codekin 0.3.7 → 0.4.1

package/server/dist/approval-manager.js

@@ -11,13 +11,27 @@ import { join } from 'path';
 import { DATA_DIR } from './config.js';
 const REPO_APPROVALS_FILE = join(DATA_DIR, 'repo-approvals.json');
 const PERSIST_DEBOUNCE_MS = 2000;
+/**
+ * Minimum number of repos that must have independently approved the same
+ * tool/command/pattern before it is auto-approved globally (cross-repo).
+ */
+const CROSS_REPO_THRESHOLD = 2;
 export class ApprovalManager {
     /** Repo-level auto-approval store, keyed by workingDir (repo path). */
     repoApprovals = new Map();
     _approvalPersistTimer = null;
     constructor() {
+        this.validatePrefixSets();
         this.restoreRepoApprovalsFromDisk();
     }
+    /** Warn at startup if any single-token prefix appears in both allow and deny lists. */
+    validatePrefixSets() {
+        for (const prefix of ApprovalManager.PATTERNABLE_PREFIXES) {
+            if (ApprovalManager.NEVER_PATTERN_PREFIXES.has(prefix)) {
+                console.warn(`[approval-manager] WARNING: "${prefix}" is in both PATTERNABLE_PREFIXES and NEVER_PATTERN_PREFIXES — deny takes precedence for single-token; two-token allow overrides first-token deny`);
+            }
+        }
+    }
     /** Get or create the approval entry for a repo (workingDir). */
     getRepoApprovalEntry(workingDir) {
         let entry = this.repoApprovals.get(workingDir);
@@ -39,35 +53,76 @@ export class ApprovalManager {
         this.persistRepoApprovalsDebounced();
     }
     /**
-     * Command prefixes where prefix-based auto-approval is safe.
-     * Only commands whose behavior is determined by later arguments (not by target)
-     * should be listed here. Dangerous commands like rm, sudo, curl, etc. require
-     * exact match to prevent escalation (e.g. approving `rm -rf /tmp/x` should NOT
-     * also approve `rm -rf /`).
+     * Prefixes where pattern-based grouping is safe. Used by derivePattern()
+     * and compactExactCommands() to create "prefix *" patterns.
+     *
+     * IMPORTANT: Inclusion here does NOT auto-approve anything — the user
+     * still explicitly approves the pattern. It only means "we can group
+     * `git push origin feat/x` and `git push origin feat/y` into one
+     * `git push *` pattern" instead of storing each as an exact match.
      */
-    static SAFE_PREFIX_COMMANDS = new Set([
+    static PATTERNABLE_PREFIXES = new Set([
+        // Git operations — safe to group by subcommand
         'git add', 'git commit', 'git diff', 'git log', 'git show', 'git stash',
         'git status', 'git branch', 'git checkout', 'git switch', 'git rebase',
         'git fetch', 'git pull', 'git merge', 'git tag', 'git rev-parse',
+        'git remote', 'git cherry-pick',
+        'git worktree', 'git archive',
+        // GitHub CLI
+        'gh pr', 'gh repo', 'gh run', 'gh search',
+        'gh issue', 'gh release',
+        // Package managers — Node (two-token subcommands only; bare executors are in NEVER list)
         'npm run', 'npm test', 'npm install', 'npm ci', 'npm exec',
-        'npx', 'node', 'bun', 'deno',
+        'yarn run', 'yarn test', 'yarn install', 'yarn add',
+        'pnpm test', 'pnpm run', 'pnpm install',
+        'pnpm --filter', 'pnpm typecheck',
+        'bun run', 'bun test', 'bun install',
+        // Build / compile (two-token subcommands only)
         'cargo build', 'cargo test', 'cargo run', 'cargo check', 'cargo clippy',
         'make', 'cmake',
-        'python', 'python3', 'pip install',
+        'pip install',
         'go build', 'go test', 'go run', 'go vet',
         'tsc', 'eslint', 'prettier',
+        // File inspection (read-only)
         'cat', 'head', 'tail', 'wc', 'sort', 'uniq', 'diff', 'less',
         'ls', 'pwd', 'echo', 'date', 'which', 'whoami', 'env', 'printenv',
         'find', 'grep', 'rg', 'ag', 'fd',
         'mkdir', 'touch',
+        'file', 'du', 'stat', 'tree',
+        'basename', 'dirname', 'realpath',
+    ]);
+    /**
+     * Prefixes that should NEVER be auto-patterned, even if the user
+     * clicks "Always Allow". These are stored as exact match only.
+     */
+    static NEVER_PATTERN_PREFIXES = new Set([
+        'ssh', 'docker', 'docker-compose',
+        'rm', 'sudo', 'curl', 'wget',
+        'git reset', 'git clean',
+        'git push', // cross-remote escalation risk — require exact match
+        'gh api', // can perform DELETE/PUT — too broad to pattern
+        // Code executors — "node *" / "python *" would match arbitrary code execution
+        'node', 'npx', 'python', 'python3', 'deno', 'bun', 'pm2',
     ]);
     /**
      * Check if a tool/command is auto-approved for a repo.
      * For Bash commands, uses prefix matching only for safe commands;
      * dangerous commands require exact match to prevent escalation.
+     *
+     * Falls back to cross-repo inference: if the same tool/command/pattern
+     * has been approved in CROSS_REPO_THRESHOLD or more other repos,
+     * it is auto-approved everywhere.
      */
     checkAutoApproval(workingDir, toolName, toolInput) {
-        const approvals = this.getRepoApprovalEntry(workingDir);
+        if (this.checkRepoApproval(workingDir, toolName, toolInput))
+            return true;
+        return this.checkCrossRepoApproval(workingDir, toolName, toolInput);
+    }
+    /** Check approvals for a single repo (no cross-repo fallback). */
+    checkRepoApproval(workingDir, toolName, toolInput) {
+        const approvals = this.repoApprovals.get(workingDir);
+        if (!approvals)
+            return false;
         if (approvals.tools.has(toolName))
             return true;
         if (toolName === 'Bash') {
@@ -82,7 +137,7 @@ export class ApprovalManager {
             }
             // Prefix match only for safe commands
             const cmdPrefix = this.commandPrefix(cmd);
-            if (cmdPrefix && ApprovalManager.SAFE_PREFIX_COMMANDS.has(cmdPrefix)) {
+            if (cmdPrefix && ApprovalManager.PATTERNABLE_PREFIXES.has(cmdPrefix)) {
                 for (const approved of approvals.commands) {
                     if (this.commandPrefix(approved) === cmdPrefix)
                         return true;
@@ -91,6 +146,60 @@ export class ApprovalManager {
         }
         return false;
     }
+    /**
+     * Cross-repo inference: if enough other repos have approved the same
+     * tool/command/pattern, auto-approve it for this repo too.
+     */
+    checkCrossRepoApproval(workingDir, toolName, toolInput) {
+        let count = 0;
+        for (const [dir, entry] of this.repoApprovals) {
+            if (dir === workingDir)
+                continue;
+            // Check tool approval
+            if (toolName !== 'Bash') {
+                if (entry.tools.has(toolName))
+                    count++;
+            }
+            else {
+                const cmd = (typeof toolInput.command === 'string' ? toolInput.command : '').trim();
+                let matched = false;
+                // Exact command match
+                if (entry.commands.has(cmd))
+                    matched = true;
+                // Pattern match
+                if (!matched) {
+                    for (const pattern of entry.patterns) {
+                        if (this.matchesPattern(pattern, cmd)) {
+                            matched = true;
+                            break;
+                        }
+                    }
+                }
+                // Prefix match for safe commands
+                if (!matched) {
+                    const cmdPrefix = this.commandPrefix(cmd);
+                    if (cmdPrefix && ApprovalManager.PATTERNABLE_PREFIXES.has(cmdPrefix)) {
+                        for (const approved of entry.commands) {
+                            if (this.commandPrefix(approved) === cmdPrefix) {
+                                matched = true;
+                                break;
+                            }
+                        }
+                    }
+                }
+                if (matched)
+                    count++;
+            }
+            if (count >= CROSS_REPO_THRESHOLD) {
+                const label = toolName === 'Bash'
+                    ? `command: ${(typeof toolInput.command === 'string' ? toolInput.command : '').slice(0, 80)}`
+                    : `tool: ${toolName}`;
+                console.log(`[auto-approve] cross-repo inference (${count} repos) for ${workingDir}: ${label}`);
+                return true;
+            }
+        }
+        return false;
+    }
     /** Extract the command prefix (first two tokens) for prefix-based matching. */
     commandPrefix(cmd) {
         const tokens = cmd.split(/\s+/).filter(Boolean);
@@ -101,7 +210,7 @@ export class ApprovalManager {
         return `${tokens[0]} ${tokens[1]}`;
     }
     /**
-     * Derive a glob pattern from a tool invocation for "Approve Pattern".
+     * Derive a glob pattern from a tool invocation for "Always Allow".
      * Returns a string like "cat *" or "git diff *", or null if no safe pattern applies.
      * Patterns use the format "<prefix> *" meaning "this prefix followed by anything".
      */
@@ -112,18 +221,25 @@ export class ApprovalManager {
         const tokens = cmd.split(/\s+/).filter(Boolean);
         if (tokens.length === 0)
             return null;
-        // Check single-token safe commands (cat, grep, ls, etc.)
+        // Never pattern commands with shell meta-characters — the pattern
+        // would be far broader than the specific command the user approved
+        if (/[|;&`$(){}*?[\]~]/.test(cmd) || cmd.includes('\n'))
+            return null;
         const first = tokens[0];
-        if (ApprovalManager.SAFE_PREFIX_COMMANDS.has(first)) {
+        const twoToken = tokens.length >= 2 ? `${tokens[0]} ${tokens[1]}` : '';
+        // Two-token deny-list always wins (e.g. "git push", "git reset")
+        if (twoToken && ApprovalManager.NEVER_PATTERN_PREFIXES.has(twoToken))
+            return null;
+        // Two-token allow-list takes priority over first-token deny
+        // (e.g. "bun run" is safe even though bare "bun" is denied)
+        if (twoToken && ApprovalManager.PATTERNABLE_PREFIXES.has(twoToken))
+            return `${twoToken} *`;
+        // First-token deny-list blocks remaining single-token patterns
+        if (ApprovalManager.NEVER_PATTERN_PREFIXES.has(first))
+            return null;
+        // First-token allow-list
+        if (ApprovalManager.PATTERNABLE_PREFIXES.has(first))
             return `${first} *`;
-        }
-        // Check two-token safe commands (git diff, npm run, etc.)
-        if (tokens.length >= 2) {
-            const twoToken = `${tokens[0]} ${tokens[1]}`;
-            if (ApprovalManager.SAFE_PREFIX_COMMANDS.has(twoToken)) {
-                return `${twoToken} *`;
-            }
-        }
         return null;
     }
     /**
@@ -137,12 +253,24 @@ export class ApprovalManager {
         }
         return cmd === pattern;
     }
-    /** Save an "Always Allow" approval for a tool/command. */
+    /**
+     * Save an "Always Allow" approval for a tool/command.
+     * For Bash commands, stores a pattern when derivable (e.g. "git push *"),
+     * falling back to exact match only for commands without a safe pattern.
+     */
     saveAlwaysAllow(workingDir, toolName, toolInput) {
         if (toolName === 'Bash') {
             const cmd = (typeof toolInput.command === 'string' ? toolInput.command : '').trim();
+            // Try to derive a pattern first (e.g. "git diff *", "npm run *")
+            const pattern = this.derivePattern(toolName, toolInput);
+            if (pattern) {
+                this.addRepoApproval(workingDir, { pattern });
+                console.log(`[auto-approve] saved pattern for repo ${workingDir}: ${pattern}`);
+                return;
+            }
+            // For commands with no safe pattern, store exact match
             this.addRepoApproval(workingDir, { command: cmd });
-            console.log(`[auto-approve] saved command for repo ${workingDir}: ${cmd.slice(0, 80)}`);
+            console.log(`[auto-approve] saved exact command for repo ${workingDir}: ${cmd.slice(0, 80)}`);
         }
         else {
             this.addRepoApproval(workingDir, { tool: toolName });
@@ -172,6 +300,46 @@ export class ApprovalManager {
             patterns: Array.from(entry.patterns).sort(),
         };
     }
+    /**
+     * Return approvals that are effective globally via cross-repo inference
+     * (approved in CROSS_REPO_THRESHOLD+ repos). Each entry includes the
+     * repos that contributed to it.
+     */
+    getGlobalApprovals() {
+        const toolCounts = new Map();
+        const commandCounts = new Map();
+        const patternCounts = new Map();
+        for (const [dir, entry] of this.repoApprovals) {
+            for (const tool of entry.tools) {
+                const dirs = toolCounts.get(tool) || [];
+                dirs.push(dir);
+                toolCounts.set(tool, dirs);
+            }
+            for (const cmd of entry.commands) {
+                const dirs = commandCounts.get(cmd) || [];
+                dirs.push(dir);
+                commandCounts.set(cmd, dirs);
+            }
+            for (const pattern of entry.patterns) {
+                const dirs = patternCounts.get(pattern) || [];
+                dirs.push(dir);
+                patternCounts.set(pattern, dirs);
+            }
+        }
+        const filterAboveThreshold = (counts) => {
+            const result = {};
+            for (const [key, dirs] of counts) {
+                if (dirs.length >= CROSS_REPO_THRESHOLD)
+                    result[key] = dirs.sort();
+            }
+            return result;
+        };
+        return {
+            tools: filterAboveThreshold(toolCounts),
+            commands: filterAboveThreshold(commandCounts),
+            patterns: filterAboveThreshold(patternCounts),
+        };
+    }
     /** Remove an auto-approval rule for a repo (workingDir) and persist to disk.
      *  Returns 'invalid' if no tool/command provided, or boolean indicating if something was deleted.
      *  Pass skipPersist=true for bulk operations (caller must call persistRepoApprovals after). */
@@ -244,6 +412,77 @@ export class ApprovalManager {
         catch (err) {
             console.error('Failed to restore repo approvals from disk:', err);
         }
+        this.compactExactCommands();
+    }
+    /** Compact exact commands that could be represented by existing patterns. */
+    compactExactCommands() {
+        let totalRemoved = 0;
+        for (const [, entry] of this.repoApprovals) {
+            if (entry.commands.size === 0)
+                continue;
+            const toRemove = new Set();
+            // Phase 1: Remove exact commands already covered by existing patterns
+            if (entry.patterns.size > 0) {
+                for (const cmd of entry.commands) {
+                    for (const pattern of entry.patterns) {
+                        if (this.matchesPattern(pattern, cmd)) {
+                            toRemove.add(cmd);
+                            break;
+                        }
+                    }
+                }
+            }
+            // Phase 2: If 3+ exact commands share a patternable prefix,
+            // create a pattern and mark the exact commands for removal.
+            const prefixGroups = new Map();
+            for (const cmd of entry.commands) {
+                if (toRemove.has(cmd))
+                    continue;
+                const tokens = cmd.split(/\s+/).filter(Boolean);
+                if (tokens.length === 0)
+                    continue;
+                const firstToken = tokens[0];
+                let prefix = tokens.length >= 2 ? `${tokens[0]} ${tokens[1]}` : firstToken;
+                // Two-token deny always wins
+                if (ApprovalManager.NEVER_PATTERN_PREFIXES.has(prefix))
+                    continue;
+                // Two-token allow takes priority over first-token deny (e.g. "bun run" safe, bare "bun" denied)
+                if (!ApprovalManager.PATTERNABLE_PREFIXES.has(prefix)) {
+                    // First-token deny blocks remaining single-token patterns
+                    if (ApprovalManager.NEVER_PATTERN_PREFIXES.has(firstToken))
+                        continue;
+                    if (ApprovalManager.PATTERNABLE_PREFIXES.has(firstToken)) {
+                        prefix = firstToken;
+                    }
+                    else {
+                        continue;
+                    }
+                }
+                // Skip commands with shell meta-characters
+                if (/[|;&`$(){}*?[\]~]/.test(cmd) || cmd.includes('\n'))
+                    continue;
+                const group = prefixGroups.get(prefix) || [];
+                group.push(cmd);
+                prefixGroups.set(prefix, group);
+            }
+            for (const [prefix, cmds] of prefixGroups) {
+                if (cmds.length >= 3) {
+                    const pattern = `${prefix} *`;
+                    if (!entry.patterns.has(pattern)) {
+                        entry.patterns.add(pattern);
+                    }
+                    for (const cmd of cmds)
+                        toRemove.add(cmd);
+                }
+            }
+            for (const cmd of toRemove)
+                entry.commands.delete(cmd);
+            totalRemoved += toRemove.size;
+        }
+        if (totalRemoved > 0) {
+            console.log(`[auto-approve] compacted ${totalRemoved} exact commands into patterns`);
+            this.persistRepoApprovals();
+        }
     }
 }
 //# sourceMappingURL=approval-manager.js.map

package/server/dist/approval-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-manager.js","sourceRoot":"","sources":["../approval-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAA;AACjE,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAEhC,MAAM,OAAO,eAAe;IAC1B,uEAAuE;IAC/D,aAAa,GAAG,IAAI,GAAG,EAAgF,CAAA;IACvG,qBAAqB,GAAyC,IAAI,CAAA;IAE1E;QACE,IAAI,CAAC,4BAA4B,EAAE,CAAA;IACrC,CAAC;IAED,gEAAgE;IACxD,oBAAoB,CAAC,UAAkB;QAC7C,IAAI,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAA;YACtE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAC3C,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,wDAAwD;IACxD,eAAe,CAAC,UAAkB,EAAE,IAA2D;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAClD,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAClD,IAAI,CAAC,6BAA6B,EAAE,CAAA;IACtC,CAAC;IAED;;;;;;OAMG;IACK,MAAM,CAAU,oBAAoB,GAAG,IAAI,GAAG,CAAC;QACrD,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW;QACvE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY;QACtE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe;QAChE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU;QAC1D,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;QAC5B,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc;QACvE,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,SAAS,EAAE,aAAa;QAClC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ;QACzC,KAAK,EAAE,QAAQ,EAAE,UAAU;QAC3B,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;QAC3D,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;QACjE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QAChC,OAAO,EAAE,OAAO;KACjB,CAAC,CAAA;IAEF;;;;OAIG;IACH,iBAAiB,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAkC;QACxF,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAA;QACvD,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC9C,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACnF,2BAA2B;YAC3B,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC5C,uDAAuD;YACvD,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAA;YACpD,CAAC;YACD,sCAAsC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,SAAS,IAAI,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrE,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAC1C,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,SAAS;wBAAE,OAAO,IAAI,CAAA;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,+EAA+E;IACvE,aAAa,CAAC,GAAW;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;QACzC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACpC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,QAAgB,EAAE,SAAkC;QAChE,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;QACpC,MAAM,GAAG,GAAG,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACnF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAEpC,yDAAyD;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,GAAG,KAAK,IAAI,CAAA;QACrB,CAAC;QAED,0DAA0D;QAC1D,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;YAC5C,IAAI,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,OAAO,GAAG,QAAQ,IAAI,CAAA;YACxB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,OAAe,EAAE,GAAW;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACnC,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,GAAG,KAAK,OAAO,CAAA;IACxB,CAAC;IAED,0DAA0D;IAC1D,eAAe,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAkC;QACtF,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACnF,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;YAClD,OAAO,CAAC,GAAG,CAAC,yCAAyC,UAAU,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QACzF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;YACpD,OAAO,CAAC,GAAG,CAAC,sCAAsC,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,mBAAmB,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAkC;QAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YAC7C,OAAO,CAAC,GAAG,CAAC,yCAAyC,UAAU,KAAK,OAAO,EAAE,CAAC,CAAA;QAChF,CAAC;aAAM,CAAC;YACN,qFAAqF;YACrF,OAAO,CAAC,GAAG,CAAC,2CAA2C,QAAQ,yBAAyB,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,YAAY,CAAC,UAAkB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QAC5D,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;YACrC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;YAC3C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;SAC5C,CAAA;IACH,CAAC;IAED;;mGAE+F;IAC/F,cAAc,CAAC,UAAkB,EAAE,IAA2D,EAAE,WAAW,GAAG,KAAK;QACjH,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3E,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3E,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,IAAI;YAAE,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAA;QACvD,IAAI,OAAO;YAAE,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAA;QAChE,IAAI,OAAO;YAAE,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAA;QAChE,IAAI,OAAO,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,oBAAoB,EAAE,CAAA;QACxD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,0DAA0D;IAC1D,oBAAoB;QAClB,MAAM,IAAI,GAAgF,EAAE,CAAA;QAC5F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,iCAAiC;YACjC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC/E,IAAI,CAAC,GAAG,CAAC,GAAG;oBACV,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;oBACrC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;oBAC3C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;iBAC5C,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACxC,MAAM,GAAG,GAAG,mBAAmB,GAAG,MAAM,CAAA;YACxC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAClE,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAEO,6BAA6B;QACnC,IAAI,IAAI,CAAC,qBAAqB;YAAE,OAAM;QACtC,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3C,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAA;YACjC,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC7B,CAAC,EAAE,mBAAmB,CAAC,CAAA;IACzB,CAAC;IAEO,4BAA4B;QAClC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,OAAM;QAE5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAA;YACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmF,CAAA;YAE9G,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBACjC,QAAQ,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;oBACvC,QAAQ,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;iBACxC,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAA;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAA;QACnE,CAAC;IACH,CAAC"}
+{"version":3,"file":"approval-manager.js","sourceRoot":"","sources":["../approval-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC,MAAM,mBAAmB,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAA;AACjE,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAEhC;;;GAGG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAE9B,MAAM,OAAO,eAAe;IAC1B,uEAAuE;IAC/D,aAAa,GAAG,IAAI,GAAG,EAAgF,CAAA;IACvG,qBAAqB,GAAyC,IAAI,CAAA;IAE1E;QACE,IAAI,CAAC,kBAAkB,EAAE,CAAA;QACzB,IAAI,CAAC,4BAA4B,EAAE,CAAA;IACrC,CAAC;IAED,uFAAuF;IAC/E,kBAAkB;QACxB,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,CAAC;YAC1D,IAAI,eAAe,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,gCAAgC,MAAM,mJAAmJ,CAAC,CAAA;YACzM,CAAC;QACH,CAAC;IACH,CAAC;IAED,gEAAgE;IACxD,oBAAoB,CAAC,UAAkB;QAC7C,IAAI,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAA;YACtE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;QAC3C,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,wDAAwD;IACxD,eAAe,CAAC,UAAkB,EAAE,IAA2D;QAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAA;QACnD,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAClD,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAClD,IAAI,CAAC,6BAA6B,EAAE,CAAA;IACtC,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAU,oBAAoB,GAAG,IAAI,GAAG,CAAC;QACrD,+CAA+C;QAC/C,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW;QACvE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY;QACtE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe;QAChE,YAAY,EAAE,iBAAiB;QAC/B,cAAc,EAAE,aAAa;QAE7B,aAAa;QACb,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW;QACzC,UAAU,EAAE,YAAY;QAExB,yFAAyF;QACzF,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU;QAC1D,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU;QACnD,WAAW,EAAE,UAAU,EAAE,cAAc;QACvC,eAAe,EAAE,gBAAgB;QACjC,SAAS,EAAE,UAAU,EAAE,aAAa;QAEpC,+CAA+C;QAC/C,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc;QACvE,MAAM,EAAE,OAAO;QACf,aAAa;QACb,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ;QACzC,KAAK,EAAE,QAAQ,EAAE,UAAU;QAE3B,8BAA8B;QAC9B,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;QAC3D,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;QACjE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QAChC,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;QAC5B,UAAU,EAAE,SAAS,EAAE,UAAU;KAClC,CAAC,CAAA;IAEF;;;OAGG;IACK,MAAM,CAAU,sBAAsB,GAAG,IAAI,GAAG,CAAC;QACvD,KAAK,EAAE,QAAQ,EAAE,gBAAgB;QACjC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;QAC5B,WAAW,EAAE,WAAW;QACxB,UAAU,EAAG,qDAAqD;QAClE,QAAQ,EAAG,gDAAgD;QAC3D,8EAA8E;QAC9E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK;KACzD,CAAC,CAAA;IAEF;;;;;;;;OAQG;IACH,iBAAiB,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAkC;QACxF,IAAI,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;YAAE,OAAO,IAAI,CAAA;QACxE,OAAO,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;IACrE,CAAC;IAED,kEAAkE;IAC1D,iBAAiB,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAkC;QAChG,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACpD,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAA;QAC5B,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC9C,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YACnF,2BAA2B;YAC3B,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC5C,uDAAuD;YACvD,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAA;YACpD,CAAC;YACD,sCAAsC;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,SAAS,IAAI,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrE,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAC1C,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,SAAS;wBAAE,OAAO,IAAI,CAAA;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;OAGG;IACK,sBAAsB,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAkC;QACrG,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,IAAI,GAAG,KAAK,UAAU;gBAAE,SAAQ;YAChC,sBAAsB;YACtB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,KAAK,EAAE,CAAA;YACxC,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;gBACnF,IAAI,OAAO,GAAG,KAAK,CAAA;gBACnB,sBAAsB;gBACtB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO,GAAG,IAAI,CAAA;gBAC3C,gBAAgB;gBAChB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;wBACrC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;4BAAC,OAAO,GAAG,IAAI,CAAC;4BAAC,MAAK;wBAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;gBACD,iCAAiC;gBACjC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;oBACzC,IAAI,SAAS,IAAI,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBACrE,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;4BACtC,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;gCAAC,OAAO,GAAG,IAAI,CAAC;gCAAC,MAAK;4BAAC,CAAC;wBAC3E,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO;oBAAE,KAAK,EAAE,CAAA;YACtB,CAAC;YACD,IAAI,KAAK,IAAI,oBAAoB,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,QAAQ,KAAK,MAAM;oBAC/B,CAAC,CAAC,YAAY,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;oBAC7F,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAA;gBACvB,OAAO,CAAC,GAAG,CAAC,wCAAwC,KAAK,eAAe,UAAU,KAAK,KAAK,EAAE,CAAC,CAAA;gBAC/F,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,+EAA+E;IACvE,aAAa,CAAC,GAAW;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;QACzC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACpC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,QAAgB,EAAE,SAAkC;QAChE,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;QACpC,MAAM,GAAG,GAAG,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACnF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAEpC,kEAAkE;QAClE,mEAAmE;QACnE,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAEpE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAEtE,iEAAiE;QACjE,IAAI,QAAQ,IAAI,eAAe,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAEjF,4DAA4D;QAC5D,4DAA4D;QAC5D,IAAI,QAAQ,IAAI,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,GAAG,QAAQ,IAAI,CAAA;QAE1F,+DAA+D;QAC/D,IAAI,eAAe,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAElE,yBAAyB;QACzB,IAAI,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,KAAK,IAAI,CAAA;QAExE,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,OAAe,EAAE,GAAW;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACnC,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,GAAG,KAAK,OAAO,CAAA;IACxB,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAkC;QACtF,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,CAAC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;YAEnF,iEAAiE;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YACvD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC7C,OAAO,CAAC,GAAG,CAAC,yCAAyC,UAAU,KAAK,OAAO,EAAE,CAAC,CAAA;gBAC9E,OAAM;YACR,CAAC;YAED,uDAAuD;YACvD,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;YAClD,OAAO,CAAC,GAAG,CAAC,+CAA+C,UAAU,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QAC/F,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;YACpD,OAAO,CAAC,GAAG,CAAC,sCAAsC,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,mBAAmB,CAAC,UAAkB,EAAE,QAAgB,EAAE,SAAkC;QAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QACvD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YAC7C,OAAO,CAAC,GAAG,CAAC,yCAAyC,UAAU,KAAK,OAAO,EAAE,CAAC,CAAA;QAChF,CAAC;aAAM,CAAC;YACN,qFAAqF;YACrF,OAAO,CAAC,GAAG,CAAC,2CAA2C,QAAQ,yBAAyB,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,YAAY,CAAC,UAAkB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QAC5D,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;YACrC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;YAC3C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;SAC5C,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAA;QAC9C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAA;QACjD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAA;QAEjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;gBACvC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACd,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAC5B,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;gBACzC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACd,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC9B,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;gBAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACd,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAG,CAAC,MAA6B,EAA4B,EAAE;YACvF,MAAM,MAAM,GAA6B,EAAE,CAAA;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB;oBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YACpE,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC,CAAA;QAED,OAAO;YACL,KAAK,EAAE,oBAAoB,CAAC,UAAU,CAAC;YACvC,QAAQ,EAAE,oBAAoB,CAAC,aAAa,CAAC;YAC7C,QAAQ,EAAE,oBAAoB,CAAC,aAAa,CAAC;SAC9C,CAAA;IACH,CAAC;IAED;;mGAE+F;IAC/F,cAAc,CAAC,UAAkB,EAAE,IAA2D,EAAE,WAAW,GAAG,KAAK;QACjH,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3E,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3E,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,IAAI;YAAE,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAA;QACvD,IAAI,OAAO;YAAE,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAA;QAChE,IAAI,OAAO;YAAE,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,CAAA;QAChE,IAAI,OAAO,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,oBAAoB,EAAE,CAAA;QACxD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,0DAA0D;IAC1D,oBAAoB;QAClB,MAAM,IAAI,GAAgF,EAAE,CAAA;QAC5F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,iCAAiC;YACjC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC/E,IAAI,CAAC,GAAG,CAAC,GAAG;oBACV,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;oBACrC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;oBAC3C,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;iBAC5C,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACxC,MAAM,GAAG,GAAG,mBAAmB,GAAG,MAAM,CAAA;YACxC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAClE,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAA;QACzD,CAAC;IACH,CAAC;IAEO,6BAA6B;QACnC,IAAI,IAAI,CAAC,qBAAqB;YAAE,OAAM;QACtC,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3C,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAA;YACjC,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC7B,CAAC,EAAE,mBAAmB,CAAC,CAAA;IACzB,CAAC;IAEO,4BAA4B;QAClC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,OAAM;QAE5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAA;YACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmF,CAAA;YAE9G,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE;oBAC1B,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBACjC,QAAQ,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;oBACvC,QAAQ,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;iBACxC,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAA;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAA;QACnE,CAAC;QAED,IAAI,CAAC,oBAAoB,EAAE,CAAA;IAC7B,CAAC;IAED,6EAA6E;IACrE,oBAAoB;QAC1B,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;gBAAE,SAAQ;YACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;YAElC,sEAAsE;YACtE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC5B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACjC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;wBACrC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;4BACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;4BACjB,MAAK;wBACP,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,4DAA4D;YAC5D,4DAA4D;YAC5D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAA;YAChD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAQ;gBAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAQ;gBACjC,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;gBAC5B,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAA;gBAC1E,6BAA6B;gBAC7B,IAAI,eAAe,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,SAAQ;gBAChE,gGAAgG;gBAChG,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtD,0DAA0D;oBAC1D,IAAI,eAAe,CAAC,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC;wBAAE,SAAQ;oBACpE,IAAI,eAAe,CAAC,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBACzD,MAAM,GAAG,UAAU,CAAA;oBACrB,CAAC;yBAAM,CAAC;wBACN,SAAQ;oBACV,CAAC;gBACH,CAAC;gBACD,2CAA2C;gBAC3C,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,SAAQ;gBACjE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACf,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YACjC,CAAC;YACD,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC;gBAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;oBACrB,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,CAAA;oBAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBACjC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;oBAC7B,CAAC;oBACD,KAAK,MAAM,GAAG,IAAI,IAAI;wBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC3C,CAAC;YACH,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,QAAQ;gBAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACtD,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAA;QAC/B,CAAC;QACD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,4BAA4B,YAAY,+BAA+B,CAAC,CAAA;YACpF,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC7B,CAAC;IACH,CAAC"}

package/server/dist/claude-process.d.ts

@@ -29,6 +29,7 @@ export interface ClaudeProcessEvents {
     control_request: [requestId: string, toolName: string, toolInput: Record<string, unknown>];
     planning_mode: [active: boolean];
     todo_update: [tasks: TaskItem[]];
+    image: [base64: string, mediaType: string];
     result: [text: string, isError: boolean];
     error: [message: string];
     exit: [code: number | null, signal: string | null];
@@ -54,6 +55,14 @@ export declare class ClaudeProcess extends EventEmitter<ClaudeProcessEvents> {
     private taskSeq;
     /** Additional env vars passed to the child process (session ID, port, token). */
     private extraEnv;
+    /**
+     * @param workingDir  Absolute path to the git repo where the Claude CLI runs.
+     * @param sessionId   Claude session UUID for `--session-id`. Defaults to a random UUID
+     *                    (new conversation). Pass an existing ID to resume a session.
+     * @param extraEnv    Additional environment variables merged into the child process env
+     *                    (e.g. `CC_WS_PORT`, `CC_AUTH_TOKEN` for port-forwarding and auth).
+     * @param model       Claude model ID override (e.g. 'claude-opus-4-6'). Omit to use the CLI default.
+     */
     constructor(workingDir: string, sessionId?: string, extraEnv?: Record<string, string>, model?: string | undefined);
     /** Spawn the Claude CLI process with stream-json I/O and acceptEdits mode. */
     start(): void;
@@ -73,6 +82,13 @@ export declare class ClaudeProcess extends EventEmitter<ClaudeProcessEvents> {
     private handleAssistantMessage;
     /** Extract tool_result blocks from 'user' events and emit as tool_output. */
     private handleUserEvent;
+    /**
+     * Tools that are safe to auto-approve without user interaction.
+     * These are file operations and planning tools that acceptEdits mode already allows,
+     * plus harmless internal tools. Everything else is forwarded to the session manager
+     * for UI-based approval (or auto-approval registry check).
+     */
+    private static readonly AUTO_APPROVE_TOOLS;
     /**
      * Handle a control_request from the CLI.
      * With acceptEdits mode + PermissionRequest hook, most permissions go through hooks.

package/server/dist/claude-process.js

@@ -43,6 +43,14 @@ export class ClaudeProcess extends EventEmitter {
     taskSeq = 0;
     /** Additional env vars passed to the child process (session ID, port, token). */
     extraEnv;
+    /**
+     * @param workingDir  Absolute path to the git repo where the Claude CLI runs.
+     * @param sessionId   Claude session UUID for `--session-id`. Defaults to a random UUID
+     *                    (new conversation). Pass an existing ID to resume a session.
+     * @param extraEnv    Additional environment variables merged into the child process env
+     *                    (e.g. `CC_WS_PORT`, `CC_AUTH_TOKEN` for port-forwarding and auth).
+     * @param model       Claude model ID override (e.g. 'claude-opus-4-6'). Omit to use the CLI default.
+     */
     constructor(workingDir, sessionId, extraEnv, model) {
         super();
         this.workingDir = workingDir;
@@ -156,6 +164,13 @@ export class ClaudeProcess extends EventEmitter {
                 break;
             case 'result': {
                 const resultEvent = event;
+                // If ExitPlanMode was pending but no matching tool_result arrived
+                // (e.g. ID mismatch or process terminated), clear planning mode now
+                // so the flag doesn't get stuck across turns.
+                if (this.pendingExitPlanModeId) {
+                    this.pendingExitPlanModeId = null;
+                    this.emit('planning_mode', false);
+                }
                 this.emit('result', resultEvent.result || '', resultEvent.is_error || false);
                 // The result message signals end of turn, ready for next input
                 break;
@@ -316,6 +331,16 @@ export class ClaudeProcess extends EventEmitter {
             }
         }
     }
+    /**
+     * Tools that are safe to auto-approve without user interaction.
+     * These are file operations and planning tools that acceptEdits mode already allows,
+     * plus harmless internal tools. Everything else is forwarded to the session manager
+     * for UI-based approval (or auto-approval registry check).
+     */
+    static AUTO_APPROVE_TOOLS = new Set([
+        'Read', 'Write', 'Edit', 'Glob', 'Grep', 'NotebookEdit',
+        'EnterPlanMode', 'TodoWrite', 'TodoRead', 'Task', 'TaskCreate', 'TaskUpdate',
+    ]);
     /**
      * Handle a control_request from the CLI.
      * With acceptEdits mode + PermissionRequest hook, most permissions go through hooks.
@@ -331,15 +356,19 @@ export class ClaudeProcess extends EventEmitter {
             // Each question has its own options and multiSelect flag; the frontend
             // walks the user through them one-by-one and returns all answers at once.
             const questions = toolInput?.questions;
-            if (!Array.isArray(questions) || questions.length === 0)
+            if (!Array.isArray(questions) || questions.length === 0) {
+                console.warn(`[control_request] AskUserQuestion with no/empty questions array, forwarding as generic control_request`);
+                this.emit('control_request', request_id, toolName, toolInput);
                 return;
+            }
+            console.log(`[control_request] AskUserQuestion received with ${questions.length} question(s), requestId=${request_id}`);
             const structuredQuestions = questions.map(q => ({
                 question: q.question,
                 header: q.header,
                 multiSelect: q.multiSelect ?? false,
                 options: (q.options || []).map((opt) => ({
                     label: opt.label,
-                    value: opt.label,
+                    value: opt.value ?? opt.label,
                     description: opt.description,
                 })),
             }));
@@ -353,16 +382,19 @@ export class ClaudeProcess extends EventEmitter {
             console.log(`[control_request] forwarding ExitPlanMode to session manager for user approval`);
             this.emit('control_request', request_id, toolName, toolInput);
         }
-        else if (toolName === 'Bash') {
-            // Bash runs arbitrary commands — forward to session manager for registry check / UI prompt
-            console.log(`[control_request] forwarding Bash to session manager: ${redactSecrets(String(toolInput.command || '').slice(0, 80))}`);
-            this.emit('control_request', request_id, toolName, toolInput);
+        else if (ClaudeProcess.AUTO_APPROVE_TOOLS.has(toolName)) {
+            // Known-safe tools: auto-approve without prompting
+            console.log(`[control_request] auto-approving safe tool: ${toolName}`);
+            this.sendControlResponse(request_id, 'allow');
         }
         else {
-            // All other tools (Write, Edit, Read, Glob, Grep, Task, TodoWrite,
-            // EnterPlanMode, etc.) are safe — auto-approve
-            console.log(`[control_request] auto-approving: ${toolName}`);
-            this.sendControlResponse(request_id, 'allow');
+            // All other tools (Bash, WebSearch, WebFetch, Agent, etc.)
+            // Forward to session manager for registry check / UI prompt
+            const logDetail = toolName === 'Bash'
+                ? `: ${redactSecrets(String(toolInput.command || '').slice(0, 80))}`
+                : '';
+            console.log(`[control_request] forwarding ${toolName} to session manager for approval${logDetail}`);
+            this.emit('control_request', request_id, toolName, toolInput);
         }
     }
     /** Send a control_response back to the CLI to allow or deny a pending request. */