@archipelagolab/lobi 1.0.1 → 1.0.6

package/dist/chunk-JGIZPU2Y.js

@@ -0,0 +1,39 @@
+import {
+  MATRIX_ANNOTATION_RELATION_TYPE,
+  MATRIX_REACTION_EVENT_TYPE
+} from "./chunk-RK5HZFP6.js";
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/matrix/send/types.ts
+init_shims();
+var MsgType = {
+  Text: "m.text",
+  Image: "m.image",
+  Audio: "m.audio",
+  Video: "m.video",
+  File: "m.file",
+  Notice: "m.notice"
+};
+var RelationType = {
+  Annotation: MATRIX_ANNOTATION_RELATION_TYPE,
+  Replace: "m.replace",
+  Thread: "m.thread"
+};
+var EventType = {
+  Direct: "m.direct",
+  Reaction: MATRIX_REACTION_EVENT_TYPE,
+  RoomMessage: "m.room.message"
+};
+var MATRIX_OPENCLAW_FINALIZED_PREVIEW_KEY = "com.openclaw.finalized_preview";
+var MSC4357_LIVE_KEY = "org.matrix.msc4357.live";
+
+export {
+  MsgType,
+  RelationType,
+  EventType,
+  MATRIX_OPENCLAW_FINALIZED_PREVIEW_KEY,
+  MSC4357_LIVE_KEY
+};
+//# sourceMappingURL=chunk-JGIZPU2Y.js.map

package/dist/chunk-JGIZPU2Y.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/send/types.ts"],
+  "sourcesContent": ["import type { CoreConfig } from \"../../types.js\";\nimport {\n  MATRIX_ANNOTATION_RELATION_TYPE,\n  MATRIX_REACTION_EVENT_TYPE,\n  type MatrixReactionEventContent,\n} from \"../reaction-common.js\";\nimport type {\n  DimensionalFileInfo,\n  EncryptedFile,\n  FileWithThumbnailInfo,\n  MessageEventContent,\n  TextualMessageEventContent,\n  TimedFileInfo,\n  VideoFileInfo,\n} from \"../sdk.js\";\n\n// Message types\nexport const MsgType = {\n  Text: \"m.text\",\n  Image: \"m.image\",\n  Audio: \"m.audio\",\n  Video: \"m.video\",\n  File: \"m.file\",\n  Notice: \"m.notice\",\n} as const;\n\n// Relation types\nexport const RelationType = {\n  Annotation: MATRIX_ANNOTATION_RELATION_TYPE,\n  Replace: \"m.replace\",\n  Thread: \"m.thread\",\n} as const;\n\n// Event types\nexport const EventType = {\n  Direct: \"m.direct\",\n  Reaction: MATRIX_REACTION_EVENT_TYPE,\n  RoomMessage: \"m.room.message\",\n} as const;\n\nexport const MATRIX_OPENCLAW_FINALIZED_PREVIEW_KEY = \"com.openclaw.finalized_preview\" as const;\n\nexport type MatrixDirectAccountData = Record<string, string[]>;\n\nexport type MatrixReplyRelation = {\n  \"m.in_reply_to\": { event_id: string };\n};\n\nexport type MatrixThreadRelation = {\n  rel_type: typeof RelationType.Thread;\n  event_id: string;\n  is_falling_back?: boolean;\n  \"m.in_reply_to\"?: { event_id: string };\n};\n\nexport type MatrixRelation = MatrixReplyRelation | MatrixThreadRelation;\n\nexport type MatrixReplyMeta = {\n  \"m.relates_to\"?: MatrixRelation;\n};\n\nexport type MatrixMediaInfo =\n  | FileWithThumbnailInfo\n  | DimensionalFileInfo\n  | TimedFileInfo\n  | VideoFileInfo;\n\nexport type MatrixTextContent = TextualMessageEventContent & MatrixReplyMeta;\n\nexport type MatrixMediaContent = MessageEventContent &\n  MatrixReplyMeta & {\n    info?: MatrixMediaInfo;\n    url?: string;\n    file?: EncryptedFile;\n    filename?: string;\n    \"org.matrix.msc3245.voice\"?: Record<string, never>;\n    \"org.matrix.msc1767.audio\"?: { duration: number };\n  };\n\nexport type MatrixOutboundContent = MatrixTextContent | MatrixMediaContent;\n\nexport type ReactionEventContent = MatrixReactionEventContent;\n\nexport type MatrixSendResult = {\n  messageId: string;\n  roomId: string;\n  primaryMessageId?: string;\n  messageIds?: string[];\n};\n\nexport type MatrixSendOpts = {\n  client?: import(\"../sdk.js\").MatrixClient;\n  cfg?: CoreConfig;\n  mediaUrl?: string;\n  mediaAccess?: {\n    localRoots?: readonly string[];\n    readFile?: (filePath: string) => Promise<Buffer>;\n  };\n  mediaLocalRoots?: readonly string[];\n  mediaReadFile?: (filePath: string) => Promise<Buffer>;\n  accountId?: string;\n  replyToId?: string;\n  threadId?: string | number | null;\n  timeoutMs?: number;\n  /** Send audio as voice message instead of audio file. Defaults to false. */\n  audioAsVoice?: boolean;\n};\n\nexport type MatrixMediaMsgType =\n  | typeof MsgType.Image\n  | typeof MsgType.Audio\n  | typeof MsgType.Video\n  | typeof MsgType.File;\n\nexport type MatrixTextMsgType = typeof MsgType.Text | typeof MsgType.Notice;\n\nexport type MediaKind = \"image\" | \"audio\" | \"video\" | \"document\" | \"unknown\";\n\nexport type MatrixFormattedContent = MessageEventContent & {\n  format?: string;\n  formatted_body?: string;\n};\n\nexport type MatrixExtraContentFields = Record<string, unknown>;\n\n/**\n * MSC4357 live marker key.\n * When present on event content, signals that the message is still being\n * streamed (e.g. an LLM generating a response). Supporting clients render\n * the message with a streaming animation until an edit without this marker\n * arrives, indicating the stream is complete.\n * @see https://github.com/matrix-org/matrix-spec-proposals/pull/4357\n */\nexport const MSC4357_LIVE_KEY = \"org.matrix.msc4357.live\" as const;\n"],
+  "mappings": ";;;;;;;;;AAAA;AAiBO,IAAM,UAAU;AAAA,EACrB,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,OAAO;AAAA,EACP,MAAM;AAAA,EACN,QAAQ;AACV;AAGO,IAAM,eAAe;AAAA,EAC1B,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,QAAQ;AACV;AAGO,IAAM,YAAY;AAAA,EACvB,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,aAAa;AACf;AAEO,IAAM,wCAAwC;AA6F9C,IAAM,mBAAmB;",
+  "names": []
+}

package/dist/chunk-JIU4FXA7.js

@@ -0,0 +1,485 @@
+import {
+  isMatrixVerificationEventType,
+  isMatrixVerificationRequestMsgType,
+  matrixVerificationConstants
+} from "./chunk-FK6RGYBB.js";
+import {
+  EventType
+} from "./chunk-CPLEC5LJ.js";
+import {
+  resolveMatrixMonitorAccessState
+} from "./chunk-KAWXMSYC.js";
+import {
+  init_shims
+} from "./chunk-G4TIS2SC.js";
+
+// src/matrix/monitor/verification-events.ts
+init_shims();
+var MAX_TRACKED_VERIFICATION_EVENTS = 1024;
+var SAS_NOTICE_RETRY_DELAY_MS = 750;
+var VERIFICATION_EVENT_STARTUP_GRACE_MS = 3e4;
+var matrixDirectRoomDepsPromise;
+async function loadMatrixDirectRoomDeps() {
+  matrixDirectRoomDepsPromise ??= Promise.all([
+    import("./src/matrix/direct-management.js"),
+    import("./src/matrix/direct-room.js")
+  ]).then(([directManagementModule, directRoomModule]) => ({
+    inspectMatrixDirectRooms: directManagementModule.inspectMatrixDirectRooms,
+    isStrictDirectRoom: directRoomModule.isStrictDirectRoom
+  }));
+  return await matrixDirectRoomDepsPromise;
+}
+function trimMaybeString(input) {
+  if (typeof input !== "string") {
+    return null;
+  }
+  const trimmed = input.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function readVerificationSignal(event) {
+  const type = trimMaybeString(event?.type) ?? "";
+  const content = event?.content ?? {};
+  const msgtype = trimMaybeString(content.msgtype) ?? "";
+  const relatedEventId = trimMaybeString(
+    content["m.relates_to"]?.event_id
+  );
+  const transactionId = trimMaybeString(content.transaction_id);
+  if (type === EventType.RoomMessage && isMatrixVerificationRequestMsgType(msgtype)) {
+    return {
+      stage: "request",
+      flowId: trimMaybeString(event.event_id) ?? transactionId ?? relatedEventId
+    };
+  }
+  if (!isMatrixVerificationEventType(type)) {
+    return null;
+  }
+  const flowId = transactionId ?? relatedEventId ?? trimMaybeString(event.event_id);
+  if (type === `${matrixVerificationConstants.eventPrefix}request`) {
+    return { stage: "request", flowId };
+  }
+  if (type === `${matrixVerificationConstants.eventPrefix}ready`) {
+    return { stage: "ready", flowId };
+  }
+  if (type === "m.key.verification.start") {
+    return { stage: "start", flowId };
+  }
+  if (type === "m.key.verification.cancel") {
+    return { stage: "cancel", flowId };
+  }
+  if (type === "m.key.verification.done") {
+    return { stage: "done", flowId };
+  }
+  return { stage: "other", flowId };
+}
+function formatVerificationStageNotice(params) {
+  const { stage, senderId, event } = params;
+  const content = event.content;
+  switch (stage) {
+    case "request":
+      return `Matrix verification request received from ${senderId}. Open "Verify by emoji" in your Matrix client to continue.`;
+    case "ready":
+      return `Matrix verification is ready with ${senderId}. Choose "Verify by emoji" to reveal the emoji sequence.`;
+    case "start":
+      return `Matrix verification started with ${senderId}.`;
+    case "done":
+      return `Matrix verification completed with ${senderId}.`;
+    case "cancel": {
+      const code = trimMaybeString(content.code);
+      const reason = trimMaybeString(content.reason);
+      if (code && reason) {
+        return `Matrix verification cancelled by ${senderId} (${code}: ${reason}).`;
+      }
+      if (reason) {
+        return `Matrix verification cancelled by ${senderId} (${reason}).`;
+      }
+      return `Matrix verification cancelled by ${senderId}.`;
+    }
+    default:
+      return null;
+  }
+}
+function formatVerificationSasNotice(summary) {
+  const sas = summary.sas;
+  if (!sas) {
+    return null;
+  }
+  const emojiLine = Array.isArray(sas.emoji) && sas.emoji.length > 0 ? `SAS emoji: ${sas.emoji.map(
+    ([emoji, name]) => `${trimMaybeString(emoji) ?? "?"} ${trimMaybeString(name) ?? "?"}`
+  ).join(" | ")}` : null;
+  const decimalLine = Array.isArray(sas.decimal) && sas.decimal.length === 3 ? `SAS decimal: ${sas.decimal.join(" ")}` : null;
+  if (!emojiLine && !decimalLine) {
+    return null;
+  }
+  const lines = [`Matrix verification SAS with ${summary.otherUserId}:`];
+  if (emojiLine) {
+    lines.push(emojiLine);
+  }
+  if (decimalLine) {
+    lines.push(decimalLine);
+  }
+  lines.push("If both sides match, choose 'They match' in your Matrix app.");
+  return lines.join("\n");
+}
+function resolveVerificationFlowCandidates(params) {
+  const { event, flowId } = params;
+  const content = event.content;
+  const candidates = /* @__PURE__ */ new Set();
+  const add = (value) => {
+    const normalized = trimMaybeString(value);
+    if (normalized) {
+      candidates.add(normalized);
+    }
+  };
+  add(flowId);
+  add(event.event_id);
+  add(content.transaction_id);
+  add(content["m.relates_to"]?.event_id);
+  return Array.from(candidates);
+}
+function resolveSummaryRecency(summary) {
+  const ts = Date.parse(summary.updatedAt ?? "");
+  return Number.isFinite(ts) ? ts : 0;
+}
+function isActiveVerificationSummary(summary) {
+  if (summary.completed === true) {
+    return false;
+  }
+  if (summary.phaseName === "cancelled" || summary.phaseName === "done") {
+    return false;
+  }
+  if (typeof summary.phase === "number" && summary.phase >= 4) {
+    return false;
+  }
+  return true;
+}
+async function resolveVerificationSummaryForSignal(client, params) {
+  if (!client.crypto) {
+    return null;
+  }
+  await client.crypto.ensureVerificationDmTracked({
+    roomId: params.roomId,
+    userId: params.senderId
+  }).catch(() => null);
+  const list = await client.crypto.listVerifications();
+  if (list.length === 0) {
+    return null;
+  }
+  const candidates = resolveVerificationFlowCandidates({
+    event: params.event,
+    flowId: params.flowId
+  });
+  const byTransactionId = list.find(
+    (entry) => candidates.some((candidate) => entry.transactionId === candidate)
+  );
+  if (byTransactionId) {
+    return byTransactionId;
+  }
+  const { inspectMatrixDirectRooms, isStrictDirectRoom } = await loadMatrixDirectRoomDeps();
+  const inspection = await inspectMatrixDirectRooms({
+    client,
+    remoteUserId: params.senderId
+  }).catch(() => null);
+  const activeRoomId = trimMaybeString(inspection?.activeRoomId);
+  if (activeRoomId) {
+    if (activeRoomId !== params.roomId) {
+      return null;
+    }
+  } else if (!await isStrictDirectRoom({
+    client,
+    roomId: params.roomId,
+    remoteUserId: params.senderId
+  })) {
+    return null;
+  }
+  const activeByUser = list.filter((entry) => entry.otherUserId === params.senderId && isActiveVerificationSummary(entry)).toSorted((a, b) => resolveSummaryRecency(b) - resolveSummaryRecency(a));
+  const activeInRoom = activeByUser.filter((entry) => {
+    const roomId = trimMaybeString(entry.roomId);
+    return roomId === params.roomId;
+  });
+  if (activeInRoom.length > 0) {
+    return activeInRoom[0] ?? null;
+  }
+  return activeByUser[0] ?? null;
+}
+async function resolveVerificationSasNoticeForSignal(client, params) {
+  const summary = await resolveVerificationSummaryForSignal(client, params);
+  const immediateNotice = summary && isActiveVerificationSummary(summary) ? formatVerificationSasNotice(summary) : null;
+  if (immediateNotice || params.stage !== "ready" && params.stage !== "start") {
+    return {
+      summary,
+      sasNotice: immediateNotice
+    };
+  }
+  await new Promise((resolve) => setTimeout(resolve, SAS_NOTICE_RETRY_DELAY_MS));
+  const retriedSummary = await resolveVerificationSummaryForSignal(client, params);
+  return {
+    summary: retriedSummary,
+    sasNotice: retriedSummary && isActiveVerificationSummary(retriedSummary) ? formatVerificationSasNotice(retriedSummary) : null
+  };
+}
+function trackBounded(set, value) {
+  if (!value || set.has(value)) {
+    return false;
+  }
+  set.add(value);
+  if (set.size > MAX_TRACKED_VERIFICATION_EVENTS) {
+    const oldest = set.values().next().value;
+    if (typeof oldest === "string") {
+      set.delete(oldest);
+    }
+  }
+  return true;
+}
+async function sendVerificationNotice(params) {
+  const roomId = trimMaybeString(params.roomId);
+  if (!roomId) {
+    return;
+  }
+  try {
+    await params.client.sendMessage(roomId, {
+      msgtype: "m.notice",
+      body: params.body
+    });
+  } catch (err) {
+    params.logVerboseMessage(
+      `matrix: failed sending verification notice room=${roomId}: ${String(err)}`
+    );
+  }
+}
+async function isVerificationNoticeAuthorized(params) {
+  if (!params.dmEnabled || params.dmPolicy === "disabled") {
+    params.logVerboseMessage(
+      `matrix: blocked verification sender ${params.senderId} (dmPolicy=${params.dmPolicy}, dmEnabled=${String(params.dmEnabled)})`
+    );
+    return false;
+  }
+  if (params.dmPolicy === "open") {
+    return true;
+  }
+  const storeAllowFrom = await params.readStoreAllowFrom();
+  const accessState = resolveMatrixMonitorAccessState({
+    allowFrom: params.allowFrom,
+    storeAllowFrom,
+    // Verification flows only exist in strict DMs, so room/group allowlists do
+    // not participate in the authorization decision here.
+    groupAllowFrom: [],
+    roomUsers: [],
+    senderId: params.senderId,
+    isRoom: false
+  });
+  if (accessState.directAllowMatch.allowed) {
+    return true;
+  }
+  params.logVerboseMessage(
+    `matrix: blocked verification sender ${params.senderId} (dmPolicy=${params.dmPolicy})`
+  );
+  return false;
+}
+function createMatrixVerificationEventRouter(params) {
+  const routerStartedAtMs = Date.now();
+  const routedVerificationEvents = /* @__PURE__ */ new Set();
+  const routedVerificationSasFingerprints = /* @__PURE__ */ new Set();
+  const routedVerificationStageNotices = /* @__PURE__ */ new Set();
+  const verificationFlowRooms = /* @__PURE__ */ new Map();
+  const verificationUserRooms = /* @__PURE__ */ new Map();
+  async function resolveActiveDirectRoomId(remoteUserId) {
+    const { inspectMatrixDirectRooms } = await loadMatrixDirectRoomDeps();
+    const inspection = await inspectMatrixDirectRooms({
+      client: params.client,
+      remoteUserId
+    }).catch(() => null);
+    return trimMaybeString(inspection?.activeRoomId);
+  }
+  function shouldEmitVerificationEventNotice(event) {
+    const eventTs = typeof event.origin_server_ts === "number" && Number.isFinite(event.origin_server_ts) ? event.origin_server_ts : null;
+    if (eventTs === null) {
+      return true;
+    }
+    return eventTs >= routerStartedAtMs - VERIFICATION_EVENT_STARTUP_GRACE_MS;
+  }
+  function rememberVerificationRoom(roomId, event, flowId) {
+    for (const candidate of resolveVerificationFlowCandidates({ event, flowId })) {
+      verificationFlowRooms.set(candidate, roomId);
+      if (verificationFlowRooms.size > MAX_TRACKED_VERIFICATION_EVENTS) {
+        const oldest = verificationFlowRooms.keys().next().value;
+        if (typeof oldest === "string") {
+          verificationFlowRooms.delete(oldest);
+        }
+      }
+    }
+  }
+  function rememberVerificationUserRoom(remoteUserId, roomId) {
+    const normalizedUserId = trimMaybeString(remoteUserId);
+    const normalizedRoomId = trimMaybeString(roomId);
+    if (!normalizedUserId || !normalizedRoomId) {
+      return;
+    }
+    verificationUserRooms.delete(normalizedUserId);
+    verificationUserRooms.set(normalizedUserId, normalizedRoomId);
+    if (verificationUserRooms.size > MAX_TRACKED_VERIFICATION_EVENTS) {
+      const oldest = verificationUserRooms.keys().next().value;
+      if (typeof oldest === "string") {
+        verificationUserRooms.delete(oldest);
+      }
+    }
+  }
+  async function resolveSummaryRoomId(summary) {
+    const mappedRoomId = trimMaybeString(summary.roomId) ?? trimMaybeString(
+      summary.transactionId ? verificationFlowRooms.get(summary.transactionId) : null
+    ) ?? trimMaybeString(verificationFlowRooms.get(summary.id));
+    if (mappedRoomId) {
+      return mappedRoomId;
+    }
+    const remoteUserId = trimMaybeString(summary.otherUserId);
+    if (!remoteUserId) {
+      return null;
+    }
+    const recentRoomId = trimMaybeString(verificationUserRooms.get(remoteUserId));
+    const activeRoomId = await resolveActiveDirectRoomId(remoteUserId);
+    if (recentRoomId && activeRoomId && recentRoomId === activeRoomId) {
+      return recentRoomId;
+    }
+    if (activeRoomId) {
+      return activeRoomId;
+    }
+    if (recentRoomId && await (await loadMatrixDirectRoomDeps()).isStrictDirectRoom({
+      client: params.client,
+      roomId: recentRoomId,
+      remoteUserId
+    })) {
+      return recentRoomId;
+    }
+    return null;
+  }
+  async function routeVerificationSummary(summary) {
+    const roomId = await resolveSummaryRoomId(summary);
+    if (!roomId || !isActiveVerificationSummary(summary)) {
+      return;
+    }
+    if (!await (await loadMatrixDirectRoomDeps()).isStrictDirectRoom({
+      client: params.client,
+      roomId,
+      remoteUserId: summary.otherUserId
+    })) {
+      params.logVerboseMessage(
+        `matrix: ignoring verification summary outside strict DM room=${roomId} sender=${summary.otherUserId}`
+      );
+      return;
+    }
+    if (!await isVerificationNoticeAuthorized({
+      senderId: summary.otherUserId,
+      allowFrom: params.allowFrom,
+      dmEnabled: params.dmEnabled,
+      dmPolicy: params.dmPolicy,
+      readStoreAllowFrom: params.readStoreAllowFrom,
+      logVerboseMessage: params.logVerboseMessage
+    })) {
+      return;
+    }
+    const sasNotice = formatVerificationSasNotice(summary);
+    if (!sasNotice) {
+      return;
+    }
+    const sasFingerprint = `${summary.id}:${JSON.stringify(summary.sas)}`;
+    if (!trackBounded(routedVerificationSasFingerprints, sasFingerprint)) {
+      return;
+    }
+    await sendVerificationNotice({
+      client: params.client,
+      roomId,
+      body: sasNotice,
+      logVerboseMessage: params.logVerboseMessage
+    });
+  }
+  function routeVerificationEvent(roomId, event) {
+    const senderId = trimMaybeString(event?.sender);
+    if (!senderId) {
+      return false;
+    }
+    const signal = readVerificationSignal(event);
+    if (!signal) {
+      return false;
+    }
+    rememberVerificationRoom(roomId, event, signal.flowId);
+    void (async () => {
+      if (!shouldEmitVerificationEventNotice(event)) {
+        params.logVerboseMessage(
+          `matrix: ignoring historical verification event room=${roomId} id=${event.event_id ?? "unknown"} type=${event.type ?? "unknown"}`
+        );
+        return;
+      }
+      const flowId = signal.flowId;
+      const sourceEventId = trimMaybeString(event?.event_id);
+      const sourceFingerprint = sourceEventId ?? `${senderId}:${event.type}:${flowId ?? "none"}`;
+      const shouldRouteInRoom = await (await loadMatrixDirectRoomDeps()).isStrictDirectRoom({
+        client: params.client,
+        roomId,
+        remoteUserId: senderId
+      });
+      if (!shouldRouteInRoom) {
+        params.logVerboseMessage(
+          `matrix: ignoring verification event outside strict DM room=${roomId} sender=${senderId}`
+        );
+        return;
+      }
+      if (!await isVerificationNoticeAuthorized({
+        senderId,
+        allowFrom: params.allowFrom,
+        dmEnabled: params.dmEnabled,
+        dmPolicy: params.dmPolicy,
+        readStoreAllowFrom: params.readStoreAllowFrom,
+        logVerboseMessage: params.logVerboseMessage
+      })) {
+        return;
+      }
+      rememberVerificationUserRoom(senderId, roomId);
+      if (!trackBounded(routedVerificationEvents, sourceFingerprint)) {
+        return;
+      }
+      const stageNotice = formatVerificationStageNotice({ stage: signal.stage, senderId, event });
+      const { summary, sasNotice } = await resolveVerificationSasNoticeForSignal(params.client, {
+        roomId,
+        event,
+        senderId,
+        flowId,
+        stage: signal.stage
+      }).catch(() => ({ summary: null, sasNotice: null }));
+      const notices = [];
+      if (stageNotice) {
+        const stageKey = `${roomId}:${senderId}:${flowId ?? sourceFingerprint}:${signal.stage}`;
+        if (trackBounded(routedVerificationStageNotices, stageKey)) {
+          notices.push(stageNotice);
+        }
+      }
+      if (summary && sasNotice) {
+        const sasFingerprint = `${summary.id}:${JSON.stringify(summary.sas)}`;
+        if (trackBounded(routedVerificationSasFingerprints, sasFingerprint)) {
+          notices.push(sasNotice);
+        }
+      }
+      if (notices.length === 0) {
+        return;
+      }
+      for (const body of notices) {
+        await sendVerificationNotice({
+          client: params.client,
+          roomId,
+          body,
+          logVerboseMessage: params.logVerboseMessage
+        });
+      }
+    })().catch((err) => {
+      params.logVerboseMessage(`matrix: failed routing verification event: ${String(err)}`);
+    });
+    return true;
+  }
+  return {
+    routeVerificationEvent,
+    routeVerificationSummary
+  };
+}
+
+export {
+  createMatrixVerificationEventRouter
+};
+//# sourceMappingURL=chunk-JIU4FXA7.js.map

package/dist/chunk-JIU4FXA7.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/matrix/monitor/verification-events.ts"],
+  "sourcesContent": ["import type { MatrixClient } from \"../sdk.js\";\nimport { resolveMatrixMonitorAccessState } from \"./access-state.js\";\nimport type { MatrixRawEvent } from \"./types.js\";\nimport { EventType } from \"./types.js\";\nimport {\n  isMatrixVerificationEventType,\n  isMatrixVerificationRequestMsgType,\n  matrixVerificationConstants,\n} from \"./verification-utils.js\";\n\nconst MAX_TRACKED_VERIFICATION_EVENTS = 1024;\nconst SAS_NOTICE_RETRY_DELAY_MS = 750;\nconst VERIFICATION_EVENT_STARTUP_GRACE_MS = 30_000;\n\ntype MatrixVerificationStage = \"request\" | \"ready\" | \"start\" | \"cancel\" | \"done\" | \"other\";\n\ntype MatrixVerificationSummaryLike = {\n  id: string;\n  transactionId?: string;\n  roomId?: string;\n  otherUserId: string;\n  updatedAt?: string;\n  completed?: boolean;\n  pending?: boolean;\n  phase?: number;\n  phaseName?: string;\n  sas?: {\n    decimal?: [number, number, number];\n    emoji?: Array<[string, string]>;\n  };\n};\n\ntype MatrixDirectRoomDeps = {\n  inspectMatrixDirectRooms: typeof import(\"../direct-management.js\").inspectMatrixDirectRooms;\n  isStrictDirectRoom: typeof import(\"../direct-room.js\").isStrictDirectRoom;\n};\n\nlet matrixDirectRoomDepsPromise: Promise<MatrixDirectRoomDeps> | undefined;\n\nasync function loadMatrixDirectRoomDeps(): Promise<MatrixDirectRoomDeps> {\n  matrixDirectRoomDepsPromise ??= Promise.all([\n    import(\"../direct-management.js\"),\n    import(\"../direct-room.js\"),\n  ]).then(([directManagementModule, directRoomModule]) => ({\n    inspectMatrixDirectRooms: directManagementModule.inspectMatrixDirectRooms,\n    isStrictDirectRoom: directRoomModule.isStrictDirectRoom,\n  }));\n  return await matrixDirectRoomDepsPromise;\n}\n\nfunction trimMaybeString(input: unknown): string | null {\n  if (typeof input !== \"string\") {\n    return null;\n  }\n  const trimmed = input.trim();\n  return trimmed.length > 0 ? trimmed : null;\n}\n\nfunction readVerificationSignal(event: MatrixRawEvent): {\n  stage: MatrixVerificationStage;\n  flowId: string | null;\n} | null {\n  const type = trimMaybeString(event?.type) ?? \"\";\n  const content = event?.content ?? {};\n  const msgtype = trimMaybeString((content as { msgtype?: unknown }).msgtype) ?? \"\";\n  const relatedEventId = trimMaybeString(\n    (content as { \"m.relates_to\"?: { event_id?: unknown } })[\"m.relates_to\"]?.event_id,\n  );\n  const transactionId = trimMaybeString((content as { transaction_id?: unknown }).transaction_id);\n  if (type === EventType.RoomMessage && isMatrixVerificationRequestMsgType(msgtype)) {\n    return {\n      stage: \"request\",\n      flowId: trimMaybeString(event.event_id) ?? transactionId ?? relatedEventId,\n    };\n  }\n  if (!isMatrixVerificationEventType(type)) {\n    return null;\n  }\n  const flowId = transactionId ?? relatedEventId ?? trimMaybeString(event.event_id);\n  if (type === `${matrixVerificationConstants.eventPrefix}request`) {\n    return { stage: \"request\", flowId };\n  }\n  if (type === `${matrixVerificationConstants.eventPrefix}ready`) {\n    return { stage: \"ready\", flowId };\n  }\n  if (type === \"m.key.verification.start\") {\n    return { stage: \"start\", flowId };\n  }\n  if (type === \"m.key.verification.cancel\") {\n    return { stage: \"cancel\", flowId };\n  }\n  if (type === \"m.key.verification.done\") {\n    return { stage: \"done\", flowId };\n  }\n  return { stage: \"other\", flowId };\n}\n\nfunction formatVerificationStageNotice(params: {\n  stage: MatrixVerificationStage;\n  senderId: string;\n  event: MatrixRawEvent;\n}): string | null {\n  const { stage, senderId, event } = params;\n  const content = event.content as { code?: unknown; reason?: unknown };\n  switch (stage) {\n    case \"request\":\n      return `Matrix verification request received from ${senderId}. Open \"Verify by emoji\" in your Matrix client to continue.`;\n    case \"ready\":\n      return `Matrix verification is ready with ${senderId}. Choose \"Verify by emoji\" to reveal the emoji sequence.`;\n    case \"start\":\n      return `Matrix verification started with ${senderId}.`;\n    case \"done\":\n      return `Matrix verification completed with ${senderId}.`;\n    case \"cancel\": {\n      const code = trimMaybeString(content.code);\n      const reason = trimMaybeString(content.reason);\n      if (code && reason) {\n        return `Matrix verification cancelled by ${senderId} (${code}: ${reason}).`;\n      }\n      if (reason) {\n        return `Matrix verification cancelled by ${senderId} (${reason}).`;\n      }\n      return `Matrix verification cancelled by ${senderId}.`;\n    }\n    default:\n      return null;\n  }\n}\n\nfunction formatVerificationSasNotice(summary: MatrixVerificationSummaryLike): string | null {\n  const sas = summary.sas;\n  if (!sas) {\n    return null;\n  }\n  const emojiLine =\n    Array.isArray(sas.emoji) && sas.emoji.length > 0\n      ? `SAS emoji: ${sas.emoji\n          .map(\n            ([emoji, name]) => `${trimMaybeString(emoji) ?? \"?\"} ${trimMaybeString(name) ?? \"?\"}`,\n          )\n          .join(\" | \")}`\n      : null;\n  const decimalLine =\n    Array.isArray(sas.decimal) && sas.decimal.length === 3\n      ? `SAS decimal: ${sas.decimal.join(\" \")}`\n      : null;\n  if (!emojiLine && !decimalLine) {\n    return null;\n  }\n  const lines = [`Matrix verification SAS with ${summary.otherUserId}:`];\n  if (emojiLine) {\n    lines.push(emojiLine);\n  }\n  if (decimalLine) {\n    lines.push(decimalLine);\n  }\n  lines.push(\"If both sides match, choose 'They match' in your Matrix app.\");\n  return lines.join(\"\\n\");\n}\n\nfunction resolveVerificationFlowCandidates(params: {\n  event: MatrixRawEvent;\n  flowId: string | null;\n}): string[] {\n  const { event, flowId } = params;\n  const content = event.content as {\n    transaction_id?: unknown;\n    \"m.relates_to\"?: { event_id?: unknown };\n  };\n  const candidates = new Set<string>();\n  const add = (value: unknown) => {\n    const normalized = trimMaybeString(value);\n    if (normalized) {\n      candidates.add(normalized);\n    }\n  };\n  add(flowId);\n  add(event.event_id);\n  add(content.transaction_id);\n  add(content[\"m.relates_to\"]?.event_id);\n  return Array.from(candidates);\n}\n\nfunction resolveSummaryRecency(summary: MatrixVerificationSummaryLike): number {\n  const ts = Date.parse(summary.updatedAt ?? \"\");\n  return Number.isFinite(ts) ? ts : 0;\n}\n\nfunction isActiveVerificationSummary(summary: MatrixVerificationSummaryLike): boolean {\n  if (summary.completed === true) {\n    return false;\n  }\n  if (summary.phaseName === \"cancelled\" || summary.phaseName === \"done\") {\n    return false;\n  }\n  if (typeof summary.phase === \"number\" && summary.phase >= 4) {\n    return false;\n  }\n  return true;\n}\n\nasync function resolveVerificationSummaryForSignal(\n  client: MatrixClient,\n  params: {\n    roomId: string;\n    event: MatrixRawEvent;\n    senderId: string;\n    flowId: string | null;\n  },\n): Promise<MatrixVerificationSummaryLike | null> {\n  if (!client.crypto) {\n    return null;\n  }\n  await client.crypto\n    .ensureVerificationDmTracked({\n      roomId: params.roomId,\n      userId: params.senderId,\n    })\n    .catch(() => null);\n  const list = await client.crypto.listVerifications();\n  if (list.length === 0) {\n    return null;\n  }\n  const candidates = resolveVerificationFlowCandidates({\n    event: params.event,\n    flowId: params.flowId,\n  });\n  const byTransactionId = list.find((entry) =>\n    candidates.some((candidate) => entry.transactionId === candidate),\n  );\n  if (byTransactionId) {\n    return byTransactionId;\n  }\n\n  // Only fall back by user inside the active DM with that user. Otherwise a\n  // spoofed verification event in an unrelated room can leak the current SAS\n  // prompt into that room.\n  const { inspectMatrixDirectRooms, isStrictDirectRoom } = await loadMatrixDirectRoomDeps();\n  const inspection = await inspectMatrixDirectRooms({\n    client,\n    remoteUserId: params.senderId,\n  }).catch(() => null);\n  const activeRoomId = trimMaybeString(inspection?.activeRoomId);\n  if (activeRoomId) {\n    if (activeRoomId !== params.roomId) {\n      return null;\n    }\n  } else if (\n    !(await isStrictDirectRoom({\n      client,\n      roomId: params.roomId,\n      remoteUserId: params.senderId,\n    }))\n  ) {\n    // If we cannot determine a canonical active DM, preserve the older\n    // strict-room fallback so transient m.direct or joined-room read failures\n    // do not suppress SAS notices for the current DM.\n    return null;\n  }\n\n  // Fallback for DM flows where transaction IDs do not match room event IDs consistently.\n  const activeByUser = list\n    .filter((entry) => entry.otherUserId === params.senderId && isActiveVerificationSummary(entry))\n    .toSorted((a, b) => resolveSummaryRecency(b) - resolveSummaryRecency(a));\n  const activeInRoom = activeByUser.filter((entry) => {\n    const roomId = trimMaybeString(entry.roomId);\n    return roomId === params.roomId;\n  });\n  if (activeInRoom.length > 0) {\n    return activeInRoom[0] ?? null;\n  }\n  return activeByUser[0] ?? null;\n}\n\nasync function resolveVerificationSasNoticeForSignal(\n  client: MatrixClient,\n  params: {\n    roomId: string;\n    event: MatrixRawEvent;\n    senderId: string;\n    flowId: string | null;\n    stage: MatrixVerificationStage;\n  },\n): Promise<{ summary: MatrixVerificationSummaryLike | null; sasNotice: string | null }> {\n  const summary = await resolveVerificationSummaryForSignal(client, params);\n  const immediateNotice =\n    summary && isActiveVerificationSummary(summary) ? formatVerificationSasNotice(summary) : null;\n  if (immediateNotice || (params.stage !== \"ready\" && params.stage !== \"start\")) {\n    return {\n      summary,\n      sasNotice: immediateNotice,\n    };\n  }\n\n  await new Promise((resolve) => setTimeout(resolve, SAS_NOTICE_RETRY_DELAY_MS));\n  const retriedSummary = await resolveVerificationSummaryForSignal(client, params);\n  return {\n    summary: retriedSummary,\n    sasNotice:\n      retriedSummary && isActiveVerificationSummary(retriedSummary)\n        ? formatVerificationSasNotice(retriedSummary)\n        : null,\n  };\n}\n\nfunction trackBounded(set: Set<string>, value: string): boolean {\n  if (!value || set.has(value)) {\n    return false;\n  }\n  set.add(value);\n  if (set.size > MAX_TRACKED_VERIFICATION_EVENTS) {\n    const oldest = set.values().next().value;\n    if (typeof oldest === \"string\") {\n      set.delete(oldest);\n    }\n  }\n  return true;\n}\n\nasync function sendVerificationNotice(params: {\n  client: MatrixClient;\n  roomId: string;\n  body: string;\n  logVerboseMessage: (message: string) => void;\n}): Promise<void> {\n  const roomId = trimMaybeString(params.roomId);\n  if (!roomId) {\n    return;\n  }\n  try {\n    await params.client.sendMessage(roomId, {\n      msgtype: \"m.notice\",\n      body: params.body,\n    });\n  } catch (err) {\n    params.logVerboseMessage(\n      `matrix: failed sending verification notice room=${roomId}: ${String(err)}`,\n    );\n  }\n}\n\nasync function isVerificationNoticeAuthorized(params: {\n  senderId: string;\n  allowFrom: string[];\n  dmEnabled: boolean;\n  dmPolicy: \"open\" | \"pairing\" | \"allowlist\" | \"disabled\";\n  readStoreAllowFrom: () => Promise<string[]>;\n  logVerboseMessage: (message: string) => void;\n}): Promise<boolean> {\n  // Verification notices are DM-only. If DM ingress is disabled, there is no\n  // policy-compatible path for posting these notices back into the room.\n  if (!params.dmEnabled || params.dmPolicy === \"disabled\") {\n    params.logVerboseMessage(\n      `matrix: blocked verification sender ${params.senderId} (dmPolicy=${params.dmPolicy}, dmEnabled=${String(params.dmEnabled)})`,\n    );\n    return false;\n  }\n  if (params.dmPolicy === \"open\") {\n    return true;\n  }\n  const storeAllowFrom = await params.readStoreAllowFrom();\n  const accessState = resolveMatrixMonitorAccessState({\n    allowFrom: params.allowFrom,\n    storeAllowFrom,\n    // Verification flows only exist in strict DMs, so room/group allowlists do\n    // not participate in the authorization decision here.\n    groupAllowFrom: [],\n    roomUsers: [],\n    senderId: params.senderId,\n    isRoom: false,\n  });\n  if (accessState.directAllowMatch.allowed) {\n    return true;\n  }\n  params.logVerboseMessage(\n    `matrix: blocked verification sender ${params.senderId} (dmPolicy=${params.dmPolicy})`,\n  );\n  return false;\n}\n\nexport function createMatrixVerificationEventRouter(params: {\n  client: MatrixClient;\n  allowFrom: string[];\n  dmEnabled: boolean;\n  dmPolicy: \"open\" | \"pairing\" | \"allowlist\" | \"disabled\";\n  readStoreAllowFrom: () => Promise<string[]>;\n  logVerboseMessage: (message: string) => void;\n}) {\n  const routerStartedAtMs = Date.now();\n  const routedVerificationEvents = new Set<string>();\n  const routedVerificationSasFingerprints = new Set<string>();\n  const routedVerificationStageNotices = new Set<string>();\n  const verificationFlowRooms = new Map<string, string>();\n  const verificationUserRooms = new Map<string, string>();\n\n  async function resolveActiveDirectRoomId(remoteUserId: string): Promise<string | null> {\n    const { inspectMatrixDirectRooms } = await loadMatrixDirectRoomDeps();\n    const inspection = await inspectMatrixDirectRooms({\n      client: params.client,\n      remoteUserId,\n    }).catch(() => null);\n    return trimMaybeString(inspection?.activeRoomId);\n  }\n\n  function shouldEmitVerificationEventNotice(event: MatrixRawEvent): boolean {\n    const eventTs =\n      typeof event.origin_server_ts === \"number\" && Number.isFinite(event.origin_server_ts)\n        ? event.origin_server_ts\n        : null;\n    if (eventTs === null) {\n      return true;\n    }\n    return eventTs >= routerStartedAtMs - VERIFICATION_EVENT_STARTUP_GRACE_MS;\n  }\n\n  function rememberVerificationRoom(roomId: string, event: MatrixRawEvent, flowId: string | null) {\n    for (const candidate of resolveVerificationFlowCandidates({ event, flowId })) {\n      verificationFlowRooms.set(candidate, roomId);\n      if (verificationFlowRooms.size > MAX_TRACKED_VERIFICATION_EVENTS) {\n        const oldest = verificationFlowRooms.keys().next().value;\n        if (typeof oldest === \"string\") {\n          verificationFlowRooms.delete(oldest);\n        }\n      }\n    }\n  }\n\n  function rememberVerificationUserRoom(remoteUserId: string, roomId: string): void {\n    const normalizedUserId = trimMaybeString(remoteUserId);\n    const normalizedRoomId = trimMaybeString(roomId);\n    if (!normalizedUserId || !normalizedRoomId) {\n      return;\n    }\n    verificationUserRooms.delete(normalizedUserId);\n    verificationUserRooms.set(normalizedUserId, normalizedRoomId);\n    if (verificationUserRooms.size > MAX_TRACKED_VERIFICATION_EVENTS) {\n      const oldest = verificationUserRooms.keys().next().value;\n      if (typeof oldest === \"string\") {\n        verificationUserRooms.delete(oldest);\n      }\n    }\n  }\n\n  async function resolveSummaryRoomId(\n    summary: MatrixVerificationSummaryLike,\n  ): Promise<string | null> {\n    const mappedRoomId =\n      trimMaybeString(summary.roomId) ??\n      trimMaybeString(\n        summary.transactionId ? verificationFlowRooms.get(summary.transactionId) : null,\n      ) ??\n      trimMaybeString(verificationFlowRooms.get(summary.id));\n    if (mappedRoomId) {\n      return mappedRoomId;\n    }\n\n    const remoteUserId = trimMaybeString(summary.otherUserId);\n    if (!remoteUserId) {\n      return null;\n    }\n    const recentRoomId = trimMaybeString(verificationUserRooms.get(remoteUserId));\n    const activeRoomId = await resolveActiveDirectRoomId(remoteUserId);\n    if (recentRoomId && activeRoomId && recentRoomId === activeRoomId) {\n      return recentRoomId;\n    }\n    if (activeRoomId) {\n      return activeRoomId;\n    }\n    if (\n      recentRoomId &&\n      (await (\n        await loadMatrixDirectRoomDeps()\n      ).isStrictDirectRoom({\n        client: params.client,\n        roomId: recentRoomId,\n        remoteUserId,\n      }))\n    ) {\n      return recentRoomId;\n    }\n    return null;\n  }\n\n  async function routeVerificationSummary(summary: MatrixVerificationSummaryLike): Promise<void> {\n    const roomId = await resolveSummaryRoomId(summary);\n    if (!roomId || !isActiveVerificationSummary(summary)) {\n      return;\n    }\n    if (\n      !(await (\n        await loadMatrixDirectRoomDeps()\n      ).isStrictDirectRoom({\n        client: params.client,\n        roomId,\n        remoteUserId: summary.otherUserId,\n      }))\n    ) {\n      params.logVerboseMessage(\n        `matrix: ignoring verification summary outside strict DM room=${roomId} sender=${summary.otherUserId}`,\n      );\n      return;\n    }\n    if (\n      !(await isVerificationNoticeAuthorized({\n        senderId: summary.otherUserId,\n        allowFrom: params.allowFrom,\n        dmEnabled: params.dmEnabled,\n        dmPolicy: params.dmPolicy,\n        readStoreAllowFrom: params.readStoreAllowFrom,\n        logVerboseMessage: params.logVerboseMessage,\n      }))\n    ) {\n      return;\n    }\n    const sasNotice = formatVerificationSasNotice(summary);\n    if (!sasNotice) {\n      return;\n    }\n    const sasFingerprint = `${summary.id}:${JSON.stringify(summary.sas)}`;\n    if (!trackBounded(routedVerificationSasFingerprints, sasFingerprint)) {\n      return;\n    }\n    await sendVerificationNotice({\n      client: params.client,\n      roomId,\n      body: sasNotice,\n      logVerboseMessage: params.logVerboseMessage,\n    });\n  }\n\n  function routeVerificationEvent(roomId: string, event: MatrixRawEvent): boolean {\n    const senderId = trimMaybeString(event?.sender);\n    if (!senderId) {\n      return false;\n    }\n    const signal = readVerificationSignal(event);\n    if (!signal) {\n      return false;\n    }\n    rememberVerificationRoom(roomId, event, signal.flowId);\n\n    void (async () => {\n      if (!shouldEmitVerificationEventNotice(event)) {\n        params.logVerboseMessage(\n          `matrix: ignoring historical verification event room=${roomId} id=${event.event_id ?? \"unknown\"} type=${event.type ?? \"unknown\"}`,\n        );\n        return;\n      }\n      const flowId = signal.flowId;\n      const sourceEventId = trimMaybeString(event?.event_id);\n      const sourceFingerprint = sourceEventId ?? `${senderId}:${event.type}:${flowId ?? \"none\"}`;\n      const shouldRouteInRoom = await (\n        await loadMatrixDirectRoomDeps()\n      ).isStrictDirectRoom({\n        client: params.client,\n        roomId,\n        remoteUserId: senderId,\n      });\n      if (!shouldRouteInRoom) {\n        params.logVerboseMessage(\n          `matrix: ignoring verification event outside strict DM room=${roomId} sender=${senderId}`,\n        );\n        return;\n      }\n      if (\n        !(await isVerificationNoticeAuthorized({\n          senderId,\n          allowFrom: params.allowFrom,\n          dmEnabled: params.dmEnabled,\n          dmPolicy: params.dmPolicy,\n          readStoreAllowFrom: params.readStoreAllowFrom,\n          logVerboseMessage: params.logVerboseMessage,\n        }))\n      ) {\n        return;\n      }\n      rememberVerificationUserRoom(senderId, roomId);\n      if (!trackBounded(routedVerificationEvents, sourceFingerprint)) {\n        return;\n      }\n\n      const stageNotice = formatVerificationStageNotice({ stage: signal.stage, senderId, event });\n      const { summary, sasNotice } = await resolveVerificationSasNoticeForSignal(params.client, {\n        roomId,\n        event,\n        senderId,\n        flowId,\n        stage: signal.stage,\n      }).catch(() => ({ summary: null, sasNotice: null }));\n\n      const notices: string[] = [];\n      if (stageNotice) {\n        const stageKey = `${roomId}:${senderId}:${flowId ?? sourceFingerprint}:${signal.stage}`;\n        if (trackBounded(routedVerificationStageNotices, stageKey)) {\n          notices.push(stageNotice);\n        }\n      }\n      if (summary && sasNotice) {\n        const sasFingerprint = `${summary.id}:${JSON.stringify(summary.sas)}`;\n        if (trackBounded(routedVerificationSasFingerprints, sasFingerprint)) {\n          notices.push(sasNotice);\n        }\n      }\n      if (notices.length === 0) {\n        return;\n      }\n\n      for (const body of notices) {\n        await sendVerificationNotice({\n          client: params.client,\n          roomId,\n          body,\n          logVerboseMessage: params.logVerboseMessage,\n        });\n      }\n    })().catch((err) => {\n      params.logVerboseMessage(`matrix: failed routing verification event: ${String(err)}`);\n    });\n\n    return true;\n  }\n\n  return {\n    routeVerificationEvent,\n    routeVerificationSummary,\n  };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;AAAA;AAUA,IAAM,kCAAkC;AACxC,IAAM,4BAA4B;AAClC,IAAM,sCAAsC;AAyB5C,IAAI;AAEJ,eAAe,2BAA0D;AACvE,kCAAgC,QAAQ,IAAI;AAAA,IAC1C,OAAO,mCAAyB;AAAA,IAChC,OAAO,6BAAmB;AAAA,EAC5B,CAAC,EAAE,KAAK,CAAC,CAAC,wBAAwB,gBAAgB,OAAO;AAAA,IACvD,0BAA0B,uBAAuB;AAAA,IACjD,oBAAoB,iBAAiB;AAAA,EACvC,EAAE;AACF,SAAO,MAAM;AACf;AAEA,SAAS,gBAAgB,OAA+B;AACtD,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,uBAAuB,OAGvB;AACP,QAAM,OAAO,gBAAgB,OAAO,IAAI,KAAK;AAC7C,QAAM,UAAU,OAAO,WAAW,CAAC;AACnC,QAAM,UAAU,gBAAiB,QAAkC,OAAO,KAAK;AAC/E,QAAM,iBAAiB;AAAA,IACpB,QAAwD,cAAc,GAAG;AAAA,EAC5E;AACA,QAAM,gBAAgB,gBAAiB,QAAyC,cAAc;AAC9F,MAAI,SAAS,UAAU,eAAe,mCAAmC,OAAO,GAAG;AACjF,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,gBAAgB,MAAM,QAAQ,KAAK,iBAAiB;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,CAAC,8BAA8B,IAAI,GAAG;AACxC,WAAO;AAAA,EACT;AACA,QAAM,SAAS,iBAAiB,kBAAkB,gBAAgB,MAAM,QAAQ;AAChF,MAAI,SAAS,GAAG,4BAA4B,WAAW,WAAW;AAChE,WAAO,EAAE,OAAO,WAAW,OAAO;AAAA,EACpC;AACA,MAAI,SAAS,GAAG,4BAA4B,WAAW,SAAS;AAC9D,WAAO,EAAE,OAAO,SAAS,OAAO;AAAA,EAClC;AACA,MAAI,SAAS,4BAA4B;AACvC,WAAO,EAAE,OAAO,SAAS,OAAO;AAAA,EAClC;AACA,MAAI,SAAS,6BAA6B;AACxC,WAAO,EAAE,OAAO,UAAU,OAAO;AAAA,EACnC;AACA,MAAI,SAAS,2BAA2B;AACtC,WAAO,EAAE,OAAO,QAAQ,OAAO;AAAA,EACjC;AACA,SAAO,EAAE,OAAO,SAAS,OAAO;AAClC;AAEA,SAAS,8BAA8B,QAIrB;AAChB,QAAM,EAAE,OAAO,UAAU,MAAM,IAAI;AACnC,QAAM,UAAU,MAAM;AACtB,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO,6CAA6C,QAAQ;AAAA,IAC9D,KAAK;AACH,aAAO,qCAAqC,QAAQ;AAAA,IACtD,KAAK;AACH,aAAO,oCAAoC,QAAQ;AAAA,IACrD,KAAK;AACH,aAAO,sCAAsC,QAAQ;AAAA,IACvD,KAAK,UAAU;AACb,YAAM,OAAO,gBAAgB,QAAQ,IAAI;AACzC,YAAM,SAAS,gBAAgB,QAAQ,MAAM;AAC7C,UAAI,QAAQ,QAAQ;AAClB,eAAO,oCAAoC,QAAQ,KAAK,IAAI,KAAK,MAAM;AAAA,MACzE;AACA,UAAI,QAAQ;AACV,eAAO,oCAAoC,QAAQ,KAAK,MAAM;AAAA,MAChE;AACA,aAAO,oCAAoC,QAAQ;AAAA,IACrD;AAAA,IACA;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,4BAA4B,SAAuD;AAC1F,QAAM,MAAM,QAAQ;AACpB,MAAI,CAAC,KAAK;AACR,WAAO;AAAA,EACT;AACA,QAAM,YACJ,MAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,MAAM,SAAS,IAC3C,cAAc,IAAI,MACf;AAAA,IACC,CAAC,CAAC,OAAO,IAAI,MAAM,GAAG,gBAAgB,KAAK,KAAK,GAAG,IAAI,gBAAgB,IAAI,KAAK,GAAG;AAAA,EACrF,EACC,KAAK,KAAK,CAAC,KACd;AACN,QAAM,cACJ,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,QAAQ,WAAW,IACjD,gBAAgB,IAAI,QAAQ,KAAK,GAAG,CAAC,KACrC;AACN,MAAI,CAAC,aAAa,CAAC,aAAa;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,CAAC,gCAAgC,QAAQ,WAAW,GAAG;AACrE,MAAI,WAAW;AACb,UAAM,KAAK,SAAS;AAAA,EACtB;AACA,MAAI,aAAa;AACf,UAAM,KAAK,WAAW;AAAA,EACxB;AACA,QAAM,KAAK,8DAA8D;AACzE,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAS,kCAAkC,QAG9B;AACX,QAAM,EAAE,OAAO,OAAO,IAAI;AAC1B,QAAM,UAAU,MAAM;AAItB,QAAM,aAAa,oBAAI,IAAY;AACnC,QAAM,MAAM,CAAC,UAAmB;AAC9B,UAAM,aAAa,gBAAgB,KAAK;AACxC,QAAI,YAAY;AACd,iBAAW,IAAI,UAAU;AAAA,IAC3B;AAAA,EACF;AACA,MAAI,MAAM;AACV,MAAI,MAAM,QAAQ;AAClB,MAAI,QAAQ,cAAc;AAC1B,MAAI,QAAQ,cAAc,GAAG,QAAQ;AACrC,SAAO,MAAM,KAAK,UAAU;AAC9B;AAEA,SAAS,sBAAsB,SAAgD;AAC7E,QAAM,KAAK,KAAK,MAAM,QAAQ,aAAa,EAAE;AAC7C,SAAO,OAAO,SAAS,EAAE,IAAI,KAAK;AACpC;AAEA,SAAS,4BAA4B,SAAiD;AACpF,MAAI,QAAQ,cAAc,MAAM;AAC9B,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,cAAc,eAAe,QAAQ,cAAc,QAAQ;AACrE,WAAO;AAAA,EACT;AACA,MAAI,OAAO,QAAQ,UAAU,YAAY,QAAQ,SAAS,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,eAAe,oCACb,QACA,QAM+C;AAC/C,MAAI,CAAC,OAAO,QAAQ;AAClB,WAAO;AAAA,EACT;AACA,QAAM,OAAO,OACV,4BAA4B;AAAA,IAC3B,QAAQ,OAAO;AAAA,IACf,QAAQ,OAAO;AAAA,EACjB,CAAC,EACA,MAAM,MAAM,IAAI;AACnB,QAAM,OAAO,MAAM,OAAO,OAAO,kBAAkB;AACnD,MAAI,KAAK,WAAW,GAAG;AACrB,WAAO;AAAA,EACT;AACA,QAAM,aAAa,kCAAkC;AAAA,IACnD,OAAO,OAAO;AAAA,IACd,QAAQ,OAAO;AAAA,EACjB,CAAC;AACD,QAAM,kBAAkB,KAAK;AAAA,IAAK,CAAC,UACjC,WAAW,KAAK,CAAC,cAAc,MAAM,kBAAkB,SAAS;AAAA,EAClE;AACA,MAAI,iBAAiB;AACnB,WAAO;AAAA,EACT;AAKA,QAAM,EAAE,0BAA0B,mBAAmB,IAAI,MAAM,yBAAyB;AACxF,QAAM,aAAa,MAAM,yBAAyB;AAAA,IAChD;AAAA,IACA,cAAc,OAAO;AAAA,EACvB,CAAC,EAAE,MAAM,MAAM,IAAI;AACnB,QAAM,eAAe,gBAAgB,YAAY,YAAY;AAC7D,MAAI,cAAc;AAChB,QAAI,iBAAiB,OAAO,QAAQ;AAClC,aAAO;AAAA,IACT;AAAA,EACF,WACE,CAAE,MAAM,mBAAmB;AAAA,IACzB;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,cAAc,OAAO;AAAA,EACvB,CAAC,GACD;AAIA,WAAO;AAAA,EACT;AAGA,QAAM,eAAe,KAClB,OAAO,CAAC,UAAU,MAAM,gBAAgB,OAAO,YAAY,4BAA4B,KAAK,CAAC,EAC7F,SAAS,CAAC,GAAG,MAAM,sBAAsB,CAAC,IAAI,sBAAsB,CAAC,CAAC;AACzE,QAAM,eAAe,aAAa,OAAO,CAAC,UAAU;AAClD,UAAM,SAAS,gBAAgB,MAAM,MAAM;AAC3C,WAAO,WAAW,OAAO;AAAA,EAC3B,CAAC;AACD,MAAI,aAAa,SAAS,GAAG;AAC3B,WAAO,aAAa,CAAC,KAAK;AAAA,EAC5B;AACA,SAAO,aAAa,CAAC,KAAK;AAC5B;AAEA,eAAe,sCACb,QACA,QAOsF;AACtF,QAAM,UAAU,MAAM,oCAAoC,QAAQ,MAAM;AACxE,QAAM,kBACJ,WAAW,4BAA4B,OAAO,IAAI,4BAA4B,OAAO,IAAI;AAC3F,MAAI,mBAAoB,OAAO,UAAU,WAAW,OAAO,UAAU,SAAU;AAC7E,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,IACb;AAAA,EACF;AAEA,QAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,yBAAyB,CAAC;AAC7E,QAAM,iBAAiB,MAAM,oCAAoC,QAAQ,MAAM;AAC/E,SAAO;AAAA,IACL,SAAS;AAAA,IACT,WACE,kBAAkB,4BAA4B,cAAc,IACxD,4BAA4B,cAAc,IAC1C;AAAA,EACR;AACF;AAEA,SAAS,aAAa,KAAkB,OAAwB;AAC9D,MAAI,CAAC,SAAS,IAAI,IAAI,KAAK,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,MAAI,IAAI,KAAK;AACb,MAAI,IAAI,OAAO,iCAAiC;AAC9C,UAAM,SAAS,IAAI,OAAO,EAAE,KAAK,EAAE;AACnC,QAAI,OAAO,WAAW,UAAU;AAC9B,UAAI,OAAO,MAAM;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,uBAAuB,QAKpB;AAChB,QAAM,SAAS,gBAAgB,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ;AACX;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAO,OAAO,YAAY,QAAQ;AAAA,MACtC,SAAS;AAAA,MACT,MAAM,OAAO;AAAA,IACf,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,mDAAmD,MAAM,KAAK,OAAO,GAAG,CAAC;AAAA,IAC3E;AAAA,EACF;AACF;AAEA,eAAe,+BAA+B,QAOzB;AAGnB,MAAI,CAAC,OAAO,aAAa,OAAO,aAAa,YAAY;AACvD,WAAO;AAAA,MACL,uCAAuC,OAAO,QAAQ,cAAc,OAAO,QAAQ,eAAe,OAAO,OAAO,SAAS,CAAC;AAAA,IAC5H;AACA,WAAO;AAAA,EACT;AACA,MAAI,OAAO,aAAa,QAAQ;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,iBAAiB,MAAM,OAAO,mBAAmB;AACvD,QAAM,cAAc,gCAAgC;AAAA,IAClD,WAAW,OAAO;AAAA,IAClB;AAAA;AAAA;AAAA,IAGA,gBAAgB,CAAC;AAAA,IACjB,WAAW,CAAC;AAAA,IACZ,UAAU,OAAO;AAAA,IACjB,QAAQ;AAAA,EACV,CAAC;AACD,MAAI,YAAY,iBAAiB,SAAS;AACxC,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,uCAAuC,OAAO,QAAQ,cAAc,OAAO,QAAQ;AAAA,EACrF;AACA,SAAO;AACT;AAEO,SAAS,oCAAoC,QAOjD;AACD,QAAM,oBAAoB,KAAK,IAAI;AACnC,QAAM,2BAA2B,oBAAI,IAAY;AACjD,QAAM,oCAAoC,oBAAI,IAAY;AAC1D,QAAM,iCAAiC,oBAAI,IAAY;AACvD,QAAM,wBAAwB,oBAAI,IAAoB;AACtD,QAAM,wBAAwB,oBAAI,IAAoB;AAEtD,iBAAe,0BAA0B,cAA8C;AACrF,UAAM,EAAE,yBAAyB,IAAI,MAAM,yBAAyB;AACpE,UAAM,aAAa,MAAM,yBAAyB;AAAA,MAChD,QAAQ,OAAO;AAAA,MACf;AAAA,IACF,CAAC,EAAE,MAAM,MAAM,IAAI;AACnB,WAAO,gBAAgB,YAAY,YAAY;AAAA,EACjD;AAEA,WAAS,kCAAkC,OAAgC;AACzE,UAAM,UACJ,OAAO,MAAM,qBAAqB,YAAY,OAAO,SAAS,MAAM,gBAAgB,IAChF,MAAM,mBACN;AACN,QAAI,YAAY,MAAM;AACpB,aAAO;AAAA,IACT;AACA,WAAO,WAAW,oBAAoB;AAAA,EACxC;AAEA,WAAS,yBAAyB,QAAgB,OAAuB,QAAuB;AAC9F,eAAW,aAAa,kCAAkC,EAAE,OAAO,OAAO,CAAC,GAAG;AAC5E,4BAAsB,IAAI,WAAW,MAAM;AAC3C,UAAI,sBAAsB,OAAO,iCAAiC;AAChE,cAAM,SAAS,sBAAsB,KAAK,EAAE,KAAK,EAAE;AACnD,YAAI,OAAO,WAAW,UAAU;AAC9B,gCAAsB,OAAO,MAAM;AAAA,QACrC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,WAAS,6BAA6B,cAAsB,QAAsB;AAChF,UAAM,mBAAmB,gBAAgB,YAAY;AACrD,UAAM,mBAAmB,gBAAgB,MAAM;AAC/C,QAAI,CAAC,oBAAoB,CAAC,kBAAkB;AAC1C;AAAA,IACF;AACA,0BAAsB,OAAO,gBAAgB;AAC7C,0BAAsB,IAAI,kBAAkB,gBAAgB;AAC5D,QAAI,sBAAsB,OAAO,iCAAiC;AAChE,YAAM,SAAS,sBAAsB,KAAK,EAAE,KAAK,EAAE;AACnD,UAAI,OAAO,WAAW,UAAU;AAC9B,8BAAsB,OAAO,MAAM;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,qBACb,SACwB;AACxB,UAAM,eACJ,gBAAgB,QAAQ,MAAM,KAC9B;AAAA,MACE,QAAQ,gBAAgB,sBAAsB,IAAI,QAAQ,aAAa,IAAI;AAAA,IAC7E,KACA,gBAAgB,sBAAsB,IAAI,QAAQ,EAAE,CAAC;AACvD,QAAI,cAAc;AAChB,aAAO;AAAA,IACT;AAEA,UAAM,eAAe,gBAAgB,QAAQ,WAAW;AACxD,QAAI,CAAC,cAAc;AACjB,aAAO;AAAA,IACT;AACA,UAAM,eAAe,gBAAgB,sBAAsB,IAAI,YAAY,CAAC;AAC5E,UAAM,eAAe,MAAM,0BAA0B,YAAY;AACjE,QAAI,gBAAgB,gBAAgB,iBAAiB,cAAc;AACjE,aAAO;AAAA,IACT;AACA,QAAI,cAAc;AAChB,aAAO;AAAA,IACT;AACA,QACE,gBACC,OACC,MAAM,yBAAyB,GAC/B,mBAAmB;AAAA,MACnB,QAAQ,OAAO;AAAA,MACf,QAAQ;AAAA,MACR;AAAA,IACF,CAAC,GACD;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,yBAAyB,SAAuD;AAC7F,UAAM,SAAS,MAAM,qBAAqB,OAAO;AACjD,QAAI,CAAC,UAAU,CAAC,4BAA4B,OAAO,GAAG;AACpD;AAAA,IACF;AACA,QACE,CAAE,OACA,MAAM,yBAAyB,GAC/B,mBAAmB;AAAA,MACnB,QAAQ,OAAO;AAAA,MACf;AAAA,MACA,cAAc,QAAQ;AAAA,IACxB,CAAC,GACD;AACA,aAAO;AAAA,QACL,gEAAgE,MAAM,WAAW,QAAQ,WAAW;AAAA,MACtG;AACA;AAAA,IACF;AACA,QACE,CAAE,MAAM,+BAA+B;AAAA,MACrC,UAAU,QAAQ;AAAA,MAClB,WAAW,OAAO;AAAA,MAClB,WAAW,OAAO;AAAA,MAClB,UAAU,OAAO;AAAA,MACjB,oBAAoB,OAAO;AAAA,MAC3B,mBAAmB,OAAO;AAAA,IAC5B,CAAC,GACD;AACA;AAAA,IACF;AACA,UAAM,YAAY,4BAA4B,OAAO;AACrD,QAAI,CAAC,WAAW;AACd;AAAA,IACF;AACA,UAAM,iBAAiB,GAAG,QAAQ,EAAE,IAAI,KAAK,UAAU,QAAQ,GAAG,CAAC;AACnE,QAAI,CAAC,aAAa,mCAAmC,cAAc,GAAG;AACpE;AAAA,IACF;AACA,UAAM,uBAAuB;AAAA,MAC3B,QAAQ,OAAO;AAAA,MACf;AAAA,MACA,MAAM;AAAA,MACN,mBAAmB,OAAO;AAAA,IAC5B,CAAC;AAAA,EACH;AAEA,WAAS,uBAAuB,QAAgB,OAAgC;AAC9E,UAAM,WAAW,gBAAgB,OAAO,MAAM;AAC9C,QAAI,CAAC,UAAU;AACb,aAAO;AAAA,IACT;AACA,UAAM,SAAS,uBAAuB,KAAK;AAC3C,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AACA,6BAAyB,QAAQ,OAAO,OAAO,MAAM;AAErD,UAAM,YAAY;AAChB,UAAI,CAAC,kCAAkC,KAAK,GAAG;AAC7C,eAAO;AAAA,UACL,uDAAuD,MAAM,OAAO,MAAM,YAAY,SAAS,SAAS,MAAM,QAAQ,SAAS;AAAA,QACjI;AACA;AAAA,MACF;AACA,YAAM,SAAS,OAAO;AACtB,YAAM,gBAAgB,gBAAgB,OAAO,QAAQ;AACrD,YAAM,oBAAoB,iBAAiB,GAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,UAAU,MAAM;AACxF,YAAM,oBAAoB,OACxB,MAAM,yBAAyB,GAC/B,mBAAmB;AAAA,QACnB,QAAQ,OAAO;AAAA,QACf;AAAA,QACA,cAAc;AAAA,MAChB,CAAC;AACD,UAAI,CAAC,mBAAmB;AACtB,eAAO;AAAA,UACL,8DAA8D,MAAM,WAAW,QAAQ;AAAA,QACzF;AACA;AAAA,MACF;AACA,UACE,CAAE,MAAM,+BAA+B;AAAA,QACrC;AAAA,QACA,WAAW,OAAO;AAAA,QAClB,WAAW,OAAO;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,oBAAoB,OAAO;AAAA,QAC3B,mBAAmB,OAAO;AAAA,MAC5B,CAAC,GACD;AACA;AAAA,MACF;AACA,mCAA6B,UAAU,MAAM;AAC7C,UAAI,CAAC,aAAa,0BAA0B,iBAAiB,GAAG;AAC9D;AAAA,MACF;AAEA,YAAM,cAAc,8BAA8B,EAAE,OAAO,OAAO,OAAO,UAAU,MAAM,CAAC;AAC1F,YAAM,EAAE,SAAS,UAAU,IAAI,MAAM,sCAAsC,OAAO,QAAQ;AAAA,QACxF;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,OAAO;AAAA,MAChB,CAAC,EAAE,MAAM,OAAO,EAAE,SAAS,MAAM,WAAW,KAAK,EAAE;AAEnD,YAAM,UAAoB,CAAC;AAC3B,UAAI,aAAa;AACf,cAAM,WAAW,GAAG,MAAM,IAAI,QAAQ,IAAI,UAAU,iBAAiB,IAAI,OAAO,KAAK;AACrF,YAAI,aAAa,gCAAgC,QAAQ,GAAG;AAC1D,kBAAQ,KAAK,WAAW;AAAA,QAC1B;AAAA,MACF;AACA,UAAI,WAAW,WAAW;AACxB,cAAM,iBAAiB,GAAG,QAAQ,EAAE,IAAI,KAAK,UAAU,QAAQ,GAAG,CAAC;AACnE,YAAI,aAAa,mCAAmC,cAAc,GAAG;AACnE,kBAAQ,KAAK,SAAS;AAAA,QACxB;AAAA,MACF;AACA,UAAI,QAAQ,WAAW,GAAG;AACxB;AAAA,MACF;AAEA,iBAAW,QAAQ,SAAS;AAC1B,cAAM,uBAAuB;AAAA,UAC3B,QAAQ,OAAO;AAAA,UACf;AAAA,UACA;AAAA,UACA,mBAAmB,OAAO;AAAA,QAC5B,CAAC;AAAA,MACH;AAAA,IACF,GAAG,EAAE,MAAM,CAAC,QAAQ;AAClB,aAAO,kBAAkB,8CAA8C,OAAO,GAAG,CAAC,EAAE;AAAA,IACtF,CAAC;AAED,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": []
+}