@geoly-ai/social-hub-cli 0.0.12 → 0.0.14

package/dist/register-admin.js

@@ -1,13 +1,28 @@
 import { requireClient, resolveTeamId } from "./client.js";
 import { assertApplyOrDryRun } from "./dry-run.js";
+import { withPermissionGate } from "./permission-runner.js";
 import { printResult, withCliErrorBoundary } from "./output.js";
+function redactSettingsBatchSummary(body) {
+    return {
+        settings: body.settings.map((s) => ({
+            key: s.key,
+            value: "[redacted]",
+        })),
+    };
+}
 export function registerAdminCommands(program) {
     const settings = program.command("settings").description("系统设置（admin）");
     settings
         .command("list")
         .action(async () => {
         await withCliErrorBoundary(async () => {
-            printResult(await requireClient().listSettings());
+            await withPermissionGate({
+                command: "settings list",
+                resource: "systemSetting",
+                action: "list",
+            }, async () => {
+                printResult(await requireClient().listSettings());
+            });
         });
     });
     settings
@@ -15,7 +30,13 @@ export function registerAdminCommands(program) {
         .argument("<key>", "Setting key")
         .action(async (key) => {
         await withCliErrorBoundary(async () => {
-            printResult(await requireClient().getSetting(key));
+            await withPermissionGate({
+                command: "settings get",
+                resource: "systemSetting",
+                action: "read",
+            }, async () => {
+                printResult(await requireClient().getSetting(key));
+            });
         });
     });
     settings
@@ -26,23 +47,65 @@ export function registerAdminCommands(program) {
         .option("--apply", "执行写入", false)
         .action(async (key, opts) => {
         await withCliErrorBoundary(async () => {
-            if (!assertApplyOrDryRun(opts, {
+            await withPermissionGate({
                 command: "settings set",
-                danger: "admin",
-                summary: { key, value: opts.value },
-            })) {
-                return;
-            }
-            printResult(await requireClient().upsertSetting(key, { value: opts.value }));
+                resource: "systemSetting",
+                action: "update",
+            }, async () => {
+                if (!assertApplyOrDryRun(opts, {
+                    command: "settings set",
+                    danger: "admin",
+                    summary: { key, value: opts.value },
+                })) {
+                    return;
+                }
+                printResult(await requireClient().upsertSetting(key, { value: opts.value }));
+            });
+        });
+    });
+    settings
+        .command("batch-set")
+        .description("PUT /v1/settings — 批量更新系统设置")
+        .requiredOption("-j, --json <json>", '{ "settings": [{ "key", "value", "description?" }] }')
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            await withPermissionGate({
+                command: "settings batch-set",
+                resource: "systemSetting",
+                action: "update",
+            }, async () => {
+                const body = JSON.parse(opts.json);
+                if (!assertApplyOrDryRun(opts, {
+                    command: "settings batch-set",
+                    danger: "admin",
+                    summary: redactSettingsBatchSummary(body),
+                })) {
+                    return;
+                }
+                printResult(await requireClient().upsertSettingsBatch(body));
+            });
         });
     });
     const invites = program.command("invites").description("团队邀请");
     invites
         .command("list")
         .requiredOption("-t, --team <teamId>", "Team UUID")
+        .option("--status <status>", "pending|accepted|revoked|expired")
         .action(async (opts) => {
         await withCliErrorBoundary(async () => {
-            printResult(await requireClient().listTeamInvites(resolveTeamId(opts.team)));
+            const teamId = resolveTeamId(opts.team);
+            await withPermissionGate({
+                command: "invites list",
+                resource: "invite",
+                action: "list",
+                teamId,
+            }, async () => {
+                printResult(await requireClient().listTeamInvites(teamId, {
+                    status: opts.status,
+                }));
+            });
         });
     });
     invites
@@ -50,22 +113,38 @@ export function registerAdminCommands(program) {
         .requiredOption("-t, --team <teamId>", "Team UUID")
         .requiredOption("--email <email>", "邮箱")
         .requiredOption("--role <role>", "角色")
+        .option("--brand <uuid>", "client 邀请关联品牌 brandId")
         .option("--dry-run", "预览", false)
         .option("--apply", "执行写入", false)
         .action(async (opts) => {
         await withCliErrorBoundary(async () => {
             const teamId = resolveTeamId(opts.team);
-            if (!assertApplyOrDryRun(opts, {
+            await withPermissionGate({
                 command: "invites create",
-                danger: "write",
-                summary: { teamId, email: opts.email, role: opts.role },
-            })) {
-                return;
-            }
-            printResult(await requireClient().createTeamInvite(teamId, {
-                email: opts.email,
-                role: opts.role,
-            }));
+                resource: "invite",
+                action: "create",
+                teamId,
+            }, async () => {
+                const summary = {
+                    teamId,
+                    email: opts.email,
+                    role: opts.role,
+                };
+                if (opts.brand)
+                    summary.brandId = opts.brand;
+                if (!assertApplyOrDryRun(opts, {
+                    command: "invites create",
+                    danger: "write",
+                    summary,
+                })) {
+                    return;
+                }
+                printResult(await requireClient().createTeamInvite(teamId, {
+                    email: opts.email,
+                    role: opts.role,
+                    ...(opts.brand ? { brandId: opts.brand } : {}),
+                }));
+            });
         });
     });
     invites
@@ -77,23 +156,258 @@ export function registerAdminCommands(program) {
         .action(async (opts) => {
         await withCliErrorBoundary(async () => {
             const teamId = resolveTeamId(opts.team);
-            if (!assertApplyOrDryRun(opts, {
+            await withPermissionGate({
                 command: "invites revoke",
-                danger: "delete",
-                summary: { teamId, inviteId: opts.id },
-            })) {
-                return;
-            }
-            printResult(await requireClient().revokeTeamInvite(teamId, opts.id));
+                resource: "invite",
+                action: "delete",
+                teamId,
+            }, async () => {
+                if (!assertApplyOrDryRun(opts, {
+                    command: "invites revoke",
+                    danger: "delete",
+                    summary: { teamId, inviteId: opts.id },
+                })) {
+                    return;
+                }
+                printResult(await requireClient().revokeTeamInvite(teamId, opts.id));
+            });
         });
     });
     const members = program.command("members").description("成员管理");
     members
         .command("list")
-        .option("-t, --team <teamId>", "Team UUID（可选，默认 system）")
+        .description("GET /v1/system/members")
+        .action(async () => {
+        await withCliErrorBoundary(async () => {
+            await withPermissionGate({
+                command: "members list",
+                resource: "systemMember",
+                action: "list",
+            }, async () => {
+                printResult(await requireClient().listSystemMembers());
+            });
+        });
+    });
+    members
+        .command("system-teams")
+        .description("GET /v1/system/teams")
+        .action(async () => {
+        await withCliErrorBoundary(async () => {
+            await withPermissionGate({
+                command: "members system-teams",
+                resource: "systemMember",
+                action: "list",
+            }, async () => {
+                printResult(await requireClient().listSystemTeams());
+            });
+        });
+    });
+    members
+        .command("update-role")
+        .description("PATCH /v1/system/members/:userId")
+        .requiredOption("--user <userId>", "User UUID")
+        .requiredOption("--role <role>", "internal|senior|supervisor|manager|client")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            await withPermissionGate({
+                command: "members update-role",
+                resource: "systemMember",
+                action: "update",
+            }, async () => {
+                if (!assertApplyOrDryRun(opts, {
+                    command: "members update-role",
+                    danger: "write",
+                    summary: { userId: opts.user, role: opts.role },
+                })) {
+                    return;
+                }
+                printResult(await requireClient().updateSystemMemberRole(opts.user, {
+                    role: opts.role,
+                }));
+            });
+        });
+    });
+    members
+        .command("remove")
+        .description("DELETE /v1/system/members/:userId")
+        .requiredOption("--user <userId>", "User UUID")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            await withPermissionGate({
+                command: "members remove",
+                resource: "systemMember",
+                action: "delete",
+            }, async () => {
+                if (!assertApplyOrDryRun(opts, {
+                    command: "members remove",
+                    danger: "delete",
+                    summary: { userId: opts.user },
+                })) {
+                    return;
+                }
+                printResult(await requireClient().deleteSystemMember(opts.user));
+            });
+        });
+    });
+    members
+        .command("teams-list")
+        .description("GET /v1/system/members/:userId/teams")
+        .requiredOption("--user <userId>", "User UUID")
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            await withPermissionGate({
+                command: "members teams-list",
+                resource: "systemMember",
+                action: "read",
+            }, async () => {
+                printResult(await requireClient().listSystemMemberTeams(opts.user));
+            });
+        });
+    });
+    members
+        .command("teams-add")
+        .description("POST /v1/system/members/:userId/teams")
+        .requiredOption("--user <userId>", "User UUID")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .option("--role <role>", "internal|senior|supervisor|manager|client")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            await withPermissionGate({
+                command: "members teams-add",
+                resource: "systemMember",
+                action: "create",
+                teamId,
+            }, async () => {
+                const summary = {
+                    userId: opts.user,
+                    teamId,
+                };
+                if (opts.role)
+                    summary.role = opts.role;
+                if (!assertApplyOrDryRun(opts, {
+                    command: "members teams-add",
+                    danger: "write",
+                    summary,
+                })) {
+                    return;
+                }
+                printResult(await requireClient().addSystemMemberTeam(opts.user, {
+                    teamId,
+                    ...(opts.role ? { role: opts.role } : {}),
+                }));
+            });
+        });
+    });
+    members
+        .command("teams-remove")
+        .description("DELETE /v1/system/members/:userId/teams/:teamId")
+        .requiredOption("--user <userId>", "User UUID")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            await withPermissionGate({
+                command: "members teams-remove",
+                resource: "systemMember",
+                action: "delete",
+                teamId,
+            }, async () => {
+                if (!assertApplyOrDryRun(opts, {
+                    command: "members teams-remove",
+                    danger: "delete",
+                    summary: { userId: opts.user, teamId },
+                })) {
+                    return;
+                }
+                printResult(await requireClient().removeSystemMemberTeam(opts.user, teamId));
+            });
+        });
+    });
+    members
+        .command("team-list")
+        .description("GET /v1/teams/:teamId/members")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
         .action(async (opts) => {
         await withCliErrorBoundary(async () => {
-            printResult(await requireClient().listSystemMembers());
+            const teamId = resolveTeamId(opts.team);
+            await withPermissionGate({
+                command: "members team-list",
+                resource: "systemMember",
+                action: "list",
+                teamId,
+            }, async () => {
+                printResult(await requireClient().listTeamMembers(teamId));
+            });
+        });
+    });
+    members
+        .command("team-update-role")
+        .description("PATCH /v1/teams/:teamId/members/:userId")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .requiredOption("--user <userId>", "User UUID")
+        .requiredOption("--role <role>", "internal|senior|supervisor|manager|client")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            await withPermissionGate({
+                command: "members team-update-role",
+                resource: "systemMember",
+                action: "update",
+                teamId,
+            }, async () => {
+                if (!assertApplyOrDryRun(opts, {
+                    command: "members team-update-role",
+                    danger: "write",
+                    summary: {
+                        teamId,
+                        userId: opts.user,
+                        role: opts.role,
+                    },
+                })) {
+                    return;
+                }
+                printResult(await requireClient().updateTeamMemberRole(teamId, opts.user, {
+                    role: opts.role,
+                }));
+            });
+        });
+    });
+    members
+        .command("team-remove")
+        .description("DELETE /v1/teams/:teamId/members/:userId")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .requiredOption("--user <userId>", "User UUID")
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        await withCliErrorBoundary(async () => {
+            const teamId = resolveTeamId(opts.team);
+            await withPermissionGate({
+                command: "members team-remove",
+                resource: "systemMember",
+                action: "delete",
+                teamId,
+            }, async () => {
+                if (!assertApplyOrDryRun(opts, {
+                    command: "members team-remove",
+                    danger: "delete",
+                    summary: { teamId, userId: opts.user },
+                })) {
+                    return;
+                }
+                printResult(await requireClient().removeTeamMember(teamId, opts.user));
+            });
         });
     });
 }

package/dist/register-admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-admin.js","sourceRoot":"","sources":["../src/register-admin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEhE,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAExE,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC5B,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;SAChC,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;gBACzB,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;aACpC,CAAC,EACF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC;SACvC,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC;SACrC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;gBACzB,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;aACxD,CAAC,EACF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC7C,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;gBACzB,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE;aACvC,CAAC,EACF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CACxD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AAEP,CAAC"}
+{"version":3,"file":"register-admin.js","sourceRoot":"","sources":["../src/register-admin.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEhE,SAAS,0BAA0B,CAAC,IAEnC;IACC,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAExE,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,eAAe;gBACzB,MAAM,EAAE,MAAM;aACf,EACD,KAAK,IAAI,EAAE;gBACT,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YACpD,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC5B,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,cAAc;gBACvB,QAAQ,EAAE,eAAe;gBACzB,MAAM,EAAE,MAAM;aACf,EACD,KAAK,IAAI,EAAE;gBACT,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;SAChC,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,IAAI,EAAE,EAAE;QAClC,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,cAAc;gBACvB,QAAQ,EAAE,eAAe;gBACzB,MAAM,EAAE,QAAQ;aACjB,EACD,KAAK,IAAI,EAAE;gBACT,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,cAAc;oBACvB,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;iBACpC,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAChE,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,6BAA6B,CAAC;SAC1C,cAAc,CACb,mBAAmB,EACnB,sDAAsD,CACvD;SACA,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,oBAAoB;gBAC7B,QAAQ,EAAE,eAAe;gBACzB,MAAM,EAAE,QAAQ;aACjB,EACD,KAAK,IAAI,EAAE;gBACT,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAMhC,CAAC;gBACF,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,oBAAoB;oBAC7B,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,0BAA0B,CAAC,IAAI,CAAC;iBAC1C,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,MAAM,CACL,mBAAmB,EACnB,kCAAkC,CACnC;SACA,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,cAAc;gBACvB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,MAAM;gBACd,MAAM;aACP,EACD,KAAK,IAAI,EAAE;gBACT,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE;oBAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CACH,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC;SACvC,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC;SACrC,MAAM,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;SACjD,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,QAAQ;gBAChB,MAAM;aACP,EACD,KAAK,IAAI,EAAE;gBACT,MAAM,OAAO,GAA2B;oBACtC,MAAM;oBACN,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;iBAChB,CAAC;gBACF,IAAI,IAAI,CAAC,KAAK;oBAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;gBAC7C,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,gBAAgB;oBACzB,MAAM,EAAE,OAAO;oBACf,OAAO;iBACR,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE;oBAC7C,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/C,CAAC,CACH,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,OAAO,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,QAAQ;gBAChB,MAAM;aACP,EACD,KAAK,IAAI,EAAE;gBACT,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,gBAAgB;oBACzB,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE;iBACvC,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CACxD,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,cAAc;gBACvB,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,MAAM;aACf,EACD,KAAK,IAAI,EAAE;gBACT,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACzD,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,sBAAsB,CAAC;SACnC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,sBAAsB;gBAC/B,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,MAAM;aACf,EACD,KAAK,IAAI,EAAE;gBACT,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YACvD,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,kCAAkC,CAAC;SAC/C,cAAc,CAAC,iBAAiB,EAAE,WAAW,CAAC;SAC9C,cAAc,CAAC,eAAe,EAAE,2CAA2C,CAAC;SAC5E,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,qBAAqB;gBAC9B,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,QAAQ;aACjB,EACD,KAAK,IAAI,EAAE;gBACT,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,qBAAqB;oBAC9B,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;iBAChD,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE;oBACtD,IAAI,EAAE,IAAI,CAAC,IAAI;iBAChB,CAAC,CACH,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mCAAmC,CAAC;SAChD,cAAc,CAAC,iBAAiB,EAAE,WAAW,CAAC;SAC9C,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,QAAQ;aACjB,EACD,KAAK,IAAI,EAAE;gBACT,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,gBAAgB;oBACzB,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;iBAC/B,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACnE,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,YAAY,CAAC;SACrB,WAAW,CAAC,sCAAsC,CAAC;SACnD,cAAc,CAAC,iBAAiB,EAAE,WAAW,CAAC;SAC9C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,oBAAoB;gBAC7B,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,MAAM;aACf,EACD,KAAK,IAAI,EAAE;gBACT,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CACvD,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,uCAAuC,CAAC;SACpD,cAAc,CAAC,iBAAiB,EAAE,WAAW,CAAC;SAC9C,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,MAAM,CAAC,eAAe,EAAE,2CAA2C,CAAC;SACpE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,mBAAmB;gBAC5B,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,QAAQ;gBAChB,MAAM;aACP,EACD,KAAK,IAAI,EAAE;gBACT,MAAM,OAAO,GAA2B;oBACtC,MAAM,EAAE,IAAI,CAAC,IAAI;oBACjB,MAAM;iBACP,CAAC;gBACF,IAAI,IAAI,CAAC,IAAI;oBAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACxC,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,mBAAmB;oBAC5B,MAAM,EAAE,OAAO;oBACf,OAAO;iBACR,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE;oBACnD,MAAM;oBACN,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC,CACH,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,iDAAiD,CAAC;SAC9D,cAAc,CAAC,iBAAiB,EAAE,WAAW,CAAC;SAC9C,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,sBAAsB;gBAC/B,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,QAAQ;gBAChB,MAAM;aACP,EACD,KAAK,IAAI,EAAE;gBACT,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,sBAAsB;oBAC/B,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE;iBACvC,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAChE,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,mBAAmB;gBAC5B,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,MAAM;gBACd,MAAM;aACP,EACD,KAAK,IAAI,EAAE;gBACT,WAAW,CAAC,MAAM,aAAa,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7D,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,yCAAyC,CAAC;SACtD,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,WAAW,CAAC;SAC9C,cAAc,CAAC,eAAe,EAAE,2CAA2C,CAAC;SAC5E,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,0BAA0B;gBACnC,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,QAAQ;gBAChB,MAAM;aACP,EACD,KAAK,IAAI,EAAE;gBACT,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,0BAA0B;oBACnC,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,MAAM;wBACN,MAAM,EAAE,IAAI,CAAC,IAAI;wBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;qBAChB;iBACF,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;oBAC5D,IAAI,EAAE,IAAI,CAAC,IAAI;iBAChB,CAAC,CACH,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,0CAA0C,CAAC;SACvD,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,iBAAiB,EAAE,WAAW,CAAC;SAC9C,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,oBAAoB,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,kBAAkB,CACtB;gBACE,OAAO,EAAE,qBAAqB;gBAC9B,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,QAAQ;gBAChB,MAAM;aACP,EACD,KAAK,IAAI,EAAE;gBACT,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;oBACzB,OAAO,EAAE,qBAAqB;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;iBACvC,CAAC,EACF,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,WAAW,CACT,MAAM,aAAa,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAC1D,CAAC;YACJ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/register-extensions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-extensions.d.ts","sourceRoot":"","sources":["../src/register-extensions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAoB,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAqDzE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyT5D;AAED,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,OAAO,GAAG,IAAI,CAiBxE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CA0R9D;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAkJlE;AAED,kFAAkF;AAClF,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,IAAI,GACT,IAAI,CASN"}
+{"version":3,"file":"register-extensions.d.ts","sourceRoot":"","sources":["../src/register-extensions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAoB,IAAI,EAAE,MAAM,4BAA4B,CAAC;AA+CzE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyT5D;AAED,wBAAgB,0BAA0B,CAAC,cAAc,EAAE,OAAO,GAAG,IAAI,CAiBxE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAwR9D;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAiKlE;AAED,kFAAkF;AAClF,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,IAAI,GACT,IAAI,CASN"}

package/dist/register-extensions.js

@@ -3,25 +3,18 @@ import { hostname } from "node:os";
 import { requireClient, resolveTeamId } from "./client.js";
 import { DEFAULT_API_URL, getConfigPath, loadConfigFile, maskSecret, mergeConfigPatch, resolveCliConfig, saveConfigFile, } from "./config.js";
 import { assertCliPermission, explainCliPermissions, findGateForCommand, } from "./permissions.js";
+import { withPermissionGate } from "./permission-runner.js";
 import { withCliErrorBoundary } from "./output.js";
 async function withRoleCheck(commandPath, resource, action, run, teamOpt) {
-    const client = requireClient();
-    const teamId = resolveTeamId(teamOpt);
-    let role = "manager";
-    try {
-        const ctx = await client.getAuthContext();
-        role = ctx.role ?? "manager";
-        if (ctx.teamId !== teamId && ctx.kind === "api_key") {
-            console.error(`API Key is bound to team ${ctx.teamId}, but command targets ${teamId}.`);
-            process.exit(1);
-        }
-    }
-    catch (e) {
-        console.error(e instanceof Error ? e.message : "Failed to load auth context");
-        process.exit(1);
-    }
-    assertCliPermission({ role, resource, action, command: commandPath });
-    await run(role, teamId);
+    await withPermissionGate({
+        command: commandPath,
+        resource,
+        action,
+        teamId: teamOpt,
+    }, async (ctx) => {
+        const teamId = ctx.teamId ?? resolveTeamId(teamOpt);
+        await run(ctx.role, teamId);
+    });
 }
 export function registerAuthAndConfig(program) {
     const configCmd = program.command("config").description("本地 CLI 配置");
@@ -422,9 +415,9 @@ export function registerRedditExtensions(reddit) {
     });
     reddit
         .command("batch-upsert")
-        .description("POST /reddit-post-snapshots/batch-upsert（按 permalink 幂等写入帖快照）")
+        .description("POST /reddit-post-snapshots/batch-upsert（批量 upsert 帖快照；可选 feishuRecordId 作飞书来源幂等键）")
         .requiredOption("-t, --team <teamId>", "Team UUID")
-        .requiredOption("-j, --json <json>", '{"items":[{"permalink":"...","subreddit":"...","score":0,"commentsCount":0}]}')
+        .requiredOption("-j, --json <json>", '{"items":[{"permalink":"...","subreddit":"...","feishuRecordId":"recXXX","baseToken":"...","tableId":"...","score":0,"commentsCount":0,"viewCount":null,"brandRaw":"..."}]}')
         .option("--dry-run", "仅打印将写入的条目数，不调用 API")
         .action(async (opts) => {
         let body;
@@ -439,11 +432,15 @@ export function registerRedditExtensions(reddit) {
             console.error("JSON body must include a non-empty items array");
             process.exit(1);
         }
+        const missingPermalink = body.items.filter((item) => !item.permalink).length;
+        const withFeishuRecordId = body.items.filter((item) => item.feishuRecordId).length;
         if (opts.dryRun) {
             console.log(JSON.stringify({
                 dryRun: true,
                 teamId: resolveTeamId(opts.team),
                 count: body.items.length,
+                missingPermalink,
+                withFeishuRecordId,
             }, null, 2));
             return;
         }
@@ -540,6 +537,16 @@ export function registerAccountsExtensions(accounts) {
         const res = await requireClient().listAccountStatusSnapshots(resolveTeamId(opts.team), opts.account, Number(opts.limit));
         console.log(JSON.stringify(res, null, 2));
     });
+    const styleGuide = accounts.command("style-guide").description("账号风格资产");
+    styleGuide
+        .command("get")
+        .description("GET /accounts/:ref/style-guide")
+        .requiredOption("-t, --team <teamId>", "Team UUID")
+        .requiredOption("--account <ref>", "Account UUID 或 handle/slot")
+        .action(async (opts) => {
+        const res = await requireClient().getAccountStyleGuide(resolveTeamId(opts.team), opts.account);
+        console.log(JSON.stringify(res, null, 2));
+    });
 }
 /** Optional helper for existing commands — gate by command path if registered. */
 export function maybeAssertCliPermission(commandPath, role) {