊断').action(async () => {
|
|
473
|
+
await (0, doctor_1.runDoctor)();
|
|
474
|
+
});
|
|
475
|
+
// ==================== sentinel notify ====================
|
|
476
|
+
program.command('notify <message>').description('发送通知到 iOS')
|
|
477
|
+
.option('-t, --title <title>', '通知标题', 'Sentinel')
|
|
478
|
+
.action(async (message, opts) => {
|
|
479
|
+
const title = opts.title;
|
|
480
|
+
// Try via running server first
|
|
481
|
+
try {
|
|
482
|
+
const statusRes = await fetch('http://localhost:7749/status');
|
|
483
|
+
const status = (await statusRes.json());
|
|
484
|
+
if (!status.connected) {
|
|
485
|
+
logger_1.log.error('iOS not connected');
|
|
486
|
+
process.exit(1);
|
|
487
|
+
}
|
|
488
|
+
// Send via a special hook that the server relays
|
|
489
|
+
const res = await fetch('http://localhost:7749/notify', {
|
|
490
|
+
method: 'POST',
|
|
491
|
+
headers: { 'Content-Type': 'application/json' },
|
|
492
|
+
body: JSON.stringify({ title, message }),
|
|
493
|
+
});
|
|
494
|
+
if (res.ok) {
|
|
495
|
+
logger_1.log.success(`Notification sent: "${message}"`);
|
|
496
|
+
}
|
|
497
|
+
else {
|
|
498
|
+
logger_1.log.error('Failed to send notification');
|
|
499
|
+
}
|
|
500
|
+
}
|
|
501
|
+
catch {
|
|
502
|
+
logger_1.log.error('Hook server not running. Start sentinel first.');
|
|
503
|
+
}
|
|
504
|
+
});
|
|
505
|
+
// ==================== sentinel daemon ====================
|
|
506
|
+
const daemon = program.command('daemon').description('后台服务管理');
|
|
507
|
+
daemon.command('start').description('后台启动 Sentinel')
|
|
508
|
+
.option('-m, --mode <mode>', '连接模式', 'local')
|
|
509
|
+
.option('-p, --port <port>', 'HTTP hook 端口', '7749')
|
|
510
|
+
.option('-s, --server <url>', '服务器地址')
|
|
511
|
+
.action((opts) => {
|
|
512
|
+
(0, daemon_1.daemonStart)(opts.mode, parseInt(opts.port, 10), opts.server);
|
|
513
|
+
});
|
|
514
|
+
daemon.command('stop').description('停止后台服务').action(() => {
|
|
515
|
+
(0, daemon_1.daemonStop)();
|
|
516
|
+
});
|
|
517
|
+
daemon.command('status').description('查看后台服务状态').action(async () => {
|
|
518
|
+
await (0, daemon_1.daemonStatus)();
|
|
519
|
+
});
|
|
520
|
+
daemon.command('restart').description('重启后台服务')
|
|
521
|
+
.option('-m, --mode <mode>', '连接模式', 'local')
|
|
522
|
+
.option('-p, --port <port>', 'HTTP hook 端口', '7749')
|
|
523
|
+
.option('-s, --server <url>', '服务器地址')
|
|
524
|
+
.action((opts) => {
|
|
525
|
+
(0, daemon_1.daemonRestart)(opts.mode, parseInt(opts.port, 10), opts.server);
|
|
526
|
+
});
|
|
527
|
+
daemon.command('autostart').description('安装 macOS 开机自启(launchd)')
|
|
528
|
+
.option('-m, --mode <mode>', '连接模式', 'local')
|
|
529
|
+
.option('-p, --port <port>', 'HTTP hook 端口', '7749')
|
|
530
|
+
.action((opts) => {
|
|
531
|
+
(0, daemon_1.daemonInstallLaunchd)(opts.mode, parseInt(opts.port, 10));
|
|
532
|
+
});
|
|
533
|
+
program.parse();
|
|
534
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;;;;AAEA,yCAAoC;AACpC,kDAA0B;AAC1B,sEAAqC;AACrC,0CAA2E;AAC3E,4CAA8D;AAC9D,4CAAuD;AACvD,yCAAoD;AACpD,sDAA0E;AAC1E,8CAAoD;AACpD,4CAA2D;AAC3D,0CAA8E;AAC9E,gDAA+F;AAC/F,0CAA0C;AAC1C,0CAA2G;AAC3G,wCAAgH;AAChH,4CAA8C;AAC9C,0CAAoC;AACpC,0DAAgE;AAChE,2CAAgD;AAEhD,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,kCAAkC,CAAC;KAC/C,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAsB,CAAC;IACnF,YAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,gCAAgC,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,GAAG,GAAG,EAAE,CAAC;IACtC,OAAO,GAAG,CAAC,CAAC,kBAAkB;AAChC,CAAC;AAED,2DAA2D;AAE3D,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,oCAAoC,CAAC;KACjD,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,MAAM,CAAC;KACnD,MAAM,CAAC,mBAAmB,EAAE,iCAAiC,EAAE,OAAO,CAAC;KACvE,MAAM,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;KAClD,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC;KAC9B,MAAM,CAAC,cAAc,EAAE,4BAA4B,CAAC;KACpD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,IAAA,oBAAW,EAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAElE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACnD,YAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAE1B,MAAM,EAAE,GAAG,IAAA,4BAAgB,GAAE,CAAC;IAC9B,IAAI,EAAE,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC/E,IAAI,EAAE,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACjF,IAAI,IAAA,qBAAY,GAAE;QAAE,YAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAiB,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAElG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,YAAG,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,YAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEL,yDAAyD;AAEzD,OAAO;KACJ,OAAO,CAAC,qBAAqB,CAAC;KAC9B,WAAW,CAAC,8CAA8C,CAAC;KAC3D,MAAM,CAAC,mBAAmB,EAAE,iCAAiC,EAAE,OAAO,CAAC;KACvE,MAAM,CAAC,cAAc,EAAE,yBAAyB,CAAC;KACjD,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,MAAM,CAAC;KACnD,kBAAkB,CAAC,IAAI,CAAC;KACxB,MAAM,CAAC,KAAK,EAAE,UAAoB,EAAE,IAAI,EAAE,EAAE;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAElC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACnD,YAAG,CAAC,IAAI,CAAC,SAAS,IAAI,gCAAgC,CAAC,CAAC;IAExD,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAiB,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAElG,IAAA,4BAAW,EAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAErD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,YAAG,CAAC,OAAO,CAAC,wEAAwE,CAAC,CAAC;IACtF,YAAG,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IAErF,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,YAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAA,2BAAU,GAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEL,yEAAyE;AAEzE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC;KAC1E,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,MAAM,CAAC;KACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAA,mBAAW,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/D,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,kCAAkC,CAAC;KACzE,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,MAAM,CAAC;KACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAA,qBAAa,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjE,0DAA0D;AAE1D,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC;KAC7C,MAAM,CAAC,mBAAmB,EAAE,iCAAiC,EAAE,OAAO,CAAC;KACvE,MAAM,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;KAClD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,sBAAc,EAAE,CAAC;QACvC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC1C,YAAG,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,YAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnC,YAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC1B,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,YAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACxB,UAAU,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACjE,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;SAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACjD,YAAG,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,IAAA,2BAAkB,GAAE,CAAC;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,YAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC/E,MAAM,SAAS,GAAG,MAAM,IAAA,oBAAW,EAAC,SAAS,CAAC,CAAC;QAC/C,YAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,eAAe,EAAE;YACnD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;SACjD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,YAAG,CAAC,KAAK,CAAC,WAAW,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoE,CAAC;QACnG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,YAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAClE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACtC,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,GAAG,IAAI,MAAM,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAClD,yBAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,EAAU,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,eAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,yBAAyB,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACnG,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAmE,CAAC;gBAC/F,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAAC,aAAa,CAAC,IAAI,CAAC,CAAC;oBAAC,YAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;YAC7H,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAG,CAAC,GAAG,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,UAAU,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,YAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,4DAA4D;AAE5D,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IACxE,MAAM,KAAK,GAAG,IAAA,kBAAS,GAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,EAAE,CAAC;QAAC,YAAG,CAAC,OAAO,CAAC,WAAW,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAAC,YAAG,CAAC,OAAO,CAAC,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC;SAC9F,CAAC;QAAC,YAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAAC,CAAC;IACrD,YAAG,CAAC,IAAI,CAAC,eAAe,IAAA,yBAAkB,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,YAAG,CAAC,OAAO,CAAC,8BAA8B,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,eAAe,WAAW,CAAC,CAAC;QACzF,YAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QAAC,YAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAAC,CAAC;IAEjD,YAAG,CAAC,IAAI,CAAC,UAAU,IAAA,iBAAQ,GAAE,CAAC,MAAM,SAAS,CAAC,CAAC;IAE/C,YAAY;IACZ,MAAM,EAAE,GAAG,IAAA,2BAAe,GAAE,CAAC;IAC7B,IAAI,EAAE,CAAC,QAAQ;QAAE,YAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChI,IAAI,EAAE,CAAC,QAAQ;QAAE,YAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhI,SAAS;IACT,MAAM,CAAC,GAAG,IAAA,wBAAe,GAAE,CAAC;IAC5B,YAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAElI,cAAc;IACd,MAAM,KAAK,GAAG,IAAA,uBAAa,GAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,OAAO,eAAK,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,UAAU,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,UAAU,CAAC,KAAK,eAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,OAAO,UAAU,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,CAAC,CAAC;QACtM,IAAI,KAAK,CAAC,eAAe;YAAE,YAAG,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,2DAA2D;AAE3D,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACzD,MAAM,KAAK,GAAG,IAAA,iBAAQ,GAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,eAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjJ,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,eAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,0DAA0D;AAE1D,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;KAC1C,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC;KACvC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAA,oBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,YAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1K,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACtI,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACxK,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,eAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9N,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,OAAO,IAAA,oBAAU,GAAE,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AAEL,4DAA4D;AAE5D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AAE7D,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,MAAc,EAAE,EAAE;IACjF,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QAAC,YAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC7E,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;IACpB,YAAG,CAAC,OAAO,CAAC,wBAAwB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACzD,MAAM,CAAC,GAAG,IAAA,wBAAe,GAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3H,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACxD,IAAA,uBAAc,EAAC,IAAA,wBAAe,GAAE,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB;IACjE,YAAG,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,2DAA2D;AAE3D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;AAE/D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;KACtC,MAAM,CAAC,wBAAwB,EAAE,iBAAiB,CAAC;KACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAA,uBAAW,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,OAAO,EAAE,CAAC;QACZ,YAAG,CAAC,OAAO,CAAC,yBAAyB,OAAO,mBAAmB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACjI,CAAC;SAAM,CAAC;QACN,YAAG,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACnD,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC;IACnB,YAAG,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,2DAA2D;AAE3D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;AAE/D,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;KACtC,MAAM,CAAC,wBAAwB,EAAE,iBAAiB,CAAC;KACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAA,uBAAW,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,OAAO,EAAE,CAAC;QACZ,YAAG,CAAC,OAAO,CAAC,yBAAyB,OAAO,UAAU,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,YAAG,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACnD,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC;IACnB,YAAG,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,2DAA2D;AAE3D,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,YAAG,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC5K,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAAC,YAAG,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAE9F,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAEhB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBACzC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACvC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;oBACpI,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC9G,MAAM,MAAM,GAAG,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;oBAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;gBACnF,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAG,CAAC,KAAK,CAAC,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,YAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACxC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,0DAA0D;AAE1D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AAEzD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjE,YAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,4BAA4B,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,wBAAwB,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;SACtH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,YAAG,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAG,CAAC,KAAK,CAAC,WAAY,GAAa,CAAC,OAAO,kCAAkC,CAAC,CAAC;IACjF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IAClE,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;IACjC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,eAAe;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,EAA6B,CAAC;YACrG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,YAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;gBAC5C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,4BAA4B,EAAE;oBACpD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,CAAC;iBAC3F,CAAC,CAAC;gBACH,YAAG,CAAC,OAAO,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,YAAG,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACxC,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAAC,YAAG,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAChG,YAAG,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxI,YAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAG,CAAC,KAAK,CAAC,WAAY,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACtD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG;QACZ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE;QACvC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE;QACtC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;QAC5B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE;QACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE;QACrC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE;QAC1C,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE;KACtC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,CAAC,eAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3J,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,8DAA8D;AAE9D,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IAC5D,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,EAAE,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,YAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IACpF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,0DAA0D;AAE1D,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC;KACpD,MAAM,CAAC,CAAC,IAAa,EAAE,EAAE;IACxB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,IAAA,mBAAW,GAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,cAAc,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACzE,KAAK,MAAM,CAAC,IAAI,iBAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACvD,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,KAAK,IAAI,eAAK,CAAC,GAAG,CAAC,yBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,eAAK,CAAC,GAAG,CAAC,0DAA0D,CAAC,IAAI,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;IACD,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,IAAsB,CAAC,EAAE,CAAC;QAChD,YAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,UAAU,iBAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAA,eAAO,EAAC,IAAsB,CAAC,CAAC;IAChC,YAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACpC,YAAG,CAAC,GAAG,CAAC,KAAK,yBAAiB,CAAC,IAAsB,CAAC,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEL,4DAA4D;AAE5D,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IAC9D,MAAM,IAAA,kBAAS,GAAE,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH,4DAA4D;AAE5D,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC;KACzD,MAAM,CAAC,qBAAqB,EAAE,MAAM,EAAE,UAAU,CAAC;KACjD,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAI,EAAE,EAAE;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAEzB,+BAA+B;IAC/B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAA4B,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,YAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,iDAAiD;QACjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;SACzC,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,YAAG,CAAC,OAAO,CAAC,uBAAuB,OAAO,GAAG,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,YAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAG,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,4DAA4D;AAE5D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AAE/D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC;KACjD,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC;KAC5C,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,MAAM,CAAC;KACnD,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC;KACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,IAAA,oBAAW,EAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;IACvD,IAAA,mBAAU,GAAE,CAAC;AACf,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;IACjE,MAAM,IAAA,qBAAY,GAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;KAC5C,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC;KAC5C,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,MAAM,CAAC;KACnD,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC;KACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,IAAA,sBAAa,EAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,wBAAwB,CAAC;KAC9D,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC;KAC5C,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,MAAM,CAAC;KACnD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,IAAA,6BAAoB,EAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
import nacl from 'tweetnacl';
|
|
2
|
+
import { encodeBase64, decodeBase64 } from 'tweetnacl-util';
|
|
3
|
+
/**
|
|
4
|
+
* 获取 Ed25519 签名密钥对(从 seed 派生)
|
|
5
|
+
*/
|
|
6
|
+
export declare function getKeyPair(): nacl.SignKeyPair;
|
|
7
|
+
/**
|
|
8
|
+
* 公钥 base64
|
|
9
|
+
*/
|
|
10
|
+
export declare function getPublicKeyBase64(): string;
|
|
11
|
+
export interface AuthChallenge {
|
|
12
|
+
challenge: string;
|
|
13
|
+
publicKey: string;
|
|
14
|
+
signature: string;
|
|
15
|
+
}
|
|
16
|
+
/**
|
|
17
|
+
* 生成认证 challenge:
|
|
18
|
+
* 1. 生成 32 字节随机 challenge
|
|
19
|
+
* 2. 用 Ed25519 私钥签名
|
|
20
|
+
* 3. 返回 { challenge, publicKey, signature } — 全部 base64
|
|
21
|
+
*/
|
|
22
|
+
export declare function authChallenge(): AuthChallenge;
|
|
23
|
+
/**
|
|
24
|
+
* 加密数据给目标设备(参考 Happy encryption.ts):
|
|
25
|
+
*
|
|
26
|
+
* 1. 生成 ephemeral X25519 密钥对
|
|
27
|
+
* 2. 生成 24 字节随机 nonce
|
|
28
|
+
* 3. nacl.box(data, nonce, recipientPublicKey, ephemeral.secretKey)
|
|
29
|
+
* 4. 返回: ephemeralPubKey(32) + nonce(24) + encryptedData
|
|
30
|
+
*/
|
|
31
|
+
export declare function encryptForDevice(data: Uint8Array, recipientPublicKey: Uint8Array): Uint8Array;
|
|
32
|
+
/**
|
|
33
|
+
* 解密来自设备的数据(反向 encryptForDevice):
|
|
34
|
+
*
|
|
35
|
+
* 1. 提取 ephemeralPubKey(32) + nonce(24) + encryptedData
|
|
36
|
+
* 2. nacl.box.open(encryptedData, nonce, ephemeralPubKey, mySecretKey)
|
|
37
|
+
*/
|
|
38
|
+
export declare function decryptFromDevice(bundle: Uint8Array, mySecretKey: Uint8Array): Uint8Array;
|
|
39
|
+
export declare function getSentinelDir(): string;
|
|
40
|
+
export { encodeBase64, decodeBase64 };
|