@uvl000/claude-trace 3.0.13-workflowexp.1

package/dist/intercept/interceptor.js

@@ -0,0 +1,496 @@
+"use strict";
+/**
+ * @file Runtime fetch/HTTP interceptor for Claude Code V1 (Node.js script mode).
+ *
+ * Patches `global.fetch` and Node's `http`/`https` modules to capture Anthropic
+ * Messages API traffic (and optionally AWS Bedrock) before it reaches the upstream.
+ * Used when Claude Code is launched as a Node.js script via `--require interceptor-loader.js`.
+ * Native V2+ binaries use {@link ReverseProxyServer} instead.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClaudeTrafficLogger = void 0;
+exports.initializeInterceptor = initializeInterceptor;
+exports.getLogger = getLogger;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const child_process_1 = require("child_process");
+const html_generator_1 = require("../report/html-generator");
+const header_redaction_1 = require("./header-redaction");
+/**
+ * Captures Claude API request/response pairs by monkey-patching fetch and Node HTTP.
+ *
+ * Writes append-only JSONL logs and optionally regenerates a self-contained HTML
+ * report after each exchange. Sensitive headers are redacted by default.
+ */
+class ClaudeTrafficLogger {
+    /**
+     * Initializes log paths, creates the log directory, and clears the JSONL file.
+     *
+     * @param config - Logger configuration; sensible defaults are applied.
+     */
+    constructor(config = {}) {
+        /** In-flight requests awaiting a matching response (keyed by generated request id). */
+        this.pendingRequests = new Map();
+        /** Completed request/response pairs held in memory for HTML regeneration. */
+        this.pairs = [];
+        const logDirectory = config.logDirectory || process.env.CLAUDE_TRACE_LOG_DIR || ".claude-trace";
+        if (process.env.CLAUDE_TRACE_LOG_DIR && !path_1.default.isAbsolute(logDirectory)) {
+            throw new Error("CLAUDE_TRACE_LOG_DIR must be an absolute path");
+        }
+        this.config = {
+            logDirectory,
+            enableRealTimeHTML: true,
+            logLevel: "info",
+            ...config,
+        };
+        this.logDir = this.config.logDirectory;
+        if (!fs_1.default.existsSync(this.logDir)) {
+            fs_1.default.mkdirSync(this.logDir, { recursive: true });
+        }
+        // Prefer explicit config, then env override, then timestamped default.
+        const logBaseName = config?.logBaseName || process.env.CLAUDE_TRACE_LOG_NAME;
+        const fileBaseName = logBaseName || `log-${new Date().toISOString().replace(/[:.]/g, "-").replace("T", "-").slice(0, -5)}`;
+        this.logFile = path_1.default.join(this.logDir, `${fileBaseName}.jsonl`);
+        this.htmlFile = path_1.default.join(this.logDir, `${fileBaseName}.html`);
+        this.htmlGenerator = new html_generator_1.HTMLGenerator();
+        fs_1.default.writeFileSync(this.logFile, "");
+        console.log(`Logs will be written to:`);
+        console.log(`  JSONL: ${path_1.default.resolve(this.logFile)}`);
+        console.log(`  HTML:  ${path_1.default.resolve(this.htmlFile)}`);
+    }
+    /**
+     * Returns true when a URL targets the Claude Messages API (or all Anthropic/Bedrock
+     * traffic when `CLAUDE_TRACE_INCLUDE_ALL_REQUESTS=true`).
+     *
+     * Respects `ANTHROPIC_BASE_URL` for custom proxy endpoints.
+     *
+     * @param url - Request URL as a string or `URL` object.
+     */
+    isClaudeAPI(url) {
+        const urlString = typeof url === "string" ? url : url.toString();
+        const includeAllRequests = process.env.CLAUDE_TRACE_INCLUDE_ALL_REQUESTS === "true";
+        // Support custom ANTHROPIC_BASE_URL (e.g. when already pointing at a local proxy).
+        const baseUrl = process.env.ANTHROPIC_BASE_URL || "https://api.anthropic.com";
+        const apiHost = new URL(baseUrl).hostname;
+        const isAnthropicAPI = urlString.includes(apiHost);
+        // AWS Bedrock uses a different host pattern but the same Messages API shape.
+        const isBedrockAPI = urlString.includes("bedrock-runtime.") && urlString.includes(".amazonaws.com");
+        if (includeAllRequests) {
+            return isAnthropicAPI || isBedrockAPI;
+        }
+        return (isAnthropicAPI && urlString.includes("/v1/messages")) || isBedrockAPI;
+    }
+    /** Generates a unique correlation id for pairing requests with responses. */
+    generateRequestId() {
+        return `req_${Date.now()}_${Math.random().toString(36).substring(2, 11)}`;
+    }
+    /**
+     * Redacts sensitive header values by truncating to prefix/suffix.
+     *
+     * @param headers - Flat header map from fetch or Node HTTP options.
+     * @returns Copy of headers with sensitive values partially redacted.
+     */
+    redactSensitiveHeaders(headers) {
+        return (0, header_redaction_1.processHeaders)(headers);
+    }
+    /** Clones a fetch Response so the body can be read for logging without consuming it. */
+    async cloneResponse(response) {
+        return response.clone();
+    }
+    /**
+     * Normalizes request body into a log-friendly value.
+     *
+     * Parses JSON strings, expands FormData entries, and passes through other types.
+     *
+     * @param body - Raw request body from fetch `init.body` or Node `req.write` chunks.
+     */
+    async parseRequestBody(body) {
+        if (!body)
+            return null;
+        if (typeof body === "string") {
+            try {
+                return JSON.parse(body);
+            }
+            catch {
+                return body;
+            }
+        }
+        if (body instanceof FormData) {
+            const formObject = {};
+            for (const [key, value] of body.entries()) {
+                formObject[key] = value;
+            }
+            return formObject;
+        }
+        return body;
+    }
+    /**
+     * Reads and classifies a fetch Response body for logging.
+     *
+     * JSON responses are parsed; SSE and text responses are stored as raw strings.
+     *
+     * @param response - Cloned fetch Response (safe to consume).
+     */
+    async parseResponseBody(response) {
+        const contentType = response.headers.get("content-type") || "";
+        try {
+            if (contentType.includes("application/json")) {
+                const body = await response.json();
+                return { body };
+            }
+            else if (contentType.includes("text/event-stream")) {
+                const body_raw = await response.text();
+                return { body_raw };
+            }
+            else if (contentType.includes("text/")) {
+                const body_raw = await response.text();
+                return { body_raw };
+            }
+            else {
+                const body_raw = await response.text();
+                return { body_raw };
+            }
+        }
+        catch (error) {
+            // Swallow parse errors so instrumentation never breaks the client request.
+            return {};
+        }
+    }
+    /** Installs both fetch and Node HTTP instrumentation. */
+    instrumentAll() {
+        this.instrumentFetch();
+        this.instrumentNodeHTTP();
+    }
+    /**
+     * Patches `global.fetch` to intercept Claude API calls.
+     *
+     * Idempotent: skips if already marked with `__claudeTraceInstrumented`.
+     * Non-Claude URLs pass through to the original fetch unchanged.
+     */
+    instrumentFetch() {
+        if (!global.fetch) {
+            return;
+        }
+        // Prevent double-patching when the loader or hot-reload re-enters initialization.
+        if (global.fetch.__claudeTraceInstrumented) {
+            return;
+        }
+        const originalFetch = global.fetch;
+        const logger = this;
+        global.fetch = async function (input, init = {}) {
+            const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+            if (!logger.isClaudeAPI(url)) {
+                return originalFetch(input, init);
+            }
+            const requestId = logger.generateRequestId();
+            const requestTimestamp = Date.now();
+            const requestData = {
+                // Seconds since epoch to match Python claude-trace log format.
+                timestamp: requestTimestamp / 1000,
+                method: init.method || "GET",
+                url: url,
+                headers: logger.redactSensitiveHeaders(Object.fromEntries(new Headers(init.headers || {}).entries())),
+                body: await logger.parseRequestBody(init.body),
+            };
+            logger.pendingRequests.set(requestId, requestData);
+            try {
+                const response = await originalFetch(input, init);
+                const responseTimestamp = Date.now();
+                const clonedResponse = await logger.cloneResponse(response);
+                const responseBodyData = await logger.parseResponseBody(clonedResponse);
+                const responseData = {
+                    timestamp: responseTimestamp / 1000,
+                    status_code: response.status,
+                    headers: logger.redactSensitiveHeaders(Object.fromEntries(response.headers.entries())),
+                    ...responseBodyData,
+                };
+                const pair = {
+                    request: requestData,
+                    response: responseData,
+                    logged_at: new Date().toISOString(),
+                };
+                logger.pendingRequests.delete(requestId);
+                logger.pairs.push(pair);
+                await logger.writePairToLog(pair);
+                if (logger.config.enableRealTimeHTML) {
+                    await logger.generateHTML();
+                }
+                return response;
+            }
+            catch (error) {
+                logger.pendingRequests.delete(requestId);
+                throw error;
+            }
+        };
+        global.fetch.__claudeTraceInstrumented = true;
+    }
+    /**
+     * Patches Node's `http` and `https` `request`/`get` methods.
+     *
+     * Some Claude Code versions use Node HTTP instead of fetch for API calls.
+     * Each method is patched at most once via a `__claudeTraceInstrumented` marker.
+     */
+    instrumentNodeHTTP() {
+        try {
+            const http = require("http");
+            const https = require("https");
+            const logger = this;
+            if (http.request && !http.request.__claudeTraceInstrumented) {
+                const originalHttpRequest = http.request;
+                http.request = function (options, callback) {
+                    return logger.interceptNodeRequest(originalHttpRequest, options, callback, false);
+                };
+                http.request.__claudeTraceInstrumented = true;
+            }
+            if (http.get && !http.get.__claudeTraceInstrumented) {
+                const originalHttpGet = http.get;
+                http.get = function (options, callback) {
+                    return logger.interceptNodeRequest(originalHttpGet, options, callback, false);
+                };
+                http.get.__claudeTraceInstrumented = true;
+            }
+            if (https.request && !https.request.__claudeTraceInstrumented) {
+                const originalHttpsRequest = https.request;
+                https.request = function (options, callback) {
+                    return logger.interceptNodeRequest(originalHttpsRequest, options, callback, true);
+                };
+                https.request.__claudeTraceInstrumented = true;
+            }
+            if (https.get && !https.get.__claudeTraceInstrumented) {
+                const originalHttpsGet = https.get;
+                https.get = function (options, callback) {
+                    return logger.interceptNodeRequest(originalHttpsGet, options, callback, true);
+                };
+                https.get.__claudeTraceInstrumented = true;
+            }
+        }
+        catch (error) {
+            // http/https may be unavailable in some embedded runtimes; fail silently.
+        }
+    }
+    /**
+     * Wraps a Node HTTP(S) request to capture body and response for Claude API URLs.
+     *
+     * Intercepts `req.write` to accumulate the request body, then logs on `res.end`.
+     *
+     * @param originalRequest - Unpatched `http.request` or `https.request`.
+     * @param options - Request options or URL string.
+     * @param callback - Optional response callback passed to the original request.
+     * @param isHttps - Whether the underlying module is `https`.
+     * @returns The outbound `ClientRequest` with wrapped `write`.
+     */
+    interceptNodeRequest(originalRequest, options, callback, isHttps) {
+        const url = this.parseNodeRequestURL(options, isHttps);
+        if (!this.isClaudeAPI(url)) {
+            return originalRequest.call(this, options, callback);
+        }
+        const requestTimestamp = Date.now();
+        let requestBody = "";
+        const req = originalRequest.call(this, options, (res) => {
+            const responseTimestamp = Date.now();
+            let responseBody = "";
+            res.on("data", (chunk) => {
+                responseBody += chunk;
+            });
+            res.on("end", async () => {
+                const requestData = {
+                    timestamp: requestTimestamp / 1000,
+                    method: options.method || "GET",
+                    url: url,
+                    headers: this.redactSensitiveHeaders(options.headers || {}),
+                    body: requestBody ? await this.parseRequestBody(requestBody) : null,
+                };
+                const responseData = {
+                    timestamp: responseTimestamp / 1000,
+                    status_code: res.statusCode,
+                    headers: this.redactSensitiveHeaders(res.headers || {}),
+                    ...(await this.parseResponseBodyFromString(responseBody, res.headers["content-type"])),
+                };
+                const pair = {
+                    request: requestData,
+                    response: responseData,
+                    logged_at: new Date().toISOString(),
+                };
+                this.pairs.push(pair);
+                await this.writePairToLog(pair);
+                if (this.config.enableRealTimeHTML) {
+                    await this.generateHTML();
+                }
+            });
+            if (callback) {
+                callback(res);
+            }
+        });
+        // Node HTTP does not expose the body until write/end; wrap write to capture it.
+        const originalWrite = req.write;
+        req.write = function (chunk) {
+            if (chunk) {
+                requestBody += chunk;
+            }
+            return originalWrite.call(this, chunk);
+        };
+        return req;
+    }
+    /**
+     * Reconstructs a full URL string from Node HTTP request options.
+     *
+     * @param options - URL string or options object with host/path fields.
+     * @param isHttps - Whether the caller is the `https` module.
+     */
+    parseNodeRequestURL(options, isHttps) {
+        if (typeof options === "string") {
+            return options;
+        }
+        const protocol = isHttps ? "https:" : "http:";
+        const hostname = options.hostname || options.host || "localhost";
+        const port = options.port ? `:${options.port}` : "";
+        const path = options.path || "/";
+        return `${protocol}//${hostname}${port}${path}`;
+    }
+    /**
+     * Parses a raw response body string based on Content-Type (Node HTTP path).
+     *
+     * @param body - Accumulated response body from `res.on("data")`.
+     * @param contentType - Value of the `content-type` response header, if any.
+     */
+    async parseResponseBodyFromString(body, contentType) {
+        try {
+            if (contentType && contentType.includes("application/json")) {
+                return { body: JSON.parse(body) };
+            }
+            else if (contentType && contentType.includes("text/event-stream")) {
+                return { body_raw: body };
+            }
+            else {
+                return { body_raw: body };
+            }
+        }
+        catch (error) {
+            return { body_raw: body };
+        }
+    }
+    /** Appends a single JSONL line for one request/response pair. */
+    async writePairToLog(pair) {
+        try {
+            const jsonLine = JSON.stringify(pair) + "\n";
+            fs_1.default.appendFileSync(this.logFile, jsonLine);
+        }
+        catch (error) {
+            // Swallow write errors so logging never crashes the instrumented process.
+        }
+    }
+    /** Regenerates the self-contained HTML report from all logged pairs. */
+    async generateHTML() {
+        try {
+            const includeAllRequests = process.env.CLAUDE_TRACE_INCLUDE_ALL_REQUESTS === "true";
+            await this.htmlGenerator.generateHTML(this.pairs, this.htmlFile, {
+                timestamp: new Date().toISOString().replace("T", " ").slice(0, -5),
+                includeAllRequests,
+                tool: "claude",
+            });
+        }
+        catch (error) {
+            // HTML generation is best-effort; failures should not affect the client.
+        }
+    }
+    /**
+     * Flushes orphaned pending requests and optionally opens the HTML report.
+     *
+     * Called on process exit via {@link initializeInterceptor}. Requests that never
+     * received a response are logged with a `ORPHANED_REQUEST` note.
+     */
+    cleanup() {
+        console.log("Cleaning up orphaned requests...");
+        for (const [, requestData] of this.pendingRequests.entries()) {
+            const orphanedPair = {
+                request: requestData,
+                response: null,
+                note: "ORPHANED_REQUEST - No matching response received",
+                logged_at: new Date().toISOString(),
+            };
+            try {
+                const jsonLine = JSON.stringify(orphanedPair) + "\n";
+                fs_1.default.appendFileSync(this.logFile, jsonLine);
+            }
+            catch (error) {
+                console.log(`Error writing orphaned request: ${error}`);
+            }
+        }
+        this.pendingRequests.clear();
+        console.log(`Cleanup complete. Logged ${this.pairs.length} pairs`);
+        const shouldOpenBrowser = process.env.CLAUDE_TRACE_OPEN_BROWSER === "true";
+        if (shouldOpenBrowser && fs_1.default.existsSync(this.htmlFile)) {
+            try {
+                (0, child_process_1.spawn)("open", [this.htmlFile], { detached: true, stdio: "ignore" }).unref();
+                console.log(`Opening ${this.htmlFile} in browser`);
+            }
+            catch (error) {
+                console.log(`Failed to open browser: ${error}`);
+            }
+        }
+    }
+    /**
+     * Returns current logging statistics and output file paths.
+     *
+     * @returns Snapshot of pair count, pending request count, and log file paths.
+     */
+    getStats() {
+        return {
+            totalPairs: this.pairs.length,
+            pendingRequests: this.pendingRequests.size,
+            logFile: this.logFile,
+            htmlFile: this.htmlFile,
+        };
+    }
+}
+exports.ClaudeTrafficLogger = ClaudeTrafficLogger;
+/** Singleton logger instance shared across the process. */
+let globalLogger = null;
+/** Guards against registering duplicate process exit handlers. */
+let eventListenersSetup = false;
+/**
+ * Creates and activates the global traffic logger (singleton).
+ *
+ * Patches fetch/HTTP immediately and registers cleanup handlers for
+ * `exit`, `SIGINT`, `SIGTERM`, and `uncaughtException`.
+ *
+ * @param config - Optional logger configuration.
+ * @returns The active {@link ClaudeTrafficLogger} instance.
+ */
+function initializeInterceptor(config) {
+    if (globalLogger) {
+        console.warn("Interceptor already initialized");
+        return globalLogger;
+    }
+    globalLogger = new ClaudeTrafficLogger(config);
+    globalLogger.instrumentAll();
+    if (!eventListenersSetup) {
+        const cleanup = () => {
+            if (globalLogger) {
+                globalLogger.cleanup();
+            }
+        };
+        process.on("exit", cleanup);
+        process.on("SIGINT", cleanup);
+        process.on("SIGTERM", cleanup);
+        process.on("uncaughtException", (error) => {
+            console.error("Uncaught exception:", error);
+            cleanup();
+            process.exit(1);
+        });
+        eventListenersSetup = true;
+    }
+    return globalLogger;
+}
+/**
+ * Returns the active logger instance, or `null` if not yet initialized.
+ *
+ * @returns Global {@link ClaudeTrafficLogger} or `null`.
+ */
+function getLogger() {
+    return globalLogger;
+}
+//# sourceMappingURL=interceptor.js.map

package/dist/intercept/interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.js","sourceRoot":"","sources":["../../src/intercept/interceptor.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;AAshBH,sDA6BC;AAOD,8BAEC;AA1jBD,4CAAoB;AACpB,gDAAwB;AACxB,iDAAsC;AAEtC,6DAAyD;AACzD,yDAAoD;AAcpD;;;;;GAKG;AACH,MAAa,mBAAmB;IAgB/B;;;;OAIG;IACH,YAAY,SAA4B,EAAE;QAd1C,uFAAuF;QAC/E,oBAAe,GAAqB,IAAI,GAAG,EAAE,CAAC;QACtD,6EAA6E;QACrE,UAAK,GAAc,EAAE,CAAC;QAY7B,MAAM,YAAY,GACjB,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,eAAe,CAAC;QAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,cAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG;YACb,YAAY;YACZ,kBAAkB,EAAE,IAAI;YACxB,QAAQ,EAAE,MAAM;YAChB,GAAG,MAAM;SACT,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAa,CAAC;QACxC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,YAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,uEAAuE;QACvE,MAAM,WAAW,GAAG,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QAC7E,MAAM,YAAY,GACjB,WAAW,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvG,IAAI,CAAC,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,YAAY,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,YAAY,OAAO,CAAC,CAAC;QAE/D,IAAI,CAAC,aAAa,GAAG,IAAI,8BAAa,EAAE,CAAC;QAEzC,YAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAEnC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,YAAY,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,YAAY,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACK,WAAW,CAAC,GAAiB;QACpC,MAAM,SAAS,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjE,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,MAAM,CAAC;QAEpF,mFAAmF;QACnF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,2BAA2B,CAAC;QAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QAE1C,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEnD,6EAA6E;QAC7E,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAEpG,IAAI,kBAAkB,EAAE,CAAC;YACxB,OAAO,cAAc,IAAI,YAAY,CAAC;QACvC,CAAC;QAED,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,YAAY,CAAC;IAC/E,CAAC;IAED,6EAA6E;IACrE,iBAAiB;QACxB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACK,sBAAsB,CAAC,OAA+B;QAC7D,OAAO,IAAA,iCAAc,EAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,wFAAwF;IAChF,KAAK,CAAC,aAAa,CAAC,QAAkB;QAC7C,OAAO,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAAC,IAAS;QACvC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAwB,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3C,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;YACD,OAAO,UAAU,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,iBAAiB,CAAC,QAAkB;QACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAE/D,IAAI,CAAC;YACJ,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,OAAO,EAAE,IAAI,EAAE,CAAC;YACjB,CAAC;iBAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACrB,CAAC;iBAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACP,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACrB,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,2EAA2E;YAC3E,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAED,yDAAyD;IAClD,aAAa;QACnB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACI,eAAe;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QAED,kFAAkF;QAClF,IAAK,MAAM,CAAC,KAAa,CAAC,yBAAyB,EAAE,CAAC;YACrD,OAAO;QACR,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC;QAEpB,MAAM,CAAC,KAAK,GAAG,KAAK,WAAW,KAAwB,EAAE,OAAoB,EAAE;YAC9E,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAEpG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEpC,MAAM,WAAW,GAAG;gBACnB,+DAA+D;gBAC/D,SAAS,EAAE,gBAAgB,GAAG,IAAI;gBAClC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,GAAG,EAAE,GAAG;gBACR,OAAO,EAAE,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrG,IAAI,EAAE,MAAM,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;aAC9C,CAAC;YAEF,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAEnD,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAErC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC5D,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;gBAExE,MAAM,YAAY,GAAG;oBACpB,SAAS,EAAE,iBAAiB,GAAG,IAAI;oBACnC,WAAW,EAAE,QAAQ,CAAC,MAAM;oBAC5B,OAAO,EAAE,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;oBACtF,GAAG,gBAAgB;iBACnB,CAAC;gBAEF,MAAM,IAAI,GAAY;oBACrB,OAAO,EAAE,WAAW;oBACpB,QAAQ,EAAE,YAAY;oBACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACnC,CAAC;gBAEF,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAExB,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAElC,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;oBACtC,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,CAAC;gBAED,OAAO,QAAQ,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzC,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC,CAAC;QAED,MAAM,CAAC,KAAa,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACI,kBAAkB;QACxB,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC;YAEpB,IAAI,IAAI,CAAC,OAAO,IAAI,CAAE,IAAI,CAAC,OAAe,CAAC,yBAAyB,EAAE,CAAC;gBACtE,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC;gBACzC,IAAI,CAAC,OAAO,GAAG,UAAU,OAAY,EAAE,QAAc;oBACpD,OAAO,MAAM,CAAC,oBAAoB,CAAC,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACnF,CAAC,CAAC;gBACD,IAAI,CAAC,OAAe,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACxD,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,IAAI,CAAE,IAAI,CAAC,GAAW,CAAC,yBAAyB,EAAE,CAAC;gBAC9D,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC;gBACjC,IAAI,CAAC,GAAG,GAAG,UAAU,OAAY,EAAE,QAAc;oBAChD,OAAO,MAAM,CAAC,oBAAoB,CAAC,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC/E,CAAC,CAAC;gBACD,IAAI,CAAC,GAAW,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACpD,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,IAAI,CAAE,KAAK,CAAC,OAAe,CAAC,yBAAyB,EAAE,CAAC;gBACxE,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC3C,KAAK,CAAC,OAAO,GAAG,UAAU,OAAY,EAAE,QAAc;oBACrD,OAAO,MAAM,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACnF,CAAC,CAAC;gBACD,KAAK,CAAC,OAAe,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACzD,CAAC;YAED,IAAI,KAAK,CAAC,GAAG,IAAI,CAAE,KAAK,CAAC,GAAW,CAAC,yBAAyB,EAAE,CAAC;gBAChE,MAAM,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC;gBACnC,KAAK,CAAC,GAAG,GAAG,UAAU,OAAY,EAAE,QAAc;oBACjD,OAAO,MAAM,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC/E,CAAC,CAAC;gBACD,KAAK,CAAC,GAAW,CAAC,yBAAyB,GAAG,IAAI,CAAC;YACrD,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,0EAA0E;QAC3E,CAAC;IACF,CAAC;IAED;;;;;;;;;;OAUG;IACK,oBAAoB,CAAC,eAAoB,EAAE,OAAY,EAAE,QAAa,EAAE,OAAgB;QAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEvD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE;YAC5D,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,IAAI,YAAY,GAAG,EAAE,CAAC;YAEtB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAU,EAAE,EAAE;gBAC7B,YAAY,IAAI,KAAK,CAAC;YACvB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;gBACxB,MAAM,WAAW,GAAG;oBACnB,SAAS,EAAE,gBAAgB,GAAG,IAAI;oBAClC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;oBAC/B,GAAG,EAAE,GAAG;oBACR,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC3D,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;iBACnE,CAAC;gBAEF,MAAM,YAAY,GAAG;oBACpB,SAAS,EAAE,iBAAiB,GAAG,IAAI;oBACnC,WAAW,EAAE,GAAG,CAAC,UAAU;oBAC3B,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;oBACvD,GAAG,CAAC,MAAM,IAAI,CAAC,2BAA2B,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;iBACtF,CAAC;gBAEF,MAAM,IAAI,GAAY;oBACrB,OAAO,EAAE,WAAW;oBACpB,QAAQ,EAAE,YAAY;oBACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACnC,CAAC;gBAEF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAEhC,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;oBACpC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3B,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACd,QAAQ,CAAC,GAAG,CAAC,CAAC;YACf,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,gFAAgF;QAChF,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC;QAChC,GAAG,CAAC,KAAK,GAAG,UAAU,KAAU;YAC/B,IAAI,KAAK,EAAE,CAAC;gBACX,WAAW,IAAI,KAAK,CAAC;YACtB,CAAC;YACD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CAAC,OAAY,EAAE,OAAgB;QACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QACjE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC;QAEjC,OAAO,GAAG,QAAQ,KAAK,QAAQ,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,2BAA2B,CACxC,IAAY,EACZ,WAAoB;QAEpB,IAAI,CAAC;YACJ,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,CAAC;iBAAM,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACrE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACP,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,iEAAiE;IACzD,KAAK,CAAC,cAAc,CAAC,IAAa;QACzC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAC7C,YAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,0EAA0E;QAC3E,CAAC;IACF,CAAC;IAED,wEAAwE;IAChE,KAAK,CAAC,YAAY;QACzB,IAAI,CAAC;YACJ,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,MAAM,CAAC;YACpF,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;gBAChE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClE,kBAAkB;gBAClB,IAAI,EAAE,QAAQ;aACd,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,yEAAyE;QAC1E,CAAC;IACF,CAAC;IAED;;;;;OAKG;IACI,OAAO;QACb,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAEhD,KAAK,MAAM,CAAC,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG;gBACpB,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,kDAAkD;gBACxD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAC;YAEF,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;gBACrD,YAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;QACF,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;QAEnE,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,MAAM,CAAC;QAC3E,IAAI,iBAAiB,IAAI,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC;gBACJ,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;gBAC5E,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,QAAQ,aAAa,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YACjD,CAAC;QACF,CAAC;IACF,CAAC;IAED;;;;OAIG;IACI,QAAQ;QACd,OAAO;YACN,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI;YAC1C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACvB,CAAC;IACH,CAAC;CACD;AA1eD,kDA0eC;AAED,2DAA2D;AAC3D,IAAI,YAAY,GAA+B,IAAI,CAAC;AAEpD,kEAAkE;AAClE,IAAI,mBAAmB,GAAG,KAAK,CAAC;AAEhC;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,MAA0B;IAC/D,IAAI,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAChD,OAAO,YAAY,CAAC;IACrB,CAAC;IAED,YAAY,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,YAAY,CAAC,aAAa,EAAE,CAAC;IAE7B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,GAAG,EAAE;YACpB,IAAI,YAAY,EAAE,CAAC;gBAClB,YAAY,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC;QACF,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;YACzC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;YAC5C,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,mBAAmB,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,OAAO,YAAY,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS;IACxB,OAAO,YAAY,CAAC;AACrB,CAAC"}

package/dist/intercept/mitm-cert.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @file mitm-cert.ts
+ * @description Local CA and leaf certificate management for HTTPS MITM proxying.
+ *
+ * vibe-coding-proxy only decrypts HTTPS traffic for explicitly allowlisted model
+ * API hosts. This module creates a reusable local certificate authority and
+ * caches per-host leaf certificates signed by that CA. It never installs the CA
+ * into the system trust store; users must opt in by trusting the printed CA path.
+ */
+/** PEM-encoded certificate and key pair used by Node TLS servers. */
+export interface MitmCertificatePair {
+    /** PEM private key for the generated leaf certificate. */
+    key: string;
+    /** PEM certificate signed by the local CA. */
+    cert: string;
+}
+/** Paths and PEM contents for the local CA. */
+export interface MitmAuthorityInfo {
+    /** Absolute path to the CA certificate users must trust. */
+    certPath: string;
+    /** Absolute path to the CA private key used for leaf signing. */
+    keyPath: string;
+    /** PEM-encoded CA certificate. */
+    certPem: string;
+}
+/**
+ * Creates, loads, and reuses local MITM certificates for allowlisted hosts.
+ */
+export declare class MitmCertificateAuthority {
+    private readonly caDir;
+    private readonly caKeyPath;
+    private readonly caCertPath;
+    private authority;
+    /**
+     * @param caDir - Directory used to persist CA and cached leaf certificates.
+     */
+    constructor(caDir?: string);
+    /**
+     * Ensure the local CA exists and return its user-facing paths.
+     * @returns CA certificate path and PEM content.
+     */
+    ensureAuthority(): MitmAuthorityInfo;
+    /**
+     * Return a cached or newly generated leaf certificate for `hostname`.
+     * @param hostname - DNS name from the CONNECT target.
+     */
+    getCertificateForHost(hostname: string): MitmCertificatePair;
+    /** Load persisted CA material or create it on first use. */
+    private loadOrCreateAuthority;
+}
+/** @returns Default persistent CA directory under the user's home directory. */
+export declare function defaultCaDir(): string;
+//# sourceMappingURL=mitm-cert.d.ts.map

package/dist/intercept/mitm-cert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mitm-cert.d.ts","sourceRoot":"","sources":["../../src/intercept/mitm-cert.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,qEAAqE;AACrE,MAAM,WAAW,mBAAmB;IACnC,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;CACb;AAED,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IACjC,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,qBAAa,wBAAwB;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,SAAS,CAAgG;IAEjH;;OAEG;gBACS,KAAK,GAAE,MAAuB;IAM1C;;;OAGG;IACH,eAAe,IAAI,iBAAiB;IASpC;;;OAGG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB;IAyD5D,4DAA4D;IAC5D,OAAO,CAAC,qBAAqB;CAkD7B;AAED,gFAAgF;AAChF,wBAAgB,YAAY,IAAI,MAAM,CAErC"}