@wildo-ai/external-connectors-models 1.1.9 → 1.1.11

package/dist/esm/protocols/hooks.external-connectors-models.schemas.d.ts

@@ -9,16 +9,81 @@ export declare enum Hook_ContentType {
     FORM_URLENCODED = "application/x-www-form-urlencoded",
     XML = "application/xml"
 }
+/** @wildo_source:part:start external-connectors.models.hook-trigger-strategy facet:kind:api facet:audience:app-developer */
+/**
+ * How a provider endpoint's requests are TRUSTED, and so what the engine does with them. A trust posture, kept apart from
+ * {@link Hook_SignatureAlgorithm}, which only says how a signature is checked.
+ */
 export declare enum Hook_TriggerStrategy {
+    /** The vendor pushes events, verified by the endpoint's `signatureConfig`; a verified event is stored and handled. */
     WEBHOOK = "webhook",
     POLLING = "polling",
-    APP_WEBHOOK = "app_webhook"
+    APP_WEBHOOK = "app_webhook",
+    /**
+     * The vendor pushes a NOTIFICATION nobody can verify (#2909): it signs nothing (IgniSign). The request is never
+     * trusted. It only names an object (`reReadTrigger.identifyReference`), and the engine:
+     * - answers 202 whatever happens, so a sender learns nothing about which references exist;
+     * - drops it unless the endpoint's handler resolves the reference to a record of this application;
+     * - stores only the reference, under an id derived from the reference and a coalescing window, so one reference
+     *   causes at most one re-read per window, one at a time, and a notification after that window's re-read is kept for
+     *   the next window rather than lost;
+     * - limits the endpoint's request rate, and charges the re-read to a share of the vendor's declared rate budget, so a
+     *   flood never spends what polling needs. The provider must therefore DECLARE a budget (`rateBudgets` on its
+     *   connection, or `maxRequestsPerMinute`); without one the route is withheld.
+     * The handler then RE-READS the object from the vendor's authenticated API: what the record becomes is what the
+     * vendor answered there, never what the notification said. Its handler resolves the reference to a record in an
+     * organization or a person's data, never the application scope. Polling remains the latency floor under attack.
+     * Such an endpoint declares no `signatureConfig`.
+     */
+    WEBHOOK_TRIGGERS_POLL = "webhook_triggers_poll"
 }
+/**
+ * What a {@link Hook_TriggerStrategy.WEBHOOK_TRIGGERS_POLL} endpoint declares (#2909). Pure functions and numbers only:
+ * the request is unverified, so nothing in it is believed beyond the reference it names.
+ */
+export interface Hook_ReReadTrigger {
+    /**
+     * The vendor's reference to the object the notification is about (a signature request id), read from the decoded,
+     * UNVERIFIED body, or `null` when it names none. It is only ever looked up and re-read, never trusted. Pure: no I/O.
+     */
+    readonly identifyReference: (request: Hook_InboundRequest) => string | null;
+    /**
+     * The coalescing window, in seconds (default {@link HOOK_REREAD_TRIGGER_DEFAULT_COALESCING_WINDOW_SECONDS}): a reference
+     * is re-read at most once per window, the windows aligned on the clock. A notification arriving once its window's
+     * re-read is already stored is kept for the NEXT window, due at its start, so the last change a vendor reports is
+     * never lost. A positive integer; the route is withheld otherwise.
+     */
+    readonly coalescingWindowSeconds?: number;
+    /**
+     * The most requests the endpoint takes per window, from every sender together (default
+     * {@link HOOK_REREAD_TRIGGER_DEFAULT_RATE_LIMIT}). Past it a request is dropped, still answered 202. Positive integers.
+     */
+    readonly rateLimit?: {
+        readonly maxRequests: number;
+        readonly windowSeconds: number;
+    };
+}
+/** The default coalescing window of a re-read trigger: one re-read per reference per minute. */
+export declare const HOOK_REREAD_TRIGGER_DEFAULT_COALESCING_WINDOW_SECONDS = 60;
+/** The default request rate of a re-read trigger endpoint, all senders together. */
+export declare const HOOK_REREAD_TRIGGER_DEFAULT_RATE_LIMIT: {
+    readonly maxRequests: 120;
+    readonly windowSeconds: 60;
+};
+/**
+ * Whether an endpoint only triggers re-reads (#2909): its requests are never verified, never trusted. Decided by an
+ * exhaustive switch, so a strategy added tomorrow must be classified here before anything compiles (review F9).
+ */
+export declare function isReReadTriggerEndpoint(endpoint: Pick<Hook_Endpoint, 'triggerStrategy'>): boolean;
+/** Whether a re-read trigger's declared numbers can be enforced: every one a positive integer (#2909 review F6). */
+export declare function reReadTriggerLimitsAreSound(trigger: Pick<Hook_ReReadTrigger, 'coalescingWindowSeconds' | 'rateLimit'>): boolean;
+/** @wildo_source:part:end external-connectors.models.hook-trigger-strategy */
 export declare enum Hook_HandshakeType {
     NONE = "none",
     CHALLENGE_RESPONSE = "challenge_response",
     VERIFICATION_TOKEN = "verification_token"
 }
+/** @wildo_source:part:start external-connectors.models.hook-signature-algorithms facet:kind:api facet:audience:app-developer */
 export declare enum Hook_SignatureAlgorithm {
     HMAC_SHA256 = "hmac-sha256",
     HMAC_SHA512 = "hmac-sha512",
@@ -33,8 +98,40 @@ export declare enum Hook_SignatureAlgorithm {
      * spec-cite: https://docs.svix.com/receiving/verifying-payloads/how-manual — headers, signed content, secret
      * format, versioned signature list and timestamp tolerance.
      */
-    SVIX_V1 = "svix-v1"
+    SVIX_V1 = "svix-v1",
+    /**
+     * Slack's request signing, verified by the ENGINE (#2659): HMAC-SHA256 with the app's signing secret over
+     * `v0:{X-Slack-Request-Timestamp}:{raw body}`, sent as `X-Slack-Signature: v0=<hex>`, inside a five-minute
+     * window. It covers JSON events and form-encoded interactions and commands alike, because it signs the bytes.
+     * Slack signs no delivery id, so the endpoint names its events with `identifyEvent` (an `event_id` or a
+     * `trigger_id` read from the verified body).
+     *
+     * spec-cite: https://docs.slack.dev/authentication/verifying-requests-from-slack — basestring, header names,
+     *   `v0=` hex signature, raw body, five-minute window.
+     */
+    SLACK_V0 = "slack-v0",
+    /**
+     * The Bot Framework Connector's bearer token, verified by the ENGINE (#2659), for Microsoft Teams and every
+     * other Azure Bot Service channel. The request carries `Authorization: Bearer <JWT>`; the token must be
+     * signed with a key from the Connector's published key set under an algorithm its OpenID metadata names,
+     * with issuer `https://api.botframework.com`, audience equal to the bot's Microsoft App ID (the value the
+     * endpoint's secret resolves to), inside its validity period (five minutes' skew), a `serviceUrl` claim
+     * equal to the activity's `serviceUrl`, and a signing key endorsed for the activity's `channelId`.
+     * The activity carries its own `id`, which the endpoint's `identifyEvent` returns.
+     *
+     * spec-cite: https://learn.microsoft.com/en-us/azure/bot-service/rest-api/bot-framework-rest-connector-authentication
+     *   — "Authenticate requests from the Bot Connector service to your bot", steps 2-4 and the seven
+     *   numbered token requirements.
+     */
+    BOT_FRAMEWORK_JWT = "bot-framework-jwt"
 }
+/**
+ * The algorithms the ENGINE verifies itself. An endpoint naming one needs no provider adapter, and cannot be
+ * given one: the scheme is engine code, so the one fail-closed decision of the inbound path never moves into a
+ * provider package. Every other algorithm is verified by the adapter its provider registers.
+ */
+export declare const HOOK_ENGINE_VERIFIED_SIGNATURE_ALGORITHMS: ReadonlySet<Hook_SignatureAlgorithm>;
+/** @wildo_source:part:end external-connectors.models.hook-signature-algorithms */
 export declare enum Hook_DeliveryStatus {
     PENDING = "pending",
     DELIVERED = "delivered",
@@ -46,6 +143,7 @@ export declare const Hook_SignatureConfigSchema: z.ZodObject<{
     headerName: z.ZodString;
     timestampHeader: z.ZodOptional<z.ZodString>;
     prefix: z.ZodOptional<z.ZodString>;
+    organizationAudienceFact: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type Hook_SignatureConfig = z.infer<typeof Hook_SignatureConfigSchema>;
 export declare const Hook_TriggerSpecSchema: z.ZodObject<{
@@ -58,6 +156,7 @@ export declare const Hook_TriggerSpecSchema: z.ZodObject<{
         headerName: z.ZodString;
         timestampHeader: z.ZodOptional<z.ZodString>;
         prefix: z.ZodOptional<z.ZodString>;
+        organizationAudienceFact: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     pollingIntervalMs: z.ZodOptional<z.ZodNumber>;
     deduplicationKey: z.ZodOptional<z.ZodString>;
@@ -129,6 +228,201 @@ export type Hook_EndpointScopeBinding = {
         payloadScopeIdPath: string;
     }>;
 };
+/** @wildo_source:part:start external-connectors.models.hook-inbound-endpoint facet:kind:api facet:audience:app-developer */
+/**
+ * A provider request AFTER the engine verified it, as an endpoint's pure functions read it.
+ *
+ * Only ever built from a request whose signature or token the engine accepted, so everything in it, the
+ * decoded body included, is what the sender signed (or, for a bearer-token scheme, what an authenticated
+ * sender sent over TLS).
+ */
+export interface Hook_InboundRequest {
+    /** The exact bytes received. */
+    readonly rawBody: Uint8Array;
+    /** Every request header, names lower-cased as Node delivers them. */
+    readonly headers: Readonly<Record<string, string | readonly string[] | undefined>>;
+    /** The media type the body was decoded as: one of the endpoint's `contentTypes`. */
+    readonly contentType: Hook_ContentType;
+    /**
+     * The decoded body. JSON: the parsed value. A form: its fields, a field sent more than once becoming an array of
+     * its values in order; bracket names (`a[b]`) are kept as written, never expanded into objects.
+     */
+    readonly body: unknown;
+}
+/** What identifies one provider event: the id the store deduplicates on, and the type a handler is chosen by. */
+export interface Hook_InboundEventIdentity {
+    /** Unique per event at the provider, and stable across its retries. */
+    readonly eventId: string;
+    /** The provider's own name for the event (`app_mention`, `block_actions`, `invoke`, …). */
+    readonly providerEventType: string;
+}
+/**
+ * A person's PERSONAL (one-to-one) conversation with the bot, as a verified request names it (#2664 S5b): who the person
+ * is (the same account their chat identity link is keyed on) and where the bot can post to them later.
+ */
+export interface Hook_InboundPersonalConversation {
+    /** The vendor's workspace or tenant, exactly as the provider's chat accounts write it (a lower-cased tenant id). */
+    readonly workspaceRef: string;
+    /** The vendor's id for the person, exactly as the provider's chat accounts write it (a lower-cased Entra object id). */
+    readonly chatUserId: string;
+    /** The conversation's id at the vendor. */
+    readonly conversationId: string;
+    /** Where the vendor takes messages for that conversation (the Bot Connector's `serviceUrl`). */
+    readonly serviceUrl: string;
+}
+/**
+ * Who sees a chat conversation at the vendor (#2665 S6), which decides where an answer to it may be posted. The chat
+ * door reads it from the verified request (`Hook_InboundChatMessage.audience`) and the chat-conversation ledger records it.
+ */
+export declare enum ChatConversationAudience {
+    /** A one-to-one conversation with the bot (a Slack DM, a Teams personal chat): answered in it. */
+    DIRECT = "direct",
+    /**
+     * A conversation other people read (a channel, a group chat): answered privately, in the asker's own conversation with
+     * the bot, with a content-free pointer in the thread. A turn runs with the asker's authority, so its answer may name
+     * what the others in the thread cannot see.
+     */
+    SHARED = "shared",
+    /** A shared conversation that reaches people outside the organization (Slack Connect, a Teams shared channel): the same. */
+    SHARED_WITH_EXTERNAL = "shared_with_external"
+}
+/** Whether a vendor conversation is a thread or a flat stream of messages (#2665 S6, plan B11). */
+export declare enum Hook_ChatConversationThreading {
+    /** A thread (a Slack thread, a Teams channel's reply chain): one conversation for its whole life. */
+    THREADED = "threaded",
+    /**
+     * A flat conversation (a top-level Slack DM, a Teams personal or group chat): split after a quiet gap measured on the
+     * vendor's clock, so one transcript never grows without bound.
+     */
+    FLAT = "flat"
+}
+/** The person who wrote a chat message, as the provider's chat accounts write them: what their chat identity link is keyed on. */
+export declare const Hook_InboundChatSenderSchema: z.ZodObject<{
+    workspaceRef: z.ZodString;
+    chatUserId: z.ZodString;
+    chatUserDisplayName: z.ZodOptional<z.ZodString>;
+    workspaceDisplayName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type Hook_InboundChatSender = z.infer<typeof Hook_InboundChatSenderSchema>;
+/**
+ * A message a person wrote to the bot, as a verified request carries it (#2665 S6, plan A14). The chat door reads all of
+ * it from the request the engine verified, never from a handler, so a handler decides only WHETHER to converse.
+ *
+ * One schema, the type derived from it (#2665 S6 review L-B): the engine parses what a provider module's `chatMessageOf`
+ * returns with this very schema, so a field added here is checked at the engine's boundary the day it is added, and a
+ * value the module built wrong (an empty key, a date that is not one) is read as no message.
+ */
+export declare const Hook_InboundChatMessageSchema: z.ZodObject<{
+    sender: z.ZodObject<{
+        workspaceRef: z.ZodString;
+        chatUserId: z.ZodString;
+        chatUserDisplayName: z.ZodOptional<z.ZodString>;
+        workspaceDisplayName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    conversationKey: z.ZodString;
+    threading: z.ZodEnum<typeof Hook_ChatConversationThreading>;
+    audience: z.ZodEnum<typeof ChatConversationAudience>;
+    messageKey: z.ZodString;
+    sentAt: z.ZodDate;
+    text: z.ZodString;
+    replyTarget: z.ZodString;
+}, z.core.$strip>;
+export type Hook_InboundChatMessage = z.infer<typeof Hook_InboundChatMessageSchema>;
+/**
+ * A chat COMMAND a person sent, as a verified request carries it (#2666 S7): a Slack slash command (`/todo add buy milk`)
+ * or a Teams message-extension form a person submitted. Read by the engine from the request it verified, so the command
+ * door runs what the person sent and never what a handler says they sent. One schema, the type derived from it: what a
+ * provider module's `chatCommandOf` returns is parsed with it, and a value built wrong is read as no command.
+ */
+export declare const Hook_InboundChatCommandSchema: z.ZodObject<{
+    sender: z.ZodObject<{
+        workspaceRef: z.ZodString;
+        chatUserId: z.ZodString;
+        chatUserDisplayName: z.ZodOptional<z.ZodString>;
+        workspaceDisplayName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    verb: z.ZodNullable<z.ZodString>;
+    text: z.ZodString;
+    values: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    audience: z.ZodEnum<typeof ChatConversationAudience>;
+    replyTarget: z.ZodString;
+}, z.core.$strip>;
+export type Hook_InboundChatCommand = z.infer<typeof Hook_InboundChatCommandSchema>;
+/**
+ * A chat SEARCH a person typed (#2666 S7): a Teams message-extension search, sent as the person types and answered within
+ * the vendor's deadline in the same request, never stored. Read by the engine from the request it verified.
+ */
+export declare const Hook_InboundChatSearchSchema: z.ZodObject<{
+    sender: z.ZodObject<{
+        workspaceRef: z.ZodString;
+        chatUserId: z.ZodString;
+        chatUserDisplayName: z.ZodOptional<z.ZodString>;
+        workspaceDisplayName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    verb: z.ZodString;
+    text: z.ZodString;
+    initialRun: z.ZodBoolean;
+    skip: z.ZodNumber;
+    vendorRequestId: z.ZodString;
+}, z.core.$strip>;
+export type Hook_InboundChatSearch = z.infer<typeof Hook_InboundChatSearchSchema>;
+/** What the engine answers a chat search with, before the vendor module writes it in the vendor's own response (#2666 S7). */
+export declare enum Hook_ChatSearchAnswerKind {
+    /** Records the person may insert, each named and linked. Empty when this page has nothing (a later page of the results). */
+    RESULTS = "results",
+    /** One plain sentence in place of results: nothing found, refused, keep typing, try again. Carries no formatting. */
+    MESSAGE = "message",
+    /** The person's chat account is linked to no member yet: the page that links it, and the text of the action that opens it. */
+    SIGN_IN = "sign_in"
+}
+/** One record a chat search found: its name and its page in the application, nothing else (selecting it shares only these). */
+export interface Hook_ChatSearchAnswerItem {
+    /** The record's id. */
+    readonly id: string;
+    /** The record's name (its resource's `recordLabelFields`), or the framework's "open it" phrase when it has none. */
+    readonly title: string;
+    /** The record's page in the application, or `null` when its route cannot be built. */
+    readonly url: string | null;
+}
+/**
+ * The engine's answer to a chat search (#2666 S7), in the searcher's language, which the endpoint's
+ * {@link Hook_Endpoint.answerChatSearch} turns into the vendor's response (a Teams `composeExtension` of type `result`,
+ * `message` or `auth`). Built by the engine from the member's own results; a module only chooses how it looks.
+ */
+export type Hook_ChatSearchAnswer = {
+    readonly kind: Hook_ChatSearchAnswerKind.RESULTS;
+    readonly items: readonly Hook_ChatSearchAnswerItem[];
+} | {
+    readonly kind: Hook_ChatSearchAnswerKind.MESSAGE;
+    readonly text: string;
+} | {
+    readonly kind: Hook_ChatSearchAnswerKind.SIGN_IN;
+    readonly text: string;
+    readonly url: string;
+};
+/** How an endpoint's synchronous answer writes its body. */
+export declare enum Hook_AcknowledgementEncoding {
+    /** No body. Slack takes an empty 200 as "received, nothing to show"; it closes a submitted modal view. */
+    EMPTY = "empty",
+    /** `application/json`. */
+    JSON = "json",
+    /** `text/plain; charset=utf-8`. */
+    TEXT = "text"
+}
+/**
+ * The HTTP answer a provider's contract requires within its deadline, computed from the verified request.
+ * Always a 200: it is the answer to a request the engine ACCEPTED (stored, a duplicate, or one no handler takes),
+ * so a refusal never takes this path. The work itself still goes through the durable store and the queue.
+ */
+export type Hook_Acknowledgement = {
+    readonly encoding: Hook_AcknowledgementEncoding.EMPTY;
+} | {
+    readonly encoding: Hook_AcknowledgementEncoding.JSON;
+    readonly body: unknown;
+} | {
+    readonly encoding: Hook_AcknowledgementEncoding.TEXT;
+    readonly body: string;
+};
 /**
  * A webhook endpoint for a specific domain/capability within a provider.
  *
@@ -159,12 +453,17 @@ export type Hook_Endpoint = {
     displayName?: string;
     /** Which capability this endpoint serves */
     capability: string;
-    /** Signature verification config for this endpoint */
-    signatureConfig: Hook_SignatureConfig;
-    /** Trigger strategy (webhook push, polling, app_webhook) */
+    /**
+     * How a request is verified. Required on every endpoint except a
+     * {@link Hook_TriggerStrategy.WEBHOOK_TRIGGERS_POLL} one, which must declare none (nothing it receives is verified, and
+     * a signature setting nothing reads would look like a control). The route gate withholds an endpoint that breaks either
+     * half.
+     */
+    signatureConfig?: Hook_SignatureConfig;
+    /** How the endpoint's requests are trusted, and so handled. See {@link Hook_TriggerStrategy}. */
     triggerStrategy: Hook_TriggerStrategy;
-    /** Handshake type if applicable */
-    handshakeType?: Hook_HandshakeType;
+    /** Required for, and only for, a {@link Hook_TriggerStrategy.WEBHOOK_TRIGGERS_POLL} endpoint (#2909). */
+    reReadTrigger?: Hook_ReReadTrigger;
     /** Event types this endpoint handles (single source of truth) */
     eventTypes: string[];
     /** Declarative scope binding — how events map to engine scope */
@@ -176,7 +475,89 @@ export type Hook_Endpoint = {
      * own body limit applies.
      */
     maxBodyBytes?: number;
+    /**
+     * The media types this endpoint accepts (#2659). A request in any other is refused 415 and audited. Omitted,
+     * the endpoint accepts JSON only. Slack's interactions and slash commands are `FORM_URLENCODED`. The engine
+     * decodes JSON and form bodies; it decodes no XML, so an endpoint declaring XML refuses every request.
+     */
+    contentTypes?: ReadonlyArray<Hook_ContentType>;
+    /**
+     * The verified request names a PERSON of the vendor's chat: a workspace or tenant and a user id, both carried in
+     * bytes the vendor signed (Slack's events, clicks and commands; a Teams activity). Only such an endpoint's handler
+     * may act as the member that chat account is linked to (`ctx.chat`, #2664); every other handler is refused.
+     *
+     * Honored only on an endpoint the ENGINE verifies (`HOOK_ENGINE_VERIFIED_SIGNATURE_ALGORITHMS`), read through
+     * {@link hookEndpointNamesChatMember}: a person named in bytes the engine did not check could be anyone. An email
+     * intake endpoint never declares it, because a From address is not verified by anything.
+     */
+    namesChatMember?: boolean;
+    /**
+     * Answers a HANDSHAKE: a request that proves the endpoint is reachable rather than delivering an event
+     * (Slack's `url_verification`, answered with its `challenge`). Returns the answer for a handshake, `null` for
+     * anything else. A handshake is answered and never stored: no handler runs for it.
+     */
+    answerHandshake?: (request: Hook_InboundRequest) => Hook_Acknowledgement | null;
+    /**
+     * Names the event in a verified request, for an engine-verified endpoint whose scheme signs no delivery id
+     * (`SLACK_V0`, `BOT_FRAMEWORK_JWT`). Returns `null` for a request that carries no event the provider names; it
+     * is acknowledged and stored nowhere. `SVIX_V1` needs none: its signed `svix-id` and the body's `type` name it.
+     * An engine-verified endpoint whose scheme signs no id is not mounted without one.
+     */
+    identifyEvent?: (request: Hook_InboundRequest) => Hook_InboundEventIdentity | null;
+    /**
+     * The synchronous answer the provider requires, replacing the engine's `{ received: true }` on every accepted
+     * request (Slack: an empty 200; a Teams `invoke`: an invoke response body). Omitted, the engine's answer stands.
+     */
+    acknowledge?: (request: Hook_InboundRequest) => Hook_Acknowledgement;
+    /**
+     * The PERSONAL conversation this request happened in, or `null` when it happened anywhere else (a group chat, a
+     * channel) or names no person (#2664 S5b). Only for an endpoint that {@link namesChatMember} and whose scheme names
+     * the bot the token was for (`BOT_FRAMEWORK_JWT`). The engine records it on the sender's chat identity link in the
+     * delivery's organization, under that bot, so the application can post to the person later without their writing
+     * first. A throw is logged and records nothing: the delivery is unaffected.
+     */
+    personalConversationOf?: (request: Hook_InboundRequest) => Hook_InboundPersonalConversation | null;
+    /**
+     * The message a person wrote to the bot in this request, or `null` when it carries none: a click, a command, the
+     * bot's own message, an edit or a deletion (#2665 S6). Only for an endpoint that {@link namesChatMember}, on a scheme the
+     * engine verifies: declared anywhere else, it stops startup (#2666 S7), because a person's words read from it would be
+     * stored where READ returns them and nothing empties them. A handler on
+     * such an endpoint converses through `ctx.chat.converse()`, which reads the message from here, and the engine orders
+     * each sender's messages of one conversation by it (the delivery's ordering key). A throw is treated as `null`.
+     * Read the BODY only: the engine calls it at receipt and again from the stored delivery, which keeps no header but
+     * `content-type`, and the two reads must name the same message.
+     */
+    chatMessageOf?: (request: Hook_InboundRequest) => Hook_InboundChatMessage | null;
+    /**
+     * The chat command a person sent in this request, or `null` when it carries none (#2666 S7): a Slack slash command, or a
+     * Teams message-extension form submitted. Only for an endpoint that {@link namesChatMember} on a scheme the engine
+     * verifies; declared anywhere else, it stops startup. The engine marks the stored
+     * delivery a COMMAND at receipt, so its body has one copy, and a handler runs it through `ctx.chat.runCommand()`, which
+     * reads it from here. A throw is treated as `null`. Read the BODY only: the engine calls it at receipt and again from the
+     * stored delivery, which keeps no header but `content-type`.
+     */
+    chatCommandOf?: (request: Hook_InboundRequest) => Hook_InboundChatCommand | null;
+    /**
+     * The chat SEARCH a person typed in this request, or `null` (#2666 S7): a Teams message-extension search. Only for an
+     * endpoint that {@link namesChatMember} on a scheme the engine verifies; declared anywhere else, it stops startup. A search is answered in the request and never stored, so the engine asks this
+     * BEFORE it names an event: a request it answers is a search, and nothing else runs for it. A throw is treated as `null`.
+     * Declared with {@link answerChatSearch}, or startup refuses the endpoint.
+     */
+    chatSearchOf?: (request: Hook_InboundRequest) => Hook_InboundChatSearch | null;
+    /**
+     * The vendor's response to a chat search, from the engine's answer (#2666 S7): the person's results, a sentence, or the
+     * page that links their chat account. Pure, because it is written inside the vendor's deadline. Declared exactly when
+     * {@link chatSearchOf} is: one without the other stops startup.
+     */
+    answerChatSearch?: (answer: Hook_ChatSearchAnswer) => Hook_Acknowledgement;
 };
+/** @wildo_source:part:end external-connectors.models.hook-inbound-endpoint */
+/**
+ * Whether an endpoint's handler may act as the chat member its verified request names (#2664): the endpoint declares
+ * {@link Hook_Endpoint.namesChatMember}, AND the engine verifies it. A declaration on an endpoint a provider adapter
+ * verifies is not honored, so the decision rests on engine code alone.
+ */
+export declare function hookEndpointNamesChatMember(endpoint: Pick<Hook_Endpoint, 'namesChatMember' | 'signatureConfig'>): boolean;
 export type HookInitiatorProvider_Configuration = ExternalProvider_ExchangeProtocol_Configuration_Base & {
     /** Webhook endpoints — each generates a route: POST /webhooks/{providerRef}/{endpointKey} */
     endpoints: Hook_Endpoint[];

package/dist/esm/protocols/hooks.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/protocols/hooks.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,oDAAoD,EAErD,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qDAAqD,CAAC;AACjG,OAAO,EAA2C,yCAAyC,EAAE,MAAM,uDAAuD,CAAC;AAc3J,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAIrD,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,SAAS,0BAA0B,EAKlE,CAAC;AAEF,oBAAY,gBAAgB;IAC1B,IAAI,qBAAqB;IACzB,eAAe,sCAAsC;IACrD,GAAG,oBAAoB;CACxB;AAED,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,WAAW,gBAAgB;CAC5B;AAED,oBAAY,kBAAkB;IAC5B,IAAI,SAAS;IACb,kBAAkB,uBAAuB;IACzC,kBAAkB,uBAAuB;CAC1C;AAED,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,SAAS,cAAc;IACvB;;;;;;;;;OASG;IACH,OAAO,YAAY;CACpB;AAED,oBAAY,mBAAmB;IAC7B,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB;AAMD,eAAO,MAAM,0BAA0B;;;;;iBAKrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;iBAoBjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAMtE;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,2EAA2E;IAC3E,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wGAAwG;IACxG,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,yBAAyB,GACjC;IACE,iEAAiE;IACjE,YAAY,EAAE,aAAa,CAAC;CAC7B,GACD;IACE,oEAAoE;IACpE,YAAY,EAAE,eAAe,GAAG,WAAW,CAAC;IAC5C,+GAA+G;IAC/G,kBAAkB,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,+HAA+H;IAC/H,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qHAAqH;IACrH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC,GACD;IACE,0EAA0E;IAC1E,IAAI,EAAE,aAAa,CAAC;IACpB,+GAA+G;IAC/G,kBAAkB,EAAE,MAAM,CAAC;IAC3B,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,QAAQ,EAAE,8BAA8B,EAAE,CAAC;IAC3C,qHAAqH;IACrH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,kBAAkB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE,CAAC;AAMN;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,eAAe,EAAE,oBAAoB,CAAC;IACtC,4DAA4D;IAC5D,eAAe,EAAE,oBAAoB,CAAC;IACtC,mCAAmC;IACnC,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,iEAAiE;IACjE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,iEAAiE;IACjE,YAAY,EAAE,yBAAyB,CAAC;IACxC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAMF,MAAM,MAAM,mCAAmC,GAAG,oDAAoD,GAAG;IACvG,6FAA6F;IAC7F,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,+DAA+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAMF,eAAO,MAAM,2BAA2B;;;;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF,MAAM,MAAM,wBAAwB,GAAG,yCAAyC,GAAG;IACjF,WAAW,EAAE,gBAAgB,CAAC;IAC9B,sBAAsB,EAAE,OAAO,2BAA2B,CAAC;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC"}
+{"version":3,"file":"hooks.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/protocols/hooks.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,oDAAoD,EAErD,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qDAAqD,CAAC;AACjG,OAAO,EAA2C,yCAAyC,EAAE,MAAM,uDAAuD,CAAC;AAc3J,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAIrD,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,SAAS,0BAA0B,EAKlE,CAAC;AAEF,oBAAY,gBAAgB;IAC1B,IAAI,qBAAqB;IACzB,eAAe,sCAAsC;IACrD,GAAG,oBAAoB;CACxB;AAED,4HAA4H;AAC5H;;;GAGG;AACH,oBAAY,oBAAoB;IAC9B,sHAAsH;IACtH,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,0BAA0B;CAChD;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,IAAI,CAAC;IAC5E;;;;;OAKG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CACvF;AAED,gGAAgG;AAChG,eAAO,MAAM,qDAAqD,KAAK,CAAC;AACxE,oFAAoF;AACpF,eAAO,MAAM,sCAAsC;;;CAAmD,CAAC;AAEvG;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,GAAG,OAAO,CAgBjG;AAED,oHAAoH;AACpH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,EAAE,yBAAyB,GAAG,WAAW,CAAC,GAAG,OAAO,CAI/H;AACD,8EAA8E;AAE9E,oBAAY,kBAAkB;IAC5B,IAAI,SAAS;IACb,kBAAkB,uBAAuB;IACzC,kBAAkB,uBAAuB;CAC1C;AAED,gIAAgI;AAChI,oBAAY,uBAAuB;IACjC,WAAW,gBAAgB;IAC3B,WAAW,gBAAgB;IAC3B,SAAS,cAAc;IACvB;;;;;;;;;OASG;IACH,OAAO,YAAY;IACnB;;;;;;;;;OASG;IACH,QAAQ,aAAa;IACrB;;;;;;;;;;;;OAYG;IACH,iBAAiB,sBAAsB;CACxC;AAED;;;;GAIG;AACH,eAAO,MAAM,yCAAyC,EAAE,WAAW,CAAC,uBAAuB,CAIzF,CAAC;AACH,kFAAkF;AAElF,oBAAY,mBAAmB;IAC7B,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,QAAQ,aAAa;CACtB;AAMD,eAAO,MAAM,0BAA0B;;;;;;iBAcrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAY9E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;iBAoBjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAMtE;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,2EAA2E;IAC3E,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wGAAwG;IACxG,qBAAqB,EAAE,MAAM,CAAC;IAC9B,8DAA8D;IAC9D,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,yBAAyB,GACjC;IACE,iEAAiE;IACjE,YAAY,EAAE,aAAa,CAAC;CAC7B,GACD;IACE,oEAAoE;IACpE,YAAY,EAAE,eAAe,GAAG,WAAW,CAAC;IAC5C,+GAA+G;IAC/G,kBAAkB,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,+HAA+H;IAC/H,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qHAAqH;IACrH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC,GACD;IACE,0EAA0E;IAC1E,IAAI,EAAE,aAAa,CAAC;IACpB,+GAA+G;IAC/G,kBAAkB,EAAE,MAAM,CAAC;IAC3B,4FAA4F;IAC5F,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,QAAQ,EAAE,8BAA8B,EAAE,CAAC;IAC3C,qHAAqH;IACrH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,kBAAkB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE,CAAC;AAMN,4HAA4H;AAC5H;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,gCAAgC;IAChC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IACnF,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,iHAAiH;AACjH,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2FAA2F;IAC3F,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,gCAAgC;IAC/C,oHAAoH;IACpH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,wHAAwH;IACxH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,2CAA2C;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,gGAAgG;IAChG,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,oBAAY,wBAAwB;IAClC,kGAAkG;IAClG,MAAM,WAAW;IACjB;;;;OAIG;IACH,MAAM,WAAW;IACjB,4HAA4H;IAC5H,oBAAoB,yBAAyB;CAC9C;AAED,mGAAmG;AACnG,oBAAY,8BAA8B;IACxC,qGAAqG;IACrG,QAAQ,aAAa;IACrB;;;OAGG;IACH,IAAI,SAAS;CACd;AAED,kIAAkI;AAClI,eAAO,MAAM,4BAA4B;;;;;iBASvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;iBAcxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;iBAexC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;iBAYvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,8HAA8H;AAC9H,oBAAY,yBAAyB;IACnC,4HAA4H;IAC5H,OAAO,YAAY;IACnB,qHAAqH;IACrH,OAAO,YAAY;IACnB,8HAA8H;IAC9H,OAAO,YAAY;CACpB;AAED,+HAA+H;AAC/H,MAAM,WAAW,yBAAyB;IACxC,uBAAuB;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,oHAAoH;IACpH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,sFAAsF;IACtF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAA;CAAE,GAC1G;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtG,4DAA4D;AAC5D,oBAAY,4BAA4B;IACtC,0GAA0G;IAC1G,KAAK,UAAU;IACf,0BAA0B;IAC1B,IAAI,SAAS;IACb,mCAAmC;IACnC,IAAI,SAAS;CACd;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAChF;IAAE,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAMpF;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,iGAAiG;IACjG,eAAe,EAAE,oBAAoB,CAAC;IACtC,yGAAyG;IACzG,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,iEAAiE;IACjE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,iEAAiE;IACjE,YAAY,EAAE,yBAAyB,CAAC;IACxC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC/C;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAM1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,oBAAoB,GAAG,IAAI,CAAC;IAChF;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,yBAAyB,GAAG,IAAI,CAAC;IACnF;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,oBAAoB,CAAC;IACrE;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,gCAAgC,GAAG,IAAI,CAAC;IACnG;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,uBAAuB,GAAG,IAAI,CAAC;IACjF;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,uBAAuB,GAAG,IAAI,CAAC;IACjF;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,sBAAsB,GAAG,IAAI,CAAC;IAC/E;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,oBAAoB,CAAC;CAC5E,CAAC;AACF,8EAA8E;AAE9E;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,iBAAiB,GAAG,iBAAiB,CAAC,GAAG,OAAO,CAGzH;AAMD,MAAM,MAAM,mCAAmC,GAAG,oDAAoD,GAAG;IACvG,6FAA6F;IAC7F,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,+DAA+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAMF,eAAO,MAAM,2BAA2B;;;;;;;;;iBAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF,MAAM,MAAM,wBAAwB,GAAG,yCAAyC,GAAG;IACjF,WAAW,EAAE,gBAAgB,CAAC;IAC9B,sBAAsB,EAAE,OAAO,2BAA2B,CAAC;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC"}