@dsh-enhanced/lark-channel 0.1.3

package/lib/supervised-growth-setup.js

@@ -0,0 +1,371 @@
+#!/usr/bin/env node
+import { chmod, open, readFile, rename } from 'node:fs/promises';
+import { spawnSync } from 'node:child_process';
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join } from 'node:path';
+import { installDshResidentService, residentServiceKind } from './resident.js';
+import { isMainEntry } from './setup.js';
+import { assertEffectiveSupervisedGrowthConfig, configureSupervisedGrowthProfilePatch, supervisedGrowthDatabasePaths, supervisedGrowthBindingQuery, } from './supervised-growth-profile.js';
+const keyPattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+function argumentValue(argv, index, option) {
+    const value = argv[index + 1];
+    if (value === undefined || value.startsWith('--'))
+        throw new Error(`supervised-growth setup: ${option} requires a value`);
+    return value;
+}
+export function parseSupervisedGrowthSetupArgs(argv) {
+    const result = {
+        profile: 'web', timeoutMs: 300_000, ackExistingAutomations: false, help: false,
+    };
+    for (let index = 0; index < argv.length; index += 1) {
+        const option = argv[index];
+        if (option === '--help' || option === '-h')
+            result.help = true;
+        else if (option === '--profile')
+            result.profile = argumentValue(argv, index++, option);
+        else if (option === '--timeout-ms')
+            result.timeoutMs = Number(argumentValue(argv, index++, option));
+        else if (option === '--ack-existing-automations')
+            result.ackExistingAutomations = true;
+        else
+            throw new Error(`supervised-growth setup: unknown option: ${option}`);
+    }
+    if (!keyPattern.test(result.profile))
+        throw new Error('supervised-growth setup: invalid profile');
+    if (!Number.isSafeInteger(result.timeoutMs) || result.timeoutMs < 30_000 || result.timeoutMs > 900_000) {
+        throw new Error('supervised-growth setup: timeout-ms must be an integer from 30000 to 900000');
+    }
+    return result;
+}
+export function assertSupervisedGrowthAutomationGuard(records, acknowledged) {
+    // Enabling the scheduler would start every durable active row.  A legacy
+    // heartbeat is not intrinsically safe: it may carry broad tools or a
+    // different route.  Keep the guard stricter than necessary until an exact
+    // managed-definition hash can prove a pre-existing row is this overlay.
+    const existing = records.filter(record => record.status === 'active');
+    if (existing.length > 0 && !acknowledged) {
+        throw new Error('supervised-growth setup: active automations already exist; rerun with --ack-existing-automations to leave them untouched');
+    }
+}
+export function selectUniqueOwnerBinding(bindings) {
+    if (bindings.length === 0) {
+        throw new Error('supervised-growth setup: no matching owner DM binding; send the bot a new direct message, then retry');
+    }
+    if (bindings.length > 1) {
+        throw new Error('supervised-growth setup: multiple matching owner DM bindings found; revoke stale bindings before enabling growth');
+    }
+    return bindings[0];
+}
+/** Compare the complete durable route snapshot, including its optimistic version. */
+export function sameSupervisedGrowthBinding(left, right) {
+    return left.id === right.id
+        && left.conversation.channel === right.conversation.channel
+        && left.conversation.account === right.conversation.account
+        && left.conversation.tenant === right.conversation.tenant
+        && left.conversation.kind === right.conversation.kind
+        && left.conversation.chat === right.conversation.chat
+        && left.conversation.thread === right.conversation.thread
+        && left.principal.channel === right.principal.channel
+        && left.principal.account === right.principal.account
+        && left.principal.tenant === right.principal.tenant
+        && left.principal.user === right.principal.user
+        && left.workspace === right.workspace
+        && left.agentPreset === right.agentPreset
+        && left.sessionId === right.sessionId
+        && left.generation === right.generation
+        && left.policyRef === right.policyRef
+        && left.status === right.status
+        && left.createdAt === right.createdAt
+        && left.updatedAt === right.updatedAt
+        && left.version === right.version;
+}
+function help() {
+    return [
+        'Usage: dsh-supervised-growth-setup [options]',
+        '',
+        'Activates the bounded supervised-growth overlay only after one exact owner Lark DM binding is present.',
+        '  --profile <name>                  DSH profile (default: web)',
+        '  --timeout-ms <30000..900000>      bounded wait for the owner DM (default: 300000)',
+        '  --ack-existing-automations        acknowledge active jobs may run when the scheduler is enabled',
+    ].join('\n');
+}
+async function atomicWrite(path, value) {
+    const temporary = join(dirname(path), `.cordis.patch.yml.supervised-growth-${process.pid}`);
+    const file = await open(temporary, 'w', 0o600);
+    try {
+        await file.writeFile(value, 'utf8');
+        await file.sync();
+    }
+    finally {
+        await file.close();
+    }
+    await rename(temporary, path);
+    await chmod(path, 0o600);
+}
+function dumpProfile(profile) {
+    const result = spawnSync('dsh', ['--profile', profile, '--dump-config'], {
+        encoding: 'utf8', maxBuffer: 4 * 1024 * 1024, stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    if (result.status !== 0) {
+        const detail = typeof result.stderr === 'string' ? result.stderr.trim().slice(0, 2_000) : '';
+        throw new Error(`supervised-growth setup: DSH rejected the updated profile${detail === '' ? '' : `: ${detail}`}`);
+    }
+    return typeof result.stdout === 'string' ? result.stdout : String(result.stdout ?? '');
+}
+export async function commitSupervisedGrowthPatch(input) {
+    await atomicWrite(input.patchPath, input.updatedPatch);
+    try {
+        return input.validate();
+    }
+    catch (error) {
+        await atomicWrite(input.patchPath, input.originalPatch);
+        throw error;
+    }
+}
+/**
+ * Keep the post-write activation sequence transactional from the operator's
+ * point of view: a failed readiness, binding re-read, restart, or health check
+ * rewrites the original profile and asks the host to restore its old resident
+ * service before reporting failure.
+ */
+export async function activateSupervisedGrowthPatch(input) {
+    const effectiveConfig = await commitSupervisedGrowthPatch(input);
+    try {
+        await input.afterCommit(effectiveConfig);
+        return effectiveConfig;
+    }
+    catch (error) {
+        await atomicWrite(input.patchPath, input.originalPatch);
+        try {
+            await input.restore();
+        }
+        catch (rollbackError) {
+            throw new Error(`supervised-growth setup: activation failed and rollback service restore also failed: ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`, { cause: error });
+        }
+        throw error;
+    }
+}
+function delay(milliseconds) {
+    return new Promise(resolve => setTimeout(resolve, milliseconds));
+}
+async function boundedAwait(input) {
+    let timeout;
+    const deadline = new Promise((_resolve, reject) => {
+        timeout = setTimeout(() => {
+            input.onTimeout?.();
+            reject(new Error(`supervised-growth setup: ${input.label} timed out`));
+        }, input.timeoutMs);
+    });
+    try {
+        return await Promise.race([input.operation, deadline]);
+    }
+    finally {
+        if (timeout !== undefined)
+            clearTimeout(timeout);
+    }
+}
+/**
+ * Explicit installation-only control-plane probe.  It calls the provider's
+ * named readiness API rather than listModels/resolveModel, which intentionally
+ * remain process-free because they do not carry a live loop session identity.
+ */
+export async function verifySupervisedGrowthTraexReadiness(input, dependencies = {}) {
+    if (!Number.isSafeInteger(input.timeoutMs) || input.timeoutMs < 1) {
+        throw new Error('supervised-growth setup: TraeX readiness timeout must be a positive integer');
+    }
+    if (input.traexConfig['enabled'] !== true) {
+        throw new Error('supervised-growth setup: TraeX readiness requires an enabled effective provider configuration');
+    }
+    const timeoutMs = Math.min(input.timeoutMs, 60_000);
+    const load = dependencies.load ?? (async () => {
+        const provider = await import('@dsh-enhanced/traex-acp-provider');
+        if (typeof provider.Config !== 'function' || typeof provider.probeTraexReadiness !== 'function') {
+            throw new Error('supervised-growth setup: installed TraeX provider lacks the required explicit readiness probe');
+        }
+        return provider;
+    });
+    const provider = await boundedAwait({
+        operation: load(), timeoutMs, label: 'loading the TraeX readiness provider',
+    });
+    const config = provider.Config({ ...input.traexConfig });
+    const controller = new AbortController();
+    try {
+        const catalog = await boundedAwait({
+            operation: provider.probeTraexReadiness(config, { timeoutMs, signal: controller.signal }),
+            timeoutMs,
+            label: 'TraeX login and model catalog readiness',
+            onTimeout: () => controller.abort(new Error('supervised-growth readiness timeout')),
+        });
+        if (!Array.isArray(catalog.models) || catalog.models.length === 0) {
+            throw new Error('supervised-growth setup: TraeX readiness returned no usable TraeX models');
+        }
+    }
+    finally {
+        controller.abort();
+    }
+}
+function residentHealthCommand(command, args) {
+    const result = spawnSync(command, args, {
+        encoding: 'utf8', maxBuffer: 128 * 1024, stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    return {
+        status: result.status,
+        stdout: typeof result.stdout === 'string' ? result.stdout : String(result.stdout ?? ''),
+        stderr: typeof result.stderr === 'string' ? result.stderr : String(result.stderr ?? ''),
+    };
+}
+function residentHealthy(service, run) {
+    if (service.kind === 'systemd') {
+        return run('/usr/bin/systemctl', ['--user', 'is-active', '--quiet', service.target]).status === 0;
+    }
+    if (service.kind === 'launchd') {
+        const result = run('/bin/launchctl', ['print', service.target]);
+        return result.status === 0 && /(?:^|\n)\s*state = running\s*(?:\n|$)/u.test(result.stdout);
+    }
+    // schtasks' status text is localized and its successful Query does not prove
+    // the task process is alive.  Do not report an unverifiable Windows task as
+    // a healthy unattended supervisor.
+    throw new Error('supervised-growth setup: Windows does not provide a verifiable resident health gate for this activation');
+}
+/** Bounded post-restart health check; registration alone is not sufficient. */
+export async function verifySupervisedGrowthResidentService(service, dependencies = {}) {
+    const run = dependencies.run ?? residentHealthCommand;
+    const wait = dependencies.wait ?? delay;
+    const attempts = dependencies.attempts ?? 3;
+    const retryDelayMs = dependencies.retryDelayMs ?? 250;
+    if (!Number.isSafeInteger(attempts) || attempts < 1 || attempts > 5
+        || !Number.isSafeInteger(retryDelayMs) || retryDelayMs < 0 || retryDelayMs > 5_000) {
+        throw new Error('supervised-growth setup: invalid resident health check bounds');
+    }
+    let lastFailure;
+    for (let index = 0; index < attempts; index += 1) {
+        try {
+            if (residentHealthy(service, run))
+                return;
+            lastFailure = new Error('resident service did not report a running state');
+        }
+        catch (error) {
+            lastFailure = error;
+        }
+        if (index + 1 < attempts)
+            await wait(retryDelayMs);
+    }
+    throw new Error(`supervised-growth setup: resident service is not healthy after restart${lastFailure instanceof Error ? `: ${lastFailure.message}` : ''}`);
+}
+export async function restartAndVerifySupervisedGrowthResident(input) {
+    const service = await (input.install ?? installDshResidentService)({ dshHome: input.dshHome, profile: input.profile });
+    await (input.verify ?? verifySupervisedGrowthResidentService)(service);
+    return service;
+}
+async function awaitOwnerBinding(input) {
+    const { findActiveOwnerDmBindingsLocally } = await import('@dsh-enhanced/assistant-delivery');
+    const deadline = Date.now() + input.timeoutMs;
+    let prompted = false;
+    for (;;) {
+        const bindings = findActiveOwnerDmBindingsLocally({ databasePath: input.databasePath, ...input.query });
+        if (bindings.length > 1)
+            return selectUniqueOwnerBinding(bindings);
+        if (bindings.length === 1)
+            return selectUniqueOwnerBinding(bindings);
+        if (!prompted) {
+            prompted = true;
+            process.stdout.write('未找到与当前 profile 精确匹配的 owner 私聊绑定。请 owner 再给机器人发送一条普通私聊；等待期间不会修改配置。\n');
+        }
+        if (Date.now() >= deadline) {
+            throw new Error('supervised-growth setup: timed out waiting for an exact owner DM binding; profile was not changed');
+        }
+        await delay(Math.min(1_000, Math.max(1, deadline - Date.now())));
+    }
+}
+async function assertSelectedOwnerBindingCurrent(input) {
+    const { findActiveOwnerDmBindingsLocally } = await import('@dsh-enhanced/assistant-delivery');
+    const current = selectUniqueOwnerBinding(findActiveOwnerDmBindingsLocally({
+        databasePath: input.databasePath,
+        ...input.query,
+    }));
+    if (!sameSupervisedGrowthBinding(current, input.selected)) {
+        throw new Error('supervised-growth setup: selected owner binding changed before activation; profile was not changed');
+    }
+}
+export async function runSupervisedGrowthSetup(argv = process.argv.slice(2)) {
+    const args = parseSupervisedGrowthSetupArgs(argv);
+    if (args.help) {
+        process.stdout.write(`${help()}\n`);
+        return;
+    }
+    if (residentServiceKind(process.platform) === 'windows-task-best-effort') {
+        throw new Error('supervised-growth setup: Windows has no verifiable resident health gate; profile was not changed');
+    }
+    const dshHome = process.env.DSH_HOME?.trim() || join(homedir(), '.dsh');
+    if (!isAbsolute(dshHome))
+        throw new Error('supervised-growth setup: DSH_HOME must be absolute');
+    const patchPath = join(dshHome, 'profiles', args.profile, 'cordis.patch.yml');
+    const originalPatch = await readFile(patchPath, 'utf8');
+    const effectiveBefore = dumpProfile(args.profile);
+    const query = supervisedGrowthBindingQuery(effectiveBefore, dshHome);
+    const databases = supervisedGrowthDatabasePaths(effectiveBefore, dshHome);
+    const binding = await awaitOwnerBinding({
+        databasePath: databases.deliveryDatabasePath, query, timeoutMs: args.timeoutMs,
+    });
+    const { listActiveAutomationsLocally } = await import('@dsh-enhanced/assistant-automations');
+    assertSupervisedGrowthAutomationGuard(listActiveAutomationsLocally(databases.automationsDatabasePath), args.ackExistingAutomations);
+    const updatedPatch = configureSupervisedGrowthProfilePatch({
+        profilePatch: originalPatch,
+        effectiveConfig: effectiveBefore,
+        dshHome,
+        binding,
+    });
+    await assertSelectedOwnerBindingCurrent({
+        databasePath: databases.deliveryDatabasePath,
+        query,
+        selected: binding,
+    });
+    let service;
+    await activateSupervisedGrowthPatch({
+        patchPath,
+        originalPatch,
+        updatedPatch,
+        validate: () => dumpProfile(args.profile),
+        afterCommit: async (effectiveConfig) => {
+            const verified = assertEffectiveSupervisedGrowthConfig({ effectiveConfig, dshHome, binding });
+            const effectiveDatabases = supervisedGrowthDatabasePaths(effectiveConfig, dshHome);
+            if (effectiveDatabases.deliveryDatabasePath !== databases.deliveryDatabasePath
+                || effectiveDatabases.automationsDatabasePath !== databases.automationsDatabasePath) {
+                throw new Error('supervised-growth setup: a higher-priority profile layer changed a guarded local database path');
+            }
+            // The binding is re-read after the atomic write and again immediately
+            // before restart. A rotation/revocation/version change must never become
+            // a background delivery grant merely because its old snapshot was valid.
+            await assertSelectedOwnerBindingCurrent({
+                databasePath: databases.deliveryDatabasePath,
+                query,
+                selected: binding,
+            });
+            await verifySupervisedGrowthTraexReadiness({
+                traexConfig: verified.traexConfig,
+                timeoutMs: args.timeoutMs,
+            });
+            await assertSelectedOwnerBindingCurrent({
+                databasePath: databases.deliveryDatabasePath,
+                query,
+                selected: binding,
+            });
+            service = await restartAndVerifySupervisedGrowthResident({ dshHome, profile: args.profile });
+        },
+        restore: async () => {
+            dumpProfile(args.profile);
+            await restartAndVerifySupervisedGrowthResident({ dshHome, profile: args.profile });
+        },
+    });
+    if (service === undefined)
+        throw new Error('supervised-growth setup: resident restart did not return a service');
+    process.stdout.write(`supervised-growth 已启用：owner binding ${binding.id}，每日运行次数上限 7；每轮最多 512 输出 token。\n`
+        + `DSH Host 已由 ${service.kind} 重启并通过健康检查。状态：${service.statusCommand}\n日志：${service.logCommand}\n`);
+}
+if (process.argv[1] !== undefined && isMainEntry(import.meta.url, process.argv[1])) {
+    void runSupervisedGrowthSetup().catch(error => {
+        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=supervised-growth-setup.js.map

package/lib/supervised-growth-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervised-growth-setup.js","sourceRoot":"","sources":["../src/supervised-growth-setup.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAiC,MAAM,eAAe,CAAA;AAC7G,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,6BAA6B,EAC7B,4BAA4B,GAE7B,MAAM,gCAAgC,CAAA;AASvC,MAAM,UAAU,GAAG,oCAAoC,CAAA;AAEvD,SAAS,aAAa,CAAC,IAAuB,EAAE,KAAa,EAAE,MAAc;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,mBAAmB,CAAC,CAAA;IACzH,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAAuB;IACpE,MAAM,MAAM,GAA8B;QACxC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;KAC/E,CAAA;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAE,CAAA;QAC3B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;aACzD,IAAI,MAAM,KAAK,WAAW;YAAE,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;aACjF,IAAI,MAAM,KAAK,cAAc;YAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;aAC9F,IAAI,MAAM,KAAK,4BAA4B;YAAE,MAAM,CAAC,sBAAsB,GAAG,IAAI,CAAA;;YACjF,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,EAAE,CAAC,CAAA;IAC5E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IACjG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,GAAG,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,OAAO,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAID,MAAM,UAAU,qCAAqC,CACnD,OAAyC,EACzC,YAAqB;IAErB,yEAAyE;IACzE,qEAAqE;IACrE,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAA;IACrE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,0HAA0H,CAAC,CAAA;IAC7I,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAoC,QAAsB;IAChG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAA;IACzH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,kHAAkH,CAAC,CAAA;IACrI,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAA;AACrB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,2BAA2B,CACzC,IAA6B,EAC7B,KAA8B;IAE9B,OAAO,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;WACtB,IAAI,CAAC,YAAY,CAAC,OAAO,KAAK,KAAK,CAAC,YAAY,CAAC,OAAO;WACxD,IAAI,CAAC,YAAY,CAAC,OAAO,KAAK,KAAK,CAAC,YAAY,CAAC,OAAO;WACxD,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,YAAY,CAAC,MAAM;WACtD,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,CAAC,IAAI;WAClD,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,CAAC,IAAI;WAClD,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,YAAY,CAAC,MAAM;WACtD,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC,OAAO;WAClD,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC,OAAO;WAClD,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM;WAChD,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC,IAAI;WAC5C,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAClC,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;WACtC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAClC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;WACpC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAClC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;WAC5B,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAClC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAClC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAA;AACrC,CAAC;AAED,SAAS,IAAI;IACX,OAAO;QACL,8CAA8C;QAC9C,EAAE;QACF,wGAAwG;QACxG,gEAAgE;QAChE,qFAAqF;QACrF,mGAAmG;KACpG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,uCAAuC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC3F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACnC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IACD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE;QACvE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAChF,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5F,MAAM,IAAI,KAAK,CAAC,4DAA4D,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,EAAE,CAAC,CAAA;IACnH,CAAC;IACD,OAAO,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAI,KAKpD;IACC,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;IACtD,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAA;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAA;QACvD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAI,KAOtD;IACC,MAAM,eAAe,GAAG,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAA;IAChE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC,CAAA;QACxC,OAAO,eAAe,CAAA;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAA;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAA;QACvB,CAAC;QAAC,OAAO,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,wFAAwF,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EACxK,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;QACH,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,YAAoB;IACjC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;AAClE,CAAC;AA2BD,KAAK,UAAU,YAAY,CAAI,KAK9B;IACC,IAAI,OAAkD,CAAA;IACtD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACvD,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,KAAK,CAAC,SAAS,EAAE,EAAE,CAAA;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,KAAK,YAAY,CAAC,CAAC,CAAA;QACxE,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;IACxD,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,KAAK,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,KAG1D,EAAE,eAA2D,EAAE;IAC9D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAA;IAClH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAA6D,CAAA;QAC7H,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAA;QAClH,CAAC;QACD,OAAO,QAAgD,CAAA;IACzD,CAAC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;QAClC,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,sCAAsC;KAC5E,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;IACxD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;YACjC,SAAS,EAAE,QAAQ,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;YACzF,SAAS;YACT,KAAK,EAAE,yCAAyC;YAChD,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;SACpF,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;QAC7F,CAAC;IACH,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,IAAuB;IACrE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACtC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAC3E,CAAC,CAAA;IACF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACvF,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;KACxF,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAiC,EAAE,GAAmE;IAC7H,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC,oBAAoB,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;IACnG,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QAC/D,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC5F,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,mCAAmC;IACnC,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAA;AAC5H,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAAiC,EACjC,eAA2D,EAAE;IAE7D,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,qBAAqB,CAAA;IACrD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,KAAK,CAAA;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAA;IAC3C,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,GAAG,CAAA;IACrD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC;WAC9D,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,KAAK,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,WAAoB,CAAA;IACxB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC;gBAAE,OAAM;YACzC,WAAW,GAAG,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,GAAG,KAAK,CAAA;QACrB,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,GAAG,QAAQ;YAAE,MAAM,IAAI,CAAC,YAAY,CAAC,CAAA;IACpD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,yEAAyE,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1I,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,KAK9D;IACC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,yBAAyB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;IACtH,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,qCAAqC,CAAC,CAAC,OAAO,CAAC,CAAA;IACtE,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAIhC;IACC,MAAM,EAAE,gCAAgC,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAA;IAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAA;IAC7C,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,gCAAgC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;QACvG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAA;QAClE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAA;QACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAA;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAA;QAC7F,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAA;QACtH,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;IAClE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,KAIhD;IACC,MAAM,EAAE,gCAAgC,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,wBAAwB,CAAC,gCAAgC,CAAC;QACxE,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,GAAG,KAAK,CAAC,KAAK;KACf,CAAC,CAAC,CAAA;IACH,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,oGAAoG,CAAC,CAAA;IACvH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAA;IACjD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAA;QACnC,OAAM;IACR,CAAC;IACD,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,0BAA0B,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAA;IACrH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;IACvE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;IAC/F,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;IAC7E,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACvD,MAAM,eAAe,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,4BAA4B,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;IACpE,MAAM,SAAS,GAAG,6BAA6B,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;QACtC,YAAY,EAAE,SAAS,CAAC,oBAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;KAC/E,CAAC,CAAA;IACF,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAA;IAC5F,qCAAqC,CACnC,4BAA4B,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAC/D,IAAI,CAAC,sBAAsB,CAC5B,CAAA;IACD,MAAM,YAAY,GAAG,qCAAqC,CAAC;QACzD,YAAY,EAAE,aAAa;QAC3B,eAAe,EAAE,eAAe;QAChC,OAAO;QACP,OAAO;KACR,CAAC,CAAA;IACF,MAAM,iCAAiC,CAAC;QACtC,YAAY,EAAE,SAAS,CAAC,oBAAoB;QAC5C,KAAK;QACL,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAA;IACF,IAAI,OAA6C,CAAA;IACjD,MAAM,6BAA6B,CAAC;QAClC,SAAS;QACT,aAAa;QACb,YAAY;QACZ,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QACzC,WAAW,EAAE,KAAK,EAAC,eAAe,EAAC,EAAE;YACnC,MAAM,QAAQ,GAAG,qCAAqC,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;YAC7F,MAAM,kBAAkB,GAAG,6BAA6B,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;YAClF,IAAI,kBAAkB,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB;mBACzE,kBAAkB,CAAC,uBAAuB,KAAK,SAAS,CAAC,uBAAuB,EAAE,CAAC;gBACtF,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAA;YACnH,CAAC;YACD,sEAAsE;YACtE,yEAAyE;YACzE,yEAAyE;YACzE,MAAM,iCAAiC,CAAC;gBACtC,YAAY,EAAE,SAAS,CAAC,oBAAoB;gBAC5C,KAAK;gBACL,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAA;YACF,MAAM,oCAAoC,CAAC;gBACzC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAA;YACF,MAAM,iCAAiC,CAAC;gBACtC,YAAY,EAAE,SAAS,CAAC,oBAAoB;gBAC5C,KAAK;gBACL,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAA;YACF,OAAO,GAAG,MAAM,wCAAwC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QAC9F,CAAC;QACD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACzB,MAAM,wCAAwC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QACpF,CAAC;KACF,CAAC,CAAA;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IAChH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,OAAO,CAAC,EAAE,kCAAkC;UACtG,eAAe,OAAO,CAAC,IAAI,iBAAiB,OAAO,CAAC,aAAa,QAAQ,OAAO,CAAC,UAAU,IAAI,CAAC,CAAA;AACpG,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,KAAK,wBAAwB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/systemd.d.ts

@@ -0,0 +1,39 @@
+export interface SystemdServicePathsInput {
+    home?: string;
+    dshHome: string;
+    profile: string;
+}
+export interface SystemdServicePaths {
+    unitName: string;
+    unitPath: string;
+}
+export interface SystemdUnitInput extends SystemdServicePaths {
+    dshHome: string;
+    profile: string;
+    profileDirectory: string;
+    nodePath: string;
+    dshPath: string;
+    path: string;
+}
+export interface InstalledSystemdService extends SystemdServicePaths {
+    target: string;
+    logCommand: string;
+}
+export interface SystemdInstallOptions {
+    home?: string;
+    platform?: NodeJS.Platform;
+    nodePath?: string;
+    dshPath?: string;
+    path?: string;
+    run?: (command: string, args: readonly string[]) => {
+        status: number | null;
+        stderr: string;
+    };
+}
+export declare function systemdServicePaths(input: SystemdServicePathsInput): SystemdServicePaths;
+export declare function createSystemdUserUnit(input: SystemdUnitInput): string;
+export declare function installDshSystemdService(input: {
+    dshHome: string;
+    profile: string;
+}, options?: SystemdInstallOptions): Promise<InstalledSystemdService>;
+//# sourceMappingURL=systemd.d.ts.map

package/lib/systemd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemd.d.ts","sourceRoot":"","sources":["../src/systemd.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,wBAAwB;IACvC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC9F;AAyCD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,mBAAmB,CAMxF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CA2BrE;AA0BD,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAC3C,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,uBAAuB,CAAC,CAkClC"}

package/lib/systemd.js

@@ -0,0 +1,142 @@
+import { accessSync, constants } from 'node:fs';
+import { access, chmod, mkdir, open, rename } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { delimiter, dirname, isAbsolute, join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+const profilePattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+function requireAbsolute(value, label) {
+    if (!isAbsolute(value))
+        throw new Error(`lark-channel setup: ${label} must be absolute`);
+    return value;
+}
+function unitQuote(value) {
+    if (value.includes('\0') || /[\r\n]/u.test(value))
+        throw new Error('lark-channel setup: invalid systemd value');
+    return `"${value.replace(/\\/gu, '\\\\').replace(/"/gu, '\\"')}"`;
+}
+function unitLiteralQuote(value) {
+    return unitQuote(value.replace(/%/gu, '%%'));
+}
+function unitWorkingDirectory(value) {
+    if (value.includes('\0') || /[\r\n]/u.test(value))
+        throw new Error('lark-channel setup: invalid systemd value');
+    // systemd 252 parses this directive as one raw path: quotes and C escapes would become literal path characters.
+    const escaped = value.replace(/%/gu, '%%');
+    return /[\t \\]$/u.test(escaped) ? `${escaped}/` : escaped;
+}
+function findExecutable(command, pathValue = process.env.PATH) {
+    for (const directory of (pathValue ?? '').split(delimiter)) {
+        if (directory === '' || !isAbsolute(directory))
+            continue;
+        const candidate = join(directory, command);
+        try {
+            accessSync(candidate, constants.X_OK);
+            return candidate;
+        }
+        catch { }
+    }
+    throw new Error(`lark-channel setup: cannot find ${command} on PATH`);
+}
+function servicePath(nodePath, dshPath, currentPath) {
+    const values = [dirname(nodePath), dirname(dshPath), ...(currentPath ?? '').split(delimiter), '/usr/bin', '/bin']
+        .filter((value, index, all) => value !== '' && isAbsolute(value) && all.indexOf(value) === index);
+    return values.join(delimiter);
+}
+export function systemdServicePaths(input) {
+    if (!profilePattern.test(input.profile))
+        throw new Error('lark-channel setup: invalid profile');
+    const home = requireAbsolute(input.home ?? homedir(), 'home');
+    requireAbsolute(input.dshHome, 'DSH_HOME');
+    const unitName = `dsh-profile-${input.profile}.service`;
+    return { unitName, unitPath: join(home, '.config', 'systemd', 'user', unitName) };
+}
+export function createSystemdUserUnit(input) {
+    for (const [label, value] of Object.entries({
+        dshHome: input.dshHome,
+        profileDirectory: input.profileDirectory,
+        nodePath: input.nodePath,
+        dshPath: input.dshPath,
+    }))
+        requireAbsolute(value, label);
+    if (!profilePattern.test(input.profile))
+        throw new Error('lark-channel setup: invalid profile');
+    return `[Unit]
+Description=DeepSeek Harness profile ${input.profile}
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=${unitWorkingDirectory(input.profileDirectory)}
+Environment=${unitLiteralQuote(`DSH_HOME=${input.dshHome}`)}
+Environment=${unitLiteralQuote(`PATH=${input.path}`)}
+Environment=${unitQuote('DBUS_SESSION_BUS_ADDRESS=unix:path=%t/bus')}
+Environment=${unitQuote('XDG_RUNTIME_DIR=%t')}
+ExecStart=${unitLiteralQuote(input.nodePath)} --disable-warning=ExperimentalWarning ${unitLiteralQuote(input.dshPath)} --profile ${input.profile} --no-open
+Restart=on-failure
+RestartSec=2
+
+[Install]
+WantedBy=default.target
+`;
+}
+async function atomicWrite(path, value) {
+    const temporary = `${path}.tmp-${process.pid}`;
+    const file = await open(temporary, 'w', 0o600);
+    try {
+        await file.writeFile(value, 'utf8');
+        await file.sync();
+    }
+    finally {
+        await file.close();
+    }
+    await rename(temporary, path);
+    await chmod(path, 0o600);
+}
+function defaultRun(command, args) {
+    const result = spawnSync(command, [...args], {
+        encoding: 'utf8', env: { PATH: '/usr/bin:/bin',
+            ...(process.env.DBUS_SESSION_BUS_ADDRESS === undefined
+                ? {} : { DBUS_SESSION_BUS_ADDRESS: process.env.DBUS_SESSION_BUS_ADDRESS }),
+            ...(process.env.XDG_RUNTIME_DIR === undefined ? {} : { XDG_RUNTIME_DIR: process.env.XDG_RUNTIME_DIR }) },
+        stdio: ['ignore', 'ignore', 'pipe'],
+    });
+    return { status: result.status, stderr: typeof result.stderr === 'string' ? result.stderr : '' };
+}
+export async function installDshSystemdService(input, options = {}) {
+    if ((options.platform ?? process.platform) !== 'linux') {
+        throw new Error('lark-channel setup: systemd installer requires Linux');
+    }
+    const paths = systemdServicePaths({
+        ...(options.home === undefined ? {} : { home: options.home }),
+        dshHome: input.dshHome,
+        profile: input.profile,
+    });
+    const profileDirectory = join(input.dshHome, 'profiles', input.profile);
+    await access(profileDirectory, constants.R_OK);
+    const nodePath = options.nodePath ?? findExecutable('node', options.path);
+    const dshPath = options.dshPath ?? findExecutable('dsh', options.path);
+    const path = servicePath(nodePath, dshPath, options.path ?? process.env.PATH);
+    const run = options.run ?? defaultRun;
+    await mkdir(dirname(paths.unitPath), { recursive: true, mode: 0o700 });
+    await atomicWrite(paths.unitPath, createSystemdUserUnit({
+        ...paths, dshHome: input.dshHome, profile: input.profile, profileDirectory, nodePath, dshPath, path,
+    }));
+    const commands = [
+        ['--user', 'daemon-reload'],
+        ['--user', 'enable', paths.unitName],
+        ['--user', 'restart', paths.unitName],
+        ['--user', 'is-active', '--quiet', paths.unitName],
+    ];
+    for (const args of commands) {
+        const result = run('/usr/bin/systemctl', args);
+        if (result.status !== 0)
+            throw new Error('lark-channel setup: systemd user service operation failed');
+    }
+    return {
+        ...paths,
+        target: paths.unitName,
+        logCommand: `journalctl --user -u ${paths.unitName} -f`,
+    };
+}
+//# sourceMappingURL=systemd.js.map

package/lib/systemd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemd.js","sourceRoot":"","sources":["../src/systemd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,MAAM,cAAc,GAAG,oCAAoC,CAAA;AAoC3D,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,mBAAmB,CAAC,CAAA;IACxF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC/G,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAA;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC/G,gHAAgH;IAChH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC1C,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI;IACnE,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,IAAI,SAAS,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAQ;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1C,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;YACrC,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,UAAU,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe,EAAE,WAAoB;IAC1E,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC;SAC9G,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAA;IACnG,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA+B;IACjE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC/F,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;IAC7D,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,eAAe,KAAK,CAAC,OAAO,UAAU,CAAA;IACvD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAA;AACnF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAuB;IAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;QAAE,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACjC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC/F,OAAO;uCAC8B,KAAK,CAAC,OAAO;;;;;;mBAMjC,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,CAAC;cACjD,gBAAgB,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC;cAC7C,gBAAgB,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;cACtC,SAAS,CAAC,2CAA2C,CAAC;cACtD,SAAS,CAAC,oBAAoB,CAAC;YACjC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,0CAA0C,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,OAAO;;;;;;CAM/I,CAAA;AACD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa;IACpD,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAA;IAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACnC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IACD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAuB;IAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QAC3C,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe;YAC5C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,SAAS;gBACpD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;YAC5E,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,EAAE;QAC1G,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;KACpC,CAAC,CAAA;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AAClG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAA2C,EAC3C,UAAiC,EAAE;IAEnC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,CAAC;QAChC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACvE,MAAM,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,CAAA;IACrC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACtE,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,CAAC;QACtD,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI;KACpG,CAAC,CAAC,CAAA;IACH,MAAM,QAAQ,GAA6B;QACzC,CAAC,QAAQ,EAAE,eAAe,CAAC;QAC3B,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC;QACpC,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC;QACrC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC;KACnD,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAA;QAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;IACvG,CAAC;IACD,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,KAAK,CAAC,QAAQ;QACtB,UAAU,EAAE,wBAAwB,KAAK,CAAC,QAAQ,KAAK;KACxD,CAAA;AACH,CAAC"}

package/lib/tool-approval.d.ts

@@ -0,0 +1,22 @@
+export interface LarkToolApprovalActionPayload {
+    version: 1;
+    channel: string;
+    account: string;
+    tenant: string;
+    operationId: string;
+    bindingId: string;
+    chatId: string;
+    ownerUser: string;
+    actionHash: string;
+    toolName: string;
+    callId: string;
+    expiresAt: number;
+    decision: 'allowed-once' | 'rejected';
+}
+export declare class LarkToolApprovalError extends Error {
+    readonly code: 'expired' | 'invalid';
+    constructor(code: 'expired' | 'invalid', message: string);
+}
+export declare function signLarkToolApprovalAction(secret: string, input: LarkToolApprovalActionPayload): string;
+export declare function verifyLarkToolApprovalAction(secret: string, token: string, now: number): LarkToolApprovalActionPayload;
+//# sourceMappingURL=tool-approval.d.ts.map

package/lib/tool-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-approval.d.ts","sourceRoot":"","sources":["../src/tool-approval.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,CAAC,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,cAAc,GAAG,UAAU,CAAA;CACtC;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS;gBAA3B,IAAI,EAAE,SAAS,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM;CAIlE;AAiED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAQvG;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,6BAA6B,CAyB/B"}