@open-everywhere/provider-teams 0.0.0-stage → 0.1.0

package/dist/agent/channels/teams-reaction-feedback.js

@@ -0,0 +1,108 @@
+// THE TEAMS REACTION-FEEDBACK ARM (OPE-1502) — a reaction on the agent's own message becomes a
+// durable feedback signal, the same way it already does on Slack and Discord.
+//
+// The inbound half is FREE on this surface: Teams already delivers `messageReaction` activities, and
+// the stop arm (channels/teams-stop.ts) already parses them. What was missing is the second consumer
+// — the one that turns a 👍 or a 👎 on the agent's own reply into a row a person can query. This
+// module is that consumer, and it adds NO second parse and NO second ingress: it takes the activity
+// the stop arm already parsed and hands it core's surface-neutral `ingestReaction`.
+//
+// ── WHAT MICROSOFT DELIVERS, AND WHY IT SHAPES THE GUARDS
+//
+//  1. 🔴 TEAMS SENDS THE EVENT ONLY FOR MESSAGES THE AGENT ITSELF SENT ("a user adds or removes
+//     reactions to a message, which was sent by your agent" — learn.microsoft.com, "Conversation
+//     events"). That FENCE is what makes the feedback case the common case here rather than the rare
+//     one: a reaction on somebody else's message never reaches this arm at all.
+//  2. 🔴 `replyToId` NAMES THAT MESSAGE, AND ITS PRESENCE IS THE WHOLE `onBotReply` TEST — WHICH IS
+//     NOT THE CHECK THE OTHER SURFACES MAKE. Slack, Discord and Linear each compare the reacted
+//     message's AUTHOR to the bot's own id. Teams delivers no author for the reacted message, so no
+//     such comparison exists here: the guarantee is Microsoft's fence (point 1), and the code checks
+//     only that a target id is present. An activity carrying `replyToId` for a message the agent did
+//     not write would be recorded as feedback, and nothing in this repository could notice. The
+//     absence of `replyToId` reads as "no message to name" — telemetry only, never a feedback row.
+//  3. THE REACTION VOCABULARY IS SIX FIXED VALUES: `angry`, `heart`, `laugh`, `like`, `sad`,
+//     `surprised`. Core's `classifyEmoji` buckets them; `surprised` is `other`, which is correct —
+//     surprise is not a verdict.
+//  4. The activity carries no message content, so nothing here reads or needs any.
+//
+// ── WHY THE STOP REACTION NEVER REACHES HERE
+//
+// `angry` is this surface's stop trigger (channels/teams-stop.ts). ✋ is a MECHANISM, not feedback,
+// and the same rule holds for the glyph that stands in for it: an ADDED `angry` means "stop this" and
+// must never ALSO be recorded as a sentiment about the message it sits on. The stop arm therefore
+// keeps that activity and this arm never sees it. A REMOVED `angry` is not a stop — nothing cancels
+// on a removal — so it arrives here as an ordinary retraction, exactly as a removed ✋ does on Slack.
+import { buildIngestedReaction, ingestReaction, liveReactionSink, resolvePartition, } from "@open-everywhere/core/agent/adapter-api.js";
+import { buildTeamsAuth } from "./teams-identity.js";
+/** Production deps: the live audit/telemetry sink core already owns. There is no Teams-specific
+ *  sink — the whole point of the seam is that the durable row is written in ONE place. */
+export function liveTeamsReactionFeedbackDeps() {
+    return { sink: liveReactionSink() };
+}
+/** The Bot Framework's own prefix for an application id. A reactor wearing it is a bot whatever the
+ *  `recipient` field says — the same belt-and-braces check the stop arm makes. */
+function teamsReactorIsMachine(rx) {
+    return rx.reactorId === rx.agentId || rx.reactorId?.startsWith("28:") === true;
+}
+/**
+ * Ingest every reaction one Teams `messageReaction` activity carries. Returns one outcome per
+ * reaction — added first, then removed — so a caller's log says what happened to each.
+ *
+ * It NEVER THROWS into the caller: core's sinks are best-effort by contract, and a lost feedback row
+ * must never cost the ingress its ack.
+ *
+ * An activity with nothing to ingest returns an EMPTY array. That is the honest answer for a bot's
+ * own reaction, an activity with no reactor, and an activity naming no conversation — none of the
+ * three is a reaction from a person on a message this deployment can key.
+ */
+export async function routeTeamsReactionFeedback(rx, deps) {
+    // The agent's own reactions ride the same activity stream and are never feedback. 🔴 THE `28:`
+    // PREFIX IS THE LOAD-BEARING HALF of this guard, not the `recipient` comparison: with an
+    // unresolved agent id the prefix is the only thing left, and — unlike the ingest paths on Slack and
+    // Discord, where a missed bot reactor costs a stray telemetry row — a missed one HERE costs a
+    // durable feedback row attributed to a machine, because `onBotReply` rests on a present
+    // `replyToId` rather than on an author comparison (header, point 2).
+    if (!rx.reactorId || teamsReactorIsMachine(rx))
+        return [];
+    if (!rx.conversationId)
+        return [];
+    const partition = resolvePartition({
+        channel: { kind: "teams" },
+        session: {
+            auth: {
+                current: buildTeamsAuth({
+                    userId: rx.reactorId,
+                    conversationId: rx.conversationId,
+                    ...(rx.tenantId ? { tenantId: rx.tenantId } : {}),
+                    ...(rx.teamsChannelId ? { channelId: rx.teamsChannelId } : {}),
+                    ...(rx.teamId ? { teamId: rx.teamId } : {}),
+                    ...(rx.scope ? { scope: rx.scope } : {}),
+                }),
+            },
+        },
+    });
+    // A PRESENCE CHECK, not an author comparison — the header's point 2 says why this surface offers
+    // no other, and what that costs. No `replyToId` means no message to name, so the reaction is
+    // telemetry only.
+    const onBotReply = Boolean(rx.replyToId);
+    const outcomes = [];
+    for (const [verb, emojis] of [
+        ["added", rx.added],
+        ["removed", rx.removed],
+    ]) {
+        for (const emoji of emojis) {
+            const reaction = buildIngestedReaction({
+                surface: "teams",
+                verb,
+                reactorId: rx.reactorId,
+                emoji,
+                target: { channelId: rx.conversationId, messageId: rx.replyToId ?? "" },
+                onBotReply,
+                partition,
+            });
+            outcomes.push(await ingestReaction(reaction, deps.sink));
+        }
+    }
+    return outcomes;
+}
+//# sourceMappingURL=teams-reaction-feedback.js.map

package/dist/agent/channels/teams-reaction-feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams-reaction-feedback.js","sourceRoot":"","sources":["../../../agent/channels/teams-reaction-feedback.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,8EAA8E;AAC9E,EAAE;AACF,qGAAqG;AACrG,qGAAqG;AACrG,iGAAiG;AACjG,oGAAoG;AACpG,oFAAoF;AACpF,EAAE;AACF,2DAA2D;AAC3D,EAAE;AACF,gGAAgG;AAChG,iGAAiG;AACjG,qGAAqG;AACrG,gFAAgF;AAChF,oGAAoG;AACpG,gGAAgG;AAChG,oGAAoG;AACpG,qGAAqG;AACrG,qGAAqG;AACrG,gGAAgG;AAChG,mGAAmG;AACnG,6FAA6F;AAC7F,mGAAmG;AACnG,iCAAiC;AACjC,mFAAmF;AACnF,EAAE;AACF,8CAA8C;AAC9C,EAAE;AACF,mGAAmG;AACnG,sGAAsG;AACtG,kGAAkG;AAClG,oGAAoG;AACpG,qGAAqG;AAErG,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GAGjB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAQrD;0FAC0F;AAC1F,MAAM,UAAU,6BAA6B;IAC3C,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;AACtC,CAAC;AAED;kFACkF;AAClF,SAAS,qBAAqB,CAAC,EAAyB;IACtD,OAAO,EAAE,CAAC,SAAS,KAAK,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AACjF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAyB,EACzB,IAA+B;IAE/B,+FAA+F;IAC/F,yFAAyF;IACzF,oGAAoG;IACpG,8FAA8F;IAC9F,wFAAwF;IACxF,qEAAqE;IACrE,IAAI,CAAC,EAAE,CAAC,SAAS,IAAI,qBAAqB,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,cAAc;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACjC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QAC1B,OAAO,EAAE;YACP,IAAI,EAAE;gBACJ,OAAO,EAAE,cAAc,CAAC;oBACtB,MAAM,EAAE,EAAE,CAAC,SAAS;oBACpB,cAAc,EAAE,EAAE,CAAC,cAAc;oBACjC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzC,CAAC;aACH;SACF;KACF,CAAC,CAAC;IAEH,iGAAiG;IACjG,6FAA6F;IAC7F,kBAAkB;IAClB,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI;QAC3B,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC;QACnB,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC;KACf,EAAE,CAAC;QACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,qBAAqB,CAAC;gBACrC,OAAO,EAAE,OAAO;gBAChB,IAAI;gBACJ,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,KAAK;gBACL,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,EAAE,EAAE;gBACvE,UAAU;gBACV,SAAS;aACV,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/agent/channels/teams-read.d.ts

@@ -0,0 +1,127 @@
+import { type BindableContext, type Domain, type ReadScopeAuditDeps, type WakeReadAddress } from "@open-everywhere/core/agent/adapter-api.js";
+/** Test-only reset — drops the held Graph token AND the boundary determination it produced (the
+ *  two are minted together; leaving the boundary behind would let one test's token decide the next
+ *  test's audit marker). */
+export declare function _resetTeamsGraphTokenCache(): void;
+/** A Graph GET, given a full (absolute) URL — mints its own token, returns the parsed JSON body.
+ *  Fails LOUD on any non-ok response (matching discordReadAdapter's posture, not the fail-soft
+ *  backscroll fetchers). Injectable so tests never mint a token or hit the network. */
+export type TeamsGraphRequester = (url: string) => Promise<unknown>;
+/** Exported (OPE-522) so channels/teams-fire-eligibility.ts's Graph probes reuse the SAME token
+ *  mint + GET plumbing rather than standing up a second one — the routine fire-eligibility leg's
+ *  requests are ordinary Graph reads, no different in shape from a channel-history read. Callers
+ *  that need "unresolvable" rather than a thrown error (fire-eligibility's fail-open posture) catch
+ *  around it themselves — this function's own fail-LOUD contract is unchanged. */
+export declare const liveTeamsGraphRequest: TeamsGraphRequester;
+interface GraphChatMessage {
+    readonly id?: string;
+    readonly createdDateTime?: string;
+    readonly deletedDateTime?: string | null;
+    readonly messageType?: string;
+    readonly from?: {
+        readonly user?: {
+            readonly id?: string;
+            readonly displayName?: string;
+        };
+        readonly application?: {
+            readonly id?: string;
+            readonly displayName?: string;
+        };
+    };
+    readonly body?: {
+        readonly contentType?: string;
+        readonly content?: string;
+    };
+}
+/** One Teams message rendered to a compact, model-friendly line — structurally identical to
+ *  slack-read.ts's RenderedMessage / channel-read.ts's RenderedLine (no cross-import: same
+ *  no-shared-type convention slack-read.ts itself uses). */
+export interface TeamsRenderedLine {
+    readonly author: string;
+    readonly ts: string;
+    readonly text: string;
+    /** The author's Entra (AAD) object id, for the OPE-474 non-member probe. Absent on an
+     *  application-authored or unattributable line. Never reaches the model — the read verbs project
+     *  author/ts/text only. It is a DIFFERENT value from `author`, which prefers the display NAME. */
+    readonly authorId?: string;
+    /** An APPLICATION author (`from.application`, no `from.user`). Excluded from the probe: a machine
+     *  is below a member but is not a person outside the org. */
+    readonly bot?: boolean;
+}
+/** HTML message body → plain text: drop tags (mention `<at>…</at>` spans included), decode the
+ *  five common entities, collapse whitespace. Pure — a self-contained copy of the Teams e2e
+ *  driver's stripHtml (scripts/e2e/teams-driver.ts); see the file header for why it's not shared. */
+export declare function stripHtml(html: string): string;
+/**
+ * Normalize a raw Graph messages array (either endpoint's `value`) into oldest-first
+ * {@link TeamsRenderedLine}[] — dropping deleted/system messages and empty bodies, HTML-stripped.
+ * Graph guarantees neither endpoint's order (no `$orderby` support, and both are observed
+ * newest-first in practice — see the file header), so this ALWAYS sorts by `createdDateTime`
+ * rather than trusting API order. Pure; exported for the render test (mirrors discordLinesFromRaw).
+ */
+export declare function teamsLinesFromRaw(raw: unknown): TeamsRenderedLine[];
+/**
+ * The same normalization, with each line's CREATE TIME kept (epoch ms). The read verbs do not need it
+ * — a rendered line carries the message id in `ts`, not a timestamp — but the seat catch-up does: it
+ * bounds its window by time and core orders the whole window by it (channels/seat-catch-up.ts).
+ * Exported so `teams-catch-up.ts` shares this one normalization rather than re-deriving the sender
+ * kind and the system-message filter, which is the whole way those two could disagree about a
+ * message. `createdMs` is 0 when Graph sent no readable `createdDateTime`; the caller drops it.
+ */
+export declare function teamsTimedLinesFromRaw(raw: unknown): Array<TeamsRenderedLine & {
+    readonly createdMs: number;
+}>;
+/** Follow `@odata.nextLink` until `limit` messages are in hand or {@link TEAMS_GRAPH_MAX_PAGES}
+ *  pages are exhausted — a hard bound so a busy channel/thread can't fan out unboundedly (mirrors
+ *  discord-backscroll.ts's DISCORD_RAW_FETCH_MAX_PAGES). Returns the raw messages, unsorted
+ *  (teamsLinesFromRaw sorts). Propagates any requester error (fail-loud). */
+export declare function fetchGraphPages(req: TeamsGraphRequester, initialUrl: string, limit: number): Promise<GraphChatMessage[]>;
+export declare function channelMessagesUrl(teamId: string, channelId: string): string;
+export declare function threadRepliesUrl(teamId: string, channelId: string, rootMessageId: string): string;
+/** Mirrors binding.ts's private `seg()` sanitizer exactly (same regex, same trim, same 100-char
+ *  cap) so a raw Teams channel id compares correctly against the already-sanitized domain grain.
+ *  Pure; exported for the allowlist test. */
+export declare function sanitizeTeamsChannelId(value: string): string;
+/** The Teams CHANNEL ids this session may read (SANITIZED — see the header note): the current
+ *  channel (its channel grain) plus every Teams channel this session's explicit domain lists. Pure
+ *  but for the injected `domains` — mirrors channel-read.ts's allowedSurfaceIdsFrom shape so it is
+ *  unit-testable the same way. */
+export declare function allowedTeamsChannelIds(channelGrainKey: string, domains: readonly Domain[]): {
+    ids: Set<string>;
+    domain?: string;
+};
+/** Assert a requested (raw) Teams channel id is readable by this session — else AUDIT the refusal
+ *  and throw (fail closed), the same ChannelScopeError shape slack-read/channel-read raise.
+ *  Sanitizes `channelId` before comparing (see the header note) — the RAW value is what the Graph
+ *  call itself uses, and the SANITIZED one is what the row records, so a row compares like-for-like
+ *  against the domain's `reach`. The decision is unchanged; only the row is new. */
+export declare function assertTeamsChannelAllowed(ctx: BindableContext, channelId: string, deps?: ReadScopeAuditDeps): Promise<void>;
+export declare const teamsReadAdapter: {
+    platform: "teams";
+    /**
+     * OPE-929 — Teams' own spelling of "which room and which thread is this turn in", and the one of
+     * the three that no core-side guess could have got right.
+     *
+     * 🔴 THE BINDING'S CONVERSATION IS NOT THE READ CONTAINER. A Teams CHANNEL activity binds the
+     * REPLY CHAIN as its `surface` / `anchorChannelId` (the conversation id carries
+     * `;messageid=<root>`), while both Graph read URLs below take the CHANNEL id
+     * (`/teams/{team}/channels/{channel}/messages[/{root}/replies]`). So the container is
+     * `target.channelId` and the thread root is the `;messageid=` half of the conversation id — the
+     * two halves of one value, pulled apart here rather than anywhere else.
+     *
+     * A personal or group chat carries no channel id and no reply-chain suffix, so it reports no
+     * address at all: Graph's chat-message read is delegated-only, and this adapter reads channels.
+     * The read then refuses loudly, which is the honest answer for a surface it cannot serve.
+     */
+    wakeAddress(ctx: BindableContext): WakeReadAddress | undefined;
+    readChannel(ctx: BindableContext, channel: string, limit?: number, req?: TeamsGraphRequester): Promise<readonly TeamsRenderedLine[]>;
+    readThread(ctx: BindableContext, channel: string, threadTs: string, limit?: number, req?: TeamsGraphRequester): Promise<readonly TeamsRenderedLine[]>;
+    /** OPE-474 / OPE-534 — the author-trust register only; see the note above for why the Entra probe
+     *  is not reachable from a read. No `memberships` leg: an armed Teams tenant matches on principal
+     *  keys (`teams/<entraObjectId>`), which is what a Teams declaration lists. It answers with the
+     *  refuted AUTHOR IDS, because core reads the one answer twice: the turn mark and the `withhold`
+     *  body replacement. */
+    refutedAuthorIds(ctx: BindableContext, lines: readonly TeamsRenderedLine[]): Promise<readonly string[]>;
+};
+export {};
+//# sourceMappingURL=teams-read.d.ts.map

package/dist/agent/channels/teams-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams-read.d.ts","sourceRoot":"","sources":["../../../agent/channels/teams-read.ts"],"names":[],"mappings":"AAoEA,OAAO,EAUL,KAAK,eAAe,EAEpB,KAAK,MAAM,EACX,KAAK,kBAAkB,EACvB,KAAK,eAAe,EAErB,MAAM,4CAA4C,CAAC;AAyFpD;;4BAE4B;AAC5B,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AAID;;uFAEuF;AACvF,MAAM,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpE;;;;kFAIkF;AAClF,eAAO,MAAM,qBAAqB,EAAE,mBAQnC,CAAC;AAIF,UAAU,gBAAgB;IACxB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,IAAI,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACxE,QAAQ,CAAC,WAAW,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAChF,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9E;AAED;;4DAE4D;AAC5D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;sGAEkG;IAClG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;iEAC6D;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;qGAEqG;AACrG,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU9C;AAoCD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,iBAAiB,EAAE,CAGnE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAAC,iBAAiB,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAK9G;AASD;;;6EAG6E;AAC7E,wBAAsB,eAAe,CAAC,GAAG,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAS9H;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAEjG;AA2BD;;6CAE6C;AAC7C,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;kCAGkC;AAClC,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAYjI;AAED;;;;oFAIoF;AACpF,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBjI;AAgDD,eAAO,MAAM,gBAAgB;IAC3B,QAAQ,EAAE,OAAO;IACjB;;;;;;;;;;;;;;OAcG;IACH,WAAW,MAAM,eAAe,GAAG,eAAe,GAAG,SAAS;IAQxD,WAAW,MAAM,eAAe,WAAW,MAAM,UAAU,MAAM,QAAO,mBAAmB,GAA2B,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC;IAQ3J,UAAU,MAAM,eAAe,WAAW,MAAM,YAAY,MAAM,UAAU,MAAM,QAAO,mBAAmB,GAA2B,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC;IAQlL;;;;4BAIwB;IAClB,gBAAgB,MAAM,eAAe,SAAS,SAAS,iBAAiB,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;CAG9G,CAAC"}