botmux 2.47.0 → 2.47.1

package/dist/dashboard/connector-api.js

@@ -0,0 +1,351 @@
+import { deleteConnector, getConnector, listConnectors, newConnectorId, upsertConnector, } from '../services/connector-store.js';
+import { createWebhookSecret, deleteWebhookSecret, generateWebhookSecretPlaintext, listWebhookSecretRefs, setWebhookSecret, } from '../services/webhook-key.js';
+import { listTriggerLogs, pruneTriggerLogs, summarizeTriggerLogs } from '../services/trigger-log-store.js';
+import { jsonRes } from './workflow-api.js';
+const DEFAULT_VERIFY_HEADERS = {
+    signatureHeader: 'x-botmux-signature',
+    timestampHeader: 'x-botmux-timestamp',
+    nonceHeader: 'x-botmux-nonce',
+    toleranceSeconds: 300,
+};
+async function readJsonBody(req, maxBytes = 256 * 1024) {
+    const chunks = [];
+    let total = 0;
+    for await (const c of req) {
+        const b = c;
+        total += b.length;
+        if (total > maxBytes)
+            throw new Error('body_too_large');
+        chunks.push(b);
+    }
+    if (chunks.length === 0)
+        return {};
+    return JSON.parse(Buffer.concat(chunks).toString('utf-8'));
+}
+function record(v) {
+    return v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+}
+function stringList(v) {
+    return Array.isArray(v) ? v.filter((x) => typeof x === 'string') : [];
+}
+function bool(v, fallback) {
+    return typeof v === 'boolean' ? v : fallback;
+}
+function positiveInt(v, fallback, min = 1, max = Number.MAX_SAFE_INTEGER) {
+    const n = typeof v === 'number' ? v : Number(v);
+    if (!Number.isFinite(n))
+        return fallback;
+    return Math.min(max, Math.max(min, Math.floor(n)));
+}
+function hasOwn(obj, key) {
+    return Object.prototype.hasOwnProperty.call(obj, key);
+}
+function logStatus(v) {
+    return v === 'ok' || v === 'error' ? v : undefined;
+}
+function emptyStats(connectorId) {
+    return { connectorId, total: 0, ok: 0, error: 0, actions: {}, errorCodes: {} };
+}
+function normalizeLifecycleExtractors(v) {
+    if (!v || typeof v !== 'object' || Array.isArray(v))
+        return null;
+    const r = v;
+    if (typeof r.dedupKey !== 'string' || !r.dedupKey.trim())
+        return null;
+    if (typeof r.status !== 'string' || !r.status.trim())
+        return null;
+    const rawMap = record(r.statusMap);
+    const statusMap = Object.fromEntries(Object.entries(rawMap).filter((e) => typeof e[1] === 'string'));
+    return {
+        dedupKey: r.dedupKey.trim(),
+        status: r.status.trim(),
+        ...(Object.keys(statusMap).length > 0 ? { statusMap } : {}),
+    };
+}
+function normalizeConnectorInput(raw, opts) {
+    const body = record(raw);
+    const c = record(body.connector ?? body);
+    const prior = opts.prior ?? null;
+    const verify = record(c.verify ?? prior?.verify);
+    const target = record(c.target ?? prior?.target);
+    const promptEnvelope = record(c.promptEnvelope ?? prior?.promptEnvelope);
+    const loggingPolicy = record(c.loggingPolicy ?? prior?.loggingPolicy);
+    const rateLimitCleared = c.rateLimit === null;
+    const rateLimit = rateLimitCleared ? null : record(c.rateLimit ?? prior?.rateLimit);
+    const id = opts.id ?? (typeof c.id === 'string' && c.id.trim() ? c.id.trim() : prior?.id ?? newConnectorId());
+    const name = typeof c.name === 'string' && c.name.trim() ? c.name.trim() : prior?.name;
+    if (!name)
+        return { ok: false, error: 'name_required' };
+    const targetMode = typeof target.mode === 'string' ? target.mode : prior?.target.mode ?? 'dynamic';
+    if (!['dynamic', 'fixed', 'new-group'].includes(targetMode))
+        return { ok: false, error: 'bad_target_mode' };
+    const targetKind = typeof target.kind === 'string' ? target.kind : prior?.target.kind ?? 'turn';
+    if (!['turn', 'workflow'].includes(targetKind))
+        return { ok: false, error: 'bad_target_kind' };
+    const botId = typeof target.botId === 'string' && target.botId.trim() ? target.botId.trim() : prior?.target.botId;
+    if (!botId)
+        return { ok: false, error: 'target_bot_required' };
+    const botIds = hasOwn(target, 'botIds')
+        ? Array.from(new Set(stringList(target.botIds).map(x => x.trim()).filter(Boolean)))
+        : prior?.target.botIds;
+    const chatId = typeof target.chatId === 'string' && target.chatId.trim() ? target.chatId.trim() : prior?.target.chatId;
+    if (targetMode === 'fixed' && !chatId)
+        return { ok: false, error: 'fixed_chat_required' };
+    const workflowId = typeof target.workflowId === 'string' && target.workflowId.trim() ? target.workflowId.trim() : prior?.target.workflowId;
+    if (targetKind === 'workflow' && !workflowId)
+        return { ok: false, error: 'workflow_id_required' };
+    const lifecycleExtractors = c.lifecycleExtractors === undefined
+        ? (prior?.lifecycleExtractors ?? null)
+        : normalizeLifecycleExtractors(c.lifecycleExtractors);
+    if (targetMode === 'new-group' && !lifecycleExtractors) {
+        return { ok: false, error: 'lifecycle_extractors_required' };
+    }
+    const secretRef = opts.secretRef ||
+        (typeof verify.secretRef === 'string' && verify.secretRef.trim() ? verify.secretRef.trim() : prior?.verify.secretRef);
+    if (!secretRef)
+        return { ok: false, error: 'secret_required' };
+    const now = new Date().toISOString();
+    const next = {
+        id,
+        name,
+        enabled: bool(c.enabled, prior?.enabled ?? true),
+        verify: {
+            type: 'hmac-sha256',
+            secretRef,
+            signatureHeader: typeof verify.signatureHeader === 'string' && verify.signatureHeader.trim()
+                ? verify.signatureHeader.trim().toLowerCase()
+                : prior?.verify.signatureHeader ?? DEFAULT_VERIFY_HEADERS.signatureHeader,
+            timestampHeader: typeof verify.timestampHeader === 'string' && verify.timestampHeader.trim()
+                ? verify.timestampHeader.trim().toLowerCase()
+                : prior?.verify.timestampHeader ?? DEFAULT_VERIFY_HEADERS.timestampHeader,
+            nonceHeader: typeof verify.nonceHeader === 'string' && verify.nonceHeader.trim()
+                ? verify.nonceHeader.trim().toLowerCase()
+                : prior?.verify.nonceHeader ?? DEFAULT_VERIFY_HEADERS.nonceHeader,
+            toleranceSeconds: positiveInt(verify.toleranceSeconds, prior?.verify.toleranceSeconds ?? DEFAULT_VERIFY_HEADERS.toleranceSeconds, 30, 86_400),
+        },
+        target: {
+            mode: targetMode,
+            kind: targetKind,
+            botId,
+            ...(botIds && botIds.length > 0 ? { botIds: botIds.includes(botId) ? botIds : [botId, ...botIds] } : {}),
+            ...(chatId ? { chatId } : {}),
+            ...(hasOwn(target, 'allowChats') ? { allowChats: stringList(target.allowChats) } : prior?.target.allowChats ? { allowChats: prior.target.allowChats } : {}),
+            ...(workflowId ? { workflowId } : {}),
+        },
+        promptEnvelope: {
+            sourceName: typeof promptEnvelope.sourceName === 'string' && promptEnvelope.sourceName.trim()
+                ? promptEnvelope.sourceName.trim()
+                : prior?.promptEnvelope.sourceName ?? name,
+            headerAllowlist: hasOwn(promptEnvelope, 'headerAllowlist')
+                ? stringList(promptEnvelope.headerAllowlist).map(h => h.toLowerCase())
+                : prior?.promptEnvelope.headerAllowlist ?? [],
+            includeRawText: bool(promptEnvelope.includeRawText, prior?.promptEnvelope.includeRawText ?? false),
+            maxBodyBytes: positiveInt(promptEnvelope.maxBodyBytes, prior?.promptEnvelope.maxBodyBytes ?? 256 * 1024, 1, 10 * 1024 * 1024),
+        },
+        loggingPolicy: {
+            storePayload: bool(loggingPolicy.storePayload, prior?.loggingPolicy.storePayload ?? false),
+            storeHeaders: bool(loggingPolicy.storeHeaders, prior?.loggingPolicy.storeHeaders ?? true),
+            retentionDays: positiveInt(loggingPolicy.retentionDays, prior?.loggingPolicy.retentionDays ?? 14, 1, 365),
+        },
+        lifecycleExtractors,
+        ...(rateLimitCleared ? {} : rateLimit && Object.keys(rateLimit).length > 0 ? {
+            rateLimit: {
+                windowSeconds: positiveInt(rateLimit.windowSeconds, prior?.rateLimit?.windowSeconds ?? 60, 1, 86_400),
+                maxRequests: positiveInt(rateLimit.maxRequests, prior?.rateLimit?.maxRequests ?? 60, 1, 100_000),
+            },
+        } : prior?.rateLimit ? { rateLimit: prior.rateLimit } : {}),
+        createdAt: prior?.createdAt ?? now,
+        updatedAt: prior?.updatedAt ?? now,
+    };
+    return { ok: true, connector: next };
+}
+function publicWebhookUrl(req, connectorId) {
+    const proto = typeof req.headers['x-forwarded-proto'] === 'string' ? req.headers['x-forwarded-proto'] : 'http';
+    const host = req.headers.host ?? 'localhost';
+    return `${proto}://${host}/webhook/${encodeURIComponent(connectorId)}`;
+}
+export async function handleConnectorApi(req, res, url) {
+    if (req.method === 'GET' && url.pathname === '/api/connectors') {
+        jsonRes(res, 200, { connectors: listConnectors() });
+        return true;
+    }
+    if (req.method === 'GET' && url.pathname === '/api/connectors/stats') {
+        const since = url.searchParams.get('since') ?? undefined;
+        const rawStats = summarizeTriggerLogs({ since });
+        const byId = new Map(rawStats.filter(s => s.connectorId).map(s => [s.connectorId, s]));
+        const connectors = listConnectors();
+        const known = new Set(connectors.map(c => c.id));
+        const stats = connectors.map(c => ({
+            name: c.name,
+            enabled: c.enabled,
+            ...emptyStats(c.id),
+            ...byId.get(c.id),
+        }));
+        for (const stat of rawStats) {
+            if (!stat.connectorId || !known.has(stat.connectorId))
+                stats.push(stat);
+        }
+        jsonRes(res, 200, { stats });
+        return true;
+    }
+    if (req.method === 'POST' && url.pathname === '/api/webhook-secrets') {
+        try {
+            const body = await readJsonBody(req);
+            const secret = typeof body.secret === 'string' && body.secret ? body.secret : generateWebhookSecretPlaintext();
+            const record = createWebhookSecret(secret);
+            jsonRes(res, 201, { ok: true, secretRef: record.ref, secret });
+        }
+        catch (e) {
+            jsonRes(res, 400, { ok: false, error: e?.message ?? 'bad_json' });
+        }
+        return true;
+    }
+    if (req.method === 'GET' && url.pathname === '/api/webhook-secrets') {
+        jsonRes(res, 200, { secrets: listWebhookSecretRefs() });
+        return true;
+    }
+    let mSecret;
+    if ((mSecret = url.pathname.match(/^\/api\/webhook-secrets\/([^/]+)$/))) {
+        const ref = decodeURIComponent(mSecret[1]);
+        if (req.method === 'PUT') {
+            try {
+                const body = await readJsonBody(req);
+                const secret = typeof body.secret === 'string' && body.secret ? body.secret : generateWebhookSecretPlaintext();
+                const record = setWebhookSecret(ref, secret);
+                jsonRes(res, 200, { ok: true, secretRef: record.ref, secret });
+            }
+            catch (e) {
+                jsonRes(res, 400, { ok: false, error: e?.message ?? 'bad_json' });
+            }
+            return true;
+        }
+        if (req.method === 'DELETE') {
+            jsonRes(res, 200, { ok: true, deleted: deleteWebhookSecret(ref) });
+            return true;
+        }
+    }
+    if (req.method === 'POST' && url.pathname === '/api/connectors') {
+        try {
+            const body = await readJsonBody(req);
+            const providedSecret = typeof body.secret === 'string' && body.secret ? body.secret : undefined;
+            const generatedSecret = providedSecret ? undefined : generateWebhookSecretPlaintext();
+            const record = createWebhookSecret(providedSecret ?? generatedSecret);
+            const normalized = normalizeConnectorInput(body, { secretRef: record.ref });
+            if (!normalized.ok) {
+                deleteWebhookSecret(record.ref);
+                jsonRes(res, 400, { ok: false, error: normalized.error });
+                return true;
+            }
+            const connector = upsertConnector(normalized.connector);
+            jsonRes(res, 201, {
+                ok: true,
+                connector,
+                secretRef: record.ref,
+                ...(generatedSecret ? { secret: generatedSecret } : {}),
+                webhookUrl: publicWebhookUrl(req, connector.id),
+            });
+        }
+        catch (e) {
+            jsonRes(res, 400, { ok: false, error: e?.message ?? 'bad_json' });
+        }
+        return true;
+    }
+    let m;
+    if ((m = url.pathname.match(/^\/api\/connectors\/([^/]+)$/))) {
+        const id = decodeURIComponent(m[1]);
+        if (req.method === 'PUT') {
+            const prior = getConnector(id);
+            if (!prior) {
+                jsonRes(res, 404, { ok: false, error: 'unknown_connector' });
+                return true;
+            }
+            try {
+                const body = await readJsonBody(req);
+                let generatedSecret;
+                let secretRef;
+                if (typeof body.secret === 'string' && body.secret) {
+                    secretRef = prior.verify.secretRef || createWebhookSecret(body.secret).ref;
+                    setWebhookSecret(secretRef, body.secret);
+                }
+                else if (body.rotateSecret === true) {
+                    generatedSecret = generateWebhookSecretPlaintext();
+                    secretRef = prior.verify.secretRef || createWebhookSecret(generatedSecret).ref;
+                    setWebhookSecret(secretRef, generatedSecret);
+                }
+                const normalized = normalizeConnectorInput({ ...body, id }, { id, prior, secretRef });
+                if (!normalized.ok) {
+                    jsonRes(res, 400, { ok: false, error: normalized.error });
+                    return true;
+                }
+                const connector = upsertConnector(normalized.connector);
+                jsonRes(res, 200, {
+                    ok: true,
+                    connector,
+                    ...(secretRef ? { secretRef } : {}),
+                    ...(generatedSecret ? { secret: generatedSecret } : {}),
+                    webhookUrl: publicWebhookUrl(req, connector.id),
+                });
+            }
+            catch (e) {
+                jsonRes(res, 400, { ok: false, error: e?.message ?? 'bad_json' });
+            }
+            return true;
+        }
+        if (req.method === 'PATCH') {
+            const prior = getConnector(id);
+            if (!prior) {
+                jsonRes(res, 404, { ok: false, error: 'unknown_connector' });
+                return true;
+            }
+            try {
+                const body = await readJsonBody(req);
+                const connector = upsertConnector({ ...prior, enabled: bool(body.enabled, prior.enabled) });
+                jsonRes(res, 200, { ok: true, connector });
+            }
+            catch (e) {
+                jsonRes(res, 400, { ok: false, error: e?.message ?? 'bad_json' });
+            }
+            return true;
+        }
+        if (req.method === 'DELETE') {
+            jsonRes(res, 200, { ok: true, deleted: deleteConnector(id) });
+            return true;
+        }
+    }
+    if (req.method === 'GET' && (m = url.pathname.match(/^\/api\/connectors\/([^/]+)$/))) {
+        const connector = getConnector(decodeURIComponent(m[1]));
+        if (!connector) {
+            jsonRes(res, 404, { ok: false, error: 'unknown_connector' });
+            return true;
+        }
+        jsonRes(res, 200, { connector });
+        return true;
+    }
+    if (req.method === 'GET' && url.pathname === '/api/trigger-logs') {
+        const limit = Number(url.searchParams.get('limit') ?? '100');
+        const connectorId = url.searchParams.get('connectorId') ?? undefined;
+        const status = logStatus(url.searchParams.get('status'));
+        const errorCode = url.searchParams.get('errorCode');
+        const since = url.searchParams.get('since') ?? undefined;
+        jsonRes(res, 200, { logs: listTriggerLogs({ limit, connectorId, status, errorCode: errorCode ?? undefined, since }) });
+        return true;
+    }
+    if (req.method === 'POST' && url.pathname === '/api/trigger-logs/prune') {
+        try {
+            const body = await readJsonBody(req);
+            const retentionDays = body.retentionDays === undefined
+                ? undefined
+                : positiveInt(body.retentionDays, 14, 1, 3650);
+            const maxEntries = body.maxEntries === undefined
+                ? undefined
+                : positiveInt(body.maxEntries, 1000, 1, 1_000_000);
+            jsonRes(res, 200, { ok: true, ...pruneTriggerLogs({ retentionDays, maxEntries }) });
+        }
+        catch (e) {
+            jsonRes(res, 400, { ok: false, error: e?.message ?? 'bad_json' });
+        }
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=connector-api.js.map

package/dist/dashboard/connector-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-api.js","sourceRoot":"","sources":["../../src/dashboard/connector-api.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,YAAY,EACZ,cAAc,EACd,cAAc,EACd,eAAe,GAEhB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAwB,MAAM,kCAAkC,CAAC;AAEjI,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,sBAAsB,GAAG;IAC7B,eAAe,EAAE,oBAAoB;IACrC,eAAe,EAAE,oBAAoB;IACrC,WAAW,EAAE,gBAAgB;IAC7B,gBAAgB,EAAE,GAAG;CACtB,CAAC;AAEF,KAAK,UAAU,YAAY,CAAc,GAAoB,EAAE,QAAQ,GAAG,GAAG,GAAG,IAAI;IAClF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAW,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QAClB,IAAI,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAO,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,IAAI,CAAC,CAAU,EAAE,QAAiB;IACzC,OAAO,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,CAAU,EAAE,QAAgB,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,gBAAgB;IACvF,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,MAAM,CAAC,GAA4B,EAAE,GAAW;IACvD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,CAAgB;IACjC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB;IACrC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,4BAA4B,CAAC,CAAU;IAC9C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAClC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CACtF,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QACvB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAAY,EACZ,IAA6E;IAE7E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,KAAK,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,KAAK,EAAE,aAAa,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,EAAE,SAAS,CAAC,CAAC;IACpF,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,cAAc,EAAE,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;IACvF,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAExD,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;IACnG,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC5G,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC;IAChG,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC/F,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;IAClH,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QACrC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;IACzB,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;IACvH,IAAI,UAAU,KAAK,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC1F,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC;IAC3I,IAAI,UAAU,KAAK,UAAU,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAClG,MAAM,mBAAmB,GAAG,CAAC,CAAC,mBAAmB,KAAK,SAAS;QAC7D,CAAC,CAAC,CAAC,KAAK,EAAE,mBAAmB,IAAI,IAAI,CAAC;QACtC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACxD,IAAI,UAAU,KAAK,WAAW,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACxH,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAE/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAwB;QAChC,EAAE;QACF,IAAI;QACJ,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC;QAChD,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,SAAS;YACT,eAAe,EAAE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE;gBAC1F,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC7C,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,IAAI,sBAAsB,CAAC,eAAe;YAC3E,eAAe,EAAE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE;gBAC1F,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC7C,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,IAAI,sBAAsB,CAAC,eAAe;YAC3E,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE;gBAC9E,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;gBACzC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,IAAI,sBAAsB,CAAC,WAAW;YACnE,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,IAAI,sBAAsB,CAAC,gBAAgB,EAAE,EAAE,EAAE,MAAM,CAAC;SAC9I;QACD,MAAM,EAAE;YACN,IAAI,EAAE,UAAmD;YACzD,IAAI,EAAE,UAAmD;YACzD,KAAK;YACL,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3J,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC;QACD,cAAc,EAAE;YACd,UAAU,EAAE,OAAO,cAAc,CAAC,UAAU,KAAK,QAAQ,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC3F,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE;gBAClC,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,UAAU,IAAI,IAAI;YAC5C,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC;gBACxD,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtE,CAAC,CAAC,KAAK,EAAE,cAAc,CAAC,eAAe,IAAI,EAAE;YAC/C,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC,cAAc,IAAI,KAAK,CAAC;YAClG,YAAY,EAAE,WAAW,CAAC,cAAc,CAAC,YAAY,EAAE,KAAK,EAAE,cAAc,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;SAC9H;QACD,aAAa,EAAE;YACb,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,YAAY,IAAI,KAAK,CAAC;YAC1F,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,YAAY,IAAI,IAAI,CAAC;YACzF,aAAa,EAAE,WAAW,CAAC,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,aAAa,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC;SAC1G;QACD,mBAAmB;QACnB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3E,SAAS,EAAE;gBACT,aAAa,EAAE,WAAW,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC;gBACrG,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC;aACjG;SACF,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG;QAClC,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG;KACnC,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAoB,EAAE,WAAmB;IACjE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/G,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IAC7C,OAAO,GAAG,KAAK,MAAM,IAAI,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAoB,EACpB,GAAmB,EACnB,GAAQ;IAER,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QAC/D,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACzD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,KAAK,GAAkE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChG,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;SAClB,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAuB,GAAG,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC;YAC/G,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QACpE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAuB,GAAG,CAAC,CAAC;gBAC3D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC;gBAC/G,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAM,GAAG,CAAC,CAAC;YAC1C,MAAM,cAAc,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,MAAM,eAAe,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC;YACtF,MAAM,MAAM,GAAG,mBAAmB,CAAC,cAAc,IAAI,eAAgB,CAAC,CAAC;YACvE,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC1D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE;gBAChB,EAAE,EAAE,IAAI;gBACR,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,UAAU,EAAE,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAA0B,CAAC;IAC/B,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAM,GAAG,CAAC,CAAC;gBAC1C,IAAI,eAAmC,CAAC;gBACxC,IAAI,SAA6B,CAAC;gBAClC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBACnD,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC;oBAC3E,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3C,CAAC;qBAAM,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;oBACtC,eAAe,GAAG,8BAA8B,EAAE,CAAC;oBACnD,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC;oBAC/E,gBAAgB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBACtF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC1D,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE;oBAChB,EAAE,EAAE,IAAI;oBACR,SAAS;oBACT,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,UAAU,EAAE,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;iBAChD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAwB,GAAG,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC5F,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,SAAS,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;QACrE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAA4B,CAAC;QAC/E,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACzD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACvH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,yBAAyB,EAAE,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAoD,GAAG,CAAC,CAAC;YACxF,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,SAAS;gBACpD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS;gBAC9C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/dashboard/federated-group-core.d.ts

@@ -0,0 +1,54 @@
+import type { LiveBot } from '../services/team-roster.js';
+/** Thrown by fetchWithTimeout when a hub/spoke call doesn't answer in time. */
+export declare class HubTimeout extends Error {
+    constructor();
+}
+export type Fetcher = typeof fetch;
+/** Wrap an outbound call with an abort timeout; surface a distinguishable timeout. */
+export declare function fetchWithTimeout(fetcher: Fetcher, url: string, init?: RequestInit, ms?: number): Promise<Response>;
+/** Map an outbound call failure to a stable {status, error}. */
+export declare function hubError(e: unknown): {
+    status: number;
+    error: string;
+};
+export interface OrchestrateGroupDeps {
+    /** Picks a LOCAL online creator + proxies to its daemon (federated bots added by app_id). */
+    createTeamGroup: (args: {
+        name: string;
+        larkAppIds: string[];
+        ownerUnionIds?: string[];
+    }) => Promise<{
+        ok: boolean;
+        chatId?: string;
+        shareLink?: string;
+        invalidBotIds?: string[];
+        invalidOwnerUnionIds?: string[];
+        error?: string;
+    }>;
+    fetcher: Fetcher;
+    /** Live daemon-registry bots (authoritative local roster source). */
+    live?: LiveBot[];
+}
+export interface OrchestrateGroupArgs {
+    name: string;
+    larkAppIds: string[];
+    /** Hub-derived/local operator union_id (the person who initiated). Undefined ⇒
+     *  operator identity not bound (missingOperatorIdentity surfaced). NEVER trust
+     *  a client-supplied value — callers derive this from auth. */
+    operatorUnionId?: string;
+    /** Idempotency key for delegate calls (one per 拉群). */
+    requestId: string;
+    /** Team whose aggregated roster gates the selection (hub may host non-default teams). */
+    teamId?: string;
+}
+/**
+ * Validate selection against the team's aggregated roster, collect invitees
+ * (operator + selected bots' owners), then create locally if a local online bot
+ * exists, else delegate to a federated deployment that owns a selected bot.
+ * Returns a transport-agnostic {status, body}.
+ */
+export declare function orchestrateFederatedGroup(dataDir: string, args: OrchestrateGroupArgs, deps: OrchestrateGroupDeps): Promise<{
+    status: number;
+    body: any;
+}>;
+//# sourceMappingURL=federated-group-core.d.ts.map

package/dist/dashboard/federated-group-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated-group-core.d.ts","sourceRoot":"","sources":["../../src/dashboard/federated-group-core.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAI1D,+EAA+E;AAC/E,qBAAa,UAAW,SAAQ,KAAK;;CAAsE;AAE3G,MAAM,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC;AAEnC,sFAAsF;AACtF,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,EAAE,EAAE,SAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAWpI;AAED,gEAAgE;AAChE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAEtE;AAED,MAAM,WAAW,oBAAoB;IACnC,6FAA6F;IAC7F,eAAe,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,OAAO,CAAC;QACnG,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KAC7H,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB;;mEAE+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE,CAAC,CAyExC"}

package/dist/dashboard/federated-group-core.js

@@ -0,0 +1,165 @@
+/**
+ * Shared 拉群 orchestration for federation — used by BOTH the local team page
+ * (`/api/team/federated-group`, dashboard token) and the hub endpoint a spoke
+ * calls (`/api/federation/group`, syncToken). Keeps the create-or-delegate +
+ * owner-invite logic in one place so the two entry points can't drift.
+ *
+ * Invite set (union_id, deduped) = the OPERATOR (whoever initiated; for a spoke
+ * request it's the hub-derived spoke owner — NEVER client-supplied) + each
+ * selected bot's owner. Bots are added by app_id (see docs/federation-design.md).
+ */
+import { buildFederatedRoster } from '../services/federation-roster.js';
+import { listFederatedDeployments } from '../services/federation-store.js';
+import { DEFAULT_TEAM_ID } from '../services/team-store.js';
+import { logger } from '../utils/logger.js';
+const HUB_TIMEOUT_MS = 8000;
+/** Thrown by fetchWithTimeout when a hub/spoke call doesn't answer in time. */
+export class HubTimeout extends Error {
+    constructor() { super('hub_timeout'); this.name = 'HubTimeout'; }
+}
+/** Wrap an outbound call with an abort timeout; surface a distinguishable timeout. */
+export async function fetchWithTimeout(fetcher, url, init = {}, ms = HUB_TIMEOUT_MS) {
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), ms);
+    try {
+        return await fetcher(url, { ...init, signal: ac.signal });
+    }
+    catch (e) {
+        if (e?.name === 'AbortError' || e instanceof HubTimeout)
+            throw new HubTimeout();
+        throw e;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** Map an outbound call failure to a stable {status, error}. */
+export function hubError(e) {
+    return e instanceof HubTimeout ? { status: 504, error: 'hub_timeout' } : { status: 502, error: 'hub_unreachable' };
+}
+/**
+ * Validate selection against the team's aggregated roster, collect invitees
+ * (operator + selected bots' owners), then create locally if a local online bot
+ * exists, else delegate to a federated deployment that owns a selected bot.
+ * Returns a transport-agnostic {status, body}.
+ */
+export async function orchestrateFederatedGroup(dataDir, args, deps) {
+    const { name, larkAppIds, operatorUnionId, requestId } = args;
+    const teamId = args.teamId ?? DEFAULT_TEAM_ID;
+    if (larkAppIds.length === 0)
+        return { status: 400, body: { ok: false, error: 'no_bots_selected' } };
+    const roster = buildFederatedRoster(dataDir, teamId, undefined, undefined, deps.live);
+    const byId = new Map(roster.bots.map(b => [b.larkAppId, b]));
+    const unknown = larkAppIds.filter(id => !byId.has(id));
+    if (unknown.length)
+        return { status: 400, body: { ok: false, error: 'unknown_bot', unknown } };
+    // Owner-in-group policy (申晗): a bot should only join if its owner is in the
+    // group too (else it's "打黑工" — in a group its owner can't see). A REMOTE bot
+    // whose owner is unbound has no owner to pull → skip it. (LOCAL bots are covered
+    // by the operator, who is always pulled in.)
+    const skippedNoOwner = larkAppIds.filter(id => { const b = byId.get(id); return !!b && !b.deployment.local && !b.owner?.unionId; });
+    const eligible = larkAppIds.filter(id => !skippedNoOwner.includes(id));
+    if (eligible.length === 0)
+        return { status: 400, body: { ok: false, error: 'all_bots_skipped_no_owner', skippedNoOwner } };
+    // Invitees = operator (if bound) + each eligible bot's owner. union_id, deduped.
+    const ownerUnionIds = Array.from(new Set([
+        ...(operatorUnionId ? [operatorUnionId] : []),
+        ...eligible.map(id => byId.get(id)?.owner?.unionId).filter((u) => !!u),
+    ]));
+    const missingOperatorIdentity = !operatorUnionId;
+    const r = await deps.createTeamGroup({ name, larkAppIds: eligible, ownerUnionIds });
+    if (r.ok) {
+        // The creator bot adds the owners IT can reach; owners outside its app's
+        // visibility scope (Lark code 232024 — typically owners of OTHER deployments)
+        // come back as invalidOwnerUnionIds. Add each of those via THEIR OWN
+        // deployment's bot (which has them in scope) — hub→spoke delegate-add-owner.
+        let invalidOwners = r.invalidOwnerUnionIds ?? [];
+        if (invalidOwners.length > 0 && r.chatId) {
+            invalidOwners = await delegateAddOwners(dataDir, teamId, r.chatId, invalidOwners, eligible, requestId, deps.fetcher);
+        }
+        return { status: 200, body: { ...r, invalidOwnerUnionIds: invalidOwners, missingOperatorIdentity, skippedNoOwner } };
+    }
+    // No local online creator → delegate to a reachable deployment that owns a
+    // selected bot (hub→spoke). requestId makes each delegate idempotent.
+    if (r.error === 'no_online_daemon') {
+        const selected = new Set(eligible);
+        let lastErr = 'no_creator_available';
+        for (const dep of listFederatedDeployments(dataDir, teamId)) {
+            if (!dep.callbackUrl || !dep.delegationToken)
+                continue;
+            if (!dep.bots.some(b => selected.has(b.larkAppId)))
+                continue;
+            try {
+                const dr = await fetchWithTimeout(deps.fetcher, `${dep.callbackUrl}/api/federation/delegate-group`, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json', authorization: `Bearer ${dep.delegationToken}` },
+                    body: JSON.stringify({ name, larkAppIds: eligible, ownerUnionIds, requestId }),
+                });
+                const dj = await dr.json().catch(() => ({}));
+                if (dr.ok && dj?.ok && dj.chatId) {
+                    // The delegate creator added the owners IT could; owners it couldn't
+                    // reach (e.g. a THIRD deployment's owner) must still be added via their
+                    // own deployment — same post-create delegation as the local-create path.
+                    let invalidOwners = dj.invalidOwnerUnionIds ?? [];
+                    if (invalidOwners.length > 0) {
+                        invalidOwners = await delegateAddOwners(dataDir, teamId, dj.chatId, invalidOwners, eligible, requestId, deps.fetcher);
+                    }
+                    return { status: 200, body: { ...dj, invalidOwnerUnionIds: invalidOwners, delegatedTo: dep.name, missingOperatorIdentity, skippedNoOwner } };
+                }
+                lastErr = dj?.error || `hub_${dr.status}`;
+            }
+            catch (e) {
+                // Timeout ⇒ the delegate MAY have created the group (lost response). Stop —
+                // trying another deployment would risk a duplicate.
+                if (e instanceof HubTimeout)
+                    return { status: 504, body: { ok: false, error: 'delegation_timeout', delegatedTo: dep.name } };
+                lastErr = 'hub_unreachable'; // never connected → safe to try next
+            }
+        }
+        return { status: 502, body: { ok: false, error: lastErr } };
+    }
+    return { status: 502, body: r };
+}
+/**
+ * For owners the creator couldn't add (out of its app scope), delegate the add
+ * to each owner's OWN deployment: that deployment has a selected bot already in
+ * the chat (`via`) and the owner in its app's visibility scope. Returns the
+ * owners still not added after delegation.
+ */
+async function delegateAddOwners(dataDir, teamId, chatId, owners, selectedAppIds, requestId, fetcher) {
+    const selected = new Set(selectedAppIds);
+    const stillInvalid = new Set(owners);
+    for (const dep of listFederatedDeployments(dataDir, teamId)) {
+        if (!dep.callbackUrl || !dep.delegationToken)
+            continue;
+        const via = dep.bots.find(b => selected.has(b.larkAppId))?.larkAppId; // a bot of this dep already in the chat
+        if (!via)
+            continue;
+        const mine = owners.filter(u => dep.ownerUnionId === u || dep.bots.some(b => b.ownerUnionId === u));
+        if (mine.length === 0)
+            continue;
+        try {
+            logger.info(`[federation] delegate-add-owner → ${dep.name} (${dep.callbackUrl}) via=${via} owners=${mine.length}`);
+            const dr = await fetchWithTimeout(fetcher, `${dep.callbackUrl}/api/federation/delegate-add-owner`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json', authorization: `Bearer ${dep.delegationToken}` },
+                body: JSON.stringify({ chatId, ownerUnionIds: mine, viaLarkAppId: via, requestId }),
+            });
+            const dj = await dr.json().catch(() => ({}));
+            logger.info(`[federation] delegate-add-owner ← ${dep.name}: status=${dr.status} ok=${dj?.ok} invalid=${JSON.stringify(dj?.invalidUserIds ?? 'all')}`);
+            if (dr.ok && dj?.ok) {
+                const inv = new Set(dj.invalidUserIds ?? mine);
+                for (const u of mine)
+                    if (!inv.has(u))
+                        stillInvalid.delete(u);
+            }
+        }
+        catch (e) {
+            logger.warn(`[federation] delegate-add-owner threw for ${dep.name} (${dep.callbackUrl}): ${e?.message ?? e}`);
+        }
+    }
+    if (stillInvalid.size)
+        logger.warn(`[federation] delegateAddOwners: ${stillInvalid.size} owner(s) still not added: ${[...stillInvalid].join(',')}`);
+    return [...stillInvalid];
+}
+//# sourceMappingURL=federated-group-core.js.map

package/dist/dashboard/federated-group-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated-group-core.js","sourceRoot":"","sources":["../../src/dashboard/federated-group-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,+EAA+E;AAC/E,MAAM,OAAO,UAAW,SAAQ,KAAK;IAAG,gBAAgB,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC;CAAE;AAI3G,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgB,EAAE,GAAW,EAAE,OAAoB,EAAE,EAAE,EAAE,GAAG,cAAc;IAC/G,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,YAAY,UAAU;YAAE,MAAM,IAAI,UAAU,EAAE,CAAC;QAChF,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,QAAQ,CAAC,CAAU;IACjC,OAAO,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;AACrH,CAAC;AAyBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,IAA0B,EAC1B,IAA0B;IAE1B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;IACpG,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;IAE/F,4EAA4E;IAC5E,6EAA6E;IAC7E,iFAAiF;IACjF,6CAA6C;IAC7C,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,cAAc,EAAE,EAAE,CAAC;IAE3H,iFAAiF;IACjF,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACvC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACpF,CAAC,CAAC,CAAC;IACJ,MAAM,uBAAuB,GAAG,CAAC,eAAe,CAAC;IAEjD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACT,yEAAyE;QACzE,8EAA8E;QAC9E,qEAAqE;QACrE,6EAA6E;QAC7E,IAAI,aAAa,GAAG,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC;QACjD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzC,aAAa,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,oBAAoB,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,EAAE,CAAC;IACvH,CAAC;IAED,2EAA2E;IAC3E,sEAAsE;IACtE,IAAI,CAAC,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,OAAO,GAAG,sBAAsB,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,eAAe;gBAAE,SAAS;YACvD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAAE,SAAS;YAC7D,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,WAAW,gCAAgC,EAAE;oBAClG,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,eAAe,EAAE,EAAE;oBAC/F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;iBAC/E,CAAC,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAU,CAAA,CAAC,CAAC;gBACpD,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;oBACjC,qEAAqE;oBACrE,wEAAwE;oBACxE,yEAAyE;oBACzE,IAAI,aAAa,GAAG,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC;oBAClD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC7B,aAAa,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxH,CAAC;oBACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,oBAAoB,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,cAAc,EAAE,EAAE,CAAC;gBAC/I,CAAC;gBACD,OAAO,GAAG,EAAE,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC;YAC5C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,4EAA4E;gBAC5E,oDAAoD;gBACpD,IAAI,CAAC,YAAY,UAAU;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7H,OAAO,GAAG,iBAAiB,CAAC,CAAC,qCAAqC;YACpE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EAAE,MAAc,EAAE,MAAc,EAC/C,MAAgB,EAAE,cAAwB,EAAE,SAAiB,EAAE,OAAgB;IAE/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,eAAe;YAAE,SAAS;QACvD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,wCAAwC;QAC9G,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,SAAS,GAAG,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACnH,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,WAAW,oCAAoC,EAAE;gBACjG,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,eAAe,EAAE,EAAE;gBAC/F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;aACpF,CAAC,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAU,CAAA,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC,MAAM,OAAO,EAAE,EAAE,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,cAAc,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;YACtJ,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,EAAE,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;gBACvD,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,6CAA6C,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,MAAM,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,mCAAmC,YAAY,CAAC,IAAI,8BAA8B,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpJ,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;AAC3B,CAAC"}