labgate 0.5.2 → 0.5.4

package/dist/lib/config.d.ts

@@ -1,8 +1,19 @@
+import type { LicenseStatus } from './license.js';
 export interface MountPath {
     path: string;
     mode: 'rw' | 'ro';
 }
-export type RuntimePreference = 'auto' | 'apptainer' | 'singularity' | 'podman' | 'docker';
+export interface Dataset {
+    /** Absolute host path to the dataset directory */
+    path: string;
+    /** Human-readable name, used as the mount basename under /datasets/ */
+    name: string;
+    /** Access mode (default: ro for datasets) */
+    mode: 'rw' | 'ro';
+    /** Optional brief description of what this dataset contains */
+    description?: string;
+}
+export type RuntimePreference = 'auto' | 'apptainer' | 'singularity' | 'docker';
 export interface LabgateConfig {
     /** Container runtime preference: auto detects best available */
     runtime: RuntimePreference;
@@ -17,6 +28,8 @@ export interface LabgateConfig {
         /** Glob patterns to block via empty overlays */
         blocked_patterns: string[];
     };
+    /** Named datasets mounted under /datasets/{name} in the container */
+    datasets: Dataset[];
     /** Commands blocked inside the sandbox */
     commands: {
         blacklist: string[];
@@ -26,9 +39,15 @@ export interface LabgateConfig {
         mode: 'none' | 'filtered' | 'host';
         allowed_domains: string[];
     };
-    /** SLURM proxy settings (M2, ignored for now) */
+    /** SLURM job tracking settings */
     slurm: {
         enabled: boolean;
+        /** Polling interval for squeue in seconds (default 5) */
+        poll_interval_seconds: number;
+        /** How far back sacct looks for completed jobs in hours (default 24) */
+        sacct_lookback_hours: number;
+        /** Enable MCP server for Claude Code to query SLURM jobs (default true) */
+        mcp_server: boolean;
     };
     /** Audit log settings */
     audit: {
@@ -39,10 +58,60 @@ export interface LabgateConfig {
 export declare const DEFAULT_CONFIG: LabgateConfig;
 export declare const LABGATE_DIR: string;
 export declare const CONFIG_FILE = "config.json";
+export declare const PRIVATE_DIR_MODE = 448;
+export declare const PRIVATE_FILE_MODE = 384;
+export declare function ensurePrivateDir(path: string): void;
+export declare function ensurePrivateFile(path: string): void;
 export declare function getConfigPath(): string;
+export declare function getUiSocketPath(): string;
 export declare function getSandboxHome(): string;
 export declare function getImagesDir(): string;
 export declare function getEmptyDir(): string;
+export declare function getSessionsDir(): string;
 export declare function getLogDir(config: LabgateConfig): string;
+export declare function getSlurmDbPath(): string;
 export declare function validateConfig(config: LabgateConfig): string[];
 export declare function loadConfig(): LabgateConfig;
+export interface EffectiveConfig {
+    /** The final merged config used for runtime */
+    config: LabgateConfig;
+    /** Set of dot-notation field paths that are admin-locked */
+    lockedFields: Set<string>;
+    /** Items in array fields that are admin-locked (cannot be removed by user) */
+    lockedListItems: {
+        blocked_patterns: string[];
+        blacklist: string[];
+        allowed_domains: string[];
+    };
+    /** Constraints passed to the frontend for UI hints */
+    constraints: {
+        max_session_timeout_hours?: number;
+        allowed_images?: string[];
+    };
+    /** Whether enterprise mode is active */
+    enterprise: boolean;
+    /** Institution name from license/policy */
+    institution?: string;
+    /** Whether the current user is an admin */
+    isAdmin: boolean;
+    /** License status details */
+    licenseStatus?: LicenseStatus;
+    /** Policy object (for admin routes) */
+    policy?: unknown;
+    /** Shared sessions directory (from policy) */
+    sharedSessionsDir?: string;
+    /** Shared audit directory (from policy) */
+    sharedAuditDir?: string;
+}
+/**
+ * Returns policy-locked field paths that conflict with a requested dot-notation key.
+ * A conflict exists for exact matches and parent/child path relationships.
+ */
+export declare function findLockedFieldConflicts(key: string, lockedFields: Iterable<string>): string[];
+/**
+ * Load the effective config by merging: defaults → user config → admin policy.
+ * When no enterprise license is present, returns the user config without policy.
+ *
+ * This is the primary entry point that all runtime code should use.
+ */
+export declare function loadEffectiveConfig(): EffectiveConfig;

package/dist/lib/config.js

@@ -1,13 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CONFIG_FILE = exports.LABGATE_DIR = exports.DEFAULT_CONFIG = void 0;
+exports.PRIVATE_FILE_MODE = exports.PRIVATE_DIR_MODE = exports.CONFIG_FILE = exports.LABGATE_DIR = exports.DEFAULT_CONFIG = void 0;
+exports.ensurePrivateDir = ensurePrivateDir;
+exports.ensurePrivateFile = ensurePrivateFile;
 exports.getConfigPath = getConfigPath;
+exports.getUiSocketPath = getUiSocketPath;
 exports.getSandboxHome = getSandboxHome;
 exports.getImagesDir = getImagesDir;
 exports.getEmptyDir = getEmptyDir;
+exports.getSessionsDir = getSessionsDir;
 exports.getLogDir = getLogDir;
+exports.getSlurmDbPath = getSlurmDbPath;
 exports.validateConfig = validateConfig;
 exports.loadConfig = loadConfig;
+exports.findLockedFieldConflicts = findLockedFieldConflicts;
+exports.loadEffectiveConfig = loadEffectiveConfig;
 const fs_1 = require("fs");
 const path_1 = require("path");
 const os_1 = require("os");
@@ -35,6 +42,7 @@ exports.DEFAULT_CONFIG = {
             '**/secrets*',
         ],
     },
+    datasets: [],
     commands: {
         blacklist: [
             'ssh', 'scp', 'rsync',
@@ -59,6 +67,9 @@ exports.DEFAULT_CONFIG = {
     },
     slurm: {
         enabled: false,
+        poll_interval_seconds: 5,
+        sacct_lookback_hours: 24,
+        mcp_server: true,
     },
     audit: {
         enabled: true,
@@ -68,9 +79,31 @@ exports.DEFAULT_CONFIG = {
 // ── Paths ─────────────────────────────────────────────────
 exports.LABGATE_DIR = (0, path_1.join)((0, os_1.homedir)(), '.labgate');
 exports.CONFIG_FILE = 'config.json';
+exports.PRIVATE_DIR_MODE = 0o700;
+exports.PRIVATE_FILE_MODE = 0o600;
+function ensurePrivateDir(path) {
+    (0, fs_1.mkdirSync)(path, { recursive: true, mode: exports.PRIVATE_DIR_MODE });
+    try {
+        (0, fs_1.chmodSync)(path, exports.PRIVATE_DIR_MODE);
+    }
+    catch {
+        // Best effort; do not fail on filesystems that do not support chmod semantics.
+    }
+}
+function ensurePrivateFile(path) {
+    try {
+        (0, fs_1.chmodSync)(path, exports.PRIVATE_FILE_MODE);
+    }
+    catch {
+        // Best effort; do not fail on filesystems that do not support chmod semantics.
+    }
+}
 function getConfigPath() {
     return (0, path_1.join)(exports.LABGATE_DIR, exports.CONFIG_FILE);
 }
+function getUiSocketPath() {
+    return (0, path_1.join)(exports.LABGATE_DIR, 'ui.sock');
+}
 function getSandboxHome() {
     return (0, path_1.join)(exports.LABGATE_DIR, 'ai-home');
 }
@@ -80,19 +113,30 @@ function getImagesDir() {
 function getEmptyDir() {
     return (0, path_1.join)(exports.LABGATE_DIR, 'empty');
 }
+function getSessionsDir() {
+    return (0, path_1.join)(exports.LABGATE_DIR, 'sessions');
+}
 function getLogDir(config) {
     return config.audit.log_dir.replace(/^~/, (0, os_1.homedir)());
 }
+function getSlurmDbPath() {
+    return (0, path_1.join)(exports.LABGATE_DIR, 'slurm.db');
+}
 // ── Deep clone helper ──────────────────────────────────────
 function cloneConfig(config) {
     return JSON.parse(JSON.stringify(config));
 }
 // ── Validation ────────────────────────────────────────────
-const VALID_RUNTIMES = ['auto', 'apptainer', 'singularity', 'podman', 'docker'];
+const VALID_RUNTIMES = ['auto', 'apptainer', 'singularity', 'docker'];
 const VALID_NETWORK_MODES = ['none', 'filtered', 'host'];
 const VALID_MOUNT_MODES = ['rw', 'ro'];
 function validateConfig(config) {
     const errors = [];
+    const networkMode = config.network?.mode;
+    const allowedDomains = config.network?.allowed_domains;
+    const blockedPatterns = config.filesystem?.blocked_patterns;
+    const extraPaths = config.filesystem?.extra_paths;
+    const blacklist = config.commands?.blacklist;
     if (!VALID_RUNTIMES.includes(config.runtime)) {
         errors.push(`Invalid runtime: "${config.runtime}". Must be one of: ${VALID_RUNTIMES.join(', ')}`);
     }
@@ -102,16 +146,27 @@ function validateConfig(config) {
     if (typeof config.session_timeout_hours !== 'number' || config.session_timeout_hours < 0) {
         errors.push('session_timeout_hours must be a non-negative number');
     }
-    if (!VALID_NETWORK_MODES.includes(config.network.mode)) {
-        errors.push(`Invalid network.mode: "${config.network.mode}". Must be one of: ${VALID_NETWORK_MODES.join(', ')}`);
+    if (!VALID_NETWORK_MODES.includes(networkMode)) {
+        errors.push(`Invalid network.mode: "${networkMode}". Must be one of: ${VALID_NETWORK_MODES.join(', ')}`);
+    }
+    if (!Array.isArray(allowedDomains)) {
+        errors.push('network.allowed_domains must be an array');
     }
-    if (!Array.isArray(config.filesystem.blocked_patterns)) {
+    if (!Array.isArray(blockedPatterns)) {
         errors.push('filesystem.blocked_patterns must be an array');
     }
-    if (!Array.isArray(config.commands.blacklist)) {
+    if (!Array.isArray(extraPaths)) {
+        errors.push('filesystem.extra_paths must be an array');
+    }
+    if (!Array.isArray(blacklist)) {
         errors.push('commands.blacklist must be an array');
     }
-    for (const mount of config.filesystem.extra_paths) {
+    const mounts = Array.isArray(extraPaths) ? extraPaths : [];
+    for (const mount of mounts) {
+        if (!mount || typeof mount !== 'object') {
+            errors.push('Each extra_paths entry must be an object with "path" and "mode"');
+            continue;
+        }
         if (!mount.path || typeof mount.path !== 'string') {
             errors.push('Each extra_paths entry must have a non-empty "path" string');
         }
@@ -119,14 +174,60 @@ function validateConfig(config) {
             errors.push(`Invalid mount mode "${mount.mode}" for path "${mount.path}". Must be "rw" or "ro"`);
         }
     }
+    // ── SLURM validation ─────────────────────────────────────
+    if (config.slurm) {
+        if (typeof config.slurm.poll_interval_seconds !== 'number' || config.slurm.poll_interval_seconds < 1) {
+            errors.push('slurm.poll_interval_seconds must be a number >= 1');
+        }
+        if (typeof config.slurm.sacct_lookback_hours !== 'number' || config.slurm.sacct_lookback_hours < 1) {
+            errors.push('slurm.sacct_lookback_hours must be a number >= 1');
+        }
+    }
+    // ── Dataset validation ────────────────────────────────────
+    const datasets = config.datasets;
+    if (!Array.isArray(datasets)) {
+        errors.push('datasets must be an array');
+    }
+    else {
+        const seenNames = new Set();
+        for (const ds of datasets) {
+            if (!ds || typeof ds !== 'object') {
+                errors.push('Each datasets entry must be an object with "path", "name", and "mode"');
+                continue;
+            }
+            if (!ds.path || typeof ds.path !== 'string') {
+                errors.push('Each datasets entry must have a non-empty "path" string');
+            }
+            if (!ds.name || typeof ds.name !== 'string') {
+                errors.push('Each datasets entry must have a non-empty "name" string');
+            }
+            else if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(ds.name)) {
+                errors.push(`Dataset name "${ds.name}" contains invalid characters. Use alphanumerics, hyphens, dots, underscores.`);
+            }
+            else if (seenNames.has(ds.name.toLowerCase())) {
+                errors.push(`Duplicate dataset name: "${ds.name}"`);
+            }
+            else {
+                seenNames.add(ds.name.toLowerCase());
+            }
+            if (!VALID_MOUNT_MODES.includes(ds.mode)) {
+                errors.push(`Invalid dataset mode "${ds.mode}" for "${ds.name}". Must be "rw" or "ro"`);
+            }
+            if (ds.description !== undefined && typeof ds.description !== 'string') {
+                errors.push(`Dataset description for "${ds.name}" must be a string`);
+            }
+        }
+    }
     return errors;
 }
 // ── Loader ────────────────────────────────────────────────
 function loadConfig() {
+    ensurePrivateDir(exports.LABGATE_DIR);
     const configPath = getConfigPath();
     if (!(0, fs_1.existsSync)(configPath)) {
         return cloneConfig(exports.DEFAULT_CONFIG);
     }
+    ensurePrivateFile(configPath);
     try {
         const rawText = (0, fs_1.readFileSync)(configPath, 'utf-8');
         // Strip full-line // comments (our config uses them for documentation)
@@ -135,15 +236,21 @@ function loadConfig() {
             .filter(line => !line.trimStart().startsWith('//'))
             .join('\n');
         const raw = JSON.parse(stripped);
+        const rawRuntime = raw.runtime;
+        const runtime = rawRuntime === 'podman' ? 'apptainer' : rawRuntime;
+        if (rawRuntime === 'podman') {
+            console.error('Warning: runtime "podman" is no longer supported. Using "apptainer".');
+        }
         // Merge with defaults so missing fields get filled in
         const config = {
-            runtime: raw.runtime ?? exports.DEFAULT_CONFIG.runtime,
+            runtime: runtime ?? exports.DEFAULT_CONFIG.runtime,
             image: raw.image ?? exports.DEFAULT_CONFIG.image,
             session_timeout_hours: raw.session_timeout_hours ?? exports.DEFAULT_CONFIG.session_timeout_hours,
             filesystem: {
                 extra_paths: raw.filesystem?.extra_paths ?? [...exports.DEFAULT_CONFIG.filesystem.extra_paths],
                 blocked_patterns: raw.filesystem?.blocked_patterns ?? [...exports.DEFAULT_CONFIG.filesystem.blocked_patterns],
             },
+            datasets: Array.isArray(raw.datasets) ? raw.datasets : [],
             commands: {
                 blacklist: raw.commands?.blacklist ?? [...exports.DEFAULT_CONFIG.commands.blacklist],
             },
@@ -153,6 +260,9 @@ function loadConfig() {
             },
             slurm: {
                 enabled: raw.slurm?.enabled ?? exports.DEFAULT_CONFIG.slurm.enabled,
+                poll_interval_seconds: raw.slurm?.poll_interval_seconds ?? exports.DEFAULT_CONFIG.slurm.poll_interval_seconds,
+                sacct_lookback_hours: raw.slurm?.sacct_lookback_hours ?? exports.DEFAULT_CONFIG.slurm.sacct_lookback_hours,
+                mcp_server: raw.slurm?.mcp_server ?? exports.DEFAULT_CONFIG.slurm.mcp_server,
             },
             audit: {
                 enabled: raw.audit?.enabled ?? exports.DEFAULT_CONFIG.audit.enabled,
@@ -175,4 +285,78 @@ function loadConfig() {
         return cloneConfig(exports.DEFAULT_CONFIG);
     }
 }
+/**
+ * Returns policy-locked field paths that conflict with a requested dot-notation key.
+ * A conflict exists for exact matches and parent/child path relationships.
+ */
+function findLockedFieldConflicts(key, lockedFields) {
+    const normalized = (key || '').trim();
+    if (!normalized)
+        return [];
+    const conflicts = new Set();
+    for (const locked of lockedFields) {
+        if (locked === normalized ||
+            locked.startsWith(`${normalized}.`) ||
+            normalized.startsWith(`${locked}.`)) {
+            conflicts.add(locked);
+        }
+    }
+    return [...conflicts];
+}
+/**
+ * Load the effective config by merging: defaults → user config → admin policy.
+ * When no enterprise license is present, returns the user config without policy.
+ *
+ * This is the primary entry point that all runtime code should use.
+ */
+function loadEffectiveConfig() {
+    const userConfig = loadConfig();
+    // Lazy-import to avoid circular dependencies at module load time
+    // eslint-disable-next-line @typescript-eslint/no-var-requires
+    const { validateLicense } = require('./license.js');
+    const { loadPolicy, mergeWithPolicy, checkIsAdmin } = require('./policy.js');
+    const licenseStatus = validateLicense();
+    // No valid enterprise license → community mode
+    if (!licenseStatus.valid || !licenseStatus.enterprise) {
+        return {
+            config: userConfig,
+            lockedFields: new Set(),
+            lockedListItems: { blocked_patterns: [], blacklist: [], allowed_domains: [] },
+            constraints: {},
+            enterprise: false,
+            isAdmin: false,
+            licenseStatus,
+        };
+    }
+    const policy = loadPolicy();
+    // License valid but no policy file → enterprise mode without policy constraints
+    if (!policy) {
+        return {
+            config: userConfig,
+            lockedFields: new Set(),
+            lockedListItems: { blocked_patterns: [], blacklist: [], allowed_domains: [] },
+            constraints: {},
+            enterprise: true,
+            institution: licenseStatus.payload?.institution,
+            isAdmin: false,
+            licenseStatus,
+        };
+    }
+    // Full enterprise mode: merge user config with policy
+    const merged = mergeWithPolicy(userConfig, policy);
+    const isAdmin = checkIsAdmin(policy);
+    return {
+        config: merged.config,
+        lockedFields: merged.lockedFields,
+        lockedListItems: merged.lockedListItems,
+        constraints: merged.constraints,
+        enterprise: true,
+        institution: policy.institution ?? licenseStatus.payload?.institution,
+        isAdmin,
+        licenseStatus,
+        policy,
+        sharedSessionsDir: policy.shared_sessions_dir,
+        sharedAuditDir: policy.shared_audit_dir,
+    };
+}
 //# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":";;;AA0HA,sCAEC;AAED,wCAEC;AAED,oCAEC;AAED,kCAEC;AAED,8BAEC;AAcD,wCA+BC;AAID,gCAqDC;AAlPD,2BAA8C;AAC9C,+BAA4B;AAC5B,2BAA6B;AAoD7B,6DAA6D;AAEhD,QAAA,cAAc,GAAkB;IAC3C,OAAO,EAAE,MAAM;IAEf,KAAK,EAAE,gCAAgC;IAEvC,qBAAqB,EAAE,CAAC;IAExB,UAAU,EAAE;QACV,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE;YAChB,SAAS;YACT,WAAW;YACX,SAAS;YACT,mBAAmB;YACnB,WAAW;YACX,SAAS;YACT,WAAW;YACX,qBAAqB;YACrB,UAAU;YACV,UAAU;YACV,YAAY;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,aAAa;SACd;KACF;IAED,QAAQ,EAAE;QACR,SAAS,EAAE;YACT,KAAK,EAAE,KAAK,EAAE,OAAO;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,UAAU;SACrB;KACF;IAED,OAAO,EAAE;QACP,IAAI,EAAE,MAAM;QACZ,eAAe,EAAE;YACf,mBAAmB;YACnB,gBAAgB;YAChB,UAAU;YACV,wBAAwB;YACxB,oBAAoB;YACpB,oBAAoB;YACpB,YAAY;SACb;KACF;IAED,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;KACf;IAED,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iBAAiB;KAC3B;CACF,CAAC;AAEF,6DAA6D;AAEhD,QAAA,WAAW,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,UAAU,CAAC,CAAC;AAC1C,QAAA,WAAW,GAAG,aAAa,CAAC;AAEzC,SAAgB,aAAa;IAC3B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,mBAAW,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,SAAS,CAAC,MAAqB;IAC7C,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAA,YAAO,GAAE,CAAC,CAAC;AACvD,CAAC;AAED,8DAA8D;AAE9D,SAAS,WAAW,CAAC,MAAqB;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,6DAA6D;AAE7D,MAAM,cAAc,GAAwB,CAAC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACrG,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAClE,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,IAAI,CAAU,CAAC;AAEhD,SAAgB,cAAc,CAAC,MAAqB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,IAAI,MAAM,CAAC,qBAAqB,GAAG,CAAC,EAAE,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAE,mBAAyC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,OAAO,CAAC,IAAI,sBAAsB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,IAAI,eAAe,KAAK,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6DAA6D;AAE7D,SAAgB,UAAU;IACxB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,sBAAc,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAClD,uEAAuE;QACvE,MAAM,QAAQ,GAAG,OAAO;aACrB,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,sDAAsD;QACtD,MAAM,MAAM,GAAkB;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,sBAAc,CAAC,OAAO;YAC9C,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,sBAAc,CAAC,KAAK;YACxC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,IAAI,sBAAc,CAAC,qBAAqB;YACxF,UAAU,EAAE;gBACV,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,IAAI,CAAC,GAAG,sBAAc,CAAC,UAAU,CAAC,WAAW,CAAC;gBACtF,gBAAgB,EAAE,GAAG,CAAC,UAAU,EAAE,gBAAgB,IAAI,CAAC,GAAG,sBAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC;aACtG;YACD,QAAQ,EAAE;gBACR,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC,GAAG,sBAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;aAC7E;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,sBAAc,CAAC,OAAO,CAAC,IAAI;gBACtD,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE,eAAe,IAAI,CAAC,GAAG,sBAAc,CAAC,OAAO,CAAC,eAAe,CAAC;aAC7F;YACD,KAAK,EAAE;gBACL,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,sBAAc,CAAC,KAAK,CAAC,OAAO;aAC5D;YACD,KAAK,EAAE;gBACL,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,sBAAc,CAAC,KAAK,CAAC,OAAO;gBAC3D,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,sBAAc,CAAC,KAAK,CAAC,OAAO;aAC5D;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,8BAA8B,UAAU,GAAG,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACvC,OAAO,WAAW,CAAC,sBAAc,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,4BAA4B,UAAU,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvC,OAAO,WAAW,CAAC,sBAAc,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":";;;AAuJA,4CAOC;AAED,8CAMC;AAED,sCAEC;AAED,0CAEC;AAED,wCAEC;AAED,oCAEC;AAED,kCAEC;AAED,wCAEC;AAED,8BAEC;AAED,wCAEC;AAcD,wCAyFC;AAID,gCAgEC;AAwCD,4DAgBC;AAQD,kDAwDC;AAzeD,2BAAoE;AACpE,+BAA4B;AAC5B,2BAA6B;AA0E7B,6DAA6D;AAEhD,QAAA,cAAc,GAAkB;IAC3C,OAAO,EAAE,MAAM;IAEf,KAAK,EAAE,gCAAgC;IAEvC,qBAAqB,EAAE,CAAC;IAExB,UAAU,EAAE;QACV,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE;YAChB,SAAS;YACT,WAAW;YACX,SAAS;YACT,mBAAmB;YACnB,WAAW;YACX,SAAS;YACT,WAAW;YACX,qBAAqB;YACrB,UAAU;YACV,UAAU;YACV,YAAY;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,aAAa;SACd;KACF;IAED,QAAQ,EAAE,EAAE;IAEZ,QAAQ,EAAE;QACR,SAAS,EAAE;YACT,KAAK,EAAE,KAAK,EAAE,OAAO;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,UAAU;SACrB;KACF;IAED,OAAO,EAAE;QACP,IAAI,EAAE,MAAM;QACZ,eAAe,EAAE;YACf,mBAAmB;YACnB,gBAAgB;YAChB,UAAU;YACV,wBAAwB;YACxB,oBAAoB;YACpB,oBAAoB;YACpB,YAAY;SACb;KACF;IAED,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,qBAAqB,EAAE,CAAC;QACxB,oBAAoB,EAAE,EAAE;QACxB,UAAU,EAAE,IAAI;KACjB;IAED,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iBAAiB;KAC3B;CACF,CAAC;AAEF,6DAA6D;AAEhD,QAAA,WAAW,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,UAAU,CAAC,CAAC;AAC1C,QAAA,WAAW,GAAG,aAAa,CAAC;AAC5B,QAAA,gBAAgB,GAAG,KAAK,CAAC;AACzB,QAAA,iBAAiB,GAAG,KAAK,CAAC;AAEvC,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,IAAA,cAAS,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAgB,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,IAAA,cAAS,EAAC,IAAI,EAAE,wBAAgB,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;IACjF,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACH,IAAA,cAAS,EAAC,IAAI,EAAE,yBAAiB,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;IACjF,CAAC;AACH,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,mBAAW,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,eAAe;IAC7B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,SAAS,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,SAAgB,SAAS,CAAC,MAAqB;IAC7C,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAA,YAAO,GAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO,IAAA,WAAI,EAAC,mBAAW,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,8DAA8D;AAE9D,SAAS,WAAW,CAAC,MAAqB;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,6DAA6D;AAE7D,MAAM,cAAc,GAAwB,CAAC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AAC3F,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAClE,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,IAAI,CAAU,CAAC;AAEhD,SAAgB,cAAc,CAAC,MAAqB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAI,MAAc,CAAC,OAAO,EAAE,IAAI,CAAC;IAClD,MAAM,cAAc,GAAI,MAAc,CAAC,OAAO,EAAE,eAAe,CAAC;IAChE,MAAM,eAAe,GAAI,MAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACrE,MAAM,UAAU,GAAI,MAAc,CAAC,UAAU,EAAE,WAAW,CAAC;IAC3D,MAAM,SAAS,GAAI,MAAc,CAAC,QAAQ,EAAE,SAAS,CAAC;IAEtD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,OAAO,sBAAsB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,IAAI,MAAM,CAAC,qBAAqB,GAAG,CAAC,EAAE,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAE,mBAAyC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,0BAA0B,WAAW,sBAAsB,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,IAAI,eAAe,KAAK,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,EAAE,CAAC;YACrG,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,oBAAoB,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;YACnG,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAI,MAAc,CAAC,QAAQ,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;gBACrF,SAAS;YACX,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACzE,CAAC;iBAAM,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,IAAI,+EAA+E,CAAC,CAAC;YACvH,CAAC;iBAAM,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC,IAAI,yBAAyB,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACvE,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,IAAI,oBAAoB,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6DAA6D;AAE7D,SAAgB,UAAU;IACxB,gBAAgB,CAAC,mBAAW,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC,sBAAc,CAAC,CAAC;IACrC,CAAC;IACD,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAClD,uEAAuE;QACvE,MAAM,QAAQ,GAAG,OAAO;aACrB,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC;QAC/B,MAAM,OAAO,GAAG,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;QACnE,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;QACxF,CAAC;QACD,sDAAsD;QACtD,MAAM,MAAM,GAAkB;YAC5B,OAAO,EAAE,OAAO,IAAI,sBAAc,CAAC,OAAO;YAC1C,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,sBAAc,CAAC,KAAK;YACxC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB,IAAI,sBAAc,CAAC,qBAAqB;YACxF,UAAU,EAAE;gBACV,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,IAAI,CAAC,GAAG,sBAAc,CAAC,UAAU,CAAC,WAAW,CAAC;gBACtF,gBAAgB,EAAE,GAAG,CAAC,UAAU,EAAE,gBAAgB,IAAI,CAAC,GAAG,sBAAc,CAAC,UAAU,CAAC,gBAAgB,CAAC;aACtG;YACD,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YACzD,QAAQ,EAAE;gBACR,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC,GAAG,sBAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;aAC7E;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,sBAAc,CAAC,OAAO,CAAC,IAAI;gBACtD,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE,eAAe,IAAI,CAAC,GAAG,sBAAc,CAAC,OAAO,CAAC,eAAe,CAAC;aAC7F;YACD,KAAK,EAAE;gBACL,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,sBAAc,CAAC,KAAK,CAAC,OAAO;gBAC3D,qBAAqB,EAAE,GAAG,CAAC,KAAK,EAAE,qBAAqB,IAAI,sBAAc,CAAC,KAAK,CAAC,qBAAqB;gBACrG,oBAAoB,EAAE,GAAG,CAAC,KAAK,EAAE,oBAAoB,IAAI,sBAAc,CAAC,KAAK,CAAC,oBAAoB;gBAClG,UAAU,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,IAAI,sBAAc,CAAC,KAAK,CAAC,UAAU;aACrE;YACD,KAAK,EAAE;gBACL,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,sBAAc,CAAC,KAAK,CAAC,OAAO;gBAC3D,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,sBAAc,CAAC,KAAK,CAAC,OAAO;aAC5D;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,8BAA8B,UAAU,GAAG,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACvC,OAAO,WAAW,CAAC,sBAAc,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,4BAA4B,UAAU,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvC,OAAO,WAAW,CAAC,sBAAc,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAoCD;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,GAAW,EAAE,YAA8B;IAClF,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,IACE,MAAM,KAAK,UAAU;YACrB,MAAM,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC;YACnC,UAAU,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EACnC,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB;IACjC,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAEhC,iEAAiE;IACjE,8DAA8D;IAC9D,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,cAAc,CAAkC,CAAC;IACrF,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,aAAa,CAAiC,CAAC;IAE7G,MAAM,aAAa,GAAG,eAAe,EAAE,CAAC;IAExC,+CAA+C;IAC/C,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QACtD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,IAAI,GAAG,EAAE;YACvB,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAC7E,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,KAAK;YACd,aAAa;SACd,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,gFAAgF;IAChF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,IAAI,GAAG,EAAE;YACvB,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;YAC7E,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,aAAa,CAAC,OAAO,EAAE,WAAW;YAC/C,OAAO,EAAE,KAAK;YACd,aAAa;SACd,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAErC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,aAAa,CAAC,OAAO,EAAE,WAAW;QACrE,OAAO;QACP,aAAa;QACb,MAAM;QACN,iBAAiB,EAAE,MAAM,CAAC,mBAAmB;QAC7C,cAAc,EAAE,MAAM,CAAC,gBAAgB;KACxC,CAAC;AACJ,CAAC"}

package/dist/lib/container.d.ts

@@ -1,3 +1,4 @@
+import { execFileSync } from 'child_process';
 import { LabgateConfig } from './config.js';
 export interface SessionOpts {
     agent: string;
@@ -7,13 +8,66 @@ export interface SessionOpts {
     imageOverride?: string;
     apiKey?: string;
     footerMode?: 'off' | 'once' | 'sticky';
+    /** Enterprise: shared sessions dir for admin visibility */
+    sharedSessionsDir?: string;
+    /** Enterprise: shared audit dir for admin visibility */
+    sharedAuditDir?: string;
+}
+export interface SessionFileData {
+    id: string;
+    agent: string;
+    workdir: string;
+    node: string;
+    pid: number;
+    started: string;
+    network: string;
+    image: string;
+    /** Username of the session owner (for shared sessions dir) */
+    user?: string;
+    /** SHA-256 fingerprint of mount-affecting config at launch */
+    configFingerprint?: string;
 }
+/**
+ * Compute a deterministic fingerprint of mount-affecting config fields.
+ * Used to detect when running sessions need a restart after config changes.
+ * Only includes fields that are baked into container args at launch time
+ * and cannot be hot-reloaded (--bind, --volume, --network, image, runtime).
+ */
+export declare function computeMountFingerprint(config: LabgateConfig, imageOverride?: string): string;
 /**
  * Convert a container image URI to a local SIF filename.
  * e.g. "docker.io/library/ubuntu:22.04" → "docker.io_library_ubuntu_22.04.sif"
  */
 export declare function imageToSifName(image: string): string;
 export declare function buildEntrypoint(agent: string): string;
+/**
+ * Sets up OAuth browser handling. Always intercepts the URL via BROWSER
+ * hook. Behaviour depends on environment:
+ *
+ * 1. Local macOS: Open URL with `open`, copy with `pbcopy`.
+ * 2. Local Linux with display: Open with `xdg-open`.
+ * 3. SSH / headless: Copy URL to local clipboard via OSC 52 terminal
+ *    escape sequence. Works in iTerm2, kitty, Windows Terminal, tmux, etc.
+ *    Falls back to displaying the URL if OSC 52 is not supported.
+ */
+export interface BrowserHookOptions {
+    sandboxHomeOverride?: string;
+    forceRemote?: boolean;
+    platformOverride?: NodeJS.Platform;
+    execSync?: typeof execFileSync;
+}
+export declare function setupBrowserHook(options?: BrowserHookOptions): {
+    env: string[];
+    cleanup: () => void;
+};
 export declare function startSession(session: SessionOpts): Promise<void>;
 export declare function listSessions(): Promise<void>;
 export declare function stopSession(id: string): Promise<void>;
+/**
+ * Restart a running session with fresh config.
+ * Stops the old process (via SIGTERM from session file), waits for cleanup,
+ * then relaunches the same agent/workdir with the current config.
+ */
+export declare function restartSession(id: string, opts: {
+    dryRun: boolean;
+}): Promise<void>;