botmux 2.88.0 → 2.89.0

package/dist/dashboard/daemon-internal-api.js

@@ -0,0 +1,534 @@
+/**
+ * Daemon-internal API — typed Route B server for `/__daemon/*`.
+ *
+ * Dispatch pipeline:
+ *   1) `verifyDaemonRequest` checks HMAC + loopback + ts ±60s + nonce replay.
+ *      Reads the body stream EXACTLY ONCE and returns `bodyRaw`.
+ *   2) `bodyRaw` is JSON-parsed (empty body → `undefined`); a parse failure
+ *      after a valid HMAC returns 400 `bad_json` without re-reading `req`.
+ *   3) Dispatch matches `(method, path)` against a typed allowlist
+ *      endpoints — there is intentionally NO generic forward, so a daemon
+ *      can never use Route B as a path-shifting proxy.
+ *
+ * Settings-write also enforces the union_id owner gate: the body must
+ * carry an `ownerUnionId` (`on_`-prefixed) that resolves to a candidate in
+ * the global owner set, or the request returns 403 `owner_only`.
+ *
+ * The factory exposes both `handle(req,res,url)` (production wiring) and
+ * `dispatchForTest(method, url, bodyRaw)` (skips HMAC for unit tests that
+ * focus on route shape; full HMAC flow is covered by daemon-internal-auth).
+ */
+import { createNonceStore, verifyDaemonRequest, } from './daemon-internal-auth.js';
+import { addBotsToGroup, bindOncall, disbandGroup, leaveGroup, unbindOncall, } from './groups-action-helpers.js';
+import { applySettingsWrite, } from './settings-write-applier.js';
+import { isAuthorizedForGlobalSettings, } from './settings-owner-resolver.js';
+import { listWorkflowRuns, runApproveReject, runCancel, } from './workflows-action-helpers.js';
+/** ─── Helpers ──────────────────────────────────────────────────────── */
+function parseStatusesParam(raw) {
+    if (raw === null)
+        return undefined;
+    const s = new Set(raw.split(',').map(x => x.trim()).filter(Boolean));
+    return s.size > 0 ? s : undefined;
+}
+async function readUpstream(upstream) {
+    const text = await upstream.text();
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+function bodyField(body, name) {
+    if (body && typeof body === 'object' && !Array.isArray(body)) {
+        return body[name];
+    }
+    return undefined;
+}
+/**
+ * Generic per-bot scoping helper — restricts aggregator rows to those owned
+ * by the authenticated caller's bot.
+ *
+ * Default list reads are per-bot: a caller authenticated as bot A should not
+ * see bot B rows unless the route explicitly opts into `?scope=global`.
+ *
+ * Rows whose owner getter returns undefined / empty string (legacy
+ * persistence shape) are KEPT so they don't disappear from a freshly-
+ * upgraded deploy. callerAppId === undefined means the test seam
+ * (`dispatchForTest`) is in use; the test is trusted to assert its own
+ * scope so we pass everything through.
+ *
+ * The owner getter argument lets workflows (nested
+ * `chatBinding.larkAppId`) reuse the same filter pipeline as sessions /
+ * schedules (top-level `larkAppId`).
+ */
+function scopeRowsByCaller(rows, callerAppId, getOwnerAppId) {
+    if (!callerAppId)
+        return rows.slice();
+    return rows.filter(r => {
+        const owner = getOwnerAppId(r);
+        // Keep legacy rows (no owner resolvable) so a fresh deploy doesn't lose them.
+        if (typeof owner !== 'string' || owner.length === 0)
+            return true;
+        return owner === callerAppId;
+    });
+}
+/**
+ * Thin wrapper around `scopeRowsByCaller` for rows with a top-level
+ * `larkAppId` field (sessions / schedules / aggregator-shape). Workflows
+ * call `scopeRowsByCaller` directly with their own owner getter.
+ */
+function scopeByCaller(rows, callerAppId) {
+    return scopeRowsByCaller(rows, callerAppId, r => r?.larkAppId);
+}
+/**
+ * Per-bot scoping for the `groups-matrix` endpoint.
+ *
+ * The groups matrix returns `{ chats, bots }` where neither container has a
+ * top-level `larkAppId`, so the generic `scopeByCaller` / `scopeRowsByCaller`
+ * helpers don't fit. Default fail-closed rules:
+ *
+ *   - bots: filter to ONLY entries whose `larkAppId === callerAppId`.
+ *   - chats: keep ONLY chats where some memberBots entry has
+ *     `larkAppId === callerAppId AND inChat === true`. A bot that's listed as
+ *     a member but `inChat=false` does NOT qualify.
+ *   - each retained chat's `memberBots` is trimmed to JUST the caller's
+ *     single entry, so other bots' roster never leaks.
+ *   - NO legacy fallback: rows / bots without a recognized `larkAppId` are
+ *     dropped (fail-closed). Unlike sessions / schedules, the groups matrix
+ *     has no historical persistence shape to preserve.
+ *
+ * `callerAppId === undefined` is the `dispatchForTest` seam — pass through
+ * the full unscoped matrix so tests can assert raw aggregator output.
+ *
+ * The helper does NOT mutate the input matrix: each kept chat is spread into
+ * a new object before its `memberBots` is overwritten.
+ */
+function scopeGroupsMatrixByCaller(matrix, callerAppId) {
+    if (callerAppId === undefined)
+        return matrix;
+    const filteredBots = matrix.bots.filter(b => typeof b?.larkAppId === 'string' &&
+        b.larkAppId === callerAppId);
+    const filteredChats = [];
+    for (const c of matrix.chats) {
+        const members = c?.memberBots;
+        if (!Array.isArray(members))
+            continue;
+        const ourMember = members.find(m => m?.larkAppId === callerAppId && m?.inChat === true);
+        if (!ourMember)
+            continue;
+        filteredChats.push({ ...c, memberBots: [ourMember] });
+    }
+    return { chats: filteredChats, bots: filteredBots };
+}
+/** ─── Route table ────────────────────────────────────────────────── */
+const ROUTES = [
+    // ── READ ──────────────────────────────
+    {
+        method: 'GET',
+        pathRe: /^\/__daemon\/sessions-list$/,
+        handle: async (_m, ctx, deps) => {
+            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
+            const sessions = isGlobal
+                ? deps.getSessions()
+                : scopeByCaller(deps.getSessions(), ctx.callerAppId);
+            return { status: 200, body: { sessions } };
+        },
+    },
+    // Dedicated schedules list endpoint. `?scope=global` widens only the read
+    // row set; HMAC, admin, invoker, and write owner-routing gates are unchanged.
+    {
+        method: 'GET',
+        pathRe: /^\/__daemon\/schedules-list$/,
+        handle: async (_m, ctx, deps) => {
+            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
+            const schedules = isGlobal
+                ? deps.getSchedules()
+                : scopeByCaller(deps.getSchedules(), ctx.callerAppId);
+            return { status: 200, body: { schedules } };
+        },
+    },
+    {
+        method: 'GET',
+        pathRe: /^\/__daemon\/settings-snapshot$/,
+        handle: async (_m, _ctx, deps) => ({ status: 200, body: { settings: deps.resolveDashboardSettings() } }),
+    },
+    {
+        method: 'GET',
+        pathRe: /^\/__daemon\/groups-matrix$/,
+        handle: async (_m, ctx, deps) => {
+            // Default: per-bot owner gate. Filter the matrix so the caller's bot
+            // only sees rows where it's actually a member (`inChat`), and trim
+            // each chat's memberBots to the caller's single entry to avoid leaking
+            // other bots' membership state.
+            //
+            // `?scope=global`: `/dashboard` is a Bot Owner global tool panel, so
+            // return the full matrix. HMAC / owner / invoker gates are unchanged;
+            // only the read row scope widens.
+            const matrix = await deps.buildGroupsMatrix();
+            const scoped = ctx.url.searchParams.get('scope') === 'global'
+                ? matrix
+                : scopeGroupsMatrixByCaller(matrix, ctx.callerAppId);
+            return { status: 200, body: scoped };
+        },
+    },
+    {
+        method: 'GET',
+        pathRe: /^\/__daemon\/workflows-runs-snapshot$/,
+        handle: async (_m, ctx, deps) => {
+            const query = {
+                all: ctx.url.searchParams.get('all') === '1',
+                statuses: parseStatusesParam(ctx.url.searchParams.get('status')),
+            };
+            // listWorkflowRuns returns HandlerResult, not a raw array. Filter only
+            // successful `{ runs }` bodies; pass through errors and malformed bodies
+            // so callers see the real failure instead of an empty list.
+            const result = await listWorkflowRuns(query, deps.workflowsActionDeps);
+            if (result.status === 200 &&
+                result.body &&
+                typeof result.body === 'object' &&
+                Array.isArray(result.body.runs)) {
+                const runs = result.body.runs;
+                const scoped = ctx.url.searchParams.get('scope') === 'global'
+                    ? runs.slice()
+                    : scopeRowsByCaller(runs, ctx.callerAppId, r => r?.chatBinding?.larkAppId);
+                return {
+                    status: 200,
+                    body: { ...result.body, runs: scoped },
+                };
+            }
+            return result;
+        },
+    },
+    {
+        method: 'GET',
+        pathRe: /^\/__daemon\/overview-snapshot$/,
+        handle: async (_m, ctx, deps) => {
+            // Default: apply the same per-bot scoping as the dedicated list
+            // endpoints when overview bundles aggregator state.
+            //
+            // `?scope=global`: `/dashboard` is a global tool panel. All list
+            // modules except settings widen their read scope together; settings
+            // remains per-calling-bot until it has an explicit global write model.
+            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
+            const groups = await deps.buildGroupsMatrix();
+            return {
+                status: 200,
+                body: {
+                    sessions: isGlobal
+                        ? deps.getSessions()
+                        : scopeByCaller(deps.getSessions(), ctx.callerAppId),
+                    schedules: isGlobal
+                        ? deps.getSchedules()
+                        : scopeByCaller(deps.getSchedules(), ctx.callerAppId),
+                    settings: deps.resolveDashboardSettings(),
+                    groups,
+                },
+            };
+        },
+    },
+    // ── WRITE: settings ───────────────────
+    {
+        method: 'PUT',
+        pathRe: /^\/__daemon\/settings-write$/,
+        handle: async (_m, ctx, deps) => {
+            const ownerUnionId = bodyField(ctx.body, 'ownerUnionId');
+            const allowed = await isAuthorizedForGlobalSettings({ senderUnionId: typeof ownerUnionId === 'string' ? ownerUnionId : undefined }, deps.settingsOwnerDeps);
+            if (!allowed)
+                return { status: 403, body: { ok: false, error: 'owner_only' } };
+            const patch = bodyField(ctx.body, 'patch');
+            const r = await applySettingsWrite(patch, deps.settingsApplierDeps);
+            if (!r.ok)
+                return { status: 400, body: { ok: false, error: r.error } };
+            return { status: 200, body: { ok: true, settings: r.settings } };
+        },
+    },
+    // ── WRITE: sessions × 3 ───────────────
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/sessions\/([^/]+)\/(close|resume|locate)$/,
+        handle: async (m, ctx, deps) => {
+            const sessionId = decodeURIComponent(m[1]);
+            const action = m[2];
+            // Three-state routing mirrors schedules:
+            //  - owner !== undefined + caller mismatch → 403 session_owner_mismatch
+            //  - owner !== undefined + caller match (or test seam) → proxy owner
+            //  - owner === undefined + sessionExists + callerAppId set → legacy,
+            //    proxy to caller's bot (same bot that fetched the row via the
+            //    scoped read endpoint).
+            //  - row genuinely missing → 404 unknown_session
+            // Route B fails closed too, not only the IM card layer.
+            const owner = deps.ownerOf(sessionId);
+            if (owner === undefined) {
+                if (!deps.sessionExists(sessionId)) {
+                    return { status: 404, body: { ok: false, error: 'unknown_session' } };
+                }
+                if (ctx.callerAppId === undefined) {
+                    // test seam preserves the historical 404 — production callers
+                    // always have an HMAC-resolved appId.
+                    return { status: 404, body: { ok: false, error: 'unknown_session' } };
+                }
+                const upstream = await deps.proxyToDaemon(ctx.callerAppId, `/api/sessions/${encodeURIComponent(sessionId)}/${action}`, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
+                });
+                return { status: upstream.status, body: await readUpstream(upstream) };
+            }
+            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
+            if (!isGlobal && ctx.callerAppId !== undefined && owner !== ctx.callerAppId) {
+                return { status: 403, body: { ok: false, error: 'session_owner_mismatch' } };
+            }
+            const upstream = await deps.proxyToDaemon(owner, `/api/sessions/${encodeURIComponent(sessionId)}/${action}`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json' },
+                body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
+            });
+            return { status: upstream.status, body: await readUpstream(upstream) };
+        },
+    },
+    // ── WRITE: groups × 5 ─────────────────
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/groups\/([^/]+)\/leave$/,
+        handle: async (m, ctx, deps) => leaveGroup(decodeURIComponent(m[1]), ctx.body, deps.groupsActionDeps),
+    },
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/groups\/([^/]+)\/disband$/,
+        handle: async (m, ctx, deps) => disbandGroup(decodeURIComponent(m[1]), ctx.body, deps.groupsActionDeps),
+    },
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/groups\/([^/]+)\/add-bots$/,
+        handle: async (m, ctx, deps) => addBotsToGroup(decodeURIComponent(m[1]), ctx.bodyRaw, deps.groupsActionDeps),
+    },
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/groups\/([^/]+)\/oncall\/([^/]+)\/bind$/,
+        handle: async (m, ctx, deps) => bindOncall(decodeURIComponent(m[1]), decodeURIComponent(m[2]), ctx.bodyRaw, deps.groupsActionDeps),
+    },
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/groups\/([^/]+)\/oncall\/([^/]+)\/unbind$/,
+        handle: async (m, _ctx, deps) => unbindOncall(decodeURIComponent(m[1]), decodeURIComponent(m[2]), deps.groupsActionDeps),
+    },
+    {
+        method: 'GET',
+        pathRe: /^\/__daemon\/groups\/([^/]+)\/roles\/([^/]+)$/,
+        handle: async (m, _ctx, deps) => {
+            const chatId = decodeURIComponent(m[1]);
+            const appId = decodeURIComponent(m[2]);
+            const upstream = await deps.proxyToDaemon(appId, `/api/roles/${encodeURIComponent(chatId)}`, { method: 'GET' });
+            return { status: upstream.status, body: await readUpstream(upstream) };
+        },
+    },
+    {
+        method: 'PUT',
+        pathRe: /^\/__daemon\/groups\/([^/]+)\/roles\/([^/]+)$/,
+        handle: async (m, ctx, deps) => {
+            const chatId = decodeURIComponent(m[1]);
+            const appId = decodeURIComponent(m[2]);
+            const upstream = await deps.proxyToDaemon(appId, `/api/roles/${encodeURIComponent(chatId)}`, {
+                method: 'PUT',
+                headers: { 'content-type': 'application/json' },
+                body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
+            });
+            return { status: upstream.status, body: await readUpstream(upstream) };
+        },
+    },
+    {
+        method: 'DELETE',
+        pathRe: /^\/__daemon\/groups\/([^/]+)\/roles\/([^/]+)$/,
+        handle: async (m, _ctx, deps) => {
+            const chatId = decodeURIComponent(m[1]);
+            const appId = decodeURIComponent(m[2]);
+            const upstream = await deps.proxyToDaemon(appId, `/api/roles/${encodeURIComponent(chatId)}`, { method: 'DELETE' });
+            return { status: upstream.status, body: await readUpstream(upstream) };
+        },
+    },
+    // ── WRITE: workflows × 3 ──────────────
+    //
+    // Cross-bot owner gate. The workflow helpers resolve routing from
+    // readRunSnapshot, so Route B checks the owner before proxying. Unlike
+    // sessions/schedules, workflows have no legacy "proxy to caller" fallback:
+    // a run without chatBinding has no routable owner and should fall through to
+    // the helper's existing 409 (`needs_lark_or_cli` / `needs_cli_cancel`).
+    //
+    //   - snapshot null → 404 unknown_run (don't expose the helper's
+    //     non-existent run path)
+    //   - owner !== undefined + caller mismatch → 403 workflow_owner_mismatch
+    //   - owner !== undefined + caller match (or test seam) → fall through
+    //   - owner === undefined → fall through (helper returns 409)
+    //
+    // Apply the same gate to approve/reject even if the current card only
+    // exposes cancel.
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/workflows-runs\/([^/]+)\/(approve|reject)$/,
+        handle: async (m, ctx, deps) => {
+            const runId = decodeURIComponent(m[1]);
+            const action = m[2];
+            // Preserve bad-input semantics: invalid ids return 400 bad_run_id rather
+            // than being shadowed as 404 unknown_run by the owner snapshot lookup.
+            if (!deps.workflowsActionDeps.isValidRunId(runId)) {
+                return { status: 400, body: { ok: false, error: 'bad_run_id' } };
+            }
+            const snap = await deps.workflowsActionDeps.readRunSnapshot(deps.workflowsActionDeps.runsDir, runId);
+            if (!snap)
+                return { status: 404, body: { ok: false, error: 'unknown_run' } };
+            const owner = snap.chatBinding?.larkAppId;
+            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
+            if (!isGlobal && owner !== undefined && ctx.callerAppId !== undefined && owner !== ctx.callerAppId) {
+                return { status: 403, body: { ok: false, error: 'workflow_owner_mismatch' } };
+            }
+            return runApproveReject(runId, action, ctx.bodyRaw, deps.workflowsActionDeps);
+        },
+    },
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/workflows-runs\/([^/]+)\/cancel$/,
+        handle: async (m, ctx, deps) => {
+            const runId = decodeURIComponent(m[1]);
+            // Preserve the same bad-input semantics as approve/reject.
+            if (!deps.workflowsActionDeps.isValidRunId(runId)) {
+                return { status: 400, body: { ok: false, error: 'bad_run_id' } };
+            }
+            const snap = await deps.workflowsActionDeps.readRunSnapshot(deps.workflowsActionDeps.runsDir, runId);
+            if (!snap)
+                return { status: 404, body: { ok: false, error: 'unknown_run' } };
+            const owner = snap.chatBinding?.larkAppId;
+            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
+            if (!isGlobal && owner !== undefined && ctx.callerAppId !== undefined && owner !== ctx.callerAppId) {
+                return { status: 403, body: { ok: false, error: 'workflow_owner_mismatch' } };
+            }
+            return runCancel(runId, ctx.bodyRaw, deps.workflowsActionDeps);
+        },
+    },
+    // ── WRITE: schedules × 4 ──────────────
+    {
+        method: 'POST',
+        pathRe: /^\/__daemon\/schedules\/([^/]+)\/(run|pause|resume|delivery)$/,
+        handle: async (m, ctx, deps) => {
+            const id = decodeURIComponent(m[1]);
+            const action = m[2];
+            // Three-state routing:
+            //  - row missing entirely → 404 unknown_schedule
+            //  - row present with larkAppId → cross-bot gate (403 on mismatch)
+            //  - row present WITHOUT larkAppId (legacy, e.g. pre-v0.4 persistence)
+            //    → proxy to the caller's own bot. legacy rows are kept visible
+            //    in the read path (`scopeByCaller` short-circuits when caller is
+            //    undefined OR when the row has no owner) AND continue to be
+            //    executed by `scheduler.belongsToOwner` on the primary daemon.
+            //    Without this branch, the user would see the row + actionable
+            //    buttons but every POST would 404. With this branch, the caller's
+            //    bot proxies the action just like an explicit-owner row would.
+            const owner = deps.scheduleOwnerOf(id);
+            if (owner === undefined) {
+                if (!deps.scheduleExists(id)) {
+                    return { status: 404, body: { ok: false, error: 'unknown_schedule' } };
+                }
+                // Legacy row. Production: route to the authenticated caller's bot.
+                // Test seam (callerAppId undefined): preserve historical behaviour
+                // (404) so existing dispatchForTest tests stay deterministic.
+                if (ctx.callerAppId === undefined) {
+                    return { status: 404, body: { ok: false, error: 'unknown_schedule' } };
+                }
+                const upstream = await deps.proxyToDaemon(ctx.callerAppId, `/api/schedules/${encodeURIComponent(id)}/${action}`, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
+                });
+                return { status: upstream.status, body: await readUpstream(upstream) };
+            }
+            // Owned row. Cross-bot guard: refuse when the caller is not the
+            // owning bot. test seam keeps the historical pass-through.
+            //
+            // In global dashboard scope, the card can show rows from any bot. We
+            // still proxy to the row's true owner daemon, so global only changes
+            // "owner exists + caller mismatch" from 403 to "proxy owner".
+            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
+            if (!isGlobal && ctx.callerAppId !== undefined && owner !== ctx.callerAppId) {
+                return { status: 403, body: { ok: false, error: 'schedule_owner_mismatch' } };
+            }
+            const upstream = await deps.proxyToDaemon(owner, `/api/schedules/${encodeURIComponent(id)}/${action}`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/json' },
+                body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
+            });
+            return { status: upstream.status, body: await readUpstream(upstream) };
+        },
+    },
+];
+Object.freeze(ROUTES);
+for (const r of ROUTES)
+    Object.freeze(r);
+/**
+ * Pure dispatcher: matches `(method, path)` against the typed allowlist.
+ * Returns `unknown_endpoint` (404) when no path matches, `method_not_allowed`
+ * (405) when a path matches but the method does not, or hands off to the
+ * matched handler.
+ */
+export async function dispatchDaemonInternalRequest(method, url, bodyRaw, deps, callerAppId) {
+    let body = undefined;
+    if (bodyRaw.length > 0) {
+        try {
+            body = JSON.parse(bodyRaw);
+        }
+        catch {
+            return { status: 400, body: { ok: false, error: 'bad_json' } };
+        }
+    }
+    const ctx = { bodyRaw, body, url, callerAppId };
+    let pathMatchedButMethodWrong = false;
+    for (const route of ROUTES) {
+        const m = url.pathname.match(route.pathRe);
+        if (!m)
+            continue;
+        if (route.method !== method) {
+            pathMatchedButMethodWrong = true;
+            continue;
+        }
+        return route.handle(m, ctx, deps);
+    }
+    if (pathMatchedButMethodWrong) {
+        return { status: 405, body: { ok: false, error: 'method_not_allowed' } };
+    }
+    return { status: 404, body: { ok: false, error: 'unknown_endpoint' } };
+}
+/** Render a HandlerResult onto a ServerResponse. */
+function writeHandlerResult(res, result) {
+    const headers = { 'content-type': 'application/json', ...(result.headers ?? {}) };
+    res.writeHead(result.status, headers);
+    res.end(typeof result.body === 'string' ? result.body : JSON.stringify(result.body));
+}
+export function createDaemonInternalApi(deps) {
+    const nonceStore = deps.nonceStore ?? createNonceStore();
+    async function handle(req, res, url) {
+        // ⚠️ Source-of-truth for both the `/__daemon/` gate and dispatch routing
+        // MUST be `req.url` (the exact bytes the HMAC was computed over). The
+        // caller's `url` is only trusted for its `origin` so URL parsing succeeds.
+        // Decoupling these allows a signature minted for path X to drive
+        // dispatch to path Y if a caller passes a mismatched `url`.
+        const reqPath = req.url ?? '/';
+        const requestUrl = new URL(reqPath, url.origin);
+        if (!requestUrl.pathname.startsWith('/__daemon/'))
+            return false;
+        const verify = await verifyDaemonRequest(req, deps.secret, nonceStore, { clock: deps.clock });
+        if (!verify.ok) {
+            writeHandlerResult(res, {
+                status: verify.httpStatus,
+                body: { ok: false, error: verify.reason },
+            });
+            return true;
+        }
+        const result = await dispatchDaemonInternalRequest(req.method ?? 'GET', requestUrl, verify.bodyRaw, deps, verify.appId);
+        writeHandlerResult(res, result);
+        return true;
+    }
+    async function dispatchForTest(method, url, bodyRaw = '', callerAppId) {
+        return dispatchDaemonInternalRequest(method, url, bodyRaw, deps, callerAppId);
+    }
+    return { handle, dispatchForTest };
+}
+//# sourceMappingURL=daemon-internal-api.js.map

package/dist/dashboard/daemon-internal-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-internal-api.js","sourceRoot":"","sources":["../../src/dashboard/daemon-internal-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,cAAc,EACd,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,GAGb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,kBAAkB,GAGnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,6BAA6B,GAE9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,SAAS,GAEV,MAAM,+BAA+B,CAAC;AAqEvC,2EAA2E;AAE3E,SAAS,kBAAkB,CAAC,GAAkB;IAC5C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAc,IAAa,EAAE,IAAY;IACzD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAQ,IAAgC,CAAC,IAAI,CAAkB,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,iBAAiB,CACxB,IAAsB,EACtB,WAA+B,EAC/B,aAA6C;IAE7C,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACrB,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC/B,8EAA8E;QAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,OAAO,KAAK,KAAK,WAAW,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,IAA4B,EAC5B,WAA+B;IAE/B,OAAO,iBAAiB,CACtB,IAAI,EACJ,WAAW,EACX,CAAC,CAAC,EAAE,CAAE,CAA6B,EAAE,SAA+B,CACrE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,yBAAyB,CAChC,MAA6C,EAC7C,WAA+B;IAE/B,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1C,OAAQ,CAA6B,EAAE,SAAS,KAAK,QAAQ;QAC5D,CAA6B,CAAC,SAAS,KAAK,WAAW,CACzD,CAAC;IACF,MAAM,aAAa,GAAc,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAI,CAA8B,EAAE,UAEpC,CAAC;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC,EAAE,SAAS,KAAK,WAAW,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CACnD,CAAC;QACF,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,aAAa,CAAC,IAAI,CAAC,EAAE,GAAI,CAAY,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AACtD,CAAC;AAED,yEAAyE;AAEzE,MAAM,MAAM,GAAe;IACzB,yCAAyC;IACzC;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,6BAA6B;QACrC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,MAAM,QAAQ,GAAG,QAAQ;gBACvB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;gBACpB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC7C,CAAC;KACF;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,8BAA8B;QACtC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,MAAM,SAAS,GAAG,QAAQ;gBACxB,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE;gBACrB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACxD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC9C,CAAC;KACF;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,iCAAiC;QACzC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,EAAE,CAAC;KACzG;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,6BAA6B;QACrC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,qEAAqE;YACrE,mEAAmE;YACnE,uEAAuE;YACvE,gCAAgC;YAChC,EAAE;YACF,qEAAqE;YACrE,sEAAsE;YACtE,kCAAkC;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;gBAC3D,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;KACF;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,uCAAuC;QAC/C,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG;gBACZ,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG;gBAC5C,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;aACjE,CAAC;YACF,uEAAuE;YACvE,yEAAyE;YACzE,4DAA4D;YAC5D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACvE,IACE,MAAM,CAAC,MAAM,KAAK,GAAG;gBACrB,MAAM,CAAC,IAAI;gBACX,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAC/B,KAAK,CAAC,OAAO,CAAE,MAAM,CAAC,IAA2B,CAAC,IAAI,CAAC,EACvD,CAAC;gBACD,MAAM,IAAI,GAAI,MAAM,CAAC,IAAyC,CAAC,IAAI,CAAC;gBACpE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;oBAC3D,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;oBACd,CAAC,CAAC,iBAAiB,CACf,IAAI,EACJ,GAAG,CAAC,WAAW,EACf,CAAC,CAAC,EAAE,CAAE,CAA+C,EAAE,WAAW,EAAE,SAA+B,CACpG,CAAC;gBACN,OAAO;oBACL,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,EAAE,GAAI,MAAM,CAAC,IAAgC,EAAE,IAAI,EAAE,MAAM,EAAE;iBACpE,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,iCAAiC;QACzC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,gEAAgE;YAChE,oDAAoD;YACpD,EAAE;YACF,iEAAiE;YACjE,oEAAoE;YACpE,uEAAuE;YACvE,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC9C,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,QAAQ,EAAE,QAAQ;wBAChB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;wBACpB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC;oBACtD,SAAS,EAAE,QAAQ;wBACjB,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE;wBACrB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC;oBACvD,QAAQ,EAAE,IAAI,CAAC,wBAAwB,EAAE;oBACzC,MAAM;iBACP;aACF,CAAC;QACJ,CAAC;KACF;IAED,yCAAyC;IACzC;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,8BAA8B;QACtC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,YAAY,GAAG,SAAS,CAAU,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,6BAA6B,CACjD,EAAE,aAAa,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,EAC9E,IAAI,CAAC,iBAAiB,CACvB,CAAC;YACF,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;YAC/E,MAAM,KAAK,GAAG,SAAS,CAAU,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACvE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnE,CAAC;KACF;IAED,yCAAyC;IACzC;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,wDAAwD;QAChE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEpB,yCAAyC;YACzC,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,4BAA4B;YAC5B,iDAAiD;YACjD,wDAAwD;YACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC;gBACxE,CAAC;gBACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBAClC,8DAA8D;oBAC9D,sCAAsC;oBACtC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC;gBACxE,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,GAAG,CAAC,WAAW,EACf,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,IAAI,MAAM,EAAE,EAC1D;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;iBAClD,CACF,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC;YAC/E,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,IAAI,MAAM,EAAE,EAC1D;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aAClD,CACF,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;IAED,yCAAyC;IACzC;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,sCAAsC;QAC9C,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC7B,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC;KACxE;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,wCAAwC;QAChD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC7B,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC;KAC1E;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,yCAAyC;QACjD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC7B,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC;KAC/E;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,sDAAsD;QAC9D,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC7B,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC;KACrG;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,wDAAwD;QAChE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAC9B,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC;KAC1F;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,+CAA+C;QACvD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC1C,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,+CAA+C;QACvD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC1C;gBACE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aAClD,CACF,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,+CAA+C;QACvD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC1C,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;IAED,yCAAyC;IACzC,EAAE;IACF,kEAAkE;IAClE,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,EAAE;IACF,iEAAiE;IACjE,6BAA6B;IAC7B,0EAA0E;IAC1E,uEAAuE;IACvE,8DAA8D;IAC9D,EAAE;IACF,sEAAsE;IACtE,kBAAkB;IAClB;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,yDAAyD;QACjE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAyB,CAAC;YAC5C,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;YACnE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAe,CACzD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAChC,KAAK,CACN,CAAC;YACF,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;YAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,CAAC;YAChF,CAAC;YACD,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChF,CAAC;KACF;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,+CAA+C;QACvD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,2DAA2D;YAC3D,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;YACnE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,eAAe,CACzD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAChC,KAAK,CACN,CAAC;YACF,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;YAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;YAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,CAAC;YAChF,CAAC;YACD,OAAO,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjE,CAAC;KACF;IAED,yCAAyC;IACzC;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,+DAA+D;QACvE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEpB,uBAAuB;YACvB,iDAAiD;YACjD,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,qEAAqE;YACrE,gEAAgE;YAChE,mEAAmE;YACnE,kEAAkE;YAClE,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;gBACzE,CAAC;gBACD,mEAAmE;gBACnE,mEAAmE;gBACnE,8DAA8D;gBAC9D,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;gBACzE,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,GAAG,CAAC,WAAW,EACf,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,EACpD;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;iBAClD,CACF,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,CAAC;YACD,gEAAgE;YAChE,2DAA2D;YAC3D,EAAE;YACF,qEAAqE;YACrE,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,CAAC;YAChF,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,EACpD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aAClD,CACF,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACtB,KAAK,MAAM,CAAC,IAAI,MAAM;IAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAc,EACd,GAAQ,EACR,OAAe,EACf,IAA2B,EAC3B,WAAoB;IAEpB,IAAI,IAAI,GAAY,SAAS,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACnC,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;QAAC,CAAC;IAC3E,CAAC;IAED,MAAM,GAAG,GAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IAEjE,IAAI,yBAAyB,GAAG,KAAK,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAAC,yBAAyB,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,yBAAyB,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,oDAAoD;AACpD,SAAS,kBAAkB,CAAC,GAAmB,EAAE,MAAqB;IACpE,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAClF,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACvF,CAAC;AAWD,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,EAAE,CAAC;IAEzD,KAAK,UAAU,MAAM,CACnB,GAAoB,EACpB,GAAmB,EACnB,GAAQ;QAER,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,iEAAiE;QACjE,4DAA4D;QAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,kBAAkB,CAAC,GAAG,EAAE;gBACtB,MAAM,EAAE,MAAM,CAAC,UAAU;gBACzB,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;aAC1C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,GAAG,CAAC,MAAM,IAAI,KAAK,EACnB,UAAU,EACV,MAAM,CAAC,OAAO,EACd,IAAI,EACJ,MAAM,CAAC,KAAK,CACb,CAAC;QACF,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,GAAQ,EACR,UAAkB,EAAE,EACpB,WAAoB;QAEpB,OAAO,6BAA6B,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACrC,CAAC"}