airlock-bot 0.2.37 → 0.2.38

package/dist/gateway.js

@@ -1,3 +1,5 @@
+import { randomUUID } from 'crypto';
+import { createConnection, isIP } from 'net';
 import Fastify from 'fastify';
 import { ClientPool } from './pool/pool.js';
 import { ToolRegistry } from './registry/registry.js';
@@ -7,15 +9,18 @@ import { HitlBatcher } from './hitl/batcher.js';
 import { AuditLogger } from './audit/logger.js';
 import { hitlApiPlugin } from './hitl/api.js';
 import { auditApiPlugin } from './audit/api.js';
+import { mobileApiPlugin } from './mobile/api.js';
 import { hookApiPlugin } from './hook/api.js';
 import { toolsApiPlugin } from './tools/api.js';
 import { ApprovalDashboardRoutes } from './hitl/approval-dashboard.js';
+import { ApprovalStreamHub } from './hitl/approval-stream.js';
 import { CompositeHitlProvider } from './hitl/providers/composite.js';
 import { sseServerPlugin } from './transport/sse-server.js';
 import { httpServerPlugin } from './transport/http-server.js';
 import { createHitlProvider } from './hitl/provider-factory.js';
 import { getMcpConfigs } from './config/schema.js';
 import { buildAdapters } from './backend/factory.js';
+import { ActivityStream } from './activity/stream.js';
 import { childLogger } from './util/logger.js';
 import { checkRequestSecurity } from './security/request.js';
 const log = childLogger('gateway');
@@ -30,9 +35,16 @@ export class Gateway {
     hitlBatcher;
     hitlProvider;
     approvalRoutes;
+    approvalStream;
     auditLogger;
     app;
+    managementApp;
+    downstreamSessionIds = new Map();
+    activityStream = new ActivityStream();
+    unsubscribeActivityNotifications;
     startTime = Date.now();
+    dataPlaneRequestSecurity = {};
+    managementRequestSecurity = {};
     constructor(config, configPath, options = {}) {
         this.config = config;
         this.configPath = configPath;
@@ -40,22 +52,33 @@ export class Gateway {
     }
     async start() {
         log.info('Starting Airlock gateway');
+        this.assertManagementApiConfig(this.config);
+        this.updateRequestSecurity(this.config);
         // Audit logger
         this.auditLogger = new AuditLogger(this.config.audit);
         this.auditLogger.startDailyCleanup();
         // Approvals — provider needs approvalApi but engine doesn't exist yet, use forwarder
         this.hitlBatcher = new HitlBatcher(this.config.approvals.batch_window_ms);
+        this.approvalStream = new ApprovalStreamHub({ activityStream: this.activityStream });
         const approvalForwarder = {
-            approve: (code) => this.hitlEngine.approve(code),
-            deny: (code, reason) => this.hitlEngine.deny(code, reason),
+            approve: (id) => this.hitlEngine.approve(id),
+            deny: (id, reason) => this.hitlEngine.deny(id, reason),
+            approveByCode: (code) => this.hitlEngine.approveByCode(code),
+            denyByCode: (code, reason) => this.hitlEngine.denyByCode(code, reason),
         };
-        this.approvalRoutes = new ApprovalDashboardRoutes(approvalForwarder);
+        this.approvalRoutes = new ApprovalDashboardRoutes(approvalForwarder, this.approvalStream);
         this.hitlProvider = this.buildHitlProvider(approvalForwarder);
+        this.unsubscribeActivityNotifications = this.activityStream.subscribe((event) => {
+            void this.hitlProvider
+                .notifyActivity?.(event)
+                .catch((err) => log.error({ err }, 'Failed to send activity notification'));
+        });
         this.hitlEngine = new HitlEngine(this.auditLogger, this.hitlProvider, this.config.approvals.timeout_ms);
         // Wire batcher → provider
         this.hitlBatcher.onBatchReady((_agentId, requests) => {
+            const badgeCount = this.hitlEngine.getPending().length;
             void this.hitlProvider
-                .notify(requests)
+                .notify(requests.map((request) => ({ ...request, badgeCount })))
                 .catch((err) => log.error({ err }, 'Failed to send approval notifications'));
         });
         await this.hitlProvider.init();
@@ -65,7 +88,7 @@ export class Gateway {
         this.pool = new ClientPool(mcpConfigs);
         await this.pool.initialize();
         // Build adapters from config (MCP, builtins, CLIs, APIs)
-        const adapters = buildAdapters(this.config, this.pool);
+        const adapters = this.buildAdapters();
         // Allowlist + registry
         this.allowlist = new AllowlistEngine(this.config.agents);
         this.registry = new ToolRegistry(adapters, this.allowlist, this.config.agents);
@@ -77,67 +100,177 @@ export class Gateway {
                 .catch((err) => log.error({ err }, 'Failed to refresh registry after MCP ready'));
         });
         await this.registry.refresh();
-        // HTTP server
+        // Agent data-plane server. Control-plane routes are registered on a
+        // separate listener below and must never be added to this app.
         this.app = Fastify({ logger: false });
-        const requestSecurity = {
-            secret: this.config.server.api_secret,
-            authRequired: this.config.server.auth_required,
-            allowedOrigins: this.config.server.allowed_origins,
-        };
-        if (this.config.server.expose_management_api) {
-            await this.app.register(hitlApiPlugin, { engine: this.hitlEngine, ...requestSecurity });
-            await this.app.register(auditApiPlugin, {
-                auditLogger: this.auditLogger,
-                ...requestSecurity,
+        const getDataPlaneRequestSecurity = () => this.dataPlaneRequestSecurity;
+        const getManagementRequestSecurity = () => this.managementRequestSecurity;
+        await this.app.register(sseServerPlugin, {
+            getDeps: (agentId) => this.buildAgentDeps(agentId),
+            getRequestSecurity: getDataPlaneRequestSecurity,
+        });
+        await this.app.register(httpServerPlugin, {
+            getDeps: (agentId) => this.buildAgentDeps(agentId),
+            getRequestSecurity: getDataPlaneRequestSecurity,
+        });
+        if (this.config.server.expose_tools_api) {
+            await this.app.register(toolsApiPlugin, {
+                getDeps: (agentId, downstreamSessionKey) => this.buildAgentDeps(agentId, downstreamSessionKey),
+                requiresSessionId: (agentId, tool) => this.requiresToolsApiSessionId(agentId, tool),
+                getRequestSecurity: getDataPlaneRequestSecurity,
             });
-            await this.app.register(async (adminApp) => {
-                adminApp.addHook('preHandler', async (request, reply) => {
-                    if (!checkRequestSecurity(request, reply, requestSecurity)) {
-                        return;
-                    }
-                });
-                this.approvalRoutes.registerRoutes(adminApp);
-                adminApp.get('/admin/tools', async (_request, reply) => {
-                    return reply.send({ tools: this.registry.getAllTools(), errors: [] });
+        }
+        const { port, host } = this.config.server;
+        await this.app.listen({ port, host });
+        log.info({ port, host }, 'Airlock agent data-plane listening');
+        if (this.config.server.management_api.enabled) {
+            try {
+                await this.startManagementApi(getManagementRequestSecurity);
+            }
+            catch (err) {
+                await this.app.close().catch((closeErr) => {
+                    log.warn({ err: closeErr }, 'Failed to close agent data-plane after management API startup failure');
                 });
-            });
+                throw err;
+            }
         }
-        if (this.config.server.expose_hook_api) {
-            await this.app.register(hookApiPlugin, {
+    }
+    async startManagementApi(getRequestSecurity) {
+        const management = this.config.server.management_api;
+        this.managementApp = Fastify({ logger: false });
+        await this.managementApp.register(hitlApiPlugin, {
+            engine: this.hitlEngine,
+            getRequestSecurity,
+        });
+        await this.managementApp.register(auditApiPlugin, {
+            auditLogger: this.auditLogger,
+            getRequestSecurity,
+        });
+        await this.managementApp.register(mobileApiPlugin, {
+            auditLogger: this.auditLogger,
+            engine: this.hitlEngine,
+            activityStream: this.activityStream,
+            configPath: this.configPath,
+            getRequestSecurity,
+            approvalStream: this.approvalStream,
+        });
+        await this.managementApp.register((adminApp, _opts, done) => {
+            adminApp.addHook('preHandler', (request, reply, hookDone) => {
+                if (!checkRequestSecurity(request, reply, getRequestSecurity())) {
+                    return;
+                }
+                hookDone();
+            });
+            this.approvalRoutes.registerRoutes(adminApp);
+            adminApp.get('/admin/tools', (_request, reply) => {
+                return reply.send({ tools: this.registry.getAllTools(), errors: [] });
+            });
+            adminApp.get('/activity', (_request, reply) => {
+                return reply.send({ events: this.activityStream.recent() });
+            });
+            done();
+        });
+        if (management.expose_hook_api) {
+            await this.managementApp.register(hookApiPlugin, {
                 allowlist: this.allowlist,
                 hitlEngine: this.hitlEngine,
                 hitlBatcher: this.hitlBatcher,
                 auditLogger: this.auditLogger,
-                ...requestSecurity,
-            });
-        }
-        if (this.config.server.expose_tools_api) {
-            await this.app.register(toolsApiPlugin, {
-                getDeps: (agentId) => this.buildAgentDeps(agentId),
-                ...requestSecurity,
+                getRequestSecurity,
             });
         }
-        await this.app.register(sseServerPlugin, {
-            getDeps: (agentId) => this.buildAgentDeps(agentId),
-            ...requestSecurity,
-        });
-        await this.app.register(httpServerPlugin, {
-            getDeps: (agentId) => this.buildAgentDeps(agentId),
-            ...requestSecurity,
+        this.managementApp.get('/health', async (request, reply) => {
+            if (!checkRequestSecurity(request, reply, getRequestSecurity()))
+                return;
+            const dataPlane = await this.dataPlaneHealth();
+            const mcpHealth = this.pool.healthCheck();
+            const pendingApprovals = this.hitlEngine.getPending().length;
+            const uptime = Math.floor((Date.now() - this.startTime) / 1000);
+            const status = dataPlane.status === 'ok' ? 'ok' : 'degraded';
+            return { status, dataPlane, mcpHealth, pendingApprovals, uptime };
         });
-        if (this.config.server.expose_management_api) {
-            this.app.get('/health', (request, reply) => {
-                if (!checkRequestSecurity(request, reply, requestSecurity))
-                    return;
-                const mcpHealth = this.pool.healthCheck();
-                const pendingApprovals = this.hitlEngine.getPending().length;
-                const uptime = Math.floor((Date.now() - this.startTime) / 1000);
-                return { status: 'ok', mcpHealth, pendingApprovals, uptime };
-            });
+        const { port, host, insecure_remote_bind } = management;
+        if (insecure_remote_bind) {
+            log.warn({ port, host }, 'Control-plane bound beyond loopback; admin/audit/approval routes may be reachable off-host. Restrict this listener with network ACLs.');
+        }
+        await this.managementApp.listen({ port, host });
+        log.info({ port, host }, 'Airlock control-plane management API listening');
+    }
+    async dataPlaneHealth() {
+        const address = this.app.server.address();
+        const host = typeof address === 'object' && address !== null ? address.address : this.config.server.host;
+        const port = typeof address === 'object' && address !== null ? address.port : this.config.server.port;
+        const status = await tcpProbe(connectableLoopbackHost(host), port, 250);
+        return { status: status ? 'ok' : 'down', host, port };
+    }
+    assertManagementApiConfig(config) {
+        const management = config.server.management_api;
+        if (!management.enabled)
+            return;
+        if (!management.api_secret && !config.server.api_secret) {
+            throw new Error('server.management_api.enabled requires server.management_api.api_secret or server.api_secret.');
+        }
+        const tokenlessAgents = Object.entries(config.agents)
+            .filter(([, agent]) => !agent.token)
+            .map(([agentId]) => agentId);
+        if (tokenlessAgents.length > 0) {
+            throw new Error(`server.management_api.enabled requires per-agent tokens. Add token to agents: ${tokenlessAgents.join(', ')}.`);
+        }
+        if (!isLoopbackHost(management.host) && !management.insecure_remote_bind) {
+            throw new Error('server.management_api.host is non-loopback while insecure_remote_bind is false. Keep it on 127.0.0.1/::1, or explicitly set server.management_api.insecure_remote_bind: true and restrict the control-plane port with network ACLs.');
+        }
+        if (management.port !== 0 && management.port === config.server.port) {
+            throw new Error('Control-plane and data-plane must not share a socket.');
+        }
+    }
+    updateRequestSecurity(config) {
+        this.dataPlaneRequestSecurity.secret = config.server.api_secret;
+        this.dataPlaneRequestSecurity.authRequired = config.server.auth_required;
+        this.dataPlaneRequestSecurity.allowedOrigins = config.server.allowed_origins;
+        this.managementRequestSecurity.secret =
+            config.server.management_api.api_secret ?? config.server.api_secret;
+        this.managementRequestSecurity.authRequired = true;
+        this.managementRequestSecurity.allowedOrigins = config.server.allowed_origins;
+    }
+    assertReloadCompatible(newConfig) {
+        const oldServer = this.config.server;
+        const newServer = newConfig.server;
+        const restartFields = [
+            ['server.host', oldServer.host, newServer.host],
+            ['server.port', oldServer.port, newServer.port],
+            ['server.expose_tools_api', oldServer.expose_tools_api, newServer.expose_tools_api],
+            [
+                'server.management_api.enabled',
+                oldServer.management_api.enabled,
+                newServer.management_api.enabled,
+            ],
+            ['server.management_api.host', oldServer.management_api.host, newServer.management_api.host],
+            ['server.management_api.port', oldServer.management_api.port, newServer.management_api.port],
+            [
+                'server.management_api.insecure_remote_bind',
+                oldServer.management_api.insecure_remote_bind,
+                newServer.management_api.insecure_remote_bind,
+            ],
+            [
+                'server.management_api.expose_hook_api',
+                oldServer.management_api.expose_hook_api,
+                newServer.management_api.expose_hook_api,
+            ],
+            [
+                'approvals.provider',
+                JSON.stringify(this.config.approvals.provider),
+                JSON.stringify(newConfig.approvals.provider),
+            ],
+            [
+                'approvals.batch_window_ms',
+                this.config.approvals.batch_window_ms,
+                newConfig.approvals.batch_window_ms,
+            ],
+        ];
+        const changed = restartFields.find(([, oldValue, newValue]) => oldValue !== newValue);
+        if (changed) {
+            throw new Error(`${changed[0]} changed; restart Airlock to apply listener or approval-provider topology changes.`);
         }
-        const { port, host } = this.config.server;
-        await this.app.listen({ port, host });
-        log.info({ port, host }, 'Airlock gateway listening');
     }
     buildHitlProvider(approvalForwarder) {
         const providers = [];
@@ -147,17 +280,23 @@ export class Gateway {
         if (configuredProvider) {
             providers.push(createHitlProvider(configuredProvider, approvalForwarder, {
                 configPath: this.configPath,
+                auditLogger: this.auditLogger,
+                approvalStream: this.approvalStream,
             }));
         }
-        providers.push(this.approvalRoutes);
+        providers.push(this.approvalStream);
         return providers.length === 1 ? providers[0] : new CompositeHitlProvider(providers);
     }
-    buildAgentDeps(agentId) {
+    buildAgentDeps(agentId, downstreamSessionKey) {
         const agentConfig = this.config.agents[agentId];
         if (!agentConfig)
             return undefined;
+        const downstreamSessionId = downstreamSessionKey
+            ? this.downstreamSessionIdFor(downstreamSessionKey)
+            : undefined;
         return {
             agentId,
+            downstreamSessionId,
             agentConfig,
             getAgentConfig: () => this.config.agents[agentId] ?? agentConfig,
             registry: this.registry,
@@ -169,15 +308,38 @@ export class Gateway {
             securityConfig: this.config.security,
         };
     }
+    downstreamSessionIdFor(key) {
+        let id = this.downstreamSessionIds.get(key);
+        if (!id) {
+            id = randomUUID();
+            this.downstreamSessionIds.set(key, id);
+        }
+        return id;
+    }
+    requiresToolsApiSessionId(agentId, toolName) {
+        const agentConfig = this.config.agents[agentId];
+        if (!agentConfig)
+            return false;
+        const resolvedToolName = agentConfig.tool_overrides[toolName]?.alias_of ?? toolName;
+        const separatorIndex = resolvedToolName.indexOf('/');
+        if (separatorIndex <= 0)
+            return false;
+        const providerId = resolvedToolName.slice(0, separatorIndex);
+        return providerId in getMcpConfigs(this.config.providers);
+    }
     async reload(newConfig) {
         log.info('Reloading gateway config');
+        this.assertManagementApiConfig(newConfig);
+        this.assertReloadCompatible(newConfig);
         this.config = newConfig;
+        this.updateRequestSecurity(newConfig);
+        this.hitlEngine.setTimeoutMs(newConfig.approvals.timeout_ms);
         const mcpConfigs = getMcpConfigs(newConfig.providers);
         await this.pool.reload(mcpConfigs);
         this.allowlist.reload(newConfig.agents);
         this.registry.reloadAgents(newConfig.agents);
         // Rebuild adapters to pick up new CLIs/APIs
-        const adapters = buildAdapters(newConfig, this.pool);
+        const adapters = this.buildAdapters();
         this.registry.setAdapters(adapters);
         await this.registry.refresh();
         log.info('Config reloaded: providers, allowlist, registry, and agent configs updated');
@@ -190,7 +352,10 @@ export class Gateway {
         log.info('Stopping Airlock gateway');
         this.pool?.disableReconnect();
         await this.pool?.stop();
+        await this.managementApp?.close();
         await this.app?.close();
+        this.unsubscribeActivityNotifications?.();
+        this.unsubscribeActivityNotifications = undefined;
         await this.registry?.stopAll();
         await this.hitlProvider?.stop();
         this.auditLogger?.stop();
@@ -199,6 +364,15 @@ export class Gateway {
     forceKill() {
         this.pool?.forceKill();
     }
+    buildAdapters() {
+        return buildAdapters(this.config, this.pool, {
+            airlock: {
+                hitlEngine: this.hitlEngine,
+                hitlBatcher: this.hitlBatcher,
+                activityStream: this.activityStream,
+            },
+        });
+    }
 }
 function withoutDashboardProvider(provider) {
     if (Array.isArray(provider)) {
@@ -209,4 +383,36 @@ function withoutDashboardProvider(provider) {
     }
     return provider.type === 'dashboard' ? undefined : provider;
 }
+function isLoopbackHost(host) {
+    const normalized = host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
+    if (normalized === 'localhost')
+        return true;
+    const ipVersion = isIP(normalized);
+    if (ipVersion === 6)
+        return normalized === '::1';
+    if (ipVersion !== 4)
+        return false;
+    const firstOctet = Number(normalized.split('.')[0]);
+    return firstOctet === 127;
+}
+function connectableLoopbackHost(host) {
+    if (host === '0.0.0.0')
+        return '127.0.0.1';
+    if (host === '::' || host === '[::]')
+        return '::1';
+    return host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
+}
+function tcpProbe(host, port, timeoutMs) {
+    return new Promise((resolve) => {
+        const socket = createConnection({ host, port });
+        const done = (ok) => {
+            socket.destroy();
+            resolve(ok);
+        };
+        socket.setTimeout(timeoutMs);
+        socket.once('connect', () => done(true));
+        socket.once('timeout', () => done(false));
+        socket.once('error', () => done(false));
+    });
+}
 //# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAI9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;AAMnC,MAAM,OAAO,OAAO;IAaR;IACA;IACA;IAdF,IAAI,CAAc;IAClB,QAAQ,CAAgB;IACxB,SAAS,CAAmB;IAC5B,UAAU,CAAc;IACxB,WAAW,CAAe;IAC1B,YAAY,CAAgB;IAC5B,cAAc,CAA2B;IACzC,WAAW,CAAe;IAC1B,GAAG,CAAmB;IACtB,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE/B,YACU,MAAc,EACd,UAAmB,EACnB,UAA0B,EAAE;QAF5B,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAS;QACnB,YAAO,GAAP,OAAO,CAAqB;IACnC,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAErC,eAAe;QACf,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAErC,qFAAqF;QACrF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAE1E,MAAM,iBAAiB,GAAgB;YACrC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;YAChD,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;SAC3D,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QACrE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;QAE9D,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAC9B,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CACjC,CAAC;QAEF,0BAA0B;QAC1B,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACnD,KAAK,IAAI,CAAC,YAAY;iBACnB,MAAM,CAAC,QAAQ,CAAC;iBAChB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAEvC,8DAA8D;QAC9D,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAE7B,yDAAyD;QACzD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvD,uBAAuB;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE/E,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE;YAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,4CAA4C,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ;iBACV,OAAO,EAAE;iBACT,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4CAA4C,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAE9B,cAAc;QACd,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtC,MAAM,eAAe,GAAG;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU;YACrC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa;YAC9C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe;SACnD,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC;YACxF,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE;gBACtC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,GAAG,eAAe;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;gBACzC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;oBACtD,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;wBAC3D,OAAO;oBACT,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC7C,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;oBACrD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;gBACxE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;gBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,GAAG,eAAe;aACnB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE;gBACtC,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAC1D,GAAG,eAAe;aACnB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE;YACvC,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC1D,GAAG,eAAe;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,EAAE;YACxC,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC1D,GAAG,eAAe;SACnB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;gBACzC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC;oBAAE,OAAO;gBACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC;gBAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;gBAChE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;YAC/D,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1C,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACxD,CAAC;IAEO,iBAAiB,CAAC,iBAA8B;QACtD,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW;YACjD,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QAEnC,IAAI,kBAAkB,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CACZ,kBAAkB,CAAC,kBAAkB,EAAE,iBAAiB,EAAE;gBACxD,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEpC,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IAED,cAAc,CAAC,OAAe;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QAEnC,OAAO;YACL,OAAO;YACP,WAAW;YACX,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,WAAW;YAChE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7C,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACzF,CAAC;IAED,6DAA6D;IAC7D,gBAAgB;QACd,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,+DAA+D;IAC/D,SAAS;QACP,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACzB,CAAC;CACF;AAED,SAAS,wBAAwB,CAAC,QAAyC;IAGzE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAC7C,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAI9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAA+B,MAAM,uBAAuB,CAAC;AAE1F,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;AAMnC,MAAM,OAAO,OAAO;IAoBR;IACA;IACA;IArBF,IAAI,CAAc;IAClB,QAAQ,CAAgB;IACxB,SAAS,CAAmB;IAC5B,UAAU,CAAc;IACxB,WAAW,CAAe;IAC1B,YAAY,CAAgB;IAC5B,cAAc,CAA2B;IACzC,cAAc,CAAqB;IACnC,WAAW,CAAe;IAC1B,GAAG,CAAmB;IACtB,aAAa,CAAmB;IAChC,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,gCAAgC,CAAc;IAC9C,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,wBAAwB,GAA2B,EAAE,CAAC;IACtD,yBAAyB,GAA2B,EAAE,CAAC;IAE/D,YACU,MAAc,EACd,UAAmB,EACnB,UAA0B,EAAE;QAF5B,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAS;QACnB,YAAO,GAAP,OAAO,CAAqB;IACnC,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAExC,eAAe;QACf,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAErC,qFAAqF;QACrF,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,IAAI,iBAAiB,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAErF,MAAM,iBAAiB,GAAgB;YACrC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC;YACtD,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC;YAC5D,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;SACvE,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,uBAAuB,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1F,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9E,KAAK,IAAI,CAAC,YAAY;iBACnB,cAAc,EAAE,CAAC,KAAK,CAAC;iBACvB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,sCAAsC,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAC9B,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CACjC,CAAC;QAEF,0BAA0B;QAC1B,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC;YACvD,KAAK,IAAI,CAAC,YAAY;iBACnB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;iBAC/D,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAEvC,8DAA8D;QAC9D,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAE7B,yDAAyD;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEtC,uBAAuB;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE/E,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE;YAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,4CAA4C,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ;iBACV,OAAO,EAAE;iBACT,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4CAA4C,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAE9B,oEAAoE;QACpE,+DAA+D;QAC/D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtC,MAAM,2BAA2B,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC;QACxE,MAAM,4BAA4B,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC;QAE1E,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE;YACvC,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC1D,kBAAkB,EAAE,2BAA2B;SAChD,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,EAAE;YACxC,OAAO,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC1D,kBAAkB,EAAE,2BAA2B;SAChD,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE;gBACtC,OAAO,EAAE,CAAC,OAAe,EAAE,oBAA6B,EAAE,EAAE,CAC1D,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,oBAAoB,CAAC;gBACpD,iBAAiB,EAAE,CAAC,OAAe,EAAE,IAAY,EAAE,EAAE,CACnD,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC/C,kBAAkB,EAAE,2BAA2B;aAChD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1C,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAE/D,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;oBACxC,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,QAAQ,EAAE,EACjB,uEAAuE,CACxE,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,kBAAgD;QAEhD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;QACrD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhD,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE;YAC/C,MAAM,EAAE,IAAI,CAAC,UAAU;YACvB,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,EAAE;YAChD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,EAAE;YACjD,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,UAAU;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,kBAAkB;YAClB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC1D,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC1D,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,QAAQ,EAAE,CAAC;YACb,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC7C,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;gBAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;gBAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE;gBAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,kBAAkB;aACnB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACzD,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBAAE,OAAO;YACxE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC;YAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YAC7D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,UAAU,CAAC;QACxD,IAAI,oBAAoB,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CACN,EAAE,IAAI,EAAE,IAAI,EAAE,EACd,uIAAuI,CACxI,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,gDAAgD,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,eAAe;QAK3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9F,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACxE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IAEO,yBAAyB,CAAC,MAAc;QAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,OAAO;YAAE,OAAO;QAEhC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;aAClD,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,iFAAiF,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,qOAAqO,CACtO,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,MAAc;QAC1C,IAAI,CAAC,wBAAwB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QAChE,IAAI,CAAC,wBAAwB,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACzE,IAAI,CAAC,wBAAwB,CAAC,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QAC7E,IAAI,CAAC,yBAAyB,CAAC,MAAM;YACnC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACtE,IAAI,CAAC,yBAAyB,CAAC,YAAY,GAAG,IAAI,CAAC;QACnD,IAAI,CAAC,yBAAyB,CAAC,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;IAChF,CAAC;IAEO,sBAAsB,CAAC,SAAiB;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC;QACnC,MAAM,aAAa,GAAsC;YACvD,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;YAC/C,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;YAC/C,CAAC,yBAAyB,EAAE,SAAS,CAAC,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,CAAC;YACnF;gBACE,+BAA+B;gBAC/B,SAAS,CAAC,cAAc,CAAC,OAAO;gBAChC,SAAS,CAAC,cAAc,CAAC,OAAO;aACjC;YACD,CAAC,4BAA4B,EAAE,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC;YAC5F,CAAC,4BAA4B,EAAE,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC;YAC5F;gBACE,4CAA4C;gBAC5C,SAAS,CAAC,cAAc,CAAC,oBAAoB;gBAC7C,SAAS,CAAC,cAAc,CAAC,oBAAoB;aAC9C;YACD;gBACE,uCAAuC;gBACvC,SAAS,CAAC,cAAc,CAAC,eAAe;gBACxC,SAAS,CAAC,cAAc,CAAC,eAAe;aACzC;YACD;gBACE,oBAAoB;gBACpB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC9C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC7C;YACD;gBACE,2BAA2B;gBAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe;gBACrC,SAAS,CAAC,SAAS,CAAC,eAAe;aACpC;SACF,CAAC;QAEF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACtF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,CAAC,CAAC,oFAAoF,CAClG,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,iBAA8B;QACtD,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW;YACjD,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QAEnC,IAAI,kBAAkB,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CACZ,kBAAkB,CAAC,kBAAkB,EAAE,iBAAiB,EAAE;gBACxD,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEpC,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,oBAA6B;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,mBAAmB,GAAG,oBAAoB;YAC9C,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,CAAC;YACnD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,OAAO;YACP,mBAAmB;YACnB,WAAW;YACX,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,WAAW;YAChE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SACrC,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,GAAW;QACxC,IAAI,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,EAAE,GAAG,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,yBAAyB,CAAC,OAAe,EAAE,QAAgB;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/B,MAAM,gBAAgB,GAAG,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,QAAQ,IAAI,QAAQ,CAAC;QACpF,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,cAAc,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAEtC,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAC7D,OAAO,UAAU,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrC,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7C,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACzF,CAAC;IAED,6DAA6D;IAC7D,gBAAgB;QACd,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,gCAAgC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,gCAAgC,GAAG,SAAS,CAAC;QAClD,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,+DAA+D;IAC/D,SAAS;QACP,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACzB,CAAC;IAEO,aAAa;QACnB,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;YAC3C,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,wBAAwB,CAC/B,QAAyC;IAEzC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxD,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,UAAU,KAAK,KAAK,CAAC;IACjD,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,UAAU,KAAK,GAAG,CAAC;AAC5B,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC3C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,EAAW,EAAE,EAAE;YAC3B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/hitl/api.d.ts

@@ -1,9 +1,11 @@
 import type { FastifyInstance } from 'fastify';
 import type { HitlEngine } from './engine.js';
+import { type RequestSecurityOptions } from '../security/request.js';
 export declare function hitlApiPlugin(app: FastifyInstance, opts: {
     engine: HitlEngine;
     secret?: string;
     authRequired?: boolean;
     allowedOrigins?: string[];
+    getRequestSecurity?: () => RequestSecurityOptions;
 }): Promise<void>;
 //# sourceMappingURL=api.d.ts.map

package/dist/hitl/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/hitl/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,wBAAsB,aAAa,CACjC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/F,OAAO,CAAC,IAAI,CAAC,CAyBf"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/hitl/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAwB,KAAK,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAG3F,wBAAsB,aAAa,CACjC,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE;IACJ,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,sBAAsB,CAAC;CACnD,GACA,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/dist/hitl/api.js

@@ -9,11 +9,19 @@ export async function hitlApiPlugin(app, opts) {
     });
     app.post('/hitl/approve/:id', async (request, reply) => {
         const { id } = request.params;
+        if (!engine.hasPending(id)) {
+            reply.code(404);
+            return { error: 'No pending approval found for id' };
+        }
         engine.approve(id);
         return reply.send({ ok: true });
     });
     app.post('/hitl/deny/:id', async (request, reply) => {
         const { id } = request.params;
+        if (!engine.hasPending(id)) {
+            reply.code(404);
+            return { error: 'No pending approval found for id' };
+        }
         const body = request.body;
         engine.deny(id, body?.reason);
         return reply.send({ ok: true });

package/dist/hitl/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/hitl/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,IAAgG;IAEhG,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjD,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAuC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/hitl/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAA+B,MAAM,wBAAwB,CAAC;AAE3F,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,IAMC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjD,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACvD,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAuC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/hitl/approval-dashboard.d.ts

@@ -1,19 +1,15 @@
 import type { FastifyInstance } from 'fastify';
-import type { ApprovalApi, HitlNotification, HitlProvider } from './providers/types.js';
-export declare class ApprovalDashboardRoutes implements HitlProvider {
+import type { ApprovalStreamHub } from './approval-stream.js';
+import type { ApprovalApi } from './providers/types.js';
+export declare class ApprovalDashboardRoutes {
     private approvalApi;
-    private clients;
-    private pending;
-    constructor(approvalApi: ApprovalApi);
-    init(): Promise<void>;
+    private stream;
+    constructor(approvalApi: ApprovalApi, stream: ApprovalStreamHub);
     registerRoutes(app: FastifyInstance, configPath?: string): void;
-    notify(requests: HitlNotification[]): Promise<void>;
-    stop(): Promise<void>;
     private handleEvents;
     private handleApprove;
     private handleDeny;
     private handleLatestVersion;
     private rememberDecision;
-    private broadcast;
 }
 //# sourceMappingURL=approval-dashboard.d.ts.map

package/dist/hitl/approval-dashboard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-dashboard.d.ts","sourceRoot":"","sources":["../../src/hitl/approval-dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAK7E,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOxF,qBAAa,uBAAwB,YAAW,YAAY;IAI9C,OAAO,CAAC,WAAW;IAH/B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,OAAO,CAAuC;gBAElC,WAAW,EAAE,WAAW;IAE5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,cAAc,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAQ/D,MAAM,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrB,OAAO,CAAC,YAAY;YAcN,aAAa;IA0B3B,OAAO,CAAC,UAAU;YAeJ,mBAAmB;IAmBjC,OAAO,CAAC,gBAAgB;IAoCxB,OAAO,CAAC,SAAS;CAUlB"}
+{"version":3,"file":"approval-dashboard.d.ts","sourceRoot":"","sources":["../../src/hitl/approval-dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAI7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAoB,MAAM,sBAAsB,CAAC;AAO1E,qBAAa,uBAAuB;IAEhC,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,MAAM;gBADN,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,iBAAiB;IAGnC,cAAc,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAQ/D,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,aAAa;IAwBrB,OAAO,CAAC,UAAU;YAUJ,mBAAmB;IAqBjC,OAAO,CAAC,gBAAgB;CAsCzB"}