@excitedjs/feishu-channel 6.3.0-beta.264 → 6.3.0-beta.271

package/README.md

@@ -1,13 +1,14 @@
 # @excitedjs/feishu-channel
 
-The built-in Feishu **`ChannelProvider`** for [Dreamux](../../dreamux) — the
-package behind the `builtin:feishu` provider reference. It implements the
+The built-in Feishu **plugin** for [Dreamux](../../dreamux): it contributes the
+Feishu `ChannelProvider` behind the `builtin:feishu` provider reference and
+publishes an extension api for other plugins. The provider implements the
 neutral `@excitedjs/dreamux-types` channel contract on top of
 [`@excitedjs/feishu-transport`](../feishu-transport), which stays the sole owner
 of the Lark SDK.
 
-`@excitedjs/dreamux` depends on this package by default and resolves
-`builtin:feishu` to it, so the Feishu channel ships out of the box.
+`@excitedjs/dreamux` depends on this package and always loads its plugin, so
+the Feishu channel ships out of the box.
 
 ## What it owns
 
@@ -17,7 +18,7 @@ of the Lark SDK.
   store, read and written under a host-supplied state directory.
 - **Inbound normalization**: turning Feishu events into agent-facing channel
   results, including the Channel-owned inner body and inline `<attachment>`
-  blocks. Agent runtimes own the outer `<channel source="feishu" …>` envelope.
+  blocks. Core owns the outer `<channel source="feishu" …>` envelope.
 - **Topic routing**: verifying `chat_mode=topic`, projecting `thread_id` as a
   neutral collaboration target, and recording exact per-message targets for
   scoped TeamLeader replies.
@@ -32,34 +33,46 @@ of the Lark SDK.
 ## What it does not own
 
 - It never imports `@excitedjs/dreamux` core, and never imports the Lark SDK
-  directly — platform calls go through `@excitedjs/feishu-transport`. Both
-  boundaries are enforced by `tests/import-boundary.test.ts`.
-- Dispatcher lifecycle, agent/Codex process supervision, routing, binding state,
-  authorization, Team lifecycle, and the Feishu MCP **server descriptor** /
-  admin-method routing stay in `@excitedjs/dreamux`. The host supplies the bot
+  directly — platform calls go through `@excitedjs/feishu-transport`. The Core
+  import boundary is enforced by the shared lint configuration.
+- Dispatcher lifecycle, agent process supervision, Team lifecycle, the neutral
+  command port, and MCP lease/shim routing stay in `@excitedjs/dreamux`.
+  Feishu routing, binding state, access policy, and tool definitions belong to
+  this package. The host supplies the bot
   secret / app id and the state / cache directories; the package reconstructs no
   Dreamux host layout or path contract.
 
 ## Public API
 
-- `createFeishuChannelProvider()` plus the default-exported provider factory —
-  builds the neutral `ChannelProvider` the generic channel loader registers for
-  `builtin:feishu`. Its `createSession` returns a contract-valid `ChannelSession`
-  (`reply` / `react` / `resolveTarget` / `tools` / `handleTool` /
-  `messageBelongsToTarget`).
-- The session class plus the gate, chat-bots store, message formatter, MCP tool
-  parser, and production bot adapter helpers used by the core adapter that
-  drives the host-shaped session path.
-
-Inbound delivery receipts are status-only (`submitted`, `duplicate`, `stopped`,
-`failed`, or `ambiguous`). `failed` proves pre-admission rejection; `ambiguous`
-means delivery may have crossed the runtime boundary and is terminal for the
-inbound event, so Feishu does not replay it. The Channel contract does not
-expose a Dreamux Turn identifier. The read-only core event stream projects
+- The default export is the neutral provider factory for
+  `npm:@excitedjs/feishu-channel`. `createFeishuPlugin()` is the named plugin
+  factory. The plugin
+  contributes the `feishu` channel provider (`builtin:feishu`) and publishes
+  `FeishuApi`, through which another plugin registers Feishu extensions: extra
+  MCP tools, card actions, and a per-channel-instance lifecycle with an
+  instance api (`FeishuExtension`, `FeishuInstanceApi`).
+- `createFeishuChannelProvider()` — the same provider with no extensions. Its
+  `createSession` returns a `ChannelInstance`: a `session` with
+  `initialize` / `start` / `close`, plus the optional `mcp` capability beside it.
+- The public extension contracts and inbound message formatter support plugin
+  authors and cross-package callers. Session, gate, stores, tool parsers, and
+  bot adapter implementations remain package-internal.
+
+Successful submission receipts can carry a Dreamux Turn identifier. The
+channel distinguishes admitted, duplicate, stopped, failed, ambiguous, and
+proven Team-rejection outcomes. A proven pre-admission Team rejection permits
+the bound-route fallback; ambiguous delivery is never replayed. The read-only
+core event stream projects
 sanitized submitted, activity, and settled lifecycle facts for dispatcher and
 TeamLeader conversations; Feishu anchors each presentation to the turn's
 inbound message.
 
+Binding a topic retires the displaced Team's presentation even when that Team
+served the topic through its parent group. Removing an exact topic binding
+retires that route's presentation and permits fresh submissions through a
+remaining parent binding, including one to the same Team. A standing anchor
+keeps the serving-route provenance captured when it was created.
+
 Test doubles are deliberately test-local and are not part of the published
 package API.
 
@@ -72,7 +85,7 @@ non-empty sender id. Other chat types fail with `unsupported_chat_type`, and
 other sender shapes fail with `sender_unknown`, before bot observation,
 `/introduce`, pairing, or delivery.
 
-The public `dreamuxFeishuGate` input is unchanged: it still has `chat_type` and
+The `dreamuxFeishuGate` input is unchanged: it still has `chat_type` and
 `is_bot_sender` and has no `sender_kind`. Callers must perform the exact
 classification above first. Passing `is_bot_sender: false` asserts a known
 human; negating `isBotSenderType(...)` alone is not sufficient because unknown
@@ -98,7 +111,7 @@ takes effect when the new server starts.
 may deliver ordinary text in a trusted chat but cannot mutate peer-bot trust;
 the command is diagnosed as `sender_not_followed` and writes no trust.
 
-## Feishu topic-group permission
+## Feishu chat information permission
 
 Topic collaboration routing reads the enclosing chat through Feishu's
 `im.v1.chat.get` API. The bot must have a group information read permission
@@ -111,6 +124,21 @@ display attributes, so runtimes render it in the model-visible `<channel>`
 envelope. Displaying that identifier does not classify an ordinary group
 thread as a collaboration topic.
 
+The same read can decide who may answer a card, as a last resort. A click on
+an ask-user or extension card names its chat but not whether that chat is
+direct or a group, so the channel applies the inbound access policy for both
+kinds and establishes the kind only when the two answers differ. It takes the
+kind from the chat itself, never from the access lists it is judging: the kind
+reported by the last admitted inbound message this session routed in that chat
+(a group message dropped for lacking a mention, an untrusted bot's message, or
+a consumed `/introduce` teaches nothing). Only then does it ask the platform. A person the policy
+admits in a direct chat and in a group alike, or in neither, never triggers the
+read. When the answer does depend on the kind and it cannot be established, the
+click is refused with an error toast rather than degrading to an ordinary group
+as topic detection does, which on an install whose bot lacks the group
+information read permission affects only a click in a chat this session has not
+yet routed an admitted message from.
+
 A confirmed topic target declares its enclosing group as a less-specific
 binding fallback. An exact topic binding wins first; a bound collaboration
 space then provisions or reuses the exact topic Team; only a topic group that

package/dist/access/gate.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Feishu access gate v3 — the pure decision function.
+ *
+ * `dreamuxFeishuGate` decides `deliver | drop | pair` against a snapshot of
+ * `DispatcherAccessStateV3` (`./state.js`) and returns the next state plus
+ * logs. It touches no disk and sends nothing; the session owns IO, the access
+ * store's serialized queue, and send-before-save for pairing prompts (see
+ * `./index.js`'s `FeishuAccess`).
+ */
+import { type DispatcherAccessStateV3, type PendingPairingKind } from './state.js';
+export declare function generatePairingToken(): string;
+export declare function generateUniquePairingToken(existing: Record<string, unknown>): string;
+export interface GateInbound {
+    chat_type: 'p2p' | 'group';
+    sender_id: string;
+    chat_id: string;
+    /**
+     * The session must classify the sender exactly before calling the gate:
+     * `false` means sender_type=user with a non-empty sender id, not merely
+     * "isBotSenderType returned false" for an unknown sender type.
+     */
+    is_bot_sender: boolean;
+    trusted_bot: boolean;
+    bot_mentioned: boolean;
+}
+export type DropReason = 'dm_disabled' | 'dm_not_on_allowlist' | 'dm_pairing_slot_cap' | 'group_policy_block' | 'group_bot_not_mentioned' | 'group_not_on_allowlist_and_not_mentioned' | 'group_follow_user_stranger_not_mentioned' | 'group_pairing_slot_cap' | 'group_not_on_allowlist' | 'group_user_not_on_allowlist' | 'group_pairing_stranger_not_mentioned' | 'bot_untrusted' | 'unsupported_chat_type' | 'internal';
+export type GateAction = {
+    action: 'deliver';
+} | {
+    action: 'drop';
+    reason: DropReason;
+    context?: Record<string, unknown>;
+} | {
+    action: 'pair';
+    kind: PendingPairingKind;
+    token: string;
+    is_resend: boolean;
+    ttl_left_ms: number;
+    prompt_message_id?: string;
+};
+export interface GateResult {
+    action: GateAction;
+    nextState: DispatcherAccessStateV3;
+    logs: Array<{
+        level: 'debug' | 'info' | 'warn' | 'error';
+        msg: string;
+        ctx?: Record<string, unknown>;
+    }>;
+}
+export declare function pruneExpiredPending(state: DispatcherAccessStateV3, now: number): DispatcherAccessStateV3;
+export declare function dreamuxFeishuGate(state: DispatcherAccessStateV3, input: GateInbound, now?: number): GateResult;
+//# sourceMappingURL=gate.d.ts.map

package/dist/access/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/access/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAIL,KAAK,uBAAuB,EAE5B,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAMpB,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,MAAM,CAOR;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,UAAU,GAClB,aAAa,GACb,qBAAqB,GACrB,qBAAqB,GACrB,oBAAoB,GACpB,yBAAyB,GAKzB,0CAA0C,GAC1C,0CAA0C,GAC1C,wBAAwB,GAExB,wBAAwB,GACxB,6BAA6B,GAC7B,sCAAsC,GACtC,eAAe,GACf,uBAAuB,GACvB,UAAU,CAAC;AAEf,MAAM,MAAM,UAAU,GAClB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IACE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,GACD;IACE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEN,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,uBAAuB,CAAC;IACnC,IAAI,EAAE,KAAK,CAAC;QACV,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;QAC3C,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,CAAC,CAAC;CACJ;AAQD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,uBAAuB,EAC9B,GAAG,EAAE,MAAM,GACV,uBAAuB,CAWzB;AAmJD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,uBAAuB,EAC9B,KAAK,EAAE,WAAW,EAClB,GAAG,GAAE,MAAmB,GACvB,UAAU,CA4IZ"}

package/dist/{feishu-gate.js → access/gate.js}

@@ -1,55 +1,16 @@
 /**
- * Feishu access gate v3 — pairing-token model.
+ * Feishu access gate v3 — the pure decision function.
  *
- * Pure gate (`dreamuxFeishuGate`) decides `deliver | drop | pair` against a
- * snapshot of `DispatcherAccessStateV3` and returns the next state plus logs.
- * The session owns IO, mutex, and send-before-save for pairing prompts.
- *
- * v3 replaces the v2 "everything is allowlist" model with per-sender
- * pairing slots. An operator (human admin out-of-band) approves a 6-hex token
- * to add a sender to `allow_users`. `group.allow_chats` is the operator-owned
- * list of trusted human group memberships, not something pairing approval
- * mutates.
+ * `dreamuxFeishuGate` decides `deliver | drop | pair` against a snapshot of
+ * `DispatcherAccessStateV3` (`./state.js`) and returns the next state plus
+ * logs. It touches no disk and sends nothing; the session owns IO, the access
+ * store's serialized queue, and send-before-save for pairing prompts (see
+ * `./index.js`'s `FeishuAccess`).
  */
 import { randomBytes } from 'node:crypto';
+import { MAX_PENDING, PAIRING_TOKEN_BYTES, PAIRING_TTL_MS, } from './state.js';
 // ─────────────────────────────────────────────────────────────────────────
-// Constants
-// ─────────────────────────────────────────────────────────────────────────
-export const ACCESS_STATE_VERSION = 3;
-// Ten active dm-kind onboarding slots keeps one dispatcher useful in a busy
-// chat while bounding spam from many unknown senders.
-export const MAX_PENDING_PER_KIND = 10;
-export const PAIRING_TTL_MS = 60 * 60 * 1000;
-export const PAIRING_TOKEN_BYTES = 3;
-export const PAIRING_TOKEN_REGEX = /^[0-9a-fA-F]{6}$/;
-const MAX_WARNINGS = 200;
-/**
- * Flag emitted into `state.warnings` when a single dispatcher observes traffic
- * from more than one chat — the channel multiplexes chats over one runtime
- * context, which is supported but worth surfacing to an operator once.
- */
-export const TRUST_DOMAIN_WARNING = 'dispatcher shares one runtime context across multiple Feishu chats';
-// ─────────────────────────────────────────────────────────────────────────
-// Defaults
-// ─────────────────────────────────────────────────────────────────────────
-export function defaultDispatcherAccessState() {
-    return {
-        version: ACCESS_STATE_VERSION,
-        dm_policy: 'pairing',
-        group: {
-            policy: 'follow-user',
-            allow_chats: [],
-            require_mention: true,
-        },
-        allow_users: [],
-        pending: {},
-        observed_chats: [],
-        warnings: [],
-        last_gate: { at: 0 },
-    };
-}
-// ─────────────────────────────────────────────────────────────────────────
-// Pairing token generators
+// Pairing token generators — the token-minting half of the `pair` transition
 // ─────────────────────────────────────────────────────────────────────────
 export function generatePairingToken() {
     return randomBytes(PAIRING_TOKEN_BYTES).toString('hex');
@@ -62,7 +23,7 @@ export function generateUniquePairingToken(existing) {
     }
     return token;
 }
-function pruneExpiredPending(state, now) {
+export function pruneExpiredPending(state, now) {
     const kept = {};
     let anyRemoved = false;
     for (const [token, entry] of Object.entries(state.pending)) {
@@ -75,54 +36,26 @@ function pruneExpiredPending(state, now) {
     }
     return anyRemoved ? { ...state, pending: kept } : state;
 }
-function findExistingPendingByKey(pending, kind, sender_id, chat_id, now) {
+// Every live pending entry is dm-kind (the C3 semantic rewrite removed group
+// pairing below), so an existing slot is found by sender alone.
+function findExistingPendingByKey(pending, sender_id, now) {
     for (const [token, entry] of Object.entries(pending)) {
         if (entry.expires_at <= now)
             continue;
-        if (entry.kind !== kind)
-            continue;
-        if (kind === 'dm' && entry.sender_id === sender_id) {
-            return { token, entry };
-        }
-        if (kind === 'group' && entry.chat_id === chat_id) {
+        if (entry.sender_id === sender_id) {
             return { token, entry };
         }
     }
     return null;
 }
-function countByKind(pending, now) {
-    const c = { dm: 0, group: 0 };
+function countActivePending(pending, now) {
+    let count = 0;
     for (const entry of Object.values(pending)) {
         if (entry.expires_at <= now)
             continue;
-        c[entry.kind] += 1;
+        count += 1;
     }
-    return c;
-}
-function pushWarn(warnings, at, msg, ctx) {
-    const next = [...warnings, { at, msg, ...(ctx ? { ctx } : {}) }];
-    // cap at MAX_WARNINGS FIFO
-    if (next.length > MAX_WARNINGS) {
-        return next.slice(next.length - MAX_WARNINGS);
-    }
-    return next;
-}
-function pushObserved(observed, chat_id) {
-    if (observed.includes(chat_id))
-        return observed;
-    return [...observed, chat_id];
-}
-function withLastGate(state, input, now, action, reason) {
-    return {
-        ...state,
-        last_gate: {
-            at: now,
-            sender_id: input.sender_id,
-            chat_id: input.chat_id,
-            action,
-            ...(reason !== undefined ? { reason } : {}),
-        },
-    };
+    return count;
 }
 // NOTE: groupPairPath was removed as part of the C3 semantic rewrite.
 // group.allow_chats is operator-maintained; there is no pairing mechanism to
@@ -130,28 +63,25 @@ function withLastGate(state, input, now, action, reason) {
 // dmPairPath and end up as dm-kind entries on allow_users.
 function dmPairPath(opts) {
     const { state, input, now, logs } = opts;
-    const existing = findExistingPendingByKey(state.pending, 'dm', input.sender_id, input.chat_id, now);
+    const existing = findExistingPendingByKey(state.pending, input.sender_id, now);
     if (existing !== null) {
         const { token, entry } = existing;
         const newEntry = {
             ...entry,
             expires_at: now + PAIRING_TTL_MS,
         };
-        let nextState = {
+        const nextState = {
             ...state,
             pending: { ...state.pending, [token]: newEntry },
         };
-        nextState = withLastGate(nextState, input, now, 'pair');
-        nextState = { ...nextState, observed_chats: pushObserved(nextState.observed_chats, input.chat_id) };
         logs.push({
             level: 'info',
             msg: 'dm pairing: existing prompt',
             ctx: {
-                token,
+                pairing_token_len: token.length,
                 sender_id: input.sender_id,
-                ...(entry.prompt_message_id !== undefined
-                    ? { prompt_message_id: entry.prompt_message_id }
-                    : {}),
+                chat_id: input.chat_id,
+                prompt_message_id: entry.prompt_message_id,
             },
         });
         return {
@@ -169,50 +99,42 @@ function dmPairPath(opts) {
             logs,
         };
     }
-    const counts = countByKind(state.pending, now);
-    if (counts.dm >= MAX_PENDING_PER_KIND) {
-        const msg = 'dm pairing: slot cap reached';
-        const warnings = pushWarn(state.warnings, now, msg, {
-            count: counts.dm,
-            sender_id: input.sender_id,
-        });
+    const count = countActivePending(state.pending, now);
+    if (count >= MAX_PENDING) {
         logs.push({
             level: 'warn',
-            msg,
-            ctx: { count: counts.dm, sender_id: input.sender_id },
+            msg: 'dm pairing: slot cap reached',
+            ctx: { count, sender_id: input.sender_id, chat_id: input.chat_id },
         });
-        let nextState = { ...state, warnings };
-        nextState = withLastGate(nextState, input, now, 'drop', 'dm_pairing_slot_cap');
-        nextState = { ...nextState, observed_chats: pushObserved(nextState.observed_chats, input.chat_id) };
         return {
             action: {
                 action: 'drop',
                 reason: 'dm_pairing_slot_cap',
-                context: { pending: counts.dm, max: MAX_PENDING_PER_KIND },
+                context: { pending: count, max: MAX_PENDING },
             },
-            nextState,
+            nextState: state,
             logs,
         };
     }
     const token = generateUniquePairingToken(state.pending);
     const entry = {
-        kind: 'dm',
         sender_id: input.sender_id,
         chat_id: input.chat_id,
         created_at: now,
         expires_at: now + PAIRING_TTL_MS,
-        replies: 1,
     };
-    let nextState = {
+    const nextState = {
         ...state,
         pending: { ...state.pending, [token]: entry },
     };
-    nextState = withLastGate(nextState, input, now, 'pair');
-    nextState = { ...nextState, observed_chats: pushObserved(nextState.observed_chats, input.chat_id) };
     logs.push({
         level: 'info',
         msg: 'dm pairing: new slot',
-        ctx: { token, sender_id: input.sender_id },
+        ctx: {
+            pairing_token_len: token.length,
+            sender_id: input.sender_id,
+            chat_id: input.chat_id,
+        },
     });
     return {
         action: {
@@ -234,25 +156,7 @@ export function dreamuxFeishuGate(state, input, now = Date.now()) {
     // Double-guard TTL — prune first, then helpers also check expires_at > now.
     let working = pruneExpiredPending(state, now);
     const finish = (action, mutate = (s) => s) => {
-        let s = mutate(working);
-        s = { ...s, observed_chats: pushObserved(s.observed_chats, input.chat_id) };
-        // Attach trust-domain warning if we observe multiple chats.
-        if (s.observed_chats.length > 1 &&
-            !s.warnings.some((w) => w.msg === TRUST_DOMAIN_WARNING)) {
-            s = {
-                ...s,
-                warnings: pushWarn(s.warnings, now, TRUST_DOMAIN_WARNING),
-            };
-            logs.push({ level: 'warn', msg: TRUST_DOMAIN_WARNING });
-        }
-        const actionStr = action.action === 'drop'
-            ? `drop:${action.reason}`
-            : action.action === 'pair'
-                ? `pair:${action.kind}`
-                : 'deliver';
-        const reason = action.action === 'drop' ? action.reason : undefined;
-        s = withLastGate(s, input, now, actionStr, reason);
-        return { action, nextState: s, logs };
+        return { action, nextState: mutate(working), logs };
     };
     // ── DM ────────────────────────────────────────────────────────────────
     if (input.chat_type === 'p2p') {
@@ -372,7 +276,4 @@ export function dreamuxFeishuGate(state, input, now = Date.now()) {
     // Unsupported
     return finish({ action: 'drop', reason: 'unsupported_chat_type' });
 }
-// IO + UI helpers moved to feishu-gate-io.ts. Re-exported to preserve the
-// public surface so callers (feishu-channel.ts, tests) need no change.
-export { loadDispatcherAccess, readDispatcherAccess, saveDispatcherAccess, } from './feishu-gate-io.js';
-//# sourceMappingURL=feishu-gate.js.map
+//# sourceMappingURL=gate.js.map

package/dist/access/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/access/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,cAAc,GAIf,MAAM,YAAY,CAAC;AAEpB,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAE5E,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAiC;IAEjC,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;QACvD,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAqED,MAAM,UAAU,mBAAmB,CACjC,KAA8B,EAC9B,GAAW;IAEX,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1D,CAAC;AAOD,6EAA6E;AAC7E,gEAAgE;AAChE,SAAS,wBAAwB,CAC/B,OAAmB,EACnB,SAAiB,EACjB,GAAW;IAEX,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG;YAAE,SAAS;QACtC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB,EAAE,GAAW;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG;YAAE,SAAS;QACtC,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAaD,sEAAsE;AACtE,6EAA6E;AAC7E,sEAAsE;AACtE,2DAA2D;AAE3D,SAAS,UAAU,CAAC,IAAkB;IACpC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,wBAAwB,CACvC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,EACf,GAAG,CACJ,CAAC;IAEF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAClC,MAAM,QAAQ,GAAwB;YACpC,GAAG,KAAK;YACR,UAAU,EAAE,GAAG,GAAG,cAAc;SACjC,CAAC;QACF,MAAM,SAAS,GAA4B;YACzC,GAAG,KAAK;YACR,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE;SACjD,CAAC;QACF,IAAI,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,MAAM;YACb,GAAG,EAAE,6BAA6B;YAClC,GAAG,EAAE;gBACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;gBAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C;SACF,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE;gBACN,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI;gBACV,KAAK;gBACL,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,cAAc;gBAC3B,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;oBAChD,CAAC,CAAC,EAAE,CAAC;aACR;YACD,SAAS;YACT,IAAI;SACL,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,MAAM;YACb,GAAG,EAAE,8BAA8B;YACnC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;SACnE,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,qBAAqB;gBAC7B,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE;aAC9C;YACD,SAAS,EAAE,KAAK;YAChB,IAAI;SACL,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAwB;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG,GAAG,cAAc;KACjC,CAAC;IACF,MAAM,SAAS,GAA4B;QACzC,GAAG,KAAK;QACR,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE;KAC9C,CAAC;IACF,IAAI,CAAC,IAAI,CAAC;QACR,KAAK,EAAE,MAAM;QACb,GAAG,EAAE,sBAAsB;QAC3B,GAAG,EAAE;YACH,iBAAiB,EAAE,KAAK,CAAC,MAAM;YAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB;KACF,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE;YACN,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;YACV,KAAK;YACL,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,cAAc;SAC5B;QACD,SAAS;QACT,IAAI;KACL,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,YAAY;AACZ,4EAA4E;AAE5E,MAAM,UAAU,iBAAiB,CAC/B,KAA8B,EAC9B,KAAkB,EAClB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,IAAI,GAAuB,EAAE,CAAC;IAEpC,4EAA4E;IAC5E,IAAI,OAAO,GAA4B,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,CACb,MAAkB,EAClB,SAAkE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAC9D,EAAE;QACd,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC,CAAC;IAEF,yEAAyE;IACzE,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;aACxC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,OAAO,CAAC,SAAS,EAAE,CAAC;YAC1B,KAAK,UAAU;gBACb,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3D,KAAK,KAAK;gBACR,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACvC,KAAK,WAAW;gBACd,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvC,CAAC;gBACD,OAAO,MAAM,CAAC;oBACZ,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,qBAAqB;oBAC7B,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;iBACxC,CAAC,CAAC;YACL,KAAK,SAAS;gBACZ,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvC,CAAC;gBACD,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D;gBACE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAChC,oBAAoB;QACpB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,MAAM,CAAC;oBACZ,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,eAAe;oBACvB,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;iBACxC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,kEAAkE;QAClE,sEAAsE;QACtE,qBAAqB;QACrB,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC1D,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAC5E,yCAAyC;QACzC,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,gEAAgE;QAChE,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEtE,IAAI,MAAM,KAAK,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,wBAAwB;gBAChC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,uEAAuE;QACvE,oEAAoE;QACpE,cAAc;QAEd,QAAQ,OAAO,CAAC,SAAS,EAAE,CAAC;YAC1B,KAAK,UAAU;gBACb,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3D,KAAK,KAAK;gBACR,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACvC,KAAK,WAAW;gBACd,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvC,CAAC;gBACD,OAAO,MAAM,CAAC;oBACZ,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,6BAA6B;oBACrC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;iBAChE,CAAC,CAAC;YACL,KAAK,SAAS;gBACZ,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClD,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACvC,CAAC;gBACD,gEAAgE;gBAChE,mEAAmE;gBACnE,mCAAmC;gBACnC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;oBACzB,OAAO,MAAM,CAAC;wBACZ,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,sCAAsC;wBAC9C,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;qBAChE,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D;gBACE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,cAAc;IACd,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/dist/access/index.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Owns the session's access state and every gate, pairing, and approval
+ * transition. Inbound owns message IO: it asks for a gate decision, sends the
+ * card or reference outside the store queue, then records successful delivery.
+ * Access is loaded lazily, so a malformed file fails the operation that reads it.
+ */
+import type { DreamuxLogger } from '@excitedjs/dreamux-types';
+import { type GateAction, type GateInbound } from './gate.js';
+type PairingAction = Extract<GateAction, {
+    action: 'pair';
+}>;
+export interface PairingApprovalResult {
+    status: 'ok' | 'not_found' | 'error';
+    message: string;
+    details?: Record<string, unknown>;
+}
+export interface FeishuAccessOptions {
+    /** The dispatcher's durable state directory; `access.json` sits under it. */
+    stateDir: string;
+    dispatcherId: string;
+    log: DreamuxLogger;
+}
+export declare class FeishuAccess {
+    private readonly store;
+    private readonly dispatcherId;
+    private readonly log;
+    constructor(opts: FeishuAccessOptions);
+    /** Snapshot the policy used before bot observation or /introduce. */
+    inboundPolicy(input: {
+        chatType: 'p2p' | 'group';
+        chatId: string;
+        senderId: string;
+    }): Promise<{
+        observeBots: boolean;
+        introduceDenyReason: import("../introduce.js").IntroduceDenyReason | null;
+    }>;
+    /**
+     * What the gate would decide for this person, against the held state,
+     * committing nothing. For a caller that is not answering a message and so has
+     * no conversation to send a pairing card into: a `pair` outcome here mints a
+     * token nobody stores, and it means "not admitted" like a drop does.
+     */
+    decide(inbound: GateInbound): Promise<GateAction>;
+    /** Commit deliver/drop; pairing waits until its message has been sent. */
+    gate(inbound: GateInbound): Promise<GateAction>;
+    /** Refresh an existing prompt only after inbound successfully references it. */
+    refreshPairing(action: PairingAction): Promise<void>;
+    /** Merge a sent card into the latest state, including any concurrent approval. */
+    recordPairingPrompt(inbound: GateInbound, action: PairingAction, messageId: string | undefined): Promise<void>;
+    /**
+     * Load access.json from `stateDir`. Fails LOUDLY if the file exists but the
+     * shape is not v3, or a `pending` entry is missing/mistyped on `sender_id`,
+     * `chat_id`, `expires_at`, or `created_at`. A missing file returns the
+     * secure default (pairing DM default, empty allowlists).
+     *
+     * Reconstructs the returned value field by field rather than casting
+     * `parsed` as-is, so an old file's now-dropped ledger fields (`last_gate`,
+     * `observed_chats`, `warnings`) or per-entry fields (`kind`, `replies`) are
+     * read and discarded, never round-tripped into memory or back to disk.
+     */
+    private readFromDisk;
+    /**
+     * Approve a pending pairing by its internal 6-hex token.
+     *
+     * Behavior:
+     *   - Normalizes `token` to lowercase (the gate stores lowercased tokens).
+     *   - Returns `not_found` when the token is unknown or expired (we reject
+     *     expired entries explicitly, not just "not found", so the operator
+     *     gets the right diagnostic).
+     *   - Adds the DM sender to `allow_users`. Idempotent on allowlist
+     *     membership (we detect duplicates via allowlist presence, not by
+     *     whether the pending entry still has the slot), and always removes
+     *     the pending key after a successful approval — the
+     *     allowlist IS the source of truth, a pending entry is just a
+     *     temporary token.
+     *   - Details include `duplicate` flag, `ttl_left_ms`, `sender_id`,
+     *     `chat_id`, `kind` for audit logging.
+     *
+     * The whole decide-and-write runs inside one `store.update()`, so it is
+     * serialized against every other access-state change this class makes.
+     * `not_found` and the duplicate-but-still-consumes-the-slot case are decided
+     * inside the `update` and returned unchanged (no write); the decide logic
+     * itself cannot throw. But `update()` also self-loads the store on its
+     * first call (never loaded at session start), and that load can throw on a
+     * malformed `access.json` — the `catch` below answers that case too, as
+     * `status: 'error'`.
+     */
+    approvePairingByToken(token: string): Promise<PairingApprovalResult>;
+    /**
+     * Whether this sender is one of the Dispatcher's trusted humans.
+     *
+     * Reads this class's own held access store — the same store every gate
+     * decision and pairing write goes through — rather than a fresh disk read,
+     * so this always sees the value the running session actually committed
+     * last.
+     */
+    isTrustedDispatcherUser(openId: string): Promise<boolean>;
+}
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/access/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/access/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAY9D,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,WAAW,EAEjB,MAAM,WAAW,CAAC;AAGnB,KAAK,aAAa,GAAG,OAAO,CAAC,UAAU,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AA6C7D,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,IAAI,GAAG,WAAW,GAAG,OAAO,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,aAAa,CAAC;CACpB;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4C;IAClE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;gBAExB,IAAI,EAAE,mBAAmB;IAarC,qEAAqE;IAC/D,aAAa,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,KAAK,GAAG,OAAO,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB;;;;IASD;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAKvD,0EAA0E;IACpE,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAgBrD,gFAAgF;IAC1E,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB1D,kFAAkF;IAC5E,mBAAmB,CACvB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAAC,IAAI,CAAC;IAoDhB;;;;;;;;;;OAUG;YACW,YAAY;IAwC1B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAoF1E;;;;;;;OAOG;IACG,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAIhE"}