lucifer-gate 0.1.0-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Gian Maria
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,174 @@
+# Lucifer Gate
+
+AI agent command firewall with Telegram-based human approval.
+
+Lucifer sits between your AI agent and the shell. It authenticates callers via API keys, matches commands against a policy file, and gates unknown commands through Telegram for human approval. Approved commands build up a permission library over time. Think "sudo via Telegram."
+
+## Quick start (2 minutes, no Telegram needed)
+
+```bash
+# Generate config files + API key
+npx lucifer-gate --init .
+
+# Start in dev mode (auto-approves everything, no Telegram)
+LUCIFER_TELEGRAM_TOKEN=skip npx lucifer-gate --config ./config/lucifer.json --auto-approve
+
+# In another terminal, test it:
+curl -X POST http://localhost:3001/api/v1/execute \
+  -H "Content-Type: application/json" \
+  -H "x-api-key: YOUR_KEY_FROM_INIT" \
+  -d '{"command":"echo hello"}'
+```
+
+## How it works
+
+1. Caller sends `POST /api/v1/execute` with API key + command
+2. Lucifer authenticates the key and checks IP allowlist
+3. Command is matched against `config/command-rules.json`:
+   - `always_approve` -> execute immediately
+   - `always_deny` -> reject (403)
+   - `telegram_approve` -> check SQLite for cached approval, or send to Telegram
+4. If Telegram approval needed, human sees the command with risk warnings and taps a button
+5. Approved commands execute and results are returned to the caller
+
+## Config files
+
+Generated by `--init`, hand-editable:
+
+**config/lucifer.json** - Server settings (port, timeouts, limits)
+
+**config/api-keys.json** - API key definitions (hashed, with optional IP allowlists)
+
+**config/command-rules.json** - Command policy:
+```json
+{
+  "rules": [
+    { "prefix": "echo ", "action": "always_approve" },
+    { "prefix": "git pull", "action": "telegram_approve" },
+    { "prefix": "rm ", "action": "always_deny" }
+  ],
+  "defaultAction": "always_deny"
+}
+```
+
+Rules matched top-to-bottom, first match wins.
+
+## Production setup (with Telegram)
+
+1. Create a Telegram bot via [@BotFather](https://t.me/BotFather) and get the token
+2. Send any message to your bot, then get your chat ID from `https://api.telegram.org/bot<TOKEN>/getUpdates`
+3. Run:
+
+```bash
+LUCIFER_TELEGRAM_TOKEN=your_bot_token \
+LUCIFER_TELEGRAM_CHAT_ID=your_chat_id \
+npx lucifer-gate --config ./config/lucifer.json
+```
+
+When a `telegram_approve` command arrives, you'll see an inline keyboard in Telegram:
+
+```
+Command Request from key-name (192.168.1.5)
+git push origin main
+
+[Exact 2h] [Exact 8h] [Exact forever]
+["git push" 2h] ["git push" 8h]
+[Deny]
+```
+
+## API
+
+### POST /api/v1/execute
+
+Execute a command. Async by default (returns requestId).
+
+```bash
+curl -X POST http://localhost:3001/api/v1/execute \
+  -H "Content-Type: application/json" \
+  -H "x-api-key: luc_yourkey" \
+  -d '{"command":"git status"}'
+```
+
+Response (async, default):
+```json
+{ "requestId": "uuid", "status": "pending_approval" }
+```
+
+Response (sync, `?sync=true`):
+```json
+{ "requestId": "uuid", "status": "completed", "exitCode": 0, "stdout": "...", "stderr": "", "durationMs": 42 }
+```
+
+### GET /api/v1/status/:requestId
+
+Poll for result (requires same API key).
+
+```json
+{ "requestId": "uuid", "status": "completed", "exitCode": 0, "stdout": "...", "durationMs": 42 }
+```
+
+Status values: `pending_approval`, `approved`, `denied`, `executing`, `completed`, `failed`, `timed_out`, `expired`
+
+### Error responses
+
+All errors return:
+```json
+{ "code": "ERROR_CODE", "message": "Human readable", "retryable": true }
+```
+
+Codes: `MISSING_API_KEY`, `INVALID_API_KEY`, `IP_NOT_ALLOWED`, `RATE_LIMITED`, `COMMAND_DENIED`, `COMMAND_TOO_LONG`, `APPROVAL_TIMEOUT`, `APPROVAL_ERROR`
+
+## CLI
+
+```
+lucifer-gate --init [dir]         Generate starter config + API key
+lucifer-gate --config <path>      Start server with config
+lucifer-gate --auto-approve       Dev mode (no Telegram)
+lucifer-gate log [--limit N]      Query audit log
+lucifer-gate stats                Show approval statistics
+```
+
+## Docker
+
+```bash
+docker build -t lucifer-gate .
+docker run -p 3001:3001 \
+  -e LUCIFER_TELEGRAM_TOKEN=your_token \
+  -e LUCIFER_TELEGRAM_CHAT_ID=your_chat_id \
+  -v ./config:/app/config \
+  -v ./data:/app/data \
+  lucifer-gate
+```
+
+## Environment variables
+
+| Variable | Required | Description |
+|---|---|---|
+| `LUCIFER_TELEGRAM_TOKEN` | Yes (prod) | Telegram bot token from @BotFather |
+| `LUCIFER_TELEGRAM_CHAT_ID` | Yes (prod) | Telegram chat ID for approvals |
+| `LUCIFER_ADMIN_SECRET` | No | Bearer token for admin endpoints |
+| `PORT` | No | Server port (default: 3001) |
+
+## Architecture
+
+```
+server/src/domains/
+  command-gateway/       Core domain
+    types/               CommandRequest, Approval, types
+    config/              Gateway configuration
+    repository/          SQLite stores, JSON config readers
+    service/             Auth, rules, risk analysis, execution
+    api/                 Express routes
+  platform-api/          Health check (existing)
+```
+
+Dependency flow: Types -> Config -> Repository -> Service -> API
+
+## Stack
+
+- Express 5 + TypeScript
+- SQLite (better-sqlite3) for approvals + audit
+- Telegraf for Telegram bot
+- Pino for structured logging
+- Vitest for testing
+- React 19 + Vite 8 (admin UI planned for v1.1)

package/dist/server/cli.js

@@ -0,0 +1,220 @@
+#!/usr/bin/env node
+import { writeFileSync, existsSync, mkdirSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { createApp } from './create_app.js';
+import { generateApiKey } from './domains/command-gateway/repository/api_key_store.js';
+import { getDatabase } from './domains/command-gateway/repository/database.js';
+import { createAuditLog } from './domains/command-gateway/repository/audit_log.js';
+import { createApprovalStore } from './domains/command-gateway/repository/approval_store.js';
+import { logger } from './lib/logger.js';
+const args = process.argv.slice(2);
+function printHelp() {
+    console.log(`
+lucifer-gate - AI Agent Command Firewall
+
+Usage:
+  lucifer-gate [options]        Start the server
+  lucifer-gate --init [dir]     Generate starter config files
+  lucifer-gate log [--limit N]  Query audit log
+  lucifer-gate stats            Show approval statistics
+
+Server options:
+  --config <path>    Path to lucifer.json (default: ./config/lucifer.json)
+  --port <number>    Server port (default: 3001, or PORT env var)
+  --data-dir <path>  Directory for SQLite database (default: ./data)
+  --auto-approve     Auto-approve all commands (dev mode, no Telegram needed)
+  --help             Show this help
+
+Environment variables:
+  LUCIFER_TELEGRAM_TOKEN   Telegram bot token (required for production)
+  LUCIFER_TELEGRAM_CHAT_ID Telegram chat ID for approvals
+  LUCIFER_ADMIN_SECRET     Admin API bearer token (optional)
+  PORT                     Server port (default: 3001)
+`);
+}
+function initConfig(targetDir) {
+    const configDir = resolve(targetDir, 'config');
+    const dataDir = resolve(targetDir, 'data');
+    mkdirSync(configDir, { recursive: true });
+    mkdirSync(dataDir, { recursive: true });
+    const luciferJsonPath = join(configDir, 'lucifer.json');
+    const apiKeysPath = join(configDir, 'api-keys.json');
+    const commandRulesPath = join(configDir, 'command-rules.json');
+    if (existsSync(luciferJsonPath)) {
+        console.log(`Config already exists: ${luciferJsonPath}`);
+        console.log('Delete it first if you want to regenerate.');
+        return;
+    }
+    const { key, salt, keyHash } = generateApiKey();
+    writeFileSync(luciferJsonPath, JSON.stringify({
+        port: 3001,
+        approvalTimeoutSeconds: 300,
+        executionTimeoutSeconds: 120,
+        maxConcurrentExecutions: 5,
+        maxOutputBytes: 10485760,
+        rateLimitPerMinute: 10,
+        onApprovalTimeout: 'deny',
+        dataDir: '../data',
+    }, null, 2) + '\n');
+    writeFileSync(apiKeysPath, JSON.stringify({
+        keys: [{
+                id: crypto.randomUUID(),
+                name: 'default',
+                keyHash,
+                salt,
+                allowedIps: [],
+                createdAt: new Date().toISOString(),
+                active: true,
+            }],
+    }, null, 2) + '\n');
+    writeFileSync(commandRulesPath, JSON.stringify({
+        rules: [
+            { prefix: 'echo ', action: 'always_approve' },
+            { prefix: 'git status', action: 'always_approve' },
+            { prefix: 'git pull', action: 'telegram_approve' },
+            { prefix: 'git push', action: 'telegram_approve' },
+            { prefix: 'npm test', action: 'always_approve' },
+            { prefix: 'npm run', action: 'telegram_approve' },
+            { prefix: 'rm ', action: 'always_deny' },
+        ],
+        defaultAction: 'always_deny',
+    }, null, 2) + '\n');
+    console.log('Config files generated:');
+    console.log(`  ${luciferJsonPath}`);
+    console.log(`  ${apiKeysPath}`);
+    console.log(`  ${commandRulesPath}`);
+    console.log('');
+    console.log('Your API key (save this, it cannot be recovered):');
+    console.log(`  ${key}`);
+    console.log('');
+    console.log('Quick start:');
+    console.log('  # Dev mode (no Telegram needed):');
+    console.log(`  LUCIFER_TELEGRAM_TOKEN=skip lucifer-gate --config ${luciferJsonPath} --auto-approve`);
+    console.log('');
+    console.log('  # Production (set your Telegram bot token):');
+    console.log(`  LUCIFER_TELEGRAM_TOKEN=your_token LUCIFER_TELEGRAM_CHAT_ID=your_chat_id lucifer-gate --config ${luciferJsonPath}`);
+}
+async function runLog(limit) {
+    const dataDir = getArgValue('--data-dir') ?? './data';
+    const db = getDatabase(dataDir);
+    const auditLog = createAuditLog(db);
+    const entries = auditLog.query(limit);
+    if (entries.length === 0) {
+        console.log('No audit log entries found.');
+        return;
+    }
+    for (const entry of entries.reverse()) {
+        const time = entry.ts.replace('T', ' ').replace(/\.\d+Z$/, 'Z');
+        const parts = [time, entry.type.toUpperCase().padEnd(16)];
+        if (entry.command)
+            parts.push(entry.command);
+        if (entry.apiKeyName)
+            parts.push(`key=${entry.apiKeyName}`);
+        if (entry.exitCode !== undefined && entry.exitCode !== null)
+            parts.push(`exit=${entry.exitCode}`);
+        if (entry.durationMs !== undefined && entry.durationMs !== null)
+            parts.push(`${entry.durationMs}ms`);
+        if (entry.error)
+            parts.push(`error: ${entry.error}`);
+        console.log(parts.join('  '));
+    }
+}
+async function runStats() {
+    const dataDir = getArgValue('--data-dir') ?? './data';
+    const db = getDatabase(dataDir);
+    const auditLog = createAuditLog(db);
+    const approvalStore = createApprovalStore(db);
+    const allEntries = auditLog.query(10000);
+    const requests = allEntries.filter(e => e.type === 'request');
+    const approvals = allEntries.filter(e => e.type === 'approved');
+    const denials = allEntries.filter(e => e.type === 'denied');
+    const executions = allEntries.filter(e => e.type === 'executed');
+    const activeApprovals = approvalStore.listAll(10000);
+    const expired = activeApprovals.filter(a => a.expiresAt && new Date(a.expiresAt) < new Date());
+    console.log('Lucifer Stats');
+    console.log('=============');
+    console.log(`Total requests:     ${requests.length}`);
+    console.log(`Approved:           ${approvals.length}`);
+    console.log(`Denied:             ${denials.length}`);
+    console.log(`Executed:           ${executions.length}`);
+    console.log(`Active approvals:   ${activeApprovals.length - expired.length}`);
+    console.log(`Expired approvals:  ${expired.length}`);
+    if (executions.length > 0) {
+        const durations = executions.filter(e => e.durationMs != null).map(e => e.durationMs);
+        if (durations.length > 0) {
+            const avg = Math.round(durations.reduce((a, b) => a + b, 0) / durations.length);
+            const max = Math.max(...durations);
+            console.log(`Avg exec time:      ${avg}ms`);
+            console.log(`Max exec time:      ${max}ms`);
+        }
+    }
+    // Top commands
+    const cmdCounts = new Map();
+    for (const r of requests) {
+        if (r.command) {
+            const cmd = r.command.split(/\s+/).slice(0, 2).join(' ');
+            cmdCounts.set(cmd, (cmdCounts.get(cmd) ?? 0) + 1);
+        }
+    }
+    const topCmds = [...cmdCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 10);
+    if (topCmds.length > 0) {
+        console.log('\nTop commands:');
+        for (const [cmd, count] of topCmds) {
+            console.log(`  ${count.toString().padStart(5)}  ${cmd}`);
+        }
+    }
+}
+function getArgValue(flag) {
+    const idx = args.indexOf(flag);
+    if (idx === -1 || idx >= args.length - 1)
+        return undefined;
+    return args[idx + 1];
+}
+async function main() {
+    if (args.includes('--help') || args.includes('-h')) {
+        printHelp();
+        return;
+    }
+    if (args[0] === '--init' || args[0] === 'init') {
+        const dir = args[1] ?? '.';
+        initConfig(dir);
+        return;
+    }
+    if (args[0] === 'log') {
+        const limitStr = getArgValue('--limit');
+        await runLog(limitStr ? parseInt(limitStr, 10) : 50);
+        return;
+    }
+    if (args[0] === 'stats') {
+        await runStats();
+        return;
+    }
+    // Server mode
+    const configPath = getArgValue('--config');
+    const port = getArgValue('--port');
+    const autoApprove = args.includes('--auto-approve');
+    if (port) {
+        process.env.PORT = port;
+    }
+    const { app, config, start, stop } = createApp({
+        configPath,
+        autoApprove,
+    });
+    const server = app.listen(config.port, async () => {
+        logger.info({ port: config.port, autoApprove }, 'Lucifer listening');
+        await start();
+    });
+    const shutdown = async () => {
+        logger.info('Shutting down');
+        await stop();
+        server.close();
+        process.exit(0);
+    };
+    process.on('SIGTERM', shutdown);
+    process.on('SIGINT', shutdown);
+}
+main().catch(err => {
+    console.error('Fatal error:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/server/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../server/src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,uDAAuD,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,kDAAkD,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;CAqBb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAE/D,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,0BAA0B,eAAe,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;IAEhD,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC;QAC5C,IAAI,EAAE,IAAI;QACV,sBAAsB,EAAE,GAAG;QAC3B,uBAAuB,EAAE,GAAG;QAC5B,uBAAuB,EAAE,CAAC;QAC1B,cAAc,EAAE,QAAQ;QACxB,kBAAkB,EAAE,EAAE;QACtB,iBAAiB,EAAE,MAAM;QACzB,OAAO,EAAE,SAAS;KACnB,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEpB,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;QACxC,IAAI,EAAE,CAAC;gBACL,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gBACvB,IAAI,EAAE,SAAS;gBACf,OAAO;gBACP,IAAI;gBACJ,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,IAAI;aACb,CAAC;KACH,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEpB,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC;QAC7C,KAAK,EAAE;YACL,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE;YAC7C,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE;YAClD,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAClD,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAClD,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE;YAChD,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACjD,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE;SACzC;QACD,aAAa,EAAE,aAAa;KAC7B,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEpB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,KAAK,gBAAgB,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,uDAAuD,eAAe,iBAAiB,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,mGAAmG,eAAe,EAAE,CAAC,CAAC;AACpI,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAa;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC;IACtD,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,KAAK,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClG,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;QACrG,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC;IACtD,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,aAAa,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAE9C,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAEjE,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;IAE/F,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,uBAAuB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,uBAAuB,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,uBAAuB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,uBAAuB,eAAe,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,uBAAuB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAErD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAW,CAAC,CAAC;QACvF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAChF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,eAAe;IACf,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAC3B,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,cAAc;IACd,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAEpD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC;QAC7C,UAAU;QACV,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACrE,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7B,MAAM,IAAI,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server/create_app.js

@@ -0,0 +1,95 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import express from 'express';
+import { getServerConfig } from './domains/platform-api/config/server_config.js';
+import { registerHealthRoutes } from './domains/platform-api/api/register_health_routes.js';
+import { createRuntimeMetadataRepository } from './domains/platform-api/repository/runtime_metadata_repository.js';
+import { createHealthReportService } from './domains/platform-api/service/create_health_report.js';
+import { loadGatewayConfig, getTelegramToken } from './domains/command-gateway/config/gateway_config.js';
+import { getDatabase, closeDatabase } from './domains/command-gateway/repository/database.js';
+import { createApprovalStore } from './domains/command-gateway/repository/approval_store.js';
+import { createAuditLog } from './domains/command-gateway/repository/audit_log.js';
+import { createApiKeyStore } from './domains/command-gateway/repository/api_key_store.js';
+import { createCommandRulesStore } from './domains/command-gateway/repository/command_rules_store.js';
+import { createPendingRequestStore } from './domains/command-gateway/repository/pending_request_store.js';
+import { registerExecuteRoutes } from './domains/command-gateway/api/register_execute_routes.js';
+import { createTelegramApprovalChannel } from './domains/command-gateway/service/request_telegram_approval.js';
+import { createAutoApproveChannel } from './domains/command-gateway/service/auto_approve_channel.js';
+import { createChildLogger } from './lib/logger.js';
+const log = createChildLogger('app');
+export function createApp(options = {}) {
+    const serverConfig = getServerConfig();
+    const metadataRepository = createRuntimeMetadataRepository();
+    const getHealthReport = createHealthReportService(serverConfig, metadataRepository);
+    const app = express();
+    const indexPath = path.join(serverConfig.clientDistPath, 'index.html');
+    const hasBuiltClient = fs.existsSync(indexPath);
+    const indexMarkup = hasBuiltClient ? fs.readFileSync(indexPath, 'utf8') : null;
+    app.disable('x-powered-by');
+    app.use(express.json());
+    registerHealthRoutes(app, getHealthReport);
+    // Initialize Lucifer command gateway
+    const gatewayConfig = loadGatewayConfig(options.configPath);
+    const configDir = options.configPath ? path.dirname(path.resolve(options.configPath)) : process.cwd();
+    const apiKeysPath = path.join(configDir, 'api-keys.json');
+    const commandRulesPath = path.join(configDir, 'command-rules.json');
+    // Resolve dataDir relative to config directory
+    const resolvedDataDir = path.resolve(configDir, gatewayConfig.dataDir);
+    gatewayConfig.dataDir = resolvedDataDir;
+    let approvalChannel;
+    let cleanupInterval;
+    // Only initialize gateway if config files exist
+    if (fs.existsSync(apiKeysPath) && fs.existsSync(commandRulesPath)) {
+        const db = getDatabase(gatewayConfig.dataDir);
+        const approvalStore = createApprovalStore(db);
+        const auditLog = createAuditLog(db);
+        const apiKeyStore = createApiKeyStore(apiKeysPath);
+        const commandRulesStore = createCommandRulesStore(commandRulesPath);
+        const pendingStore = createPendingRequestStore();
+        if (options.autoApprove) {
+            approvalChannel = createAutoApproveChannel();
+        }
+        else {
+            const token = getTelegramToken();
+            const chatId = gatewayConfig.telegramChatId ?? process.env.LUCIFER_TELEGRAM_CHAT_ID;
+            if (!chatId) {
+                throw new Error('Telegram chat ID is required. Set LUCIFER_TELEGRAM_CHAT_ID env var or telegramChatId in config.');
+            }
+            approvalChannel = createTelegramApprovalChannel(token, chatId, pendingStore, approvalStore, auditLog);
+        }
+        registerExecuteRoutes(app, gatewayConfig, apiKeyStore, commandRulesStore, approvalStore, pendingStore, auditLog, approvalChannel);
+        // Clean up expired approvals and stale pending requests periodically
+        cleanupInterval = setInterval(() => {
+            approvalStore.removeExpired();
+            pendingStore.cleanup(gatewayConfig.approvalTimeoutSeconds * 1000);
+        }, 60_000);
+        log.info('Command gateway initialized');
+    }
+    else {
+        log.warn({ apiKeysPath, commandRulesPath }, 'Config files not found. Run with --init to generate them. Gateway disabled.');
+    }
+    // TLS warning
+    if (process.env.NODE_ENV === 'production') {
+        log.warn('Ensure HTTPS is configured for production. API keys are transmitted in headers.');
+    }
+    if (hasBuiltClient && indexMarkup !== null) {
+        app.use(express.static(serverConfig.clientDistPath));
+        app.get(/^(?!\/api\/).*/, (_request, response) => {
+            response.type('html').send(indexMarkup);
+        });
+    }
+    async function start() {
+        if (approvalChannel) {
+            await approvalChannel.start();
+        }
+    }
+    async function stop() {
+        if (cleanupInterval)
+            clearInterval(cleanupInterval);
+        if (approvalChannel)
+            await approvalChannel.stop();
+        closeDatabase();
+    }
+    return { app, config: serverConfig, gatewayConfig, start, stop };
+}
+//# sourceMappingURL=create_app.js.map

package/dist/server/create_app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_app.js","sourceRoot":"","sources":["../../server/src/create_app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,OAAO,MAAM,SAAS,CAAA;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAA;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAA;AAC3F,OAAO,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAA;AAClH,OAAO,EAAE,yBAAyB,EAAE,MAAM,wDAAwD,CAAA;AAClG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAA;AACxG,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kDAAkD,CAAA;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAA;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,mDAAmD,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uDAAuD,CAAA;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,6DAA6D,CAAA;AACrG,OAAO,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAA;AACzG,OAAO,EAAE,qBAAqB,EAAE,MAAM,0DAA0D,CAAA;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,gEAAgE,CAAA;AAC9G,OAAO,EAAE,wBAAwB,EAAE,MAAM,2DAA2D,CAAA;AAEpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEnD,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;AAOpC,MAAM,UAAU,SAAS,CAAC,UAA4B,EAAE;IACtD,MAAM,YAAY,GAAG,eAAe,EAAE,CAAA;IACtC,MAAM,kBAAkB,GAAG,+BAA+B,EAAE,CAAA;IAC5D,MAAM,eAAe,GAAG,yBAAyB,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAA;IACnF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;IACtE,MAAM,cAAc,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAE9E,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IAC3B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACvB,oBAAoB,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAE1C,qCAAqC;IACrC,MAAM,aAAa,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;IACrG,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IACzD,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;IAEnE,+CAA+C;IAC/C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;IACtE,aAAa,CAAC,OAAO,GAAG,eAAe,CAAA;IAEvC,IAAI,eAA4C,CAAA;IAChD,IAAI,eAA2D,CAAA;IAE/D,gDAAgD;IAChD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClE,MAAM,EAAE,GAAG,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,aAAa,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAClD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,CAAA;QACnE,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAA;QAEhD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,eAAe,GAAG,wBAAwB,EAAE,CAAA;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;YAChC,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAA;YACnF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAA;YACH,CAAC;YACD,eAAe,GAAG,6BAA6B,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAA;QACvG,CAAC;QAED,qBAAqB,CACnB,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAClD,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,CACvD,CAAA;QAED,qEAAqE;QACrE,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,aAAa,CAAC,aAAa,EAAE,CAAA;YAC7B,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAA;QACnE,CAAC,EAAE,MAAM,CAAC,CAAA;QAEV,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IACzC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,EAAE,6EAA6E,CAAC,CAAA;IAC5H,CAAC;IAED,cAAc;IACd,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAA;IAC7F,CAAC;IAED,IAAI,cAAc,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAA;QACpD,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YAC/C,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC,KAAK,EAAE,CAAA;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,IAAI,eAAe;YAAE,aAAa,CAAC,eAAe,CAAC,CAAA;QACnD,IAAI,eAAe;YAAE,MAAM,eAAe,CAAC,IAAI,EAAE,CAAA;QACjD,aAAa,EAAE,CAAA;IACjB,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AAClE,CAAC"}