@openclaw/crabline 0.1.9 → 0.1.11

package/dist/src/providers/builtin/feishu.js

@@ -1,49 +1,172 @@
+import { createDecipheriv, createHash, timingSafeEqual } from "node:crypto";
 import path from "node:path";
 import { CrablineError } from "../../core/errors.js";
 import { LocalMockProviderAdapter } from "../local-mock.js";
-import { authorFromBotFlag, createNativeTargetCodec, genericMockPayloadWithNativeThread, isRecord, optionalRecord, optionalString, requireNativeInboundId, } from "./native-local-mock.js";
-const FEISHU_CHAT_ID_RULE = {
-    example: "oc_abc123",
-    name: "Feishu chat_id",
-    pattern: /^oc_[A-Za-z0-9_-]+$/u,
-};
-const FEISHU_MESSAGE_ID_RULE = {
-    example: "om_abc123",
-    name: "Feishu message_id",
-    pattern: /^om_[A-Za-z0-9_-]+$/u,
-};
-export function resolveFeishuAdapterConfig(config, _env = process.env) {
+import { FEISHU_CHAT_ID_RULE, FEISHU_MESSAGE_ID_RULE, getBuiltinTargetCodec, } from "../target-normalizers.js";
+import { authorFromBotFlag, createSecretVerifier, genericMockPayloadWithNativeThread, isRecord, optionalRecord, optionalString, requireNativeInboundId, } from "./native-local-mock.js";
+import { requireExternalWebhookAuthentication } from "./external-webhook-auth.js";
+const FEISHU_MAX_CALLBACK_AGE_MS = 5 * 60_000;
+const FEISHU_REPLAY_CACHE_LIMIT = 2_048;
+export function resolveFeishuAdapterConfig(config, env = process.env) {
     return {
         appId: config.feishu?.appId ?? "local-mock-feishu-app",
+        encryptKey: config.feishu?.encryptKey ?? env.FEISHU_ENCRYPT_KEY,
         userName: config.feishu?.userName,
+        verificationToken: config.feishu?.verificationToken ?? env.FEISHU_VERIFICATION_TOKEN,
+    };
+}
+export function handleFeishuWebhookPayload(payload) {
+    if (isRecord(payload) &&
+        payload.type === "url_verification" &&
+        typeof payload.challenge === "string") {
+        return Response.json({ challenge: payload.challenge });
+    }
+    if (isRecord(payload) && isRecord(payload.event)) {
+        const message = optionalRecord(payload.event, "message");
+        if (!message) {
+            return new Response(null, { status: 200 });
+        }
+        const messageType = optionalString(message, "message_type");
+        const text = parseFeishuText(optionalString(message, "content"));
+        if (messageType !== "text" || !text) {
+            return new Response(null, { status: 200 });
+        }
+    }
+    return undefined;
+}
+export function createFeishuWebhookAuthenticator(config, env = process.env, runtime = {}) {
+    return createFeishuWebhookAuthenticatorWithReplay(config, env, runtime);
+}
+function createFeishuWebhookAuthenticatorWithReplay(config, env, runtime, replayState) {
+    const resolved = resolveFeishuAdapterConfig(config, env);
+    const validateCallback = resolved.verificationToken
+        ? createSecretVerifier(resolved.verificationToken)
+        : undefined;
+    if (!(resolved.encryptKey || validateCallback)) {
+        return undefined;
+    }
+    return async (request, rawBody) => {
+        let payload;
+        try {
+            payload = JSON.parse(rawBody);
+        }
+        catch {
+            return undefined;
+        }
+        if (!isRecord(payload)) {
+            return unauthorizedFeishuWebhook();
+        }
+        const encryptedEnvelope = payload;
+        const encrypted = typeof payload.encrypt === "string";
+        let signedRequest = false;
+        if (encrypted) {
+            if (!resolved.encryptKey) {
+                return unauthorizedFeishuWebhook();
+            }
+            try {
+                payload = decryptFeishuWebhookPayload(payload, resolved.encryptKey);
+            }
+            catch {
+                return unauthorizedFeishuWebhook();
+            }
+            if (!verifyFeishuSignature(request, rawBody, resolved.encryptKey) &&
+                !isFeishuUrlVerification(payload)) {
+                return unauthorizedFeishuWebhook();
+            }
+            signedRequest = !isFeishuUrlVerification(payload);
+        }
+        else if (resolved.encryptKey) {
+            return unauthorizedFeishuWebhook();
+        }
+        if (validateCallback && !validateCallback(readFeishuVerificationToken(payload))) {
+            return unauthorizedFeishuWebhook();
+        }
+        const now = runtime.now?.() ?? Date.now();
+        const callbackTimestamp = readFeishuCallbackTimestamp(request, payload, signedRequest);
+        if (callbackTimestamp === null) {
+            return unauthorizedFeishuWebhook();
+        }
+        if (callbackTimestamp !== undefined &&
+            Math.abs(now - callbackTimestamp) > FEISHU_MAX_CALLBACK_AGE_MS) {
+            return unauthorizedFeishuWebhook();
+        }
+        const callbackKeys = readFeishuCallbackKeys(payload, encryptedEnvelope);
+        if (!replayState) {
+            return undefined;
+        }
+        pruneFeishuReplayCache(replayState.accepted, now);
+        while (callbackKeys.length > 0) {
+            if (callbackKeys.some((key) => replayState.accepted.has(key))) {
+                return new Response(null, { status: 200 });
+            }
+            const reservation = callbackKeys
+                .map((key) => replayState.inFlight.get(key))
+                .find((candidate) => candidate !== undefined);
+            if (!reservation) {
+                reserveFeishuCallback(replayState, callbackKeys);
+                break;
+            }
+            if (await reservation.promise) {
+                return new Response(null, { status: 200 });
+            }
+        }
+        return undefined;
     };
 }
 export class FeishuProviderAdapter extends LocalMockProviderAdapter {
-    constructor(id, config, _userName, _runtime) {
+    constructor(id, config, _userName, runtime) {
+        const authRuntime = runtime ?? {};
+        const env = authRuntime.env ?? process.env;
+        const resolved = resolveFeishuAdapterConfig(config, env);
+        requireExternalWebhookAuthentication({
+            authenticated: Boolean(resolved.encryptKey),
+            provider: "Feishu",
+            requirement: "feishu.encryptKey or FEISHU_ENCRYPT_KEY for X-Lark-Signature verification",
+            webhook: config.feishu?.webhook,
+        });
+        const replayState = {
+            accepted: new Map(),
+            inFlight: new Map(),
+        };
+        const authenticateWebhookRequest = createFeishuWebhookAuthenticatorWithReplay(config, env, authRuntime, replayState);
+        const decodePayload = (payload) => resolved.encryptKey ? decryptFeishuWebhookPayload(payload, resolved.encryptKey) : payload;
         super({
-            codec: createNativeTargetCodec({
-                channel: FEISHU_CHAT_ID_RULE,
-                channelLabel: "Feishu chat_id",
-                thread: FEISHU_MESSAGE_ID_RULE,
-                threadLabel: "Feishu message_id",
-            }),
+            codec: getBuiltinTargetCodec("feishu"),
             config,
             id,
             options: {
+                ...(authenticateWebhookRequest ? { authenticateWebhookRequest } : {}),
+                createWebhookSuccessResponse(payload, responseId) {
+                    return new Response(JSON.stringify({ id: responseId, ok: true }), {
+                        headers: { "content-type": "application/json" },
+                        status: 200,
+                    });
+                },
                 defaultWebhook: { host: "127.0.0.1", path: "/feishu/webhook", port: 8795 },
                 endpointLabel: "webhook endpoint",
-                normalizeWebhookPayload: normalizeFeishuWebhookPayload,
+                handleWebhookPayload: (payload) => handleFeishuWebhookPayload(decodePayload(payload)),
+                normalizeWebhookPayload: (payload) => normalizeFeishuWebhookPayload(decodePayload(payload)),
                 platform: "feishu",
                 publicUrl: config.feishu?.webhook.publicUrl,
                 recorderPath: config.feishu?.recorder.path
                     ? path.resolve(config.feishu.recorder.path)
                     : undefined,
+                settleWebhookRequest({ accepted, payload, rawBody }) {
+                    const encryptedEnvelope = readFeishuSettledEnvelope(payload, rawBody);
+                    const decodedPayload = decodePayload(encryptedEnvelope);
+                    if (accepted) {
+                        acceptFeishuCallback(replayState, decodedPayload, encryptedEnvelope, authRuntime.now?.() ?? Date.now());
+                    }
+                    else {
+                        rejectFeishuCallback(replayState, decodedPayload, encryptedEnvelope);
+                    }
+                },
                 webhook: config.feishu?.webhook,
             },
         });
     }
 }
-function normalizeFeishuWebhookPayload(payload) {
+export function normalizeFeishuWebhookPayload(payload) {
     if (!isRecord(payload)) {
         throw new CrablineError("Feishu webhook payload must be an object", { kind: "inbound" });
     }
@@ -57,23 +180,32 @@ function normalizeFeishuWebhookPayload(payload) {
         });
     }
     const chatId = optionalString(message, "chat_id");
+    const messageType = optionalString(message, "message_type");
     const messageId = optionalString(message, "message_id");
+    const rootId = optionalString(message, "root_id");
     const rawContent = optionalString(message, "content");
     const text = parseFeishuText(rawContent);
+    if (messageType !== "text") {
+        throw new CrablineError("Feishu event payload requires message.message_type=text", {
+            kind: "inbound",
+        });
+    }
     if (!chatId || !text) {
         throw new CrablineError("Feishu event payload requires message.chat_id and message.content", {
             kind: "inbound",
         });
     }
     return {
-        author: authorFromBotFlag(false),
+        author: authorFromBotFlag(event
+            ? ["app", "bot"].includes(optionalString(optionalRecord(event, "sender") ?? {}, "sender_type") ?? "")
+            : false),
         ...(messageId
             ? { id: requireNativeInboundId(messageId, FEISHU_MESSAGE_ID_RULE, "Feishu message_id") }
             : {}),
         raw: payload,
         text,
-        threadId: messageId
-            ? requireNativeInboundId(messageId, FEISHU_MESSAGE_ID_RULE, "Feishu message_id")
+        threadId: rootId
+            ? requireNativeInboundId(rootId, FEISHU_MESSAGE_ID_RULE, "Feishu root_id")
             : requireNativeInboundId(chatId, FEISHU_CHAT_ID_RULE, "Feishu chat_id"),
     };
 }
@@ -86,10 +218,160 @@ function parseFeishuText(content) {
         if (isRecord(parsed) && typeof parsed.text === "string") {
             return parsed.text;
         }
+        return undefined;
     }
     catch {
         return content;
     }
-    return content;
+}
+function readFeishuSettledEnvelope(payload, rawBody) {
+    if (isRecord(payload)) {
+        return payload;
+    }
+    try {
+        return JSON.parse(rawBody);
+    }
+    catch {
+        return payload;
+    }
+}
+export function decryptFeishuWebhookPayload(payload, encryptKey) {
+    if (!isRecord(payload) || typeof payload.encrypt !== "string") {
+        return payload;
+    }
+    const encrypted = Buffer.from(payload.encrypt, "base64");
+    if (encrypted.length <= 16 || (encrypted.length - 16) % 16 !== 0) {
+        throw new Error("Feishu encrypted payload is truncated.");
+    }
+    const key = createHash("sha256").update(encryptKey).digest();
+    const decipher = createDecipheriv("aes-256-cbc", key, encrypted.subarray(0, 16));
+    const decrypted = Buffer.concat([
+        decipher.update(encrypted.subarray(16)),
+        decipher.final(),
+    ]).toString("utf8");
+    return JSON.parse(decrypted);
+}
+function readFeishuVerificationToken(payload) {
+    if (!isRecord(payload)) {
+        return null;
+    }
+    const header = optionalRecord(payload, "header");
+    return (optionalString(payload, "token") ?? (header ? optionalString(header, "token") : null) ?? null);
+}
+function isFeishuUrlVerification(payload) {
+    return (isRecord(payload) &&
+        payload.type === "url_verification" &&
+        typeof payload.challenge === "string" &&
+        payload.challenge.length > 0);
+}
+function verifyFeishuSignature(request, rawBody, encryptKey) {
+    const timestamp = request.headers.get("x-lark-request-timestamp");
+    const nonce = request.headers.get("x-lark-request-nonce");
+    const signature = request.headers.get("x-lark-signature");
+    if (!timestamp || !nonce || !signature || !/^[0-9a-f]{64}$/iu.test(signature)) {
+        return false;
+    }
+    const expected = createHash("sha256")
+        .update(timestamp + nonce + encryptKey + rawBody)
+        .digest();
+    return timingSafeEqual(expected, Buffer.from(signature, "hex"));
+}
+function readFeishuCallbackTimestamp(request, payload, signedRequest) {
+    const requestTimestamp = signedRequest
+        ? request.headers.get("x-lark-request-timestamp")
+        : undefined;
+    const header = isRecord(payload) ? optionalRecord(payload, "header") : undefined;
+    const headerTimestamp = header ? optionalString(header, "create_time") : undefined;
+    const value = requestTimestamp ?? headerTimestamp;
+    if (!value) {
+        return undefined;
+    }
+    if (!/^\d+$/u.test(value)) {
+        return null;
+    }
+    const timestamp = Number(value);
+    if (!Number.isSafeInteger(timestamp)) {
+        return null;
+    }
+    if (timestamp >= 100_000_000_000_000) {
+        return Math.floor(timestamp / 1_000);
+    }
+    if (timestamp >= 100_000_000_000) {
+        return timestamp;
+    }
+    return timestamp * 1_000;
+}
+function readFeishuCallbackKeys(payload, encryptedEnvelope) {
+    if (!isRecord(payload) || isFeishuUrlVerification(payload)) {
+        return [];
+    }
+    const event = optionalRecord(payload, "event");
+    const message = event ? optionalRecord(event, "message") : undefined;
+    const header = optionalRecord(payload, "header");
+    const messageId = message ? optionalString(message, "message_id") : undefined;
+    const eventId = header ? optionalString(header, "event_id") : undefined;
+    const encrypted = isRecord(encryptedEnvelope)
+        ? optionalString(encryptedEnvelope, "encrypt")
+        : undefined;
+    return [
+        ...(messageId ? [`message:${messageId}`] : []),
+        ...(eventId ? [`event:${eventId}`] : []),
+        ...(encrypted ? [`encrypted:${createHash("sha256").update(encrypted).digest("hex")}`] : []),
+    ];
+}
+function reserveFeishuCallback(replayState, callbackKeys) {
+    let resolveReservation;
+    const promise = new Promise((resolve) => {
+        resolveReservation = resolve;
+    });
+    const reservation = {
+        keys: new Set(callbackKeys),
+        promise,
+        resolve: resolveReservation,
+    };
+    for (const key of callbackKeys) {
+        replayState.inFlight.set(key, reservation);
+    }
+}
+function acceptFeishuCallback(replayState, payload, encryptedEnvelope, now) {
+    const callbackKeys = readFeishuCallbackKeys(payload, encryptedEnvelope);
+    pruneFeishuReplayCache(replayState.accepted, now);
+    for (const key of callbackKeys) {
+        replayState.accepted.set(key, now);
+    }
+    const reservations = new Set(callbackKeys
+        .map((key) => replayState.inFlight.get(key))
+        .filter((reservation) => reservation !== undefined));
+    for (const reservation of reservations) {
+        releaseFeishuReservation(replayState, reservation, true);
+    }
+}
+function rejectFeishuCallback(replayState, payload, encryptedEnvelope) {
+    const callbackKeys = readFeishuCallbackKeys(payload, encryptedEnvelope);
+    const reservations = new Set(callbackKeys
+        .map((key) => replayState.inFlight.get(key))
+        .filter((reservation) => reservation !== undefined));
+    for (const reservation of reservations) {
+        releaseFeishuReservation(replayState, reservation, false);
+    }
+}
+function releaseFeishuReservation(replayState, reservation, accepted) {
+    for (const key of reservation.keys) {
+        if (replayState.inFlight.get(key) === reservation) {
+            replayState.inFlight.delete(key);
+        }
+    }
+    reservation.resolve(accepted);
+}
+function pruneFeishuReplayCache(recentCallbacks, now) {
+    for (const [key, acceptedAt] of recentCallbacks) {
+        if (now - acceptedAt > FEISHU_MAX_CALLBACK_AGE_MS ||
+            recentCallbacks.size > FEISHU_REPLAY_CACHE_LIMIT) {
+            recentCallbacks.delete(key);
+        }
+    }
+}
+function unauthorizedFeishuWebhook() {
+    return new Response("unauthorized", { status: 401 });
 }
 //# sourceMappingURL=feishu.js.map

package/dist/src/providers/builtin/feishu.js.map

@@ -1 +1 @@
-{"version":3,"file":"feishu.js","sourceRoot":"","sources":["../../../../src/providers/builtin/feishu.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,kCAAkC,EAClC,QAAQ,EACR,cAAc,EACd,cAAc,EACd,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,mBAAmB,GAAiB;IACxC,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,MAAM,sBAAsB,GAAiB;IAC3C,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE,mBAAmB;IACzB,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,IAAI,GAAsB,OAAO,CAAC,GAAG;IAErC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,uBAAuB;QACtD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,wBAAwB;IACjE,YAAY,EAAU,EAAE,MAAsB,EAAE,SAAiB,EAAE,QAAkB;QACnF,KAAK,CAAC;YACJ,KAAK,EAAE,uBAAuB,CAAC;gBAC7B,OAAO,EAAE,mBAAmB;gBAC5B,YAAY,EAAE,gBAAgB;gBAC9B,MAAM,EAAE,sBAAsB;gBAC9B,WAAW,EAAE,mBAAmB;aACjC,CAAC;YACF,MAAM;YACN,EAAE;YACF,OAAO,EAAE;gBACP,cAAc,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC1E,aAAa,EAAE,kBAAkB;gBACjC,uBAAuB,EAAE,6BAA6B;gBACtD,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS;gBAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI;oBACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC3C,CAAC,CAAC,SAAS;gBACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;aAChC;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,6BAA6B,CAAC,OAAgB;IACrD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,aAAa,CAAC,0CAA0C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,kCAAkC,CAAC;YACxC,WAAW,EAAE,mBAAmB;YAChC,OAAO;YACP,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,aAAa,CAAC,mEAAmE,EAAE;YAC3F,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC;QAChC,GAAG,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,EAAE,EAAE,sBAAsB,CAAC,SAAS,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,EAAE;YACxF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,EAAE,OAAO;QACZ,IAAI;QACJ,QAAQ,EAAE,SAAS;YACjB,CAAC,CAAC,sBAAsB,CAAC,SAAS,EAAE,sBAAsB,EAAE,mBAAmB,CAAC;YAChF,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,mBAAmB,EAAE,gBAAgB,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAA2B;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"feishu.js","sourceRoot":"","sources":["../../../../src/providers/builtin/feishu.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,kCAAkC,EAClC,QAAQ,EACR,cAAc,EACd,cAAc,EACd,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAqBlF,MAAM,0BAA0B,GAAG,CAAC,GAAG,MAAM,CAAC;AAC9C,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAExC,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,uBAAuB;QACtD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,GAAG,CAAC,kBAAkB;QAC/D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ;QACjC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,IAAI,GAAG,CAAC,yBAAyB;KACrF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,IACE,QAAQ,CAAC,OAAO,CAAC;QACjB,OAAO,CAAC,IAAI,KAAK,kBAAkB;QACnC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,EACrC,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACjE,IAAI,WAAW,KAAK,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,MAAsB,EACtB,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,OAAO,GAAsB,EAAE;IAE/B,OAAO,0CAA0C,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,0CAA0C,CACjD,MAAsB,EACtB,GAAsB,EACtB,OAA0B,EAC1B,WAA+B;IAE/B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,iBAAiB;QACjD,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAClD,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,gBAAgB,CAAC,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,EAAE,OAAgB,EAAE,OAAe,EAAiC,EAAE;QAChF,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,OAAO,yBAAyB,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,iBAAiB,GAAG,OAAO,CAAC;QAElC,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC;QACtD,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACzB,OAAO,yBAAyB,EAAE,CAAC;YACrC,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,yBAAyB,EAAE,CAAC;YACrC,CAAC;YACD,IACE,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC;gBAC7D,CAAC,uBAAuB,CAAC,OAAO,CAAC,EACjC,CAAC;gBACD,OAAO,yBAAyB,EAAE,CAAC;YACrC,CAAC;YACD,aAAa,GAAG,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/B,OAAO,yBAAyB,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO,yBAAyB,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1C,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACvF,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,yBAAyB,EAAE,CAAC;QACrC,CAAC;QACD,IACE,iBAAiB,KAAK,SAAS;YAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,iBAAiB,CAAC,GAAG,0BAA0B,EAC9D,CAAC;YACD,OAAO,yBAAyB,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,sBAAsB,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC9D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,WAAW,GAAG,YAAY;iBAC7B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;iBAC3C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,qBAAqB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;gBACjD,MAAM;YACR,CAAC;YACD,IAAI,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC9B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,wBAAwB;IACjE,YAAY,EAAU,EAAE,MAAsB,EAAE,SAAiB,EAAE,OAAiB;QAClF,MAAM,WAAW,GACd,OAAyE,IAAI,EAAE,CAAC;QACnF,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QAC3C,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzD,oCAAoC,CAAC;YACnC,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3C,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,2EAA2E;YACxF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;SAChC,CAAC,CAAC;QACH,MAAM,WAAW,GAAsB;YACrC,QAAQ,EAAE,IAAI,GAAG,EAAE;YACnB,QAAQ,EAAE,IAAI,GAAG,EAAE;SACpB,CAAC;QACF,MAAM,0BAA0B,GAAG,0CAA0C,CAC3E,MAAM,EACN,GAAG,EACH,WAAW,EACX,WAAW,CACZ,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAE,EAAE,CACzC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5F,KAAK,CAAC;YACJ,KAAK,EAAE,qBAAqB,CAAC,QAAQ,CAAC;YACtC,MAAM;YACN,EAAE;YACF,OAAO,EAAE;gBACP,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,4BAA4B,CAAC,OAAO,EAAE,UAAU;oBAC9C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;wBAChE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;wBAC/C,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;gBACL,CAAC;gBACD,cAAc,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE;gBAC1E,aAAa,EAAE,kBAAkB;gBACjC,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,0BAA0B,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBACrF,uBAAuB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,6BAA6B,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAC3F,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS;gBAC3C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI;oBACxC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC3C,CAAC,CAAC,SAAS;gBACb,oBAAoB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;oBACjD,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBACtE,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;oBACxD,IAAI,QAAQ,EAAE,CAAC;wBACb,oBAAoB,CAClB,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,WAAW,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAClC,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,oBAAoB,CAAC,WAAW,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;oBACvE,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;aAChC;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC5D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,aAAa,CAAC,0CAA0C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,kCAAkC,CAAC;YACxC,WAAW,EAAE,mBAAmB;YAChC,OAAO;YACP,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,yDAAyD,EAAE;YACjF,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,aAAa,CAAC,mEAAmE,EAAE;YAC3F,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,MAAM,EAAE,iBAAiB,CACvB,KAAK;YACH,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CACrB,cAAc,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,IAAI,EAAE,CAC3E;YACH,CAAC,CAAC,KAAK,CACV;QACD,GAAG,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,EAAE,EAAE,sBAAsB,CAAC,SAAS,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,EAAE;YACxF,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,EAAE,OAAO;QACZ,IAAI;QACJ,QAAQ,EAAE,MAAM;YACd,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,EAAE,gBAAgB,CAAC;YAC1E,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,mBAAmB,EAAE,gBAAgB,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAA2B;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAgB,EAAE,OAAe;IAClE,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAgB,EAAE,UAAkB;IAC9E,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,SAAS,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvC,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAY,CAAC;AAC1C,CAAC;AAED,SAAS,2BAA2B,CAAC,OAAgB;IACnD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,CACL,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB;IAC/C,OAAO,CACL,QAAQ,CAAC,OAAO,CAAC;QACjB,OAAO,CAAC,IAAI,KAAK,kBAAkB;QACnC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QACrC,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB,EAAE,OAAe,EAAE,UAAkB;IAClF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC;SAChD,MAAM,EAAE,CAAC;IACZ,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAgB,EAChB,OAAgB,EAChB,aAAsB;IAEtB,MAAM,gBAAgB,GAAG,aAAa;QACpC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,KAAK,GAAG,gBAAgB,IAAI,eAAe,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,SAAS,IAAI,eAAe,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,GAAG,KAAK,CAAC;AAC3B,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgB,EAAE,iBAA0B;IAC1E,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,SAAS,GAAG,QAAQ,CAAC,iBAAiB,CAAC;QAC3C,CAAC,CAAC,cAAc,CAAC,iBAAiB,EAAE,SAAS,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,WAA8B,EAAE,YAAsB;IACnF,IAAI,kBAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QAC/C,kBAAkB,GAAG,OAAO,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAA4B;QAC3C,IAAI,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC;QAC3B,OAAO;QACP,OAAO,EAAE,kBAAkB;KAC5B,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,WAA8B,EAC9B,OAAgB,EAChB,iBAA0B,EAC1B,GAAW;IAEX,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACxE,sBAAsB,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,YAAY;SACT,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAC3C,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,SAAS,CAAC,CACtD,CAAC;IACF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,wBAAwB,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,WAA8B,EAC9B,OAAgB,EAChB,iBAA0B;IAE1B,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,YAAY;SACT,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAC3C,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,KAAK,SAAS,CAAC,CACtD,CAAC;IACF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,wBAAwB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,WAA8B,EAC9B,WAAoC,EACpC,QAAiB;IAEjB,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC;YAClD,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,sBAAsB,CAAC,eAAoC,EAAE,GAAW;IAC/E,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,eAAe,EAAE,CAAC;QAChD,IACE,GAAG,GAAG,UAAU,GAAG,0BAA0B;YAC7C,eAAe,CAAC,IAAI,GAAG,yBAAyB,EAChD,CAAC;YACD,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB;IAChC,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACvD,CAAC","sourcesContent":["import { createDecipheriv, createHash, timingSafeEqual } from \"node:crypto\";\nimport path from \"node:path\";\nimport { CrablineError } from \"../../core/errors.js\";\nimport type { ProviderConfig } from \"../../config/schema.js\";\nimport { LocalMockProviderAdapter } from \"../local-mock.js\";\nimport type { ProviderAdapter } from \"../types.js\";\nimport {\n  FEISHU_CHAT_ID_RULE,\n  FEISHU_MESSAGE_ID_RULE,\n  getBuiltinTargetCodec,\n} from \"../target-normalizers.js\";\nimport {\n  authorFromBotFlag,\n  createSecretVerifier,\n  genericMockPayloadWithNativeThread,\n  isRecord,\n  optionalRecord,\n  optionalString,\n  requireNativeInboundId,\n} from \"./native-local-mock.js\";\nimport { requireExternalWebhookAuthentication } from \"./external-webhook-auth.js\";\n\ntype FeishuEnvironment = Partial<\n  Pick<NodeJS.ProcessEnv, \"FEISHU_ENCRYPT_KEY\" | \"FEISHU_VERIFICATION_TOKEN\">\n>;\n\ntype FeishuAuthRuntime = {\n  now?: (() => number) | undefined;\n};\n\ntype FeishuReplayReservation = {\n  keys: Set<string>;\n  promise: Promise<boolean>;\n  resolve: (accepted: boolean) => void;\n};\n\ntype FeishuReplayState = {\n  accepted: Map<string, number>;\n  inFlight: Map<string, FeishuReplayReservation>;\n};\n\nconst FEISHU_MAX_CALLBACK_AGE_MS = 5 * 60_000;\nconst FEISHU_REPLAY_CACHE_LIMIT = 2_048;\n\nexport function resolveFeishuAdapterConfig(\n  config: ProviderConfig,\n  env: FeishuEnvironment = process.env,\n) {\n  return {\n    appId: config.feishu?.appId ?? \"local-mock-feishu-app\",\n    encryptKey: config.feishu?.encryptKey ?? env.FEISHU_ENCRYPT_KEY,\n    userName: config.feishu?.userName,\n    verificationToken: config.feishu?.verificationToken ?? env.FEISHU_VERIFICATION_TOKEN,\n  };\n}\n\nexport function handleFeishuWebhookPayload(payload: unknown): Response | undefined {\n  if (\n    isRecord(payload) &&\n    payload.type === \"url_verification\" &&\n    typeof payload.challenge === \"string\"\n  ) {\n    return Response.json({ challenge: payload.challenge });\n  }\n  if (isRecord(payload) && isRecord(payload.event)) {\n    const message = optionalRecord(payload.event, \"message\");\n    if (!message) {\n      return new Response(null, { status: 200 });\n    }\n    const messageType = optionalString(message, \"message_type\");\n    const text = parseFeishuText(optionalString(message, \"content\"));\n    if (messageType !== \"text\" || !text) {\n      return new Response(null, { status: 200 });\n    }\n  }\n  return undefined;\n}\n\nexport function createFeishuWebhookAuthenticator(\n  config: ProviderConfig,\n  env: FeishuEnvironment = process.env,\n  runtime: FeishuAuthRuntime = {},\n) {\n  return createFeishuWebhookAuthenticatorWithReplay(config, env, runtime);\n}\n\nfunction createFeishuWebhookAuthenticatorWithReplay(\n  config: ProviderConfig,\n  env: FeishuEnvironment,\n  runtime: FeishuAuthRuntime,\n  replayState?: FeishuReplayState,\n) {\n  const resolved = resolveFeishuAdapterConfig(config, env);\n  const validateCallback = resolved.verificationToken\n    ? createSecretVerifier(resolved.verificationToken)\n    : undefined;\n  if (!(resolved.encryptKey || validateCallback)) {\n    return undefined;\n  }\n  return async (request: Request, rawBody: string): Promise<Response | undefined> => {\n    let payload: unknown;\n    try {\n      payload = JSON.parse(rawBody) as unknown;\n    } catch {\n      return undefined;\n    }\n    if (!isRecord(payload)) {\n      return unauthorizedFeishuWebhook();\n    }\n    const encryptedEnvelope = payload;\n\n    const encrypted = typeof payload.encrypt === \"string\";\n    let signedRequest = false;\n    if (encrypted) {\n      if (!resolved.encryptKey) {\n        return unauthorizedFeishuWebhook();\n      }\n      try {\n        payload = decryptFeishuWebhookPayload(payload, resolved.encryptKey);\n      } catch {\n        return unauthorizedFeishuWebhook();\n      }\n      if (\n        !verifyFeishuSignature(request, rawBody, resolved.encryptKey) &&\n        !isFeishuUrlVerification(payload)\n      ) {\n        return unauthorizedFeishuWebhook();\n      }\n      signedRequest = !isFeishuUrlVerification(payload);\n    } else if (resolved.encryptKey) {\n      return unauthorizedFeishuWebhook();\n    }\n\n    if (validateCallback && !validateCallback(readFeishuVerificationToken(payload))) {\n      return unauthorizedFeishuWebhook();\n    }\n    const now = runtime.now?.() ?? Date.now();\n    const callbackTimestamp = readFeishuCallbackTimestamp(request, payload, signedRequest);\n    if (callbackTimestamp === null) {\n      return unauthorizedFeishuWebhook();\n    }\n    if (\n      callbackTimestamp !== undefined &&\n      Math.abs(now - callbackTimestamp) > FEISHU_MAX_CALLBACK_AGE_MS\n    ) {\n      return unauthorizedFeishuWebhook();\n    }\n    const callbackKeys = readFeishuCallbackKeys(payload, encryptedEnvelope);\n    if (!replayState) {\n      return undefined;\n    }\n    pruneFeishuReplayCache(replayState.accepted, now);\n    while (callbackKeys.length > 0) {\n      if (callbackKeys.some((key) => replayState.accepted.has(key))) {\n        return new Response(null, { status: 200 });\n      }\n      const reservation = callbackKeys\n        .map((key) => replayState.inFlight.get(key))\n        .find((candidate) => candidate !== undefined);\n      if (!reservation) {\n        reserveFeishuCallback(replayState, callbackKeys);\n        break;\n      }\n      if (await reservation.promise) {\n        return new Response(null, { status: 200 });\n      }\n    }\n    return undefined;\n  };\n}\n\nexport class FeishuProviderAdapter extends LocalMockProviderAdapter implements ProviderAdapter {\n  constructor(id: string, config: ProviderConfig, _userName: string, runtime?: unknown) {\n    const authRuntime =\n      (runtime as (FeishuAuthRuntime & { env?: FeishuEnvironment }) | undefined) ?? {};\n    const env = authRuntime.env ?? process.env;\n    const resolved = resolveFeishuAdapterConfig(config, env);\n    requireExternalWebhookAuthentication({\n      authenticated: Boolean(resolved.encryptKey),\n      provider: \"Feishu\",\n      requirement: \"feishu.encryptKey or FEISHU_ENCRYPT_KEY for X-Lark-Signature verification\",\n      webhook: config.feishu?.webhook,\n    });\n    const replayState: FeishuReplayState = {\n      accepted: new Map(),\n      inFlight: new Map(),\n    };\n    const authenticateWebhookRequest = createFeishuWebhookAuthenticatorWithReplay(\n      config,\n      env,\n      authRuntime,\n      replayState,\n    );\n    const decodePayload = (payload: unknown) =>\n      resolved.encryptKey ? decryptFeishuWebhookPayload(payload, resolved.encryptKey) : payload;\n    super({\n      codec: getBuiltinTargetCodec(\"feishu\"),\n      config,\n      id,\n      options: {\n        ...(authenticateWebhookRequest ? { authenticateWebhookRequest } : {}),\n        createWebhookSuccessResponse(payload, responseId) {\n          return new Response(JSON.stringify({ id: responseId, ok: true }), {\n            headers: { \"content-type\": \"application/json\" },\n            status: 200,\n          });\n        },\n        defaultWebhook: { host: \"127.0.0.1\", path: \"/feishu/webhook\", port: 8795 },\n        endpointLabel: \"webhook endpoint\",\n        handleWebhookPayload: (payload) => handleFeishuWebhookPayload(decodePayload(payload)),\n        normalizeWebhookPayload: (payload) => normalizeFeishuWebhookPayload(decodePayload(payload)),\n        platform: \"feishu\",\n        publicUrl: config.feishu?.webhook.publicUrl,\n        recorderPath: config.feishu?.recorder.path\n          ? path.resolve(config.feishu.recorder.path)\n          : undefined,\n        settleWebhookRequest({ accepted, payload, rawBody }) {\n          const encryptedEnvelope = readFeishuSettledEnvelope(payload, rawBody);\n          const decodedPayload = decodePayload(encryptedEnvelope);\n          if (accepted) {\n            acceptFeishuCallback(\n              replayState,\n              decodedPayload,\n              encryptedEnvelope,\n              authRuntime.now?.() ?? Date.now(),\n            );\n          } else {\n            rejectFeishuCallback(replayState, decodedPayload, encryptedEnvelope);\n          }\n        },\n        webhook: config.feishu?.webhook,\n      },\n    });\n  }\n}\n\nexport function normalizeFeishuWebhookPayload(payload: unknown) {\n  if (!isRecord(payload)) {\n    throw new CrablineError(\"Feishu webhook payload must be an object\", { kind: \"inbound\" });\n  }\n\n  const event = optionalRecord(payload, \"event\");\n  const message = event ? optionalRecord(event, \"message\") : undefined;\n  if (!message) {\n    return genericMockPayloadWithNativeThread({\n      channelRule: FEISHU_CHAT_ID_RULE,\n      payload,\n      threadRule: FEISHU_MESSAGE_ID_RULE,\n    });\n  }\n\n  const chatId = optionalString(message, \"chat_id\");\n  const messageType = optionalString(message, \"message_type\");\n  const messageId = optionalString(message, \"message_id\");\n  const rootId = optionalString(message, \"root_id\");\n  const rawContent = optionalString(message, \"content\");\n  const text = parseFeishuText(rawContent);\n  if (messageType !== \"text\") {\n    throw new CrablineError(\"Feishu event payload requires message.message_type=text\", {\n      kind: \"inbound\",\n    });\n  }\n  if (!chatId || !text) {\n    throw new CrablineError(\"Feishu event payload requires message.chat_id and message.content\", {\n      kind: \"inbound\",\n    });\n  }\n\n  return {\n    author: authorFromBotFlag(\n      event\n        ? [\"app\", \"bot\"].includes(\n            optionalString(optionalRecord(event, \"sender\") ?? {}, \"sender_type\") ?? \"\",\n          )\n        : false,\n    ),\n    ...(messageId\n      ? { id: requireNativeInboundId(messageId, FEISHU_MESSAGE_ID_RULE, \"Feishu message_id\") }\n      : {}),\n    raw: payload,\n    text,\n    threadId: rootId\n      ? requireNativeInboundId(rootId, FEISHU_MESSAGE_ID_RULE, \"Feishu root_id\")\n      : requireNativeInboundId(chatId, FEISHU_CHAT_ID_RULE, \"Feishu chat_id\"),\n  };\n}\n\nfunction parseFeishuText(content: string | undefined): string | undefined {\n  if (!content) {\n    return undefined;\n  }\n  try {\n    const parsed: unknown = JSON.parse(content);\n    if (isRecord(parsed) && typeof parsed.text === \"string\") {\n      return parsed.text;\n    }\n    return undefined;\n  } catch {\n    return content;\n  }\n}\n\nfunction readFeishuSettledEnvelope(payload: unknown, rawBody: string): unknown {\n  if (isRecord(payload)) {\n    return payload;\n  }\n  try {\n    return JSON.parse(rawBody) as unknown;\n  } catch {\n    return payload;\n  }\n}\n\nexport function decryptFeishuWebhookPayload(payload: unknown, encryptKey: string): unknown {\n  if (!isRecord(payload) || typeof payload.encrypt !== \"string\") {\n    return payload;\n  }\n  const encrypted = Buffer.from(payload.encrypt, \"base64\");\n  if (encrypted.length <= 16 || (encrypted.length - 16) % 16 !== 0) {\n    throw new Error(\"Feishu encrypted payload is truncated.\");\n  }\n  const key = createHash(\"sha256\").update(encryptKey).digest();\n  const decipher = createDecipheriv(\"aes-256-cbc\", key, encrypted.subarray(0, 16));\n  const decrypted = Buffer.concat([\n    decipher.update(encrypted.subarray(16)),\n    decipher.final(),\n  ]).toString(\"utf8\");\n  return JSON.parse(decrypted) as unknown;\n}\n\nfunction readFeishuVerificationToken(payload: unknown): string | null {\n  if (!isRecord(payload)) {\n    return null;\n  }\n  const header = optionalRecord(payload, \"header\");\n  return (\n    optionalString(payload, \"token\") ?? (header ? optionalString(header, \"token\") : null) ?? null\n  );\n}\n\nfunction isFeishuUrlVerification(payload: unknown): boolean {\n  return (\n    isRecord(payload) &&\n    payload.type === \"url_verification\" &&\n    typeof payload.challenge === \"string\" &&\n    payload.challenge.length > 0\n  );\n}\n\nfunction verifyFeishuSignature(request: Request, rawBody: string, encryptKey: string): boolean {\n  const timestamp = request.headers.get(\"x-lark-request-timestamp\");\n  const nonce = request.headers.get(\"x-lark-request-nonce\");\n  const signature = request.headers.get(\"x-lark-signature\");\n  if (!timestamp || !nonce || !signature || !/^[0-9a-f]{64}$/iu.test(signature)) {\n    return false;\n  }\n  const expected = createHash(\"sha256\")\n    .update(timestamp + nonce + encryptKey + rawBody)\n    .digest();\n  return timingSafeEqual(expected, Buffer.from(signature, \"hex\"));\n}\n\nfunction readFeishuCallbackTimestamp(\n  request: Request,\n  payload: unknown,\n  signedRequest: boolean,\n): number | null | undefined {\n  const requestTimestamp = signedRequest\n    ? request.headers.get(\"x-lark-request-timestamp\")\n    : undefined;\n  const header = isRecord(payload) ? optionalRecord(payload, \"header\") : undefined;\n  const headerTimestamp = header ? optionalString(header, \"create_time\") : undefined;\n  const value = requestTimestamp ?? headerTimestamp;\n  if (!value) {\n    return undefined;\n  }\n  if (!/^\\d+$/u.test(value)) {\n    return null;\n  }\n  const timestamp = Number(value);\n  if (!Number.isSafeInteger(timestamp)) {\n    return null;\n  }\n  if (timestamp >= 100_000_000_000_000) {\n    return Math.floor(timestamp / 1_000);\n  }\n  if (timestamp >= 100_000_000_000) {\n    return timestamp;\n  }\n  return timestamp * 1_000;\n}\n\nfunction readFeishuCallbackKeys(payload: unknown, encryptedEnvelope: unknown): string[] {\n  if (!isRecord(payload) || isFeishuUrlVerification(payload)) {\n    return [];\n  }\n  const event = optionalRecord(payload, \"event\");\n  const message = event ? optionalRecord(event, \"message\") : undefined;\n  const header = optionalRecord(payload, \"header\");\n  const messageId = message ? optionalString(message, \"message_id\") : undefined;\n  const eventId = header ? optionalString(header, \"event_id\") : undefined;\n  const encrypted = isRecord(encryptedEnvelope)\n    ? optionalString(encryptedEnvelope, \"encrypt\")\n    : undefined;\n  return [\n    ...(messageId ? [`message:${messageId}`] : []),\n    ...(eventId ? [`event:${eventId}`] : []),\n    ...(encrypted ? [`encrypted:${createHash(\"sha256\").update(encrypted).digest(\"hex\")}`] : []),\n  ];\n}\n\nfunction reserveFeishuCallback(replayState: FeishuReplayState, callbackKeys: string[]): void {\n  let resolveReservation!: (accepted: boolean) => void;\n  const promise = new Promise<boolean>((resolve) => {\n    resolveReservation = resolve;\n  });\n  const reservation: FeishuReplayReservation = {\n    keys: new Set(callbackKeys),\n    promise,\n    resolve: resolveReservation,\n  };\n  for (const key of callbackKeys) {\n    replayState.inFlight.set(key, reservation);\n  }\n}\n\nfunction acceptFeishuCallback(\n  replayState: FeishuReplayState,\n  payload: unknown,\n  encryptedEnvelope: unknown,\n  now: number,\n): void {\n  const callbackKeys = readFeishuCallbackKeys(payload, encryptedEnvelope);\n  pruneFeishuReplayCache(replayState.accepted, now);\n  for (const key of callbackKeys) {\n    replayState.accepted.set(key, now);\n  }\n  const reservations = new Set(\n    callbackKeys\n      .map((key) => replayState.inFlight.get(key))\n      .filter((reservation) => reservation !== undefined),\n  );\n  for (const reservation of reservations) {\n    releaseFeishuReservation(replayState, reservation, true);\n  }\n}\n\nfunction rejectFeishuCallback(\n  replayState: FeishuReplayState,\n  payload: unknown,\n  encryptedEnvelope: unknown,\n): void {\n  const callbackKeys = readFeishuCallbackKeys(payload, encryptedEnvelope);\n  const reservations = new Set(\n    callbackKeys\n      .map((key) => replayState.inFlight.get(key))\n      .filter((reservation) => reservation !== undefined),\n  );\n  for (const reservation of reservations) {\n    releaseFeishuReservation(replayState, reservation, false);\n  }\n}\n\nfunction releaseFeishuReservation(\n  replayState: FeishuReplayState,\n  reservation: FeishuReplayReservation,\n  accepted: boolean,\n): void {\n  for (const key of reservation.keys) {\n    if (replayState.inFlight.get(key) === reservation) {\n      replayState.inFlight.delete(key);\n    }\n  }\n  reservation.resolve(accepted);\n}\n\nfunction pruneFeishuReplayCache(recentCallbacks: Map<string, number>, now: number): void {\n  for (const [key, acceptedAt] of recentCallbacks) {\n    if (\n      now - acceptedAt > FEISHU_MAX_CALLBACK_AGE_MS ||\n      recentCallbacks.size > FEISHU_REPLAY_CACHE_LIMIT\n    ) {\n      recentCallbacks.delete(key);\n    }\n  }\n}\n\nfunction unauthorizedFeishuWebhook(): Response {\n  return new Response(\"unauthorized\", { status: 401 });\n}\n"]}

package/dist/src/providers/builtin/googlechat.d.ts

@@ -4,8 +4,27 @@ import type { ProviderAdapter } from "../types.js";
 export declare function resolveGoogleChatAdapterConfig(config: ProviderConfig, _env?: NodeJS.ProcessEnv): {
     endpointUrl: string | undefined;
     projectNumber: string;
+    pubsubServiceAccountEmail: string | undefined;
     userName: string | undefined;
 };
+type GoogleChatAuthRuntime = {
+    fetch?: typeof fetch | undefined;
+    keyFetchTimeoutMs?: number | undefined;
+    now?: (() => number) | undefined;
+    unknownKeyCooldownMs?: number | undefined;
+};
+export declare function createGoogleChatWebhookAuthenticator(config: ProviderConfig, runtime?: GoogleChatAuthRuntime): ((request: Request, rawBody: string) => Promise<Response | undefined>) | undefined;
+export declare function matchesGoogleChatThread(candidateThreadId: string, expectedThreadId: string | undefined, target?: {
+    channelId?: string | undefined;
+}): boolean;
 export declare class GoogleChatProviderAdapter extends LocalMockProviderAdapter implements ProviderAdapter {
-    constructor(id: string, config: ProviderConfig, _userName: string, _runtime?: unknown);
+    constructor(id: string, config: ProviderConfig, _userName: string, runtime?: unknown);
 }
+export declare function normalizeGoogleChatWebhookPayload(payload: unknown): {
+    author?: "assistant" | "system" | "user" | undefined;
+    authorIsBot?: boolean;
+    id?: string | undefined;
+    raw: {};
+    text?: string | undefined;
+};
+export {};