@hahnfeld/teams-adapter 1.2.0 → 1.3.1

package/README.md

@@ -1,12 +1,12 @@
 # @hahnfeld/teams-adapter
 
-Microsoft Teams adapter plugin for [OpenACP](https://github.com/Open-ACP/OpenACP) — Adaptive Cards, slash commands, streaming.
+Microsoft Teams adapter plugin for [OpenACP](https://github.com/Open-ACP/OpenACP) — real-time streaming, rich message composition, slash commands.
 
 ## Features
 
-- **Adaptive Cards** — Rich tool card rendering with progress indicators and action buttons
+- **Streaming Message Composer** — Single message per session with live-updating header (tool activity), body (streamed text), and footer (usage/completion)
+- **Per-conversation Rate Limiter** — Multi-window sliding rate limiter (6/1s, 7/2s, 55/30s, 1700/hr) with operation coalescing
 - **Slash Commands** — Full command suite: `/new`, `/cancel`, `/agents`, `/menu`, and more
-- **Streaming** — Real-time text updates via Teams message editing
 - **Threads** — Session threads within Teams channels
 - **Permissions** — Allow/Deny/Always Allow via Adaptive Card buttons
 - **Output Modes** — Low/Medium/High detail levels
@@ -185,6 +185,26 @@ Set the tunnel URL as the messaging endpoint in Azure: `https://<id>.devtunnels.
 
 > **Important:** Always use `--allow-anonymous` — Azure Bot Service cannot authenticate with Dev Tunnel auth.
 
+## Security
+
+The bot operates within your Azure AD tenant (single-tenant configuration), which prevents external access. However, in a large enterprise with thousands of employees, tenant-level auth alone may not be sufficient — **any user in your organization** who can sideload a Teams app could create their own app manifest pointing to the same bot App ID and gain access to agent sessions, your configured workspace, and any tools available to the agent.
+
+**Recommended:** Configure the built-in `@openacp/security` plugin to restrict which users can interact with the bot:
+
+```bash
+openacp plugin configure @openacp/security
+```
+
+Add your Teams user ID to the `allowedUserIds` list. The security plugin registers middleware on all incoming messages at the OpenACP core level, blocking unauthorized users before any adapter code runs. You can find your Teams user ID in the OpenACP logs when you send a message (the `userId` field).
+
+**Additional controls:**
+
+- **Teams Admin Center** — Use app permission policies to restrict who can install the sideloaded app
+- **Azure Bot Configuration** — Single-tenant bots already reject users outside your Azure AD tenant
+- **Network** — The bot is only reachable via your tunnel URL; restrict tunnel access if your provider supports it
+
+> **Important:** Without an `allowedUserIds` configuration, any authenticated user in your tenant can execute agent commands, create sessions, and access your configured workspace through the bot.
+
 ## Slash Commands
 
 | Command | Description |
@@ -241,35 +261,68 @@ pnpm test
 
 ## Architecture
 
+### Message Rendering Model
+
+All agent output is consolidated into a single Teams message per turn, edited in place:
+
+```
+┌─────────────────────────────────────────────┐
+│ **Session Name**                            │  ← TITLE (persistent, bold)
+│ *🔧 Reading file src/adapter.ts...*         │  ← HEADER (ephemeral, italic)
+│─────────────────────────────────────────────│
+│                                             │
+│ Here's what I found in the adapter...       │  ← BODY (streamed text + attachments)
+│ The function handles three cases:           │
+│                                             │
+│─────────────────────────────────────────────│
+│ *44k tokens · $0.14 · Task completed*       │  ← FOOTER (persistent, italic)
+└─────────────────────────────────────────────┘
+```
+
+| Message Type | Zone | Behavior |
+|---|---|---|
+| `text` | Body | Streamed, edited in place |
+| `thought` | Header | Ephemeral, 💭 prefix, replaced by next header |
+| `tool_call` | Header | Ephemeral, 🔧 prefix, replaced by next header |
+| `tool_update` | Header | Ephemeral, 🔧 prefix, replaced by next header |
+| `usage` | Footer | Persistent, dot-separated stats + "Task completed" |
+| `plan` | Separate | Single message, updated in place per session |
+| `error` | Separate | Standalone ❌ message |
+| `mode_change` | Separate | ⚙️ prefix |
+| `config_update` | Separate | ⚙️ prefix |
+| `model_update` | Separate | ⚙️ prefix |
+| `system_message` | Separate | ⚙️ prefix |
+
+### Source Layout
+
 ```
 src/
-├── index.ts             # Plugin entry point & public exports
-├── plugin.ts            # Plugin factory (install wizard, configure, setup/teardown)
-├── adapter.ts           # TeamsAdapter — extends MessagingAdapter
-├── app-package.ts       # Teams app manifest package generator
-├── renderer.ts          # TeamsRenderer (Adaptive Card rendering)
-├── activity.ts          # ActivityTracker (tool card state, streaming)
-├── formatting.ts        # Tool card formatting, usage cards, citations
-├── draft-manager.ts     # Message draft handling
-├── permissions.ts       # PermissionHandler (Adaptive Card buttons)
-├── graph.ts             # GraphFileClient (OneDrive file sharing)
-├── media.ts             # File download/upload utilities
+├── index.ts              # Plugin entry point & public exports
+├── plugin.ts             # Plugin factory (install wizard, configure, setup/teardown)
+├── adapter.ts            # TeamsAdapter — extends MessagingAdapter
+├── message-composer.ts   # SessionMessage (title/header/body/footer zones)
+├── rate-limiter.ts       # Per-conversation rate limiter with coalescing
+├── app-package.ts        # Teams app manifest package generator
+├── activity.ts           # Type re-exports from plugin-sdk
+├── formatting.ts         # Text formatting helpers (tool summaries, plans, usage)
+├── permissions.ts        # PermissionHandler (Adaptive Card buttons)
+├── graph.ts              # GraphFileClient (OneDrive file sharing)
+├── media.ts              # File download/upload utilities
 ├── conversation-store.ts # Conversation reference storage
-├── send-utils.ts        # Message sending helpers (Teams SDK compat)
-├── task-modules.ts      # Task module dialogs (new session, settings)
-├── assistant.ts         # Assistant session spawning
-├── validators.ts        # Credential & tenant validation, Teams link parsing
-├── types.ts             # TeamsChannelConfig, TeamsPlatformData
+├── send-utils.ts         # Message sending helpers (Teams SDK compat)
+├── assistant.ts          # Assistant session spawning
+├── validators.ts         # Credential & tenant validation, Teams link parsing
+├── types.ts              # TeamsChannelConfig, TeamsPlatformData
 └── commands/
-    ├── index.ts          # Command router + SLASH_COMMANDS registry
-    ├── new-session.ts    # /new, /newchat
-    ├── session.ts        # /cancel, /status, /sessions, /handoff
-    ├── admin.ts          # /bypass, /tts, /restart, /respawn, /update, /outputmode
-    ├── menu.ts           # /menu, /help, /clear
-    ├── agents.ts         # /agents, /install
-    ├── doctor.ts         # /doctor
-    ├── integrate.ts      # /integrate
-    └── settings.ts       # /settings
+    ├── index.ts           # Command router + SLASH_COMMANDS registry
+    ├── new-session.ts     # /new, /newchat
+    ├── session.ts         # /cancel, /status, /sessions, /handoff
+    ├── admin.ts           # /bypass, /tts, /restart, /respawn, /update, /outputmode
+    ├── menu.ts            # /menu, /help, /clear
+    ├── agents.ts          # /agents, /install
+    ├── doctor.ts          # /doctor
+    ├── integrate.ts       # /integrate
+    └── settings.ts        # /settings
 ```
 
 ## Tech Stack

package/dist/adapter.d.ts

@@ -1,6 +1,7 @@
 import type { TurnContext } from "@microsoft/agents-hosting";
-import type { OutgoingMessage, PermissionRequest, NotificationMessage, OpenACPCore, DisplayVerbosity, AdapterCapabilities, IRenderer } from "@openacp/plugin-sdk";
+import type { OutgoingMessage, PermissionRequest, NotificationMessage, OpenACPCore, DisplayVerbosity, AdapterCapabilities } from "@openacp/plugin-sdk";
 import { MessagingAdapter } from "@openacp/plugin-sdk";
+import type { IRenderer } from "@openacp/plugin-sdk";
 import type { TeamsChannelConfig } from "./types.js";
 export declare class TeamsAdapter extends MessagingAdapter {
     readonly name = "teams";
@@ -9,8 +10,8 @@ export declare class TeamsAdapter extends MessagingAdapter {
     readonly core: OpenACPCore;
     private app;
     private teamsConfig;
-    private sendQueue;
-    private draftManager;
+    private rateLimiter;
+    private composer;
     private permissionHandler;
     private notificationChannelId?;
     private assistantSession;
@@ -24,16 +25,6 @@ export declare class TeamsAdapter extends MessagingAdapter {
      */
     private _sessionContexts;
     private _sessionOutputModes;
-    /**
-     * Per-session serial dispatch queues — matches Telegram's _dispatchQueues pattern.
-     * SessionBridge fires sendMessage() as fire-and-forget, so multiple events can arrive
-     * concurrently. Without serialization, fast handlers overtake slow ones, causing
-     * out-of-order delivery. This queue ensures events are processed in arrival order.
-     *
-     * Entries are replaced with Promise.resolve() once their chain settles, preventing
-     * unbounded closure growth for long-lived sessions.
-     */
-    private _dispatchQueues;
     /** Track processed activity IDs to handle Teams 15-second retry deduplication */
     private _processedActivities;
     private _processedCleanupTimer?;
@@ -113,19 +104,18 @@ export declare class TeamsAdapter extends MessagingAdapter {
     /**
      * Primary outbound dispatch — routes agent messages to Teams.
      *
-     * Wraps the base class `sendMessage` in a per-session promise chain (_dispatchQueues)
-     * so concurrent events fired from SessionBridge are serialized and delivered in order,
-     * preventing fast handlers from overtaking slower ones (matches Telegram pattern).
-     *
-     * Context is NOT deleted after dispatch — it persists from the inbound message handler
-     * and is available for the entire session lifetime, avoiding the race condition where
-     * async handlers lose their context mid-execution.
+     * Routes agent messages to Teams. The rate limiter handles per-conversation
+     * serialization and throttling.
      */
     sendMessage(sessionId: string, content: OutgoingMessage): Promise<void>;
-    protected handleThought(_sessionId: string, _content: OutgoingMessage, _verbosity: DisplayVerbosity): Promise<void>;
+    protected handleThought(sessionId: string, content: OutgoingMessage, _verbosity: DisplayVerbosity): Promise<void>;
     protected handleText(sessionId: string, content: OutgoingMessage): Promise<void>;
-    protected handleToolCall(sessionId: string, content: OutgoingMessage, verbosity: DisplayVerbosity): Promise<void>;
-    protected handleToolUpdate(sessionId: string, content: OutgoingMessage, verbosity: DisplayVerbosity): Promise<void>;
+    protected handleToolCall(sessionId: string, content: OutgoingMessage, _verbosity: DisplayVerbosity): Promise<void>;
+    protected handleToolUpdate(sessionId: string, content: OutgoingMessage, _verbosity: DisplayVerbosity): Promise<void>;
+    /** Set the session title on the composer if not already set. */
+    private ensureSessionTitle;
+    /** Per-session plan send mutex to prevent TOCTOU race on first plan message. */
+    private _planSending;
     protected handlePlan(sessionId: string, content: OutgoingMessage, _verbosity: DisplayVerbosity): Promise<void>;
     protected handleUsage(sessionId: string, content: OutgoingMessage, _verbosity: DisplayVerbosity): Promise<void>;
     /** Suggested quick-reply actions (Teams restricts these to 1:1 personal chat only) */
@@ -133,14 +123,15 @@ export declare class TeamsAdapter extends MessagingAdapter {
     /** Return QUICK_ACTIONS only if the conversation is 1:1 personal chat (Teams requirement) */
     private getQuickActions;
     /**
-     * Clean up all per-session state (contexts, drafts, dispatch queues, output modes).
-     * Removes both sessionId and threadId entries from _sessionContexts to prevent leaks.
+     * Clean up all per-session state (contexts, composer, output modes).
      */
     private cleanupSessionState;
     protected handleSessionEnd(sessionId: string, _content: OutgoingMessage): Promise<void>;
     protected handleError(sessionId: string, content: OutgoingMessage): Promise<void>;
     protected handleAttachment(sessionId: string, content: OutgoingMessage): Promise<void>;
     protected handleSystem(sessionId: string, content: OutgoingMessage): Promise<void>;
+    /** Sanitize metadata strings for safe markdown interpolation. */
+    private static sanitizeMd;
     protected handleModeChange(sessionId: string, content: OutgoingMessage): Promise<void>;
     protected handleConfigUpdate(sessionId: string, content: OutgoingMessage): Promise<void>;
     protected handleModelUpdate(sessionId: string, content: OutgoingMessage): Promise<void>;

package/dist/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAQ7D,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,WAAW,EAEX,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EAIV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAO,gBAAgB,EAAa,MAAM,qBAAqB,CAAC;AAGvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAmBrD,qBAAa,YAAa,SAAQ,gBAAgB;IAChD,QAAQ,CAAC,IAAI,WAAW;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAuB;IACnD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAOxC;IAEF,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,YAAY,CAAoB;IACxC,OAAO,CAAC,iBAAiB,CAAqB;IAE9C,OAAO,CAAC,qBAAqB,CAAC,CAAS;IACvC,OAAO,CAAC,gBAAgB,CAAwB;IAChD,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,WAAW,CAAC,CAAkB;IACtC,OAAO,CAAC,iBAAiB,CAAoB;IAE7C;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwF;IAChH,OAAO,CAAC,mBAAmB,CAAiC;IAE5D;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe,CAAoC;IAE3D,iFAAiF;IACjF,OAAO,CAAC,oBAAoB,CAA6B;IACzD,OAAO,CAAC,sBAAsB,CAAC,CAAiC;IAEhE,mHAAmH;IACnH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAM;IAC7C,OAAO,CAAC,oBAAoB,CAA8D;IAE1F,qEAAqE;IACrE,OAAO,CAAC,cAAc,CAAC,CAAuC;gBAElD,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB;IA6DzD,OAAO,CAAC,QAAQ,CAAS;IAEnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkDtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B3B,OAAO,CAAC,mBAAmB;IA6Q3B;;;;;;OAMG;YACW,kBAAkB;IAkBhC;;;;OAIG;YACW,gBAAgB;IAoF9B;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAkD5B;;;OAGG;IACH,OAAO,CAAC,yBAAyB;IAsCjC;;;OAGG;YACW,kBAAkB;IA+ChC,OAAO,CAAC,sBAAsB;YAOhB,iBAAiB;IAkB/B,OAAO,CAAC,kBAAkB;IAIpB,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;YAyBF,qBAAqB;YAwDrB,cAAc;IAsDtB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAcjC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMvC,yFAAyF;IACzF,OAAO,CAAC,UAAU;IAMlB;;;OAGG;YACW,eAAe;IA0C7B;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAQlD;IAEF,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI9C,yGAAyG;IACzG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAK/B;IAEF;;;OAGG;YACW,qBAAqB;IA8CnC,OAAO,CAAC,WAAW;IA8BnB;;;;;;;;;;OAUG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAgF7D,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;cAIzG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAYtE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;cAmDvG,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;cAczG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;cAepG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8DrH,sFAAsF;IACtF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CASnC;IAEF,6FAA6F;IAC7F,OAAO,CAAC,eAAe;IAQvB;;;OAGG;IACH,OAAO,CAAC,mBAAmB;cA4BX,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAQ7E,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAcvE,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cA+C5E,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAUxE,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAU5E,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAU9E,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAU7E,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAS5E,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAS1E,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBxF,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBnF,gBAAgB,CAAC,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoExE;;;;;;OAMG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgE3E;;;;;OAKG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IActE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB3D,YAAY,IAAI,MAAM;IAItB,SAAS,IAAI,MAAM;IAInB,qBAAqB,IAAI,MAAM,GAAG,IAAI;IAItC,oBAAoB,IAAI,MAAM,GAAG,IAAI;IAIrC,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI;CAG/E"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAQ7D,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,WAAW,EAEX,gBAAgB,EAChB,mBAAmB,EAIpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAO,gBAAgB,EAAgB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,KAAK,EAAiC,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAmBrD,qBAAa,YAAa,SAAQ,gBAAgB;IAChD,QAAQ,CAAC,IAAI,WAAW;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAsB;IAClD,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAOxC;IAEF,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,QAAQ,CAAwB;IACxC,OAAO,CAAC,iBAAiB,CAAqB;IAE9C,OAAO,CAAC,qBAAqB,CAAC,CAAS;IACvC,OAAO,CAAC,gBAAgB,CAAwB;IAChD,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,WAAW,CAAC,CAAkB;IACtC,OAAO,CAAC,iBAAiB,CAAoB;IAE7C;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAAwF;IAChH,OAAO,CAAC,mBAAmB,CAAiC;IAE5D,iFAAiF;IACjF,OAAO,CAAC,oBAAoB,CAA6B;IACzD,OAAO,CAAC,sBAAsB,CAAC,CAAiC;IAEhE,mHAAmH;IACnH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAM;IAC7C,OAAO,CAAC,oBAAoB,CAA8D;IAE1F,qEAAqE;IACrE,OAAO,CAAC,cAAc,CAAC,CAAuC;gBAElD,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB;IA6DzD,OAAO,CAAC,QAAQ,CAAS;IAEnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkDtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B3B,OAAO,CAAC,mBAAmB;IAoQ3B;;;;;;OAMG;YACW,kBAAkB;IAkBhC;;;;OAIG;YACW,gBAAgB;IAoF9B;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAkD5B;;;OAGG;IACH,OAAO,CAAC,yBAAyB;IAsCjC;;;OAGG;YACW,kBAAkB;IA+ChC,OAAO,CAAC,sBAAsB;YAOhB,iBAAiB;IAkB/B,OAAO,CAAC,kBAAkB;IAIpB,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;YAyBF,qBAAqB;YAwDrB,cAAc;IAsDtB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAcjC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMvC,yFAAyF;IACzF,OAAO,CAAC,UAAU;IAMlB;;;OAGG;YACW,eAAe;IA0C7B;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAQlD;IAEF,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI9C,yGAAyG;IACzG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAK/B;IAEF;;;OAGG;YACW,qBAAqB;IA8CnC,OAAO,CAAC,WAAW;IA8BnB;;;;;OAKG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAiE7D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;cASvG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAStE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;cAexG,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB1H,gEAAgE;IAChE,OAAO,CAAC,kBAAkB;IAM1B,gFAAgF;IAChF,OAAO,CAAC,YAAY,CAAqB;cAEzB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;cA6CpG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBrH,sFAAsF;IACtF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CASnC;IAEF,6FAA6F;IAC7F,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,mBAAmB;cAuBX,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAY7E,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAavE,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cA0C5E,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IASxF,iEAAiE;IACjE,OAAO,CAAC,MAAM,CAAC,UAAU;cAIT,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAS5E,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAU9E,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAS7E,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAS5E,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;cAS1E,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAexF,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBnF,gBAAgB,CAAC,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoExE;;;;;;OAMG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgE3E;;;;;OAKG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBtE,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB3D,YAAY,IAAI,MAAM;IAItB,SAAS,IAAI,MAAM;IAInB,qBAAqB,IAAI,MAAM,GAAG,IAAI;IAItC,oBAAoB,IAAI,MAAM,GAAG,IAAI;IAIrC,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI;CAG/E"}