botmux 2.47.0 → 2.47.2

package/dist/dashboard/federation-api.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Federation HUB endpoints. Cross-deployment, so mounted BEFORE the dashboard's
+ * `?t=` token gate (like webhook/team routes) — they authenticate by their OWN
+ * credentials instead:
+ *   - POST /api/federation/join   → an invite code (single-use admission)
+ *   - POST /api/federation/sync   → a syncToken (per-deployment bearer)
+ *   - GET  /api/federation/roster → a syncToken
+ *
+ * A spoke deployment registers once with an invite, gets a long-lived syncToken,
+ * then pushes bots + pulls the aggregated roster with it. See docs/federation-design.md.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type LiveBot } from '../services/team-roster.js';
+import { type Fetcher } from './federated-group-core.js';
+export interface FederationApiDeps {
+    dataDir?: string;
+    fetcher?: Fetcher;
+    /** Live daemon-registry bots (authoritative over bots-info.json) for the
+     *  delegate-group local-bot guard. */
+    liveBots?: () => LiveBot[];
+    /** Injected by dashboard.ts — used when a HUB delegates 拉群 to THIS spoke
+     *  (we create the chat with one of OUR local online bots as creator). */
+    createTeamGroup?: (args: {
+        name: string;
+        larkAppIds: string[];
+        ownerUnionIds?: string[];
+    }) => Promise<{
+        ok: boolean;
+        chatId?: string;
+        shareLink?: string;
+        invalidBotIds?: string[];
+        invalidOwnerUnionIds?: string[];
+        error?: string;
+    }>;
+    /** Add owners to an existing chat via one of OUR local bots (defaults to
+     *  ensure-client + addUsersToChatByUnionId). Test seam. Returns the rejected ids. */
+    addOwners?: (viaLarkAppId: string, chatId: string, ownerUnionIds: string[]) => Promise<{
+        invalidUserIds: string[];
+    }>;
+}
+export declare function handleFederationApi(req: IncomingMessage, res: ServerResponse, url: URL, deps?: FederationApiDeps): Promise<boolean>;
+//# sourceMappingURL=federation-api.d.ts.map

package/dist/dashboard/federation-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-api.d.ts","sourceRoot":"","sources":["../../src/dashboard/federation-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAWjE,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAA6B,KAAK,OAAO,EAAE,MAAM,2BAA2B,CAAC;AA2FpF,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;0CACsC;IACtC,QAAQ,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IAC3B;6EACyE;IACzE,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,OAAO,CAAC;QACpG,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KAC7H,CAAC,CAAC;IACH;yFACqF;IACrF,SAAS,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACtH;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,OAAO,CAAC,CA4LlB"}

package/dist/dashboard/federation-api.js

@@ -0,0 +1,408 @@
+import { config } from '../config.js';
+import { jsonRes } from './workflow-api.js';
+import { consumeInvite } from '../services/invite-store.js';
+import { getTeam } from '../services/team-store.js';
+import { registerDeployment, syncDeployment, getDeploymentByToken, removeDeploymentByToken, } from '../services/federation-store.js';
+import { buildFederatedRoster } from '../services/federation-roster.js';
+import { findMembershipByDelegationToken } from '../services/federation-membership-store.js';
+import { buildTeamRoster } from '../services/team-roster.js';
+import { getDeploymentIdentity } from '../services/deployment-identity.js';
+import { orchestrateFederatedGroup } from './federated-group-core.js';
+import { addUsersToChatByUnionId } from '../services/groups-store.js';
+import { loadBotConfigs, registerBot, getBot } from '../bot-registry.js';
+/** Ensure a Lark client exists for larkAppId in THIS (dashboard) process, which
+ *  has no bot registry — register on demand from bots.json (carries the secret).
+ *  Used by delegate-add-owner so it can add a user via a specific local bot. */
+function ensureLocalClient(larkAppId) {
+    try {
+        getBot(larkAppId);
+        return true;
+    }
+    catch { /* not registered yet */ }
+    try {
+        const cfg = loadBotConfigs().find(c => c.larkAppId === larkAppId);
+        if (!cfg)
+            return false;
+        registerBot(cfg);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const MAX_BOTS = 200;
+const MAX_OWNERS = 100;
+/** Short-TTL idempotency cache for delegate-group: a hub may retry the SAME
+ *  request (timeout/lost response) — replaying must return the first result, not
+ *  create a duplicate group. Keyed by delegationToken+requestId. In-memory is
+ *  enough (single dashboard process; the dedup window is seconds–minutes). */
+const DELEGATE_IDEM_TTL_MS = 10 * 60 * 1000;
+const delegateIdem = new Map();
+function idemGet(key) {
+    const e = delegateIdem.get(key);
+    if (!e)
+        return null;
+    if (Date.now() > e.expiresAt) {
+        delegateIdem.delete(key);
+        return null;
+    }
+    return e.result;
+}
+function idemSet(key, result) {
+    const now = Date.now();
+    for (const [k, v] of delegateIdem)
+        if (v.expiresAt <= now)
+            delegateIdem.delete(k); // opportunistic prune
+    delegateIdem.set(key, { expiresAt: now + DELEGATE_IDEM_TTL_MS, result });
+}
+/** Federation bearer token: prefer the header (keeps the long-lived syncToken out
+ *  of URLs / access logs); fall back to ?syncToken= for short-term hub compat. */
+function federationToken(req, url) {
+    const auth = req.headers['authorization'];
+    if (typeof auth === 'string' && auth.startsWith('Bearer '))
+        return auth.slice(7).trim();
+    const x = req.headers['x-botmux-federation-token'];
+    if (typeof x === 'string' && x)
+        return x.trim();
+    return (url.searchParams.get('syncToken') ?? '').trim();
+}
+/** Header-only bearer for pre-auth WRITE endpoints (group create): the token must
+ *  never come from URL/body — keep it out of access logs and off replayable surfaces.
+ *  Unlike federationToken() there is NO ?syncToken= / body fallback here. */
+function bearerOnly(req) {
+    const auth = req.headers['authorization'];
+    return (typeof auth === 'string' && auth.startsWith('Bearer ')) ? auth.slice(7).trim() : '';
+}
+async function readBody(req, maxBytes = 256 * 1024) {
+    const chunks = [];
+    let total = 0;
+    for await (const c of req) {
+        const b = c;
+        total += b.length;
+        if (total > maxBytes)
+            throw new Error('too_large');
+        chunks.push(b);
+    }
+    if (chunks.length === 0)
+        return {};
+    return JSON.parse(Buffer.concat(chunks).toString('utf-8'));
+}
+/** Defensive: only keep the fields we expect, cap the count, coerce types. */
+function sanitizeBots(input) {
+    if (!Array.isArray(input))
+        return [];
+    const out = [];
+    for (const raw of input.slice(0, MAX_BOTS)) {
+        if (!raw || typeof raw !== 'object')
+            continue;
+        const r = raw;
+        if (typeof r.larkAppId !== 'string' || !r.larkAppId)
+            continue;
+        out.push({
+            larkAppId: r.larkAppId,
+            botName: typeof r.botName === 'string' ? r.botName : r.larkAppId,
+            cliId: typeof r.cliId === 'string' ? r.cliId : '',
+            botUnionId: typeof r.botUnionId === 'string' ? r.botUnionId : undefined,
+            capability: typeof r.capability === 'string' ? r.capability : null,
+            hasTeamRole: !!r.hasTeamRole,
+            ownerUnionId: typeof r.ownerUnionId === 'string' ? r.ownerUnionId : undefined,
+            ownerName: typeof r.ownerName === 'string' ? r.ownerName : undefined,
+        });
+    }
+    return out;
+}
+export async function handleFederationApi(req, res, url, deps = {}) {
+    const path = url.pathname;
+    if (!path.startsWith('/api/federation/'))
+        return false;
+    const dataDir = deps.dataDir ?? config.session.dataDir;
+    const method = req.method ?? 'GET';
+    // Spoke registers via an invite → issued a syncToken bound to the team.
+    if (path === '/api/federation/join' && method === 'POST') {
+        let body;
+        try {
+            body = await readBody(req);
+        }
+        catch {
+            jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            return true;
+        }
+        const inviteCode = String(body?.inviteCode ?? '').trim();
+        const dep = body?.deployment;
+        if (!inviteCode) {
+            jsonRes(res, 400, { ok: false, error: 'code_required' });
+            return true;
+        }
+        if (!dep || typeof dep.deploymentId !== 'string' || !dep.deploymentId) {
+            jsonRes(res, 400, { ok: false, error: 'deployment_required' });
+            return true;
+        }
+        // Self-join is meaningless (a deployment federating with itself) — reject
+        // clearly before consuming the invite, so the spoke can surface it.
+        if (dep.deploymentId === getDeploymentIdentity(dataDir).deploymentId) {
+            jsonRes(res, 400, { ok: false, error: 'cannot_join_self' });
+            return true;
+        }
+        const inv = consumeInvite(dataDir, inviteCode);
+        if (!inv.ok) {
+            jsonRes(res, 403, { ok: false, error: `invite_${inv.reason}` });
+            return true;
+        }
+        const team = getTeam(dataDir, inv.teamId);
+        if (!team) {
+            jsonRes(res, 403, { ok: false, error: 'invite_team_deleted' });
+            return true;
+        }
+        const reg = registerDeployment(dataDir, inv.teamId, {
+            deploymentId: dep.deploymentId,
+            name: typeof dep.name === 'string' && dep.name ? dep.name : dep.deploymentId,
+            bots: sanitizeBots(dep.bots),
+            ownerUnionId: typeof dep.ownerUnionId === 'string' ? dep.ownerUnionId : undefined,
+            ownerName: typeof dep.ownerName === 'string' ? dep.ownerName : undefined,
+            callbackUrl: typeof dep.callbackUrl === 'string' && /^https?:\/\//i.test(dep.callbackUrl) ? dep.callbackUrl.replace(/\/+$/, '') : undefined,
+            delegationToken: typeof dep.delegationToken === 'string' ? dep.delegationToken : undefined,
+        });
+        // deploymentId is public (shows in roster) — never hand back an existing
+        // deployment's long-lived token. A duplicate must re-bind via an explicit
+        // reset proving the old token (future), not by re-joining with an invite.
+        if (!reg.created) {
+            jsonRes(res, 409, { ok: false, error: 'deployment_already_joined' });
+            return true;
+        }
+        jsonRes(res, 200, { ok: true, teamId: inv.teamId, teamName: team.name, syncToken: reg.syncToken });
+        return true;
+    }
+    // Spoke-initiated leave/revoke: drop this deployment from its team (authed by
+    // its own syncToken). Idempotent — unknown token is treated as already gone.
+    if (path === '/api/federation/leave' && method === 'POST') {
+        let body;
+        try {
+            body = await readBody(req);
+        }
+        catch {
+            jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            return true;
+        }
+        const syncToken = String(body?.syncToken ?? '').trim() || federationToken(req, url);
+        if (!syncToken) {
+            jsonRes(res, 401, { ok: false, error: 'token_required' });
+            return true;
+        }
+        removeDeploymentByToken(dataDir, syncToken);
+        jsonRes(res, 200, { ok: true });
+        return true;
+    }
+    // Spoke pushes its current bots + heartbeat.
+    if (path === '/api/federation/sync' && method === 'POST') {
+        let body;
+        try {
+            body = await readBody(req);
+        }
+        catch {
+            jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            return true;
+        }
+        const syncToken = String(body?.syncToken ?? '').trim();
+        if (!syncToken) {
+            jsonRes(res, 401, { ok: false, error: 'token_required' });
+            return true;
+        }
+        const ok = syncDeployment(dataDir, syncToken, sanitizeBots(body?.bots), {
+            ownerUnionId: typeof body?.ownerUnionId === 'string' ? body.ownerUnionId : undefined,
+            ownerName: typeof body?.ownerName === 'string' ? body.ownerName : undefined,
+            name: typeof body?.name === 'string' ? body.name : undefined,
+        });
+        if (!ok) {
+            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
+            return true;
+        }
+        jsonRes(res, 200, { ok: true });
+        return true;
+    }
+    // Spoke pulls the aggregated cross-deployment roster for its team. Hub's own
+    // local bots come from the live registry (liveBots) so an empty bots-info.json
+    // doesn't hide them from the roster spokes see.
+    if (path === '/api/federation/roster' && method === 'GET') {
+        const found = getDeploymentByToken(dataDir, federationToken(req, url));
+        if (!found) {
+            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
+            return true;
+        }
+        jsonRes(res, 200, { ok: true, ...buildFederatedRoster(dataDir, found.teamId, undefined, undefined, deps.liveBots?.()) });
+        return true;
+    }
+    // Spoke initiates 拉群 on the team it joined; the HUB orchestrates (local
+    // creator or delegate). Authed by the spoke's syncToken (team-internal trust).
+    // operator = the calling spoke's owner, DERIVED FROM THE TOKEN (never the body).
+    if (path === '/api/federation/group' && method === 'POST') {
+        if (!deps.createTeamGroup) {
+            jsonRes(res, 501, { ok: false, error: 'group_create_unavailable' });
+            return true;
+        }
+        let body;
+        try {
+            body = await readBody(req);
+        }
+        catch {
+            jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            return true;
+        }
+        const token = bearerOnly(req); // header-only: a write endpoint must not take the token from URL/body
+        const found = getDeploymentByToken(dataDir, token);
+        if (!found) {
+            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
+            return true;
+        }
+        const requestId = String(body?.requestId ?? '').trim();
+        if (!requestId) {
+            jsonRes(res, 400, { ok: false, error: 'request_id_required' });
+            return true;
+        }
+        const larkAppIds = Array.isArray(body?.larkAppIds) ? body.larkAppIds.filter((x) => typeof x === 'string') : [];
+        const name = String(body?.name ?? '').trim() || '协作群';
+        // Idempotency: replay of the same {syncToken, requestId} returns the FIRST
+        // terminal result verbatim — including failures (delegation_timeout /
+        // group_create_proxy_failed) which may already have side-effected. A genuine
+        // retry must use a fresh requestId; replaying must never re-orchestrate.
+        const idemKey = `group:${token}:${requestId}`;
+        const cached = idemGet(idemKey);
+        if (cached) {
+            jsonRes(res, cached.status, cached.body);
+            return true;
+        }
+        const out = await orchestrateFederatedGroup(dataDir, { name, larkAppIds, operatorUnionId: found.deployment.ownerUnionId, requestId, teamId: found.teamId }, { createTeamGroup: deps.createTeamGroup, fetcher: deps.fetcher ?? fetch, live: deps.liveBots?.() });
+        idemSet(idemKey, { status: out.status, body: out.body });
+        jsonRes(res, out.status, out.body);
+        return true;
+    }
+    // Hub delegates 拉群 to THIS spoke (hub→spoke): the hub had no local online
+    // creator, so it asks the deployment that owns a selected bot to create the
+    // group with ITS own online bot. Authed by the delegationToken THIS spoke
+    // issued to that hub at join (team-internal trust).
+    if (path === '/api/federation/delegate-group' && method === 'POST') {
+        if (!deps.createTeamGroup) {
+            jsonRes(res, 501, { ok: false, error: 'group_create_unavailable' });
+            return true;
+        }
+        let body;
+        try {
+            body = await readBody(req);
+        }
+        catch {
+            jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            return true;
+        }
+        const token = bearerOnly(req); // header-only: same pre-auth write semantics as /group (never URL/body)
+        if (!findMembershipByDelegationToken(dataDir, token)) {
+            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
+            return true;
+        }
+        const requestId = String(body?.requestId ?? '').trim();
+        if (!requestId) {
+            jsonRes(res, 400, { ok: false, error: 'request_id_required' });
+            return true;
+        }
+        // Idempotency: replay of {token, requestId} returns the FIRST terminal result
+        // verbatim — including failures (createTeamGroup may have side-effected). A
+        // genuine retry must use a fresh requestId; replaying never re-creates.
+        const idemKey = `delegate:${token}:${requestId}`;
+        const cached = idemGet(idemKey);
+        if (cached) {
+            jsonRes(res, cached.status, cached.body);
+            return true;
+        }
+        // Dedup + cap inputs (pre-auth command endpoint — keep blast radius small).
+        const larkAppIds = Array.from(new Set((Array.isArray(body?.larkAppIds) ? body.larkAppIds : []).filter((x) => typeof x === 'string')));
+        const ownerUnionIds = Array.from(new Set((Array.isArray(body?.ownerUnionIds) ? body.ownerUnionIds : []).filter((x) => typeof x === 'string')));
+        const name = (String(body?.name ?? '').trim()) || '协作群';
+        if (larkAppIds.length === 0) {
+            jsonRes(res, 400, { ok: false, error: 'no_bots_selected' });
+            return true;
+        }
+        if (larkAppIds.length > MAX_BOTS || ownerUnionIds.length > MAX_OWNERS) {
+            jsonRes(res, 400, { ok: false, error: 'too_many' });
+            return true;
+        }
+        // Guardrail: the delegation must involve at least one of OUR local bots
+        // (otherwise it's unrelated to this deployment — refuse to act as creator).
+        const localIds = new Set(buildTeamRoster(dataDir, undefined, undefined, deps.liveBots?.()).bots.map(b => b.larkAppId));
+        if (!larkAppIds.some(id => localIds.has(id))) {
+            jsonRes(res, 400, { ok: false, error: 'no_local_bot' });
+            return true;
+        }
+        const r = await deps.createTeamGroup({ name, larkAppIds, ownerUnionIds });
+        const result = { status: r.ok ? 200 : 502, body: r };
+        idemSet(idemKey, result); // cache terminal result (success AND failure)
+        jsonRes(res, result.status, result.body);
+        return true;
+    }
+    // Hub asks THIS spoke to add ITS OWN owner(s) to an existing chat (hub→spoke):
+    // the hub's creator bot can't add users outside its app's visibility scope
+    // (Lark code 232024), but THIS deployment's bot has its owner in scope. We add
+    // via `viaLarkAppId` — one of our bots that's already a member of the chat.
+    // Authed by the delegationToken THIS spoke issued (team-internal trust).
+    if (path === '/api/federation/delegate-add-owner' && method === 'POST') {
+        let body;
+        try {
+            body = await readBody(req);
+        }
+        catch {
+            jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            return true;
+        }
+        const token = bearerOnly(req);
+        if (!findMembershipByDelegationToken(dataDir, token)) {
+            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
+            return true;
+        }
+        const requestId = String(body?.requestId ?? '').trim();
+        if (!requestId) {
+            jsonRes(res, 400, { ok: false, error: 'request_id_required' });
+            return true;
+        }
+        const idemKey = `add-owner:${token}:${requestId}`;
+        const cached = idemGet(idemKey);
+        if (cached) {
+            jsonRes(res, cached.status, cached.body);
+            return true;
+        }
+        const chatId = String(body?.chatId ?? '').trim();
+        const viaLarkAppId = String(body?.viaLarkAppId ?? '').trim();
+        const rawOwners = Array.isArray(body?.ownerUnionIds) ? body.ownerUnionIds : [];
+        const ownerUnionIds = Array.from(new Set(rawOwners.filter((x) => typeof x === 'string')));
+        if (!chatId || ownerUnionIds.length === 0) {
+            jsonRes(res, 400, { ok: false, error: 'bad_request' });
+            return true;
+        }
+        if (ownerUnionIds.length > MAX_OWNERS) {
+            jsonRes(res, 400, { ok: false, error: 'too_many' });
+            return true;
+        }
+        const roster = buildTeamRoster(dataDir, undefined, undefined, deps.liveBots?.());
+        // Guardrail: viaLarkAppId must be one of OUR local bots.
+        if (!roster.bots.some(b => b.larkAppId === viaLarkAppId)) {
+            jsonRes(res, 400, { ok: false, error: 'not_a_local_bot' });
+            return true;
+        }
+        // Capability limit: only add people who are OUR owners (this deployment's owner
+        // or a local bot's owner). A delegationToken holder must NOT use our bot to pull
+        // arbitrary in-scope users into arbitrary chats. Non-owners → invalid, no Lark call.
+        const me = getDeploymentIdentity(dataDir);
+        const allowedOwners = new Set([me.ownerUnionId, ...roster.bots.map(b => b.owner?.unionId)].filter((x) => !!x));
+        const toAdd = ownerUnionIds.filter(u => allowedOwners.has(u));
+        const notOurs = ownerUnionIds.filter(u => !allowedOwners.has(u));
+        const addOwners = deps.addOwners ?? (async (via, chat, ids) => {
+            if (!ensureLocalClient(via))
+                return { invalidUserIds: ids };
+            return addUsersToChatByUnionId(via, chat, ids);
+        });
+        const ar = toAdd.length > 0 ? await addOwners(viaLarkAppId, chatId, toAdd) : { invalidUserIds: [] };
+        const result = { status: 200, body: { ok: true, invalidUserIds: [...notOurs, ...ar.invalidUserIds] } };
+        idemSet(idemKey, result);
+        jsonRes(res, result.status, result.body);
+        return true;
+    }
+    jsonRes(res, 404, { ok: false, error: 'not_found' });
+    return true;
+}
+//# sourceMappingURL=federation-api.js.map

package/dist/dashboard/federation-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-api.js","sourceRoot":"","sources":["../../src/dashboard/federation-api.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EACL,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,uBAAuB,GAElF,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAgB,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAgB,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;gFAEgF;AAChF,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,CAAC;QAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB;;;8EAG8E;AAC9E,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkD,CAAC;AAC/E,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACxE,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AACD,SAAS,OAAO,CAAC,GAAW,EAAE,MAAe;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY;QAAE,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;YAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IACzG,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,oBAAoB,EAAE,MAAM,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;kFACkF;AAClF,SAAS,eAAe,CAAC,GAAoB,EAAE,GAAQ;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxF,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED;;6EAE6E;AAC7E,SAAS,UAAU,CAAC,GAAoB;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,OAAO,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,QAAQ,GAAG,GAAG,GAAG,IAAI;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAW,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QAClB,IAAI,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,SAAS;QAC9D,GAAG,CAAC,IAAI,CAAC;YACP,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACjD,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACvE,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YAClE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;YAC5B,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YAC7E,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SACrE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;IACvD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IAEnC,wEAAwE;IACxE,IAAI,IAAI,KAAK,sBAAsB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACzD,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,EAAE,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACtE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC9E,CAAC;QACD,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,GAAG,CAAC,YAAY,KAAK,qBAAqB,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,CAAC;YACrE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC3E,CAAC;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE;YAClD,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY;YAC5E,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAC5B,YAAY,EAAE,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACjF,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACxE,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3I,eAAe,EAAE,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;SAC3F,CAAC,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACxG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,IAAI,KAAK,uBAAuB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1D,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpF,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3F,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI,KAAK,sBAAsB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACzD,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3F,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;YACtE,YAAY,EAAE,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACpF,SAAS,EAAE,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC3E,IAAI,EAAE,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACnF,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,gDAAgD;IAChD,IAAI,IAAI,KAAK,wBAAwB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACzH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,+EAA+E;IAC/E,iFAAiF;IACjF,IAAI,IAAI,KAAK,uBAAuB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChH,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,sEAAsE;QACrG,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChG,MAAM,UAAU,GAAa,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9H,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC;QACtD,2EAA2E;QAC3E,sEAAsE;QACtE,6EAA6E;QAC7E,yEAAyE;QACzE,MAAM,OAAO,GAAG,SAAS,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAA8C,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,OAAO,EACjD,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACrG,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACtG,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,IAAI,KAAK,gCAAgC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChH,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,wEAAwE;QACvG,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChI,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChG,8EAA8E;QAC9E,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,OAAO,GAAG,YAAY,KAAK,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAA8C,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtE,4EAA4E;QAC5E,MAAM,UAAU,GAAa,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrJ,MAAM,aAAa,GAAa,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9J,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;QACxD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1G,IAAI,UAAU,CAAC,MAAM,GAAG,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC5I,wEAAwE;QACxE,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACvH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,8CAA8C;QACxE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,2EAA2E;IAC3E,+EAA+E;IAC/E,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,IAAI,KAAK,oCAAoC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvE,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChI,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChG,MAAM,OAAO,GAAG,aAAa,KAAK,IAAI,SAAS,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAA8C,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,MAAM,SAAS,GAAc,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,aAAa,GAAa,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjH,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACnH,IAAI,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjF,yDAAyD;QACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtI,gFAAgF;QAChF,iFAAiF;QACjF,qFAAqF;QACrF,MAAM,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpI,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,GAAW,EAAE,IAAY,EAAE,GAAa,EAAE,EAAE;YACtF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;YAC5D,OAAO,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QACpG,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/dashboard/federation-spoke-api.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Federation SPOKE endpoints, mounted INSIDE the dashboard's token gate (these
+ * are owner actions — the dashboard token already proves the owner). The spoke
+ * makes OUTBOUND calls to a hub; it never needs to expose anything inbound.
+ *   - POST /api/team/join-remote   { hubUrl, inviteCode }
+ *   - GET  /api/team/remote-roster
+ *   - POST /api/team/sync-remote
+ *   - POST /api/team/leave-remote  { hubUrl, teamId }
+ *
+ * The long-lived syncToken is sent in the `Authorization: Bearer` header (never
+ * in a URL, so it stays out of access/proxy logs). All hub calls have a timeout.
+ * See docs/federation-design.md.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type LiveBot } from '../services/team-roster.js';
+import { type BotConfig } from '../bot-registry.js';
+import { type Fetcher } from './federated-group-core.js';
+export interface OwnerCandidate {
+    unionId: string;
+    name: string;
+}
+/** Injectable seams for the owner resolver (defaults hit Feishu via the bot's
+ *  own credentials). Lets the resolver's registry/iteration logic be unit-tested
+ *  without network. */
+interface OwnerResolveDeps {
+    configs?: () => BotConfig[];
+    /** Ensure a usable Lark client exists for cfg. The DASHBOARD process has no bot
+     *  registry (it proxies to daemons), so getBotClient() would throw — register
+     *  the cfg on demand (it carries the app secret from bots.json). */
+    ensureClient?: (cfg: BotConfig) => void;
+    resolveAllowed?: (larkAppId: string, allowed: string[]) => Promise<string[]>;
+    resolveUnion?: (larkAppId: string, openId: string) => Promise<{
+        unionId?: string;
+        name?: string;
+    }>;
+}
+/** Resolve this deployment's owner identity from bots.json `allowedUsers` using
+ *  each bot's OWN app credentials (no /pair, no shared pairings.json — immune to
+ *  the dataDir-split that broke /pair). Walks bots with allowedUsers in order;
+ *  returns the first bot's distinct resolved {unionId,name} (skips bots that
+ *  resolve to nothing, so one mis-config doesn't hide the rest). The UI auto-binds
+ *  when there's exactly one, else lets the owner pick. */
+export declare function resolveOwnerCandidatesFromAllowedUsers(d?: OwnerResolveDeps): Promise<OwnerCandidate[]>;
+/** Push this deployment's current bots to every joined hub. Best-effort. */
+export declare function syncAllMemberships(dataDir: string, fetcher?: Fetcher, live?: LiveBot[]): Promise<{
+    synced: number;
+    failed: number;
+}>;
+export interface FederationSpokeDeps {
+    dataDir?: string;
+    fetcher?: Fetcher;
+    /** Live daemon-registry bots (injected by dashboard.ts) — authoritative source
+     *  for THIS deployment's bots, so an empty/stale bots-info.json never hides
+     *  running bots from the team roster / federation sync. */
+    liveBots?: () => LiveBot[];
+    /** Injected by dashboard.ts — picks a local online creator + proxies to its
+     *  daemon's /api/groups/create (federated bots are added by larkAppId). */
+    createTeamGroup?: (args: {
+        name: string;
+        larkAppIds: string[];
+        ownerUnionIds?: string[];
+    }) => Promise<{
+        ok: boolean;
+        chatId?: string;
+        shareLink?: string;
+        invalidBotIds?: string[];
+        invalidOwnerUnionIds?: string[];
+        error?: string;
+    }>;
+    /** Test seam: resolve owner candidates from allowedUsers (defaults to the real
+     *  Feishu-backed resolver). */
+    ownerCandidates?: () => Promise<OwnerCandidate[]>;
+}
+export declare function handleFederationSpokeApi(req: IncomingMessage, res: ServerResponse, url: URL, deps?: FederationSpokeDeps): Promise<boolean>;
+export {};
+//# sourceMappingURL=federation-spoke-api.d.ts.map

package/dist/dashboard/federation-spoke-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-spoke-api.d.ts","sourceRoot":"","sources":["../../src/dashboard/federation-spoke-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAS3E,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAMzF,OAAO,EAAyD,KAAK,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEhH,MAAM,WAAW,cAAc;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAEjE;;uBAEuB;AACvB,UAAU,gBAAgB;IACxB,OAAO,CAAC,EAAE,MAAM,SAAS,EAAE,CAAC;IAC5B;;wEAEoE;IACpE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,IAAI,CAAC;IACxC,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpG;AAED;;;;;0DAK0D;AAC1D,wBAAsB,sCAAsC,CAAC,CAAC,GAAE,gBAAqB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAsBhH;AAwDD,4EAA4E;AAC5E,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,OAAe,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAejJ;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;+DAE2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IAC3B;+EAC2E;IAC3E,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,KAAK,OAAO,CAAC;QACpG,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KAC7H,CAAC,CAAC;IACH;mCAC+B;IAC/B,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;CACnD;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAuUlB"}