@arbium/enterprise-agent-connect 0.0.0-stage → 0.1.1

package/dist/packages/server/src/teams/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../../../packages/server/src/teams/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,wCAAwC,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAChG,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAsB,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAwB,MAAM,4CAA4C,CAAC;AACnG,OAAO,EAAE,YAAY,EAAc,MAAM,qCAAqC,CAAC;AAE/E,OAAO,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,UAAU,EACV,WAAW,EACX,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,WAAW,GAIZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAsB,MAAM,aAAa,CAAC;AAG/F,8FAA8F;AAC9F,2FAA2F;AAC3F,4BAA4B;AAE5B,MAAM,IAAI,GAAG,gEAAgE,CAAC;AAC9E,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C;2FAC2F;AAC3F,MAAM,CAAC,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAElD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,gEAAgE;IAChE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,KAAK,CAAC,wBAAwB,CAAC;SAC/B,OAAO,CAAC,aAAa,CAAC;IACzB,yFAAyF;IACzF,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,KAAK,CAAC,wBAAwB,CAAC;SAC/B,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,KAAK,CAAC,wBAAwB,CAAC;SAC/B,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;SACjD,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,EAAE,CAAC;IACd,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC9C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACjE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnE,uFAAuF;IACvF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,sFAAsF;IACtF,oBAAoB;IACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrD,8FAA8F;IAC9F,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACtC,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;IACjF,OAAO,EAAE,sEAAsE;IAC/E,IAAI,EAAE,CAAC,eAAe,CAAC;CACxB,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,WAAW,EAAE;IAChD,OAAO,EAAE,uDAAuD;IAChE,IAAI,EAAE,CAAC,gBAAgB,CAAC;CACzB,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CAAC,GAAuB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE7F,yFAAyF;AACzF,SAAS,aAAa,CAAC,GAAe;IACpC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACjD,OAAO,EAAE,GAAG,IAAI,EAAE,gBAAgB,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,eAAe,EAAE,CAAC;AAErE,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACrE,OAAO;QACL,GAAG,IAAI;QACP,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC;QAChD,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC;QACxD,iFAAiF;QACjF,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;QAC1C,0EAA0E;QAC1E,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;QACjD,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GACf,gFAAgF,CAAC;AAEnF,MAAM,UAAU,gBAAgB,CAAC,IAgBhC;IACC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAEpF,+FAA+F;IAC/F,KAAK,UAAU,YAAY,CAAC,GAAW;QACrC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,CAAC,CAAC;QAC5F,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe;YACrC,MAAM,IAAI,YAAY,CACpB,+FAA+F,CAChG,CAAC;QACJ,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,eAAe,EAAE,EAC1D,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,CACxC;SACF,CAAC;QACF,MAAM,IAAI,GAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,4FAA4F;IAC5F,KAAK,UAAU,UAAU,CAAC,CAAS,EAAE,MAA8B;QACjE,IACE,CAAC,CAAC,MAAM,KAAK,CAAC,mBAAmB,CAC/B,CAAC,CAAC,EAAE,EACJ,MAAM,EACN,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,eAAe,EACjB,CAAC,CAAC,UAAU,CACb,CAAC;YAEF,MAAM,IAAI,YAAY,CAAC,8CAA8C,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,MAAM,cAAc,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE,CAC3C,CAAC,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;IAC7E,yFAAyF;IACzF,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE,CACrC,CAAC,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC;IAC3E,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,0CAA0C,KAAK,EAAE,CAAC,WAAW,wHAAwH,CAAC;IAExL,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,IAAI,CAAC,IAAI,CAAC,SAAS;YACjB,MAAM,IAAI,YAAY,CACpB,qGAAqG,CACtG,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC,CAAC;IAEF,KAAK,UAAU,GAAG,CAAC,GAAW,EAAE,EAAU,EAAE,MAAc,EAAE,MAAc;QACxE,MAAM,KAAK,CAAC,KAAK,CAAC;YAChB,cAAc,EAAE,GAAG;YACnB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,EAAE;YACb,WAAW,EAAE,OAAO;YACpB,IAAI,EAAE,SAAS,MAAM,EAAE;YACvB,MAAM;YACN,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,GAAG,CAAC,GAAW,EAAE,OAAe;QAC7C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,iCAAiC,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CACzB,GAAG,CAAC,IAAI,CACN,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,eAAe,EAAE,EACtD,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAC/B,CAAC;IAEJ,KAAK,UAAU,SAAS,CAAC,GAAW;QAClC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,8CAA8C,CAAC,CAAC;QACjF,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAC1B,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,eAAe,EAAE,EAC1D,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CACjC,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,qFAAqF;IACrF,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,KAA+B,EAAE,MAAe;QACvF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CACzE,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAU,EAAE,GAAG,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,GAAW;YACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,0FAA0F;YAC1F,kDAAkD;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtB,GAAG,SAAS,CAAC,CAAC,CAAC;gBACf,iBAAiB,EAAE,IAAI;oBACrB,CAAC,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC,QAAQ,IAAI,kBAAkB,WAAW;oBACnE,CAAC,CAAC,IAAI;gBACR,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;gBAClD,WAAW,EAAE,MAAM;qBAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;qBAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,EAAE,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,cAAc;oBACrC,cAAc,EAAE,CAAC,CAAC,cAAc;iBACjC,CAAC,CAAC;aACN,CAAC,CAAC,CAAC;QACN,CAAC;QAED,wFAAwF;QACxF,mEAAmE;QACnE,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,OAAe,EAAE,WAAmB,EAAE,EAAU;YAC3E,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,MAAM,IAAI,YAAY,CACpB,4EAA4E,CAC7E,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,QAAQ,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,CAAC,CAAC;YACrE,iFAAiF;YACjF,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CACnF,CAAC;YACF,IAAI,KAAK;gBAAE,MAAM,IAAI,YAAY,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;YACxF,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,KAAK,EAAE,CAAC,WAAW,UAAU,IAAI,EAAE,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC;gBACpC,EAAE;gBACF,cAAc,EAAE,GAAG;gBACnB,OAAO;gBACP,QAAQ;gBACR,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;gBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,eAAe,EAAE,MAAM,CAAC,KAAK;gBAC7B,SAAS,EAAE,EAAE;aACd,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC;oBACvC,MAAM,IAAI,YAAY,CAAC,oCAAoC,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,OAAO,QAAQ,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC;YACzE,OAAO,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAE,CAAC,CAAC;QAC/C,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,OAAe;YAC5C,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,OAAO,WAAW,CAAC;gBACjB,KAAK,EAAE,CAAC,CAAC,EAAE;gBACX,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;gBACjC,SAAS,EAAE,SAAS,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,gFAAgF;QAChF,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAAe,EAAE,QAAgB,EAAE,EAAU;YACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACtB,MAAM,IAAI,YAAY,CAAC,6CAA6C,CAAC,CAAC;YACxE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBACvC,MAAM,IAAI,YAAY,CACpB,sEAAsE,CACvE,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC3D,IAAI,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,QAAQ;gBACxC,MAAM,IAAI,YAAY,CAAC,6DAA6D,CAAC,CAAC;YACxF,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBACpB,QAAQ;gBACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;gBACjC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW;aAChC,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;gBACzD,MAAM,IAAI,YAAY,CACpB,oFAAoF,CACrF,CAAC;YACJ,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,QAAQ,EAAE,CAAC,CAAC;YACjE,OAAO,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE,CAAC,CAAC;QACjD,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAAe;YAC3C,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,iCAAiC,CAAC,CAAC;YAC3E,OAAO,UAAU,CAAC;gBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,SAAS,EAAE,SAAS,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,oFAAoF;QACpF,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,OAAe,EAAE,EAAU;YAC3D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,KAAK,EAAE,CAAC,WAAW,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAC3C,CAAC,CAAC,EAAE,EACJ,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,WAAW,EAAE,EAClD,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,KAAK,EACZ,CAAC,CAAC,UAAU,CACb,CAAC;YACF,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,YAAY,CAAC,8CAA8C,CAAC,CAAC;YACnF,MAAM,GAAG,CACP,GAAG,EACH,EAAE,EACF,oBAAoB,EACpB,OAAO,CAAC,CAAC,EAAE,SAAS,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CACvE,CAAC;YACF,OAAO;gBACL,GAAG,EAAE,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE,CAAC;gBAC5C,mEAAmE;gBACnE,OAAO,EAAE,CAAC,CAAC,QAAQ;oBACjB,CAAC,CAAC,mCAAmC,CAAC,CAAC,QAAQ,8BAA8B;oBAC7E,CAAC,CAAC,IAAI;gBACR,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,mBAAmB,CAAC,GAAW,EAAE,OAAe,EAAE,EAAU;YAChE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;YAChD,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,eAAe,IAAI,CAAC,gBAAgB;gBACvC,MAAM,IAAI,YAAY,CAAC,0CAA0C,CAAC,CAAC;YACrE,IAAI,CAAC,CAAC,QAAQ;gBACZ,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;oBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,WAAW,EAAE,eAAe;oBAC5B,UAAU,EAAE,gBAAgB;iBAC7B,CAAC,CAAC;YACL,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACzF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAC3C,CAAC,CAAC,EAAE,EACJ,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,EAC3C,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,KAAK,EACZ,CAAC,CAAC,UAAU,CACb,CAAC;YACF,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,YAAY,CAAC,8CAA8C,CAAC,CAAC;YACnF,MAAM,GAAG,CACP,GAAG,EACH,EAAE,EACF,oBAAoB,EACpB,OAAO,CAAC,CAAC,EAAE,IAAI,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,UAAU,OAAO,mBAAmB,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE,CAC5H,CAAC;YACF,OAAO,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE,CAAC,CAAC;QACjD,CAAC;QAED,uEAAuE;QACvE,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,OAAe;YACzC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7C,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAChC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAClD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBACjC,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,OAAe;YAC5C,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACtD,CAAC;QAED,qFAAqF;QACrF,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,OAAe,EAAE,cAAsB,EAAE,EAAU;YAC7E,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBAAE,MAAM,IAAI,YAAY,CAAC,iCAAiC,CAAC,CAAC;YACxF,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAC3C,CAAC;YACF,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,YAAY,CAAC,8CAA8C,CAAC,CAAC;YACnF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE;gBAC7E,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa;gBAChF,IAAI,EAAE;oBACJ,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,qBAAqB,CAAC,CAAC,WAAW,eAAe,KAAK,EAAE,CAAC,WAAW,OAAO,EAAE,GAAG;iBACvF;aACF,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBACnB,MAAM,IAAI,YAAY,CAAC,4CAA4C,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACpF,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,iBAAiB,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC;QAED,2FAA2F;QAC3F,sFAAsF;QACtF,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,OAAe,EAAE,EAAU;YACtD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpB,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChE,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,IAAI;gBACN,IAAI,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACnF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAClD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7B,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxD,MAAM,GAAG,CACP,GAAG,EACH,EAAE,EACF,YAAY,EACZ,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3I,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,aAAa,CAAC;oBACrB,KAAK,EAAE,CAAC,CAAC,EAAE;oBACX,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI;oBAC9C,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,WAAW,EAAE,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;iBACzC,CAAC;gBACF,MAAM;aACP,CAAC;QACJ,CAAC;QAED,yBAAyB;QAEzB,0FAA0F;QAC1F,KAAK,CAAC,UAAU,CAAC,GAAW;YAC1B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,MAAe,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;gBACjF,OAAO,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,SAAS,CAAC;YACd,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qEAAqE;gBACrE,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAClD,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtE,OAAO,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QAED,kFAAkF;QAClF,sFAAsF;QACtF,wDAAwD;QACxD,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAAe,EAAE,WAAmB,EAAE,EAAU;YAC5E,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM,IAAI,YAAY,CAAC,+BAA+B,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM;gBACT,MAAM,IAAI,YAAY,CACpB,mFAAmF,CACpF,CAAC;YACJ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC1C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;oBACxD,MAAM,IAAI,YAAY,CAAC,eAAe,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAE,CAAC;YACnD,IAAI,CAAC,CAAC,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,oCAAoC,CAAC,CAAC;YAC7E,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;gBAChC,MAAM,IAAI,YAAY,CACpB,mFAAmF,CACpF,CAAC;YACJ,qFAAqF;YACrF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;gBAChC,IAAI;gBACJ,GAAG,EAAE;oBACH,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;iBAClC;gBACD,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;oBACnB,IAAI,CAAC;wBACH,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAC5B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;4BAAE,MAAM,KAAK,CAAC;wBACjF,+EAA+E;wBAC/E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;wBAC9C,MAAM,IAAI,YAAY,CACpB,IAAI,CAAC,MAAM;4BACT,CAAC,CAAC,+EAA+E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;4BAClG,CAAC,CAAC,0FAA0F,CAC/F,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,MAAM;gBACN,SAAS,EAAE,SAAS,EAAE;gBACtB,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,CAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;oBACd,QAAQ;oBACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;oBACjC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW;iBAChC,CAAC;gBACJ,KAAK;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;gBAChC,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnE,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,EAAE,aAAa,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChF,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,CACP,GAAG,EACH,EAAE,EACF,cAAc,EACd,OAAO,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACzE,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9B,MAAM,IAAI,YAAY,CACpB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,EAAE,OAAO;oBACrD,gDAAgD,CACnD,CAAC;YACJ,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;gBACnF,MAAM,IAAI,YAAY,CACpB,oFAAoF,CACrF,CAAC;YACJ,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAE,CAAC,EAAE,CAAC;QAC/E,CAAC;QAED,wFAAwF;QACxF,iEAAiE;QACjE,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,WAAmB;YAClE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBACzC,MAAM,IAAI,YAAY,CAAC,6BAA6B,CAAC,CAAC;YACxD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE;gBAC3C,GAAG;gBACH,GAAG,EAAE,iBAAiB,OAAO,EAAE;gBAC/B,OAAO,EAAE,EAAE;gBACX,WAAW;aACZ,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE;oBAC5C,KAAK;oBACL,WAAW;oBACX,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;oBACzB,KAAK,EAAE,aAAa;iBACrB,CAAC;gBACF,KAAK;aACN,CAAC;QACJ,CAAC;QAED,kFAAkF;QAClF,wFAAwF;QACxF,4EAA4E;QAC5E,KAAK,CAAC,aAAa,CACjB,GAAW,EACX,KAAmF;YAEnF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO;gBACV,MAAM,IAAI,YAAY,CAAC,6DAA6D,CAAC,CAAC;YACxF,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACnF,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;YACrE,IAAI,KAAK;gBACP,MAAM,IAAI,YAAY,CACpB,kCAAkC,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC3F,CAAC;YACJ,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,qDAAqD,CAAC,CAAC;YACzF,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,8CAA8C;YAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBAC1B,MAAM,IAAI,YAAY,CAAC,0DAA0D,CAAC,CAAC;YACrF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC1E,IAAI;gBACJ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,aAAa;aACrB,CAAC,CAAC;YACH,WAAW,CAAC,MAAM,EAAE;gBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC;aAChC,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;gBAC/C,MAAM,IAAI,YAAY,CAAC,uDAAuD,CAAC,CAAC;YAClF,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,cAAc,CACpC;gBACE,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,OAAO;gBACP,GAAG,EAAE,UAAU,CAAC;oBACd,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,eAAe,EAAE,CAAC,CAAC,eAAe;oBAClC,SAAS,EAAE,SAAS,EAAE;iBACvB,CAAC;aACH,EACD,IAAI,CAAC,KAAK,CACX,CAAC;YACF,wFAAwF;YACxF,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5F,MAAM,GAAG,CACP,GAAG,EACH,KAAK,CAAC,EAAE,EACR,aAAa,EACb,OAAO,CAAC,CAAC,EAAE,YAAY,SAAS,CAAC,YAAY,YAAY,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,iBAAiB,GAAG,EAAE,CACrI,CAAC;YACF,MAAM,UAAU,CAAC,CAAC,EAAE;gBAClB,GAAG,CAAC,CAAC,MAAM;gBACX,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,gBAAgB,EAAE,OAAO;aAC1B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1D,CAAC;QAED,oEAAoE;QACpE,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,OAAe,EAAE,IAAuB,EAAE,KAAa;YACvF,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxB,OAAO,aAAa,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,wFAAwF;QACxF,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,OAAe,EAAE,IAAiB,EAAE,KAAa,EAAE,EAAU;YACtF,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,YAAY;gBAC3C,MAAM,IAAI,YAAY,CAAC,0CAA0C,CAAC,CAAC;YACrE,MAAM,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5E,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC5C,MAAM,IAAI,YAAY,CACpB,IAAI,KAAK,MAAM;oBACb,CAAC,CAAC,8DAA8D;oBAChE,CAAC,CAAC,UAAU,IAAI,gBAAgB,CACnC,CAAC;YACJ,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9D,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAC3D,MAAM,IAAI,YAAY,CACpB,iLAAiL,CAClL,CAAC;YACJ,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;gBAChC,MAAM,IAAI,YAAY,CACpB,mFAAmF,CACpF,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9D,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC,CAAC;YACzE,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,OAAe;YACxC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,+EAA+E;YAC/E,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;QAED,oFAAoF;QACpF,0CAA0C;QAC1C,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAAe,EAAE,GAAY;YACzD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;YAC3E,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,YAAY,CAAC,oCAAoC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACxF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/E,SAAS,EAAE,CAAC,CAAC,2DAA2D;YACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,aAAa;gBAC1B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC/D,CAAC,CAAC,QAAQ,EAAE,MAAM;oBAChB,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAY,EAAE;oBAC/D,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,GAAG,GAAG;gBACV,OAAO;gBACP,GAAG,KAAK;gBACR,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;gBAC5C,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;gBAC1C,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,MAAM,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;gBAClC,WAAW,EAAE,MAAM,EAAE,KAAK,IAAI,IAAI;gBAClC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC5D,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9D,SAAS,EAAE,EAAE;aACd,CAAC;YACF,MAAM,MAAM,GAAG,aAAa,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1F,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACpE,oFAAoF;YACpF,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAC9C,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,GAAG,CACP,GAAG,EACH,EAAE,EACF,aAAa,EACb,SAAS,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,WAAW,GAAG,CAC/K,CAAC;YACF,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,OAAe,EAAE,KAAa;YACpD,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QAED,8CAA8C;QAE9C,KAAK,CAAC,SAAS,CAAC,GAAW;YACzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,GAAG;gBACR,CAAC,CAAE;oBACC,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;oBACzB,EAAE,EAAE,GAAG,CAAC,WAAW;oBACnB,EAAE,EAAE,GAAG,CAAC,WAAW;iBACV;gBACb,CAAC,CAAE,EAAE,GAAG,EAAE,KAAK,EAAY,CAAC;QAChC,CAAC;QAED,0FAA0F;QAC1F,sBAAsB;QACtB,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,MAAc,EAAE,EAAU;YACxD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7C,MAAM,IAAI,YAAY,CAAC,iDAAiD,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;YAC/E,MAAM,KAAK,CAAC,YAAY,CAAC;gBACvB,cAAc,EAAE,GAAG;gBACnB,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;gBACpC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,eAAe,EAAE,MAAM,CAAC,KAAK;gBAC7B,eAAe,EAAE,YAAY;gBAC7B,WAAW,EAAE,EAAE;aAChB,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACxE,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,GAAW;YAC5B,OAAO,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7C,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,EAAU;YAC3C,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,OAAO;gBAAE,MAAM,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;YAChE,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAID;;wFAEwF;AACxF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAGC,EACD,GAAkB;IAElB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,IACE,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC;YAE9F,IAAI,EAAE,CAAC;IACX,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC;YAClF,UAAU,EAAE,CAAC;IACjB,CAAC;IACD,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5F,IAAI,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACvF,cAAc,EAAE,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AAC9C,CAAC"}

package/dist/packages/server/src/teams/approval.js

@@ -0,0 +1,118 @@
+// Approval cards: what an agent posts to ask one person to approve or reject, how the card looks
+// before and after the answer, and the answer Teams expects to a click. The click itself is
+// handled by the runtime (runtime.ts), after the Bot Framework token checks (jwt.ts: the token
+// is checked, the body is not signed). docs/teams.md "Approval cards".
+//
+// Universal Actions (Action.Execute): a click is an `adaptiveCard/action` invoke to the bot,
+// answered in the same HTTP response with a card that replaces the clicker's view; everyone
+// else's view changes when the bot edits its message (PUT …/activities/{id}). Sources in
+// docs/teams.md [28]-[31].
+import { createHash, randomBytes } from "node:crypto";
+export const APPROVAL_DAYS = 7;
+export const MAX_COMMENT = 1000;
+// What the agent holds. A random value, kept only as its hash; the card carries the row id
+// instead, which answers nothing by itself (only the approver's own click counts).
+export const newApprovalToken = () => `appr_${randomBytes(32).toString("base64url")}`;
+export const hashApprovalToken = (token) => createHash("sha256").update(token).digest("hex");
+export const looksLikeApprovalToken = (token) => /^appr_[A-Za-z0-9_-]{43}$/.test(token);
+/** pending, approved, rejected, or expired (pending past its time). */
+export const approvalStatus = (a) => a.status === "pending" && a.expired ? "expired" : a.status;
+// Adaptive Cards' DATE()/TIME() take RFC 3339 without fractional seconds, shown in the reader's
+// own time zone.
+const when = (iso) => {
+    const t = iso.replace(/\.\d+Z$/, "Z");
+    return `{{DATE(${t}, SHORT)}} {{TIME(${t})}}`;
+};
+const CARD = {
+    $schema: "http://adaptivecards.io/schemas/adaptive-card.json",
+    type: "AdaptiveCard",
+    // Universal Actions need 1.4 or later; Teams' own page says 1.5.
+    version: "1.5",
+};
+/** The card as it should look now: buttons while pending, the decision once made. */
+export function approvalCard(a) {
+    const status = approvalStatus(a);
+    const body = [
+        { type: "TextBlock", text: a.title, weight: "Bolder", size: "Medium", wrap: true },
+        { type: "TextBlock", text: a.body, wrap: true },
+    ];
+    if (a.facts.length)
+        body.push({
+            type: "FactSet",
+            facts: a.facts.map((f) => ({ title: f.name, value: f.value })),
+        });
+    if (status === "pending") {
+        body.push({
+            type: "TextBlock",
+            text: `Waiting for ${a.approverName}. Only they can answer.`,
+            isSubtle: true,
+            wrap: true,
+        }, {
+            type: "Input.Text",
+            id: "comment",
+            placeholder: "Comment (optional)",
+            isMultiline: true,
+            maxLength: MAX_COMMENT,
+        }, {
+            // Wrapped in an ActionSet, as Microsoft recommends for Action.Execute.
+            type: "ActionSet",
+            actions: [
+                {
+                    type: "Action.Execute",
+                    title: "Approve",
+                    verb: "approve",
+                    style: "positive",
+                    data: { approval: a.id },
+                },
+                {
+                    type: "Action.Execute",
+                    title: "Reject",
+                    verb: "reject",
+                    style: "destructive",
+                    data: { approval: a.id },
+                },
+            ],
+        });
+    }
+    else if (status === "expired") {
+        body.push({
+            type: "TextBlock",
+            text: `Expired ${when(a.expiresAt)} without an answer from ${a.approverName}.`,
+            weight: "Bolder",
+            wrap: true,
+        });
+    }
+    else {
+        body.push({
+            type: "TextBlock",
+            text: `${status === "approved" ? "Approved" : "Rejected"} by ${a.decidedByName ?? a.approverName} ${when(a.decidedAt)}`,
+            weight: "Bolder",
+            color: status === "approved" ? "Good" : "Attention",
+            wrap: true,
+        });
+        if (a.comment)
+            body.push({ type: "TextBlock", text: a.comment, wrap: true, isSubtle: true });
+    }
+    return { ...CARD, body };
+}
+export const cardAttachment = (card) => ({
+    contentType: "application/vnd.microsoft.card.adaptive",
+    content: card,
+});
+// The body of the HTTP 200 answering an adaptiveCard/action invoke.
+export const invokeCard = (card) => ({
+    statusCode: 200,
+    type: "application/vnd.microsoft.card.adaptive",
+    value: card,
+});
+export const invokeMessage = (text) => ({
+    statusCode: 200,
+    type: "application/vnd.microsoft.activity.message",
+    value: text,
+});
+export const invokeError = (message) => ({
+    statusCode: 400,
+    type: "application/vnd.microsoft.error",
+    value: { code: "BadRequest", message },
+});
+//# sourceMappingURL=approval.js.map

package/dist/packages/server/src/teams/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../../../../packages/server/src/teams/approval.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,4FAA4F;AAC5F,+FAA+F;AAC/F,uEAAuE;AACvE,EAAE;AACF,6FAA6F;AAC7F,4FAA4F;AAC5F,yFAAyF;AACzF,2BAA2B;AAE3B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC;AA4BhC,2FAA2F;AAC3F,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,QAAQ,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,EAAE,CACjD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEhG,uEAAuE;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAA0C,EAAE,EAAE,CAC3E,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAExE,gGAAgG;AAChG,iBAAiB;AACjB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC,qBAAqB,CAAC,KAAK,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG;IACX,OAAO,EAAE,oDAAoD;IAC7D,IAAI,EAAE,cAAc;IACpB,iEAAiE;IACjE,OAAO,EAAE,KAAK;CACN,CAAC;AAEX,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,CAAc;IACzC,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAA8B;QACtC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;QAClF,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;KAChD,CAAC;IACF,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM;QAChB,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;SAC/D,CAAC,CAAC;IACL,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CACP;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,eAAe,CAAC,CAAC,YAAY,yBAAyB;YAC5D,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;SACX,EACD;YACE,IAAI,EAAE,YAAY;YAClB,EAAE,EAAE,SAAS;YACb,WAAW,EAAE,oBAAoB;YACjC,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,WAAW;SACvB,EACD;YACE,uEAAuE;YACvE,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,gBAAgB;oBACtB,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,UAAU;oBACjB,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;iBACzB;gBACD;oBACE,IAAI,EAAE,gBAAgB;oBACtB,KAAK,EAAE,QAAQ;oBACf,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,aAAa;oBACpB,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;iBACzB;aACF;SACF,CACF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,YAAY,GAAG;YAC9E,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,EAAE;YACxH,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW;YACnD,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAA6B,EAAE,EAAE,CAAC,CAAC;IAChE,WAAW,EAAE,yCAAyC;IACtD,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH,oEAAoE;AACpE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAA6B,EAAE,EAAE,CAAC,CAAC;IAC5D,UAAU,EAAE,GAAG;IACf,IAAI,EAAE,yCAAyC;IAC/C,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;IAC9C,UAAU,EAAE,GAAG;IACf,IAAI,EAAE,4CAA4C;IAClD,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC;IAC/C,UAAU,EAAE,GAAG;IACf,IAAI,EAAE,iCAAiC;IACvC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE;CACvC,CAAC,CAAC"}

package/dist/packages/server/src/teams/bot.js

@@ -0,0 +1,124 @@
+import { createHash } from "node:crypto";
+import { brand } from "../../../connector-kit/src/branding.js";
+import { clientAssertion } from "../../../connector-kit/src/certificate.js";
+import { ConnectError, TokenCache, } from "../../../connector-kit/src/types.js";
+// An agent's own bot signing in to its customer's tenant with the certificate the service made for
+// it: Bot Connector tokens to post, Graph tokens to read where it is installed (resource-
+// specific consent, never a tenant-wide permission). docs/teams.md 2.3, 3, 4.
+const LOGIN = "https://login.microsoftonline.com";
+const GRAPH = "https://graph.microsoft.com";
+export const BOT_CONNECTOR_SCOPE = "https://api.botframework.com/.default";
+const GRAPH_SCOPE = `${GRAPH}/.default`;
+// Teams' Bot Connector addresses. A service address comes from a token-checked activity; this
+// keeps the bot's token from ever being sent anywhere else.
+const SERVICE_HOST = /^https:\/\/smba\.(trafficmanager\.net|infra\.(gcc|gov)\.teams\.microsoft\.(com|us))\//;
+// Microsoft asks bots to retry these with backoff [16].
+const RETRY = new Set([412, 429, 502, 504]);
+const BACKOFF_MS = [500, 1500, 4000];
+export function validServiceUrl(url) {
+    return typeof url === "string" && SERVICE_HOST.test(url);
+}
+const join = (serviceUrl, path) => `${serviceUrl.replace(/\/+$/, "")}${path}`;
+async function parse(res) {
+    const text = await res.text();
+    let data = null;
+    if (text)
+        try {
+            data = JSON.parse(text);
+        }
+        catch {
+            data = text;
+        }
+    return { status: res.status, data };
+}
+export function botClient(fetchImpl = fetch, sleep = (ms) => new Promise((r) => setTimeout(r, ms))) {
+    const tokens = new TokenCache();
+    async function mint(bot, scope) {
+        const tokenUrl = `${LOGIN}/${bot.tenantId}/oauth2/v2.0/token`;
+        const res = await fetchImpl(tokenUrl, {
+            method: "POST",
+            redirect: "error",
+            headers: { "content-type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                grant_type: "client_credentials",
+                client_id: bot.botAppId,
+                scope,
+                client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
+                client_assertion: clientAssertion({
+                    clientId: bot.botAppId,
+                    tokenUrl,
+                    certificate: bot.certificate,
+                    privateKey: bot.privateKey,
+                }),
+            }),
+        });
+        const body = (await res.json().catch(() => ({})));
+        if (!res.ok || !body.access_token) {
+            const why = (body.error_description ?? body.error ?? String(res.status)).split(/\r?\n/)[0];
+            throw new ConnectError(`Microsoft refused the bot's sign-in: ${why.slice(0, 300)}`);
+        }
+        return { token: body.access_token, expiresIn: body.expires_in ?? 3600 };
+    }
+    // Per bot, certificate and scope, so a switched certificate never reuses an old token.
+    const key = (bot, scope) => createHash("sha256")
+        .update([bot.botAppId, bot.tenantId, bot.certificate, scope].join("\n"))
+        .digest("hex");
+    async function authorized(bot, scope, send) {
+        const k = key(bot, scope);
+        let res = await send(await tokens.get(k, () => mint(bot, scope)));
+        if (res.status === 401) {
+            tokens.forget(k);
+            res = await send(await tokens.get(k, () => mint(bot, scope)));
+        }
+        return res;
+    }
+    return {
+        /** Signs in once, without caching: proves a bot's app id and certificate, and that the
+         *  app has no organization-wide Microsoft Graph permissions (a bot reads only where it was
+         *  added, by resource-specific consent). */
+        async prove(bot) {
+            await mint(bot, BOT_CONNECTOR_SCOPE);
+            const { token } = await mint(bot, GRAPH_SCOPE);
+            let roles;
+            try {
+                roles = JSON.parse(Buffer.from(token.split(".")[1], "base64url").toString("utf8")).roles;
+            }
+            catch {
+                throw new ConnectError(`Microsoft returned a token ${brand().productName} could not read`);
+            }
+            if (Array.isArray(roles) && roles.length)
+                throw new ConnectError(`This app has organization-wide Microsoft Graph permissions (${roles.slice(0, 5).join(", ")}). A bot needs none: remove them from the app registration, or set up a new bot.`);
+        },
+        /** A Bot Connector call at a conversation's service address, retried on Microsoft's
+         *  throttling answers. */
+        async connector(bot, serviceUrl, request) {
+            if (!validServiceUrl(serviceUrl))
+                throw new Error(`Not a Teams service address: ${serviceUrl}`);
+            for (let attempt = 0;; attempt++) {
+                const res = await authorized(bot, BOT_CONNECTOR_SCOPE, (token) => fetchImpl(join(serviceUrl, request.path), {
+                    method: request.method,
+                    redirect: "error",
+                    headers: {
+                        authorization: `Bearer ${token}`,
+                        accept: "application/json",
+                        ...(request.body === undefined ? {} : { "content-type": "application/json" }),
+                    },
+                    body: request.body === undefined ? undefined : JSON.stringify(request.body),
+                }));
+                if (!RETRY.has(res.status) || attempt >= BACKOFF_MS.length)
+                    return parse(res);
+                await res.body?.cancel();
+                await sleep(BACKOFF_MS[attempt] * (0.5 + Math.random()));
+            }
+        },
+        /** A Graph read with the bot's own token. */
+        async graph(bot, path) {
+            const res = await authorized(bot, GRAPH_SCOPE, (token) => fetchImpl(`${GRAPH}${path}`, {
+                redirect: "error",
+                headers: { authorization: `Bearer ${token}`, accept: "application/json" },
+            }));
+            return parse(res);
+        },
+    };
+}
+//# sourceMappingURL=bot.js.map

package/dist/packages/server/src/teams/bot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.js","sourceRoot":"","sources":["../../../../../packages/server/src/teams/bot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,wCAAwC,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAC5E,OAAO,EACL,YAAY,EACZ,UAAU,GAGX,MAAM,qCAAqC,CAAC;AAE7C,mGAAmG;AACnG,0FAA0F;AAC1F,8EAA8E;AAE9E,MAAM,KAAK,GAAG,mCAAmC,CAAC;AAClD,MAAM,KAAK,GAAG,6BAA6B,CAAC;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AAC3E,MAAM,WAAW,GAAG,GAAG,KAAK,WAAW,CAAC;AACxC,8FAA8F;AAC9F,4DAA4D;AAC5D,MAAM,YAAY,GAChB,uFAAuF,CAAC;AAC1F,wDAAwD;AACxD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC5C,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AASrC,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,UAAkB,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;AAE9F,KAAK,UAAU,KAAK,CAAC,GAAa;IAChC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,IAAI;QACN,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,YAAmB,KAAK,EACxB,QAAQ,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAEhC,KAAK,UAAU,IAAI,CAAC,GAAkB,EAAE,KAAa;QACnD,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,GAAG,CAAC,QAAQ,oBAAoB,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,GAAG,CAAC,QAAQ;gBACvB,KAAK;gBACL,qBAAqB,EAAE,wDAAwD;gBAC/E,gBAAgB,EAAE,eAAe,CAAC;oBAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,QAAQ;oBACR,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;iBAC3B,CAAC;aACH,CAAC;SACH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAK/C,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,MAAM,IAAI,YAAY,CAAC,wCAAwC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,uFAAuF;IACvF,MAAM,GAAG,GAAG,CAAC,GAAkB,EAAE,KAAa,EAAE,EAAE,CAChD,UAAU,CAAC,QAAQ,CAAC;SACjB,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACvE,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnB,KAAK,UAAU,UAAU,CACvB,GAAkB,EAClB,KAAa,EACb,IAA0C;QAE1C,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjB,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO;QACL;;oDAE4C;QAC5C,KAAK,CAAC,KAAK,CAAC,GAAkB;YAC5B,MAAM,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YACrC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC/C,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3F,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,YAAY,CAAC,8BAA8B,KAAK,EAAE,CAAC,WAAW,iBAAiB,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM;gBACtC,MAAM,IAAI,YAAY,CACpB,+DAA+D,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,kFAAkF,CAC9K,CAAC;QACN,CAAC;QAED;kCAC0B;QAC1B,KAAK,CAAC,SAAS,CACb,GAAkB,EAClB,UAAkB,EAClB,OAAyE;YAEzE,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;YAChE,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC/D,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;oBACxC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,KAAK,EAAE;wBAChC,MAAM,EAAE,kBAAkB;wBAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;qBAC9E;oBACD,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;iBAC5E,CAAC,CACH,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9E,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBACzB,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,KAAK,CAAC,KAAK,CAAC,GAAkB,EAAE,IAAY;YAC1C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACvD,SAAS,CAAC,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aAC1E,CAAC,CACH,CAAC;YACF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/packages/server/src/teams/claude.js

@@ -0,0 +1,165 @@
+import Anthropic from "@anthropic-ai/sdk";
+import { brand } from "../../../connector-kit/src/branding.js";
+import { ConnectError } from "../../../connector-kit/src/types.js";
+/** The MCP address that takes only this agent's key (the shared /mcp takes any agent's). */
+export const agentMcpUrl = (base, agentId) => `${base}/mcp/${agentId}`;
+/** Whether a URL is this agent's own MCP address, another address of this service that takes
+ *  an agent key (the shared /mcp, another agent's, or any with a query or fragment), or not
+ *  this service's. Parsed, so a default port, dot segments and case do not hide one. */
+export function serviceAddress(base, agentId) {
+    const b = new URL(base);
+    const root = `${b.pathname.replace(/\/+$/, "")}/mcp`.toLowerCase();
+    const own = `${root}/${agentId.toLowerCase()}`;
+    return (url) => {
+        const u = URL.parse(url);
+        if (!u || u.host !== b.host)
+            return null;
+        const path = u.pathname.replace(/\/+$/, "").toLowerCase();
+        if (path === own && !u.search && !u.hash)
+            return "own";
+        return u.search || u.hash || path === root || path.startsWith(`${root}/`) ? "other" : null;
+    };
+}
+/** A trigger's Claude agent answers Teams only through this agent's own MCP address, and its
+ *  vaults hold this agent's key and no other address of this service: otherwise whoever the
+ *  trigger admits would act under another key's grants. Checked when the trigger is saved and
+ *  again before each answer, since both can be edited in Claude's console afterwards. */
+export async function verifyTrigger(claude, base, agentId, trigger) {
+    const mcp = agentMcpUrl(base, agentId);
+    const kind = serviceAddress(base, agentId);
+    const agent = await claude.agent(trigger.managedAgentId);
+    if (!agent)
+        throw new ConnectError("Claude has no agent with that id under your organization's key");
+    if (!agent.mcpUrls.some((u) => kind(u) === "own"))
+        throw new ConnectError(`That Claude agent does not have ${brand().productName}'s MCP server (${mcp})`);
+    const extra = agent.mcpUrls.find((u) => kind(u) === "other");
+    if (extra)
+        throw new ConnectError(`That Claude agent also has another ${brand().productName} address (${extra}). Keep only ${mcp}.`);
+    let holdsKey = false;
+    for (const id of trigger.vaultIds) {
+        const vault = await claude.vault(id);
+        if (!vault)
+            throw new ConnectError(`Claude has no vault ${id} under your organization's key`);
+        const foreign = vault.allUrls.find((u) => kind(u) === "other");
+        if (foreign)
+            throw new ConnectError(`Vault ${id} also holds a key for another ${brand().productName} address (${foreign}). Use a vault with only this agent's key.`);
+        holdsKey ||= vault.bearerUrls.some((u) => kind(u) === "own");
+    }
+    if (!holdsKey)
+        throw new ConnectError(`None of these vaults holds a key for ${mcp}. Add this agent's ${brand().productName} key to one.`);
+}
+const notFound = (error) => error instanceof Anthropic.NotFoundError;
+export const claudeClient = (apiKey) => {
+    const api = new Anthropic({ apiKey });
+    return {
+        async listAgents() {
+            const out = [];
+            try {
+                for await (const a of api.beta.agents.list({ limit: 100 }))
+                    if (!a.archived_at)
+                        out.push({ id: a.id, name: a.name });
+            }
+            catch (error) {
+                if (error instanceof Anthropic.AuthenticationError ||
+                    error instanceof Anthropic.PermissionDeniedError)
+                    throw new ConnectError("Claude did not accept this key");
+                throw error;
+            }
+            return out;
+        },
+        async agent(id) {
+            try {
+                const agent = await api.beta.agents.retrieve(id);
+                return agent.archived_at ? null : { mcpUrls: agent.mcp_servers.map((m) => m.url) };
+            }
+            catch (error) {
+                if (notFound(error))
+                    return null;
+                throw error;
+            }
+        },
+        async vault(id) {
+            try {
+                const vault = await api.beta.vaults.retrieve(id);
+                if (vault.archived_at)
+                    return null;
+                const allUrls = [];
+                const bearerUrls = [];
+                for await (const c of api.beta.vaults.credentials.list(id)) {
+                    if (c.archived_at || !("mcp_server_url" in c.auth))
+                        continue;
+                    allUrls.push(c.auth.mcp_server_url);
+                    if (c.auth.type === "static_bearer")
+                        bearerUrls.push(c.auth.mcp_server_url);
+                }
+                return { allUrls, bearerUrls };
+            }
+            catch (error) {
+                if (notFound(error))
+                    return null;
+                throw error;
+            }
+        },
+        async environmentExists(id) {
+            try {
+                await api.beta.environments.retrieve(id);
+                return true;
+            }
+            catch (error) {
+                if (notFound(error))
+                    return false;
+                throw error;
+            }
+        },
+        async createSession(input) {
+            const session = await api.beta.sessions.create({
+                agent: input.agentId,
+                environment_id: input.environmentId,
+                vault_ids: input.vaultIds,
+                budget: {
+                    type: "limit",
+                    max_list_cost: { amount: String(input.budgetCents), currency: "USD" },
+                },
+                metadata: input.metadata,
+                initial_events: [{ type: "user.message", content: [{ type: "text", text: input.text }] }],
+            });
+            return session.id;
+        },
+        async sendMessage(sessionId, text, budgetCents) {
+            const s = await api.beta.sessions.retrieve(sessionId);
+            const spent = Number(s.usage?.list_cost?.amount ?? 0);
+            await api.beta.sessions.update(sessionId, {
+                budget: {
+                    type: "limit",
+                    max_list_cost: { amount: String(spent + budgetCents), currency: "USD" },
+                },
+            });
+            await api.beta.sessions.events.send(sessionId, {
+                events: [{ type: "user.message", content: [{ type: "text", text }] }],
+            });
+        },
+        async session(sessionId) {
+            let s;
+            try {
+                s = await api.beta.sessions.retrieve(sessionId);
+            }
+            catch (error) {
+                if (notFound(error))
+                    return null;
+                throw error;
+            }
+            const amount = s.usage?.list_cost?.amount;
+            const costCents = amount == null ? null : Number(amount);
+            const limit = s.budget ? Number(s.budget.max_list_cost.amount) : null;
+            return {
+                status: s.status,
+                costCents,
+                atBudget: s.status === "idle" && limit !== null && (costCents ?? 0) >= limit,
+            };
+        },
+        async interrupt(sessionId) {
+            await api.beta.sessions.events.send(sessionId, { events: [{ type: "user.interrupt" }] });
+        },
+    };
+};
+//# sourceMappingURL=claude.js.map

package/dist/packages/server/src/teams/claude.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../../../packages/server/src/teams/claude.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,wCAAwC,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAsCnE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,GAAG,IAAI,QAAQ,OAAO,EAAE,CAAC;AAEvF;;wFAEwF;AACxF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAC1D,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/C,OAAO,CAAC,GAAW,EAA0B,EAAE;QAC7C,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACvD,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,CAAC,CAAC;AACJ,CAAC;AAED;;;yFAGyF;AACzF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAY,EACZ,OAAe,EACf,OAAuD;IAEvD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QACR,MAAM,IAAI,YAAY,CAAC,gEAAgE,CAAC,CAAC;IAC3F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;QAC/C,MAAM,IAAI,YAAY,CACpB,mCAAmC,KAAK,EAAE,CAAC,WAAW,kBAAkB,GAAG,GAAG,CAC/E,CAAC;IACJ,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IAC7D,IAAI,KAAK;QACP,MAAM,IAAI,YAAY,CACpB,sCAAsC,KAAK,EAAE,CAAC,WAAW,aAAa,KAAK,gBAAgB,GAAG,GAAG,CAClG,CAAC;IACJ,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,gCAAgC,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;QAC/D,IAAI,OAAO;YACT,MAAM,IAAI,YAAY,CACpB,SAAS,EAAE,iCAAiC,KAAK,EAAE,CAAC,WAAW,aAAa,OAAO,4CAA4C,CAChI,CAAC;QACJ,QAAQ,KAAK,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,YAAY,CACpB,wCAAwC,GAAG,sBAAsB,KAAK,EAAE,CAAC,WAAW,cAAc,CACnG,CAAC;AACN,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,YAAY,SAAS,CAAC,aAAa,CAAC;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,MAAM,EAAE,EAAE;IACpD,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,OAAO;QACL,KAAK,CAAC,UAAU;YACd,MAAM,GAAG,GAAmC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;oBACxD,IAAI,CAAC,CAAC,CAAC,WAAW;wBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,KAAK,YAAY,SAAS,CAAC,mBAAmB;oBAC9C,KAAK,YAAY,SAAS,CAAC,qBAAqB;oBAEhD,MAAM,IAAI,YAAY,CAAC,gCAAgC,CAAC,CAAC;gBAC3D,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,EAAE;YACZ,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACjD,OAAO,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACrF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,QAAQ,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACjC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,EAAE;YACZ,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACjD,IAAI,KAAK,CAAC,WAAW;oBAAE,OAAO,IAAI,CAAC;gBACnC,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;gBAChC,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACpC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe;wBAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,QAAQ,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACjC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,EAAE;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,QAAQ,CAAC,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAClC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC7C,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,cAAc,EAAE,KAAK,CAAC,aAAa;gBACnC,SAAS,EAAE,KAAK,CAAC,QAAQ;gBACzB,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;iBACtE;gBACD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;aAC1F,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,EAAE,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW;YAC5C,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;YACtD,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE;gBACxC,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO;oBACb,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;iBACxE;aACF,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;gBAC7C,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAS;YACrB,IAAI,CAAC,CAAC;YACN,IAAI,CAAC;gBACH,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,QAAQ,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACjC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACtE,OAAO;gBACL,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,SAAS;gBACT,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK;aAC7E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,SAAS;YACvB,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/packages/server/src/teams/jwt.js

@@ -0,0 +1,121 @@
+import { createPublicKey, verify } from "node:crypto";
+// Checks the token Teams sends with every request to a bot's endpoint, as Microsoft documents
+// for the Bot Connector (docs/teams.md 2.2). Every check is required; none can be turned off.
+const METADATA = "https://login.botframework.com/v1/.well-known/openidconfiguration";
+export const BOT_ISSUER = "https://api.botframework.com";
+const SKEW_S = 300;
+const REFRESH_MS = 24 * 3600_000;
+const REFETCH_MIN_MS = 60_000;
+// A request that fails a check. Answered 403 with nothing recorded but a log line.
+export class Unauthorized extends Error {
+}
+const isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+const b64json = (part) => JSON.parse(Buffer.from(part, "base64url").toString("utf8"));
+export function botFrameworkAuth(fetchImpl = fetch, now = () => Date.now()) {
+    let keys = new Map();
+    let algorithms = [];
+    let loadedAt = 0;
+    let lastFetch = -Infinity;
+    let inflight = null;
+    // One fetch at a time, shared by every request waiting on it.
+    function refresh() {
+        inflight ??= load().finally(() => (inflight = null));
+        return inflight;
+    }
+    async function load() {
+        lastFetch = now();
+        const meta = (await (await fetchImpl(METADATA)).json());
+        if (!meta.jwks_uri?.startsWith("https://login.botframework.com/"))
+            throw new Error("Bot Framework metadata has an unexpected jwks_uri");
+        const set = (await (await fetchImpl(meta.jwks_uri)).json());
+        const next = new Map();
+        for (const jwk of set.keys ?? []) {
+            if (!jwk.kid || jwk.kty !== "RSA" || !jwk.n || !jwk.e)
+                continue;
+            next.set(jwk.kid, {
+                key: createPublicKey({ key: { kty: "RSA", n: jwk.n, e: jwk.e }, format: "jwk" }),
+                endorsements: Array.isArray(jwk.endorsements)
+                    ? jwk.endorsements.filter((e) => typeof e === "string")
+                    : [],
+            });
+        }
+        keys = next;
+        algorithms = meta.id_token_signing_alg_values_supported ?? [];
+        loadedAt = now();
+    }
+    // Refreshed daily; an unknown key id refetches at most once a minute (key rollover). A
+    // failed daily refresh keeps the keys already held (Microsoft rolls them over weeks apart)
+    // and is retried at most once a minute.
+    async function signingKey(kid) {
+        if (now() - loadedAt > REFRESH_MS && now() - lastFetch >= REFETCH_MIN_MS) {
+            try {
+                await refresh();
+            }
+            catch (error) {
+                if (!keys.size)
+                    throw error;
+                console.error("[agent-connect] Bot Framework key refresh failed; using the keys held", error);
+            }
+        }
+        let found = keys.get(kid);
+        if (!found && now() - lastFetch >= REFETCH_MIN_MS) {
+            await refresh();
+            found = keys.get(kid);
+        }
+        if (!found)
+            throw new Unauthorized("unknown signing key");
+        return found;
+    }
+    /** Throws Unauthorized unless the bearer token is Microsoft's and for this bot. Returns the
+     *  check that the activity, read only after this, is the one the token was issued for. */
+    async function token(authorization, appId) {
+        if (!authorization?.startsWith("Bearer "))
+            throw new Unauthorized("no bearer token");
+        const parts = authorization.slice(7).split(".");
+        if (parts.length !== 3)
+            throw new Unauthorized("malformed token");
+        let header;
+        let claims;
+        try {
+            header = b64json(parts[0]);
+            claims = b64json(parts[1]);
+            if (!isObject(header) || !isObject(claims))
+                throw new Error("not an object");
+        }
+        catch {
+            throw new Unauthorized("malformed token");
+        }
+        if (header.alg !== "RS256" || !header.kid)
+            throw new Unauthorized("unexpected algorithm");
+        const { key, endorsements } = await signingKey(header.kid);
+        if (!algorithms.includes(header.alg))
+            throw new Unauthorized("unexpected algorithm");
+        const signed = verify("sha256", Buffer.from(`${parts[0]}.${parts[1]}`), key, Buffer.from(parts[2], "base64url"));
+        if (!signed)
+            throw new Unauthorized("bad signature");
+        if (claims.iss !== BOT_ISSUER)
+            throw new Unauthorized("wrong issuer");
+        if (claims.aud !== appId)
+            throw new Unauthorized("wrong audience");
+        const t = Math.floor(now() / 1000);
+        if (typeof claims.exp !== "number" || claims.exp + SKEW_S < t)
+            throw new Unauthorized("expired");
+        if (typeof claims.nbf === "number" && claims.nbf - SKEW_S > t)
+            throw new Unauthorized("not yet valid");
+        return (activity) => {
+            // Microsoft names this claim in lowercase.
+            if (claims.serviceurl !== activity.serviceUrl)
+                throw new Unauthorized("serviceUrl does not match the token");
+            if (activity.channelId !== "msteams" || !endorsements.includes(activity.channelId))
+                throw new Unauthorized("key not endorsed for this channel");
+        };
+    }
+    return {
+        token,
+        /** Both checks at once: the token, then the activity it came with. */
+        async verify(authorization, expect) {
+            (await token(authorization, expect.appId))(expect);
+        },
+    };
+}
+//# sourceMappingURL=jwt.js.map