palaryn 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +716 -0
- package/dist/sdk/typescript/src/client.d.ts +71 -0
- package/dist/sdk/typescript/src/client.d.ts.map +1 -0
- package/dist/sdk/typescript/src/client.js +176 -0
- package/dist/sdk/typescript/src/client.js.map +1 -0
- package/dist/sdk/typescript/src/errors.d.ts +50 -0
- package/dist/sdk/typescript/src/errors.d.ts.map +1 -0
- package/dist/sdk/typescript/src/errors.js +103 -0
- package/dist/sdk/typescript/src/errors.js.map +1 -0
- package/dist/sdk/typescript/src/index.d.ts +4 -0
- package/dist/sdk/typescript/src/index.d.ts.map +1 -0
- package/dist/sdk/typescript/src/index.js +15 -0
- package/dist/sdk/typescript/src/index.js.map +1 -0
- package/dist/sdk/typescript/src/types.d.ts +101 -0
- package/dist/sdk/typescript/src/types.d.ts.map +1 -0
- package/dist/sdk/typescript/src/types.js +6 -0
- package/dist/sdk/typescript/src/types.js.map +1 -0
- package/dist/src/admin/index.d.ts +2 -0
- package/dist/src/admin/index.d.ts.map +1 -0
- package/dist/src/admin/index.js +6 -0
- package/dist/src/admin/index.js.map +1 -0
- package/dist/src/admin/routes.d.ts +5 -0
- package/dist/src/admin/routes.d.ts.map +1 -0
- package/dist/src/admin/routes.js +471 -0
- package/dist/src/admin/routes.js.map +1 -0
- package/dist/src/admin/templates.d.ts +51 -0
- package/dist/src/admin/templates.d.ts.map +1 -0
- package/dist/src/admin/templates.js +500 -0
- package/dist/src/admin/templates.js.map +1 -0
- package/dist/src/anomaly/detector.d.ts +141 -0
- package/dist/src/anomaly/detector.d.ts.map +1 -0
- package/dist/src/anomaly/detector.js +554 -0
- package/dist/src/anomaly/detector.js.map +1 -0
- package/dist/src/anomaly/index.d.ts +2 -0
- package/dist/src/anomaly/index.d.ts.map +1 -0
- package/dist/src/anomaly/index.js +7 -0
- package/dist/src/anomaly/index.js.map +1 -0
- package/dist/src/approval/manager.d.ts +147 -0
- package/dist/src/approval/manager.d.ts.map +1 -0
- package/dist/src/approval/manager.js +511 -0
- package/dist/src/approval/manager.js.map +1 -0
- package/dist/src/approval/webhook.d.ts +36 -0
- package/dist/src/approval/webhook.d.ts.map +1 -0
- package/dist/src/approval/webhook.js +135 -0
- package/dist/src/approval/webhook.js.map +1 -0
- package/dist/src/audit/logger.d.ts +70 -0
- package/dist/src/audit/logger.d.ts.map +1 -0
- package/dist/src/audit/logger.js +440 -0
- package/dist/src/audit/logger.js.map +1 -0
- package/dist/src/auth/index.d.ts +6 -0
- package/dist/src/auth/index.d.ts.map +1 -0
- package/dist/src/auth/index.js +22 -0
- package/dist/src/auth/index.js.map +1 -0
- package/dist/src/auth/password.d.ts +3 -0
- package/dist/src/auth/password.d.ts.map +1 -0
- package/dist/src/auth/password.js +25 -0
- package/dist/src/auth/password.js.map +1 -0
- package/dist/src/auth/pkce.d.ts +13 -0
- package/dist/src/auth/pkce.d.ts.map +1 -0
- package/dist/src/auth/pkce.js +58 -0
- package/dist/src/auth/pkce.js.map +1 -0
- package/dist/src/auth/providers.d.ts +28 -0
- package/dist/src/auth/providers.d.ts.map +1 -0
- package/dist/src/auth/providers.js +198 -0
- package/dist/src/auth/providers.js.map +1 -0
- package/dist/src/auth/routes.d.ts +14 -0
- package/dist/src/auth/routes.d.ts.map +1 -0
- package/dist/src/auth/routes.js +431 -0
- package/dist/src/auth/routes.js.map +1 -0
- package/dist/src/auth/session.d.ts +24 -0
- package/dist/src/auth/session.d.ts.map +1 -0
- package/dist/src/auth/session.js +105 -0
- package/dist/src/auth/session.js.map +1 -0
- package/dist/src/billing/index.d.ts +7 -0
- package/dist/src/billing/index.d.ts.map +1 -0
- package/dist/src/billing/index.js +14 -0
- package/dist/src/billing/index.js.map +1 -0
- package/dist/src/billing/plan-enforcer.d.ts +44 -0
- package/dist/src/billing/plan-enforcer.d.ts.map +1 -0
- package/dist/src/billing/plan-enforcer.js +110 -0
- package/dist/src/billing/plan-enforcer.js.map +1 -0
- package/dist/src/billing/routes.d.ts +15 -0
- package/dist/src/billing/routes.d.ts.map +1 -0
- package/dist/src/billing/routes.js +193 -0
- package/dist/src/billing/routes.js.map +1 -0
- package/dist/src/billing/stripe-client.d.ts +14 -0
- package/dist/src/billing/stripe-client.d.ts.map +1 -0
- package/dist/src/billing/stripe-client.js +51 -0
- package/dist/src/billing/stripe-client.js.map +1 -0
- package/dist/src/billing/webhook-handler.d.ts +19 -0
- package/dist/src/billing/webhook-handler.d.ts.map +1 -0
- package/dist/src/billing/webhook-handler.js +169 -0
- package/dist/src/billing/webhook-handler.js.map +1 -0
- package/dist/src/billing/webhook-routes.d.ts +5 -0
- package/dist/src/billing/webhook-routes.d.ts.map +1 -0
- package/dist/src/billing/webhook-routes.js +30 -0
- package/dist/src/billing/webhook-routes.js.map +1 -0
- package/dist/src/budget/manager.d.ts +95 -0
- package/dist/src/budget/manager.d.ts.map +1 -0
- package/dist/src/budget/manager.js +547 -0
- package/dist/src/budget/manager.js.map +1 -0
- package/dist/src/budget/usage-extractor.d.ts +38 -0
- package/dist/src/budget/usage-extractor.d.ts.map +1 -0
- package/dist/src/budget/usage-extractor.js +165 -0
- package/dist/src/budget/usage-extractor.js.map +1 -0
- package/dist/src/cli.d.ts +3 -0
- package/dist/src/cli.d.ts.map +1 -0
- package/dist/src/cli.js +115 -0
- package/dist/src/cli.js.map +1 -0
- package/dist/src/config/defaults.d.ts +3 -0
- package/dist/src/config/defaults.d.ts.map +1 -0
- package/dist/src/config/defaults.js +243 -0
- package/dist/src/config/defaults.js.map +1 -0
- package/dist/src/config/validate.d.ts +15 -0
- package/dist/src/config/validate.d.ts.map +1 -0
- package/dist/src/config/validate.js +105 -0
- package/dist/src/config/validate.js.map +1 -0
- package/dist/src/dlp/composite-scanner.d.ts +47 -0
- package/dist/src/dlp/composite-scanner.d.ts.map +1 -0
- package/dist/src/dlp/composite-scanner.js +186 -0
- package/dist/src/dlp/composite-scanner.js.map +1 -0
- package/dist/src/dlp/index.d.ts +10 -0
- package/dist/src/dlp/index.d.ts.map +1 -0
- package/dist/src/dlp/index.js +26 -0
- package/dist/src/dlp/index.js.map +1 -0
- package/dist/src/dlp/interfaces.d.ts +33 -0
- package/dist/src/dlp/interfaces.d.ts.map +1 -0
- package/dist/src/dlp/interfaces.js +3 -0
- package/dist/src/dlp/interfaces.js.map +1 -0
- package/dist/src/dlp/patterns.d.ts +9 -0
- package/dist/src/dlp/patterns.d.ts.map +1 -0
- package/dist/src/dlp/patterns.js +25 -0
- package/dist/src/dlp/patterns.js.map +1 -0
- package/dist/src/dlp/prompt-injection-backend.d.ts +68 -0
- package/dist/src/dlp/prompt-injection-backend.d.ts.map +1 -0
- package/dist/src/dlp/prompt-injection-backend.js +148 -0
- package/dist/src/dlp/prompt-injection-backend.js.map +1 -0
- package/dist/src/dlp/prompt-injection-patterns.d.ts +32 -0
- package/dist/src/dlp/prompt-injection-patterns.d.ts.map +1 -0
- package/dist/src/dlp/prompt-injection-patterns.js +290 -0
- package/dist/src/dlp/prompt-injection-patterns.js.map +1 -0
- package/dist/src/dlp/regex-backend.d.ts +32 -0
- package/dist/src/dlp/regex-backend.d.ts.map +1 -0
- package/dist/src/dlp/regex-backend.js +153 -0
- package/dist/src/dlp/regex-backend.js.map +1 -0
- package/dist/src/dlp/scanner.d.ts +122 -0
- package/dist/src/dlp/scanner.d.ts.map +1 -0
- package/dist/src/dlp/scanner.js +444 -0
- package/dist/src/dlp/scanner.js.map +1 -0
- package/dist/src/dlp/text-normalizer.d.ts +41 -0
- package/dist/src/dlp/text-normalizer.d.ts.map +1 -0
- package/dist/src/dlp/text-normalizer.js +203 -0
- package/dist/src/dlp/text-normalizer.js.map +1 -0
- package/dist/src/dlp/trufflehog-backend.d.ts +64 -0
- package/dist/src/dlp/trufflehog-backend.d.ts.map +1 -0
- package/dist/src/dlp/trufflehog-backend.js +151 -0
- package/dist/src/dlp/trufflehog-backend.js.map +1 -0
- package/dist/src/executor/http-executor.d.ts +25 -0
- package/dist/src/executor/http-executor.d.ts.map +1 -0
- package/dist/src/executor/http-executor.js +333 -0
- package/dist/src/executor/http-executor.js.map +1 -0
- package/dist/src/executor/index.d.ts +6 -0
- package/dist/src/executor/index.d.ts.map +1 -0
- package/dist/src/executor/index.js +12 -0
- package/dist/src/executor/index.js.map +1 -0
- package/dist/src/executor/interfaces.d.ts +11 -0
- package/dist/src/executor/interfaces.d.ts.map +1 -0
- package/dist/src/executor/interfaces.js +3 -0
- package/dist/src/executor/interfaces.js.map +1 -0
- package/dist/src/executor/noop-executor.d.ts +13 -0
- package/dist/src/executor/noop-executor.d.ts.map +1 -0
- package/dist/src/executor/noop-executor.js +21 -0
- package/dist/src/executor/noop-executor.js.map +1 -0
- package/dist/src/executor/registry.d.ts +30 -0
- package/dist/src/executor/registry.d.ts.map +1 -0
- package/dist/src/executor/registry.js +62 -0
- package/dist/src/executor/registry.js.map +1 -0
- package/dist/src/executor/slack-executor.d.ts +24 -0
- package/dist/src/executor/slack-executor.d.ts.map +1 -0
- package/dist/src/executor/slack-executor.js +147 -0
- package/dist/src/executor/slack-executor.js.map +1 -0
- package/dist/src/index.d.ts +25 -0
- package/dist/src/index.d.ts.map +1 -0
- package/dist/src/index.js +74 -0
- package/dist/src/index.js.map +1 -0
- package/dist/src/mcp/auth-verifier.d.ts +23 -0
- package/dist/src/mcp/auth-verifier.d.ts.map +1 -0
- package/dist/src/mcp/auth-verifier.js +162 -0
- package/dist/src/mcp/auth-verifier.js.map +1 -0
- package/dist/src/mcp/bridge.d.ts +132 -0
- package/dist/src/mcp/bridge.d.ts.map +1 -0
- package/dist/src/mcp/bridge.js +734 -0
- package/dist/src/mcp/bridge.js.map +1 -0
- package/dist/src/mcp/http-transport.d.ts +32 -0
- package/dist/src/mcp/http-transport.d.ts.map +1 -0
- package/dist/src/mcp/http-transport.js +538 -0
- package/dist/src/mcp/http-transport.js.map +1 -0
- package/dist/src/mcp/index.d.ts +10 -0
- package/dist/src/mcp/index.d.ts.map +1 -0
- package/dist/src/mcp/index.js +17 -0
- package/dist/src/mcp/index.js.map +1 -0
- package/dist/src/mcp/oauth-pages.d.ts +23 -0
- package/dist/src/mcp/oauth-pages.d.ts.map +1 -0
- package/dist/src/mcp/oauth-pages.js +121 -0
- package/dist/src/mcp/oauth-pages.js.map +1 -0
- package/dist/src/mcp/oauth-postgres-stores.d.ts +55 -0
- package/dist/src/mcp/oauth-postgres-stores.d.ts.map +1 -0
- package/dist/src/mcp/oauth-postgres-stores.js +226 -0
- package/dist/src/mcp/oauth-postgres-stores.js.map +1 -0
- package/dist/src/mcp/oauth-provider.d.ts +95 -0
- package/dist/src/mcp/oauth-provider.d.ts.map +1 -0
- package/dist/src/mcp/oauth-provider.js +360 -0
- package/dist/src/mcp/oauth-provider.js.map +1 -0
- package/dist/src/mcp/oauth-stores.d.ts +62 -0
- package/dist/src/mcp/oauth-stores.d.ts.map +1 -0
- package/dist/src/mcp/oauth-stores.js +154 -0
- package/dist/src/mcp/oauth-stores.js.map +1 -0
- package/dist/src/mcp/server.d.ts +18 -0
- package/dist/src/mcp/server.d.ts.map +1 -0
- package/dist/src/mcp/server.js +51 -0
- package/dist/src/mcp/server.js.map +1 -0
- package/dist/src/metrics/collector.d.ts +106 -0
- package/dist/src/metrics/collector.d.ts.map +1 -0
- package/dist/src/metrics/collector.js +311 -0
- package/dist/src/metrics/collector.js.map +1 -0
- package/dist/src/metrics/index.d.ts +2 -0
- package/dist/src/metrics/index.d.ts.map +1 -0
- package/dist/src/metrics/index.js +6 -0
- package/dist/src/metrics/index.js.map +1 -0
- package/dist/src/middleware/auth.d.ts +77 -0
- package/dist/src/middleware/auth.d.ts.map +1 -0
- package/dist/src/middleware/auth.js +720 -0
- package/dist/src/middleware/auth.js.map +1 -0
- package/dist/src/middleware/session.d.ts +18 -0
- package/dist/src/middleware/session.d.ts.map +1 -0
- package/dist/src/middleware/session.js +67 -0
- package/dist/src/middleware/session.js.map +1 -0
- package/dist/src/middleware/validate.d.ts +3 -0
- package/dist/src/middleware/validate.d.ts.map +1 -0
- package/dist/src/middleware/validate.js +85 -0
- package/dist/src/middleware/validate.js.map +1 -0
- package/dist/src/policy/engine.d.ts +107 -0
- package/dist/src/policy/engine.d.ts.map +1 -0
- package/dist/src/policy/engine.js +646 -0
- package/dist/src/policy/engine.js.map +1 -0
- package/dist/src/policy/index.d.ts +3 -0
- package/dist/src/policy/index.d.ts.map +1 -0
- package/dist/src/policy/index.js +8 -0
- package/dist/src/policy/index.js.map +1 -0
- package/dist/src/policy/opa-engine.d.ts +176 -0
- package/dist/src/policy/opa-engine.d.ts.map +1 -0
- package/dist/src/policy/opa-engine.js +790 -0
- package/dist/src/policy/opa-engine.js.map +1 -0
- package/dist/src/proxy/forward-proxy.d.ts +30 -0
- package/dist/src/proxy/forward-proxy.d.ts.map +1 -0
- package/dist/src/proxy/forward-proxy.js +580 -0
- package/dist/src/proxy/forward-proxy.js.map +1 -0
- package/dist/src/proxy/index.d.ts +2 -0
- package/dist/src/proxy/index.d.ts.map +1 -0
- package/dist/src/proxy/index.js +8 -0
- package/dist/src/proxy/index.js.map +1 -0
- package/dist/src/ratelimit/limiter.d.ts +45 -0
- package/dist/src/ratelimit/limiter.d.ts.map +1 -0
- package/dist/src/ratelimit/limiter.js +158 -0
- package/dist/src/ratelimit/limiter.js.map +1 -0
- package/dist/src/replay/engine.d.ts +40 -0
- package/dist/src/replay/engine.d.ts.map +1 -0
- package/dist/src/replay/engine.js +106 -0
- package/dist/src/replay/engine.js.map +1 -0
- package/dist/src/replay/index.d.ts +2 -0
- package/dist/src/replay/index.d.ts.map +1 -0
- package/dist/src/replay/index.js +6 -0
- package/dist/src/replay/index.js.map +1 -0
- package/dist/src/saas/index.d.ts +2 -0
- package/dist/src/saas/index.d.ts.map +1 -0
- package/dist/src/saas/index.js +18 -0
- package/dist/src/saas/index.js.map +1 -0
- package/dist/src/saas/routes.d.ts +18 -0
- package/dist/src/saas/routes.d.ts.map +1 -0
- package/dist/src/saas/routes.js +1566 -0
- package/dist/src/saas/routes.js.map +1 -0
- package/dist/src/server/app.d.ts +44 -0
- package/dist/src/server/app.d.ts.map +1 -0
- package/dist/src/server/app.js +854 -0
- package/dist/src/server/app.js.map +1 -0
- package/dist/src/server/errors.d.ts +32 -0
- package/dist/src/server/errors.d.ts.map +1 -0
- package/dist/src/server/errors.js +39 -0
- package/dist/src/server/errors.js.map +1 -0
- package/dist/src/server/gateway.d.ts +165 -0
- package/dist/src/server/gateway.d.ts.map +1 -0
- package/dist/src/server/gateway.js +964 -0
- package/dist/src/server/gateway.js.map +1 -0
- package/dist/src/server/index.d.ts +2 -0
- package/dist/src/server/index.d.ts.map +1 -0
- package/dist/src/server/index.js +295 -0
- package/dist/src/server/index.js.map +1 -0
- package/dist/src/server/logger.d.ts +33 -0
- package/dist/src/server/logger.d.ts.map +1 -0
- package/dist/src/server/logger.js +230 -0
- package/dist/src/server/logger.js.map +1 -0
- package/dist/src/server/stream-proxy.d.ts +32 -0
- package/dist/src/server/stream-proxy.d.ts.map +1 -0
- package/dist/src/server/stream-proxy.js +184 -0
- package/dist/src/server/stream-proxy.js.map +1 -0
- package/dist/src/storage/file-persistence.d.ts +48 -0
- package/dist/src/storage/file-persistence.d.ts.map +1 -0
- package/dist/src/storage/file-persistence.js +280 -0
- package/dist/src/storage/file-persistence.js.map +1 -0
- package/dist/src/storage/index.d.ts +5 -0
- package/dist/src/storage/index.d.ts.map +1 -0
- package/dist/src/storage/index.js +21 -0
- package/dist/src/storage/index.js.map +1 -0
- package/dist/src/storage/interfaces.d.ts +237 -0
- package/dist/src/storage/interfaces.d.ts.map +1 -0
- package/dist/src/storage/interfaces.js +3 -0
- package/dist/src/storage/interfaces.js.map +1 -0
- package/dist/src/storage/memory.d.ts +162 -0
- package/dist/src/storage/memory.d.ts.map +1 -0
- package/dist/src/storage/memory.js +603 -0
- package/dist/src/storage/memory.js.map +1 -0
- package/dist/src/storage/postgres.d.ts +267 -0
- package/dist/src/storage/postgres.d.ts.map +1 -0
- package/dist/src/storage/postgres.js +1555 -0
- package/dist/src/storage/postgres.js.map +1 -0
- package/dist/src/storage/redis.d.ts +202 -0
- package/dist/src/storage/redis.d.ts.map +1 -0
- package/dist/src/storage/redis.js +629 -0
- package/dist/src/storage/redis.js.map +1 -0
- package/dist/src/tracing/index.d.ts +2 -0
- package/dist/src/tracing/index.d.ts.map +1 -0
- package/dist/src/tracing/index.js +6 -0
- package/dist/src/tracing/index.js.map +1 -0
- package/dist/src/tracing/provider.d.ts +43 -0
- package/dist/src/tracing/provider.d.ts.map +1 -0
- package/dist/src/tracing/provider.js +74 -0
- package/dist/src/tracing/provider.js.map +1 -0
- package/dist/src/trust/calculator.d.ts +54 -0
- package/dist/src/trust/calculator.d.ts.map +1 -0
- package/dist/src/trust/calculator.js +102 -0
- package/dist/src/trust/calculator.js.map +1 -0
- package/dist/src/trust/index.d.ts +2 -0
- package/dist/src/trust/index.d.ts.map +1 -0
- package/dist/src/trust/index.js +7 -0
- package/dist/src/trust/index.js.map +1 -0
- package/dist/src/types/budget.d.ts +30 -0
- package/dist/src/types/budget.d.ts.map +1 -0
- package/dist/src/types/budget.js +3 -0
- package/dist/src/types/budget.js.map +1 -0
- package/dist/src/types/config.d.ts +176 -0
- package/dist/src/types/config.d.ts.map +1 -0
- package/dist/src/types/config.js +3 -0
- package/dist/src/types/config.js.map +1 -0
- package/dist/src/types/events.d.ts +24 -0
- package/dist/src/types/events.d.ts.map +1 -0
- package/dist/src/types/events.js +3 -0
- package/dist/src/types/events.js.map +1 -0
- package/dist/src/types/index.d.ts +8 -0
- package/dist/src/types/index.d.ts.map +1 -0
- package/dist/src/types/index.js +24 -0
- package/dist/src/types/index.js.map +1 -0
- package/dist/src/types/policy.d.ts +60 -0
- package/dist/src/types/policy.d.ts.map +1 -0
- package/dist/src/types/policy.js +3 -0
- package/dist/src/types/policy.js.map +1 -0
- package/dist/src/types/stripe-config.d.ts +12 -0
- package/dist/src/types/stripe-config.d.ts.map +1 -0
- package/dist/src/types/stripe-config.js +3 -0
- package/dist/src/types/stripe-config.js.map +1 -0
- package/dist/src/types/subscription.d.ts +24 -0
- package/dist/src/types/subscription.d.ts.map +1 -0
- package/dist/src/types/subscription.js +38 -0
- package/dist/src/types/subscription.js.map +1 -0
- package/dist/src/types/tool-call.d.ts +42 -0
- package/dist/src/types/tool-call.d.ts.map +1 -0
- package/dist/src/types/tool-call.js +3 -0
- package/dist/src/types/tool-call.js.map +1 -0
- package/dist/src/types/tool-result.d.ts +58 -0
- package/dist/src/types/tool-result.d.ts.map +1 -0
- package/dist/src/types/tool-result.js +3 -0
- package/dist/src/types/tool-result.js.map +1 -0
- package/dist/src/types/user.d.ts +101 -0
- package/dist/src/types/user.d.ts.map +1 -0
- package/dist/src/types/user.js +6 -0
- package/dist/src/types/user.js.map +1 -0
- package/dist/tests/integration/api.test.d.ts +2 -0
- package/dist/tests/integration/api.test.d.ts.map +1 -0
- package/dist/tests/integration/api.test.js +1199 -0
- package/dist/tests/integration/api.test.js.map +1 -0
- package/dist/tests/integration/proxy.test.d.ts +2 -0
- package/dist/tests/integration/proxy.test.d.ts.map +1 -0
- package/dist/tests/integration/proxy.test.js +251 -0
- package/dist/tests/integration/proxy.test.js.map +1 -0
- package/dist/tests/integration/storage.test.d.ts +16 -0
- package/dist/tests/integration/storage.test.d.ts.map +1 -0
- package/dist/tests/integration/storage.test.js +826 -0
- package/dist/tests/integration/storage.test.js.map +1 -0
- package/dist/tests/unit/admin.test.d.ts +2 -0
- package/dist/tests/unit/admin.test.d.ts.map +1 -0
- package/dist/tests/unit/admin.test.js +698 -0
- package/dist/tests/unit/admin.test.js.map +1 -0
- package/dist/tests/unit/anomaly-detector.test.d.ts +2 -0
- package/dist/tests/unit/anomaly-detector.test.d.ts.map +1 -0
- package/dist/tests/unit/anomaly-detector.test.js +903 -0
- package/dist/tests/unit/anomaly-detector.test.js.map +1 -0
- package/dist/tests/unit/approval-manager.test.d.ts +2 -0
- package/dist/tests/unit/approval-manager.test.d.ts.map +1 -0
- package/dist/tests/unit/approval-manager.test.js +528 -0
- package/dist/tests/unit/approval-manager.test.js.map +1 -0
- package/dist/tests/unit/approval-webhook.test.d.ts +2 -0
- package/dist/tests/unit/approval-webhook.test.d.ts.map +1 -0
- package/dist/tests/unit/approval-webhook.test.js +355 -0
- package/dist/tests/unit/approval-webhook.test.js.map +1 -0
- package/dist/tests/unit/audit-logger.test.d.ts +2 -0
- package/dist/tests/unit/audit-logger.test.d.ts.map +1 -0
- package/dist/tests/unit/audit-logger.test.js +635 -0
- package/dist/tests/unit/audit-logger.test.js.map +1 -0
- package/dist/tests/unit/auth-routes.test.d.ts +2 -0
- package/dist/tests/unit/auth-routes.test.d.ts.map +1 -0
- package/dist/tests/unit/auth-routes.test.js +281 -0
- package/dist/tests/unit/auth-routes.test.js.map +1 -0
- package/dist/tests/unit/auth.test.d.ts +2 -0
- package/dist/tests/unit/auth.test.d.ts.map +1 -0
- package/dist/tests/unit/auth.test.js +1382 -0
- package/dist/tests/unit/auth.test.js.map +1 -0
- package/dist/tests/unit/billing.test.d.ts +2 -0
- package/dist/tests/unit/billing.test.d.ts.map +1 -0
- package/dist/tests/unit/billing.test.js +579 -0
- package/dist/tests/unit/billing.test.js.map +1 -0
- package/dist/tests/unit/budget-manager.test.d.ts +2 -0
- package/dist/tests/unit/budget-manager.test.d.ts.map +1 -0
- package/dist/tests/unit/budget-manager.test.js +778 -0
- package/dist/tests/unit/budget-manager.test.js.map +1 -0
- package/dist/tests/unit/budget-race.test.d.ts +2 -0
- package/dist/tests/unit/budget-race.test.d.ts.map +1 -0
- package/dist/tests/unit/budget-race.test.js +58 -0
- package/dist/tests/unit/budget-race.test.js.map +1 -0
- package/dist/tests/unit/cli.test.d.ts +2 -0
- package/dist/tests/unit/cli.test.d.ts.map +1 -0
- package/dist/tests/unit/cli.test.js +93 -0
- package/dist/tests/unit/cli.test.js.map +1 -0
- package/dist/tests/unit/concurrency.test.d.ts +2 -0
- package/dist/tests/unit/concurrency.test.d.ts.map +1 -0
- package/dist/tests/unit/concurrency.test.js +1270 -0
- package/dist/tests/unit/concurrency.test.js.map +1 -0
- package/dist/tests/unit/config-validate.test.d.ts +2 -0
- package/dist/tests/unit/config-validate.test.d.ts.map +1 -0
- package/dist/tests/unit/config-validate.test.js +230 -0
- package/dist/tests/unit/config-validate.test.js.map +1 -0
- package/dist/tests/unit/defaults.test.d.ts +2 -0
- package/dist/tests/unit/defaults.test.d.ts.map +1 -0
- package/dist/tests/unit/defaults.test.js +364 -0
- package/dist/tests/unit/defaults.test.js.map +1 -0
- package/dist/tests/unit/dlp-backends.test.d.ts +2 -0
- package/dist/tests/unit/dlp-backends.test.d.ts.map +1 -0
- package/dist/tests/unit/dlp-backends.test.js +563 -0
- package/dist/tests/unit/dlp-backends.test.js.map +1 -0
- package/dist/tests/unit/dlp-scanner.test.d.ts +2 -0
- package/dist/tests/unit/dlp-scanner.test.d.ts.map +1 -0
- package/dist/tests/unit/dlp-scanner.test.js +739 -0
- package/dist/tests/unit/dlp-scanner.test.js.map +1 -0
- package/dist/tests/unit/error-responses.test.d.ts +2 -0
- package/dist/tests/unit/error-responses.test.d.ts.map +1 -0
- package/dist/tests/unit/error-responses.test.js +101 -0
- package/dist/tests/unit/error-responses.test.js.map +1 -0
- package/dist/tests/unit/executor-registry.test.d.ts +2 -0
- package/dist/tests/unit/executor-registry.test.d.ts.map +1 -0
- package/dist/tests/unit/executor-registry.test.js +390 -0
- package/dist/tests/unit/executor-registry.test.js.map +1 -0
- package/dist/tests/unit/forward-proxy.test.d.ts +2 -0
- package/dist/tests/unit/forward-proxy.test.d.ts.map +1 -0
- package/dist/tests/unit/forward-proxy.test.js +621 -0
- package/dist/tests/unit/forward-proxy.test.js.map +1 -0
- package/dist/tests/unit/gateway-features.test.d.ts +2 -0
- package/dist/tests/unit/gateway-features.test.d.ts.map +1 -0
- package/dist/tests/unit/gateway-features.test.js +753 -0
- package/dist/tests/unit/gateway-features.test.js.map +1 -0
- package/dist/tests/unit/http-executor.test.d.ts +2 -0
- package/dist/tests/unit/http-executor.test.d.ts.map +1 -0
- package/dist/tests/unit/http-executor.test.js +310 -0
- package/dist/tests/unit/http-executor.test.js.map +1 -0
- package/dist/tests/unit/mcp-bridge.test.d.ts +2 -0
- package/dist/tests/unit/mcp-bridge.test.d.ts.map +1 -0
- package/dist/tests/unit/mcp-bridge.test.js +1136 -0
- package/dist/tests/unit/mcp-bridge.test.js.map +1 -0
- package/dist/tests/unit/mcp-http-transport.test.d.ts +2 -0
- package/dist/tests/unit/mcp-http-transport.test.d.ts.map +1 -0
- package/dist/tests/unit/mcp-http-transport.test.js +899 -0
- package/dist/tests/unit/mcp-http-transport.test.js.map +1 -0
- package/dist/tests/unit/mcp-oauth.test.d.ts +2 -0
- package/dist/tests/unit/mcp-oauth.test.d.ts.map +1 -0
- package/dist/tests/unit/mcp-oauth.test.js +759 -0
- package/dist/tests/unit/mcp-oauth.test.js.map +1 -0
- package/dist/tests/unit/mcp-server.test.d.ts +15 -0
- package/dist/tests/unit/mcp-server.test.d.ts.map +1 -0
- package/dist/tests/unit/mcp-server.test.js +158 -0
- package/dist/tests/unit/mcp-server.test.js.map +1 -0
- package/dist/tests/unit/metrics.test.d.ts +2 -0
- package/dist/tests/unit/metrics.test.d.ts.map +1 -0
- package/dist/tests/unit/metrics.test.js +208 -0
- package/dist/tests/unit/metrics.test.js.map +1 -0
- package/dist/tests/unit/oauth.test.d.ts +2 -0
- package/dist/tests/unit/oauth.test.d.ts.map +1 -0
- package/dist/tests/unit/oauth.test.js +281 -0
- package/dist/tests/unit/oauth.test.js.map +1 -0
- package/dist/tests/unit/opa-circuit-breaker.test.d.ts +2 -0
- package/dist/tests/unit/opa-circuit-breaker.test.d.ts.map +1 -0
- package/dist/tests/unit/opa-circuit-breaker.test.js +297 -0
- package/dist/tests/unit/opa-circuit-breaker.test.js.map +1 -0
- package/dist/tests/unit/opa-engine.test.d.ts +2 -0
- package/dist/tests/unit/opa-engine.test.d.ts.map +1 -0
- package/dist/tests/unit/opa-engine.test.js +1813 -0
- package/dist/tests/unit/opa-engine.test.js.map +1 -0
- package/dist/tests/unit/pipeline-timing.test.d.ts +2 -0
- package/dist/tests/unit/pipeline-timing.test.d.ts.map +1 -0
- package/dist/tests/unit/pipeline-timing.test.js +528 -0
- package/dist/tests/unit/pipeline-timing.test.js.map +1 -0
- package/dist/tests/unit/policy-engine.test.d.ts +2 -0
- package/dist/tests/unit/policy-engine.test.d.ts.map +1 -0
- package/dist/tests/unit/policy-engine.test.js +1345 -0
- package/dist/tests/unit/policy-engine.test.js.map +1 -0
- package/dist/tests/unit/policy-store.test.d.ts +2 -0
- package/dist/tests/unit/policy-store.test.d.ts.map +1 -0
- package/dist/tests/unit/policy-store.test.js +60 -0
- package/dist/tests/unit/policy-store.test.js.map +1 -0
- package/dist/tests/unit/postgres-storage.test.d.ts +2 -0
- package/dist/tests/unit/postgres-storage.test.d.ts.map +1 -0
- package/dist/tests/unit/postgres-storage.test.js +614 -0
- package/dist/tests/unit/postgres-storage.test.js.map +1 -0
- package/dist/tests/unit/prompt-injection-backend.test.d.ts +2 -0
- package/dist/tests/unit/prompt-injection-backend.test.d.ts.map +1 -0
- package/dist/tests/unit/prompt-injection-backend.test.js +621 -0
- package/dist/tests/unit/prompt-injection-backend.test.js.map +1 -0
- package/dist/tests/unit/proxy-hardening.test.d.ts +2 -0
- package/dist/tests/unit/proxy-hardening.test.d.ts.map +1 -0
- package/dist/tests/unit/proxy-hardening.test.js +166 -0
- package/dist/tests/unit/proxy-hardening.test.js.map +1 -0
- package/dist/tests/unit/rate-limiter.test.d.ts +2 -0
- package/dist/tests/unit/rate-limiter.test.d.ts.map +1 -0
- package/dist/tests/unit/rate-limiter.test.js +443 -0
- package/dist/tests/unit/rate-limiter.test.js.map +1 -0
- package/dist/tests/unit/redis-storage.test.d.ts +2 -0
- package/dist/tests/unit/redis-storage.test.d.ts.map +1 -0
- package/dist/tests/unit/redis-storage.test.js +766 -0
- package/dist/tests/unit/redis-storage.test.js.map +1 -0
- package/dist/tests/unit/replay-engine.test.d.ts +2 -0
- package/dist/tests/unit/replay-engine.test.d.ts.map +1 -0
- package/dist/tests/unit/replay-engine.test.js +371 -0
- package/dist/tests/unit/replay-engine.test.js.map +1 -0
- package/dist/tests/unit/saas-routes.test.d.ts +2 -0
- package/dist/tests/unit/saas-routes.test.d.ts.map +1 -0
- package/dist/tests/unit/saas-routes.test.js +1399 -0
- package/dist/tests/unit/saas-routes.test.js.map +1 -0
- package/dist/tests/unit/session.test.d.ts +2 -0
- package/dist/tests/unit/session.test.d.ts.map +1 -0
- package/dist/tests/unit/session.test.js +532 -0
- package/dist/tests/unit/session.test.js.map +1 -0
- package/dist/tests/unit/slack-executor.test.d.ts +2 -0
- package/dist/tests/unit/slack-executor.test.d.ts.map +1 -0
- package/dist/tests/unit/slack-executor.test.js +209 -0
- package/dist/tests/unit/slack-executor.test.js.map +1 -0
- package/dist/tests/unit/storage-hardening.test.d.ts +2 -0
- package/dist/tests/unit/storage-hardening.test.d.ts.map +1 -0
- package/dist/tests/unit/storage-hardening.test.js +165 -0
- package/dist/tests/unit/storage-hardening.test.js.map +1 -0
- package/dist/tests/unit/storage.test.d.ts +2 -0
- package/dist/tests/unit/storage.test.d.ts.map +1 -0
- package/dist/tests/unit/storage.test.js +698 -0
- package/dist/tests/unit/storage.test.js.map +1 -0
- package/dist/tests/unit/text-normalizer.test.d.ts +2 -0
- package/dist/tests/unit/text-normalizer.test.d.ts.map +1 -0
- package/dist/tests/unit/text-normalizer.test.js +229 -0
- package/dist/tests/unit/text-normalizer.test.js.map +1 -0
- package/dist/tests/unit/tracing.test.d.ts +2 -0
- package/dist/tests/unit/tracing.test.d.ts.map +1 -0
- package/dist/tests/unit/tracing.test.js +611 -0
- package/dist/tests/unit/tracing.test.js.map +1 -0
- package/dist/tests/unit/trust-calculator.test.d.ts +2 -0
- package/dist/tests/unit/trust-calculator.test.d.ts.map +1 -0
- package/dist/tests/unit/trust-calculator.test.js +497 -0
- package/dist/tests/unit/trust-calculator.test.js.map +1 -0
- package/dist/tests/unit/ts-sdk.test.d.ts +2 -0
- package/dist/tests/unit/ts-sdk.test.d.ts.map +1 -0
- package/dist/tests/unit/ts-sdk.test.js +421 -0
- package/dist/tests/unit/ts-sdk.test.js.map +1 -0
- package/dist/tests/unit/usage-extractor-llm.test.d.ts +2 -0
- package/dist/tests/unit/usage-extractor-llm.test.d.ts.map +1 -0
- package/dist/tests/unit/usage-extractor-llm.test.js +139 -0
- package/dist/tests/unit/usage-extractor-llm.test.js.map +1 -0
- package/dist/tests/unit/usage-extractor.test.d.ts +2 -0
- package/dist/tests/unit/usage-extractor.test.d.ts.map +1 -0
- package/dist/tests/unit/usage-extractor.test.js +271 -0
- package/dist/tests/unit/usage-extractor.test.js.map +1 -0
- package/dist/tests/unit/user-stores.test.d.ts +2 -0
- package/dist/tests/unit/user-stores.test.d.ts.map +1 -0
- package/dist/tests/unit/user-stores.test.js +687 -0
- package/dist/tests/unit/user-stores.test.js.map +1 -0
- package/dist/tests/unit/validate.test.d.ts +2 -0
- package/dist/tests/unit/validate.test.d.ts.map +1 -0
- package/dist/tests/unit/validate.test.js +545 -0
- package/dist/tests/unit/validate.test.js.map +1 -0
- package/package.json +86 -0
- package/policy-packs/README.md +42 -0
- package/policy-packs/default.yaml +46 -0
- package/policy-packs/dev_fast.yaml +54 -0
- package/policy-packs/prod_strict.yaml +83 -0
|
@@ -0,0 +1,471 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
36
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
37
|
+
};
|
|
38
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
39
|
+
exports.createAdminRouter = createAdminRouter;
|
|
40
|
+
const express_1 = __importDefault(require("express"));
|
|
41
|
+
const crypto = __importStar(require("crypto"));
|
|
42
|
+
const fs = __importStar(require("fs"));
|
|
43
|
+
const yaml = __importStar(require("js-yaml"));
|
|
44
|
+
const crypto_1 = require("crypto");
|
|
45
|
+
const templates_1 = require("./templates");
|
|
46
|
+
// CSRF token store: token -> expiry timestamp (ms)
|
|
47
|
+
const csrfTokens = new Map();
|
|
48
|
+
const CSRF_TOKEN_TTL_MS = 60 * 60 * 1000; // 1 hour
|
|
49
|
+
const MAX_CSRF_TOKENS = 10000;
|
|
50
|
+
/** Generate a single-use CSRF token with 1-hour expiry */
|
|
51
|
+
function generateCSRFToken() {
|
|
52
|
+
// Prune expired tokens on each generation call
|
|
53
|
+
const now = Date.now();
|
|
54
|
+
for (const [token, expiry] of csrfTokens) {
|
|
55
|
+
if (expiry < now) {
|
|
56
|
+
csrfTokens.delete(token);
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
// Hard cap: if still too many tokens, evict oldest
|
|
60
|
+
if (csrfTokens.size >= MAX_CSRF_TOKENS) {
|
|
61
|
+
const firstKey = csrfTokens.keys().next().value;
|
|
62
|
+
if (firstKey)
|
|
63
|
+
csrfTokens.delete(firstKey);
|
|
64
|
+
}
|
|
65
|
+
const token = crypto.randomBytes(32).toString('hex');
|
|
66
|
+
csrfTokens.set(token, now + CSRF_TOKEN_TTL_MS);
|
|
67
|
+
return token;
|
|
68
|
+
}
|
|
69
|
+
/** Validate and consume a single-use CSRF token. Returns true if valid. */
|
|
70
|
+
function validateCSRFToken(token) {
|
|
71
|
+
if (!token)
|
|
72
|
+
return false;
|
|
73
|
+
const expiry = csrfTokens.get(token);
|
|
74
|
+
if (expiry === undefined)
|
|
75
|
+
return false;
|
|
76
|
+
// Delete the token (single-use)
|
|
77
|
+
csrfTokens.delete(token);
|
|
78
|
+
// Check if expired
|
|
79
|
+
return Date.now() < expiry;
|
|
80
|
+
}
|
|
81
|
+
function createAdminRouter(gateway, config) {
|
|
82
|
+
const router = express_1.default.Router();
|
|
83
|
+
// Parse URL-encoded form bodies for POST routes
|
|
84
|
+
router.use(express_1.default.urlencoded({ extended: true }));
|
|
85
|
+
// ---------- GET /admin -- Dashboard overview ----------
|
|
86
|
+
router.get('/', (req, res) => {
|
|
87
|
+
try {
|
|
88
|
+
const auditLogger = gateway.getAuditLogger();
|
|
89
|
+
const allEvents = auditLogger.getAllEvents();
|
|
90
|
+
const pendingApprovals = gateway.getPendingApprovals();
|
|
91
|
+
const policy = gateway.getCurrentPolicy();
|
|
92
|
+
// Gather unique workspace IDs from events
|
|
93
|
+
const workspaceIds = new Set();
|
|
94
|
+
for (const event of allEvents) {
|
|
95
|
+
if (event.workspace_id) {
|
|
96
|
+
workspaceIds.add(event.workspace_id);
|
|
97
|
+
}
|
|
98
|
+
}
|
|
99
|
+
const stats = {
|
|
100
|
+
total_requests: allEvents.filter(e => e.event_type === 'TOOL_CALL_RECEIVED').length,
|
|
101
|
+
pending_approvals: pendingApprovals.length,
|
|
102
|
+
active_workspaces: workspaceIds.size,
|
|
103
|
+
policy_rules: policy.rules ? policy.rules.length : 0,
|
|
104
|
+
recent_events: allEvents.slice(-20).reverse(),
|
|
105
|
+
};
|
|
106
|
+
res.send((0, templates_1.dashboardTemplate)(stats));
|
|
107
|
+
}
|
|
108
|
+
catch (err) {
|
|
109
|
+
const message = err instanceof Error ? err.message : 'Unknown error';
|
|
110
|
+
res.status(500).send((0, templates_1.layoutTemplate)('Error', 'dashboard', `<div class="alert alert-error">Failed to load dashboard: ${(0, templates_1.escapeHtml)(message)}</div>`));
|
|
111
|
+
}
|
|
112
|
+
});
|
|
113
|
+
// ---------- GET /admin/approvals -- Pending approvals list ----------
|
|
114
|
+
router.get('/approvals', (req, res) => {
|
|
115
|
+
try {
|
|
116
|
+
const approvals = gateway.getPendingApprovals();
|
|
117
|
+
const csrfToken = generateCSRFToken();
|
|
118
|
+
res.send((0, templates_1.approvalsTemplate)(approvals, csrfToken));
|
|
119
|
+
}
|
|
120
|
+
catch (err) {
|
|
121
|
+
const message = err instanceof Error ? err.message : 'Unknown error';
|
|
122
|
+
res.status(500).send((0, templates_1.layoutTemplate)('Error', 'approvals', `<div class="alert alert-error">Failed to load approvals: ${(0, templates_1.escapeHtml)(message)}</div>`));
|
|
123
|
+
}
|
|
124
|
+
});
|
|
125
|
+
// ---------- POST /admin/approvals/:id/approve -- Approve an approval ----------
|
|
126
|
+
router.post('/approvals/:id/approve', async (req, res) => {
|
|
127
|
+
if (!validateCSRFToken(req.body._csrf)) {
|
|
128
|
+
res.status(403).send('Invalid or missing CSRF token');
|
|
129
|
+
return;
|
|
130
|
+
}
|
|
131
|
+
const approvalId = req.params.id;
|
|
132
|
+
const approvalManager = gateway.getApprovalManager();
|
|
133
|
+
try {
|
|
134
|
+
await approvalManager.resolveById(approvalId, 'admin', true);
|
|
135
|
+
}
|
|
136
|
+
catch {
|
|
137
|
+
// Approval may have expired or already been resolved
|
|
138
|
+
}
|
|
139
|
+
res.redirect('/admin/approvals');
|
|
140
|
+
});
|
|
141
|
+
// ---------- POST /admin/approvals/:id/deny -- Deny an approval ----------
|
|
142
|
+
router.post('/approvals/:id/deny', async (req, res) => {
|
|
143
|
+
if (!validateCSRFToken(req.body._csrf)) {
|
|
144
|
+
res.status(403).send('Invalid or missing CSRF token');
|
|
145
|
+
return;
|
|
146
|
+
}
|
|
147
|
+
const approvalId = req.params.id;
|
|
148
|
+
const approvalManager = gateway.getApprovalManager();
|
|
149
|
+
try {
|
|
150
|
+
await approvalManager.resolveById(approvalId, 'admin', false, 'Denied via admin panel');
|
|
151
|
+
}
|
|
152
|
+
catch {
|
|
153
|
+
// Approval may have expired or already been resolved
|
|
154
|
+
}
|
|
155
|
+
res.redirect('/admin/approvals');
|
|
156
|
+
});
|
|
157
|
+
// ---------- GET /admin/policies -- Policy viewer + YAML editor ----------
|
|
158
|
+
router.get('/policies', (req, res) => {
|
|
159
|
+
try {
|
|
160
|
+
const policy = gateway.getCurrentPolicy();
|
|
161
|
+
const csrfToken = generateCSRFToken();
|
|
162
|
+
// Read raw YAML from disk to pre-fill the editor
|
|
163
|
+
let policyYaml = '';
|
|
164
|
+
try {
|
|
165
|
+
policyYaml = fs.readFileSync(gateway.getPolicyPackPath(), 'utf-8');
|
|
166
|
+
}
|
|
167
|
+
catch {
|
|
168
|
+
// If file can't be read, editor will be empty
|
|
169
|
+
}
|
|
170
|
+
// Handle success/error flash from POST redirect
|
|
171
|
+
const applied = typeof req.query.applied === 'string' ? req.query.applied : undefined;
|
|
172
|
+
const msg = typeof req.query.msg === 'string' ? req.query.msg : undefined;
|
|
173
|
+
const reloaded = typeof req.query.reloaded === 'string' ? req.query.reloaded : undefined;
|
|
174
|
+
const applyResult = applied !== undefined
|
|
175
|
+
? { success: applied === '1', message: msg || (applied === '1' ? 'Policy applied successfully' : 'Failed to apply policy') }
|
|
176
|
+
: reloaded !== undefined
|
|
177
|
+
? { success: reloaded === '1', message: msg || (reloaded === '1' ? 'Policy reloaded from disk' : 'Failed to reload policy') }
|
|
178
|
+
: undefined;
|
|
179
|
+
res.send((0, templates_1.policiesTemplate)(policy, undefined, csrfToken, policyYaml, applyResult));
|
|
180
|
+
}
|
|
181
|
+
catch (err) {
|
|
182
|
+
const message = err instanceof Error ? err.message : 'Unknown error';
|
|
183
|
+
res.status(500).send((0, templates_1.layoutTemplate)('Error', 'policies', `<div class="alert alert-error">Failed to load policies: ${(0, templates_1.escapeHtml)(message)}</div>`));
|
|
184
|
+
}
|
|
185
|
+
});
|
|
186
|
+
// ---------- POST /admin/policies/apply -- Save YAML to disk & hot-reload ----------
|
|
187
|
+
router.post('/policies/apply', (req, res) => {
|
|
188
|
+
if (!validateCSRFToken(req.body._csrf)) {
|
|
189
|
+
res.status(403).send('Invalid or missing CSRF token');
|
|
190
|
+
return;
|
|
191
|
+
}
|
|
192
|
+
const policyYamlText = req.body.policy_yaml;
|
|
193
|
+
// Validate: not empty
|
|
194
|
+
if (!policyYamlText || typeof policyYamlText !== 'string' || policyYamlText.trim().length === 0) {
|
|
195
|
+
res.redirect('/admin/policies?applied=0&msg=' + encodeURIComponent('Policy YAML cannot be empty'));
|
|
196
|
+
return;
|
|
197
|
+
}
|
|
198
|
+
// Validate: parseable YAML
|
|
199
|
+
let parsed;
|
|
200
|
+
try {
|
|
201
|
+
parsed = yaml.load(policyYamlText);
|
|
202
|
+
}
|
|
203
|
+
catch (err) {
|
|
204
|
+
const message = err instanceof Error ? err.message : 'Invalid YAML';
|
|
205
|
+
res.redirect('/admin/policies?applied=0&msg=' + encodeURIComponent('Invalid YAML: ' + message));
|
|
206
|
+
return;
|
|
207
|
+
}
|
|
208
|
+
// Validate: valid policy structure
|
|
209
|
+
const validation = gateway.validatePolicy(parsed);
|
|
210
|
+
if (!validation.valid) {
|
|
211
|
+
res.redirect('/admin/policies?applied=0&msg=' + encodeURIComponent('Validation errors: ' + validation.errors.join('; ')));
|
|
212
|
+
return;
|
|
213
|
+
}
|
|
214
|
+
// Write to disk
|
|
215
|
+
try {
|
|
216
|
+
fs.writeFileSync(gateway.getPolicyPackPath(), policyYamlText, 'utf-8');
|
|
217
|
+
}
|
|
218
|
+
catch (err) {
|
|
219
|
+
const message = err instanceof Error ? err.message : 'Write failed';
|
|
220
|
+
res.redirect('/admin/policies?applied=0&msg=' + encodeURIComponent('Failed to write file: ' + message));
|
|
221
|
+
return;
|
|
222
|
+
}
|
|
223
|
+
// Hot-reload
|
|
224
|
+
const result = gateway.reloadPolicy();
|
|
225
|
+
if (result.success) {
|
|
226
|
+
res.redirect('/admin/policies?applied=1&msg=' + encodeURIComponent(`Policy reloaded successfully (${result.ruleCount} rules active)`));
|
|
227
|
+
}
|
|
228
|
+
else {
|
|
229
|
+
res.redirect('/admin/policies?applied=0&msg=' + encodeURIComponent('Reload failed: ' + (result.error || 'unknown error')));
|
|
230
|
+
}
|
|
231
|
+
});
|
|
232
|
+
// ---------- POST /admin/policies/reload -- Hot-reload policy from disk ----------
|
|
233
|
+
router.post('/policies/reload', (req, res) => {
|
|
234
|
+
if (!validateCSRFToken(req.body._csrf)) {
|
|
235
|
+
res.status(403).send('Invalid or missing CSRF token');
|
|
236
|
+
return;
|
|
237
|
+
}
|
|
238
|
+
const result = gateway.reloadPolicy();
|
|
239
|
+
if (result.success) {
|
|
240
|
+
res.redirect('/admin/policies?reloaded=1&msg=' + encodeURIComponent(`Policy reloaded from disk (${result.ruleCount} rules active)`));
|
|
241
|
+
}
|
|
242
|
+
else {
|
|
243
|
+
res.redirect('/admin/policies?reloaded=0&msg=' + encodeURIComponent('Reload failed: ' + (result.error || 'unknown error')));
|
|
244
|
+
}
|
|
245
|
+
});
|
|
246
|
+
// ---------- POST /admin/policies/validate -- Validate a policy ----------
|
|
247
|
+
router.post('/policies/validate', (req, res) => {
|
|
248
|
+
if (!validateCSRFToken(req.body._csrf)) {
|
|
249
|
+
res.status(403).send('Invalid or missing CSRF token');
|
|
250
|
+
return;
|
|
251
|
+
}
|
|
252
|
+
const policy = gateway.getCurrentPolicy();
|
|
253
|
+
const csrfToken = generateCSRFToken();
|
|
254
|
+
let validationResult;
|
|
255
|
+
try {
|
|
256
|
+
const policyJson = req.body.policy_json;
|
|
257
|
+
const parsed = JSON.parse(policyJson);
|
|
258
|
+
validationResult = gateway.validatePolicy(parsed);
|
|
259
|
+
}
|
|
260
|
+
catch (err) {
|
|
261
|
+
const message = err instanceof Error ? err.message : 'Invalid JSON';
|
|
262
|
+
validationResult = { valid: false, errors: [message] };
|
|
263
|
+
}
|
|
264
|
+
// Read current YAML for the editor
|
|
265
|
+
let policyYaml = '';
|
|
266
|
+
try {
|
|
267
|
+
policyYaml = fs.readFileSync(gateway.getPolicyPackPath(), 'utf-8');
|
|
268
|
+
}
|
|
269
|
+
catch {
|
|
270
|
+
// If file can't be read, editor will be empty
|
|
271
|
+
}
|
|
272
|
+
res.send((0, templates_1.policiesTemplate)(policy, validationResult, csrfToken, policyYaml));
|
|
273
|
+
});
|
|
274
|
+
// ---------- GET /admin/budgets -- Budget overview ----------
|
|
275
|
+
router.get('/budgets', (req, res) => {
|
|
276
|
+
try {
|
|
277
|
+
const budgetManager = gateway.getBudgetManager();
|
|
278
|
+
const budgetConfig = budgetManager.getConfig();
|
|
279
|
+
const spending = budgetManager.getSpendingSummary();
|
|
280
|
+
const budgets = [];
|
|
281
|
+
// Show configured budget limits with actual spending
|
|
282
|
+
budgets.push({
|
|
283
|
+
key: 'task_default',
|
|
284
|
+
type: 'task',
|
|
285
|
+
label: 'Task Budget (default)',
|
|
286
|
+
spent: spending.task_total,
|
|
287
|
+
limit: budgetConfig.task_budget_usd,
|
|
288
|
+
});
|
|
289
|
+
if (budgetConfig.user_daily_budget_usd !== undefined) {
|
|
290
|
+
budgets.push({
|
|
291
|
+
key: 'user_daily',
|
|
292
|
+
type: 'user_daily',
|
|
293
|
+
label: 'User Daily Budget',
|
|
294
|
+
spent: spending.user_daily_total,
|
|
295
|
+
limit: budgetConfig.user_daily_budget_usd,
|
|
296
|
+
});
|
|
297
|
+
}
|
|
298
|
+
if (budgetConfig.user_monthly_budget_usd !== undefined) {
|
|
299
|
+
budgets.push({
|
|
300
|
+
key: 'user_monthly',
|
|
301
|
+
type: 'user_monthly',
|
|
302
|
+
label: 'User Monthly Budget',
|
|
303
|
+
spent: spending.user_monthly_total,
|
|
304
|
+
limit: budgetConfig.user_monthly_budget_usd,
|
|
305
|
+
});
|
|
306
|
+
}
|
|
307
|
+
if (budgetConfig.workspace_daily_budget_usd !== undefined) {
|
|
308
|
+
budgets.push({
|
|
309
|
+
key: 'workspace_daily',
|
|
310
|
+
type: 'workspace_daily',
|
|
311
|
+
label: 'Workspace Daily Budget',
|
|
312
|
+
spent: spending.workspace_daily_total,
|
|
313
|
+
limit: budgetConfig.workspace_daily_budget_usd,
|
|
314
|
+
});
|
|
315
|
+
}
|
|
316
|
+
if (budgetConfig.workspace_monthly_budget_usd !== undefined) {
|
|
317
|
+
budgets.push({
|
|
318
|
+
key: 'workspace_monthly',
|
|
319
|
+
type: 'workspace_monthly',
|
|
320
|
+
label: 'Workspace Monthly Budget',
|
|
321
|
+
spent: spending.workspace_monthly_total,
|
|
322
|
+
limit: budgetConfig.workspace_monthly_budget_usd,
|
|
323
|
+
});
|
|
324
|
+
}
|
|
325
|
+
// Build cost summary from audit events
|
|
326
|
+
const auditLogger = gateway.getAuditLogger();
|
|
327
|
+
const allEvents = auditLogger.getAllEvents();
|
|
328
|
+
let estimatedTotal = 0;
|
|
329
|
+
let actualTotal = 0;
|
|
330
|
+
const toolCosts = new Map();
|
|
331
|
+
for (const event of allEvents) {
|
|
332
|
+
if (event.event_type === 'BUDGET_CHECKED' && event.metadata) {
|
|
333
|
+
const estimated = typeof event.metadata.estimated_cost_usd === 'number' ? event.metadata.estimated_cost_usd : 0;
|
|
334
|
+
estimatedTotal += estimated;
|
|
335
|
+
}
|
|
336
|
+
if (event.event_type === 'USAGE_REPORTED' && event.metadata) {
|
|
337
|
+
const actual = typeof event.metadata.actual_cost_usd === 'number' ? event.metadata.actual_cost_usd : 0;
|
|
338
|
+
actualTotal += actual;
|
|
339
|
+
}
|
|
340
|
+
if (event.event_type === 'TOOL_EXECUTED') {
|
|
341
|
+
const toolName = event.tool_name || 'unknown';
|
|
342
|
+
toolCosts.set(toolName, (toolCosts.get(toolName) || 0) + 1);
|
|
343
|
+
}
|
|
344
|
+
}
|
|
345
|
+
const topTools = Array.from(toolCosts.entries())
|
|
346
|
+
.map(([tool_name, count]) => ({ tool_name, cost: count * 0.001 })) // approximate from count
|
|
347
|
+
.sort((a, b) => b.cost - a.cost)
|
|
348
|
+
.slice(0, 5);
|
|
349
|
+
const costSummary = {
|
|
350
|
+
estimated_total: estimatedTotal || spending.task_total,
|
|
351
|
+
actual_total: actualTotal,
|
|
352
|
+
top_tools: topTools,
|
|
353
|
+
};
|
|
354
|
+
res.send((0, templates_1.budgetsTemplate)(budgets, costSummary));
|
|
355
|
+
}
|
|
356
|
+
catch (err) {
|
|
357
|
+
const message = err instanceof Error ? err.message : 'Unknown error';
|
|
358
|
+
res.status(500).send((0, templates_1.layoutTemplate)('Error', 'budgets', `<div class="alert alert-error">Failed to load budgets: ${(0, templates_1.escapeHtml)(message)}</div>`));
|
|
359
|
+
}
|
|
360
|
+
});
|
|
361
|
+
// ---------- GET /admin/traces -- Trace explorer ----------
|
|
362
|
+
router.get('/traces', (req, res) => {
|
|
363
|
+
try {
|
|
364
|
+
const taskIdQuery = typeof req.query.task_id === 'string' ? req.query.task_id : undefined;
|
|
365
|
+
// If a task_id is provided via query, redirect to detail page
|
|
366
|
+
if (taskIdQuery) {
|
|
367
|
+
res.redirect(`/admin/traces/${taskIdQuery}`);
|
|
368
|
+
return;
|
|
369
|
+
}
|
|
370
|
+
const page = Math.max(1, parseInt(req.query.page) || 1);
|
|
371
|
+
const limit = Math.min(Math.max(1, parseInt(req.query.limit) || 50), 200);
|
|
372
|
+
// Build a summary of recent task IDs from audit events
|
|
373
|
+
const auditLogger = gateway.getAuditLogger();
|
|
374
|
+
const allEvents = auditLogger.getAllEvents();
|
|
375
|
+
const taskMap = new Map();
|
|
376
|
+
for (const event of allEvents) {
|
|
377
|
+
const existing = taskMap.get(event.task_id);
|
|
378
|
+
if (existing) {
|
|
379
|
+
existing.event_count++;
|
|
380
|
+
}
|
|
381
|
+
else {
|
|
382
|
+
taskMap.set(event.task_id, { event_count: 1, first_seen: event.timestamp });
|
|
383
|
+
}
|
|
384
|
+
}
|
|
385
|
+
const allTraces = Array.from(taskMap.entries())
|
|
386
|
+
.map(([task_id, info]) => ({ task_id, ...info }))
|
|
387
|
+
.reverse();
|
|
388
|
+
const total = allTraces.length;
|
|
389
|
+
const totalPages = Math.max(1, Math.ceil(total / limit));
|
|
390
|
+
const offset = (page - 1) * limit;
|
|
391
|
+
const traces = allTraces.slice(offset, offset + limit);
|
|
392
|
+
res.send((0, templates_1.traceListTemplate)(traces, { page, limit, total, totalPages }));
|
|
393
|
+
}
|
|
394
|
+
catch (err) {
|
|
395
|
+
const message = err instanceof Error ? err.message : 'Unknown error';
|
|
396
|
+
res.status(500).send((0, templates_1.layoutTemplate)('Error', 'traces', `<div class="alert alert-error">Failed to load traces: ${(0, templates_1.escapeHtml)(message)}</div>`));
|
|
397
|
+
}
|
|
398
|
+
});
|
|
399
|
+
// ---------- GET /admin/traces/:task_id -- Trace detail ----------
|
|
400
|
+
router.get('/traces/:task_id', (req, res) => {
|
|
401
|
+
try {
|
|
402
|
+
const taskId = req.params.task_id;
|
|
403
|
+
const events = gateway.getTaskTrace(taskId);
|
|
404
|
+
res.send((0, templates_1.traceDetailTemplate)(taskId, events));
|
|
405
|
+
}
|
|
406
|
+
catch (err) {
|
|
407
|
+
const message = err instanceof Error ? err.message : 'Unknown error';
|
|
408
|
+
res.status(500).send((0, templates_1.layoutTemplate)('Error', 'traces', `<div class="alert alert-error">Failed to load trace detail: ${(0, templates_1.escapeHtml)(message)}</div>`));
|
|
409
|
+
}
|
|
410
|
+
});
|
|
411
|
+
// ---------- GET /admin/api-keys -- API key management ----------
|
|
412
|
+
router.get('/api-keys', (req, res) => {
|
|
413
|
+
try {
|
|
414
|
+
const keys = getApiKeysFromConfig(config);
|
|
415
|
+
const csrfToken = generateCSRFToken();
|
|
416
|
+
const createdKey = typeof req.query.created === 'string' ? req.query.created : undefined;
|
|
417
|
+
res.send((0, templates_1.apiKeysTemplate)(keys, csrfToken, createdKey));
|
|
418
|
+
}
|
|
419
|
+
catch (err) {
|
|
420
|
+
const message = err instanceof Error ? err.message : 'Unknown error';
|
|
421
|
+
res.status(500).send((0, templates_1.layoutTemplate)('Error', 'api-keys', `<div class="alert alert-error">Failed to load API keys: ${(0, templates_1.escapeHtml)(message)}</div>`));
|
|
422
|
+
}
|
|
423
|
+
});
|
|
424
|
+
// ---------- POST /admin/api-keys -- Create new API key ----------
|
|
425
|
+
router.post('/api-keys', (req, res) => {
|
|
426
|
+
if (!validateCSRFToken(req.body._csrf)) {
|
|
427
|
+
res.status(403).send('Invalid or missing CSRF token');
|
|
428
|
+
return;
|
|
429
|
+
}
|
|
430
|
+
const workspaceId = req.body.workspace_id || 'ws_default';
|
|
431
|
+
const description = req.body.description || '';
|
|
432
|
+
const newKey = `key-${(0, crypto_1.randomUUID)().replace(/-/g, '').substring(0, 16)}`;
|
|
433
|
+
config.auth.api_keys[newKey] = {
|
|
434
|
+
workspace_id: workspaceId,
|
|
435
|
+
description: description,
|
|
436
|
+
created_at: new Date().toISOString(),
|
|
437
|
+
};
|
|
438
|
+
res.redirect('/admin/api-keys?created=' + encodeURIComponent(newKey));
|
|
439
|
+
});
|
|
440
|
+
// ---------- POST /admin/api-keys/:key/revoke -- Revoke an API key ----------
|
|
441
|
+
router.post('/api-keys/:key/revoke', (req, res) => {
|
|
442
|
+
if (!validateCSRFToken(req.body._csrf)) {
|
|
443
|
+
res.status(403).send('Invalid or missing CSRF token');
|
|
444
|
+
return;
|
|
445
|
+
}
|
|
446
|
+
const key = req.params.key;
|
|
447
|
+
if (config.auth.api_keys[key]) {
|
|
448
|
+
config.auth.api_keys[key].revoked = true;
|
|
449
|
+
}
|
|
450
|
+
res.redirect('/admin/api-keys');
|
|
451
|
+
});
|
|
452
|
+
return router;
|
|
453
|
+
}
|
|
454
|
+
/** Extract API key info from the gateway config */
|
|
455
|
+
function getApiKeysFromConfig(config) {
|
|
456
|
+
const keys = [];
|
|
457
|
+
for (const [key, keyConfig] of Object.entries(config.auth.api_keys)) {
|
|
458
|
+
keys.push({
|
|
459
|
+
key,
|
|
460
|
+
workspace_id: keyConfig.workspace_id,
|
|
461
|
+
description: keyConfig.description,
|
|
462
|
+
roles: keyConfig.roles,
|
|
463
|
+
created_at: keyConfig.created_at,
|
|
464
|
+
last_used_at: keyConfig.last_used_at,
|
|
465
|
+
revoked: keyConfig.revoked,
|
|
466
|
+
expires_at: keyConfig.expires_at,
|
|
467
|
+
});
|
|
468
|
+
}
|
|
469
|
+
return keys;
|
|
470
|
+
}
|
|
471
|
+
//# sourceMappingURL=routes.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/admin/routes.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+DA,8CAyaC;AAxeD,sDAA8B;AAC9B,+CAAiC;AACjC,uCAAyB;AACzB,8CAAgC;AAChC,mCAAoC;AAGpC,2CAcqB;AAErB,mDAAmD;AACnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE7C,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AACnD,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,0DAA0D;AAC1D,SAAS,iBAAiB;IACxB,+CAA+C;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACjB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,IAAI,UAAU,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAChD,IAAI,QAAQ;YAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,iBAAiB,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEvC,gCAAgC;IAChC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEzB,mBAAmB;IACnB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;AAC7B,CAAC;AAED,SAAgB,iBAAiB,CAAC,OAAgB,EAAE,MAAqB;IACvE,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAEhC,gDAAgD;IAChD,MAAM,CAAC,GAAG,CAAC,iBAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnD,yDAAyD;IACzD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAE1C,0CAA0C;YAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;YACvC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBAC9B,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;oBACvB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAmB;gBAC5B,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,oBAAoB,CAAC,CAAC,MAAM;gBACnF,iBAAiB,EAAE,gBAAgB,CAAC,MAAM;gBAC1C,iBAAiB,EAAE,YAAY,CAAC,IAAI;gBACpC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpD,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;aAC9C,CAAC;YAEF,GAAG,CAAC,IAAI,CAAC,IAAA,6BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,0BAAc,EAAC,OAAO,EAAE,WAAW,EACtD,4DAA4D,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,IAAA,6BAAiB,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,0BAAc,EAAC,OAAO,EAAE,WAAW,EACtD,4DAA4D,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;QAED,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAErD,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;QAED,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;YAEtC,iDAAiD;YACjD,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;YAED,gDAAgD;YAChD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,MAAM,WAAW,GAAG,OAAO,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,KAAK,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,wBAAwB,CAAC,EAAE;gBAC5H,CAAC,CAAC,QAAQ,KAAK,SAAS;oBACtB,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,KAAK,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,yBAAyB,CAAC,EAAE;oBAC7H,CAAC,CAAC,SAAS,CAAC;YAEhB,GAAG,CAAC,IAAI,CAAC,IAAA,4BAAgB,EAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,0BAAc,EAAC,OAAO,EAAE,UAAU,EACrD,2DAA2D,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qFAAqF;IACrF,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAE5C,sBAAsB;QACtB,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChG,GAAG,CAAC,QAAQ,CAAC,gCAAgC,GAAG,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACpE,GAAG,CAAC,QAAQ,CAAC,gCAAgC,GAAG,kBAAkB,CAAC,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC;YAChG,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,GAAG,CAAC,QAAQ,CAAC,gCAAgC,GAAG,kBAAkB,CAAC,qBAAqB,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1H,OAAO;QACT,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACpE,GAAG,CAAC,QAAQ,CAAC,gCAAgC,GAAG,kBAAkB,CAAC,wBAAwB,GAAG,OAAO,CAAC,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QAED,aAAa;QACb,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,gCAAgC,GAAG,kBAAkB,CAAC,iCAAiC,MAAM,CAAC,SAAS,gBAAgB,CAAC,CAAC,CAAC;QACzI,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,QAAQ,CAAC,gCAAgC,GAAG,kBAAkB,CAAC,iBAAiB,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mFAAmF;IACnF,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,QAAQ,CAAC,iCAAiC,GAAG,kBAAkB,CAAC,8BAA8B,MAAM,CAAC,SAAS,gBAAgB,CAAC,CAAC,CAAC;QACvI,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,QAAQ,CAAC,iCAAiC,GAAG,kBAAkB,CAAC,iBAAiB,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,IAAI,gBAAsD,CAAC;QAE3D,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtC,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACpE,gBAAgB,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,CAAC;QAED,mCAAmC;QACnC,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,IAAA,4BAAgB,EAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,kBAAkB,EAAE,CAAC;YACpD,MAAM,OAAO,GAAiB,EAAE,CAAC;YAEjC,qDAAqD;YACrD,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,EAAE,cAAc;gBACnB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,uBAAuB;gBAC9B,KAAK,EAAE,QAAQ,CAAC,UAAU;gBAC1B,KAAK,EAAE,YAAY,CAAC,eAAe;aACpC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG,EAAE,YAAY;oBACjB,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,mBAAmB;oBAC1B,KAAK,EAAE,QAAQ,CAAC,gBAAgB;oBAChC,KAAK,EAAE,YAAY,CAAC,qBAAqB;iBAC1C,CAAC,CAAC;YACL,CAAC;YAED,IAAI,YAAY,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG,EAAE,cAAc;oBACnB,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,qBAAqB;oBAC5B,KAAK,EAAE,QAAQ,CAAC,kBAAkB;oBAClC,KAAK,EAAE,YAAY,CAAC,uBAAuB;iBAC5C,CAAC,CAAC;YACL,CAAC;YAED,IAAI,YAAY,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;gBAC1D,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG,EAAE,iBAAiB;oBACtB,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,wBAAwB;oBAC/B,KAAK,EAAE,QAAQ,CAAC,qBAAqB;oBACrC,KAAK,EAAE,YAAY,CAAC,0BAA0B;iBAC/C,CAAC,CAAC;YACL,CAAC;YAED,IAAI,YAAY,CAAC,4BAA4B,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG,EAAE,mBAAmB;oBACxB,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,0BAA0B;oBACjC,KAAK,EAAE,QAAQ,CAAC,uBAAuB;oBACvC,KAAK,EAAE,YAAY,CAAC,4BAA4B;iBACjD,CAAC,CAAC;YACL,CAAC;YAED,uCAAuC;YACvC,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;YAE5C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBAC9B,IAAI,KAAK,CAAC,UAAU,KAAK,gBAAgB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC5D,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChH,cAAc,IAAI,SAAS,CAAC;gBAC9B,CAAC;gBACD,IAAI,KAAK,CAAC,UAAU,KAAK,gBAAgB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC5D,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;oBACvG,WAAW,IAAI,MAAM,CAAC;gBACxB,CAAC;gBACD,IAAI,KAAK,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;oBACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;oBAC9C,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;iBAC7C,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,yBAAyB;iBAC3F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;iBAC/B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAEf,MAAM,WAAW,GAAgB;gBAC/B,eAAe,EAAE,cAAc,IAAI,QAAQ,CAAC,UAAU;gBACtD,YAAY,EAAE,WAAW;gBACzB,SAAS,EAAE,QAAQ;aACpB,CAAC;YAEF,GAAG,CAAC,IAAI,CAAC,IAAA,2BAAe,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,0BAAc,EAAC,OAAO,EAAE,SAAS,EACpD,0DAA0D,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAE1F,8DAA8D;YAC9D,IAAI,WAAW,EAAE,CAAC;gBAChB,GAAG,CAAC,QAAQ,CAAC,iBAAiB,WAAW,EAAE,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAEpF,uDAAuD;YACvD,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;YAE7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuD,CAAC;YAC/E,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5C,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;iBAC5C,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;iBAChD,OAAO,EAAE,CAAC;YAEb,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;YAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;YAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;YAEvD,GAAG,CAAC,IAAI,CAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,0BAAc,EAAC,OAAO,EAAE,QAAQ,EACnD,yDAAyD,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,0BAAc,EAAC,OAAO,EAAE,QAAQ,EACnD,+DAA+D,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,GAAG,CAAC,IAAI,CAAC,IAAA,2BAAe,EAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,0BAAc,EAAC,OAAO,EAAE,UAAU,EACrD,2DAA2D,IAAA,sBAAU,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC;QAC1D,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAE/C,MAAM,MAAM,GAAG,OAAO,IAAA,mBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAExE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG;YAC7B,YAAY,EAAE,WAAW;YACzB,WAAW,EAAE,WAAW;YACxB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QAEF,GAAG,CAAC,QAAQ,CAAC,0BAA0B,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QAE3B,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;QAC3C,CAAC;QAED,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mDAAmD;AACnD,SAAS,oBAAoB,CAAC,MAAqB;IACjD,MAAM,IAAI,GAAiB,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC;YACR,GAAG;YACH,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;SACjC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
export interface DashboardStats {
|
|
2
|
+
total_requests: number;
|
|
3
|
+
pending_approvals: number;
|
|
4
|
+
active_workspaces: number;
|
|
5
|
+
policy_rules: number;
|
|
6
|
+
recent_events: any[];
|
|
7
|
+
}
|
|
8
|
+
export interface BudgetInfo {
|
|
9
|
+
key: string;
|
|
10
|
+
type: 'task' | 'user_daily' | 'user_monthly' | 'workspace_daily' | 'workspace_monthly';
|
|
11
|
+
label: string;
|
|
12
|
+
spent: number;
|
|
13
|
+
limit: number | undefined;
|
|
14
|
+
}
|
|
15
|
+
export interface ApiKeyInfo {
|
|
16
|
+
key: string;
|
|
17
|
+
workspace_id: string;
|
|
18
|
+
description?: string;
|
|
19
|
+
roles?: string[];
|
|
20
|
+
created_at?: string;
|
|
21
|
+
last_used_at?: string;
|
|
22
|
+
revoked?: boolean;
|
|
23
|
+
expires_at?: string;
|
|
24
|
+
}
|
|
25
|
+
export declare function escapeHtml(str: string): string;
|
|
26
|
+
export declare function layoutTemplate(title: string, activeNav: string, content: string): string;
|
|
27
|
+
export declare function dashboardTemplate(stats: DashboardStats): string;
|
|
28
|
+
export declare function approvalsTemplate(approvals: any[], csrfToken?: string): string;
|
|
29
|
+
export declare function policiesTemplate(policy: any, validationResult?: any, csrfToken?: string, policyYaml?: string, applyResult?: {
|
|
30
|
+
success: boolean;
|
|
31
|
+
message: string;
|
|
32
|
+
}): string;
|
|
33
|
+
export interface CostSummary {
|
|
34
|
+
estimated_total: number;
|
|
35
|
+
actual_total: number;
|
|
36
|
+
top_tools: {
|
|
37
|
+
tool_name: string;
|
|
38
|
+
cost: number;
|
|
39
|
+
}[];
|
|
40
|
+
}
|
|
41
|
+
export declare function budgetsTemplate(budgets: BudgetInfo[], costSummary?: CostSummary): string;
|
|
42
|
+
export interface PaginationInfo {
|
|
43
|
+
page: number;
|
|
44
|
+
limit: number;
|
|
45
|
+
total: number;
|
|
46
|
+
totalPages: number;
|
|
47
|
+
}
|
|
48
|
+
export declare function traceListTemplate(traces: any[], pagination?: PaginationInfo): string;
|
|
49
|
+
export declare function traceDetailTemplate(taskId: string, events: any[]): string;
|
|
50
|
+
export declare function apiKeysTemplate(keys: ApiKeyInfo[], csrfToken?: string, createdKey?: string): string;
|
|
51
|
+
//# sourceMappingURL=templates.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/admin/templates.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,GAAG,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,cAAc,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;IACvF,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO9C;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CA2DxF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CA2D/D;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CA4D9E;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,gBAAgB,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAgF1K;AAED,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAClD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,WAAW,CAAC,EAAE,WAAW,GAAG,MAAM,CAkExF;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAiBD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,UAAU,CAAC,EAAE,cAAc,GAAG,MAAM,CAuCpF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAgDzE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAkFnG"}
|