@bolloon/bolloon-agent 0.4.29 → 0.4.30

package/dist/electron-build/agents/contacts/grants.js

@@ -0,0 +1,500 @@
+"use strict";
+/**
+ * contacts/grants.ts — 持久化联系方式能力授权 (2026-09-19, Phase 0/1/4/8)
+ *
+ * 与 consents.json 的分工:
+ *   consents.json = **一次性**批准请求 (某个 requestId 的这一次发送)
+ *   grants.json   = **长期**能力授权 (以后 Agent 能不能自动用这个能力)
+ *
+ * 授权等级 (内部四级 / 用户只看三个选项):
+ *   none                 不允许 Agent 使用
+ *   task_once            只允许当前任务        ← 用户选"仅本次任务"
+ *   persistent           以后自动使用          ← 用户选"长期使用"(推荐默认)
+ *   full_contact_access  联系方式能力完全授权  ← 用户选"完全授权"
+ *
+ * "完全访问" = **只对 phone.contact / email.contact 完全授权**, 不等于绕过系统边界:
+ *   仍然保留 单收件人 / 频率 / 任务关联 / requestId 幂等 / provider 检查 / 证据 / 撤销 / Harness 拦截 / 禁止群发。
+ *   支付·转账·签署·法律承诺·密钥明文 这些**永不被联系方式 Grant 放行** (见 FORBIDDEN_CATEGORIES)。
+ *
+ * 手机→桌面同步: Grant 由**手机设备私钥签名**, 桌面用登记过的设备公钥验签才接受;
+ *   规则: 撤销优先于授权 / 低版本不覆盖高版本 / 桌面不能自铸手机授权。
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GrantStore = exports.FORBIDDEN_CATEGORIES = exports.GRANT_SIGNED_FIELDS = exports.GRANT_LEVEL_LABEL = exports.presetForChoice = exports.canonicalRevocationPayload = exports.canonicalGrantPayload = void 0;
+exports.generateDeviceKeyPair = generateDeviceKeyPair;
+exports.grantPayloadHash = grantPayloadHash;
+exports.signGrant = signGrant;
+exports.verifyGrantSignature = verifyGrantSignature;
+exports.categoriesOf = categoriesOf;
+exports.evaluateGrant = evaluateGrant;
+const crypto = __importStar(require("crypto"));
+const fsp = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+// 2026-09-19: 类型/规范载荷/预设全部从纯模块复用 —— 手机端 (WebCrypto) 与桌面端 (Node) 签的必须是同一个字节串
+var grant_payload_js_1 = require("./grant-payload.js");
+Object.defineProperty(exports, "canonicalGrantPayload", { enumerable: true, get: function () { return grant_payload_js_1.canonicalGrantPayload; } });
+Object.defineProperty(exports, "canonicalRevocationPayload", { enumerable: true, get: function () { return grant_payload_js_1.canonicalRevocationPayload; } });
+Object.defineProperty(exports, "presetForChoice", { enumerable: true, get: function () { return grant_payload_js_1.presetForChoice; } });
+Object.defineProperty(exports, "GRANT_LEVEL_LABEL", { enumerable: true, get: function () { return grant_payload_js_1.GRANT_LEVEL_LABEL; } });
+Object.defineProperty(exports, "GRANT_SIGNED_FIELDS", { enumerable: true, get: function () { return grant_payload_js_1.GRANT_SIGNED_FIELDS; } });
+const grant_payload_js_2 = require("./grant-payload.js");
+/**
+ * 联系方式 Grant **永远**不能放行的内容类别 (与"完全授权"无关 —— 它们属于另一类高风险能力:
+ * 凭证 / 资金指令 / 合同承诺)。注意: 卡号与身份证号属于"敏感但可在完全授权下发送"。
+ */
+exports.FORBIDDEN_CATEGORIES = ['api_key', 'password', 'bank_account', 'payment_instruction', 'contract_commitment'];
+function generateDeviceKeyPair() {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
+    return {
+        deviceId: `dev-${crypto.randomBytes(4).toString('hex')}`,
+        publicKeyPem: publicKey.export({ type: 'spki', format: 'pem' }).toString(),
+        privateKeyPem: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(),
+    };
+}
+function grantPayloadHash(g) {
+    return crypto.createHash('sha256').update((0, grant_payload_js_2.canonicalGrantPayload)(g)).digest('hex');
+}
+function signGrant(g, privateKeyPem, deviceId) {
+    const payload = (0, grant_payload_js_2.canonicalGrantPayload)(g);
+    const sig = crypto.sign(null, Buffer.from(payload, 'utf8'), crypto.createPrivateKey(privateKeyPem)).toString('base64');
+    return { deviceId, alg: 'ed25519', payloadHash: grantPayloadHash(g), sig };
+}
+function verifyGrantSignature(g, pub) {
+    if (!g.signature)
+        return { ok: false, reason: 'unsigned' };
+    if (!pub)
+        return { ok: false, reason: 'unknown_device' };
+    if (pub.deviceId !== g.signature.deviceId)
+        return { ok: false, reason: 'device_mismatch' };
+    if (g.signature.payloadHash !== grantPayloadHash(g))
+        return { ok: false, reason: 'payload_tampered' };
+    try {
+        const ok = crypto.verify(null, Buffer.from((0, grant_payload_js_2.canonicalGrantPayload)(g), 'utf8'), crypto.createPublicKey(pub.publicKeyPem), Buffer.from(g.signature.sig, 'base64'));
+        return ok ? { ok: true } : { ok: false, reason: 'bad_signature' };
+    }
+    catch (err) {
+        return { ok: false, reason: `verify_error:${err?.message || err}` };
+    }
+}
+/** 内容类别 → 敏感类别名 (与 types.scanSensitive 对齐) */
+function categoriesOf(findings) {
+    return [...new Set(findings.map((f) => f.kind))];
+}
+function evaluateGrant(grant, input, now = Date.now()) {
+    const base = { level: 'none', needsHumanApproval: false, authorizationMode: 'one_time', approvalSkipped: false, policyDecision: '' };
+    // 永不放行的类别 → 直接拒绝, 与有没有 Grant 无关
+    if (input.hasForbiddenContent) {
+        return { ...base, ok: false, block: 'forbidden_content_category',
+            reason: '内容含密码/密钥/银行账号/卡号/支付指令/合同承诺 —— 这些永不由联系方式授权放行 (属另一类高风险能力)' };
+    }
+    if (!grant) {
+        return { ...base, ok: false, block: 'grant_missing', needsHumanApproval: true,
+            reason: '没有长期联系方式授权 → 退回一次性人工批准 (批准一次不等于长期授权)', policyDecision: 'grant_missing→one_time_consent' };
+    }
+    const mode = grant.level === 'full_contact_access' ? 'full_contact_access' : grant.level === 'persistent' ? 'persistent' : 'one_time';
+    if (grant.status === 'revoked') {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_revoked',
+            reason: `授权 ${grant.grantId} 已被撤销 (${grant.revokedAt || ''})`, policyDecision: `grant_revoked:${grant.grantId}` };
+    }
+    if (grant.status === 'expired') {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_expired', reason: `授权 ${grant.grantId} 已过期`, policyDecision: `grant_expired:${grant.grantId}` };
+    }
+    if (grant.status === 'suspended') {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_suspended', needsHumanApproval: true, reason: `授权 ${grant.grantId} 处于暂停状态`, policyDecision: `grant_suspended:${grant.grantId}` };
+    }
+    if (grant.level === 'none') {
+        return { ...base, ok: false, block: 'grant_missing', needsHumanApproval: true, reason: '授权等级为 none (不允许 Agent 使用)', policyDecision: 'grant_none' };
+    }
+    // 设备可信: 同步来的 Grant 必须来自已登记设备
+    if (grant.signature && input.deviceTrusted && !input.deviceTrusted(grant.signature.deviceId)) {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_device_untrusted',
+            reason: `授权来自未登记设备 ${grant.signature.deviceId} (桌面不认未签名/未知设备的授权)`, policyDecision: `grant_device_untrusted:${grant.signature.deviceId}` };
+    }
+    const channelsOk = grant.channels === 'both' || grant.channels === input.channel;
+    if (!channelsOk) {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_channel_denied',
+            reason: `授权 ${grant.grantId} 只覆盖 ${grant.channels}, 不含 ${input.channel}`, policyDecision: `grant_channel_denied:${grant.channels}` };
+    }
+    if (grant.contactScope === 'verified_contacts' && !input.contactVerified) {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_recipient_denied',
+            reason: '授权范围是 verified_contacts, 但该联系方式未验证', policyDecision: 'grant_recipient_denied:unverified' };
+    }
+    // 明确点名的联系人 (经用户授权过) 永远在范围内
+    if (!input.taskBoundToGoal && grant.contactScope === 'all_contacts' && !input.contactVerified) {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_recipient_denied',
+            reason: 'all_contacts 也只覆盖**已验证**联系人 (未验证一律不发)', policyDecision: 'grant_recipient_denied:unverified' };
+    }
+    const taskScopeOk = grant.taskScope === 'all_future_goals' ||
+        (grant.taskScope === 'current_goal' && !!input.goalId && !!input.taskBoundToGoal) ||
+        (grant.taskScope === 'matching_goals' && !!input.goalId && !!(input.goalMatchesGrant ? input.goalMatchesGrant(grant, input.goalId) : input.taskBoundToGoal));
+    if (!taskScopeOk) {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_task_denied',
+            reason: `授权 ${grant.grantId} 的任务范围是 ${grant.taskScope}${input.goalId ? `, 当前任务 ${input.goalId} 不在范围内` : ' 且未指定任务'}`, policyDecision: `grant_task_denied:${grant.taskScope}` };
+    }
+    const sensitive = input.sensitiveCategories || [];
+    if (sensitive.length > 0 && (grant.contentScope !== 'sensitive' || !grant.sensitiveContentAllowed)) {
+        return { ...base, level: grant.level, authorizationMode: mode, ok: false, block: 'grant_sensitive_content_denied', needsHumanApproval: true,
+            reason: `内容敏感 (${sensitive.join(', ')}) 但授权 ${grant.grantId} 的内容范围是 ${grant.contentScope} → 需要人工批准`, policyDecision: `grant_sensitive_content_denied:${sensitive.join('|')}` };
+    }
+    const autoOk = grant.autoSend && grant.level !== 'task_once';
+    return {
+        ok: true,
+        grant,
+        level: grant.level,
+        needsHumanApproval: !autoOk,
+        authorizationMode: mode,
+        approvalSkipped: autoOk,
+        policyDecision: `allowed:${grant.grantId}:v${grant.grantVersion}:${mode}`,
+    };
+}
+class GrantStore {
+    dir;
+    grants = [];
+    devices = [];
+    loaded = false;
+    /** 读盘失败时置位 —— 之后一切自动发送都必须 fail-closed */
+    corrupt = false;
+    /** 上次读到的 mtime —— 别的进程 (CLI / web server / 手机同步) 改过盘就要重读 */
+    mtimeMs = 0;
+    constructor(dir) { this.dir = dir; }
+    grantsFile() { return path.join(this.dir, 'grants.json'); }
+    devicesFile() { return path.join(this.dir, 'devices.json'); }
+    async atomic(file, data, mode) {
+        await fsp.mkdir(path.dirname(file), { recursive: true });
+        const tmp = `${file}.tmp-${process.pid}-${Date.now().toString(36)}`;
+        await fsp.writeFile(tmp, JSON.stringify(data, null, 2), 'utf8');
+        if (mode) {
+            try {
+                await fsp.chmod(tmp, mode);
+            }
+            catch { /* 平台限制 */ }
+        }
+        await fsp.rename(tmp, file);
+    }
+    async load() {
+        if (this.loaded)
+            return;
+        try {
+            const raw = JSON.parse(await fsp.readFile(this.grantsFile(), 'utf8'));
+            this.grants = Array.isArray(raw) ? raw : [];
+            this.corrupt = false;
+        }
+        catch (err) {
+            if (err?.code === 'ENOENT') {
+                this.grants = [];
+                this.corrupt = false;
+            }
+            // 损坏 → 明确置位, 绝不静默当成"没有授权"(那会变成"重新弹批准")或"已授权"
+            else {
+                this.grants = [];
+                this.corrupt = true;
+            }
+        }
+        try {
+            const dev = JSON.parse(await fsp.readFile(this.devicesFile(), 'utf8'));
+            this.devices = Array.isArray(dev) ? dev : [];
+        }
+        catch {
+            this.devices = [];
+        }
+        try {
+            this.mtimeMs = (await fsp.stat(this.grantsFile())).mtimeMs;
+        }
+        catch {
+            this.mtimeMs = 0;
+        }
+        this.loaded = true;
+    }
+    /**
+     * 2026-09-19 (真跑抓到): 长驻进程 (web server) 会缓存 Grant 列表 →
+     *   别的进程撤销/授权后, 它还在用旧事实 —— 对"撤销必须立即失效"是硬伤。
+     * 每次读/写前按 mtime 判断要不要重读 (stat 很便宜)。
+     */
+    async refreshIfStale() {
+        try {
+            const st = await fsp.stat(this.grantsFile());
+            if (st.mtimeMs !== this.mtimeMs) {
+                this.loaded = false;
+                this.corrupt = false;
+                await this.load();
+            }
+        }
+        catch { /* 文件还不存在 (或刚被删) → 保持现状 */ }
+    }
+    async persist() {
+        await this.atomic(this.grantsFile(), this.grants.slice(-200), 0o600);
+        await this.atomic(this.devicesFile(), this.devices.slice(-50), 0o600);
+        try {
+            this.mtimeMs = (await fsp.stat(this.grantsFile())).mtimeMs;
+        }
+        catch { /* 记不上下次 stat 再判 */ }
+    }
+    // ── 设备 ──────────────────────────────────────────────────────────────────
+    async registerDevice(deviceId, publicKeyPem, label) {
+        await this.load();
+        await this.refreshIfStale();
+        const i = this.devices.findIndex((d) => d.deviceId === deviceId);
+        const entry = { deviceId, publicKeyPem, label, registeredAt: new Date().toISOString() };
+        if (i >= 0)
+            this.devices[i] = entry;
+        else
+            this.devices.push(entry);
+        await this.persist();
+        return entry;
+    }
+    deviceTrusted(deviceId) { return this.devices.some((d) => d.deviceId === deviceId); }
+    getDevice(deviceId) { return this.devices.find((d) => d.deviceId === deviceId) || null; }
+    async listDevices() { await this.load(); return [...this.devices]; }
+    // ── Grant ─────────────────────────────────────────────────────────────────
+    async list() { await this.load(); await this.refreshIfStale(); return [...this.grants]; }
+    /** 当前生效的最高等级 Grant (撤销/暂停/过期的不算) */
+    async activeFor(ownerDid, now = Date.now()) {
+        await this.load();
+        await this.refreshIfStale();
+        if (this.corrupt)
+            return null;
+        const rank = { none: 0, task_once: 1, persistent: 2, full_contact_access: 3 };
+        const live = this.grants
+            .filter((g) => g.ownerDid === ownerDid && g.status === 'active' && (!g.revokedAt))
+            .sort((a, b) => (rank[b.level] - rank[a.level]) || (b.grantVersion - a.grantVersion));
+        return live[0] || null;
+    }
+    /**
+     * 最高的**管辖** Grant。
+     *   有 active 的 → 按等级+版本取最高 (授权优先)
+     *   一个 active 都没有 → 取最近一条失效授权, 用来给出精确原因 (revoked/suspended/expired)
+     *
+     * 2026-09-19 真跑抓到: 早先"按等级排全部 (含已撤销)"实现会让一条**已撤销的高等级授权**
+     *   盖住后建的**有效**低等级授权 → 明明有长期授权却判成 grant_revoked (用户看到"已撤销"却没撤销过)。
+     */
+    async latestFor(ownerDid) {
+        await this.load();
+        await this.refreshIfStale();
+        if (this.corrupt)
+            return null;
+        const rank = { none: 0, task_once: 1, persistent: 2, full_contact_access: 3 };
+        const mine = this.grants.filter((g) => g.ownerDid === ownerDid);
+        if (!mine.length)
+            return null;
+        const live = mine.filter((g) => g.status === 'active' && !g.revokedAt);
+        if (live.length)
+            return live.sort((a, b) => (rank[b.level] - rank[a.level]) || (b.grantVersion - a.grantVersion))[0];
+        const at = (g) => Date.parse(g.revokedAt || g.suspendedAt || g.grantedAt || '') || 0;
+        return [...mine].sort((a, b) => at(b) - at(a) || b.grantVersion - a.grantVersion)[0];
+    }
+    async get(grantId) {
+        await this.load();
+        await this.refreshIfStale();
+        return this.grants.find((g) => g.grantId === grantId) || null;
+    }
+    async create(input) {
+        await this.load();
+        const preset = (0, grant_payload_js_2.presetForChoice)(input.choice || 'persistent');
+        const now = new Date().toISOString();
+        const grant = {
+            grantId: `gr-${Date.now().toString(36)}-${crypto.randomBytes(3).toString('hex')}`,
+            identityId: input.identityId,
+            ownerDid: input.ownerDid,
+            level: input.level || preset.level,
+            channels: input.channels || preset.channels,
+            contactScope: input.contactScope || preset.contactScope,
+            taskScope: input.taskScope || preset.taskScope,
+            contentScope: input.contentScope || preset.contentScope,
+            replyWakeAllowed: preset.replyWakeAllowed,
+            autoSend: input.level && input.level !== 'task_once' ? true : preset.autoSend,
+            sensitiveContentAllowed: input.contentScope === 'sensitive' || preset.sensitiveContentAllowed,
+            newRecipientAllowed: preset.newRecipientAllowed,
+            grantedAt: now,
+            grantedBy: input.grantedBy,
+            grantedVia: input.grantedVia,
+            deviceIds: input.deviceIds || [],
+            status: 'active',
+            grantVersion: 1,
+            signature: input.signature,
+        };
+        this.grants.push(grant);
+        await this.persist();
+        return grant;
+    }
+    /** 暂停 / 恢复 / 撤销 (撤销是终态: 版本 +1, 不允许重新启用同一 grantId) */
+    async transition(grantId, action, opts = {}) {
+        await this.load();
+        await this.refreshIfStale();
+        const g = this.grants.find((x) => x.grantId === grantId);
+        if (!g)
+            return { ok: false, error: 'grant_not_found' };
+        if (g.status === 'revoked')
+            return { ok: false, error: 'grant_already_revoked' };
+        const now = new Date().toISOString();
+        if (action === 'pause') {
+            g.status = 'suspended';
+            g.suspendedAt = now;
+        }
+        if (action === 'resume') {
+            if (g.status !== 'suspended')
+                return { ok: false, error: `grant 状态 ${g.status}, 不能恢复` };
+            g.status = 'active';
+            g.suspendedAt = undefined;
+        }
+        if (action === 'revoke') {
+            g.status = 'revoked';
+            g.revokedAt = now;
+            g.revokedBy = opts.by || 'user';
+            g.revokedReason = opts.reason;
+        }
+        g.grantVersion += 1;
+        await this.persist();
+        return { ok: true, grant: g };
+    }
+    async revokeAll(by, reason) {
+        await this.load();
+        const now = new Date().toISOString();
+        const out = [];
+        for (const g of this.grants) {
+            if (g.status === 'revoked')
+                continue;
+            g.status = 'revoked';
+            g.revokedAt = now;
+            g.revokedBy = by;
+            g.revokedReason = reason;
+            g.grantVersion += 1;
+            out.push(g);
+        }
+        await this.persist();
+        return out;
+    }
+    async markUsed(grantId) {
+        await this.load();
+        const g = this.grants.find((x) => x.grantId === grantId);
+        if (!g)
+            return;
+        g.lastUsedAt = new Date().toISOString();
+        await this.persist();
+    }
+    /**
+     * 接受手机同步来的 (已签名) Grant。
+     * 规则: ① 设备必须已登记 ② 签名必须验过 ③ 撤销优先 (本地已撤销且版本 >= 来的版本 → 拒绝)
+     *      ④ 低版本不覆盖高版本 ⑤ 同版本内容不同 → 冲突, 不覆盖
+     */
+    async applySignedSync(incoming, opts = {}) {
+        await this.load();
+        await this.refreshIfStale();
+        const requireSig = opts.requireSignature !== false;
+        if (requireSig) {
+            const dev = this.getDevice(incoming.signature?.deviceId || '');
+            if (!dev)
+                return { ok: false, code: 'grant_device_untrusted', reason: `设备 ${incoming.signature?.deviceId || '(无)'} 未登记, 拒绝接受该授权` };
+            const v = verifyGrantSignature(incoming, dev);
+            if (!v.ok)
+                return { ok: false, code: 'grant_device_untrusted', reason: `签名校验失败: ${v.reason}` };
+        }
+        const local = this.grants.find((g) => g.grantId === incoming.grantId);
+        if (!local) {
+            this.grants.push({ ...incoming });
+            await this.persist();
+            return { ok: true, grant: incoming };
+        }
+        if (local.status === 'revoked' && incoming.status !== 'revoked' && incoming.grantVersion <= local.grantVersion) {
+            return { ok: false, code: 'grant_version_conflict', reason: `本地 ${local.grantId} 已撤销 (v${local.grantVersion}) → 撤销优先于授权, 拒绝旧版复活` };
+        }
+        if (incoming.grantVersion < local.grantVersion) {
+            return { ok: false, code: 'grant_version_conflict', reason: `来的版本 v${incoming.grantVersion} 低于本地 v${local.grantVersion}, 拒绝覆盖` };
+        }
+        if (incoming.grantVersion === local.grantVersion && (0, grant_payload_js_2.canonicalGrantPayload)(incoming) !== (0, grant_payload_js_2.canonicalGrantPayload)(local)) {
+            return { ok: false, code: 'grant_version_conflict', reason: `同版本 v${incoming.grantVersion} 内容不一致, 拒绝覆盖 (撤销优先)` };
+        }
+        const i = this.grants.indexOf(local);
+        this.grants[i] = { ...incoming };
+        await this.persist();
+        return { ok: true, grant: this.grants[i] };
+    }
+    /**
+     * 手机撤销 → 桌面收到后立即失效 (撤销事件可以带更高的版本)。
+     * 带签名时**先验签**: 撤销也必须来自已登记设备 (否则本地进程能冒充手机收回/伪造撤销)。
+     */
+    async applyRevocation(grantId, opts = {}) {
+        await this.load();
+        await this.refreshIfStale();
+        const g = this.grants.find((x) => x.grantId === grantId);
+        if (!g)
+            return { ok: false, code: 'grant_missing', reason: `本地没有 ${grantId}` };
+        if (opts.signature) {
+            const dev = this.getDevice(opts.signature.deviceId);
+            if (!dev)
+                return { ok: false, code: 'grant_device_untrusted', reason: `撤销来自未登记设备 ${opts.signature.deviceId}` };
+            const payload = (0, grant_payload_js_2.canonicalRevocationPayload)({
+                grantId, grantVersion: opts.version ?? g.grantVersion, revokedAt: opts.revokedAt || new Date().toISOString(), by: opts.by || 'mobile',
+            });
+            const hash = crypto.createHash('sha256').update(payload).digest('hex');
+            if (opts.signature.payloadHash !== hash)
+                return { ok: false, code: 'grant_device_untrusted', reason: '撤销载荷 hash 不匹配 (被改过)' };
+            const ok = (() => { try {
+                return crypto.verify(null, Buffer.from(payload, 'utf8'), crypto.createPublicKey(dev.publicKeyPem), Buffer.from(opts.signature.sig, 'base64'));
+            }
+            catch {
+                return false;
+            } })();
+            if (!ok)
+                return { ok: false, code: 'grant_device_untrusted', reason: '撤销签名校验失败' };
+        }
+        if (g.status === 'revoked')
+            return { ok: true, grant: g };
+        g.status = 'revoked';
+        g.revokedAt = new Date().toISOString();
+        g.revokedBy = opts.by || 'mobile';
+        g.revokedReason = opts.reason || '手机端撤销';
+        g.grantVersion = Math.max(g.grantVersion + 1, opts.version || 0);
+        await this.persist();
+        return { ok: true, grant: g };
+    }
+    /** 用户可见摘要 (CLI/Web/手机同一份事实) */
+    async summary(ownerDid) {
+        await this.load();
+        const label = grant_payload_js_2.GRANT_LEVEL_LABEL;
+        const mine = this.grants.filter((g) => g.ownerDid === ownerDid);
+        const active = await this.activeFor(ownerDid);
+        return {
+            grants: mine.map((g) => ({
+                grantId: g.grantId, level: g.level, userLabel: label[g.level], channels: g.channels, contactScope: g.contactScope,
+                taskScope: g.taskScope, contentScope: g.contentScope, status: g.status, grantVersion: g.grantVersion,
+                signed: !!g.signature, deviceId: g.signature?.deviceId, grantedAt: g.grantedAt, grantedVia: g.grantedVia, lastUsedAt: g.lastUsedAt,
+            })),
+            effective: active ? `${label[active.level]} (${active.grantId} v${active.grantVersion})` : '无长期授权 (每次联系都需要人工批准)',
+        };
+    }
+}
+exports.GrantStore = GrantStore;
+//# sourceMappingURL=grants.js.map

package/dist/electron-build/agents/contacts/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../../../src/agents/contacts/grants.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,MAAM,mCAAe;AACjC,MAAY,GAAG,wCAAoB;AACnC,MAAY,IAAI,iCAAa;AAE7B,4EAA4E;AAC5E,uDAI4B;AAD1B,yHAAA,qBAAqB,OAAA;AAAE,8HAAA,0BAA0B,OAAA;AAAE,mHAAA,eAAe,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAAE,uHAAA,mBAAmB,OAAA;AAE5G,yDACyJ;AAsCzJ;;;GAGG;AACU,QAAA,oBAAoB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,qBAAqB,EAAE,qBAAqB,CAAU,CAAC;AAMnI;IACE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO;QACL,QAAQ,EAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QACxD,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1E,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC9E,CAAC;AACJ,CAAC;AAED,0BAAiC,CAAe;IAC9C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAA,wCAAqB,EAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,mBAA0B,CAAe,EAAE,aAAqB,EAAE,QAAgB;IAChF,MAAM,OAAO,GAAG,IAAA,wCAAqB,EAAC,CAAC,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvH,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AAC7E,CAAC;AAED,8BAAqC,CAAe,EAAE,GAAiC;IACrF,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACzD,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC3F,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,KAAK,gBAAgB,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACtG,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAA,wCAAqB,EAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAyCD,8CAA8C;AAC9C,sBAA6B,QAAiC;IAC5D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,uBAA8B,KAA0B,EAAE,KAAsB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAChG,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,MAAoB,EAAE,kBAAkB,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAmB,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAE5J,gCAAgC;IAChC,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC9B,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B;YAC9D,MAAM,EAAE,yDAAyD,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,IAAI;YAC3E,MAAM,EAAE,sCAAsC,EAAE,cAAc,EAAE,gCAAgC,EAAE,CAAC;IACvG,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;IAEtI,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe;YAC9F,MAAM,EAAE,MAAM,KAAK,CAAC,OAAO,UAAU,KAAK,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,iBAAiB,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACtH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC,OAAO,MAAM,EAAE,cAAc,EAAE,iBAAiB,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1L,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC,OAAO,SAAS,EAAE,cAAc,EAAE,mBAAmB,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3N,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;IACrJ,CAAC;IAED,6BAA6B;IAC7B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7F,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB;YACvG,MAAM,EAAE,aAAa,KAAK,CAAC,SAAS,CAAC,QAAQ,oBAAoB,EAAE,cAAc,EAAE,0BAA0B,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9I,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,CAAC;IACjF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB;YACrG,MAAM,EAAE,MAAM,KAAK,CAAC,OAAO,QAAQ,KAAK,CAAC,QAAQ,QAAQ,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,wBAAwB,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzI,CAAC;IAED,IAAI,KAAK,CAAC,YAAY,KAAK,mBAAmB,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACzE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB;YACvG,MAAM,EAAE,oCAAoC,EAAE,cAAc,EAAE,mCAAmC,EAAE,CAAC;IACxG,CAAC;IACD,2BAA2B;IAC3B,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,YAAY,KAAK,cAAc,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC9F,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB;YACvG,MAAM,EAAE,uCAAuC,EAAE,cAAc,EAAE,mCAAmC,EAAE,CAAC;IAC3G,CAAC;IAED,MAAM,WAAW,GACf,KAAK,CAAC,SAAS,KAAK,kBAAkB;QACtC,CAAC,KAAK,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;QACjF,CAAC,KAAK,CAAC,SAAS,KAAK,gBAAgB,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAC/J,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB;YAClG,MAAM,EAAE,MAAM,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,cAAc,EAAE,qBAAqB,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;IAClL,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACnG,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,kBAAkB,EAAE,IAAI;YACzI,MAAM,EAAE,SAAS,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,YAAY,WAAW,EAAE,cAAc,EAAE,kCAAkC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACnL,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC;IAC7D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,kBAAkB,EAAE,CAAC,MAAM;QAC3B,iBAAiB,EAAE,IAAI;QACvB,eAAe,EAAE,MAAM;QACvB,cAAc,EAAE,WAAW,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,YAAY,IAAI,IAAI,EAAE;KAC1E,CAAC;AACJ,CAAC;AA0BD;IACU,GAAG,CAAS;IACZ,MAAM,GAAmB,EAAE,CAAC;IAC5B,OAAO,GAAgB,EAAE,CAAC;IAC1B,MAAM,GAAG,KAAK,CAAC;IACvB,yCAAyC;IACzC,OAAO,GAAG,KAAK,CAAC;IAChB,4DAA4D;IACpD,OAAO,GAAG,CAAC,CAAC;IAEpB,YAAY,GAAW,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;IAEpC,UAAU,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3D,WAAW,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IAE7D,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,IAAa,EAAE,IAAa;QAC7D,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QACtE,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;YACvE,6CAA6C;iBACxC,CAAC;gBAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAAC,CAAC;QAC9B,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAAC,CAAC;QAC/F,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7C,IAAI,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACnG,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAc;QACzE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjE,MAAM,KAAK,GAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACnG,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;;YAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,QAAgB,IAAa,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtG,SAAS,CAAC,QAAgB,IAAsB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IACnH,KAAK,CAAC,WAAW,KAA2B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE1F,6EAA6E;IAC7E,KAAK,CAAC,IAAI,KAA8B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAElH,oCAAoC;IACpC,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAChD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;aACjF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrH,MAAM,EAAE,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACnG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACvB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAA,kCAAe,EAAC,KAAK,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAiB;YAC1B,OAAO,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YACjF,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;YAC3C,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;YAC9C,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;YACvD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC7E,uBAAuB,EAAE,KAAK,CAAC,YAAY,KAAK,WAAW,IAAI,MAAM,CAAC,uBAAuB;YAC7F,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;YAChC,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,MAAqC,EAAE,IAAI,GAAqC,EAAE;QAClH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACvD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QACjF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAAC,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC;YAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC;QAAC,CAAC;QACxE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC;YACxF,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;YAAC,CAAC,CAAC,WAAW,GAAG,SAAS,CAAC;QACjD,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;YAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;YAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC;YAAC,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1G,CAAC;QACD,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,MAAe;QACzC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YACrC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;YAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;YAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC;YAAC,CAAC,CAAC,aAAa,GAAG,MAAM,CAAC;YAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YACzG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,CAAC,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,QAAsB,EAAE,IAAI,GAAmC,EAAE;QACrF,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC,SAAS,EAAE,QAAQ,IAAI,KAAK,eAAe,EAAE,CAAC;YACnI,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACjG,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YAClC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC/G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC,OAAO,UAAU,KAAK,CAAC,YAAY,qBAAqB,EAAE,CAAC;QACrI,CAAC;QACD,IAAI,QAAQ,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,SAAS,QAAQ,CAAC,YAAY,UAAU,KAAK,CAAC,YAAY,QAAQ,EAAE,CAAC;QACnI,CAAC;QACD,IAAI,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,IAAI,IAAA,wCAAqB,EAAC,QAAQ,CAAC,KAAK,IAAA,wCAAqB,EAAC,KAAK,CAAC,EAAE,CAAC;YACrH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,QAAQ,QAAQ,CAAC,YAAY,qBAAqB,EAAE,CAAC;QACnH,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,IAAI,GAAuG,EAAE;QAClJ,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,EAAE,CAAC;QAC/E,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,aAAa,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC/G,MAAM,OAAO,GAAG,IAAA,6CAA0B,EAAC;gBACzC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,QAAQ;aACtI,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;YAC7H,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxM,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1D,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC;QAClC,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;QACzC,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAChC,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,OAAO,CAAC,QAAgB;QAM5B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,oCAAiB,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY;gBACjH,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY;gBACpG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;aACnI,CAAC,CAAC;YACH,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,qBAAqB;SACjH,CAAC;IACJ,CAAC;CACF"}