@two7722/sentinel-guard 1.1.0

package/dist/rules/engine.js

@@ -0,0 +1,203 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRules = getRules;
+exports.setCustomRules = setCustomRules;
+exports.watchRules = watchRules;
+exports.matchRules = matchRules;
+exports.riskToLevel = riskToLevel;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const keys_1 = require("../crypto/keys");
+const logger_1 = require("../lib/logger");
+// ==================== Default Rules ====================
+const DEFAULT_RULES = [
+    {
+        id: 'builtin-bash-high',
+        toolPattern: 'Bash',
+        pathPattern: null,
+        risk: 'require_faceid',
+        priority: 10,
+        description: 'Bash commands require Face ID',
+    },
+    {
+        id: 'builtin-write-confirm',
+        toolPattern: 'Write',
+        pathPattern: null,
+        risk: 'require_confirm',
+        priority: 20,
+        description: 'File writes require confirmation',
+    },
+    {
+        id: 'builtin-edit-confirm',
+        toolPattern: 'Edit',
+        pathPattern: null,
+        risk: 'require_confirm',
+        priority: 20,
+        description: 'File edits require confirmation',
+    },
+    {
+        id: 'builtin-tmp-allow',
+        toolPattern: '*',
+        pathPattern: '/tmp/**',
+        risk: 'auto_allow',
+        priority: 5,
+        description: 'Auto-allow /tmp operations',
+    },
+    {
+        id: 'builtin-env-faceid',
+        toolPattern: '*',
+        pathPattern: '**/.env*',
+        risk: 'require_faceid',
+        priority: 1,
+        description: '.env files require Face ID',
+    },
+    {
+        id: 'builtin-read-allow',
+        toolPattern: 'Read',
+        pathPattern: null,
+        risk: 'auto_allow',
+        priority: 50,
+        description: 'Auto-allow file reads',
+    },
+    {
+        id: 'builtin-glob-allow',
+        toolPattern: 'Glob',
+        pathPattern: null,
+        risk: 'auto_allow',
+        priority: 50,
+        description: 'Auto-allow glob searches',
+    },
+    {
+        id: 'builtin-grep-allow',
+        toolPattern: 'Grep',
+        pathPattern: null,
+        risk: 'auto_allow',
+        priority: 50,
+        description: 'Auto-allow grep searches',
+    },
+];
+// ==================== Rules File ====================
+const RULES_PATH = (0, path_1.join)((0, keys_1.getSentinelDir)(), 'rules.json');
+let cachedRules = null;
+let cacheLoading = false;
+function loadRules() {
+    if (cachedRules)
+        return cachedRules;
+    // Prevent concurrent loads from overwriting each other
+    if (cacheLoading)
+        return DEFAULT_RULES;
+    cacheLoading = true;
+    try {
+        if (!(0, fs_1.existsSync)(RULES_PATH)) {
+            (0, fs_1.writeFileSync)(RULES_PATH, JSON.stringify(DEFAULT_RULES, null, 2), { mode: 0o600 });
+            cachedRules = DEFAULT_RULES;
+            return DEFAULT_RULES;
+        }
+        cachedRules = JSON.parse((0, fs_1.readFileSync)(RULES_PATH, 'utf-8'));
+        return cachedRules;
+    }
+    catch {
+        cachedRules = DEFAULT_RULES;
+        return DEFAULT_RULES;
+    }
+    finally {
+        cacheLoading = false;
+    }
+}
+function getRules() {
+    return loadRules();
+}
+// ==================== Custom Rules (from iOS) ====================
+let iosCustomRules = [];
+/** Set custom rules received from iOS (merged with file rules) */
+function setCustomRules(rules) {
+    iosCustomRules = rules.map((r, i) => ({
+        ...r,
+        id: r.id ?? `ios-custom-${i}`,
+        priority: r.priority ?? 0,
+        risk: (r.risk ?? 'require_confirm'),
+        description: r.description ?? '',
+    }));
+    cachedRules = null; // invalidate cache to merge on next load
+    logger_1.log.info(`Custom rules from iOS: ${iosCustomRules.length}`);
+}
+/** Watch rules.json for changes and auto-reload */
+function watchRules() {
+    // Ensure file exists first
+    loadRules();
+    try {
+        let debounce = null;
+        (0, fs_1.watch)(RULES_PATH, () => {
+            if (debounce)
+                clearTimeout(debounce);
+            debounce = setTimeout(() => {
+                cachedRules = null; // invalidate cache
+                const rules = loadRules();
+                logger_1.log.info(`Rules reloaded (${rules.length} rules)`);
+            }, 300);
+        });
+        logger_1.log.debug(`Watching ${RULES_PATH} for changes`);
+    }
+    catch {
+        logger_1.log.debug('Could not watch rules file');
+    }
+}
+// ==================== Glob Matching ====================
+/**
+ * 简单 glob 匹配，支持 * 和 **
+ */
+function globMatch(pattern, value) {
+    // Escape regex special chars, then convert glob patterns
+    const regex = pattern
+        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+        .replace(/\*\*/g, '{{DOUBLESTAR}}')
+        .replace(/\*/g, '[^/]*')
+        .replace(/{{DOUBLESTAR}}/g, '.*');
+    return new RegExp(`^${regex}$`).test(value);
+}
+// ==================== Engine ====================
+/**
+ * 匹配工具调用 against 规则列表
+ *
+ * @param toolName   - 工具名，e.g. "Bash", "Write", "Edit"
+ * @param filePath   - 文件路径（可选），e.g. "/tmp/foo.txt"
+ * @returns          - 匹配结果：{ matched, rule, action }
+ */
+function matchRules(toolName, filePath) {
+    // Merge: iOS custom rules (priority 0) + file rules, sorted by priority
+    const rules = [...iosCustomRules, ...loadRules()].sort((a, b) => a.priority - b.priority);
+    for (const rule of rules) {
+        let toolMatch = true;
+        let pathMatch = true;
+        // Tool pattern
+        if (rule.toolPattern) {
+            toolMatch = globMatch(rule.toolPattern, toolName);
+        }
+        // Path pattern — 只有当规则有 pathPattern 且调用有 filePath 时才匹配
+        if (rule.pathPattern) {
+            if (!filePath) {
+                pathMatch = false; // 规则要求路径但调用没有路径
+            }
+            else {
+                pathMatch = globMatch(rule.pathPattern, filePath);
+            }
+        }
+        if (toolMatch && pathMatch) {
+            logger_1.log.debug(`Rule matched: [${rule.id}] ${rule.description} → ${rule.risk}`);
+            return { matched: true, rule, action: rule.risk };
+        }
+    }
+    // 无匹配 → 默认需要确认
+    return { matched: false, rule: null, action: 'require_confirm' };
+}
+/**
+ * 将工具调用的风险等级映射为 server riskLevel
+ */
+function riskToLevel(action) {
+    switch (action) {
+        case 'auto_allow': return 'low';
+        case 'require_confirm': return 'medium';
+        case 'require_faceid': return 'high';
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/rules/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/rules/engine.ts"],"names":[],"mappings":";;AA2HA,4BAEC;AAOD,wCAUC;AAGD,gCAiBC;AA2BD,gCAiCC;AAKD,kCAMC;AAzOD,2BAAoE;AACpE,+BAA4B;AAC5B,yCAAgD;AAChD,0CAAoC;AAqBpC,0DAA0D;AAE1D,MAAM,aAAa,GAAW;IAC5B;QACE,EAAE,EAAE,mBAAmB;QACvB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,+BAA+B;KAC7C;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,kCAAkC;KAChD;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,WAAW,EAAE,GAAG;QAChB,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,WAAW,EAAE,GAAG;QAChB,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,CAAC;QACX,WAAW,EAAE,4BAA4B;KAC1C;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,0BAA0B;KACxC;CACF,CAAC;AAEF,uDAAuD;AAEvD,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,IAAA,qBAAc,GAAE,EAAE,YAAY,CAAC,CAAC;AAExD,IAAI,WAAW,GAAkB,IAAI,CAAC;AACtC,IAAI,YAAY,GAAG,KAAK,CAAC;AAEzB,SAAS,SAAS;IAChB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,uDAAuD;IACvD,IAAI,YAAY;QAAE,OAAO,aAAa,CAAC;IACvC,YAAY,GAAG,IAAI,CAAC;IAEpB,IAAI,CAAC;QACH,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnF,WAAW,GAAG,aAAa,CAAC;YAC5B,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAW,CAAC;QACtE,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,aAAa,CAAC;QAC5B,OAAO,aAAa,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED,oEAAoE;AAEpE,IAAI,cAAc,GAAW,EAAE,CAAC;AAEhC,kEAAkE;AAClE,SAAgB,cAAc,CAAC,KAAa;IAC1C,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC;QACJ,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,cAAc,CAAC,EAAE;QAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,iBAAiB,CAAe;QACjD,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;KACjC,CAAC,CAAC,CAAC;IACJ,WAAW,GAAG,IAAI,CAAC,CAAC,yCAAyC;IAC7D,YAAG,CAAC,IAAI,CAAC,0BAA0B,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,mDAAmD;AACnD,SAAgB,UAAU;IACxB,2BAA2B;IAC3B,SAAS,EAAE,CAAC;IACZ,IAAI,CAAC;QACH,IAAI,QAAQ,GAA0B,IAAI,CAAC;QAC3C,IAAA,UAAK,EAAC,UAAU,EAAE,GAAG,EAAE;YACrB,IAAI,QAAQ;gBAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzB,WAAW,GAAG,IAAI,CAAC,CAAC,mBAAmB;gBACvC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;gBAC1B,YAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACrD,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,YAAG,CAAC,KAAK,CAAC,YAAY,UAAU,cAAc,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,YAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,0DAA0D;AAE1D;;GAEG;AACH,SAAS,SAAS,CAAC,OAAe,EAAE,KAAa;IAC/C,yDAAyD;IACzD,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC;SAClC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAEpC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,mDAAmD;AAEnD;;;;;;GAMG;AACH,SAAgB,UAAU,CACxB,QAAgB,EAChB,QAAuB;IAEvB,wEAAwE;IACxE,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAE1F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,SAAS,GAAG,IAAI,CAAC;QAErB,eAAe;QACf,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC;QAED,uDAAuD;QACvD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,SAAS,GAAG,KAAK,CAAC,CAAC,gBAAgB;YACrC,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC3B,YAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,WAAW,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAED,eAAe;IACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,MAAkB;IAC5C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC;QAChC,KAAK,iBAAiB,CAAC,CAAC,OAAO,QAAQ,CAAC;QACxC,KAAK,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/server/http.d.ts

@@ -0,0 +1,8 @@
+import express from 'express';
+export declare function pushEvent(data: Record<string, unknown>): void;
+/** Send a terminal line to iOS via transport */
+export declare function sendTerminalLine(text: string): void;
+export declare function createHttpServer(port?: number): express.Application;
+export declare function startHttpServer(port?: number): Promise<void>;
+/** Setup user message handler from LocalTransport */
+export declare function setupUserMessageHandler(): void;

package/dist/server/http.js

@@ -0,0 +1,359 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pushEvent = pushEvent;
+exports.sendTerminalLine = sendTerminalLine;
+exports.createHttpServer = createHttpServer;
+exports.startHttpServer = startHttpServer;
+exports.setupUserMessageHandler = setupUserMessageHandler;
+const express_1 = __importDefault(require("express"));
+const zod_1 = require("zod");
+const crypto_1 = require("crypto");
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const engine_1 = require("../rules/engine");
+const interface_1 = require("../transport/interface");
+const pending_1 = require("../relay/pending");
+const history_1 = require("../lib/history");
+const overrides_1 = require("../lib/overrides");
+const budget_1 = require("../lib/budget");
+const summarizer_1 = require("../lib/summarizer");
+const modes_1 = require("../lib/modes");
+const session_1 = require("../lib/session");
+const diff_1 = require("../lib/diff");
+const keys_1 = require("../crypto/keys");
+const logger_1 = require("../lib/logger");
+const unicode_animations_1 = __importDefault(require("unicode-animations"));
+const claude_process_1 = require("../lib/claude-process");
+/** Show an animated spinner for `durationMs`, then clear the line. */
+function showSpinner(name, prefix, durationMs) {
+    const { frames, interval } = unicode_animations_1.default[name];
+    let i = 0;
+    const id = setInterval(() => {
+        process.stdout.write(`\r\x1B[2K ${frames[i++ % frames.length]} ${prefix}`);
+    }, interval);
+    setTimeout(() => {
+        clearInterval(id);
+        process.stdout.write('\r\x1B[2K');
+    }, durationMs);
+}
+const HookPayloadSchema = zod_1.z.object({
+    tool_name: zod_1.z.string(),
+    tool_input: zod_1.z.record(zod_1.z.unknown()),
+});
+const PENDING_MSG_PATH = (0, path_1.join)((0, keys_1.getSentinelDir)(), 'pending_message.txt');
+// SSE access token — generated at startup, required for /events and /terminal
+const SSE_TOKEN = (0, crypto_1.randomBytes)(16).toString('hex');
+// SSE clients
+const sseClients = new Set();
+function pushEvent(data) {
+    const msg = `data: ${JSON.stringify(data)}\n\n`;
+    for (const client of sseClients) {
+        client.write(msg);
+    }
+}
+/** Send a terminal line to iOS via transport */
+function sendTerminalLine(text) {
+    const transport = (0, interface_1.getTransport)();
+    if (transport?.isConnected) {
+        transport.sendEvent?.({ type: 'terminal', text });
+    }
+    const msg = `data: ${JSON.stringify({ text, time: Date.now() })}\n\n`;
+    for (const client of terminalClients) {
+        client.write(msg);
+    }
+}
+const terminalClients = new Set();
+function sendActivity(type, data) {
+    const transport = (0, interface_1.getTransport)();
+    logger_1.log.debug(`sendActivity: transport=${transport?.mode ?? 'null'} connected=${transport?.isConnected} hasSendEvent=${!!transport?.sendEvent}`);
+    if (transport?.isConnected) {
+        transport.sendEvent?.({ type, ...data, timestamp: new Date().toISOString() });
+    }
+}
+function createHttpServer(port = 7749) {
+    const app = (0, express_1.default)();
+    app.use(express_1.default.json({ limit: '512kb' }));
+    // ==================== PreToolUse hook ====================
+    app.post('/hook', async (req, res) => {
+        const parsed = HookPayloadSchema.safeParse(req.body);
+        if (!parsed.success) {
+            logger_1.log.warn(`Invalid hook payload: ${parsed.error.message}`);
+            return res.status(400).json({ error: 'Invalid payload' });
+        }
+        const { tool_name, tool_input } = parsed.data;
+        const filePath = (tool_input.file_path ?? tool_input.path ?? null);
+        const requestId = (0, crypto_1.randomBytes)(8).toString('hex');
+        const ts = new Date().toISOString();
+        logger_1.log.info(`Hook: ${tool_name}${filePath ? ` → ${filePath}` : ''}`);
+        // Auto-start session on first hook
+        if (!(0, session_1.getCurrentSession)())
+            (0, session_1.startSession)();
+        // 0. Check overrides
+        const overrides = (0, overrides_1.getOverrideState)();
+        if (overrides.blockAll) {
+            logger_1.log.warn(`BLOCKED (override): ${tool_name}`);
+            (0, history_1.appendLog)({ id: requestId, toolName: tool_name, filePath, riskLevel: 'override', decision: 'blocked', timestamp: ts });
+            pushEvent({ time: ts, tool: tool_name, path: filePath, decision: 'blocked', reason: 'override' });
+            return res.json({ decision: 'block', reason: 'blocked by sentinel block' });
+        }
+        if (overrides.allowAll) {
+            logger_1.log.success(`ALLOWED (override): ${tool_name}`);
+            (0, history_1.appendLog)({ id: requestId, toolName: tool_name, filePath, riskLevel: 'override', decision: 'allowed', timestamp: ts });
+            pushEvent({ time: ts, tool: tool_name, path: filePath, decision: 'allowed', reason: 'override' });
+            return res.json({ decision: 'allow' });
+        }
+        if ((0, budget_1.isOverBudget)())
+            logger_1.log.warn('⚠ Over daily budget!');
+        // 0.6 Permission mode check
+        const modeResult = (0, modes_1.shouldAutoAllow)(tool_name);
+        if (modeResult === 'block') {
+            (0, history_1.appendLog)({ id: requestId, toolName: tool_name, filePath, riskLevel: 'lockdown', decision: 'blocked', timestamp: ts });
+            pushEvent({ time: ts, tool: tool_name, path: filePath, decision: 'blocked', reason: 'lockdown' });
+            return res.json({ decision: 'block', reason: 'lockdown mode' });
+        }
+        if (modeResult === 'auto_allow') {
+            (0, history_1.appendLog)({ id: requestId, toolName: tool_name, filePath, riskLevel: 'mode', decision: 'auto_allow', timestamp: ts, summary: `${(0, modes_1.getMode)()} mode` });
+            pushEvent({ time: ts, tool: tool_name, path: filePath, decision: 'allowed', reason: `mode:${(0, modes_1.getMode)()}` });
+            return res.json({ decision: 'allow' });
+        }
+        // 1. Local rules
+        const match = (0, engine_1.matchRules)(tool_name, filePath);
+        if (match.action === 'auto_allow') {
+            logger_1.log.success(`Auto-allow: ${tool_name} (rule: ${match.rule?.id ?? 'default'})`);
+            (0, history_1.appendLog)({ id: requestId, toolName: tool_name, filePath, riskLevel: 'auto_allow', decision: 'auto_allow', timestamp: ts });
+            pushEvent({ time: ts, tool: tool_name, path: filePath, decision: 'allowed', reason: `auto:${match.rule?.id ?? ''}` });
+            return res.json({ decision: 'allow' });
+        }
+        // 2. Check transport
+        const transport = (0, interface_1.getTransport)();
+        if (!transport || !transport.isConnected) {
+            logger_1.log.error(`${transport?.mode ?? 'no'} transport offline — blocking`);
+            (0, history_1.appendLog)({ id: requestId, toolName: tool_name, filePath, riskLevel: (0, engine_1.riskToLevel)(match.action), decision: 'offline', timestamp: ts });
+            pushEvent({ time: ts, tool: tool_name, path: filePath, decision: 'blocked', reason: 'offline' });
+            return res.json({ decision: 'block', reason: 'Sentinel offline' });
+        }
+        try {
+            // 为 Write/Edit 生成 diff
+            const diff = (0, diff_1.generateDiff)(tool_name, tool_input);
+            const contextSummary = req.body.context_summary
+                ?? req.body.contextSummary;
+            const remoteId = await transport.sendApprovalRequest({
+                toolName: tool_name,
+                toolInput: tool_input,
+                riskLevel: (0, engine_1.riskToLevel)(match.action),
+                diff,
+                contextSummary,
+            });
+            logger_1.log.info(`[${transport.mode}] Waiting: ${remoteId}`);
+            const action = await pending_1.pending.waitForDecision(remoteId, tool_name);
+            (0, history_1.appendLog)({ id: remoteId, toolName: tool_name, filePath, riskLevel: (0, engine_1.riskToLevel)(match.action), decision: action, timestamp: ts });
+            pushEvent({ time: ts, tool: tool_name, path: filePath, decision: action === 'allowed' ? 'allowed' : 'blocked', reason: action === 'allowed' ? 'manual' : action });
+            if (action === 'allowed') {
+                logger_1.log.success(`Allowed: ${tool_name} (${remoteId})`);
+                sendTerminalLine(`✅ ${tool_name}${filePath ? ` → ${filePath}` : ''} — allowed`);
+                return res.json({ decision: 'allow' });
+            }
+            else {
+                logger_1.log.warn(`Blocked: ${tool_name} (${remoteId}) — ${action}`);
+                sendTerminalLine(`❌ ${tool_name}${filePath ? ` → ${filePath}` : ''} — ${action}`);
+                return res.json({ decision: 'block', reason: action });
+            }
+        }
+        catch (err) {
+            logger_1.log.error(`Hook error: ${err.message}`);
+            (0, history_1.appendLog)({ id: requestId, toolName: tool_name, filePath, riskLevel: (0, engine_1.riskToLevel)(match.action), decision: 'blocked', timestamp: ts });
+            return res.json({ decision: 'block', reason: 'Internal error' });
+        }
+    });
+    // ==================== PostToolUse / Notification / Stop events ====================
+    app.post('/event', (req, res) => {
+        const body = req.body ?? {};
+        const hookEvent = body.hook_event_name ?? body.event ?? '';
+        const ts = new Date().toISOString();
+        if (hookEvent === 'PostToolUse' || hookEvent === 'post_tool_use') {
+            const toolName = body.tool_name ?? body.toolName ?? 'unknown';
+            const toolInput = body.tool_input ?? body.toolInput ?? {};
+            const toolResponse = typeof body.tool_response === 'string' ? body.tool_response : JSON.stringify(body.tool_response ?? '').slice(0, 200);
+            const summary = (0, summarizer_1.summarize)(toolName, toolInput, toolResponse);
+            logger_1.log.dim(`[event] ${toolName}: ${summary}`);
+            (0, history_1.appendLog)({ id: (0, crypto_1.randomBytes)(4).toString('hex'), toolName, filePath: (toolInput.file_path ?? toolInput.path ?? null), riskLevel: 'completed', decision: 'completed', timestamp: ts, result: 'success', summary });
+            sendActivity('tool_completed', { toolName, summary });
+            pushEvent({ time: ts, type: 'tool_completed', tool: toolName, summary });
+            // Terminal output: send tool response to iOS terminal view
+            const responseText = typeof body.tool_response === 'string'
+                ? body.tool_response
+                : JSON.stringify(body.tool_response ?? '', null, 2);
+            sendTerminalLine(`[${toolName}] ${summary}`);
+            if (responseText && responseText.length > 2) {
+                const lines = responseText.slice(0, 2000).split('\n');
+                for (const line of lines) {
+                    sendTerminalLine(line);
+                }
+            }
+        }
+        else if (hookEvent === 'Notification' || hookEvent === 'notification') {
+            const message = body.message ?? body.text ?? '';
+            logger_1.log.info(`[event] Notification: ${message}`);
+            sendActivity('notification', { message });
+            sendTerminalLine(`📢 ${message}`);
+            // Also send system notification
+            const transport = (0, interface_1.getTransport)();
+            if (transport?.isConnected && transport.sendNotification) {
+                transport.sendNotification('Claude Code', message);
+            }
+            pushEvent({ time: ts, type: 'notification', message });
+        }
+        else if (hookEvent === 'Stop' || hookEvent === 'stop') {
+            const stopReason = body.stop_reason ?? body.reason ?? 'completed';
+            const summary = (0, summarizer_1.summarizeStop)(stopReason);
+            logger_1.log.info(`[event] Stop: ${summary}`);
+            sendActivity('stop', { stopReason, summary });
+            (0, session_1.addSessionEvent)({ type: 'stop', stopReason, summary, timestamp: ts });
+            // Send system notification (important — user may not be looking)
+            const transport = (0, interface_1.getTransport)();
+            if (transport?.isConnected && transport.sendNotification) {
+                const isError = stopReason === 'error';
+                transport.sendNotification(isError ? '❌ Claude Code' : '✅ Claude Code', summary);
+            }
+            pushEvent({ time: ts, type: 'stop', stopReason, summary });
+            // Check for pending user message → auto-resume
+            if ((0, fs_1.existsSync)(PENDING_MSG_PATH)) {
+                try {
+                    const msg = (0, fs_1.readFileSync)(PENDING_MSG_PATH, 'utf-8').trim();
+                    (0, fs_1.unlinkSync)(PENDING_MSG_PATH);
+                    if (msg) {
+                        logger_1.log.info(`[event] Resuming Claude with message: ${msg.slice(0, 50)}...`);
+                        const child = (0, child_process_1.spawn)('claude', ['--continue', '--print', msg], {
+                            detached: true, stdio: 'ignore',
+                        });
+                        child.unref();
+                        showSpinner('helix', 'Claude Code 正在启动…', 3000);
+                    }
+                }
+                catch { }
+            }
+        }
+        else if (hookEvent === 'TaskCompleted' || hookEvent === 'task_completed') {
+            logger_1.log.info('[event] Task completed');
+            sendActivity('task_completed', { summary: 'Sub-task completed' });
+            pushEvent({ time: ts, type: 'task_completed' });
+        }
+        else if (hookEvent === 'SessionEnd' || hookEvent === 'session_end') {
+            logger_1.log.info('[event] Session ended');
+            sendActivity('session_ended', { summary: 'Session ended' });
+            pushEvent({ time: ts, type: 'session_ended' });
+        }
+        res.json({ ok: true });
+    });
+    // ==================== Notify endpoint ====================
+    app.post('/notify', (req, res) => {
+        const { title, message } = req.body ?? {};
+        if (!message)
+            return res.status(400).json({ error: 'message required' });
+        const transport = (0, interface_1.getTransport)();
+        if (!transport?.isConnected)
+            return res.status(503).json({ error: 'iOS not connected' });
+        if (transport.sendNotification) {
+            transport.sendNotification(title ?? 'Sentinel', message);
+        }
+        else {
+            return res.status(501).json({ error: 'Not supported' });
+        }
+        logger_1.log.info(`Notification: ${title ?? 'Sentinel'} — ${message}`);
+        res.json({ success: true });
+    });
+    // ==================== Interrupt Claude ====================
+    app.post('/interrupt', (_req, res) => {
+        if (!(0, claude_process_1.isClaudeRunning)()) {
+            return res.status(409).json({ error: 'Claude not running' });
+        }
+        const ok = (0, claude_process_1.interruptClaude)();
+        logger_1.log.info('[interrupt] SIGINT sent to Claude');
+        res.json({ success: ok });
+    });
+    // ==================== User message from iOS ====================
+    app.post('/user-message', (req, res) => {
+        const text = req.body?.text;
+        if (!text)
+            return res.status(400).json({ error: 'text required' });
+        (0, fs_1.writeFileSync)(PENDING_MSG_PATH, text);
+        logger_1.log.info(`Pending message saved: ${text.slice(0, 50)}`);
+        showSpinner('pulse', '消息已排队，等待 Claude 停止…', 5000);
+        res.json({ success: true });
+    });
+    // ==================== SSE Auth Middleware ====================
+    function requireSseToken(req, res) {
+        const token = req.query.token;
+        if (token !== SSE_TOKEN) {
+            res.status(401).json({ error: 'Invalid or missing SSE token' });
+            return false;
+        }
+        return true;
+    }
+    // ==================== Terminal SSE ====================
+    app.get('/terminal', (req, res) => {
+        if (!requireSseToken(req, res))
+            return;
+        res.setHeader('Content-Type', 'text/event-stream');
+        res.setHeader('Cache-Control', 'no-cache');
+        res.setHeader('Connection', 'keep-alive');
+        res.flushHeaders();
+        terminalClients.add(res);
+        res.on('close', () => terminalClients.delete(res));
+    });
+    // ==================== SSE ====================
+    app.get('/events', (req, res) => {
+        if (!requireSseToken(req, res))
+            return;
+        res.setHeader('Content-Type', 'text/event-stream');
+        res.setHeader('Cache-Control', 'no-cache');
+        res.setHeader('Connection', 'keep-alive');
+        res.flushHeaders();
+        sseClients.add(res);
+        res.on('close', () => sseClients.delete(res));
+    });
+    // ==================== SSE Token (for CLI watch command) ====================
+    app.get('/sse-token', (_req, res) => {
+        // Only accessible from localhost
+        res.json({ token: SSE_TOKEN });
+    });
+    // ==================== Status ====================
+    app.get('/status', (_req, res) => {
+        const transport = (0, interface_1.getTransport)();
+        res.json({
+            mode: transport?.mode ?? 'none',
+            connected: transport?.isConnected ?? false,
+            pendingRequests: pending_1.pending.size,
+            uptime: process.uptime(),
+            version: '0.1.0',
+        });
+    });
+    return app;
+}
+function startHttpServer(port = 7749) {
+    return new Promise((resolve) => {
+        const app = createHttpServer(port);
+        app.listen(port, () => {
+            logger_1.log.success(`Hook server listening on http://localhost:${port}`);
+            logger_1.log.dim(`  POST /hook    — PreToolUse (approval)`);
+            logger_1.log.dim(`  POST /event   — PostToolUse / Notification / Stop`);
+            logger_1.log.dim(`  GET  /events  — SSE stream`);
+            resolve();
+        });
+    });
+}
+/** Setup user message handler from LocalTransport */
+function setupUserMessageHandler() {
+    const transport = (0, interface_1.getTransport)();
+    if (transport && 'onUserMessage' in transport) {
+        transport.onUserMessage((text) => {
+            (0, fs_1.writeFileSync)(PENDING_MSG_PATH, text);
+            logger_1.log.info(`Message from iOS saved: ${text.slice(0, 50)}`);
+        });
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/server/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/server/http.ts"],"names":[],"mappings":";;;;;AA+CA,8BAKC;AAGD,4CAOC;AAYD,4CAyRC;AAED,0CAWC;AAGD,0DAQC;AA3XD,sDAA8B;AAC9B,6BAAwB;AACxB,mCAAqC;AACrC,iDAAsC;AACtC,2BAAyE;AACzE,+BAA4B;AAC5B,4CAA0D;AAC1D,sDAAsD;AACtD,8CAA2C;AAC3C,4CAA2C;AAC3C,gDAAoD;AACpD,0CAA6C;AAC7C,kDAA6D;AAC7D,wCAAwD;AACxD,4CAAkF;AAClF,sCAA2C;AAC3C,yCAAgD;AAChD,0CAAoC;AACpC,4EAA0C;AAC1C,0DAAyE;AAEzE,sEAAsE;AACtE,SAAS,WAAW,CAAC,IAAuB,EAAE,MAAc,EAAE,UAAkB;IAC9E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,4BAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC,EAAE,QAAQ,CAAC,CAAC;IACb,UAAU,CAAC,GAAG,EAAE;QACd,aAAa,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC,EAAE,UAAU,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,IAAA,WAAI,EAAC,IAAA,qBAAc,GAAE,EAAE,qBAAqB,CAAC,CAAC;AAEvE,8EAA8E;AAC9E,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAElD,cAAc;AACd,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;AAE/C,SAAgB,SAAS,CAAC,IAA6B;IACrD,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;IACjC,IAAI,SAAS,EAAE,WAAW,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC;IACtE,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;AAC9D,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAoB,CAAC;AAEpD,SAAS,YAAY,CAAC,IAAY,EAAE,IAA6B;IAC/D,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;IACjC,YAAG,CAAC,KAAK,CAAC,2BAA2B,SAAS,EAAE,IAAI,IAAI,MAAM,cAAc,SAAS,EAAE,WAAW,iBAAiB,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7I,IAAI,SAAS,EAAE,WAAW,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAe,IAAI;IAClD,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAE1C,4DAA4D;IAC5D,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,YAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9C,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,IAAI,IAAI,IAAI,CAAkB,CAAC;QACpF,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEpC,YAAG,CAAC,IAAI,CAAC,SAAS,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAElE,mCAAmC;QACnC,IAAI,CAAC,IAAA,2BAAiB,GAAE;YAAE,IAAA,sBAAY,GAAE,CAAC;QAEzC,qBAAqB;QACrB,MAAM,SAAS,GAAG,IAAA,4BAAgB,GAAE,CAAC;QACrC,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvB,YAAG,CAAC,IAAI,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;YAC7C,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACvH,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAClG,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACvB,YAAG,CAAC,OAAO,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;YAChD,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACvH,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAClG,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,IAAA,qBAAY,GAAE;YAAE,YAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAErD,4BAA4B;QAC5B,MAAM,UAAU,GAAG,IAAA,uBAAe,EAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACvH,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAClG,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAChC,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAA,eAAO,GAAE,OAAO,EAAE,CAAC,CAAC;YACpJ,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,IAAA,eAAO,GAAE,EAAE,EAAE,CAAC,CAAC;YAC3G,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,iBAAiB;QACjB,MAAM,KAAK,GAAG,IAAA,mBAAU,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAClC,YAAG,CAAC,OAAO,CAAC,eAAe,SAAS,WAAW,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,SAAS,GAAG,CAAC,CAAC;YAC/E,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5H,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACtH,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,qBAAqB;QACrB,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;QACjC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YACzC,YAAG,CAAC,KAAK,CAAC,GAAG,SAAS,EAAE,IAAI,IAAI,IAAI,+BAA+B,CAAC,CAAC;YACrE,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAA,oBAAW,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACtI,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACjG,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC;YACH,uBAAuB;YACvB,MAAM,IAAI,GAAG,IAAA,mBAAY,EAAC,SAAS,EAAE,UAAqC,CAAC,CAAC;YAE5E,MAAM,cAAc,GAAI,GAAG,CAAC,IAAgC,CAAC,eAAqC;mBAC5F,GAAG,CAAC,IAAgC,CAAC,cAAoC,CAAC;YAEhF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC;gBACnD,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,UAAqC;gBAChD,SAAS,EAAE,IAAA,oBAAW,EAAC,KAAK,CAAC,MAAM,CAAC;gBACpC,IAAI;gBACJ,cAAc;aACf,CAAC,CAAC;YAEH,YAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,cAAc,QAAQ,EAAE,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,iBAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAElE,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAA,oBAAW,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YAClI,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAEnK,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,YAAG,CAAC,OAAO,CAAC,YAAY,SAAS,KAAK,QAAQ,GAAG,CAAC,CAAC;gBACnD,gBAAgB,CAAC,KAAK,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;gBAChF,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACN,YAAG,CAAC,IAAI,CAAC,YAAY,SAAS,KAAK,QAAQ,OAAO,MAAM,EAAE,CAAC,CAAC;gBAC5D,gBAAgB,CAAC,KAAK,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;gBAClF,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAG,CAAC,KAAK,CAAC,eAAgB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAA,oBAAW,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACtI,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qFAAqF;IACrF,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3D,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEpC,IAAI,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;YAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;YAC1D,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1I,MAAM,OAAO,GAAG,IAAA,sBAAS,EAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAE7D,YAAG,CAAC,GAAG,CAAC,WAAW,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;YAC3C,IAAA,mBAAS,EAAC,EAAE,EAAE,EAAE,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,IAAI,IAAI,CAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAClO,YAAY,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACtD,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAEzE,2DAA2D;YAC3D,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;gBACzD,CAAC,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtD,gBAAgB,CAAC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;YAC7C,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;YACvD,CAAC;QAEH,CAAC;aAAM,IAAI,SAAS,KAAK,cAAc,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YACxE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YAChD,YAAG,CAAC,IAAI,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;YAC7C,YAAY,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1C,gBAAgB,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;YAElC,gCAAgC;YAChC,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;YACjC,IAAI,SAAS,EAAE,WAAW,IAAI,SAAS,CAAC,gBAAgB,EAAE,CAAC;gBACxD,SAAiB,CAAC,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAC9D,CAAC;YACD,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzD,CAAC;aAAM,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YACxD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC;YAClE,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,UAAU,CAAC,CAAC;YAC1C,YAAG,CAAC,IAAI,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;YACrC,YAAY,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,IAAA,yBAAe,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YAEtE,iEAAiE;YACjE,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;YACjC,IAAI,SAAS,EAAE,WAAW,IAAI,SAAS,CAAC,gBAAgB,EAAE,CAAC;gBACzD,MAAM,OAAO,GAAG,UAAU,KAAK,OAAO,CAAC;gBACtC,SAAiB,CAAC,gBAAgB,CACjC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,EAC3C,OAAO,CACR,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YAE3D,+CAA+C;YAC/C,IAAI,IAAA,eAAU,EAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3D,IAAA,eAAU,EAAC,gBAAgB,CAAC,CAAC;oBAC7B,IAAI,GAAG,EAAE,CAAC;wBACR,YAAG,CAAC,IAAI,CAAC,yCAAyC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;wBACzE,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,QAAQ,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE;4BAC5D,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ;yBAChC,CAAC,CAAC;wBACH,KAAK,CAAC,KAAK,EAAE,CAAC;wBACd,WAAW,CAAC,OAAO,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;QAEH,CAAC;aAAM,IAAI,SAAS,KAAK,eAAe,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;YAC3E,YAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACnC,YAAY,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAClE,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAElD,CAAC;aAAM,IAAI,SAAS,KAAK,YAAY,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YACrE,YAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAClC,YAAY,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;YAC5D,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;QACjC,IAAI,CAAC,SAAS,EAAE,WAAW;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACzF,IAAI,SAAS,CAAC,gBAAgB,EAAE,CAAC;YAC/B,SAAS,CAAC,gBAAgB,CAAC,KAAK,IAAI,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,YAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,IAAI,UAAU,MAAM,OAAO,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,IAAI,CAAC,IAAA,gCAAe,GAAE,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,EAAE,GAAG,IAAA,gCAAe,GAAE,CAAC;QAC7B,YAAG,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACnE,IAAA,kBAAa,EAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QACtC,YAAG,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,WAAW,CAAC,OAAO,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,SAAS,eAAe,CAAC,GAAoB,EAAE,GAAqB;QAClE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAA2B,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yDAAyD;IACzD,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACvC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC1C,GAAG,CAAC,YAAY,EAAE,CAAC;QACnB,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACvC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC1C,GAAG,CAAC,YAAY,EAAE,CAAC;QACnB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,iCAAiC;QACjC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,MAAM;YAC/B,SAAS,EAAE,SAAS,EAAE,WAAW,IAAI,KAAK;YAC1C,eAAe,EAAE,iBAAO,CAAC,IAAI;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YACxB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,eAAe,CAAC,OAAe,IAAI;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACpB,YAAG,CAAC,OAAO,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;YACjE,YAAG,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACnD,YAAG,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YAC/D,YAAG,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qDAAqD;AACrD,SAAgB,uBAAuB;IACrC,MAAM,SAAS,GAAG,IAAA,wBAAY,GAAE,CAAC;IACjC,IAAI,SAAS,IAAI,eAAe,IAAI,SAAS,EAAE,CAAC;QAC7C,SAAiB,CAAC,aAAa,CAAC,CAAC,IAAY,EAAE,EAAE;YAChD,IAAA,kBAAa,EAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YACtC,YAAG,CAAC,IAAI,CAAC,2BAA2B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/socket/client.d.ts

@@ -0,0 +1,16 @@
+import { Socket } from 'socket.io-client';
+/**
+ * 连接 Socket.IO，带 JWT auth 和指数退避重连
+ */
+export declare function connectSocket(serverURL: string, token: string): Socket;
+/**
+ * 发送审批请求到 server，返回 requestId
+ */
+export declare function emitApprovalRequest(data: {
+    toolName: string;
+    toolInput: Record<string, unknown>;
+    riskLevel: string;
+}): Promise<string>;
+export declare function getSocket(): Socket | null;
+export declare function disconnectSocket(): void;
+export declare function isConnected(): boolean;