@agent-native/dispatch 0.7.0 → 0.8.0

package/dist/server/lib/dispatch-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch-store.js","sourceRoot":"","sources":["../../../src/server/lib/dispatch-store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EACL,mBAAmB,EACnB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AACvD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD,6EAA6E;AAC7E,EAAE;AACF,oFAAoF;AACpF,qEAAqE;AACrE,wEAAwE;AACxE,wEAAwE;AACxE,kBAAkB;AAClB,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,gEAAgE;AAChE,uEAAuE;AACvE,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAO9B,MAAM,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;AAE5D,SAAS,cAAc,CACrB,QAAgB,EAChB,cAAyC;IAEzC,OAAO,GAAG,QAAQ,KAAK,cAAc,IAAI,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAC1C,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,cAAyC;IAEzC,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgB,EAChB,cAAyC;IAEzC,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,mDAAmD;IACnD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CACpC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,GAAG,mBAAmB,CACzC,CAAC;IACF,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACjD,KAAK,CAAC,YAAY,GAAG,KAAK,GAAG,kBAAkB,CAAC;QAChD,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgB,EAChB,cAAyC;IAEzC,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEf;IADnB,IAAI,GAAG,mBAAmB,CAAC;IACpC,YAA4B,YAAoB;QAC9C,KAAK,CACH,+CAA+C,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,aAAa,CAC7F,CAAC;QAHwB,iBAAY,GAAZ,YAAY,CAAQ;IAIhD,CAAC;CACF;AAmBD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,eAAe,EAAE,IAAI,IAAI,CAAC;AACnC,CAAC;AAaD,MAAM,UAAU,kBAAkB;IAChC,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CACf,KAAQ,EACR,GAAgB;IAEhB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,EAAE;IACT,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,GAAG;IACV,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC5D,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI;QAC9B,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CACvB,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CACtD;YACH,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAA6B,EAC7B,KAAK,GAAG,iBAAiB,EAAE;IAE3B,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,CAAC,KAAK,EAAE,mBAAmB,EAAE;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,kBAAkB;QAC1B,UAAU,EAAE,mBAAmB;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACpB,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,qDAAqD;QACzD,QAAQ,EAAE,KAAK;QACf,KAAK;KACN,CAAC,CAAC;IACH,OAAO,iBAAiB,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA6B;IACnE,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,qBAAqB,CAAC;QAC3B,UAAU,EAAE,wBAAwB;QACpC,UAAU,EAAE,mBAAmB;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACpB,CAAC,CAAC,iCAAiC;YACnC,CAAC,CAAC,kCAAkC;QACtC,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KASjC;IACC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC;QACjD,EAAE,EAAE,EAAE,EAAE;QACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,iBAAiB,EAAE;QACnD,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE;QAC/D,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,iBAAiB,EAAE;QACzC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;QAC1D,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAK,GAAG,EAAE;IAC9C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;SAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAC9D,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC7C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAC7C,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;SACnD,KAAK,CAAC,KAAK,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;SACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAC/D,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAC9C,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,MAAmB,kBAAkB,EAAE;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;SACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,aAAa,CAAC,EACjD,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAC3C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,KAA+B,EAC/B,KAAK,GAAG,iBAAiB,EAAE,EAC3B,MAAmB,kBAAkB,EAAE;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,aAAa,GAAG,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE;aACL,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;aACnC,GAAG,CAAC;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,SAAS,EAAE,SAAS;SACrB,CAAC;aACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,aAAa,CAAC,EACjD,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAC3C,CACF,CAAC;IACN,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;YAClD,EAAE,EAAE,aAAa;YACjB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,CAAC;QAChB,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB;QAChE,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,gBAAgB,KAAK,CAAC,IAAI,EAAE;QAC1F,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,aAAqB,EACrB,KAAK,GAAG,iBAAiB,EAAE,EAC3B,MAAmB,kBAAkB,EAAE;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;SACnC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,aAAa,CAAC,EACjD,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAC3C,CACF,CAAC;IACJ,MAAM,WAAW,CAAC;QAChB,KAAK;QACL,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,WAAW,QAAQ,CAAC,QAAQ,gBAAgB,QAAQ,CAAC,IAAI,EAAE;QACpE,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,OAAe;IAC/D,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE9E,MAAM,KAAK,CAAC,uCAAuC,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,gBAAgB,EAAE;gBAChB;oBACE,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;oBACrD,OAAO,EAAE,6BAA6B;iBACvC;aACF;YACD,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YACrB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,GAAG,OAAO,uBAAuB,MAAM,YAAY;iBAC3D;aACF;YACD,WAAW,EAAE,EAAE,SAAS,EAAE;SAC3B,CAAC;KACH,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAQpC;IACC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,EAAE,EAAE,CAAC;IACvB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC;QACtD,EAAE,EAAE,SAAS;QACb,UAAU,EAAE,iBAAiB,EAAE;QAC/B,KAAK,EAAE,YAAY,EAAE;QACrB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,WAAW,EACT,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QACtE,UAAU,EACR,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QACpE,WAAW,EAAE,iBAAiB,EAAE;QAChC,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IACH,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,oBAAoB;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;QACrC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA+B;IACrE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,OAAO,qBAAqB,CAAC;YAC3B,UAAU,EAAE,oBAAoB;YAChC,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI;YAC1B,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,gBAAgB,KAAK,CAAC,IAAI,EAAE;YACxF,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,aAAqB;IAC3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,qBAAqB,CAAC;YAC3B,UAAU,EAAE,oBAAoB;YAChC,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,aAAa;YACvB,OAAO,EAAE,UAAU,QAAQ,CAAC,QAAQ,gBAAgB,QAAQ,CAAC,IAAI,EAAE;YACnE,OAAO,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE;YAC9B,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;SACrC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EACnE,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC;QAClD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAClD,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,MAAmB,kBAAkB,EAAE;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;SACrC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,CAAC,EACjD,QAAQ,CAAC,MAAM,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAC/C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAgC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChD,OAAO,sBAAsB,CAC3B,OAAO,EACP,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,EACzC,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChD,OAAO,sBAAsB,CAC3B,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,EACzC,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,wBAAwB,EAAE,CAAC;QACpD,OAAO,mBAAmB,CACxB,OAAO,EACP,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;SACvC,GAAG,CAAC;QACH,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,iBAAiB,EAAE;QAC/B,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,SAAS;KACrB,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9D,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,YAAY,OAAO,CAAC,OAAO,EAAE;QACtC,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,MAAsB;IAC3E,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;SACvC,GAAG,CAAC;QACH,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,iBAAiB,EAAE;QAC/B,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,SAAS;KACrB,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,YAAY,OAAO,CAAC,OAAO,EAAE;QACtC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE;KAC9C,CAAC,CAAC;IACH,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,yDAAyD;IACzD,2CAA2C;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,EAAE,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;QAChD,EAAE,EAAE,QAAQ;QACZ,KAAK;QACL,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,YAAY,EAAE;QACrB,QAAQ;QACR,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAC9C,SAAS,EAAE,IAAI;QACf,uBAAuB,EAAE,IAAI;QAC7B,yBAAyB,EAAE,IAAI;QAC/B,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IACH,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,6BAA6B;QACrC,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,WAAW,QAAQ,mBAAmB,KAAK,EAAE;QACtD,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;KAC9B,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,OAAO,EAAE,SAAS,KAAK,EAAE;QACzB,QAAQ;QACR,SAAS,EAAE,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,GAAG,CACjB,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,EAClD,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAC/C,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,CACtB,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,EAC/C,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC5C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAC5C,CAAC;IACF,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;aAClC,KAAK,CAAC,OAAO,CAAC;aACd,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACxD,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;aAC/B,KAAK,CAAC,YAAY,CAAC;aACnB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;KACtD,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,cAA8B,EAC9B,UAGI,EAAE;IAEN,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,cAAc,EAAE,cAAc,CAAC,EAC/D,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAC/C,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAEnD,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IAEvD,wEAAwE;IACxE,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,cAAc,EAAE,cAAc,CAAC,CAChE,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;SACrD,KAAK,CAAC,EAAE,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAKtC;IACC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,kEAAkE;IAClE,oEAAoE;IACpE,mEAAmE;IACnE,qCAAqC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,MAAM,EAAE;SACvB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;SAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EACtD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CACjD,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;SAClD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CAAC;QAC/B,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EACzD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACrE,QAAQ,CAAC,KAAK;QACZ,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAC/C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE;aACL,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;aACpC,GAAG,CAAC;YACH,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAChD,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,SAAS,EAAE,SAAS;SACrB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC;YACnD,EAAE,EAAE,EAAE,EAAE;YACR,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAChD,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACjC,GAAG,CAAC;QACH,SAAS,EAAE,SAAS;QACpB,uBAAuB,EAAE,KAAK,CAAC,cAAc;QAC7C,yBAAyB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;QACzD,SAAS,EAAE,SAAS;KACrB,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAExD,+DAA+D;IAC/D,6CAA6C;IAC7C,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAExD,MAAM,WAAW,CAAC;QAChB,KAAK,EAAE,QAAQ,CAAC,SAAS;QACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,MAAM,EAAE,iBAAiB;QACzB,UAAU,EAAE,eAAe;QAC3B,QAAQ,EAAE,KAAK,CAAC,cAAc;QAC9B,OAAO,EAAE,UAAU,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,cAAc,EAAE;QAC1F,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,UAAU,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,GAC1D,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,gBAAgB,EAAE;QAClB,oBAAoB,EAAE;QACtB,iBAAiB,EAAE;QACnB,eAAe,CAAC,EAAE,CAAC;QACnB,iBAAiB,EAAE;KACpB,CAAC,CAAC;IAEL,OAAO;QACL,MAAM,EAAE;YACN,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,gBAAgB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;iBACpE,MAAM;YACT,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;YACzC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CACpD,CAAC,MAAM;SACT;QACD,kBAAkB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACtC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9B,QAAQ;KACT,CAAC;AACJ,CAAC","sourcesContent":["import crypto from \"node:crypto\";\nimport { and, desc, eq, isNull, or } from \"drizzle-orm\";\nimport { getOrgSetting, putOrgSetting } from \"@agent-native/core/settings\";\nimport {\n  getRequestUserEmail,\n  getRequestOrgId,\n} from \"@agent-native/core/server\";\nimport { getDb, schema } from \"../../db/index.js\";\n\nexport const SHARED_DISPATCH_OWNER = \"dispatch@shared\";\nconst APPROVAL_POLICY_KEY = \"dispatch-approval-policy\";\n\n// ─── /link rate limiting ──────────────────────────────────────────────────\n//\n// Failed `/link <token>` attempts are rate-limited per `(platform, externalUserId)`\n// to deter token brute-force after the H5 entropy bump. The window /\n// threshold are tuned so legitimate retries (typo, expired token) don't\n// trip the limit, while a scripted attacker burns out their per-account\n// budget quickly.\n//\n// State is process-local: works for the single-node dispatch deployment\n// we ship today. TODO: move to a SQL-backed counter table when dispatch\n// is sharded across multiple regions / processes — otherwise an\n// attacker can scale around the limit by hammering more than one node.\nconst LINK_FAIL_WINDOW_MS = 5 * 60 * 1000;\nconst LINK_FAIL_BLOCK_MS = 30 * 60 * 1000;\nconst LINK_FAIL_THRESHOLD = 5;\n\ninterface LinkFailureState {\n  failures: number[]; // unix-ms timestamps of recent failures within the window\n  blockedUntil: number; // unix-ms; 0 if not currently blocked\n}\n\nconst _linkFailureMap = new Map<string, LinkFailureState>();\n\nfunction linkFailureKey(\n  platform: string,\n  externalUserId: string | null | undefined,\n): string {\n  return `${platform}::${externalUserId ?? \"\"}`;\n}\n\nfunction getLinkFailureState(key: string): LinkFailureState {\n  let state = _linkFailureMap.get(key);\n  if (!state) {\n    state = { failures: [], blockedUntil: 0 };\n    _linkFailureMap.set(key, state);\n  }\n  return state;\n}\n\nfunction isLinkAttemptBlocked(\n  platform: string,\n  externalUserId: string | null | undefined,\n): { blocked: true; retryAfterMs: number } | { blocked: false } {\n  if (!externalUserId) return { blocked: false };\n  const key = linkFailureKey(platform, externalUserId);\n  const state = _linkFailureMap.get(key);\n  if (!state) return { blocked: false };\n  const nowMs = Date.now();\n  if (state.blockedUntil > nowMs) {\n    return { blocked: true, retryAfterMs: state.blockedUntil - nowMs };\n  }\n  return { blocked: false };\n}\n\nfunction recordLinkFailure(\n  platform: string,\n  externalUserId: string | null | undefined,\n): void {\n  if (!externalUserId) return;\n  const key = linkFailureKey(platform, externalUserId);\n  const state = getLinkFailureState(key);\n  const nowMs = Date.now();\n  // Drop expired failure timestamps before counting.\n  state.failures = state.failures.filter(\n    (ts) => nowMs - ts < LINK_FAIL_WINDOW_MS,\n  );\n  state.failures.push(nowMs);\n  if (state.failures.length >= LINK_FAIL_THRESHOLD) {\n    state.blockedUntil = nowMs + LINK_FAIL_BLOCK_MS;\n    state.failures = [];\n  }\n}\n\nfunction clearLinkFailures(\n  platform: string,\n  externalUserId: string | null | undefined,\n): void {\n  if (!externalUserId) return;\n  _linkFailureMap.delete(linkFailureKey(platform, externalUserId));\n}\n\n/**\n * 429-style error returned when /link attempts are rate-limited. The\n * adapter layer can branch on `code === \"LINK_RATE_LIMITED\"` to send a\n * platform-appropriate message back to the user.\n */\nexport class LinkRateLimitError extends Error {\n  readonly code = \"LINK_RATE_LIMITED\";\n  constructor(public readonly retryAfterMs: number) {\n    super(\n      `Too many failed link attempts. Try again in ${Math.ceil(retryAfterMs / 60_000)} minute(s).`,\n    );\n  }\n}\n\nexport interface DispatchApprovalPolicy {\n  enabled: boolean;\n  approverEmails: string[];\n}\n\nexport interface DispatchDestinationInput {\n  id?: string;\n  name: string;\n  platform: string;\n  destination: string;\n  threadRef?: string | null;\n  notes?: string | null;\n}\n\ntype DispatchApprovalRequest =\n  typeof schema.dispatchApprovalRequests.$inferSelect;\n\nexport function currentOwnerEmail(): string {\n  const email = getRequestUserEmail();\n  if (!email) throw new Error(\"no authenticated user\");\n  return email;\n}\n\nexport function currentOrgId(): string | null {\n  return getRequestOrgId() || null;\n}\n\n/**\n * Caller-supplied access context for dispatch operations that work by\n * id (destinations, etc.). Looking up a row by id alone is unsafe —\n * UUIDs are not authorization. A row matches the ctx if either the\n * caller owns it or it lives in the caller's active org.\n */\nexport interface DispatchCtx {\n  ownerEmail: string;\n  orgId: string | null;\n}\n\nexport function requireDispatchCtx(): DispatchCtx {\n  return { ownerEmail: currentOwnerEmail(), orgId: currentOrgId() };\n}\n\nfunction ctxScope<T extends { ownerEmail: any; orgId: any }>(\n  table: T,\n  ctx: DispatchCtx,\n) {\n  if (!ctx.orgId) {\n    return and(eq(table.ownerEmail, ctx.ownerEmail), isNull(table.orgId));\n  }\n  return or(eq(table.ownerEmail, ctx.ownerEmail), eq(table.orgId, ctx.orgId));\n}\n\nfunction id() {\n  return crypto.randomUUID();\n}\n\nfunction now() {\n  return Date.now();\n}\n\nfunction safeJson(value: unknown) {\n  return JSON.stringify(value ?? null);\n}\n\nexport async function getApprovalPolicy(): Promise<DispatchApprovalPolicy> {\n  const orgId = currentOrgId();\n  if (!orgId) return { enabled: false, approverEmails: [] };\n  const raw = await getOrgSetting(orgId, APPROVAL_POLICY_KEY);\n  return {\n    enabled: raw?.enabled === true,\n    approverEmails: Array.isArray(raw?.approverEmails)\n      ? raw.approverEmails.filter(\n          (value): value is string => typeof value === \"string\",\n        )\n      : [],\n  };\n}\n\nasync function applyApprovalPolicy(\n  input: DispatchApprovalPolicy,\n  actor = currentOwnerEmail(),\n) {\n  const orgId = currentOrgId();\n  if (!orgId) {\n    throw new Error(\n      \"Dispatch approval settings require an active organization\",\n    );\n  }\n  await putOrgSetting(orgId, APPROVAL_POLICY_KEY, {\n    enabled: input.enabled,\n    approverEmails: input.approverEmails,\n  });\n  await recordAudit({\n    action: \"settings.updated\",\n    targetType: \"dispatch-settings\",\n    targetId: APPROVAL_POLICY_KEY,\n    summary: input.enabled\n      ? \"Enabled approval flow for durable dispatch changes\"\n      : \"Disabled approval flow for durable dispatch changes\",\n    metadata: input,\n    actor,\n  });\n  return getApprovalPolicy();\n}\n\nexport async function setApprovalPolicy(input: DispatchApprovalPolicy) {\n  const current = await getApprovalPolicy();\n  if (!current.enabled) {\n    return applyApprovalPolicy(input);\n  }\n  return createApprovalRequest({\n    changeType: \"approval-policy.update\",\n    targetType: \"dispatch-settings\",\n    targetId: APPROVAL_POLICY_KEY,\n    summary: input.enabled\n      ? \"Update dispatch approval policy\"\n      : \"Disable dispatch approval policy\",\n    payload: input,\n    beforeValue: current,\n    afterValue: input,\n  });\n}\n\nexport async function recordAudit(input: {\n  action: string;\n  targetType: string;\n  targetId?: string | null;\n  summary: string;\n  metadata?: unknown;\n  actor?: string;\n  ownerEmail?: string;\n  orgId?: string | null;\n}) {\n  const db = getDb();\n  const timestamp = now();\n  await db.insert(schema.dispatchAuditEvents).values({\n    id: id(),\n    ownerEmail: input.ownerEmail || currentOwnerEmail(),\n    orgId: input.orgId !== undefined ? input.orgId : currentOrgId(),\n    actor: input.actor || currentOwnerEmail(),\n    action: input.action,\n    targetType: input.targetType,\n    targetId: input.targetId || null,\n    summary: input.summary,\n    metadata: input.metadata ? safeJson(input.metadata) : null,\n    createdAt: timestamp,\n  });\n}\n\nexport async function listAuditEvents(limit = 50) {\n  const db = getDb();\n  const orgId = currentOrgId();\n  return db\n    .select()\n    .from(schema.dispatchAuditEvents)\n    .where(\n      and(\n        eq(schema.dispatchAuditEvents.ownerEmail, currentOwnerEmail()),\n        orgId\n          ? eq(schema.dispatchAuditEvents.orgId, orgId)\n          : isNull(schema.dispatchAuditEvents.orgId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchAuditEvents.createdAt))\n    .limit(limit);\n}\n\nexport async function listDestinations() {\n  const db = getDb();\n  const orgId = currentOrgId();\n  return db\n    .select()\n    .from(schema.dispatchDestinations)\n    .where(\n      and(\n        eq(schema.dispatchDestinations.ownerEmail, currentOwnerEmail()),\n        orgId\n          ? eq(schema.dispatchDestinations.orgId, orgId)\n          : isNull(schema.dispatchDestinations.orgId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchDestinations.updatedAt));\n}\n\nexport async function getDestinationById(\n  destinationId: string,\n  ctx: DispatchCtx = requireDispatchCtx(),\n) {\n  const db = getDb();\n  const [row] = await db\n    .select()\n    .from(schema.dispatchDestinations)\n    .where(\n      and(\n        eq(schema.dispatchDestinations.id, destinationId),\n        ctxScope(schema.dispatchDestinations, ctx),\n      ),\n    )\n    .limit(1);\n  return row ?? null;\n}\n\nasync function applyDestinationUpsert(\n  input: DispatchDestinationInput,\n  actor = currentOwnerEmail(),\n  ctx: DispatchCtx = requireDispatchCtx(),\n) {\n  const db = getDb();\n  const timestamp = now();\n  const destinationId = input.id || id();\n  const existing = input.id ? await getDestinationById(input.id, ctx) : null;\n\n  if (existing) {\n    await db\n      .update(schema.dispatchDestinations)\n      .set({\n        name: input.name,\n        platform: input.platform,\n        destination: input.destination,\n        threadRef: input.threadRef || null,\n        notes: input.notes || null,\n        updatedAt: timestamp,\n      })\n      .where(\n        and(\n          eq(schema.dispatchDestinations.id, destinationId),\n          ctxScope(schema.dispatchDestinations, ctx),\n        ),\n      );\n  } else {\n    await db.insert(schema.dispatchDestinations).values({\n      id: destinationId,\n      ownerEmail: ctx.ownerEmail,\n      orgId: ctx.orgId,\n      name: input.name,\n      platform: input.platform,\n      destination: input.destination,\n      threadRef: input.threadRef || null,\n      notes: input.notes || null,\n      createdBy: actor,\n      createdAt: timestamp,\n      updatedAt: timestamp,\n    });\n  }\n\n  await recordAudit({\n    actor,\n    action: existing ? \"destination.updated\" : \"destination.created\",\n    targetType: \"destination\",\n    targetId: destinationId,\n    summary: `${existing ? \"Updated\" : \"Created\"} ${input.platform} destination ${input.name}`,\n    metadata: input,\n  });\n\n  return getDestinationById(destinationId, ctx);\n}\n\nasync function applyDestinationDelete(\n  destinationId: string,\n  actor = currentOwnerEmail(),\n  ctx: DispatchCtx = requireDispatchCtx(),\n) {\n  const db = getDb();\n  const existing = await getDestinationById(destinationId, ctx);\n  if (!existing) {\n    throw new Error(\"Destination not found\");\n  }\n  await db\n    .delete(schema.dispatchDestinations)\n    .where(\n      and(\n        eq(schema.dispatchDestinations.id, destinationId),\n        ctxScope(schema.dispatchDestinations, ctx),\n      ),\n    );\n  await recordAudit({\n    actor,\n    action: \"destination.deleted\",\n    targetType: \"destination\",\n    targetId: destinationId,\n    summary: `Deleted ${existing.platform} destination ${existing.name}`,\n    metadata: existing,\n  });\n  return existing;\n}\n\nasync function notifyApprovers(requestId: string, summary: string) {\n  const policy = await getApprovalPolicy();\n  const apiKey = process.env.SENDGRID_API_KEY;\n  const from = process.env.SENDGRID_FROM_EMAIL;\n  const appUrl = process.env.APP_URL;\n  if (!apiKey || !from || !appUrl || policy.approverEmails.length === 0) return;\n\n  await fetch(\"https://api.sendgrid.com/v3/mail/send\", {\n    method: \"POST\",\n    headers: {\n      Authorization: `Bearer ${apiKey}`,\n      \"Content-Type\": \"application/json\",\n    },\n    body: JSON.stringify({\n      personalizations: [\n        {\n          to: policy.approverEmails.map((email) => ({ email })),\n          subject: \"Dispatch approval requested\",\n        },\n      ],\n      from: { email: from },\n      content: [\n        {\n          type: \"text/plain\",\n          value: `${summary}\\n\\nReview it here: ${appUrl}/approvals`,\n        },\n      ],\n      custom_args: { requestId },\n    }),\n  }).catch(() => {});\n}\n\nasync function createApprovalRequest(input: {\n  changeType: string;\n  targetType: string;\n  targetId?: string | null;\n  summary: string;\n  payload: unknown;\n  beforeValue?: unknown;\n  afterValue?: unknown;\n}) {\n  const db = getDb();\n  const timestamp = now();\n  const requestId = id();\n  await db.insert(schema.dispatchApprovalRequests).values({\n    id: requestId,\n    ownerEmail: currentOwnerEmail(),\n    orgId: currentOrgId(),\n    changeType: input.changeType,\n    targetType: input.targetType,\n    targetId: input.targetId || null,\n    status: \"pending\",\n    summary: input.summary,\n    payload: safeJson(input.payload),\n    beforeValue:\n      input.beforeValue === undefined ? null : safeJson(input.beforeValue),\n    afterValue:\n      input.afterValue === undefined ? null : safeJson(input.afterValue),\n    requestedBy: currentOwnerEmail(),\n    reviewedBy: null,\n    reviewedAt: null,\n    createdAt: timestamp,\n    updatedAt: timestamp,\n  });\n  await recordAudit({\n    action: \"approval.requested\",\n    targetType: input.targetType,\n    targetId: input.targetId || requestId,\n    summary: input.summary,\n    metadata: input,\n  });\n  await notifyApprovers(requestId, input.summary);\n  return getApprovalRequest(requestId);\n}\n\nexport async function upsertDestination(input: DispatchDestinationInput) {\n  const policy = await getApprovalPolicy();\n  if (policy.enabled) {\n    const existing = input.id ? await getDestinationById(input.id) : null;\n    return createApprovalRequest({\n      changeType: \"destination.upsert\",\n      targetType: \"destination\",\n      targetId: input.id || null,\n      summary: `${existing ? \"Update\" : \"Create\"} ${input.platform} destination ${input.name}`,\n      payload: input,\n      beforeValue: existing,\n      afterValue: input,\n    });\n  }\n  return applyDestinationUpsert(input);\n}\n\nexport async function deleteDestination(destinationId: string) {\n  const policy = await getApprovalPolicy();\n  const existing = await getDestinationById(destinationId);\n  if (!existing) {\n    throw new Error(\"Destination not found\");\n  }\n  if (policy.enabled) {\n    return createApprovalRequest({\n      changeType: \"destination.delete\",\n      targetType: \"destination\",\n      targetId: destinationId,\n      summary: `Delete ${existing.platform} destination ${existing.name}`,\n      payload: { id: destinationId },\n      beforeValue: existing,\n      afterValue: null,\n    });\n  }\n  return applyDestinationDelete(destinationId);\n}\n\nexport async function listApprovalRequests() {\n  const db = getDb();\n  const orgId = currentOrgId();\n  return db\n    .select()\n    .from(schema.dispatchApprovalRequests)\n    .where(\n      and(\n        eq(schema.dispatchApprovalRequests.ownerEmail, currentOwnerEmail()),\n        orgId\n          ? eq(schema.dispatchApprovalRequests.orgId, orgId)\n          : isNull(schema.dispatchApprovalRequests.orgId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchApprovalRequests.updatedAt));\n}\n\nasync function getApprovalRequest(\n  requestId: string,\n  ctx: DispatchCtx = requireDispatchCtx(),\n) {\n  const db = getDb();\n  const [row] = await db\n    .select()\n    .from(schema.dispatchApprovalRequests)\n    .where(\n      and(\n        eq(schema.dispatchApprovalRequests.id, requestId),\n        ctxScope(schema.dispatchApprovalRequests, ctx),\n      ),\n    )\n    .limit(1);\n  return row ?? null;\n}\n\nasync function applyApprovedRequest(request: DispatchApprovalRequest) {\n  const payload = JSON.parse(request.payload);\n  const requestCtx = {\n    ownerEmail: request.ownerEmail,\n    orgId: request.orgId,\n  };\n  if (request.changeType === \"destination.upsert\") {\n    return applyDestinationUpsert(\n      payload,\n      request.reviewedBy || currentOwnerEmail(),\n      requestCtx,\n    );\n  }\n  if (request.changeType === \"destination.delete\") {\n    return applyDestinationDelete(\n      payload.id,\n      request.reviewedBy || currentOwnerEmail(),\n      requestCtx,\n    );\n  }\n  if (request.changeType === \"approval-policy.update\") {\n    return applyApprovalPolicy(\n      payload,\n      request.reviewedBy || currentOwnerEmail(),\n    );\n  }\n  throw new Error(`Unsupported approval request type: ${request.changeType}`);\n}\n\nexport async function approveRequest(requestId: string) {\n  const db = getDb();\n  const ctx = requireDispatchCtx();\n  const request = await getApprovalRequest(requestId, ctx);\n  if (!request) throw new Error(\"Approval request not found\");\n  if (request.status !== \"pending\") {\n    throw new Error(\"Only pending approvals can be approved\");\n  }\n  const timestamp = now();\n  await db\n    .update(schema.dispatchApprovalRequests)\n    .set({\n      status: \"approved\",\n      reviewedBy: currentOwnerEmail(),\n      reviewedAt: timestamp,\n      updatedAt: timestamp,\n    })\n    .where(eq(schema.dispatchApprovalRequests.id, requestId));\n  const updated = await getApprovalRequest(requestId, ctx);\n  if (!updated) throw new Error(\"Approval request disappeared\");\n  await applyApprovedRequest(updated);\n  await recordAudit({\n    action: \"approval.approved\",\n    targetType: updated.targetType,\n    targetId: requestId,\n    summary: `Approved ${updated.summary}`,\n    metadata: updated,\n  });\n  return updated;\n}\n\nexport async function rejectRequest(requestId: string, reason?: string | null) {\n  const db = getDb();\n  const request = await getApprovalRequest(requestId);\n  if (!request) throw new Error(\"Approval request not found\");\n  if (request.status !== \"pending\") {\n    throw new Error(\"Only pending approvals can be rejected\");\n  }\n  const timestamp = now();\n  await db\n    .update(schema.dispatchApprovalRequests)\n    .set({\n      status: \"rejected\",\n      reviewedBy: currentOwnerEmail(),\n      reviewedAt: timestamp,\n      updatedAt: timestamp,\n    })\n    .where(eq(schema.dispatchApprovalRequests.id, requestId));\n  await recordAudit({\n    action: \"approval.rejected\",\n    targetType: request.targetType,\n    targetId: requestId,\n    summary: `Rejected ${request.summary}`,\n    metadata: { request, reason: reason || null },\n  });\n  return getApprovalRequest(requestId);\n}\n\nexport async function createLinkToken(platform: string) {\n  const db = getDb();\n  const timestamp = now();\n  // 16 bytes = 128 bits of entropy. Previous size was 4 bytes (32 bits,\n  // ~4.29 billion keyspace) which is brute-forceable in well under an\n  // hour given a 7-day expiry and no rate limiting on /link attempts.\n  // Old 8-hex-char tokens minted before this change continue to verify\n  // until they expire; we don't migrate retroactively. See\n  // /tmp/security-audit/07-webhooks.md (H5).\n  const token = crypto.randomBytes(16).toString(\"hex\");\n  const recordId = id();\n  const owner = currentOwnerEmail();\n  await db.insert(schema.dispatchLinkTokens).values({\n    id: recordId,\n    token,\n    ownerEmail: owner,\n    orgId: currentOrgId(),\n    platform,\n    createdBy: owner,\n    expiresAt: timestamp + 7 * 24 * 60 * 60 * 1000,\n    claimedAt: null,\n    claimedByExternalUserId: null,\n    claimedByExternalUserName: null,\n    createdAt: timestamp,\n    updatedAt: timestamp,\n  });\n  await recordAudit({\n    action: \"identity.link-token-created\",\n    targetType: \"link-token\",\n    targetId: recordId,\n    summary: `Created ${platform} link token for ${owner}`,\n    metadata: { token, platform },\n  });\n  return {\n    token,\n    command: `/link ${token}`,\n    platform,\n    expiresAt: timestamp + 7 * 24 * 60 * 60 * 1000,\n  };\n}\n\nexport async function listIdentityState() {\n  const db = getDb();\n  const owner = currentOwnerEmail();\n  const orgId = currentOrgId();\n  const filters = and(\n    eq(schema.dispatchIdentityLinks.ownerEmail, owner),\n    orgId\n      ? eq(schema.dispatchIdentityLinks.orgId, orgId)\n      : isNull(schema.dispatchIdentityLinks.orgId),\n  );\n  const tokenFilters = and(\n    eq(schema.dispatchLinkTokens.ownerEmail, owner),\n    orgId\n      ? eq(schema.dispatchLinkTokens.orgId, orgId)\n      : isNull(schema.dispatchLinkTokens.orgId),\n  );\n  const [links, tokens] = await Promise.all([\n    db\n      .select()\n      .from(schema.dispatchIdentityLinks)\n      .where(filters)\n      .orderBy(desc(schema.dispatchIdentityLinks.updatedAt)),\n    db\n      .select()\n      .from(schema.dispatchLinkTokens)\n      .where(tokenFilters)\n      .orderBy(desc(schema.dispatchLinkTokens.updatedAt)),\n  ]);\n  return { links, tokens };\n}\n\nexport async function resolveLinkedOwner(\n  platform: string,\n  externalUserId?: string | null,\n  options: {\n    orgId?: string | null;\n    allowAnyOrgFallback?: boolean;\n  } = {},\n) {\n  if (!externalUserId) return null;\n  const db = getDb();\n  const orgId = options.orgId !== undefined ? options.orgId : currentOrgId();\n  const rows = await db\n    .select()\n    .from(schema.dispatchIdentityLinks)\n    .where(\n      and(\n        eq(schema.dispatchIdentityLinks.platform, platform),\n        eq(schema.dispatchIdentityLinks.externalUserId, externalUserId),\n        orgId\n          ? eq(schema.dispatchIdentityLinks.orgId, orgId)\n          : isNull(schema.dispatchIdentityLinks.orgId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchIdentityLinks.updatedAt))\n    .limit(1);\n  if (rows[0]?.ownerEmail) return rows[0].ownerEmail;\n\n  if (!options.allowAnyOrgFallback || orgId) return null;\n\n  // Webhook processors run outside a normal request/org context. A linked\n  // Slack/Telegram identity may still be scoped to an org, so fall back to any\n  // org only when every matching link resolves to the same owner.\n  const fallbackRows = await db\n    .select()\n    .from(schema.dispatchIdentityLinks)\n    .where(\n      and(\n        eq(schema.dispatchIdentityLinks.platform, platform),\n        eq(schema.dispatchIdentityLinks.externalUserId, externalUserId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchIdentityLinks.updatedAt))\n    .limit(25);\n  const owners = new Set(fallbackRows.map((row) => row.ownerEmail));\n  return owners.size === 1 ? fallbackRows[0]?.ownerEmail || null : null;\n}\n\nexport async function consumeLinkToken(input: {\n  platform: string;\n  token: string;\n  externalUserId?: string | null;\n  externalUserName?: string | null;\n}) {\n  if (!input.externalUserId) {\n    throw new Error(\"Linking requires a platform user id\");\n  }\n\n  // Rate-limit failed attempts per (platform, externalUserId). Once\n  // tripped, all further attempts are short-circuited until the block\n  // window passes — including the lookup, so an attacker can't probe\n  // for valid tokens during the block.\n  const blockState = isLinkAttemptBlocked(input.platform, input.externalUserId);\n  if (blockState.blocked) {\n    throw new LinkRateLimitError(blockState.retryAfterMs);\n  }\n\n  const db = getDb();\n  const tokenRows = await db\n    .select()\n    .from(schema.dispatchLinkTokens)\n    .where(\n      and(\n        eq(schema.dispatchLinkTokens.platform, input.platform),\n        eq(schema.dispatchLinkTokens.token, input.token),\n      ),\n    )\n    .orderBy(desc(schema.dispatchLinkTokens.createdAt))\n    .limit(2);\n  if (tokenRows.length > 1) {\n    recordLinkFailure(input.platform, input.externalUserId);\n    throw new Error(\"Link token is ambiguous. Create a fresh token and retry.\");\n  }\n  const tokenRow = tokenRows[0];\n  if (!tokenRow) {\n    recordLinkFailure(input.platform, input.externalUserId);\n    throw new Error(\"Link token not found\");\n  }\n  if (tokenRow.claimedAt) {\n    recordLinkFailure(input.platform, input.externalUserId);\n    throw new Error(\"Link token has already been claimed\");\n  }\n  if (tokenRow.expiresAt < now()) {\n    recordLinkFailure(input.platform, input.externalUserId);\n    throw new Error(\"Link token has expired\");\n  }\n\n  const timestamp = now();\n  const [existing] = await db\n    .select()\n    .from(schema.dispatchIdentityLinks)\n    .where(\n      and(\n        eq(schema.dispatchIdentityLinks.platform, input.platform),\n        eq(schema.dispatchIdentityLinks.externalUserId, input.externalUserId),\n        tokenRow.orgId\n          ? eq(schema.dispatchIdentityLinks.orgId, tokenRow.orgId)\n          : isNull(schema.dispatchIdentityLinks.orgId),\n      ),\n    )\n    .limit(1);\n\n  if (existing) {\n    await db\n      .update(schema.dispatchIdentityLinks)\n      .set({\n        ownerEmail: tokenRow.ownerEmail,\n        orgId: tokenRow.orgId,\n        externalUserName: input.externalUserName || null,\n        linkedBy: tokenRow.createdBy,\n        updatedAt: timestamp,\n      })\n      .where(eq(schema.dispatchIdentityLinks.id, existing.id));\n  } else {\n    await db.insert(schema.dispatchIdentityLinks).values({\n      id: id(),\n      ownerEmail: tokenRow.ownerEmail,\n      orgId: tokenRow.orgId,\n      platform: input.platform,\n      externalUserId: input.externalUserId,\n      externalUserName: input.externalUserName || null,\n      linkedBy: tokenRow.createdBy,\n      createdAt: timestamp,\n      updatedAt: timestamp,\n    });\n  }\n\n  await db\n    .update(schema.dispatchLinkTokens)\n    .set({\n      claimedAt: timestamp,\n      claimedByExternalUserId: input.externalUserId,\n      claimedByExternalUserName: input.externalUserName || null,\n      updatedAt: timestamp,\n    })\n    .where(eq(schema.dispatchLinkTokens.id, tokenRow.id));\n\n  // Successful claim — reset the rate-limit budget so subsequent\n  // links from this external user start fresh.\n  clearLinkFailures(input.platform, input.externalUserId);\n\n  await recordAudit({\n    actor: tokenRow.createdBy,\n    ownerEmail: tokenRow.ownerEmail,\n    orgId: tokenRow.orgId,\n    action: \"identity.linked\",\n    targetType: \"identity-link\",\n    targetId: input.externalUserId,\n    summary: `Linked ${input.platform} user ${input.externalUserName || input.externalUserId}`,\n    metadata: input,\n  });\n\n  return tokenRow.ownerEmail;\n}\n\nexport async function listOverview() {\n  const [destinations, approvals, identities, audit, settings] =\n    await Promise.all([\n      listDestinations(),\n      listApprovalRequests(),\n      listIdentityState(),\n      listAuditEvents(12),\n      getApprovalPolicy(),\n    ]);\n\n  return {\n    counts: {\n      destinations: destinations.length,\n      pendingApprovals: approvals.filter((item) => item.status === \"pending\")\n        .length,\n      linkedIdentities: identities.links.length,\n      activeTokens: identities.tokens.filter(\n        (item) => !item.claimedAt && item.expiresAt > now(),\n      ).length,\n    },\n    recentDestinations: destinations.slice(0, 5),\n    recentApprovals: approvals.slice(0, 5),\n    recentAudit: audit.slice(0, 8),\n    settings,\n  };\n}\n"]}
+{"version":3,"file":"dispatch-store.js","sourceRoot":"","sources":["../../../src/server/lib/dispatch-store.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EACL,mBAAmB,EACnB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AACvD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD,6EAA6E;AAC7E,EAAE;AACF,oFAAoF;AACpF,qEAAqE;AACrE,wEAAwE;AACxE,wEAAwE;AACxE,kBAAkB;AAClB,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,gEAAgE;AAChE,uEAAuE;AACvE,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAO9B,MAAM,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;AAE5D,SAAS,cAAc,CACrB,QAAgB,EAChB,cAAyC;IAEzC,OAAO,GAAG,QAAQ,KAAK,cAAc,IAAI,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAC1C,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,cAAyC;IAEzC,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgB,EAChB,cAAyC;IAEzC,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,mDAAmD;IACnD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CACpC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,GAAG,mBAAmB,CACzC,CAAC;IACF,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACjD,KAAK,CAAC,YAAY,GAAG,KAAK,GAAG,kBAAkB,CAAC;QAChD,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,QAAgB,EAChB,cAAyC;IAEzC,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEf;IADnB,IAAI,GAAG,mBAAmB,CAAC;IACpC,YAA4B,YAAoB;QAC9C,KAAK,CACH,+CAA+C,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,aAAa,CAC7F,CAAC;QAHwB,iBAAY,GAAZ,YAAY,CAAQ;IAIhD,CAAC;CACF;AAmBD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,eAAe,EAAE,IAAI,IAAI,CAAC;AACnC,CAAC;AAaD,MAAM,UAAU,kBAAkB;IAChC,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CACf,KAAQ,EACR,GAAgB;IAEhB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,EAAE;IACT,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,GAAG;IACV,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC5D,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI;QAC9B,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC;YAChD,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CACvB,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CACtD;YACH,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAA6B,EAC7B,KAAK,GAAG,iBAAiB,EAAE;IAE3B,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,CAAC,KAAK,EAAE,mBAAmB,EAAE;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,kBAAkB;QAC1B,UAAU,EAAE,mBAAmB;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACpB,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,qDAAqD;QACzD,QAAQ,EAAE,KAAK;QACf,KAAK;KACN,CAAC,CAAC;IACH,OAAO,iBAAiB,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA6B;IACnE,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,qBAAqB,CAAC;QAC3B,UAAU,EAAE,wBAAwB;QACpC,UAAU,EAAE,mBAAmB;QAC/B,QAAQ,EAAE,mBAAmB;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACpB,CAAC,CAAC,iCAAiC;YACnC,CAAC,CAAC,kCAAkC;QACtC,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KASjC;IACC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC;QACjD,EAAE,EAAE,EAAE,EAAE;QACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,iBAAiB,EAAE;QACnD,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE;QAC/D,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,iBAAiB,EAAE;QACzC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;QAC1D,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAK,GAAG,EAAE;IAC9C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;SAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAC9D,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC7C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAC7C,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;SACnD,KAAK,CAAC,KAAK,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;SACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAC/D,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAC9C,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,aAAqB,EACrB,MAAmB,kBAAkB,EAAE;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;SACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,aAAa,CAAC,EACjD,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAC3C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,KAA+B,EAC/B,KAAK,GAAG,iBAAiB,EAAE,EAC3B,MAAmB,kBAAkB,EAAE;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,aAAa,GAAG,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE;aACL,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;aACnC,GAAG,CAAC;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,SAAS,EAAE,SAAS;SACrB,CAAC;aACD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,aAAa,CAAC,EACjD,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAC3C,CACF,CAAC;IACN,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;YAClD,EAAE,EAAE,aAAa;YACjB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,CAAC;QAChB,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB;QAChE,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,gBAAgB,KAAK,CAAC,IAAI,EAAE;QAC1F,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,aAAqB,EACrB,KAAK,GAAG,iBAAiB,EAAE,EAC3B,MAAmB,kBAAkB,EAAE;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;SACnC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,aAAa,CAAC,EACjD,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAC3C,CACF,CAAC;IACJ,MAAM,WAAW,CAAC;QAChB,KAAK;QACL,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,aAAa;QACzB,QAAQ,EAAE,aAAa;QACvB,OAAO,EAAE,WAAW,QAAQ,CAAC,QAAQ,gBAAgB,QAAQ,CAAC,IAAI,EAAE;QACpE,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,OAAe;IAC/D,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE9E,MAAM,KAAK,CAAC,uCAAuC,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,gBAAgB,EAAE;gBAChB;oBACE,EAAE,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;oBACrD,OAAO,EAAE,6BAA6B;iBACvC;aACF;YACD,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YACrB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,GAAG,OAAO,uBAAuB,MAAM,YAAY;iBAC3D;aACF;YACD,WAAW,EAAE,EAAE,SAAS,EAAE;SAC3B,CAAC;KACH,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAQ3C;IACC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,EAAE,EAAE,CAAC;IACvB,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC;QACtD,EAAE,EAAE,SAAS;QACb,UAAU,EAAE,iBAAiB,EAAE;QAC/B,KAAK,EAAE,YAAY,EAAE;QACrB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,WAAW,EACT,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;QACtE,UAAU,EACR,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QACpE,WAAW,EAAE,iBAAiB,EAAE;QAChC,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IACH,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,oBAAoB;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;QACrC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA+B;IACrE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,OAAO,qBAAqB,CAAC;YAC3B,UAAU,EAAE,oBAAoB;YAChC,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI;YAC1B,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,gBAAgB,KAAK,CAAC,IAAI,EAAE;YACxF,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,aAAqB;IAC3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,qBAAqB,CAAC;YAC3B,UAAU,EAAE,oBAAoB;YAChC,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,aAAa;YACvB,OAAO,EAAE,UAAU,QAAQ,CAAC,QAAQ,gBAAgB,QAAQ,CAAC,IAAI,EAAE;YACnE,OAAO,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE;YAC9B,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,sBAAsB,CAAC,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;SACrC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EACnE,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC;QAClD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAClD,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,MAAmB,kBAAkB,EAAE;IAEvC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC;SACrC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,CAAC,EACjD,QAAQ,CAAC,MAAM,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAC/C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAgC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChD,OAAO,sBAAsB,CAC3B,OAAO,EACP,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,EACzC,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChD,OAAO,sBAAsB,CAC3B,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,EACzC,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,wBAAwB,EAAE,CAAC;QACpD,OAAO,mBAAmB,CACxB,OAAO,EACP,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAC1C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,sBAAsB,EAAE,CAAC;QAClD,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACzE,OAAO,0BAA0B,CAC/B,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,EACzC,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,2BAA2B,EAAE,CAAC;QACvD,MAAM,EAAE,4BAA4B,EAAE,GACpC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACjD,OAAO,4BAA4B,CACjC,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,EACzC,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,2BAA2B,EAAE,CAAC;QACvD,MAAM,EAAE,4BAA4B,EAAE,GACpC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACjD,OAAO,4BAA4B,CACjC,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,EACzC,UAAU,CACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,2BAA2B,EAAE,CAAC;QACvD,MAAM,EAAE,4BAA4B,EAAE,GACpC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QACjD,OAAO,4BAA4B,CACjC,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,UAAU,IAAI,iBAAiB,EAAE,EACzC,UAAU,CACX,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;SACvC,GAAG,CAAC;QACH,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,iBAAiB,EAAE;QAC/B,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,SAAS;KACrB,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9D,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,YAAY,OAAO,CAAC,OAAO,EAAE;QACtC,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,MAAsB;IAC3E,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC;SACvC,GAAG,CAAC;QACH,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,iBAAiB,EAAE;QAC/B,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,SAAS;KACrB,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,mBAAmB;QAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,YAAY,OAAO,CAAC,OAAO,EAAE;QACtC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE;KAC9C,CAAC,CAAC;IACH,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,qEAAqE;IACrE,yDAAyD;IACzD,2CAA2C;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,EAAE,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;QAChD,EAAE,EAAE,QAAQ;QACZ,KAAK;QACL,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,YAAY,EAAE;QACrB,QAAQ;QACR,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAC9C,SAAS,EAAE,IAAI;QACf,uBAAuB,EAAE,IAAI;QAC7B,yBAAyB,EAAE,IAAI;QAC/B,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IACH,MAAM,WAAW,CAAC;QAChB,MAAM,EAAE,6BAA6B;QACrC,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,WAAW,QAAQ,mBAAmB,KAAK,EAAE;QACtD,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;KAC9B,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,OAAO,EAAE,SAAS,KAAK,EAAE;QACzB,QAAQ;QACR,SAAS,EAAE,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,GAAG,CACjB,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,EAClD,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAC/C,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,CACtB,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,EAC/C,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC5C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAC5C,CAAC;IACF,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;aAClC,KAAK,CAAC,OAAO,CAAC;aACd,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACxD,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;aAC/B,KAAK,CAAC,YAAY,CAAC;aACnB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;KACtD,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAgB,EAChB,cAA8B,EAC9B,UAGI,EAAE;IAEN,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,cAAc,EAAE,cAAc,CAAC,EAC/D,KAAK;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAC/C,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAEnD,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IAEvD,wEAAwE;IACxE,6EAA6E;IAC7E,gEAAgE;IAChE,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACnD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,cAAc,EAAE,cAAc,CAAC,CAChE,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;SACrD,KAAK,CAAC,EAAE,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAKtC;IACC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,kEAAkE;IAClE,oEAAoE;IACpE,mEAAmE;IACnE,qCAAqC;IACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,MAAM,SAAS,GAAG,MAAM,EAAE;SACvB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;SAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EACtD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CACjD,CACF;SACA,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;SAClD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,GAAG,GAAG,EAAE,EAAE,CAAC;QAC/B,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;SAClC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EACzD,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACrE,QAAQ,CAAC,KAAK;QACZ,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAC/C,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE;aACL,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;aACpC,GAAG,CAAC;YACH,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAChD,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,SAAS,EAAE,SAAS;SACrB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC;YACnD,EAAE,EAAE,EAAE,EAAE;YACR,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;YAChD,QAAQ,EAAE,QAAQ,CAAC,SAAS;YAC5B,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE;SACL,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACjC,GAAG,CAAC;QACH,SAAS,EAAE,SAAS;QACpB,uBAAuB,EAAE,KAAK,CAAC,cAAc;QAC7C,yBAAyB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;QACzD,SAAS,EAAE,SAAS;KACrB,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAExD,+DAA+D;IAC/D,6CAA6C;IAC7C,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAExD,MAAM,WAAW,CAAC;QAChB,KAAK,EAAE,QAAQ,CAAC,SAAS;QACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,MAAM,EAAE,iBAAiB;QACzB,UAAU,EAAE,eAAe;QAC3B,QAAQ,EAAE,KAAK,CAAC,cAAc;QAC9B,OAAO,EAAE,UAAU,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,cAAc,EAAE;QAC1F,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,UAAU,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,GAC1D,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,gBAAgB,EAAE;QAClB,oBAAoB,EAAE;QACtB,iBAAiB,EAAE;QACnB,eAAe,CAAC,EAAE,CAAC;QACnB,iBAAiB,EAAE;KACpB,CAAC,CAAC;IAEL,OAAO;QACL,MAAM,EAAE;YACN,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,gBAAgB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;iBACpE,MAAM;YACT,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM;YACzC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE,CACpD,CAAC,MAAM;SACT;QACD,kBAAkB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACtC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9B,QAAQ;KACT,CAAC;AACJ,CAAC","sourcesContent":["import crypto from \"node:crypto\";\nimport { and, desc, eq, isNull, or } from \"drizzle-orm\";\nimport { getOrgSetting, putOrgSetting } from \"@agent-native/core/settings\";\nimport {\n  getRequestUserEmail,\n  getRequestOrgId,\n} from \"@agent-native/core/server\";\nimport { getDb, schema } from \"../../db/index.js\";\n\nexport const SHARED_DISPATCH_OWNER = \"dispatch@shared\";\nconst APPROVAL_POLICY_KEY = \"dispatch-approval-policy\";\n\n// ─── /link rate limiting ──────────────────────────────────────────────────\n//\n// Failed `/link <token>` attempts are rate-limited per `(platform, externalUserId)`\n// to deter token brute-force after the H5 entropy bump. The window /\n// threshold are tuned so legitimate retries (typo, expired token) don't\n// trip the limit, while a scripted attacker burns out their per-account\n// budget quickly.\n//\n// State is process-local: works for the single-node dispatch deployment\n// we ship today. TODO: move to a SQL-backed counter table when dispatch\n// is sharded across multiple regions / processes — otherwise an\n// attacker can scale around the limit by hammering more than one node.\nconst LINK_FAIL_WINDOW_MS = 5 * 60 * 1000;\nconst LINK_FAIL_BLOCK_MS = 30 * 60 * 1000;\nconst LINK_FAIL_THRESHOLD = 5;\n\ninterface LinkFailureState {\n  failures: number[]; // unix-ms timestamps of recent failures within the window\n  blockedUntil: number; // unix-ms; 0 if not currently blocked\n}\n\nconst _linkFailureMap = new Map<string, LinkFailureState>();\n\nfunction linkFailureKey(\n  platform: string,\n  externalUserId: string | null | undefined,\n): string {\n  return `${platform}::${externalUserId ?? \"\"}`;\n}\n\nfunction getLinkFailureState(key: string): LinkFailureState {\n  let state = _linkFailureMap.get(key);\n  if (!state) {\n    state = { failures: [], blockedUntil: 0 };\n    _linkFailureMap.set(key, state);\n  }\n  return state;\n}\n\nfunction isLinkAttemptBlocked(\n  platform: string,\n  externalUserId: string | null | undefined,\n): { blocked: true; retryAfterMs: number } | { blocked: false } {\n  if (!externalUserId) return { blocked: false };\n  const key = linkFailureKey(platform, externalUserId);\n  const state = _linkFailureMap.get(key);\n  if (!state) return { blocked: false };\n  const nowMs = Date.now();\n  if (state.blockedUntil > nowMs) {\n    return { blocked: true, retryAfterMs: state.blockedUntil - nowMs };\n  }\n  return { blocked: false };\n}\n\nfunction recordLinkFailure(\n  platform: string,\n  externalUserId: string | null | undefined,\n): void {\n  if (!externalUserId) return;\n  const key = linkFailureKey(platform, externalUserId);\n  const state = getLinkFailureState(key);\n  const nowMs = Date.now();\n  // Drop expired failure timestamps before counting.\n  state.failures = state.failures.filter(\n    (ts) => nowMs - ts < LINK_FAIL_WINDOW_MS,\n  );\n  state.failures.push(nowMs);\n  if (state.failures.length >= LINK_FAIL_THRESHOLD) {\n    state.blockedUntil = nowMs + LINK_FAIL_BLOCK_MS;\n    state.failures = [];\n  }\n}\n\nfunction clearLinkFailures(\n  platform: string,\n  externalUserId: string | null | undefined,\n): void {\n  if (!externalUserId) return;\n  _linkFailureMap.delete(linkFailureKey(platform, externalUserId));\n}\n\n/**\n * 429-style error returned when /link attempts are rate-limited. The\n * adapter layer can branch on `code === \"LINK_RATE_LIMITED\"` to send a\n * platform-appropriate message back to the user.\n */\nexport class LinkRateLimitError extends Error {\n  readonly code = \"LINK_RATE_LIMITED\";\n  constructor(public readonly retryAfterMs: number) {\n    super(\n      `Too many failed link attempts. Try again in ${Math.ceil(retryAfterMs / 60_000)} minute(s).`,\n    );\n  }\n}\n\nexport interface DispatchApprovalPolicy {\n  enabled: boolean;\n  approverEmails: string[];\n}\n\nexport interface DispatchDestinationInput {\n  id?: string;\n  name: string;\n  platform: string;\n  destination: string;\n  threadRef?: string | null;\n  notes?: string | null;\n}\n\ntype DispatchApprovalRequest =\n  typeof schema.dispatchApprovalRequests.$inferSelect;\n\nexport function currentOwnerEmail(): string {\n  const email = getRequestUserEmail();\n  if (!email) throw new Error(\"no authenticated user\");\n  return email;\n}\n\nexport function currentOrgId(): string | null {\n  return getRequestOrgId() || null;\n}\n\n/**\n * Caller-supplied access context for dispatch operations that work by\n * id (destinations, etc.). Looking up a row by id alone is unsafe —\n * UUIDs are not authorization. A row matches the ctx if either the\n * caller owns it or it lives in the caller's active org.\n */\nexport interface DispatchCtx {\n  ownerEmail: string;\n  orgId: string | null;\n}\n\nexport function requireDispatchCtx(): DispatchCtx {\n  return { ownerEmail: currentOwnerEmail(), orgId: currentOrgId() };\n}\n\nfunction ctxScope<T extends { ownerEmail: any; orgId: any }>(\n  table: T,\n  ctx: DispatchCtx,\n) {\n  if (!ctx.orgId) {\n    return and(eq(table.ownerEmail, ctx.ownerEmail), isNull(table.orgId));\n  }\n  return or(eq(table.ownerEmail, ctx.ownerEmail), eq(table.orgId, ctx.orgId));\n}\n\nfunction id() {\n  return crypto.randomUUID();\n}\n\nfunction now() {\n  return Date.now();\n}\n\nfunction safeJson(value: unknown) {\n  return JSON.stringify(value ?? null);\n}\n\nexport async function getApprovalPolicy(): Promise<DispatchApprovalPolicy> {\n  const orgId = currentOrgId();\n  if (!orgId) return { enabled: false, approverEmails: [] };\n  const raw = await getOrgSetting(orgId, APPROVAL_POLICY_KEY);\n  return {\n    enabled: raw?.enabled === true,\n    approverEmails: Array.isArray(raw?.approverEmails)\n      ? raw.approverEmails.filter(\n          (value): value is string => typeof value === \"string\",\n        )\n      : [],\n  };\n}\n\nasync function applyApprovalPolicy(\n  input: DispatchApprovalPolicy,\n  actor = currentOwnerEmail(),\n) {\n  const orgId = currentOrgId();\n  if (!orgId) {\n    throw new Error(\n      \"Dispatch approval settings require an active organization\",\n    );\n  }\n  await putOrgSetting(orgId, APPROVAL_POLICY_KEY, {\n    enabled: input.enabled,\n    approverEmails: input.approverEmails,\n  });\n  await recordAudit({\n    action: \"settings.updated\",\n    targetType: \"dispatch-settings\",\n    targetId: APPROVAL_POLICY_KEY,\n    summary: input.enabled\n      ? \"Enabled approval flow for durable dispatch changes\"\n      : \"Disabled approval flow for durable dispatch changes\",\n    metadata: input,\n    actor,\n  });\n  return getApprovalPolicy();\n}\n\nexport async function setApprovalPolicy(input: DispatchApprovalPolicy) {\n  const current = await getApprovalPolicy();\n  if (!current.enabled) {\n    return applyApprovalPolicy(input);\n  }\n  return createApprovalRequest({\n    changeType: \"approval-policy.update\",\n    targetType: \"dispatch-settings\",\n    targetId: APPROVAL_POLICY_KEY,\n    summary: input.enabled\n      ? \"Update dispatch approval policy\"\n      : \"Disable dispatch approval policy\",\n    payload: input,\n    beforeValue: current,\n    afterValue: input,\n  });\n}\n\nexport async function recordAudit(input: {\n  action: string;\n  targetType: string;\n  targetId?: string | null;\n  summary: string;\n  metadata?: unknown;\n  actor?: string;\n  ownerEmail?: string;\n  orgId?: string | null;\n}) {\n  const db = getDb();\n  const timestamp = now();\n  await db.insert(schema.dispatchAuditEvents).values({\n    id: id(),\n    ownerEmail: input.ownerEmail || currentOwnerEmail(),\n    orgId: input.orgId !== undefined ? input.orgId : currentOrgId(),\n    actor: input.actor || currentOwnerEmail(),\n    action: input.action,\n    targetType: input.targetType,\n    targetId: input.targetId || null,\n    summary: input.summary,\n    metadata: input.metadata ? safeJson(input.metadata) : null,\n    createdAt: timestamp,\n  });\n}\n\nexport async function listAuditEvents(limit = 50) {\n  const db = getDb();\n  const orgId = currentOrgId();\n  return db\n    .select()\n    .from(schema.dispatchAuditEvents)\n    .where(\n      and(\n        eq(schema.dispatchAuditEvents.ownerEmail, currentOwnerEmail()),\n        orgId\n          ? eq(schema.dispatchAuditEvents.orgId, orgId)\n          : isNull(schema.dispatchAuditEvents.orgId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchAuditEvents.createdAt))\n    .limit(limit);\n}\n\nexport async function listDestinations() {\n  const db = getDb();\n  const orgId = currentOrgId();\n  return db\n    .select()\n    .from(schema.dispatchDestinations)\n    .where(\n      and(\n        eq(schema.dispatchDestinations.ownerEmail, currentOwnerEmail()),\n        orgId\n          ? eq(schema.dispatchDestinations.orgId, orgId)\n          : isNull(schema.dispatchDestinations.orgId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchDestinations.updatedAt));\n}\n\nexport async function getDestinationById(\n  destinationId: string,\n  ctx: DispatchCtx = requireDispatchCtx(),\n) {\n  const db = getDb();\n  const [row] = await db\n    .select()\n    .from(schema.dispatchDestinations)\n    .where(\n      and(\n        eq(schema.dispatchDestinations.id, destinationId),\n        ctxScope(schema.dispatchDestinations, ctx),\n      ),\n    )\n    .limit(1);\n  return row ?? null;\n}\n\nasync function applyDestinationUpsert(\n  input: DispatchDestinationInput,\n  actor = currentOwnerEmail(),\n  ctx: DispatchCtx = requireDispatchCtx(),\n) {\n  const db = getDb();\n  const timestamp = now();\n  const destinationId = input.id || id();\n  const existing = input.id ? await getDestinationById(input.id, ctx) : null;\n\n  if (existing) {\n    await db\n      .update(schema.dispatchDestinations)\n      .set({\n        name: input.name,\n        platform: input.platform,\n        destination: input.destination,\n        threadRef: input.threadRef || null,\n        notes: input.notes || null,\n        updatedAt: timestamp,\n      })\n      .where(\n        and(\n          eq(schema.dispatchDestinations.id, destinationId),\n          ctxScope(schema.dispatchDestinations, ctx),\n        ),\n      );\n  } else {\n    await db.insert(schema.dispatchDestinations).values({\n      id: destinationId,\n      ownerEmail: ctx.ownerEmail,\n      orgId: ctx.orgId,\n      name: input.name,\n      platform: input.platform,\n      destination: input.destination,\n      threadRef: input.threadRef || null,\n      notes: input.notes || null,\n      createdBy: actor,\n      createdAt: timestamp,\n      updatedAt: timestamp,\n    });\n  }\n\n  await recordAudit({\n    actor,\n    action: existing ? \"destination.updated\" : \"destination.created\",\n    targetType: \"destination\",\n    targetId: destinationId,\n    summary: `${existing ? \"Updated\" : \"Created\"} ${input.platform} destination ${input.name}`,\n    metadata: input,\n  });\n\n  return getDestinationById(destinationId, ctx);\n}\n\nasync function applyDestinationDelete(\n  destinationId: string,\n  actor = currentOwnerEmail(),\n  ctx: DispatchCtx = requireDispatchCtx(),\n) {\n  const db = getDb();\n  const existing = await getDestinationById(destinationId, ctx);\n  if (!existing) {\n    throw new Error(\"Destination not found\");\n  }\n  await db\n    .delete(schema.dispatchDestinations)\n    .where(\n      and(\n        eq(schema.dispatchDestinations.id, destinationId),\n        ctxScope(schema.dispatchDestinations, ctx),\n      ),\n    );\n  await recordAudit({\n    actor,\n    action: \"destination.deleted\",\n    targetType: \"destination\",\n    targetId: destinationId,\n    summary: `Deleted ${existing.platform} destination ${existing.name}`,\n    metadata: existing,\n  });\n  return existing;\n}\n\nasync function notifyApprovers(requestId: string, summary: string) {\n  const policy = await getApprovalPolicy();\n  const apiKey = process.env.SENDGRID_API_KEY;\n  const from = process.env.SENDGRID_FROM_EMAIL;\n  const appUrl = process.env.APP_URL;\n  if (!apiKey || !from || !appUrl || policy.approverEmails.length === 0) return;\n\n  await fetch(\"https://api.sendgrid.com/v3/mail/send\", {\n    method: \"POST\",\n    headers: {\n      Authorization: `Bearer ${apiKey}`,\n      \"Content-Type\": \"application/json\",\n    },\n    body: JSON.stringify({\n      personalizations: [\n        {\n          to: policy.approverEmails.map((email) => ({ email })),\n          subject: \"Dispatch approval requested\",\n        },\n      ],\n      from: { email: from },\n      content: [\n        {\n          type: \"text/plain\",\n          value: `${summary}\\n\\nReview it here: ${appUrl}/approvals`,\n        },\n      ],\n      custom_args: { requestId },\n    }),\n  }).catch(() => {});\n}\n\nexport async function createApprovalRequest(input: {\n  changeType: string;\n  targetType: string;\n  targetId?: string | null;\n  summary: string;\n  payload: unknown;\n  beforeValue?: unknown;\n  afterValue?: unknown;\n}) {\n  const db = getDb();\n  const timestamp = now();\n  const requestId = id();\n  await db.insert(schema.dispatchApprovalRequests).values({\n    id: requestId,\n    ownerEmail: currentOwnerEmail(),\n    orgId: currentOrgId(),\n    changeType: input.changeType,\n    targetType: input.targetType,\n    targetId: input.targetId || null,\n    status: \"pending\",\n    summary: input.summary,\n    payload: safeJson(input.payload),\n    beforeValue:\n      input.beforeValue === undefined ? null : safeJson(input.beforeValue),\n    afterValue:\n      input.afterValue === undefined ? null : safeJson(input.afterValue),\n    requestedBy: currentOwnerEmail(),\n    reviewedBy: null,\n    reviewedAt: null,\n    createdAt: timestamp,\n    updatedAt: timestamp,\n  });\n  await recordAudit({\n    action: \"approval.requested\",\n    targetType: input.targetType,\n    targetId: input.targetId || requestId,\n    summary: input.summary,\n    metadata: input,\n  });\n  await notifyApprovers(requestId, input.summary);\n  return getApprovalRequest(requestId);\n}\n\nexport async function upsertDestination(input: DispatchDestinationInput) {\n  const policy = await getApprovalPolicy();\n  if (policy.enabled) {\n    const existing = input.id ? await getDestinationById(input.id) : null;\n    return createApprovalRequest({\n      changeType: \"destination.upsert\",\n      targetType: \"destination\",\n      targetId: input.id || null,\n      summary: `${existing ? \"Update\" : \"Create\"} ${input.platform} destination ${input.name}`,\n      payload: input,\n      beforeValue: existing,\n      afterValue: input,\n    });\n  }\n  return applyDestinationUpsert(input);\n}\n\nexport async function deleteDestination(destinationId: string) {\n  const policy = await getApprovalPolicy();\n  const existing = await getDestinationById(destinationId);\n  if (!existing) {\n    throw new Error(\"Destination not found\");\n  }\n  if (policy.enabled) {\n    return createApprovalRequest({\n      changeType: \"destination.delete\",\n      targetType: \"destination\",\n      targetId: destinationId,\n      summary: `Delete ${existing.platform} destination ${existing.name}`,\n      payload: { id: destinationId },\n      beforeValue: existing,\n      afterValue: null,\n    });\n  }\n  return applyDestinationDelete(destinationId);\n}\n\nexport async function listApprovalRequests() {\n  const db = getDb();\n  const orgId = currentOrgId();\n  return db\n    .select()\n    .from(schema.dispatchApprovalRequests)\n    .where(\n      and(\n        eq(schema.dispatchApprovalRequests.ownerEmail, currentOwnerEmail()),\n        orgId\n          ? eq(schema.dispatchApprovalRequests.orgId, orgId)\n          : isNull(schema.dispatchApprovalRequests.orgId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchApprovalRequests.updatedAt));\n}\n\nasync function getApprovalRequest(\n  requestId: string,\n  ctx: DispatchCtx = requireDispatchCtx(),\n) {\n  const db = getDb();\n  const [row] = await db\n    .select()\n    .from(schema.dispatchApprovalRequests)\n    .where(\n      and(\n        eq(schema.dispatchApprovalRequests.id, requestId),\n        ctxScope(schema.dispatchApprovalRequests, ctx),\n      ),\n    )\n    .limit(1);\n  return row ?? null;\n}\n\nasync function applyApprovedRequest(request: DispatchApprovalRequest) {\n  const payload = JSON.parse(request.payload);\n  const requestCtx = {\n    ownerEmail: request.ownerEmail,\n    orgId: request.orgId,\n  };\n  if (request.changeType === \"destination.upsert\") {\n    return applyDestinationUpsert(\n      payload,\n      request.reviewedBy || currentOwnerEmail(),\n      requestCtx,\n    );\n  }\n  if (request.changeType === \"destination.delete\") {\n    return applyDestinationDelete(\n      payload.id,\n      request.reviewedBy || currentOwnerEmail(),\n      requestCtx,\n    );\n  }\n  if (request.changeType === \"approval-policy.update\") {\n    return applyApprovalPolicy(\n      payload,\n      request.reviewedBy || currentOwnerEmail(),\n    );\n  }\n  if (request.changeType === \"dream-proposal.apply\") {\n    const { applyApprovedDreamProposal } = await import(\"./dreams-store.js\");\n    return applyApprovedDreamProposal(\n      payload.proposalId,\n      request.reviewedBy || currentOwnerEmail(),\n      requestCtx,\n    );\n  }\n  if (request.changeType === \"workspace-resource.create\") {\n    const { applyWorkspaceResourceCreate } =\n      await import(\"./workspace-resources-store.js\");\n    return applyWorkspaceResourceCreate(\n      payload.input,\n      request.reviewedBy || currentOwnerEmail(),\n      requestCtx,\n    );\n  }\n  if (request.changeType === \"workspace-resource.update\") {\n    const { applyWorkspaceResourceUpdate } =\n      await import(\"./workspace-resources-store.js\");\n    return applyWorkspaceResourceUpdate(\n      payload.id,\n      payload.input,\n      request.reviewedBy || currentOwnerEmail(),\n      requestCtx,\n    );\n  }\n  if (request.changeType === \"workspace-resource.delete\") {\n    const { applyWorkspaceResourceDelete } =\n      await import(\"./workspace-resources-store.js\");\n    return applyWorkspaceResourceDelete(\n      payload.id,\n      request.reviewedBy || currentOwnerEmail(),\n      requestCtx,\n    );\n  }\n  throw new Error(`Unsupported approval request type: ${request.changeType}`);\n}\n\nexport async function approveRequest(requestId: string) {\n  const db = getDb();\n  const ctx = requireDispatchCtx();\n  const request = await getApprovalRequest(requestId, ctx);\n  if (!request) throw new Error(\"Approval request not found\");\n  if (request.status !== \"pending\") {\n    throw new Error(\"Only pending approvals can be approved\");\n  }\n  const timestamp = now();\n  await db\n    .update(schema.dispatchApprovalRequests)\n    .set({\n      status: \"approved\",\n      reviewedBy: currentOwnerEmail(),\n      reviewedAt: timestamp,\n      updatedAt: timestamp,\n    })\n    .where(eq(schema.dispatchApprovalRequests.id, requestId));\n  const updated = await getApprovalRequest(requestId, ctx);\n  if (!updated) throw new Error(\"Approval request disappeared\");\n  await applyApprovedRequest(updated);\n  await recordAudit({\n    action: \"approval.approved\",\n    targetType: updated.targetType,\n    targetId: requestId,\n    summary: `Approved ${updated.summary}`,\n    metadata: updated,\n  });\n  return updated;\n}\n\nexport async function rejectRequest(requestId: string, reason?: string | null) {\n  const db = getDb();\n  const request = await getApprovalRequest(requestId);\n  if (!request) throw new Error(\"Approval request not found\");\n  if (request.status !== \"pending\") {\n    throw new Error(\"Only pending approvals can be rejected\");\n  }\n  const timestamp = now();\n  await db\n    .update(schema.dispatchApprovalRequests)\n    .set({\n      status: \"rejected\",\n      reviewedBy: currentOwnerEmail(),\n      reviewedAt: timestamp,\n      updatedAt: timestamp,\n    })\n    .where(eq(schema.dispatchApprovalRequests.id, requestId));\n  await recordAudit({\n    action: \"approval.rejected\",\n    targetType: request.targetType,\n    targetId: requestId,\n    summary: `Rejected ${request.summary}`,\n    metadata: { request, reason: reason || null },\n  });\n  return getApprovalRequest(requestId);\n}\n\nexport async function createLinkToken(platform: string) {\n  const db = getDb();\n  const timestamp = now();\n  // 16 bytes = 128 bits of entropy. Previous size was 4 bytes (32 bits,\n  // ~4.29 billion keyspace) which is brute-forceable in well under an\n  // hour given a 7-day expiry and no rate limiting on /link attempts.\n  // Old 8-hex-char tokens minted before this change continue to verify\n  // until they expire; we don't migrate retroactively. See\n  // /tmp/security-audit/07-webhooks.md (H5).\n  const token = crypto.randomBytes(16).toString(\"hex\");\n  const recordId = id();\n  const owner = currentOwnerEmail();\n  await db.insert(schema.dispatchLinkTokens).values({\n    id: recordId,\n    token,\n    ownerEmail: owner,\n    orgId: currentOrgId(),\n    platform,\n    createdBy: owner,\n    expiresAt: timestamp + 7 * 24 * 60 * 60 * 1000,\n    claimedAt: null,\n    claimedByExternalUserId: null,\n    claimedByExternalUserName: null,\n    createdAt: timestamp,\n    updatedAt: timestamp,\n  });\n  await recordAudit({\n    action: \"identity.link-token-created\",\n    targetType: \"link-token\",\n    targetId: recordId,\n    summary: `Created ${platform} link token for ${owner}`,\n    metadata: { token, platform },\n  });\n  return {\n    token,\n    command: `/link ${token}`,\n    platform,\n    expiresAt: timestamp + 7 * 24 * 60 * 60 * 1000,\n  };\n}\n\nexport async function listIdentityState() {\n  const db = getDb();\n  const owner = currentOwnerEmail();\n  const orgId = currentOrgId();\n  const filters = and(\n    eq(schema.dispatchIdentityLinks.ownerEmail, owner),\n    orgId\n      ? eq(schema.dispatchIdentityLinks.orgId, orgId)\n      : isNull(schema.dispatchIdentityLinks.orgId),\n  );\n  const tokenFilters = and(\n    eq(schema.dispatchLinkTokens.ownerEmail, owner),\n    orgId\n      ? eq(schema.dispatchLinkTokens.orgId, orgId)\n      : isNull(schema.dispatchLinkTokens.orgId),\n  );\n  const [links, tokens] = await Promise.all([\n    db\n      .select()\n      .from(schema.dispatchIdentityLinks)\n      .where(filters)\n      .orderBy(desc(schema.dispatchIdentityLinks.updatedAt)),\n    db\n      .select()\n      .from(schema.dispatchLinkTokens)\n      .where(tokenFilters)\n      .orderBy(desc(schema.dispatchLinkTokens.updatedAt)),\n  ]);\n  return { links, tokens };\n}\n\nexport async function resolveLinkedOwner(\n  platform: string,\n  externalUserId?: string | null,\n  options: {\n    orgId?: string | null;\n    allowAnyOrgFallback?: boolean;\n  } = {},\n) {\n  if (!externalUserId) return null;\n  const db = getDb();\n  const orgId = options.orgId !== undefined ? options.orgId : currentOrgId();\n  const rows = await db\n    .select()\n    .from(schema.dispatchIdentityLinks)\n    .where(\n      and(\n        eq(schema.dispatchIdentityLinks.platform, platform),\n        eq(schema.dispatchIdentityLinks.externalUserId, externalUserId),\n        orgId\n          ? eq(schema.dispatchIdentityLinks.orgId, orgId)\n          : isNull(schema.dispatchIdentityLinks.orgId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchIdentityLinks.updatedAt))\n    .limit(1);\n  if (rows[0]?.ownerEmail) return rows[0].ownerEmail;\n\n  if (!options.allowAnyOrgFallback || orgId) return null;\n\n  // Webhook processors run outside a normal request/org context. A linked\n  // Slack/Telegram identity may still be scoped to an org, so fall back to any\n  // org only when every matching link resolves to the same owner.\n  const fallbackRows = await db\n    .select()\n    .from(schema.dispatchIdentityLinks)\n    .where(\n      and(\n        eq(schema.dispatchIdentityLinks.platform, platform),\n        eq(schema.dispatchIdentityLinks.externalUserId, externalUserId),\n      ),\n    )\n    .orderBy(desc(schema.dispatchIdentityLinks.updatedAt))\n    .limit(25);\n  const owners = new Set(fallbackRows.map((row) => row.ownerEmail));\n  return owners.size === 1 ? fallbackRows[0]?.ownerEmail || null : null;\n}\n\nexport async function consumeLinkToken(input: {\n  platform: string;\n  token: string;\n  externalUserId?: string | null;\n  externalUserName?: string | null;\n}) {\n  if (!input.externalUserId) {\n    throw new Error(\"Linking requires a platform user id\");\n  }\n\n  // Rate-limit failed attempts per (platform, externalUserId). Once\n  // tripped, all further attempts are short-circuited until the block\n  // window passes — including the lookup, so an attacker can't probe\n  // for valid tokens during the block.\n  const blockState = isLinkAttemptBlocked(input.platform, input.externalUserId);\n  if (blockState.blocked) {\n    throw new LinkRateLimitError(blockState.retryAfterMs);\n  }\n\n  const db = getDb();\n  const tokenRows = await db\n    .select()\n    .from(schema.dispatchLinkTokens)\n    .where(\n      and(\n        eq(schema.dispatchLinkTokens.platform, input.platform),\n        eq(schema.dispatchLinkTokens.token, input.token),\n      ),\n    )\n    .orderBy(desc(schema.dispatchLinkTokens.createdAt))\n    .limit(2);\n  if (tokenRows.length > 1) {\n    recordLinkFailure(input.platform, input.externalUserId);\n    throw new Error(\"Link token is ambiguous. Create a fresh token and retry.\");\n  }\n  const tokenRow = tokenRows[0];\n  if (!tokenRow) {\n    recordLinkFailure(input.platform, input.externalUserId);\n    throw new Error(\"Link token not found\");\n  }\n  if (tokenRow.claimedAt) {\n    recordLinkFailure(input.platform, input.externalUserId);\n    throw new Error(\"Link token has already been claimed\");\n  }\n  if (tokenRow.expiresAt < now()) {\n    recordLinkFailure(input.platform, input.externalUserId);\n    throw new Error(\"Link token has expired\");\n  }\n\n  const timestamp = now();\n  const [existing] = await db\n    .select()\n    .from(schema.dispatchIdentityLinks)\n    .where(\n      and(\n        eq(schema.dispatchIdentityLinks.platform, input.platform),\n        eq(schema.dispatchIdentityLinks.externalUserId, input.externalUserId),\n        tokenRow.orgId\n          ? eq(schema.dispatchIdentityLinks.orgId, tokenRow.orgId)\n          : isNull(schema.dispatchIdentityLinks.orgId),\n      ),\n    )\n    .limit(1);\n\n  if (existing) {\n    await db\n      .update(schema.dispatchIdentityLinks)\n      .set({\n        ownerEmail: tokenRow.ownerEmail,\n        orgId: tokenRow.orgId,\n        externalUserName: input.externalUserName || null,\n        linkedBy: tokenRow.createdBy,\n        updatedAt: timestamp,\n      })\n      .where(eq(schema.dispatchIdentityLinks.id, existing.id));\n  } else {\n    await db.insert(schema.dispatchIdentityLinks).values({\n      id: id(),\n      ownerEmail: tokenRow.ownerEmail,\n      orgId: tokenRow.orgId,\n      platform: input.platform,\n      externalUserId: input.externalUserId,\n      externalUserName: input.externalUserName || null,\n      linkedBy: tokenRow.createdBy,\n      createdAt: timestamp,\n      updatedAt: timestamp,\n    });\n  }\n\n  await db\n    .update(schema.dispatchLinkTokens)\n    .set({\n      claimedAt: timestamp,\n      claimedByExternalUserId: input.externalUserId,\n      claimedByExternalUserName: input.externalUserName || null,\n      updatedAt: timestamp,\n    })\n    .where(eq(schema.dispatchLinkTokens.id, tokenRow.id));\n\n  // Successful claim — reset the rate-limit budget so subsequent\n  // links from this external user start fresh.\n  clearLinkFailures(input.platform, input.externalUserId);\n\n  await recordAudit({\n    actor: tokenRow.createdBy,\n    ownerEmail: tokenRow.ownerEmail,\n    orgId: tokenRow.orgId,\n    action: \"identity.linked\",\n    targetType: \"identity-link\",\n    targetId: input.externalUserId,\n    summary: `Linked ${input.platform} user ${input.externalUserName || input.externalUserId}`,\n    metadata: input,\n  });\n\n  return tokenRow.ownerEmail;\n}\n\nexport async function listOverview() {\n  const [destinations, approvals, identities, audit, settings] =\n    await Promise.all([\n      listDestinations(),\n      listApprovalRequests(),\n      listIdentityState(),\n      listAuditEvents(12),\n      getApprovalPolicy(),\n    ]);\n\n  return {\n    counts: {\n      destinations: destinations.length,\n      pendingApprovals: approvals.filter((item) => item.status === \"pending\")\n        .length,\n      linkedIdentities: identities.links.length,\n      activeTokens: identities.tokens.filter(\n        (item) => !item.claimedAt && item.expiresAt > now(),\n      ).length,\n    },\n    recentDestinations: destinations.slice(0, 5),\n    recentApprovals: approvals.slice(0, 5),\n    recentAudit: audit.slice(0, 8),\n    settings,\n  };\n}\n"]}

package/dist/server/lib/dreams-store.d.ts

@@ -0,0 +1,398 @@
+import { type DispatchCtx } from "./dispatch-store.js";
+import { type WorkspaceResourceKind } from "./workspace-resources-store.js";
+type DreamStatus = "running" | "completed" | "failed";
+type ProposalTargetType = "personal-memory" | "shared-learnings" | "workspace-instruction" | "workspace-skill" | "workspace-knowledge" | "workspace-agent";
+type ProposalRisk = "low" | "medium" | "high";
+type DreamSourceStatus = "ok" | "timed_out" | "error";
+export interface DreamSourceHealth {
+    sourceId: string;
+    label?: string | null;
+    status: DreamSourceStatus;
+    startedAt: number;
+    completedAt: number;
+    durationMs: number;
+    timeoutMs: number;
+    inspectedThreadCount: number;
+    candidateCount: number;
+    errorCount: number;
+    threadErrorCount: number;
+    message?: string | null;
+}
+interface DreamCandidateReason {
+    code: string;
+    label: string;
+    score: number;
+    evidenceCount: number;
+}
+export interface DreamEvidence {
+    kind: string;
+    label: string;
+    snippet: string;
+    threadId: string;
+    threadTitle?: string;
+    sourceId?: string | null;
+    runId?: string | null;
+    messageIndex?: number;
+    createdAt?: number | null;
+}
+export interface DreamCandidate {
+    thread: {
+        id: string;
+        ownerEmail: string;
+        title: string;
+        preview: string;
+        messageCount: number;
+        createdAt: number;
+        updatedAt: number;
+    };
+    sourceId: string;
+    score: number;
+    reasons: DreamCandidateReason[];
+    evidenceCounts: Record<string, number>;
+    evidence: DreamEvidence[];
+    latestRunStatus: string | null;
+}
+export interface DreamProposalInput {
+    targetType: ProposalTargetType;
+    targetPath: string;
+    title: string;
+    summary: string;
+    rationale: string;
+    content: string;
+    evidence: DreamEvidence[];
+    confidence: number;
+    risk: ProposalRisk;
+}
+export interface DreamMemoryNote {
+    path: string;
+    content: string;
+}
+export interface DreamMemoryContext {
+    personalIndex: string;
+    personalNotes: DreamMemoryNote[];
+    sharedLearnings: string;
+    workspaceResources?: DreamMemoryNote[];
+}
+export interface DreamProposalBuildResult {
+    proposals: DreamProposalInput[];
+    guardrailNotes: string[];
+}
+export interface DreamProposalBuildOptions {
+    personalMemoryAllowed?: boolean;
+    personalMemoryBlockReason?: string | null;
+}
+export interface DreamSettings {
+    scope: "user" | "org";
+    scopeId: string;
+    enabled: boolean;
+    schedule: string;
+    sourceId: string;
+    sourceIds: string[];
+    allSources: boolean;
+    query: string | null;
+    limit: number;
+    sourceTimeoutMs: number;
+    sourceConcurrency: number;
+    sourceStartStaggerMs: number;
+    threadConcurrency: number;
+    threadTimeoutMs: number;
+    minCandidateCount: number;
+}
+export declare function getDreamSettings(): Promise<DreamSettings>;
+export declare function setDreamSettings(input: Partial<Pick<DreamSettings, "enabled" | "schedule" | "sourceId" | "sourceIds" | "allSources" | "query" | "limit" | "sourceTimeoutMs" | "sourceConcurrency" | "sourceStartStaggerMs" | "threadConcurrency" | "threadTimeoutMs" | "minCandidateCount">>): Promise<DreamSettings>;
+interface ListDreamCandidatesInput {
+    sourceId?: string;
+    sourceIds?: string[];
+    allSources?: boolean;
+    query?: string;
+    ownerEmail?: string;
+    limit?: number;
+    sourceTimeoutMs?: number;
+    sourceConcurrency?: number;
+    sourceStartStaggerMs?: number;
+    threadConcurrency?: number;
+    threadTimeoutMs?: number;
+}
+export declare function listDreamCandidates(input: ListDreamCandidatesInput): Promise<{
+    source: Record<string, unknown>;
+    access: Record<string, unknown>;
+    query: string;
+    inspectedThreadCount: number;
+    candidateCount: number;
+    errors: Record<string, unknown>[];
+    sources: DreamSourceHealth[];
+    candidates: DreamCandidate[];
+}>;
+export declare function buildProposalInputs(candidates: DreamCandidate[], memoryContext?: DreamMemoryContext, options?: DreamProposalBuildOptions): DreamProposalBuildResult;
+export declare function createDreamReport(input: {
+    sourceId?: string;
+    sourceIds?: string[];
+    allSources?: boolean;
+    query?: string;
+    ownerEmail?: string;
+    limit?: number;
+    sourceTimeoutMs?: number;
+    sourceConcurrency?: number;
+    sourceStartStaggerMs?: number;
+    threadConcurrency?: number;
+    threadTimeoutMs?: number;
+    title?: string;
+}): Promise<{
+    dream: {
+        sourceHealth: DreamSourceHealth[];
+        id: string;
+        ownerEmail: string;
+        orgId: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+        status: string;
+        summary: string;
+        sourceId: string;
+        title: string;
+        query: string;
+        report: string;
+        candidateCount: number;
+        inspectedThreadCount: number;
+        error: string;
+        startedAt: number;
+        completedAt: number;
+    };
+    proposals: {
+        evidence: DreamEvidence[];
+        id: string;
+        ownerEmail: string;
+        orgId: string;
+        createdAt: number;
+        updatedAt: number;
+        targetType: string;
+        status: string;
+        summary: string;
+        title: string;
+        dreamId: string;
+        targetPath: string;
+        rationale: string;
+        content: string;
+        confidence: number;
+        risk: string;
+        appliedBy: string;
+        appliedAt: number;
+        rejectedBy: string;
+        rejectedAt: number;
+    }[];
+}>;
+export declare function listDreams(input?: {
+    limit?: number;
+    status?: DreamStatus | "all";
+}): Promise<{
+    count: number;
+    dreams: {
+        proposalCounts: Record<string, number>;
+        sourceHealth: DreamSourceHealth[];
+        id: string;
+        ownerEmail: string;
+        orgId: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+        status: string;
+        summary: string;
+        sourceId: string;
+        title: string;
+        query: string;
+        report: string;
+        candidateCount: number;
+        inspectedThreadCount: number;
+        error: string;
+        startedAt: number;
+        completedAt: number;
+    }[];
+}>;
+export declare function getDream(dreamId: string): Promise<{
+    dream: {
+        sourceHealth: DreamSourceHealth[];
+        id: string;
+        ownerEmail: string;
+        orgId: string;
+        createdBy: string;
+        createdAt: number;
+        updatedAt: number;
+        status: string;
+        summary: string;
+        sourceId: string;
+        title: string;
+        query: string;
+        report: string;
+        candidateCount: number;
+        inspectedThreadCount: number;
+        error: string;
+        startedAt: number;
+        completedAt: number;
+    };
+    proposals: {
+        evidence: DreamEvidence[];
+        id: string;
+        ownerEmail: string;
+        orgId: string;
+        createdAt: number;
+        updatedAt: number;
+        targetType: string;
+        status: string;
+        summary: string;
+        title: string;
+        dreamId: string;
+        targetPath: string;
+        rationale: string;
+        content: string;
+        confidence: number;
+        risk: string;
+        appliedBy: string;
+        appliedAt: number;
+        rejectedBy: string;
+        rejectedAt: number;
+    }[];
+}>;
+export declare function previewDreamProposal(proposalId: string): Promise<{
+    proposal: {
+        evidence: DreamEvidence[];
+        id: string;
+        ownerEmail: string;
+        orgId: string;
+        createdAt: number;
+        updatedAt: number;
+        targetType: string;
+        status: string;
+        summary: string;
+        title: string;
+        dreamId: string;
+        targetPath: string;
+        rationale: string;
+        content: string;
+        confidence: number;
+        risk: string;
+        appliedBy: string;
+        appliedAt: number;
+        rejectedBy: string;
+        rejectedAt: number;
+    };
+    target: {
+        type: string;
+        path: string;
+        kind: WorkspaceResourceKind | null;
+        resourceId: string | null;
+    };
+    operation: "create" | "update" | "append";
+    targetExists: boolean;
+    currentContent: string;
+    proposedContent: string;
+    approval: {
+        required: boolean;
+        policyEnabled: boolean;
+        willRequestApproval: boolean;
+    };
+}>;
+export declare function applyApprovedDreamProposal(proposalId: string, actor?: string, ctx?: DispatchCtx): Promise<{
+    proposal: {
+        evidence: DreamEvidence[];
+        id: string;
+        ownerEmail: string;
+        orgId: string;
+        createdAt: number;
+        updatedAt: number;
+        targetType: string;
+        status: string;
+        summary: string;
+        title: string;
+        dreamId: string;
+        targetPath: string;
+        rationale: string;
+        content: string;
+        confidence: number;
+        risk: string;
+        appliedBy: string;
+        appliedAt: number;
+        rejectedBy: string;
+        rejectedAt: number;
+    };
+    result: unknown;
+}>;
+export declare function applyDreamProposal(proposalId: string): Promise<{
+    proposal: {
+        evidence: DreamEvidence[];
+        id: string;
+        ownerEmail: string;
+        orgId: string;
+        createdAt: number;
+        updatedAt: number;
+        targetType: string;
+        status: string;
+        summary: string;
+        title: string;
+        dreamId: string;
+        targetPath: string;
+        rationale: string;
+        content: string;
+        confidence: number;
+        risk: string;
+        appliedBy: string;
+        appliedAt: number;
+        rejectedBy: string;
+        rejectedAt: number;
+    };
+    result: unknown;
+}>;
+export declare function rejectDreamProposal(proposalId: string, reason?: string | null): Promise<{
+    evidence: DreamEvidence[];
+    id: string;
+    ownerEmail: string;
+    orgId: string;
+    createdAt: number;
+    updatedAt: number;
+    targetType: string;
+    status: string;
+    summary: string;
+    title: string;
+    dreamId: string;
+    targetPath: string;
+    rationale: string;
+    content: string;
+    confidence: number;
+    risk: string;
+    appliedBy: string;
+    appliedAt: number;
+    rejectedBy: string;
+    rejectedAt: number;
+}>;
+export declare function ensureDreamJob(input: {
+    schedule?: string;
+    sourceId?: string;
+    sourceIds?: string[];
+    allSources?: boolean;
+    query?: string;
+    limit?: number;
+    sourceTimeoutMs?: number;
+    sourceConcurrency?: number;
+    sourceStartStaggerMs?: number;
+    threadConcurrency?: number;
+    threadTimeoutMs?: number;
+    minCandidateCount?: number;
+}): Promise<{
+    path: string;
+    owner: string;
+    schedule: string;
+    enabled: boolean;
+    runAs: string;
+    sourceId: string;
+    sourceIds: string[];
+    allSources: boolean;
+    query: string;
+    limit: number;
+    sourceTimeoutMs: number;
+    sourceConcurrency: number;
+    sourceStartStaggerMs: number;
+    threadConcurrency: number;
+    threadTimeoutMs: number;
+    minCandidateCount: number;
+}>;
+export {};
+//# sourceMappingURL=dreams-store.d.ts.map

package/dist/server/lib/dreams-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dreams-store.d.ts","sourceRoot":"","sources":["../../../src/server/lib/dreams-store.ts"],"names":[],"mappings":"AAeA,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAM7B,OAAO,EAIL,KAAK,qBAAqB,EAE3B,MAAM,gCAAgC,CAAC;AAsBxC,KAAK,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEtD,KAAK,kBAAkB,GACnB,iBAAiB,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,iBAAiB,GACjB,qBAAqB,GACrB,iBAAiB,CAAC;AACtB,KAAK,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC9C,KAAK,iBAAiB,GAAG,IAAI,GAAG,WAAW,GAAG,OAAO,CAAC;AAEtD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,eAAe,EAAE,CAAC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,eAAe,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AA4HD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC,CAU/D;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,OAAO,CACZ,IAAI,CACF,aAAa,EACX,SAAS,GACT,UAAU,GACV,UAAU,GACV,WAAW,GACX,YAAY,GACZ,OAAO,GACP,OAAO,GACP,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,CACtB,CACF,GACA,OAAO,CAAC,aAAa,CAAC,CAqCxB;AAwwBD,UAAU,wBAAwB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA6MD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB;;;;;;;;;GA+CxE;AAsmBD,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,cAAc,EAAE,EAC5B,aAAa,GAAE,kBAAyC,EACxD,OAAO,GAAE,yBAA8B,GACtC,wBAAwB,CA2R1B;AAwED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+JA;AAED,wBAAsB,UAAU,CAC9B,KAAK,GAAE;IACL,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CACzB;;;;;;;;;;;;;;;;;;;;;;;GAwCP;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAc7C;AA2MD,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;cAU3C,qBAAqB,GAAG,IAAI;oBACtB,MAAM,GAAG,IAAI;;;;;;;;;;;GAoDpC;AAkGD,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,MAAM,EAClB,KAAK,SAAsB,EAC3B,GAAG,GAAE,WAAwE;;;;;;;;;;;;;;;;;;;;;;;;GAQ9E;AAED,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;GAkB1D;AAED,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;GA+BvB;AAwCD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;;;;;;;;;;;;;;;;;GA2EA"}