@hualinge/relay-green-package 0.1.0

package/dist/auth/huawei-cas.js

@@ -0,0 +1,428 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from 'node:crypto';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { resolveHuaweiMaaSRuntimeConfig } from '../integrations/huawei-maas.js';
+import { HttpRequest, Signer } from '../utils/signer.js';
+const SERVER_STARTUP_TOKEN = randomBytes(16).toString('hex');
+const CAS_AUTH_UI_LOGIN_URL = 'https://auth.huaweicloud.com/authui/login.html';
+const CAS_AUTH_UI_LOGOUT_URL = 'https://auth.huaweicloud.com/authui/logout';
+const DEFAULT_CAS_BASE_URL = CAS_AUTH_UI_LOGIN_URL;
+const DEFAULT_CAS_SERVICE_CALLBACK_URL = 'https://versatile.cn-north-4.myhuaweicloud.com/v1/claw/cas/login/callback';
+const DEFAULT_CAS_BACKGROUND_IMAGE_URL = 'https://res.hc-cdn.com/AgentArts-Console/26.3.2/hws/assets/login/bg2.png';
+const DEFAULT_CAS_PORTAL_IMAGE_URL = 'https://res.hc-cdn.com/AgentArts-Console/26.3.2/hws/assets/login/ad2.png';
+const DEFAULT_TICKET_VALIDATE_URL = 'https://versatile.cn-north-4.myhuaweicloud.com/v1/claw/cas/login/ticket-validate';
+const DEFAULT_SUBSCRIPTION_URL = 'https://versatile.cn-north-4.myhuaweicloud.com/v1/claw/client-subscription';
+const DEFAULT_SESSION_TTL_MS = 12 * 60 * 60 * 1000;
+const DEFAULT_PENDING_TTL_MS = 10 * 60 * 1000;
+const INVITATION_HTML_ERROR_CODE = 'common.01010004';
+const INVITATION_HTML_ERROR_MESSAGE = '请确认账号状态，是否已<a href="https://support.huaweicloud.com/usermanual-account/account_auth_00001.html" target="_blank" rel="noreferrer">实名认证</a>或<a href="https://support.huaweicloud.com/billing_faq/billing_faq_1000000.html" target="_blank" rel="noreferrer">非欠费</a>状态。';
+const PROMOTION_CODE_ERROR_CODES = new Set(['AgentArts.11000008', 'AgentArts.11000009', INVITATION_HTML_ERROR_CODE]);
+const PROMOTION_CODE_ERROR_MESSAGES = {
+    'AgentArts.11000008': '邀请码无效，请重新输入',
+    'AgentArts.11000009': '邀请码不存在或者今日邀请码配额已用完',
+    [INVITATION_HTML_ERROR_CODE]: INVITATION_HTML_ERROR_MESSAGE,
+};
+function getSecureConfigDir(env) {
+    return readEnv(env, 'OFFICE_CLAW_SECURE_CONFIG_DIR') ?? join(env.HOME ?? process.cwd(), '.config', 'secure-config-nodejs');
+}
+function getSecureConfigPath(env, userId) {
+    return join(getSecureConfigDir(env), `${encodeURIComponent(userId)}.json`);
+}
+function hashPendingToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+function getEncryptionKey(env) {
+    const configured = readEnv(env, 'OFFICE_CLAW_SECURE_CONFIG_ENCRYPTION_KEY') ?? readEnv(env, 'OFFICE_CLAW_SESSION_SECRET') ?? readInstallSecret(env);
+    return createHash('sha256').update(configured).digest();
+}
+function isNoEntryError(error) {
+    return Boolean(error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT');
+}
+function readInstallSecret(env) {
+    const filePath = join(getSecureConfigDir(env), '.cas-profile-encryption-key');
+    try {
+        const existing = readFileSync(filePath, 'utf8').trim();
+        if (existing)
+            return existing;
+        throw new Error(`Failed to read CAS profile encryption key file: ${filePath}; file is empty`);
+    }
+    catch (error) {
+        if (!isNoEntryError(error)) {
+            throw error;
+        }
+    }
+    const secret = randomBytes(32).toString('base64url');
+    mkdirSync(dirname(filePath), { recursive: true });
+    writeFileSync(filePath, `${secret}\n`, { encoding: 'utf8', mode: 0o600 });
+    return secret;
+}
+function encryptJson(env, value) {
+    const iv = randomBytes(12);
+    const cipher = createCipheriv('aes-256-gcm', getEncryptionKey(env), iv);
+    const encrypted = Buffer.concat([cipher.update(JSON.stringify(value), 'utf8'), cipher.final()]);
+    const payload = {
+        version: 1,
+        alg: 'aes-256-gcm',
+        iv: iv.toString('base64url'),
+        tag: cipher.getAuthTag().toString('base64url'),
+        data: encrypted.toString('base64url'),
+    };
+    return JSON.stringify(payload);
+}
+function decryptJson(env, raw) {
+    const payload = JSON.parse(raw);
+    if (payload.version !== 1 || payload.alg !== 'aes-256-gcm')
+        throw new Error('Unsupported encrypted payload');
+    const decipher = createDecipheriv('aes-256-gcm', getEncryptionKey(env), Buffer.from(payload.iv, 'base64url'));
+    decipher.setAuthTag(Buffer.from(payload.tag, 'base64url'));
+    const decrypted = Buffer.concat([decipher.update(Buffer.from(payload.data, 'base64url')), decipher.final()]);
+    return JSON.parse(decrypted.toString('utf8'));
+}
+function getPendingConfigPath(env, pendingTokenHash) {
+    return join(getSecureConfigDir(env), `pending-${pendingTokenHash}.json`);
+}
+function readEnv(env, key) {
+    const value = env[key]?.trim();
+    return value || undefined;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function unwrapPayload(value) {
+    if (!isRecord(value))
+        return null;
+    if (isRecord(value.data))
+        return value.data;
+    if (isRecord(value.result))
+        return value.result;
+    return value;
+}
+function extractModelInfo(payload) {
+    if (!payload)
+        return undefined;
+    if (isRecord(payload.model_info))
+        return payload.model_info;
+    const subscriptionPayload = unwrapPayload(payload.subscription);
+    if (isRecord(subscriptionPayload?.model_info))
+        return subscriptionPayload.model_info;
+    return undefined;
+}
+function hasActiveSubscription(payload) {
+    if (!payload)
+        return false;
+    return payload.subscription !== null && payload.subscription !== undefined;
+}
+function resolveCasServiceCallbackUrl(options) {
+    const env = options.env ?? process.env;
+    return (options.serviceCallbackUrl ??
+        readEnv(env, 'OFFICE_CLAW_CAS_SERVICE_CALLBACK_URL') ??
+        readEnv(env, 'CAS_CALLBACK_SERVICE_URL') ??
+        DEFAULT_CAS_SERVICE_CALLBACK_URL);
+}
+function resolveCasVisualAssets(options) {
+    const env = options.env ?? process.env;
+    const backgroundImageUrl = options.backgroundImageUrl ??
+        readEnv(env, 'OFFICE_CLAW_CAS_BACKGROUND_IMAGE_URL') ??
+        readEnv(env, 'CAS_BACKGROUND_IMAGE_URL') ??
+        DEFAULT_CAS_BACKGROUND_IMAGE_URL;
+    const portalImageUrl = options.portalImageUrl ??
+        readEnv(env, 'OFFICE_CLAW_CAS_PORTAL_IMAGE_URL') ??
+        readEnv(env, 'CAS_PORTAL_IMAGE_URL') ??
+        DEFAULT_CAS_PORTAL_IMAGE_URL;
+    return { backgroundImageUrl, portalImageUrl };
+}
+function buildCasLoginUrl(options) {
+    const env = options.env ?? process.env;
+    const configuredLoginUrl = readEnv(env, 'OFFICE_CLAW_CAS_LOGIN_URL') ?? readEnv(env, 'CAS_LOGIN_URL');
+    if (configuredLoginUrl)
+        return configuredLoginUrl;
+    const casBaseUrl = options.casBaseUrl ?? readEnv(env, 'OFFICE_CLAW_CAS_BASE_URL') ?? DEFAULT_CAS_BASE_URL;
+    const serviceCallbackUrl = resolveCasServiceCallbackUrl(options);
+    const { backgroundImageUrl, portalImageUrl } = resolveCasVisualAssets(options);
+    const url = new URL(casBaseUrl);
+    if (!url.searchParams.has('locale'))
+        url.searchParams.set('locale', 'zh-cn');
+    if (!url.searchParams.has('hide_banner'))
+        url.searchParams.set('hide_banner', 'true');
+    if (!url.searchParams.has('hide_foot'))
+        url.searchParams.set('hide_foot', 'true');
+    url.searchParams.set('background_img_url', backgroundImageUrl);
+    url.searchParams.set('portal_img_url', portalImageUrl);
+    url.searchParams.set('service', serviceCallbackUrl);
+    if (!url.hash)
+        url.hash = '/login';
+    return url.toString();
+}
+function buildCasLogoutUrl(options) {
+    const env = options.env ?? process.env;
+    const configuredLogoutUrl = readEnv(env, 'OFFICE_CLAW_CAS_LOGOUT_URL') ?? readEnv(env, 'CAS_LOGOUT_URL');
+    if (configuredLogoutUrl)
+        return configuredLogoutUrl;
+    const serviceCallbackUrl = resolveCasServiceCallbackUrl(options);
+    const { backgroundImageUrl, portalImageUrl } = resolveCasVisualAssets(options);
+    const loginService = `${CAS_AUTH_UI_LOGIN_URL}?locale=zh-cn&hide_banner=true&hide_foot=true` +
+        `&background_img_url=${backgroundImageUrl}&portal_img_url=${portalImageUrl}&service=${serviceCallbackUrl}#/login`;
+    return `${CAS_AUTH_UI_LOGOUT_URL}?service=${encodeURIComponent(loginService)}`;
+}
+function normalizeProfile(raw, expiresAt) {
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const record = raw;
+    const userId = typeof record.user_id === 'string' ? record.user_id : typeof record.userId === 'string' ? record.userId : '';
+    if (!userId.trim())
+        return null;
+    const userName = typeof record.user_name === 'string' ? record.user_name : typeof record.userName === 'string' ? record.userName : userId;
+    return {
+        ...record,
+        user_id: userId,
+        user_name: userName,
+        expiresAt,
+        serverStartId: SERVER_STARTUP_TOKEN,
+    };
+}
+function getStableUserId(profile) {
+    const domain = profile.domain_id || profile.domain_name;
+    const user = profile.user_name || profile.user_id;
+    return domain ? `${domain}:${user}` : profile.user_id;
+}
+async function readStoredProfile(env, userId) {
+    try {
+        const raw = await readFile(getSecureConfigPath(env, userId), 'utf8');
+        return decryptJson(env, raw);
+    }
+    catch {
+        return null;
+    }
+}
+async function readPendingProfile(env, pendingToken) {
+    try {
+        const raw = await readFile(getPendingConfigPath(env, hashPendingToken(pendingToken)), 'utf8');
+        return decryptJson(env, raw);
+    }
+    catch {
+        return null;
+    }
+}
+async function writeStoredProfile(env, profile) {
+    const filePath = getSecureConfigPath(env, getStableUserId(profile));
+    await mkdir(dirname(filePath), { recursive: true });
+    await writeFile(filePath, encryptJson(env, profile), { encoding: 'utf8', mode: 0o600 });
+}
+async function writePendingProfile(env, pendingToken, profile, pendingTtlMs) {
+    const filePath = getPendingConfigPath(env, hashPendingToken(pendingToken));
+    await mkdir(dirname(filePath), { recursive: true });
+    await writeFile(filePath, encryptJson(env, { profile, expiresAt: Date.now() + pendingTtlMs, attempts: 0 }), { encoding: 'utf8', mode: 0o600 });
+}
+async function deleteStoredProfile(env, userId) {
+    await rm(getSecureConfigPath(env, userId), { force: true });
+}
+async function deletePendingProfile(env, pendingToken) {
+    await rm(getPendingConfigPath(env, hashPendingToken(pendingToken)), { force: true });
+}
+function createPendingFailure(message, userId, pendingToken, errorCode) {
+    return { success: false, needCode: true, message, userId, pendingToken, ...(errorCode ? { errorCode } : {}) };
+}
+function getSubscriptionErrorCode(value) {
+    const payload = unwrapPayload(value);
+    const raw = payload?.error_code ?? payload?.errorCode ?? payload?.code;
+    return typeof raw === 'string' ? raw : '';
+}
+function getPromotionCodeErrorMessage(errorCode) {
+    return PROMOTION_CODE_ERROR_MESSAGES[errorCode];
+}
+async function validateCasTicket(fetchImpl, ticketValidateUrl, ticket, serviceCallbackUrl, expiresAt) {
+    const url = new URL(ticketValidateUrl);
+    url.searchParams.set('ticket', ticket);
+    if (serviceCallbackUrl)
+        url.searchParams.set('service', serviceCallbackUrl);
+    const response = await fetchImpl(url.toString(), { method: 'GET' });
+    if (!response.ok)
+        return null;
+    const data = (await response.json());
+    const payload = unwrapPayload(data);
+    const profilePayload = payload && 'user' in payload ? payload.user : payload;
+    const profile = normalizeProfile(profilePayload, expiresAt);
+    if (!profile)
+        return null;
+    const profileRecord = unwrapPayload(profilePayload);
+    const modelInfo = extractModelInfo(payload) ?? extractModelInfo(profileRecord);
+    if (modelInfo || hasActiveSubscription(payload) || hasActiveSubscription(profileRecord)) {
+        profile.model_info = modelInfo ?? {};
+    }
+    return profile;
+}
+function toPrincipal(profile) {
+    const { model_info: modelInfo = {}, ...providerStateRest } = profile;
+    const providerState = {
+        ...providerStateRest,
+        modelInfo,
+    };
+    return {
+        userId: getStableUserId(profile),
+        displayName: profile.user_name,
+        expiresAt: new Date(profile.expiresAt),
+        providerState,
+    };
+}
+function hasModelInfo(profile) {
+    return Boolean(profile.model_info && typeof profile.model_info === 'object');
+}
+async function subscribeWithPromotionCode(fetchImpl, subscriptionUrl, profile, promotionCode) {
+    if (!profile.access || !profile.secret)
+        return null;
+    const body = JSON.stringify({ promotion_code: promotionCode });
+    const headers = {
+        'Content-Type': 'application/json;charset=utf8',
+        ...(profile.sts_token ? { 'X-Security-Token': profile.sts_token } : {}),
+    };
+    const signer = new Signer();
+    signer.Key = profile.access;
+    signer.Secret = profile.secret;
+    const signed = signer.Sign(new HttpRequest('POST', subscriptionUrl, headers, body));
+    const response = await fetchImpl(subscriptionUrl, {
+        method: 'POST',
+        headers: signed.headers,
+        body,
+    });
+    if (!response.ok) {
+        try {
+            const errorBody = await response.json();
+            const errorCode = getSubscriptionErrorCode(errorBody);
+            const errorMessage = getPromotionCodeErrorMessage(errorCode);
+            console.warn('[Huawei CAS] subscribeWithPromotionCode failed', {
+                subscriptionUrl,
+                status: response.status,
+                errorCode,
+                errorMessage,
+                errorBody,
+            });
+            return { errorCode, errorMessage };
+        }
+        catch (err) {
+            console.warn('[Huawei CAS] subscribeWithPromotionCode failed to parse error response', err);
+            return { errorCode: '' };
+        }
+    }
+    const data = (await response.json());
+    const subscription = data.subscription && typeof data.subscription === 'object' ? data.subscription : null;
+    const modelInfo = data.model_info ?? subscription?.model_info;
+    console.debug('[Huawei CAS] subscribeWithPromotionCode response', {
+        subscriptionUrl,
+        subscription,
+        modelInfoPresent: Boolean(modelInfo && typeof modelInfo === 'object'),
+    });
+    return modelInfo && typeof modelInfo === 'object' ? { modelInfo: modelInfo } : null;
+}
+export function createHuaweiCasAuthProvider(options = {}) {
+    const env = options.env ?? process.env;
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const ticketValidateUrl = options.ticketValidateUrl ?? readEnv(env, 'OFFICE_CLAW_CAS_TICKET_VALIDATE_URL') ?? DEFAULT_TICKET_VALIDATE_URL;
+    const subscriptionUrl = options.subscriptionUrl ?? readEnv(env, 'OFFICE_CLAW_CAS_SUBSCRIPTION_URL') ?? DEFAULT_SUBSCRIPTION_URL;
+    const serviceCallbackUrl = options.serviceCallbackUrl ?? readEnv(env, 'OFFICE_CLAW_CAS_SERVICE_CALLBACK_URL');
+    const configuredSessionTtlMs = Number(readEnv(env, 'OFFICE_CLAW_CAS_SESSION_TTL_MS'));
+    const sessionTtlMs = options.sessionTtlMs ?? (Number.isFinite(configuredSessionTtlMs) && configuredSessionTtlMs > 0 ? configuredSessionTtlMs : DEFAULT_SESSION_TTL_MS);
+    const configuredPendingTtlMs = Number(readEnv(env, 'OFFICE_CLAW_CAS_PENDING_TTL_MS'));
+    const pendingTtlMs = options.pendingTtlMs ?? (Number.isFinite(configuredPendingTtlMs) && configuredPendingTtlMs > 0 ? configuredPendingTtlMs : DEFAULT_PENDING_TTL_MS);
+    const canCreateModel = options.canCreateModel ?? readEnv(env, 'CAN_CREATE_MODEL') === '1';
+    const loginUrl = buildCasLoginUrl(options);
+    const logoutUrl = buildCasLogoutUrl(options);
+    return {
+        id: 'huawei-cas',
+        displayName: 'Huawei Cloud (CAS)',
+        presentation: {
+            mode: 'redirect',
+            redirectUrl: loginUrl,
+            fields: [],
+            description: 'Sign in with your Huawei Cloud account',
+        },
+        async authenticate() {
+            return { success: false, message: 'Use callback flow for CAS provider' };
+        },
+        async handleCallback(params) {
+            const ticket = params.ticket?.trim();
+            const promotionCode = params.promotionCode?.trim();
+            const pendingToken = params.pendingToken?.trim();
+            if (!ticket && promotionCode && pendingToken) {
+                const pending = await readPendingProfile(env, pendingToken);
+                if (!pending || pending.expiresAt < Date.now()) {
+                    await deletePendingProfile(env, pendingToken);
+                    return { success: false, needCode: true, message: '登录状态已失效，请重新登录' };
+                }
+                const userId = getStableUserId(pending.profile);
+                const subscription = await subscribeWithPromotionCode(fetchImpl, subscriptionUrl, pending.profile, promotionCode);
+                if (!subscription?.modelInfo) {
+                    pending.attempts += 1;
+                    if (pending.attempts >= 5) {
+                        await deletePendingProfile(env, pendingToken);
+                        return { success: false, needCode: true, message: '邀请码错误次数过多，请重新登录' };
+                    }
+                    await writeFile(getPendingConfigPath(env, hashPendingToken(pendingToken)), encryptJson(env, pending), { encoding: 'utf8', mode: 0o600 });
+                    if (subscription?.errorCode === INVITATION_HTML_ERROR_CODE) {
+                        // Trusted static backend text for common.01010004 only; no external input is interpolated.
+                        return createPendingFailure(INVITATION_HTML_ERROR_MESSAGE, userId, pendingToken, INVITATION_HTML_ERROR_CODE);
+                    }
+                    return createPendingFailure(subscription?.errorMessage ?? '邀请码无效，请重新输入', userId, pendingToken, subscription?.errorCode);
+                }
+                pending.profile.model_info = subscription.modelInfo;
+                await writeStoredProfile(env, pending.profile);
+                await deletePendingProfile(env, pendingToken);
+                return { success: true, principal: toPrincipal(pending.profile) };
+            }
+            if (!ticket)
+                return { success: false, message: 'Missing CAS ticket' };
+            const profile = await validateCasTicket(fetchImpl, ticketValidateUrl, ticket, serviceCallbackUrl, Date.now() + sessionTtlMs);
+            if (!profile)
+                return { success: false, message: 'Invalid CAS ticket' };
+            const userId = getStableUserId(profile);
+            const nextPendingToken = randomBytes(32).toString('base64url');
+            if (!hasModelInfo(profile) && promotionCode) {
+                const subscription = await subscribeWithPromotionCode(fetchImpl, subscriptionUrl, profile, promotionCode);
+                if (!subscription?.modelInfo) {
+                    await writePendingProfile(env, nextPendingToken, profile, pendingTtlMs);
+                    if (subscription?.errorCode === INVITATION_HTML_ERROR_CODE) {
+                        // Trusted static backend text for common.01010004 only; no external input is interpolated.
+                        return createPendingFailure(INVITATION_HTML_ERROR_MESSAGE, userId, nextPendingToken, INVITATION_HTML_ERROR_CODE);
+                    }
+                    return createPendingFailure(subscription?.errorMessage ?? '邀请码无效，请重新输入', userId, nextPendingToken, subscription?.errorCode);
+                }
+                profile.model_info = subscription.modelInfo;
+            }
+            if (!hasModelInfo(profile)) {
+                await writePendingProfile(env, nextPendingToken, profile, pendingTtlMs);
+                return createPendingFailure('请输入邀请码后再登录', userId, nextPendingToken);
+            }
+            await writeStoredProfile(env, profile);
+            return { success: true, principal: toPrincipal(profile) };
+        },
+        async restoreSession(userId) {
+            const stored = await readStoredProfile(env, userId);
+            if (!stored)
+                return null;
+            if (stored.serverStartId !== SERVER_STARTUP_TOKEN || stored.expiresAt < Date.now()) {
+                await deleteStoredProfile(env, userId);
+                return null;
+            }
+            return toPrincipal(stored);
+        },
+        async logout(session) {
+            await deleteStoredProfile(env, session.userId);
+        },
+        async getPublicConfig() {
+            return { hascode: true, canCreateModel, loginUrl, logoutUrl };
+        },
+        resolveProtocolCredential(protocol, session) {
+            if (protocol !== 'huawei_maas')
+                return null;
+            try {
+                return resolveHuaweiMaaSRuntimeConfig(session.userId, () => ({
+                    providerState: session.providerState,
+                }));
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=huawei-cas.js.map

package/dist/auth/huawei-cas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"huawei-cas.js","sourceRoot":"","sources":["../../src/auth/huawei-cas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,oBAAoB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7D,MAAM,qBAAqB,GAAG,gDAAgD,CAAC;AAC/E,MAAM,sBAAsB,GAAG,4CAA4C,CAAC;AAC5E,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AACnD,MAAM,gCAAgC,GAAG,2EAA2E,CAAC;AACrH,MAAM,gCAAgC,GAAG,0EAA0E,CAAC;AACpH,MAAM,4BAA4B,GAAG,0EAA0E,CAAC;AAChH,MAAM,2BAA2B,GAAG,kFAAkF,CAAC;AACvH,MAAM,wBAAwB,GAAG,4EAA4E,CAAC;AAC9G,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,0BAA0B,GAAG,iBAAiB,CAAC;AACrD,MAAM,6BAA6B,GACjC,sQAAsQ,CAAC;AACzQ,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,0BAA0B,CAAC,CAAC,CAAC;AACrH,MAAM,6BAA6B,GAA2B;IAC5D,oBAAoB,EAAE,aAAa;IACnC,oBAAoB,EAAE,oBAAoB;IAC1C,CAAC,0BAA0B,CAAC,EAAE,6BAA6B;CAC5D,CAAC;AAsDF,SAAS,kBAAkB,CAAC,GAAsB;IAChD,OAAO,OAAO,CAAC,GAAG,EAAE,+BAA+B,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAsB,EAAE,MAAc;IACjE,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,0CAA0C,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,4BAA4B,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpJ,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC9H,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,6BAA6B,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,iBAAiB,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,QAAQ,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,GAAsB,EAAE,KAAc;IACzD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChG,MAAM,OAAO,GAAqB;QAChC,OAAO,EAAE,CAAC;QACV,GAAG,EAAE,aAAa;QAClB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5B,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9C,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;KACtC,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAI,GAAsB,EAAE,GAAW;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IACpD,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7G,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9G,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7G,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;AACrD,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAsB,EAAE,gBAAwB;IAC5E,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,WAAW,gBAAgB,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,OAAO,CAAC,GAAsB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/B,OAAO,KAAK,IAAI,SAAS,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAC5C,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAuC;IAC/D,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC;IAE5D,MAAM,mBAAmB,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,mBAAmB,EAAE,UAAU,CAAC;QAAE,OAAO,mBAAmB,CAAC,UAAU,CAAC;IAErF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAuC;IACpE,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC;AAC7E,CAAC;AAED,SAAS,4BAA4B,CAAC,OAAiC;IACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,kBAAkB;QAC1B,OAAO,CAAC,GAAG,EAAE,sCAAsC,CAAC;QACpD,OAAO,CAAC,GAAG,EAAE,0BAA0B,CAAC;QACxC,gCAAgC,CACjC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAiC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,kBAAkB,GACtB,OAAO,CAAC,kBAAkB;QAC1B,OAAO,CAAC,GAAG,EAAE,sCAAsC,CAAC;QACpD,OAAO,CAAC,GAAG,EAAE,0BAA0B,CAAC;QACxC,gCAAgC,CAAC;IACnC,MAAM,cAAc,GAClB,OAAO,CAAC,cAAc;QACtB,OAAO,CAAC,GAAG,EAAE,kCAAkC,CAAC;QAChD,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC;QACpC,4BAA4B,CAAC;IAC/B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAiC;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,EAAE,2BAA2B,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACtG,IAAI,kBAAkB;QAAE,OAAO,kBAAkB,CAAC;IAElD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,0BAA0B,CAAC,IAAI,oBAAoB,CAAC;IAC1G,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAEhC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACtF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAClF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;IAC/D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IACvD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IACnC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAiC;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE,4BAA4B,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACzG,IAAI,mBAAmB;QAAE,OAAO,mBAAmB,CAAC;IAEpD,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAE/E,MAAM,YAAY,GAChB,GAAG,qBAAqB,+CAA+C;QACvE,uBAAuB,kBAAkB,mBAAmB,cAAc,YAAY,kBAAkB,SAAS,CAAC;IAEpH,OAAO,GAAG,sBAAsB,YAAY,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY,EAAE,SAAiB;IACvD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5H,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1I,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,QAAQ;QACnB,SAAS;QACT,aAAa,EAAE,oBAAoB;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAuB;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAClD,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAsB,EAAE,MAAc;IACrE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,OAAO,WAAW,CAAiB,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAsB,EAAE,YAAoB;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9F,OAAO,WAAW,CAAoB,GAAG,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAsB,EAAE,OAAuB;IAC/E,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAsB,EAAE,YAAoB,EAAE,OAAuB,EAAE,YAAoB;IAC5H,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACjJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAsB,EAAE,MAAc;IACvE,MAAM,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,GAAsB,EAAE,YAAoB;IAC9E,MAAM,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,MAAc,EAAE,YAAoB,EAAE,SAAkB;IACrG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAwF,CAAC;AACtM,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,IAAI,CAAC;IACvE,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,4BAA4B,CAAC,SAAiB;IACrD,OAAO,6BAA6B,CAAC,SAAS,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,SAAuB,EACvB,iBAAyB,EACzB,MAAc,EACd,kBAAsC,EACtC,SAAiB;IAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,kBAAkB;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAC;IAChD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,OAAO,IAAI,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7E,MAAM,OAAO,GAAG,gBAAgB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,aAAa,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC/E,IAAI,SAAS,IAAI,qBAAqB,CAAC,OAAO,CAAC,IAAI,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,UAAU,GAAG,SAAS,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAC1C,MAAM,EAAE,UAAU,EAAE,SAAS,GAAG,EAAE,EAAE,GAAG,iBAAiB,EAAE,GAAG,OAAO,CAAC;IACrE,MAAM,aAAa,GAA2B;QAC5C,GAAG,iBAAiB;QACpB,SAAS;KACV,CAAC;IACF,OAAO;QACL,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE,OAAO,CAAC,SAAS;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB;IAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,SAAuB,EACvB,eAAuB,EACvB,OAAuB,EACvB,aAAqB;IAErB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,+BAA+B;QAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5B,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,eAAe,EAAE;QAChD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI;KACL,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,YAAY,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAC7D,eAAe;gBACf,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS;gBACT,YAAY;gBACZ,SAAS;aACV,CAAC,CAAC;YACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,wEAAwE,EAAE,GAAG,CAAC,CAAC;YAC5F,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,YAAwC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxI,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,YAAY,EAAE,UAAU,CAAC;IAC9D,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE;QAChE,eAAe;QACf,YAAY;QACZ,gBAAgB,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC;KACtE,CAAC,CAAC;IACH,OAAO,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAoC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAoC,EAAE;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,EAAE,qCAAqC,CAAC,IAAI,2BAA2B,CAAC;IAC1I,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,EAAE,kCAAkC,CAAC,IAAI,wBAAwB,CAAC;IAChI,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAC9G,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,sBAAsB,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACvK,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,sBAAsB,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACvK,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,KAAK,GAAG,CAAC;IAC1F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE7C,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,oBAAoB;QACjC,YAAY,EAAE;YACZ,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,wCAAwC;SACtD;QAED,KAAK,CAAC,YAAY;YAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;QAC3E,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;YACrC,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;YACnD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC5D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAC/C,MAAM,oBAAoB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;oBAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;gBACtE,CAAC;gBACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAClH,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;oBAC7B,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACtB,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;wBAC1B,MAAM,oBAAoB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;wBAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;oBACxE,CAAC;oBACD,MAAM,SAAS,CAAC,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBACzI,IAAI,YAAY,EAAE,SAAS,KAAK,0BAA0B,EAAE,CAAC;wBAC3D,2FAA2F;wBAC3F,OAAO,oBAAoB,CAAC,6BAA6B,EAAE,MAAM,EAAE,YAAY,EAAE,0BAA0B,CAAC,CAAC;oBAC/G,CAAC;oBACD,OAAO,oBAAoB,CAAC,YAAY,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC1H,CAAC;gBACD,OAAO,CAAC,OAAO,CAAC,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC;gBACpD,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC/C,MAAM,oBAAoB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,CAAC;YACD,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;YAEtE,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC;YAC7H,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;YAEvE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,gBAAgB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/D,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;gBAC5C,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;gBAC1G,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;oBAC7B,MAAM,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;oBACxE,IAAI,YAAY,EAAE,SAAS,KAAK,0BAA0B,EAAE,CAAC;wBAC3D,2FAA2F;wBAC3F,OAAO,oBAAoB,CAAC,6BAA6B,EAAE,MAAM,EAAE,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;oBACnH,CAAC;oBACD,OAAO,oBAAoB,CAAC,YAAY,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC9H,CAAC;gBACD,OAAO,CAAC,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC;YAC9C,CAAC;YAED,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;gBACxE,OAAO,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM;YACzB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,IAAI,MAAM,CAAC,aAAa,KAAK,oBAAoB,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACnF,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,KAAK,CAAC,eAAe;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAChE,CAAC;QAED,yBAAyB,CAAC,QAAgB,EAAE,OAAwB;YAClE,IAAI,QAAQ,KAAK,aAAa;gBAAE,OAAO,IAAI,CAAC;YAC5C,IAAI,CAAC;gBACH,OAAO,8BAA8B,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC3D,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/auth/huawei-iam.d.ts

@@ -0,0 +1,7 @@
+import type { AuthProvider } from '@openjiuwen/relay-api-server-contracts/auth';
+interface HuaweiIamAuthProviderOptions {
+    fetchImpl?: typeof fetch;
+}
+export declare function createHuaweiIamAuthProvider(options?: HuaweiIamAuthProviderOptions): AuthProvider;
+export {};
+//# sourceMappingURL=huawei-iam.d.ts.map

package/dist/auth/huawei-iam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"huawei-iam.d.ts","sourceRoot":"","sources":["../../src/auth/huawei-iam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAuB,YAAY,EAAmB,MAAM,6CAA6C,CAAC;AA6BtH,UAAU,4BAA4B;IACpC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AA0GD,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,4BAAiC,GAAG,YAAY,CAsGpG"}

package/dist/auth/huawei-iam.js

@@ -0,0 +1,177 @@
+import { resolveHuaweiMaaSRuntimeConfig } from '../integrations/huawei-maas.js';
+const IAM_URL = 'https://iam.myhuaweicloud.com';
+const DEFAULT_PROMOTION_CODE = 'huawei_dev_blue';
+async function getErrorMessage(response) {
+    const data = (await response.json());
+    return {
+        error_code: typeof data.error_code === 'string' ? data.error_code : String(response.status),
+        error_message: typeof data.error_message === 'string'
+            ? data.error_message
+            : typeof data.error_msg === 'string'
+                ? data.error_msg
+                : response.statusText,
+    };
+}
+async function getTokens(fetchImpl, domainName, userName, password) {
+    try {
+        const authResponse = await fetchImpl(`${IAM_URL}/v3/auth/tokens`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json;charset=utf8' },
+            body: JSON.stringify({
+                auth: {
+                    identity: {
+                        methods: ['password'],
+                        password: {
+                            user: {
+                                domain: { name: domainName },
+                                name: userName,
+                                password,
+                            },
+                        },
+                    },
+                    scope: { project: { name: 'cn-north-4' } },
+                },
+            }),
+        });
+        if (!authResponse.ok) {
+            const { error_code, error_message } = await getErrorMessage(authResponse);
+            throw new Error(`认证失败，错误码: ${error_code}, 错误信息: ${error_message}`);
+        }
+        const data = (await authResponse.json());
+        const tokenObj = data.token;
+        const userObj = tokenObj?.user;
+        const domainObj = userObj?.domain;
+        const domainId = domainObj?.id || domainName;
+        const expiresAt = tokenObj?.expires_at || new Date().toISOString();
+        return {
+            success: true,
+            token: authResponse.headers.get('x-subject-token') ?? '',
+            expiresAt,
+            domainId,
+        };
+    }
+    catch (error) {
+        console.error('获取IAM Token失败:', error);
+        return { success: false, message: '登录失败' };
+    }
+}
+async function subscriptionClaw(fetchImpl, token, rememberedPromotionCode, promotionCode) {
+    try {
+        const subResponse = await fetchImpl(`https://versatile.cn-north-4.myhuaweicloud.com/v1/claw/client-subscription`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json;charset=utf8',
+                'X-Auth-Token': token,
+            },
+            body: JSON.stringify({
+                promotion_code: promotionCode || rememberedPromotionCode || DEFAULT_PROMOTION_CODE,
+            }),
+        });
+        if (!subResponse.ok) {
+            const { error_code, error_message } = await getErrorMessage(subResponse);
+            const needCode = ['AgentArts.11000008', 'AgentArts.11000009'].includes(error_code);
+            console.error(`开通客户端失败，错误码: ${error_code}, 错误信息: ${error_message}`);
+            return { success: false, message: needCode ? '邀请码无效，请重新输入' : '开通失败', needCode };
+        }
+        const data = (await subResponse.json());
+        return { success: true, modelInfo: data.model_info ?? {} };
+    }
+    catch (error) {
+        console.error('开通客户端claw失败:', error);
+        return { success: false, message: '开通失败' };
+    }
+}
+export function createHuaweiIamAuthProvider(options = {}) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    let lastPromotionCode = null;
+    return {
+        id: 'huawei-iam',
+        displayName: 'Huawei IAM',
+        presentation: {
+            mode: 'form',
+            submitLabel: '登录',
+            fields: [
+                {
+                    name: 'userType',
+                    label: '账号类型',
+                    type: 'select',
+                    required: true,
+                    options: [
+                        { value: 'huawei', label: '华为云账号' },
+                        { value: 'iam', label: 'IAM 用户' },
+                    ],
+                },
+                { name: 'domainName', label: '租户 / 域名', type: 'text', required: true },
+                { name: 'userName', label: 'IAM 用户名', type: 'text', required: false },
+                { name: 'password', label: '密码', type: 'password', required: true },
+                { name: 'promotionCode', label: '邀请码', type: 'text', required: false },
+            ],
+            description: 'Authenticate with Huawei IAM.',
+        },
+        async getPublicConfig() {
+            return { hascode: Boolean(lastPromotionCode || DEFAULT_PROMOTION_CODE) };
+        },
+        /**
+         * Core authentication: credentials → identity.
+         * Also performs MaaS subscription check — if an invite code is required,
+         * authentication fails with `needCode: true` BEFORE session creation.
+         */
+        async authenticate(input) {
+            const raw = input.credentials;
+            const domainName = typeof raw.domainName === 'string' ? raw.domainName.trim() : '';
+            const password = typeof raw.password === 'string' ? raw.password : '';
+            const userType = raw.userType === 'iam' ? 'iam' : 'huawei';
+            const userName = typeof raw.userName === 'string' ? raw.userName.trim() : '';
+            const name = userType === 'huawei' ? domainName : userName;
+            if (!domainName || !password || !name) {
+                return { success: false, message: '用户名或密码错误' };
+            }
+            const tokenResult = await getTokens(fetchImpl, domainName, name, password);
+            if (!tokenResult.success || !tokenResult.token) {
+                return { success: false, message: tokenResult.message || '登录失败' };
+            }
+            const promotionCode = typeof raw.promotionCode === 'string' && raw.promotionCode.trim() ? raw.promotionCode.trim() : undefined;
+            // Subscription check — must happen before session creation so needCode
+            // can surface to the frontend as an auth failure.
+            const subResult = await subscriptionClaw(fetchImpl, tokenResult.token, lastPromotionCode, promotionCode);
+            if (!subResult.success) {
+                if (subResult.needCode) {
+                    lastPromotionCode = null;
+                    return { success: false, message: subResult.message || '邀请码无效，请重新输入', needCode: true };
+                }
+                return { success: false, message: subResult.message || '开通失败' };
+            }
+            if (promotionCode) {
+                lastPromotionCode = promotionCode;
+            }
+            const providerState = {
+                token: tokenResult.token,
+                modelInfo: subResult.modelInfo ?? {},
+                domainId: tokenResult.domainId || domainName,
+                promotionCode,
+            };
+            return {
+                success: true,
+                principal: {
+                    userId: `${domainName}:${name}`,
+                    displayName: name,
+                    expiresAt: tokenResult.expiresAt ? new Date(tokenResult.expiresAt) : null,
+                    providerState,
+                },
+            };
+        },
+        resolveProtocolCredential(protocol, session) {
+            if (protocol !== 'huawei_maas')
+                return null;
+            try {
+                return resolveHuaweiMaaSRuntimeConfig(session.userId, () => ({
+                    providerState: session.providerState,
+                }));
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=huawei-iam.js.map