clawsec 0.0.1

package/dist/src/proxy/middleware.js

@@ -0,0 +1,215 @@
+/**
+ * Proxy Middleware
+ * Request processing middleware that bridges HTTP requests to the detection engine
+ */
+/** Default approval timeout in seconds */
+const DEFAULT_APPROVAL_TIMEOUT_SECONDS = 300;
+/**
+ * Generate a unique approval ID
+ */
+function generateApprovalId() {
+    const timestamp = Date.now().toString(36);
+    const random = Math.random().toString(36).slice(2, 10);
+    return `approval-${timestamp}-${random}`;
+}
+/**
+ * Convert ProxyRequest to ToolCallContext for analysis
+ */
+export function toToolCallContext(request) {
+    const context = {
+        toolName: request.toolName,
+        toolInput: request.toolInput,
+    };
+    // Extract URL from common tool input patterns
+    if (typeof request.toolInput.url === 'string') {
+        context.url = request.toolInput.url;
+    }
+    return context;
+}
+/**
+ * Convert AnalysisResult to ProxyResponse
+ */
+export function toProxyResponse(result, pendingApprovalId, approvalTimeoutSeconds) {
+    const response = {
+        allowed: result.action === 'allow' || result.action === 'log',
+        analysis: {
+            action: result.action,
+            detections: result.detections,
+            cached: result.cached,
+            durationMs: result.durationMs,
+        },
+    };
+    // Add message based on action
+    switch (result.action) {
+        case 'allow':
+            response.message = 'Request allowed';
+            break;
+        case 'block':
+            response.message = result.primaryDetection
+                ? `Request blocked: ${result.primaryDetection.reason}`
+                : 'Request blocked';
+            break;
+        case 'confirm':
+            response.message = result.primaryDetection
+                ? `Approval required: ${result.primaryDetection.reason}`
+                : 'Approval required';
+            if (pendingApprovalId) {
+                response.pendingApproval = {
+                    id: pendingApprovalId,
+                    timeout: approvalTimeoutSeconds ?? DEFAULT_APPROVAL_TIMEOUT_SECONDS,
+                };
+            }
+            break;
+        case 'warn':
+            response.message = result.primaryDetection
+                ? `Warning: ${result.primaryDetection.reason}`
+                : 'Warning';
+            response.allowed = true;
+            break;
+        case 'log':
+            response.message = 'Request logged and allowed';
+            break;
+    }
+    return response;
+}
+/**
+ * Middleware for processing analysis requests
+ */
+export class AnalysisMiddleware {
+    analyzer;
+    approvalStore;
+    approvalTimeoutSeconds;
+    constructor(analyzer, approvalStore, approvalTimeoutSeconds = DEFAULT_APPROVAL_TIMEOUT_SECONDS) {
+        this.analyzer = analyzer;
+        this.approvalStore = approvalStore;
+        this.approvalTimeoutSeconds = approvalTimeoutSeconds;
+    }
+    /**
+     * Process an analysis request
+     */
+    async analyze(request) {
+        // Validate and cast request
+        const toolName = request.toolName;
+        if (!toolName || typeof toolName !== 'string') {
+            throw new ValidationError('toolName is required and must be a string');
+        }
+        const toolInput = request.toolInput;
+        if (!toolInput || typeof toolInput !== 'object' || toolInput === null) {
+            throw new ValidationError('toolInput is required and must be an object');
+        }
+        // Build typed request
+        const typedRequest = {
+            toolName,
+            toolInput: toolInput,
+            sessionId: typeof request.sessionId === 'string' ? request.sessionId : undefined,
+            userId: typeof request.userId === 'string' ? request.userId : undefined,
+        };
+        // Convert to ToolCallContext
+        const context = toToolCallContext(typedRequest);
+        // Run analysis
+        const result = await this.analyzer.analyze(context);
+        // If action is 'confirm', create a pending approval
+        let pendingApprovalId;
+        if (result.action === 'confirm' && result.primaryDetection) {
+            pendingApprovalId = generateApprovalId();
+            const now = Date.now();
+            const expiresAt = now + this.approvalTimeoutSeconds * 1000;
+            const approvalInput = {
+                id: pendingApprovalId,
+                createdAt: now,
+                expiresAt,
+                detection: result.primaryDetection,
+                toolCall: context,
+            };
+            this.approvalStore.add(approvalInput);
+        }
+        return toProxyResponse(result, pendingApprovalId, this.approvalTimeoutSeconds);
+    }
+    /**
+     * Approve a pending request
+     */
+    approve(id, approvedBy) {
+        const record = this.approvalStore.get(id);
+        if (!record) {
+            return {
+                success: false,
+                message: `Approval not found: ${id}`,
+            };
+        }
+        if (record.status !== 'pending') {
+            return {
+                success: false,
+                message: `Approval already ${record.status}: ${id}`,
+            };
+        }
+        const success = this.approvalStore.approve(id, approvedBy);
+        return {
+            success,
+            message: success
+                ? `Approved: ${id}`
+                : `Failed to approve: ${id}`,
+        };
+    }
+    /**
+     * Deny a pending request
+     */
+    deny(id) {
+        const record = this.approvalStore.get(id);
+        if (!record) {
+            return {
+                success: false,
+                message: `Approval not found: ${id}`,
+            };
+        }
+        if (record.status !== 'pending') {
+            return {
+                success: false,
+                message: `Approval already ${record.status}: ${id}`,
+            };
+        }
+        const success = this.approvalStore.deny(id);
+        return {
+            success,
+            message: success
+                ? `Denied: ${id}`
+                : `Failed to deny: ${id}`,
+        };
+    }
+    /**
+     * Get server status
+     */
+    getStatus(config, actualPort) {
+        const pendingApprovals = this.approvalStore.getPending();
+        return {
+            active: true,
+            config: {
+                port: actualPort ?? config.port,
+                host: config.host ?? '127.0.0.1',
+                enabled: config.clawsecConfig.global?.enabled ?? true,
+            },
+            pendingApprovals: pendingApprovals.length,
+        };
+    }
+    /**
+     * Get health status
+     */
+    getHealth() {
+        return { status: 'ok' };
+    }
+}
+/**
+ * Custom error for validation failures
+ */
+export class ValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ValidationError';
+    }
+}
+/**
+ * Create an analysis middleware instance
+ */
+export function createAnalysisMiddleware(analyzer, approvalStore, approvalTimeoutSeconds) {
+    return new AnalysisMiddleware(analyzer, approvalStore, approvalTimeoutSeconds);
+}
+//# sourceMappingURL=middleware.js.map

package/dist/src/proxy/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/proxy/middleware.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,0CAA0C;AAC1C,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAE7C;;GAEG;AACH,SAAS,kBAAkB;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,YAAY,SAAS,IAAI,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAqB;IACrD,MAAM,OAAO,GAAoB;QAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IAEF,8CAA8C;IAC9C,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC;IACtC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAsB,EACtB,iBAA0B,EAC1B,sBAA+B;IAE/B,MAAM,QAAQ,GAAkB;QAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK;QAC7D,QAAQ,EAAE;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B;KACF,CAAC;IAEF,8BAA8B;IAC9B,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,OAAO;YACV,QAAQ,CAAC,OAAO,GAAG,iBAAiB,CAAC;YACrC,MAAM;QACR,KAAK,OAAO;YACV,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,gBAAgB;gBACxC,CAAC,CAAC,oBAAoB,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBACtD,CAAC,CAAC,iBAAiB,CAAC;YACtB,MAAM;QACR,KAAK,SAAS;YACZ,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,gBAAgB;gBACxC,CAAC,CAAC,sBAAsB,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBACxD,CAAC,CAAC,mBAAmB,CAAC;YACxB,IAAI,iBAAiB,EAAE,CAAC;gBACtB,QAAQ,CAAC,eAAe,GAAG;oBACzB,EAAE,EAAE,iBAAiB;oBACrB,OAAO,EAAE,sBAAsB,IAAI,gCAAgC;iBACpE,CAAC;YACJ,CAAC;YACD,MAAM;QACR,KAAK,MAAM;YACT,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,gBAAgB;gBACxC,CAAC,CAAC,YAAY,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC9C,CAAC,CAAC,SAAS,CAAC;YACd,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,MAAM;QACR,KAAK,KAAK;YACR,QAAQ,CAAC,OAAO,GAAG,4BAA4B,CAAC;YAChD,MAAM;IACV,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACZ,QAAQ,CAAW;IACnB,aAAa,CAAgB;IAC7B,sBAAsB,CAAS;IAEhD,YACE,QAAkB,EAClB,aAA4B,EAC5B,yBAAiC,gCAAgC;QAEjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAgC;QAC5C,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,IAAI,eAAe,CAAC,6CAA6C,CAAC,CAAC;QAC3E,CAAC;QAED,sBAAsB;QACtB,MAAM,YAAY,GAAiB;YACjC,QAAQ;YACR,SAAS,EAAE,SAAoC;YAC/C,SAAS,EAAE,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAChF,MAAM,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC;QAEF,6BAA6B;QAC7B,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAEhD,eAAe;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEpD,oDAAoD;QACpD,IAAI,iBAAqC,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC3D,iBAAiB,GAAG,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;YAE3D,MAAM,aAAa,GAAyB;gBAC1C,EAAE,EAAE,iBAAiB;gBACrB,SAAS,EAAE,GAAG;gBACd,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,gBAAgB;gBAClC,QAAQ,EAAE,OAAO;aAClB,CAAC;YAEF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,eAAe,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACjF,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,EAAU,EAAE,UAAmB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,uBAAuB,EAAE,EAAE;aACrC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,oBAAoB,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE;aACpD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC3D,OAAO;YACL,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,aAAa,EAAE,EAAE;gBACnB,CAAC,CAAC,sBAAsB,EAAE,EAAE;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,EAAU;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,uBAAuB,EAAE,EAAE;aACrC,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,oBAAoB,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE;aACpD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO;YACL,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,WAAW,EAAE,EAAE;gBACjB,CAAC,CAAC,mBAAmB,EAAE,EAAE;SAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAmB,EAAE,UAAmB;QAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE;gBACN,IAAI,EAAE,UAAU,IAAI,MAAM,CAAC,IAAI;gBAC/B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW;gBAChC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI;aACtD;YACD,gBAAgB,EAAE,gBAAgB,CAAC,MAAM;SAC1C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAkB,EAClB,aAA4B,EAC5B,sBAA+B;IAE/B,OAAO,IAAI,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;AACjF,CAAC"}

package/dist/src/proxy/server.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Standalone HTTP Proxy Server
+ * HTTP server that intercepts and analyzes tool calls without OpenClaw integration
+ */
+import type { ProxyConfig, ProxyServer } from './types.js';
+/**
+ * HTTP Proxy Server Implementation
+ */
+export declare class HttpProxyServer implements ProxyServer {
+    private readonly config;
+    private readonly middleware;
+    private readonly approvalStore;
+    private server;
+    private actualPort;
+    constructor(config: ProxyConfig);
+    /**
+     * Start the server
+     */
+    start(): Promise<void>;
+    /**
+     * Stop the server
+     */
+    stop(): Promise<void>;
+    /**
+     * Get the port the server is listening on
+     */
+    getPort(): number;
+    /**
+     * Handle incoming HTTP request
+     */
+    private handleRequest;
+    /**
+     * Handle POST /analyze
+     */
+    private handleAnalyze;
+    /**
+     * Handle POST /approve/:id
+     */
+    private handleApprove;
+    /**
+     * Handle POST /deny/:id
+     */
+    private handleDeny;
+    /**
+     * Handle GET /status
+     */
+    private handleStatus;
+    /**
+     * Handle GET /health
+     */
+    private handleHealth;
+}
+/**
+ * Create a proxy server instance
+ */
+export declare function createProxyServer(config: ProxyConfig): ProxyServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/src/proxy/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/proxy/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA0G3D;;GAEG;AACH,qBAAa,eAAgB,YAAW,WAAW;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAwB;IACtD,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,UAAU,CAAa;gBAEnB,MAAM,EAAE,WAAW;IAmB/B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB3B;;OAEG;IACH,OAAO,IAAI,MAAM;IAIjB;;OAEG;YACW,aAAa;IAyE3B;;OAEG;YACW,aAAa;IAM3B;;OAEG;YACW,aAAa;IAM3B;;OAEG;YACW,UAAU;IAMxB;;OAEG;IACH,OAAO,CAAC,YAAY;IAKpB;;OAEG;IACH,OAAO,CAAC,YAAY;CAIrB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAElE"}

package/dist/src/proxy/server.js

@@ -0,0 +1,298 @@
+/**
+ * Standalone HTTP Proxy Server
+ * HTTP server that intercepts and analyzes tool calls without OpenClaw integration
+ */
+import { createServer } from 'http';
+import { ValidationError, createAnalysisMiddleware } from './middleware.js';
+import { HybridAnalyzer } from '../engine/analyzer.js';
+import { createApprovalStore } from '../approval/store.js';
+/** Default host to bind to */
+const DEFAULT_HOST = '127.0.0.1';
+/** Default approval timeout in seconds */
+const DEFAULT_APPROVAL_TIMEOUT = 300;
+/**
+ * Parse JSON body from request
+ */
+async function parseJsonBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        req.on('data', (chunk) => {
+            chunks.push(chunk);
+        });
+        req.on('end', () => {
+            const body = Buffer.concat(chunks).toString('utf-8');
+            if (!body || body.trim() === '') {
+                resolve({});
+                return;
+            }
+            try {
+                resolve(JSON.parse(body));
+            }
+            catch {
+                reject(new Error('Invalid JSON'));
+            }
+        });
+        req.on('error', reject);
+    });
+}
+/**
+ * Send JSON response
+ */
+function sendJson(res, statusCode, data) {
+    res.statusCode = statusCode;
+    res.setHeader('Content-Type', 'application/json');
+    res.end(JSON.stringify(data));
+}
+/**
+ * Send error response
+ */
+function sendError(res, statusCode, message) {
+    sendJson(res, statusCode, { error: true, message, statusCode });
+}
+/**
+ * Extract path parameter from URL pattern
+ * Example: extractParam('/approve/:id', '/approve/abc123') returns 'abc123'
+ */
+function extractParam(pattern, url) {
+    const patternParts = pattern.split('/');
+    const urlParts = url.split('?')[0].split('/');
+    if (patternParts.length !== urlParts.length) {
+        return null;
+    }
+    for (let i = 0; i < patternParts.length; i++) {
+        const patternPart = patternParts[i];
+        if (patternPart.startsWith(':')) {
+            return urlParts[i];
+        }
+        if (patternPart !== urlParts[i]) {
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Check if URL matches a pattern
+ */
+function matchesPattern(pattern, url) {
+    const urlPath = url.split('?')[0];
+    const patternParts = pattern.split('/');
+    const urlParts = urlPath.split('/');
+    if (patternParts.length !== urlParts.length) {
+        return false;
+    }
+    for (let i = 0; i < patternParts.length; i++) {
+        const patternPart = patternParts[i];
+        if (patternPart.startsWith(':')) {
+            continue; // Parameter placeholder matches anything
+        }
+        if (patternPart !== urlParts[i]) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * HTTP Proxy Server Implementation
+ */
+export class HttpProxyServer {
+    config;
+    middleware;
+    approvalStore;
+    server = null;
+    actualPort = 0;
+    constructor(config) {
+        this.config = config;
+        // Create approval store
+        this.approvalStore = createApprovalStore({
+            cleanupIntervalMs: 60_000, // Cleanup every minute
+            removeOnExpiry: true,
+        });
+        // Create analyzer
+        const analyzer = new HybridAnalyzer({ config: config.clawsecConfig });
+        // Get approval timeout from config
+        const approvalTimeout = config.clawsecConfig.approval?.native?.timeout ?? DEFAULT_APPROVAL_TIMEOUT;
+        // Create middleware
+        this.middleware = createAnalysisMiddleware(analyzer, this.approvalStore, approvalTimeout);
+    }
+    /**
+     * Start the server
+     */
+    async start() {
+        if (this.server) {
+            throw new Error('Server already started');
+        }
+        const host = this.config.host ?? DEFAULT_HOST;
+        const port = this.config.port;
+        return new Promise((resolve, reject) => {
+            this.server = createServer((req, res) => {
+                this.handleRequest(req, res).catch((error) => {
+                    console.error('Unhandled error in request handler:', error);
+                    sendError(res, 500, 'Internal server error');
+                });
+            });
+            this.server.on('error', (error) => {
+                if (error.code === 'EADDRINUSE') {
+                    reject(new Error(`Port ${port} is already in use`));
+                }
+                else {
+                    reject(error);
+                }
+            });
+            this.server.listen(port, host, () => {
+                const address = this.server?.address();
+                if (address && typeof address === 'object') {
+                    this.actualPort = address.port;
+                }
+                else {
+                    this.actualPort = port;
+                }
+                resolve();
+            });
+        });
+    }
+    /**
+     * Stop the server
+     */
+    async stop() {
+        if (!this.server) {
+            return;
+        }
+        return new Promise((resolve, reject) => {
+            // Stop the approval store cleanup timer
+            this.approvalStore.stopCleanupTimer();
+            this.approvalStore.clear();
+            this.server.close((error) => {
+                if (error) {
+                    reject(error);
+                }
+                else {
+                    this.server = null;
+                    this.actualPort = 0;
+                    resolve();
+                }
+            });
+        });
+    }
+    /**
+     * Get the port the server is listening on
+     */
+    getPort() {
+        return this.actualPort;
+    }
+    /**
+     * Handle incoming HTTP request
+     */
+    async handleRequest(req, res) {
+        const method = req.method?.toUpperCase() ?? 'GET';
+        const url = req.url ?? '/';
+        // Set CORS headers for all responses
+        res.setHeader('Access-Control-Allow-Origin', '*');
+        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+        // Handle CORS preflight
+        if (method === 'OPTIONS') {
+            res.statusCode = 204;
+            res.end();
+            return;
+        }
+        // Route the request
+        try {
+            // POST /analyze
+            if (method === 'POST' && url === '/analyze') {
+                await this.handleAnalyze(req, res);
+                return;
+            }
+            // POST /approve/:id
+            if (method === 'POST' && matchesPattern('/approve/:id', url)) {
+                const id = extractParam('/approve/:id', url);
+                if (id) {
+                    await this.handleApprove(id, res);
+                    return;
+                }
+            }
+            // POST /deny/:id
+            if (method === 'POST' && matchesPattern('/deny/:id', url)) {
+                const id = extractParam('/deny/:id', url);
+                if (id) {
+                    await this.handleDeny(id, res);
+                    return;
+                }
+            }
+            // GET /status
+            if (method === 'GET' && url === '/status') {
+                this.handleStatus(res);
+                return;
+            }
+            // GET /health
+            if (method === 'GET' && url === '/health') {
+                this.handleHealth(res);
+                return;
+            }
+            // Not found
+            sendError(res, 404, `Not found: ${method} ${url}`);
+        }
+        catch (error) {
+            if (error instanceof ValidationError) {
+                sendError(res, 400, error.message);
+            }
+            else if (error instanceof Error) {
+                if (error.message === 'Invalid JSON') {
+                    sendError(res, 400, 'Invalid JSON in request body');
+                }
+                else {
+                    console.error('Request handler error:', error);
+                    sendError(res, 500, 'Internal server error');
+                }
+            }
+            else {
+                console.error('Unknown error:', error);
+                sendError(res, 500, 'Internal server error');
+            }
+        }
+    }
+    /**
+     * Handle POST /analyze
+     */
+    async handleAnalyze(req, res) {
+        const body = await parseJsonBody(req);
+        const response = await this.middleware.analyze(body);
+        sendJson(res, 200, response);
+    }
+    /**
+     * Handle POST /approve/:id
+     */
+    async handleApprove(id, res) {
+        const response = this.middleware.approve(id);
+        const statusCode = response.success ? 200 : 404;
+        sendJson(res, statusCode, response);
+    }
+    /**
+     * Handle POST /deny/:id
+     */
+    async handleDeny(id, res) {
+        const response = this.middleware.deny(id);
+        const statusCode = response.success ? 200 : 404;
+        sendJson(res, statusCode, response);
+    }
+    /**
+     * Handle GET /status
+     */
+    handleStatus(res) {
+        const response = this.middleware.getStatus(this.config, this.actualPort);
+        sendJson(res, 200, response);
+    }
+    /**
+     * Handle GET /health
+     */
+    handleHealth(res) {
+        const response = this.middleware.getHealth();
+        sendJson(res, 200, response);
+    }
+}
+/**
+ * Create a proxy server instance
+ */
+export function createProxyServer(config) {
+    return new HttpProxyServer(config);
+}
+//# sourceMappingURL=server.js.map

package/dist/src/proxy/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/proxy/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,MAAM,CAAC;AAE5F,OAAO,EAAsB,eAAe,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAyB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAElF,8BAA8B;AAC9B,MAAM,YAAY,GAAG,WAAW,CAAC;AAEjC,0CAA0C;AAC1C,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,GAAoB;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAChC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,GAAmB,EAAE,UAAkB,EAAE,IAAa;IACtE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;IAC5B,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAmB,EAAE,UAAkB,EAAE,OAAe;IACzE,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,OAAe,EAAE,GAAW;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE9C,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,GAAW;IAClD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,SAAS,CAAC,yCAAyC;QACrD,CAAC;QACD,IAAI,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,eAAe;IACT,MAAM,CAAc;IACpB,UAAU,CAAqB;IAC/B,aAAa,CAAwB;IAC9C,MAAM,GAAkB,IAAI,CAAC;IAC7B,UAAU,GAAW,CAAC,CAAC;IAE/B,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,wBAAwB;QACxB,IAAI,CAAC,aAAa,GAAG,mBAAmB,CAAC;YACvC,iBAAiB,EAAE,MAAM,EAAE,uBAAuB;YAClD,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QAEH,kBAAkB;QAClB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QAEtE,mCAAmC;QACnC,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,IAAI,wBAAwB,CAAC;QAEnG,oBAAoB;QACpB,IAAI,CAAC,UAAU,GAAG,wBAAwB,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC5F,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAE9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC3C,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;oBAC5D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;gBACvD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,oBAAoB,CAAC,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACvC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACzB,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,wCAAwC;YACxC,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC;YACtC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YAE3B,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC3B,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;oBACpB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACnE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;QAClD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAE3B,qCAAqC;QACrC,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAE9D,wBAAwB;QACxB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC;YACH,gBAAgB;YAChB,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YAED,oBAAoB;YACpB,IAAI,MAAM,KAAK,MAAM,IAAI,cAAc,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7D,MAAM,EAAE,GAAG,YAAY,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;gBAC7C,IAAI,EAAE,EAAE,CAAC;oBACP,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;oBAClC,OAAO;gBACT,CAAC;YACH,CAAC;YAED,iBAAiB;YACjB,IAAI,MAAM,KAAK,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,EAAE,GAAG,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBAC1C,IAAI,EAAE,EAAE,CAAC;oBACP,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC;YACH,CAAC;YAED,cAAc;YACd,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,cAAc;YACd,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,YAAY;YACZ,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAClC,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;oBACrC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,8BAA8B,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;oBAC/C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;gBACvC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACnE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAA+B,CAAC,CAAC;QAChF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,GAAmB;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,GAAmB;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,GAAmB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACzE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,GAAmB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC"}