@agent-native/core 0.92.11 → 0.93.0

package/dist/integrations/adapters/microsoft-teams.js

@@ -0,0 +1,295 @@
+import { getHeader, readRawBody } from "h3";
+import { resolveSecret } from "../../server/credential-provider.js";
+const BOT_FRAMEWORK_SCOPE = "https://api.botframework.com/.default";
+const TOKEN_REFRESH_SKEW_MS = 5 * 60 * 1_000;
+const accessTokenCache = new Map();
+export function microsoftTeamsAdapter() {
+    return {
+        platform: "microsoft-teams",
+        label: "Microsoft Teams",
+        capabilities: {
+            replyText: true,
+            proactiveMessages: false,
+            nativeThreads: true,
+            contextualReplies: true,
+            deferredWebhookResponse: false,
+            interactionOnly: false,
+        },
+        getRequiredEnvKeys() {
+            return [
+                {
+                    key: "MICROSOFT_TEAMS_APP_ID",
+                    label: "Microsoft Bot App ID",
+                    required: true,
+                    helpText: "The Microsoft App ID associated with the Azure Bot resource.",
+                },
+                {
+                    key: "MICROSOFT_TEAMS_APP_PASSWORD",
+                    label: "Microsoft Bot Client Secret",
+                    required: true,
+                    helpText: "A current client secret for the bot app registration. Store the secret value, not its secret ID.",
+                },
+                {
+                    key: "MICROSOFT_TEAMS_APP_TENANT_ID",
+                    label: "Microsoft Bot Tenant ID",
+                    required: false,
+                    helpText: "Required for single-tenant bot registrations. Multi-tenant Bot Framework apps use botframework.com.",
+                },
+                {
+                    key: "MICROSOFT_TEAMS_ALLOWED_TENANT_IDS",
+                    label: "Allowed Microsoft Teams Tenant IDs",
+                    required: true,
+                    helpText: "Comma-separated tenant IDs allowed to invoke this deployment. Production webhooks fail closed when unset.",
+                },
+            ];
+        },
+        async handleVerification(event) {
+            await readRawBodyCached(event);
+            return { handled: false };
+        },
+        async verifyWebhook(event) {
+            const appId = await resolveSecret("MICROSOFT_TEAMS_APP_ID");
+            const appPassword = await resolveSecret("MICROSOFT_TEAMS_APP_PASSWORD");
+            const authorization = getHeader(event, "authorization") ?? "";
+            const activity = parseActivity(await readRawBodyCached(event));
+            if (!appId ||
+                !appPassword ||
+                !authorization.startsWith("Bearer ") ||
+                !activity ||
+                activity.channelId !== "msteams" ||
+                !readString(activity.serviceUrl)) {
+                return false;
+            }
+            try {
+                const { JwtTokenValidation, SimpleCredentialProvider } = await import("botframework-connector");
+                await JwtTokenValidation.authenticateRequest(activity, authorization, new SimpleCredentialProvider(appId, appPassword), "");
+            }
+            catch {
+                return false;
+            }
+            const tenantId = teamsTenantId(activity);
+            return isAllowedTenant(tenantId, await resolveSecret("MICROSOFT_TEAMS_ALLOWED_TENANT_IDS"));
+        },
+        async parseIncomingMessage(event) {
+            const activity = parseActivity(await readRawBodyCached(event));
+            if (!activity ||
+                activity.channelId !== "msteams" ||
+                activity.type !== "message") {
+                return null;
+            }
+            const activityId = readString(activity.id);
+            const conversationId = readString(activity.conversation?.id);
+            const serviceUrl = normalizeServiceUrl(activity.serviceUrl);
+            const tenantId = teamsTenantId(activity);
+            const teamId = readString(activity.channelData?.team?.id);
+            const channelId = readString(activity.channelData?.channel?.id);
+            const senderId = readString(activity.from?.aadObjectId ?? activity.from?.id);
+            const text = stripTeamsMentions(readString(activity.text) ?? "");
+            if (!activityId ||
+                !conversationId ||
+                !serviceUrl ||
+                !tenantId ||
+                !senderId ||
+                !text) {
+                return null;
+            }
+            const location = teamId
+                ? `:team:${teamId}:channel:${channelId ?? conversationId}`
+                : "";
+            const replyRef = readString(activity.replyToId) ?? activityId;
+            return {
+                platform: "microsoft-teams",
+                externalThreadId: `tenant:${tenantId}${location}:conversation:${conversationId}`,
+                text,
+                senderName: readString(activity.from?.name),
+                senderId,
+                threadRef: conversationId,
+                replyRef,
+                platformContext: {
+                    tenantId,
+                    teamId,
+                    channelId,
+                    conversationId,
+                    conversationType: readString(activity.conversation?.conversationType),
+                    botFrameworkChannelId: readString(activity.channelId),
+                    activityId,
+                    replyToId: replyRef,
+                    serviceUrl,
+                    from: {
+                        id: readString(activity.from?.id),
+                        name: readString(activity.from?.name),
+                    },
+                    recipient: {
+                        id: readString(activity.recipient?.id),
+                        name: readString(activity.recipient?.name),
+                    },
+                },
+                timestamp: parseTimestamp(activity.timestamp),
+            };
+        },
+        async sendResponse(message, context) {
+            const serviceUrl = normalizeServiceUrl(context.platformContext.serviceUrl);
+            const conversationId = readString(context.platformContext.conversationId);
+            const activityId = context.replyRef ??
+                readString(context.platformContext.activityId) ??
+                readString(context.platformContext.replyToId);
+            if (!serviceUrl || !conversationId || !activityId) {
+                throw new Error("Microsoft Teams conversation reference is incomplete");
+            }
+            const accessToken = await getMicrosoftTeamsAccessToken();
+            const response = await fetch(`${serviceUrl}/v3/conversations/${encodeURIComponent(conversationId)}/activities/${encodeURIComponent(activityId)}`, {
+                method: "POST",
+                headers: {
+                    Authorization: `Bearer ${accessToken}`,
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                    type: "message",
+                    text: message.text,
+                    replyToId: activityId,
+                    channelId: readString(context.platformContext.botFrameworkChannelId) ??
+                        "msteams",
+                    serviceUrl,
+                    conversation: { id: conversationId },
+                    from: context.platformContext.recipient,
+                    recipient: context.platformContext.from,
+                }),
+            });
+            if (!response.ok) {
+                throw new Error(`Microsoft Teams reply failed (HTTP ${response.status})`);
+            }
+        },
+        formatAgentResponse(text) {
+            return { text, platformContext: {} };
+        },
+        async getStatus() {
+            const hasAppId = !!(await resolveSecret("MICROSOFT_TEAMS_APP_ID"));
+            const hasAppPassword = !!(await resolveSecret("MICROSOFT_TEAMS_APP_PASSWORD"));
+            const allowedTenants = await resolveSecret("MICROSOFT_TEAMS_ALLOWED_TENANT_IDS");
+            const hasAllowedTenants = parseCsv(allowedTenants).size > 0;
+            const configured = hasAppId &&
+                hasAppPassword &&
+                (process.env.NODE_ENV !== "production" || hasAllowedTenants);
+            return {
+                platform: "microsoft-teams",
+                label: "Microsoft Teams",
+                enabled: false,
+                configured,
+                details: {
+                    hasAppId,
+                    hasAppPassword,
+                    hasAllowedTenants,
+                    validation: "botframework-connector",
+                },
+                error: !configured
+                    ? "Save the Microsoft Bot App ID, client secret, and production tenant allowlist in settings"
+                    : undefined,
+            };
+        },
+    };
+}
+export async function getMicrosoftTeamsAccessToken() {
+    const appId = await resolveSecret("MICROSOFT_TEAMS_APP_ID");
+    const appPassword = await resolveSecret("MICROSOFT_TEAMS_APP_PASSWORD");
+    const tenantId = (await resolveSecret("MICROSOFT_TEAMS_APP_TENANT_ID")) ??
+        "botframework.com";
+    if (!appId || !appPassword) {
+        throw new Error("Microsoft Teams bot credentials are not configured");
+    }
+    const cacheKey = `${tenantId}:${appId}`;
+    const cached = accessTokenCache.get(cacheKey);
+    if (cached && cached.expiresAt - TOKEN_REFRESH_SKEW_MS > Date.now()) {
+        return cached.accessToken;
+    }
+    const response = await fetch(`https://login.microsoftonline.com/${encodeURIComponent(tenantId)}/oauth2/v2.0/token`, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+            grant_type: "client_credentials",
+            client_id: appId,
+            client_secret: appPassword,
+            scope: BOT_FRAMEWORK_SCOPE,
+        }),
+    });
+    const body = (await response.json().catch(() => null));
+    const accessToken = readString(body?.access_token);
+    const expiresIn = Number(body?.expires_in);
+    if (!response.ok || !accessToken || !Number.isFinite(expiresIn)) {
+        throw new Error(`Microsoft Teams token request failed (HTTP ${response.status})`);
+    }
+    accessTokenCache.set(cacheKey, {
+        accessToken,
+        expiresAt: Date.now() + Math.max(60, expiresIn) * 1_000,
+    });
+    return accessToken;
+}
+export function clearMicrosoftTeamsAccessTokenCache() {
+    accessTokenCache.clear();
+}
+async function readRawBodyCached(event) {
+    const cached = event.context.__rawBody;
+    if (typeof cached === "string")
+        return cached;
+    const raw = (await readRawBody(event)) ?? "";
+    event.context.__rawBody = raw;
+    return raw;
+}
+function parseActivity(raw) {
+    try {
+        const value = JSON.parse(raw);
+        return value && typeof value === "object" ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function teamsTenantId(activity) {
+    return readString(activity.channelData?.tenant?.id ?? activity.conversation?.tenantId);
+}
+function isAllowedTenant(tenantId, allowlist) {
+    if (!tenantId)
+        return false;
+    const allowed = parseCsv(allowlist);
+    if (allowed.size === 0)
+        return process.env.NODE_ENV !== "production";
+    return allowed.has(tenantId);
+}
+function parseCsv(value) {
+    return new Set((value ?? "")
+        .split(",")
+        .map((entry) => entry.trim())
+        .filter(Boolean));
+}
+function normalizeServiceUrl(value) {
+    const raw = readString(value);
+    if (!raw)
+        return null;
+    try {
+        const url = new URL(raw);
+        if (url.protocol !== "https:" ||
+            url.username ||
+            url.password ||
+            !url.hostname) {
+            return null;
+        }
+        return url.toString().replace(/\/+$/, "");
+    }
+    catch {
+        return null;
+    }
+}
+function stripTeamsMentions(text) {
+    return text
+        .replace(/<at\b[^>]*>.*?<\/at>/gis, "")
+        .replace(/<[^>]+>/g, "")
+        .replace(/\s+/g, " ")
+        .trim();
+}
+function parseTimestamp(value) {
+    const parsed = typeof value === "string" ? Date.parse(value) : Number.NaN;
+    return Number.isFinite(parsed) ? parsed : Date.now();
+}
+function readString(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+//# sourceMappingURL=microsoft-teams.js.map

package/dist/integrations/adapters/microsoft-teams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"microsoft-teams.js","sourceRoot":"","sources":["../../../src/integrations/adapters/microsoft-teams.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAG5C,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAQpE,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AACpE,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AA6B7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;AAE5D,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE;YACZ,SAAS,EAAE,IAAI;YACf,iBAAiB,EAAE,KAAK;YACxB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,IAAI;YACvB,uBAAuB,EAAE,KAAK;YAC9B,eAAe,EAAE,KAAK;SACvB;QAED,kBAAkB;YAChB,OAAO;gBACL;oBACE,GAAG,EAAE,wBAAwB;oBAC7B,KAAK,EAAE,sBAAsB;oBAC7B,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,8DAA8D;iBACjE;gBACD;oBACE,GAAG,EAAE,8BAA8B;oBACnC,KAAK,EAAE,6BAA6B;oBACpC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,kGAAkG;iBACrG;gBACD;oBACE,GAAG,EAAE,+BAA+B;oBACpC,KAAK,EAAE,yBAAyB;oBAChC,QAAQ,EAAE,KAAK;oBACf,QAAQ,EACN,qGAAqG;iBACxG;gBACD;oBACE,GAAG,EAAE,oCAAoC;oBACzC,KAAK,EAAE,oCAAoC;oBAC3C,QAAQ,EAAE,IAAI;oBACd,QAAQ,EACN,2GAA2G;iBAC9G;aACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,KAAc;YACrC,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAc;YAChC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,wBAAwB,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,8BAA8B,CAAC,CAAC;YACxE,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/D,IACE,CAAC,KAAK;gBACN,CAAC,WAAW;gBACZ,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC;gBACpC,CAAC,QAAQ;gBACT,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAChC,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAChC,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,GACpD,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;gBACzC,MAAM,kBAAkB,CAAC,mBAAmB,CAC1C,QAAiB,EACjB,aAAa,EACb,IAAI,wBAAwB,CAAC,KAAK,EAAE,WAAW,CAAC,EAChD,EAAE,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACzC,OAAO,eAAe,CACpB,QAAQ,EACR,MAAM,aAAa,CAAC,oCAAoC,CAAC,CAC1D,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,oBAAoB,CACxB,KAAc;YAEd,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/D,IACE,CAAC,QAAQ;gBACT,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAChC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAC3B,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,UAAU,CACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAChD,CAAC;YACF,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,IACE,CAAC,UAAU;gBACX,CAAC,cAAc;gBACf,CAAC,UAAU;gBACX,CAAC,QAAQ;gBACT,CAAC,QAAQ;gBACT,CAAC,IAAI,EACL,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM;gBACrB,CAAC,CAAC,SAAS,MAAM,YAAY,SAAS,IAAI,cAAc,EAAE;gBAC1D,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC;YAE9D,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,gBAAgB,EAAE,UAAU,QAAQ,GAAG,QAAQ,iBAAiB,cAAc,EAAE;gBAChF,IAAI;gBACJ,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;gBAC3C,QAAQ;gBACR,SAAS,EAAE,cAAc;gBACzB,QAAQ;gBACR,eAAe,EAAE;oBACf,QAAQ;oBACR,MAAM;oBACN,SAAS;oBACT,cAAc;oBACd,gBAAgB,EAAE,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;oBACrE,qBAAqB,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACrD,UAAU;oBACV,SAAS,EAAE,QAAQ;oBACnB,UAAU;oBACV,IAAI,EAAE;wBACJ,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;wBACjC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;qBACtC;oBACD,SAAS,EAAE;wBACT,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC;wBACtC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;qBAC3C;iBACF;gBACD,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;aAC9C,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,YAAY,CAChB,OAAwB,EACxB,OAAwB;YAExB,MAAM,UAAU,GAAG,mBAAmB,CACpC,OAAO,CAAC,eAAe,CAAC,UAAU,CACnC,CAAC;YACF,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAC1E,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ;gBAChB,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC;gBAC9C,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,4BAA4B,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,UAAU,qBAAqB,kBAAkB,CAAC,cAAc,CAAC,eAAe,kBAAkB,CAAC,UAAU,CAAC,EAAE,EACnH;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,WAAW,EAAE;oBACtC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS,EAAE,UAAU;oBACrB,SAAS,EACP,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,qBAAqB,CAAC;wBACzD,SAAS;oBACX,UAAU;oBACV,YAAY,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE;oBACpC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,SAAS;oBACvC,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC,IAAI;iBACxC,CAAC;aACH,CACF,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,CAAC,MAAM,GAAG,CACzD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB,CAAC,IAAY;YAC9B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,SAAS;YACb,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAC3C,8BAA8B,CAC/B,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,aAAa,CACxC,oCAAoC,CACrC,CAAC;YACF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YAC5D,MAAM,UAAU,GACd,QAAQ;gBACR,cAAc;gBACd,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,iBAAiB,CAAC,CAAC;YAC/D,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,KAAK;gBACd,UAAU;gBACV,OAAO,EAAE;oBACP,QAAQ;oBACR,cAAc;oBACd,iBAAiB;oBACjB,UAAU,EAAE,wBAAwB;iBACrC;gBACD,KAAK,EAAE,CAAC,UAAU;oBAChB,CAAC,CAAC,2FAA2F;oBAC7F,CAAC,CAAC,SAAS;aACd,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B;IAChD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,wBAAwB,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,8BAA8B,CAAC,CAAC;IACxE,MAAM,QAAQ,GACZ,CAAC,MAAM,aAAa,CAAC,+BAA+B,CAAC,CAAC;QACtD,kBAAkB,CAAC;IACrB,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,qBAAqB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,qCAAqC,kBAAkB,CAAC,QAAQ,CAAC,oBAAoB,EACrF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,KAAK;YAChB,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,mBAAmB;SAC3B,CAAC;KACH,CACF,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAG7C,CAAC;IACT,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,8CAA8C,QAAQ,CAAC,MAAM,GAAG,CACjE,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC7B,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,KAAK;KACxD,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAAc;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;IACvC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,GAAG,GAAG,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAuB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAuB;IAC5C,OAAO,UAAU,CACf,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,QAAQ,CAAC,YAAY,EAAE,QAAQ,CACpE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAA4B,EAC5B,SAAoC;IAEpC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IACrE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC;IAChD,OAAO,IAAI,GAAG,CACZ,CAAC,KAAK,IAAI,EAAE,CAAC;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACzB,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,QAAQ;YACZ,CAAC,GAAG,CAAC,QAAQ,EACb,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI;SACR,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC;SACtC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAC1E,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC","sourcesContent":["import type { H3Event } from \"h3\";\nimport { getHeader, readRawBody } from \"h3\";\n\nimport type { EnvKeyConfig } from \"../../server/create-server.js\";\nimport { resolveSecret } from \"../../server/credential-provider.js\";\nimport type {\n  IncomingMessage,\n  IntegrationStatus,\n  OutgoingMessage,\n  PlatformAdapter,\n} from \"../types.js\";\n\nconst BOT_FRAMEWORK_SCOPE = \"https://api.botframework.com/.default\";\nconst TOKEN_REFRESH_SKEW_MS = 5 * 60 * 1_000;\n\ntype TeamsActivity = {\n  id?: unknown;\n  type?: unknown;\n  timestamp?: unknown;\n  serviceUrl?: unknown;\n  channelId?: unknown;\n  text?: unknown;\n  replyToId?: unknown;\n  from?: { id?: unknown; name?: unknown; aadObjectId?: unknown };\n  recipient?: { id?: unknown; name?: unknown };\n  conversation?: {\n    id?: unknown;\n    tenantId?: unknown;\n    conversationType?: unknown;\n  };\n  channelData?: {\n    tenant?: { id?: unknown };\n    team?: { id?: unknown; name?: unknown };\n    channel?: { id?: unknown; name?: unknown };\n  };\n};\n\ntype TokenCacheEntry = {\n  accessToken: string;\n  expiresAt: number;\n};\n\nconst accessTokenCache = new Map<string, TokenCacheEntry>();\n\nexport function microsoftTeamsAdapter(): PlatformAdapter {\n  return {\n    platform: \"microsoft-teams\",\n    label: \"Microsoft Teams\",\n    capabilities: {\n      replyText: true,\n      proactiveMessages: false,\n      nativeThreads: true,\n      contextualReplies: true,\n      deferredWebhookResponse: false,\n      interactionOnly: false,\n    },\n\n    getRequiredEnvKeys(): EnvKeyConfig[] {\n      return [\n        {\n          key: \"MICROSOFT_TEAMS_APP_ID\",\n          label: \"Microsoft Bot App ID\",\n          required: true,\n          helpText:\n            \"The Microsoft App ID associated with the Azure Bot resource.\",\n        },\n        {\n          key: \"MICROSOFT_TEAMS_APP_PASSWORD\",\n          label: \"Microsoft Bot Client Secret\",\n          required: true,\n          helpText:\n            \"A current client secret for the bot app registration. Store the secret value, not its secret ID.\",\n        },\n        {\n          key: \"MICROSOFT_TEAMS_APP_TENANT_ID\",\n          label: \"Microsoft Bot Tenant ID\",\n          required: false,\n          helpText:\n            \"Required for single-tenant bot registrations. Multi-tenant Bot Framework apps use botframework.com.\",\n        },\n        {\n          key: \"MICROSOFT_TEAMS_ALLOWED_TENANT_IDS\",\n          label: \"Allowed Microsoft Teams Tenant IDs\",\n          required: true,\n          helpText:\n            \"Comma-separated tenant IDs allowed to invoke this deployment. Production webhooks fail closed when unset.\",\n        },\n      ];\n    },\n\n    async handleVerification(event: H3Event) {\n      await readRawBodyCached(event);\n      return { handled: false };\n    },\n\n    async verifyWebhook(event: H3Event): Promise<boolean> {\n      const appId = await resolveSecret(\"MICROSOFT_TEAMS_APP_ID\");\n      const appPassword = await resolveSecret(\"MICROSOFT_TEAMS_APP_PASSWORD\");\n      const authorization = getHeader(event, \"authorization\") ?? \"\";\n      const activity = parseActivity(await readRawBodyCached(event));\n      if (\n        !appId ||\n        !appPassword ||\n        !authorization.startsWith(\"Bearer \") ||\n        !activity ||\n        activity.channelId !== \"msteams\" ||\n        !readString(activity.serviceUrl)\n      ) {\n        return false;\n      }\n\n      try {\n        const { JwtTokenValidation, SimpleCredentialProvider } =\n          await import(\"botframework-connector\");\n        await JwtTokenValidation.authenticateRequest(\n          activity as never,\n          authorization,\n          new SimpleCredentialProvider(appId, appPassword),\n          \"\",\n        );\n      } catch {\n        return false;\n      }\n\n      const tenantId = teamsTenantId(activity);\n      return isAllowedTenant(\n        tenantId,\n        await resolveSecret(\"MICROSOFT_TEAMS_ALLOWED_TENANT_IDS\"),\n      );\n    },\n\n    async parseIncomingMessage(\n      event: H3Event,\n    ): Promise<IncomingMessage | null> {\n      const activity = parseActivity(await readRawBodyCached(event));\n      if (\n        !activity ||\n        activity.channelId !== \"msteams\" ||\n        activity.type !== \"message\"\n      ) {\n        return null;\n      }\n\n      const activityId = readString(activity.id);\n      const conversationId = readString(activity.conversation?.id);\n      const serviceUrl = normalizeServiceUrl(activity.serviceUrl);\n      const tenantId = teamsTenantId(activity);\n      const teamId = readString(activity.channelData?.team?.id);\n      const channelId = readString(activity.channelData?.channel?.id);\n      const senderId = readString(\n        activity.from?.aadObjectId ?? activity.from?.id,\n      );\n      const text = stripTeamsMentions(readString(activity.text) ?? \"\");\n      if (\n        !activityId ||\n        !conversationId ||\n        !serviceUrl ||\n        !tenantId ||\n        !senderId ||\n        !text\n      ) {\n        return null;\n      }\n\n      const location = teamId\n        ? `:team:${teamId}:channel:${channelId ?? conversationId}`\n        : \"\";\n      const replyRef = readString(activity.replyToId) ?? activityId;\n\n      return {\n        platform: \"microsoft-teams\",\n        externalThreadId: `tenant:${tenantId}${location}:conversation:${conversationId}`,\n        text,\n        senderName: readString(activity.from?.name),\n        senderId,\n        threadRef: conversationId,\n        replyRef,\n        platformContext: {\n          tenantId,\n          teamId,\n          channelId,\n          conversationId,\n          conversationType: readString(activity.conversation?.conversationType),\n          botFrameworkChannelId: readString(activity.channelId),\n          activityId,\n          replyToId: replyRef,\n          serviceUrl,\n          from: {\n            id: readString(activity.from?.id),\n            name: readString(activity.from?.name),\n          },\n          recipient: {\n            id: readString(activity.recipient?.id),\n            name: readString(activity.recipient?.name),\n          },\n        },\n        timestamp: parseTimestamp(activity.timestamp),\n      };\n    },\n\n    async sendResponse(\n      message: OutgoingMessage,\n      context: IncomingMessage,\n    ): Promise<void> {\n      const serviceUrl = normalizeServiceUrl(\n        context.platformContext.serviceUrl,\n      );\n      const conversationId = readString(context.platformContext.conversationId);\n      const activityId =\n        context.replyRef ??\n        readString(context.platformContext.activityId) ??\n        readString(context.platformContext.replyToId);\n      if (!serviceUrl || !conversationId || !activityId) {\n        throw new Error(\"Microsoft Teams conversation reference is incomplete\");\n      }\n\n      const accessToken = await getMicrosoftTeamsAccessToken();\n      const response = await fetch(\n        `${serviceUrl}/v3/conversations/${encodeURIComponent(conversationId)}/activities/${encodeURIComponent(activityId)}`,\n        {\n          method: \"POST\",\n          headers: {\n            Authorization: `Bearer ${accessToken}`,\n            \"Content-Type\": \"application/json\",\n          },\n          body: JSON.stringify({\n            type: \"message\",\n            text: message.text,\n            replyToId: activityId,\n            channelId:\n              readString(context.platformContext.botFrameworkChannelId) ??\n              \"msteams\",\n            serviceUrl,\n            conversation: { id: conversationId },\n            from: context.platformContext.recipient,\n            recipient: context.platformContext.from,\n          }),\n        },\n      );\n      if (!response.ok) {\n        throw new Error(\n          `Microsoft Teams reply failed (HTTP ${response.status})`,\n        );\n      }\n    },\n\n    formatAgentResponse(text: string): OutgoingMessage {\n      return { text, platformContext: {} };\n    },\n\n    async getStatus(): Promise<IntegrationStatus> {\n      const hasAppId = !!(await resolveSecret(\"MICROSOFT_TEAMS_APP_ID\"));\n      const hasAppPassword = !!(await resolveSecret(\n        \"MICROSOFT_TEAMS_APP_PASSWORD\",\n      ));\n      const allowedTenants = await resolveSecret(\n        \"MICROSOFT_TEAMS_ALLOWED_TENANT_IDS\",\n      );\n      const hasAllowedTenants = parseCsv(allowedTenants).size > 0;\n      const configured =\n        hasAppId &&\n        hasAppPassword &&\n        (process.env.NODE_ENV !== \"production\" || hasAllowedTenants);\n      return {\n        platform: \"microsoft-teams\",\n        label: \"Microsoft Teams\",\n        enabled: false,\n        configured,\n        details: {\n          hasAppId,\n          hasAppPassword,\n          hasAllowedTenants,\n          validation: \"botframework-connector\",\n        },\n        error: !configured\n          ? \"Save the Microsoft Bot App ID, client secret, and production tenant allowlist in settings\"\n          : undefined,\n      };\n    },\n  };\n}\n\nexport async function getMicrosoftTeamsAccessToken(): Promise<string> {\n  const appId = await resolveSecret(\"MICROSOFT_TEAMS_APP_ID\");\n  const appPassword = await resolveSecret(\"MICROSOFT_TEAMS_APP_PASSWORD\");\n  const tenantId =\n    (await resolveSecret(\"MICROSOFT_TEAMS_APP_TENANT_ID\")) ??\n    \"botframework.com\";\n  if (!appId || !appPassword) {\n    throw new Error(\"Microsoft Teams bot credentials are not configured\");\n  }\n\n  const cacheKey = `${tenantId}:${appId}`;\n  const cached = accessTokenCache.get(cacheKey);\n  if (cached && cached.expiresAt - TOKEN_REFRESH_SKEW_MS > Date.now()) {\n    return cached.accessToken;\n  }\n\n  const response = await fetch(\n    `https://login.microsoftonline.com/${encodeURIComponent(tenantId)}/oauth2/v2.0/token`,\n    {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body: new URLSearchParams({\n        grant_type: \"client_credentials\",\n        client_id: appId,\n        client_secret: appPassword,\n        scope: BOT_FRAMEWORK_SCOPE,\n      }),\n    },\n  );\n  const body = (await response.json().catch(() => null)) as {\n    access_token?: unknown;\n    expires_in?: unknown;\n  } | null;\n  const accessToken = readString(body?.access_token);\n  const expiresIn = Number(body?.expires_in);\n  if (!response.ok || !accessToken || !Number.isFinite(expiresIn)) {\n    throw new Error(\n      `Microsoft Teams token request failed (HTTP ${response.status})`,\n    );\n  }\n\n  accessTokenCache.set(cacheKey, {\n    accessToken,\n    expiresAt: Date.now() + Math.max(60, expiresIn) * 1_000,\n  });\n  return accessToken;\n}\n\nexport function clearMicrosoftTeamsAccessTokenCache(): void {\n  accessTokenCache.clear();\n}\n\nasync function readRawBodyCached(event: H3Event): Promise<string> {\n  const cached = event.context.__rawBody;\n  if (typeof cached === \"string\") return cached;\n  const raw = (await readRawBody(event)) ?? \"\";\n  event.context.__rawBody = raw;\n  return raw;\n}\n\nfunction parseActivity(raw: string): TeamsActivity | null {\n  try {\n    const value = JSON.parse(raw);\n    return value && typeof value === \"object\" ? (value as TeamsActivity) : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction teamsTenantId(activity: TeamsActivity): string | undefined {\n  return readString(\n    activity.channelData?.tenant?.id ?? activity.conversation?.tenantId,\n  );\n}\n\nfunction isAllowedTenant(\n  tenantId: string | undefined,\n  allowlist: string | null | undefined,\n): boolean {\n  if (!tenantId) return false;\n  const allowed = parseCsv(allowlist);\n  if (allowed.size === 0) return process.env.NODE_ENV !== \"production\";\n  return allowed.has(tenantId);\n}\n\nfunction parseCsv(value: string | null | undefined): Set<string> {\n  return new Set(\n    (value ?? \"\")\n      .split(\",\")\n      .map((entry) => entry.trim())\n      .filter(Boolean),\n  );\n}\n\nfunction normalizeServiceUrl(value: unknown): string | null {\n  const raw = readString(value);\n  if (!raw) return null;\n  try {\n    const url = new URL(raw);\n    if (\n      url.protocol !== \"https:\" ||\n      url.username ||\n      url.password ||\n      !url.hostname\n    ) {\n      return null;\n    }\n    return url.toString().replace(/\\/+$/, \"\");\n  } catch {\n    return null;\n  }\n}\n\nfunction stripTeamsMentions(text: string): string {\n  return text\n    .replace(/<at\\b[^>]*>.*?<\\/at>/gis, \"\")\n    .replace(/<[^>]+>/g, \"\")\n    .replace(/\\s+/g, \" \")\n    .trim();\n}\n\nfunction parseTimestamp(value: unknown): number {\n  const parsed = typeof value === \"string\" ? Date.parse(value) : Number.NaN;\n  return Number.isFinite(parsed) ? parsed : Date.now();\n}\n\nfunction readString(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim() ? value.trim() : undefined;\n}\n"]}

package/dist/integrations/adapters/slack.d.ts

@@ -1,4 +1,10 @@
-import type { PlatformAdapter } from "../types.js";
+import type { PlatformAdapter, IncomingMessage } from "../types.js";
+export interface SlackAdapterOptions {
+    /** Resolve the bot token for the exact Slack installation. */
+    resolveBotToken?: (incoming: IncomingMessage) => Promise<string | undefined>;
+    /** Override active-thread detection for hosted adapters/tests. */
+    isThreadActive?: (incoming: IncomingMessage) => Promise<boolean>;
+}
 /**
  * Create a Slack platform adapter.
  *
@@ -19,5 +25,5 @@ import type { PlatformAdapter } from "../types.js";
  *   (`api_app_id`) to additionally pin events to. Useful when the same
  *   signing secret rotation surfaces multiple app installs.
  */
-export declare function slackAdapter(): PlatformAdapter;
+export declare function slackAdapter(options?: SlackAdapterOptions): PlatformAdapter;
 //# sourceMappingURL=slack.d.ts.map

package/dist/integrations/adapters/slack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/adapters/slack.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,eAAe,EAKhB,MAAM,aAAa,CAAC;AAOrB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,IAAI,eAAe,CA4U9C"}
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/adapters/slack.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAOhB,MAAM,aAAa,CAAC;AAarB,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E,kEAAkE;IAClE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAClE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CAgejB"}