botmux 3.10.0 → 3.23.1

package/dist/dashboard/daemon-internal-api.d.ts

@@ -1,88 +0,0 @@
-/**
- * Daemon-internal API — typed Route B server for `/__daemon/*`.
- *
- * Dispatch pipeline:
- *   1) `verifyDaemonRequest` checks HMAC + loopback + ts ±60s + nonce replay.
- *      Reads the body stream EXACTLY ONCE and returns `bodyRaw`.
- *   2) `bodyRaw` is JSON-parsed (empty body → `undefined`); a parse failure
- *      after a valid HMAC returns 400 `bad_json` without re-reading `req`.
- *   3) Dispatch matches `(method, path)` against a typed allowlist
- *      endpoints — there is intentionally NO generic forward, so a daemon
- *      can never use Route B as a path-shifting proxy.
- *
- * Settings-write also enforces the union_id owner gate: the body must
- * carry an `ownerUnionId` (`on_`-prefixed) that resolves to a candidate in
- * the global owner set, or the request returns 403 `owner_only`.
- *
- * The factory exposes both `handle(req,res,url)` (production wiring) and
- * `dispatchForTest(method, url, bodyRaw)` (skips HMAC for unit tests that
- * focus on route shape; full HMAC flow is covered by daemon-internal-auth).
- */
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import { type ClockLike, type NonceStore } from './daemon-internal-auth.js';
-import { type GroupsActionDeps, type HandlerResult } from './groups-action-helpers.js';
-import { type ResolvedDashboardSettingsView, type SettingsWriteApplierDeps } from './settings-write-applier.js';
-import { type SettingsOwnerResolverDeps } from './settings-owner-resolver.js';
-export type SimpleHttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE';
-/** Deps the dispatcher needs — all IO is injected. */
-export interface DaemonInternalApiDeps {
-    /** `.dashboard-secret` body (string used directly as HMAC key — same convention as `/__cli/rotate`). */
-    secret: string;
-    /** Override for tests to inject a fake clock-aware nonce store. Production uses `createNonceStore()`. */
-    nonceStore?: NonceStore;
-    /** Override for tests to advance time deterministically inside verifyDaemonRequest. */
-    clock?: ClockLike;
-    getSessions: () => unknown[];
-    getSchedules: () => unknown[];
-    resolveDashboardSettings: () => ResolvedDashboardSettingsView;
-    /** Returns `{ chats, bots }`; groups model requires both for missingOnly accuracy. */
-    buildGroupsMatrix: () => Promise<{
-        chats: unknown[];
-        bots: unknown[];
-    }>;
-    settingsApplierDeps: SettingsWriteApplierDeps;
-    groupsActionDeps: GroupsActionDeps;
-    proxyToDaemon: (larkAppId: string, daemonPath: string, init: RequestInit) => Promise<Response>;
-    ownerOf: (sessionId: string) => string | undefined;
-    /** Companion of `ownerOf` — tells "row missing" apart from "legacy row".
-     *  Same rationale as `scheduleExists`. */
-    sessionExists: (sessionId: string) => boolean;
-    scheduleOwnerOf: (id: string) => string | undefined;
-    /** True iff a schedule row with this id exists at all in the aggregator,
-     *  regardless of its `larkAppId` presence. Used by the Route B write gate
-     *  to tell apart "legacy schedule (no owner field)" from "unknown id". */
-    scheduleExists: (id: string) => boolean;
-    /** Override for unit tests; production omits and uses the real federation helper. */
-    settingsOwnerDeps?: SettingsOwnerResolverDeps;
-}
-export interface DispatchContext {
-    bodyRaw: string;
-    body: unknown;
-    url: URL;
-    /**
-     * Authenticated caller's bot `larkAppId` — populated by `handle()` from
-     * `verify.appId` (`daemon-internal-auth.ts:232`). Aggregated read routes
-     * use this id for their default per-bot view; `?scope=global` explicitly
-     * widens `/dashboard` list reads to the Bot Owner's deployment-wide view.
-     * undefined only on the test seam (`dispatchForTest`) where the caller is
-     * trusted to assert their own scope.
-     */
-    callerAppId?: string;
-}
-/**
- * Pure dispatcher: matches `(method, path)` against the typed allowlist.
- * Returns `unknown_endpoint` (404) when no path matches, `method_not_allowed`
- * (405) when a path matches but the method does not, or hands off to the
- * matched handler.
- */
-export declare function dispatchDaemonInternalRequest(method: string, url: URL, bodyRaw: string, deps: DaemonInternalApiDeps, callerAppId?: string): Promise<HandlerResult>;
-export interface DaemonInternalApi {
-    /** Production entry point: verify HMAC, JSON-parse, dispatch, write response. */
-    handle(req: IncomingMessage, res: ServerResponse, url: URL): Promise<boolean>;
-    /** Test seam: bypass HMAC, exercise dispatch shape directly. `callerAppId`
-     *  emulates the authenticated bot id so read-scoping tests can drive the
-     *  per-bot filter without going through HMAC. */
-    dispatchForTest(method: string, url: URL, bodyRaw?: string, callerAppId?: string): Promise<HandlerResult>;
-}
-export declare function createDaemonInternalApi(deps: DaemonInternalApiDeps): DaemonInternalApi;
-//# sourceMappingURL=daemon-internal-api.d.ts.map

package/dist/dashboard/daemon-internal-api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-internal-api.d.ts","sourceRoot":"","sources":["../../src/dashboard/daemon-internal-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,UAAU,EAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAML,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEjE,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,wGAAwG;IACxG,MAAM,EAAE,MAAM,CAAC;IACf,yGAAyG;IACzG,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,uFAAuF;IACvF,KAAK,CAAC,EAAE,SAAS,CAAC;IAGlB,WAAW,EAAE,MAAM,OAAO,EAAE,CAAC;IAC7B,YAAY,EAAE,MAAM,OAAO,EAAE,CAAC;IAC9B,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;IAC9D,sFAAsF;IACtF,iBAAiB,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IAGxE,mBAAmB,EAAE,wBAAwB,CAAC;IAC9C,gBAAgB,EAAE,gBAAgB,CAAC;IAGnC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/F,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACnD;8CAC0C;IAC1C,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAC9C,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACpD;;8EAE0E;IAC1E,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IAGxC,qFAAqF;IACrF,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;CAC/C;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,GAAG,CAAC;IACT;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAocD;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,qBAAqB,EAC3B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC,CAqBxB;AASD,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E;;qDAEiD;IACjD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC3G;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,qBAAqB,GAAG,iBAAiB,CA+CtF"}

package/dist/dashboard/daemon-internal-api.js

@@ -1,476 +0,0 @@
-/**
- * Daemon-internal API — typed Route B server for `/__daemon/*`.
- *
- * Dispatch pipeline:
- *   1) `verifyDaemonRequest` checks HMAC + loopback + ts ±60s + nonce replay.
- *      Reads the body stream EXACTLY ONCE and returns `bodyRaw`.
- *   2) `bodyRaw` is JSON-parsed (empty body → `undefined`); a parse failure
- *      after a valid HMAC returns 400 `bad_json` without re-reading `req`.
- *   3) Dispatch matches `(method, path)` against a typed allowlist
- *      endpoints — there is intentionally NO generic forward, so a daemon
- *      can never use Route B as a path-shifting proxy.
- *
- * Settings-write also enforces the union_id owner gate: the body must
- * carry an `ownerUnionId` (`on_`-prefixed) that resolves to a candidate in
- * the global owner set, or the request returns 403 `owner_only`.
- *
- * The factory exposes both `handle(req,res,url)` (production wiring) and
- * `dispatchForTest(method, url, bodyRaw)` (skips HMAC for unit tests that
- * focus on route shape; full HMAC flow is covered by daemon-internal-auth).
- */
-import { createNonceStore, verifyDaemonRequest, } from './daemon-internal-auth.js';
-import { addBotsToGroup, bindOncall, disbandGroup, leaveGroup, unbindOncall, } from './groups-action-helpers.js';
-import { roleWriteShouldInvalidate } from './groups-matrix-snapshot.js';
-import { applySettingsWrite, } from './settings-write-applier.js';
-import { isAuthorizedForGlobalSettings, } from './settings-owner-resolver.js';
-/** ─── Helpers ──────────────────────────────────────────────────────── */
-async function readUpstream(upstream) {
-    const text = await upstream.text();
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return text;
-    }
-}
-function bodyField(body, name) {
-    if (body && typeof body === 'object' && !Array.isArray(body)) {
-        return body[name];
-    }
-    return undefined;
-}
-/**
- * Generic per-bot scoping helper — restricts aggregator rows to those owned
- * by the authenticated caller's bot.
- *
- * Default list reads are per-bot: a caller authenticated as bot A should not
- * see bot B rows unless the route explicitly opts into `?scope=global`.
- *
- * Rows whose owner getter returns undefined / empty string (legacy
- * persistence shape) are KEPT so they don't disappear from a freshly-
- * upgraded deploy. callerAppId === undefined means the test seam
- * (`dispatchForTest`) is in use; the test is trusted to assert its own
- * scope so we pass everything through.
- *
- * The owner getter argument lets workflows (nested
- * `chatBinding.larkAppId`) reuse the same filter pipeline as sessions /
- * schedules (top-level `larkAppId`).
- */
-function scopeRowsByCaller(rows, callerAppId, getOwnerAppId) {
-    if (!callerAppId)
-        return rows.slice();
-    return rows.filter(r => {
-        const owner = getOwnerAppId(r);
-        // Keep legacy rows (no owner resolvable) so a fresh deploy doesn't lose them.
-        if (typeof owner !== 'string' || owner.length === 0)
-            return true;
-        return owner === callerAppId;
-    });
-}
-/**
- * Thin wrapper around `scopeRowsByCaller` for rows with a top-level
- * `larkAppId` field (sessions / schedules / aggregator-shape). Workflows
- * call `scopeRowsByCaller` directly with their own owner getter.
- */
-function scopeByCaller(rows, callerAppId) {
-    return scopeRowsByCaller(rows, callerAppId, r => r?.larkAppId);
-}
-/**
- * Per-bot scoping for the `groups-matrix` endpoint.
- *
- * The groups matrix returns `{ chats, bots }` where neither container has a
- * top-level `larkAppId`, so the generic `scopeByCaller` / `scopeRowsByCaller`
- * helpers don't fit. Default fail-closed rules:
- *
- *   - bots: filter to ONLY entries whose `larkAppId === callerAppId`.
- *   - chats: keep ONLY chats where some memberBots entry has
- *     `larkAppId === callerAppId AND inChat === true`. A bot that's listed as
- *     a member but `inChat=false` does NOT qualify.
- *   - each retained chat's `memberBots` is trimmed to JUST the caller's
- *     single entry, so other bots' roster never leaks.
- *   - NO legacy fallback: rows / bots without a recognized `larkAppId` are
- *     dropped (fail-closed). Unlike sessions / schedules, the groups matrix
- *     has no historical persistence shape to preserve.
- *
- * `callerAppId === undefined` is the `dispatchForTest` seam — pass through
- * the full unscoped matrix so tests can assert raw aggregator output.
- *
- * The helper does NOT mutate the input matrix: each kept chat is spread into
- * a new object before its `memberBots` is overwritten.
- */
-function scopeGroupsMatrixByCaller(matrix, callerAppId) {
-    if (callerAppId === undefined)
-        return matrix;
-    const filteredBots = matrix.bots.filter(b => typeof b?.larkAppId === 'string' &&
-        b.larkAppId === callerAppId);
-    const filteredChats = [];
-    for (const c of matrix.chats) {
-        const members = c?.memberBots;
-        if (!Array.isArray(members))
-            continue;
-        const ourMember = members.find(m => m?.larkAppId === callerAppId && m?.inChat === true);
-        if (!ourMember)
-            continue;
-        filteredChats.push({ ...c, memberBots: [ourMember] });
-    }
-    return { chats: filteredChats, bots: filteredBots };
-}
-/** ─── Route table ────────────────────────────────────────────────── */
-const ROUTES = [
-    // One-version zero-I/O tombstone for stale Feishu dashboard cards. It is
-    // intentionally ahead of all live routes and never resolves a run owner.
-    {
-        method: 'GET',
-        pathRe: /^\/__daemon\/workflows-runs(?:-snapshot|\/.*)$/,
-        handle: async () => ({
-            status: 410,
-            body: {
-                ok: false,
-                error: 'legacy_workflow_retired',
-                message: 'v2 workflow run APIs are retired; migrate definitions with botmux template migrate-v3 and inspect v3 runs via /api/v3/runs',
-            },
-        }),
-    },
-    {
-        method: 'POST',
-        pathRe: /^\/__daemon\/workflows-runs(?:-snapshot|\/.*)$/,
-        handle: async () => ({
-            status: 410,
-            body: {
-                ok: false,
-                error: 'legacy_workflow_retired',
-                message: 'v2 workflow run APIs are retired; migrate definitions with botmux template migrate-v3 and inspect v3 runs via /api/v3/runs',
-            },
-        }),
-    },
-    // ── READ ──────────────────────────────
-    {
-        method: 'GET',
-        pathRe: /^\/__daemon\/sessions-list$/,
-        handle: async (_m, ctx, deps) => {
-            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
-            const sessions = isGlobal
-                ? deps.getSessions()
-                : scopeByCaller(deps.getSessions(), ctx.callerAppId);
-            return { status: 200, body: { sessions } };
-        },
-    },
-    // Dedicated schedules list endpoint. `?scope=global` widens only the read
-    // row set; HMAC, admin, invoker, and write owner-routing gates are unchanged.
-    {
-        method: 'GET',
-        pathRe: /^\/__daemon\/schedules-list$/,
-        handle: async (_m, ctx, deps) => {
-            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
-            const schedules = isGlobal
-                ? deps.getSchedules()
-                : scopeByCaller(deps.getSchedules(), ctx.callerAppId);
-            return { status: 200, body: { schedules } };
-        },
-    },
-    {
-        method: 'GET',
-        pathRe: /^\/__daemon\/settings-snapshot$/,
-        handle: async (_m, _ctx, deps) => ({ status: 200, body: { settings: deps.resolveDashboardSettings() } }),
-    },
-    {
-        method: 'GET',
-        pathRe: /^\/__daemon\/groups-matrix$/,
-        handle: async (_m, ctx, deps) => {
-            // Default: per-bot owner gate. Filter the matrix so the caller's bot
-            // only sees rows where it's actually a member (`inChat`), and trim
-            // each chat's memberBots to the caller's single entry to avoid leaking
-            // other bots' membership state.
-            //
-            // `?scope=global`: `/dashboard` is a Bot Owner global tool panel, so
-            // return the full matrix. HMAC / owner / invoker gates are unchanged;
-            // only the read row scope widens.
-            const matrix = await deps.buildGroupsMatrix();
-            const scoped = ctx.url.searchParams.get('scope') === 'global'
-                ? matrix
-                : scopeGroupsMatrixByCaller(matrix, ctx.callerAppId);
-            return { status: 200, body: scoped };
-        },
-    },
-    {
-        method: 'GET',
-        pathRe: /^\/__daemon\/overview-snapshot$/,
-        handle: async (_m, ctx, deps) => {
-            // Default: apply the same per-bot scoping as the dedicated list
-            // endpoints when overview bundles aggregator state.
-            //
-            // `?scope=global`: `/dashboard` is a global tool panel. All list
-            // modules except settings widen their read scope together; settings
-            // remains per-calling-bot until it has an explicit global write model.
-            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
-            const groups = await deps.buildGroupsMatrix();
-            return {
-                status: 200,
-                body: {
-                    sessions: isGlobal
-                        ? deps.getSessions()
-                        : scopeByCaller(deps.getSessions(), ctx.callerAppId),
-                    schedules: isGlobal
-                        ? deps.getSchedules()
-                        : scopeByCaller(deps.getSchedules(), ctx.callerAppId),
-                    settings: deps.resolveDashboardSettings(),
-                    groups,
-                },
-            };
-        },
-    },
-    // ── WRITE: settings ───────────────────
-    {
-        method: 'PUT',
-        pathRe: /^\/__daemon\/settings-write$/,
-        handle: async (_m, ctx, deps) => {
-            const ownerUnionId = bodyField(ctx.body, 'ownerUnionId');
-            const allowed = await isAuthorizedForGlobalSettings({ senderUnionId: typeof ownerUnionId === 'string' ? ownerUnionId : undefined }, deps.settingsOwnerDeps);
-            if (!allowed)
-                return { status: 403, body: { ok: false, error: 'owner_only' } };
-            const patch = bodyField(ctx.body, 'patch');
-            const r = await applySettingsWrite(patch, deps.settingsApplierDeps);
-            if (!r.ok)
-                return { status: 400, body: { ok: false, error: r.error } };
-            return { status: 200, body: { ok: true, settings: r.settings } };
-        },
-    },
-    // ── WRITE: sessions × 3 ───────────────
-    {
-        method: 'POST',
-        pathRe: /^\/__daemon\/sessions\/([^/]+)\/(close|resume|locate)$/,
-        handle: async (m, ctx, deps) => {
-            const sessionId = decodeURIComponent(m[1]);
-            const action = m[2];
-            // Three-state routing mirrors schedules:
-            //  - owner !== undefined + caller mismatch → 403 session_owner_mismatch
-            //  - owner !== undefined + caller match (or test seam) → proxy owner
-            //  - owner === undefined + sessionExists + callerAppId set → legacy,
-            //    proxy to caller's bot (same bot that fetched the row via the
-            //    scoped read endpoint).
-            //  - row genuinely missing → 404 unknown_session
-            // Route B fails closed too, not only the IM card layer.
-            const owner = deps.ownerOf(sessionId);
-            if (owner === undefined) {
-                if (!deps.sessionExists(sessionId)) {
-                    return { status: 404, body: { ok: false, error: 'unknown_session' } };
-                }
-                if (ctx.callerAppId === undefined) {
-                    // test seam preserves the historical 404 — production callers
-                    // always have an HMAC-resolved appId.
-                    return { status: 404, body: { ok: false, error: 'unknown_session' } };
-                }
-                const upstream = await deps.proxyToDaemon(ctx.callerAppId, `/api/sessions/${encodeURIComponent(sessionId)}/${action}`, {
-                    method: 'POST',
-                    headers: { 'content-type': 'application/json' },
-                    body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
-                });
-                return { status: upstream.status, body: await readUpstream(upstream) };
-            }
-            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
-            if (!isGlobal && ctx.callerAppId !== undefined && owner !== ctx.callerAppId) {
-                return { status: 403, body: { ok: false, error: 'session_owner_mismatch' } };
-            }
-            const upstream = await deps.proxyToDaemon(owner, `/api/sessions/${encodeURIComponent(sessionId)}/${action}`, {
-                method: 'POST',
-                headers: { 'content-type': 'application/json' },
-                body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
-            });
-            return { status: upstream.status, body: await readUpstream(upstream) };
-        },
-    },
-    // ── WRITE: groups × 5 ─────────────────
-    {
-        method: 'POST',
-        pathRe: /^\/__daemon\/groups\/([^/]+)\/leave$/,
-        handle: async (m, ctx, deps) => leaveGroup(decodeURIComponent(m[1]), ctx.body, deps.groupsActionDeps),
-    },
-    {
-        method: 'POST',
-        pathRe: /^\/__daemon\/groups\/([^/]+)\/disband$/,
-        handle: async (m, ctx, deps) => disbandGroup(decodeURIComponent(m[1]), ctx.body, deps.groupsActionDeps),
-    },
-    {
-        method: 'POST',
-        pathRe: /^\/__daemon\/groups\/([^/]+)\/add-bots$/,
-        handle: async (m, ctx, deps) => addBotsToGroup(decodeURIComponent(m[1]), ctx.bodyRaw, deps.groupsActionDeps),
-    },
-    {
-        method: 'POST',
-        pathRe: /^\/__daemon\/groups\/([^/]+)\/oncall\/([^/]+)\/bind$/,
-        handle: async (m, ctx, deps) => bindOncall(decodeURIComponent(m[1]), decodeURIComponent(m[2]), ctx.bodyRaw, deps.groupsActionDeps),
-    },
-    {
-        method: 'POST',
-        pathRe: /^\/__daemon\/groups\/([^/]+)\/oncall\/([^/]+)\/unbind$/,
-        handle: async (m, _ctx, deps) => unbindOncall(decodeURIComponent(m[1]), decodeURIComponent(m[2]), deps.groupsActionDeps),
-    },
-    {
-        method: 'GET',
-        pathRe: /^\/__daemon\/groups\/([^/]+)\/roles\/([^/]+)$/,
-        handle: async (m, _ctx, deps) => {
-            const chatId = decodeURIComponent(m[1]);
-            const appId = decodeURIComponent(m[2]);
-            const upstream = await deps.proxyToDaemon(appId, `/api/roles/${encodeURIComponent(chatId)}`, { method: 'GET' });
-            return { status: upstream.status, body: await readUpstream(upstream) };
-        },
-    },
-    {
-        method: 'PUT',
-        pathRe: /^\/__daemon\/groups\/([^/]+)\/roles\/([^/]+)$/,
-        handle: async (m, ctx, deps) => {
-            const chatId = decodeURIComponent(m[1]);
-            const appId = decodeURIComponent(m[2]);
-            const upstream = await deps.proxyToDaemon(appId, `/api/roles/${encodeURIComponent(chatId)}`, {
-                method: 'PUT',
-                headers: { 'content-type': 'application/json' },
-                body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
-            });
-            const body = await readUpstream(upstream);
-            // 写角色翻转 hasRole → 失效群矩阵快照（对齐同文件的 oncall bind/unbind）。
-            if (roleWriteShouldInvalidate(upstream.ok, body))
-                deps.groupsActionDeps.invalidateGroups?.();
-            return { status: upstream.status, body };
-        },
-    },
-    {
-        method: 'DELETE',
-        pathRe: /^\/__daemon\/groups\/([^/]+)\/roles\/([^/]+)$/,
-        handle: async (m, _ctx, deps) => {
-            const chatId = decodeURIComponent(m[1]);
-            const appId = decodeURIComponent(m[2]);
-            const upstream = await deps.proxyToDaemon(appId, `/api/roles/${encodeURIComponent(chatId)}`, { method: 'DELETE' });
-            const body = await readUpstream(upstream);
-            // 删角色把 hasRole 翻回 false → 同样失效快照。
-            if (roleWriteShouldInvalidate(upstream.ok, body))
-                deps.groupsActionDeps.invalidateGroups?.();
-            return { status: upstream.status, body };
-        },
-    },
-    // ── WRITE: schedules × 4 ──────────────
-    {
-        method: 'POST',
-        pathRe: /^\/__daemon\/schedules\/([^/]+)\/(run|pause|resume|delivery)$/,
-        handle: async (m, ctx, deps) => {
-            const id = decodeURIComponent(m[1]);
-            const action = m[2];
-            // Three-state routing:
-            //  - row missing entirely → 404 unknown_schedule
-            //  - row present with larkAppId → cross-bot gate (403 on mismatch)
-            //  - row present WITHOUT larkAppId (legacy, e.g. pre-v0.4 persistence)
-            //    → proxy to the caller's own bot. legacy rows are kept visible
-            //    in the read path (`scopeByCaller` short-circuits when caller is
-            //    undefined OR when the row has no owner) AND continue to be
-            //    executed by `scheduler.belongsToOwner` on the primary daemon.
-            //    Without this branch, the user would see the row + actionable
-            //    buttons but every POST would 404. With this branch, the caller's
-            //    bot proxies the action just like an explicit-owner row would.
-            const owner = deps.scheduleOwnerOf(id);
-            if (owner === undefined) {
-                if (!deps.scheduleExists(id)) {
-                    return { status: 404, body: { ok: false, error: 'unknown_schedule' } };
-                }
-                // Legacy row. Production: route to the authenticated caller's bot.
-                // Test seam (callerAppId undefined): preserve historical behaviour
-                // (404) so existing dispatchForTest tests stay deterministic.
-                if (ctx.callerAppId === undefined) {
-                    return { status: 404, body: { ok: false, error: 'unknown_schedule' } };
-                }
-                const upstream = await deps.proxyToDaemon(ctx.callerAppId, `/api/schedules/${encodeURIComponent(id)}/${action}`, {
-                    method: 'POST',
-                    headers: { 'content-type': 'application/json' },
-                    body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
-                });
-                return { status: upstream.status, body: await readUpstream(upstream) };
-            }
-            // Owned row. Cross-bot guard: refuse when the caller is not the
-            // owning bot. test seam keeps the historical pass-through.
-            //
-            // In global dashboard scope, the card can show rows from any bot. We
-            // still proxy to the row's true owner daemon, so global only changes
-            // "owner exists + caller mismatch" from 403 to "proxy owner".
-            const isGlobal = ctx.url.searchParams.get('scope') === 'global';
-            if (!isGlobal && ctx.callerAppId !== undefined && owner !== ctx.callerAppId) {
-                return { status: 403, body: { ok: false, error: 'schedule_owner_mismatch' } };
-            }
-            const upstream = await deps.proxyToDaemon(owner, `/api/schedules/${encodeURIComponent(id)}/${action}`, {
-                method: 'POST',
-                headers: { 'content-type': 'application/json' },
-                body: ctx.bodyRaw.length > 0 ? ctx.bodyRaw : '{}',
-            });
-            return { status: upstream.status, body: await readUpstream(upstream) };
-        },
-    },
-];
-Object.freeze(ROUTES);
-for (const r of ROUTES)
-    Object.freeze(r);
-/**
- * Pure dispatcher: matches `(method, path)` against the typed allowlist.
- * Returns `unknown_endpoint` (404) when no path matches, `method_not_allowed`
- * (405) when a path matches but the method does not, or hands off to the
- * matched handler.
- */
-export async function dispatchDaemonInternalRequest(method, url, bodyRaw, deps, callerAppId) {
-    let body = undefined;
-    if (bodyRaw.length > 0) {
-        try {
-            body = JSON.parse(bodyRaw);
-        }
-        catch {
-            return { status: 400, body: { ok: false, error: 'bad_json' } };
-        }
-    }
-    const ctx = { bodyRaw, body, url, callerAppId };
-    let pathMatchedButMethodWrong = false;
-    for (const route of ROUTES) {
-        const m = url.pathname.match(route.pathRe);
-        if (!m)
-            continue;
-        if (route.method !== method) {
-            pathMatchedButMethodWrong = true;
-            continue;
-        }
-        return route.handle(m, ctx, deps);
-    }
-    if (pathMatchedButMethodWrong) {
-        return { status: 405, body: { ok: false, error: 'method_not_allowed' } };
-    }
-    return { status: 404, body: { ok: false, error: 'unknown_endpoint' } };
-}
-/** Render a HandlerResult onto a ServerResponse. */
-function writeHandlerResult(res, result) {
-    const headers = { 'content-type': 'application/json', ...(result.headers ?? {}) };
-    res.writeHead(result.status, headers);
-    res.end(typeof result.body === 'string' ? result.body : JSON.stringify(result.body));
-}
-export function createDaemonInternalApi(deps) {
-    const nonceStore = deps.nonceStore ?? createNonceStore();
-    async function handle(req, res, url) {
-        // ⚠️ Source-of-truth for both the `/__daemon/` gate and dispatch routing
-        // MUST be `req.url` (the exact bytes the HMAC was computed over). The
-        // caller's `url` is only trusted for its `origin` so URL parsing succeeds.
-        // Decoupling these allows a signature minted for path X to drive
-        // dispatch to path Y if a caller passes a mismatched `url`.
-        const reqPath = req.url ?? '/';
-        const requestUrl = new URL(reqPath, url.origin);
-        if (!requestUrl.pathname.startsWith('/__daemon/'))
-            return false;
-        const verify = await verifyDaemonRequest(req, deps.secret, nonceStore, { clock: deps.clock });
-        if (!verify.ok) {
-            writeHandlerResult(res, {
-                status: verify.httpStatus,
-                body: { ok: false, error: verify.reason },
-            });
-            return true;
-        }
-        const result = await dispatchDaemonInternalRequest(req.method ?? 'GET', requestUrl, verify.bodyRaw, deps, verify.appId);
-        writeHandlerResult(res, result);
-        return true;
-    }
-    async function dispatchForTest(method, url, bodyRaw = '', callerAppId) {
-        return dispatchDaemonInternalRequest(method, url, bodyRaw, deps, callerAppId);
-    }
-    return { handle, dispatchForTest };
-}
-//# sourceMappingURL=daemon-internal-api.js.map

package/dist/dashboard/daemon-internal-api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-internal-api.js","sourceRoot":"","sources":["../../src/dashboard/daemon-internal-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,cAAc,EACd,UAAU,EACV,YAAY,EACZ,UAAU,EACV,YAAY,GAGb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACL,kBAAkB,GAGnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,6BAA6B,GAE9B,MAAM,8BAA8B,CAAC;AAoEtC,2EAA2E;AAE3E,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACzD,CAAC;AAED,SAAS,SAAS,CAAc,IAAa,EAAE,IAAY;IACzD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAQ,IAAgC,CAAC,IAAI,CAAkB,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,iBAAiB,CACxB,IAAsB,EACtB,WAA+B,EAC/B,aAA6C;IAE7C,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACrB,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC/B,8EAA8E;QAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,OAAO,KAAK,KAAK,WAAW,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,IAA4B,EAC5B,WAA+B;IAE/B,OAAO,iBAAiB,CACtB,IAAI,EACJ,WAAW,EACX,CAAC,CAAC,EAAE,CAAE,CAA6B,EAAE,SAA+B,CACrE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAS,yBAAyB,CAChC,MAA6C,EAC7C,WAA+B;IAE/B,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC1C,OAAQ,CAA6B,EAAE,SAAS,KAAK,QAAQ;QAC5D,CAA6B,CAAC,SAAS,KAAK,WAAW,CACzD,CAAC;IACF,MAAM,aAAa,GAAc,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAI,CAA8B,EAAE,UAEpC,CAAC;QACd,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC,EAAE,SAAS,KAAK,WAAW,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CACnD,CAAC;QACF,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,aAAa,CAAC,IAAI,CAAC,EAAE,GAAI,CAAY,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AACtD,CAAC;AAED,yEAAyE;AAEzE,MAAM,MAAM,GAAe;IACzB,yEAAyE;IACzE,yEAAyE;IACzE;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,gDAAgD;QACxD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACnB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,yBAAyB;gBAChC,OAAO,EAAE,4HAA4H;aACtI;SACF,CAAC;KACH;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,gDAAgD;QACxD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACnB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,yBAAyB;gBAChC,OAAO,EAAE,4HAA4H;aACtI;SACF,CAAC;KACH;IACD,yCAAyC;IACzC;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,6BAA6B;QACrC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,MAAM,QAAQ,GAAG,QAAQ;gBACvB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;gBACpB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC7C,CAAC;KACF;IACD,0EAA0E;IAC1E,8EAA8E;IAC9E;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,8BAA8B;QACtC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,MAAM,SAAS,GAAG,QAAQ;gBACxB,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE;gBACrB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACxD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;QAC9C,CAAC;KACF;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,iCAAiC;QACzC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,wBAAwB,EAAE,EAAE,EAAE,CAAC;KACzG;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,6BAA6B;QACrC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,qEAAqE;YACrE,mEAAmE;YACnE,uEAAuE;YACvE,gCAAgC;YAChC,EAAE;YACF,qEAAqE;YACrE,sEAAsE;YACtE,kCAAkC;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;gBAC3D,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;KACF;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,iCAAiC;QACzC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,gEAAgE;YAChE,oDAAoD;YACpD,EAAE;YACF,iEAAiE;YACjE,oEAAoE;YACpE,uEAAuE;YACvE,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC9C,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,QAAQ,EAAE,QAAQ;wBAChB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;wBACpB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC;oBACtD,SAAS,EAAE,QAAQ;wBACjB,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE;wBACrB,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC;oBACvD,QAAQ,EAAE,IAAI,CAAC,wBAAwB,EAAE;oBACzC,MAAM;iBACP;aACF,CAAC;QACJ,CAAC;KACF;IAED,yCAAyC;IACzC;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,8BAA8B;QACtC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,YAAY,GAAG,SAAS,CAAU,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,6BAA6B,CACjD,EAAE,aAAa,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,EAC9E,IAAI,CAAC,iBAAiB,CACvB,CAAC;YACF,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;YAC/E,MAAM,KAAK,GAAG,SAAS,CAAU,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACvE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnE,CAAC;KACF;IAED,yCAAyC;IACzC;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,wDAAwD;QAChE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEpB,yCAAyC;YACzC,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,4BAA4B;YAC5B,iDAAiD;YACjD,wDAAwD;YACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC;gBACxE,CAAC;gBACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBAClC,8DAA8D;oBAC9D,sCAAsC;oBACtC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC;gBACxE,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,GAAG,CAAC,WAAW,EACf,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,IAAI,MAAM,EAAE,EAC1D;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;iBAClD,CACF,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC;YAC/E,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,IAAI,MAAM,EAAE,EAC1D;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aAClD,CACF,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;IAED,yCAAyC;IACzC;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,sCAAsC;QAC9C,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC7B,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC;KACxE;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,wCAAwC;QAChD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC7B,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC;KAC1E;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,yCAAyC;QACjD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC7B,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC;KAC/E;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,sDAAsD;QAC9D,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC7B,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC;KACrG;IACD;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,wDAAwD;QAChE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAC9B,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC;KAC1F;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,+CAA+C;QACvD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC1C,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;IACD;QACE,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,+CAA+C;QACvD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC1C;gBACE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aAClD,CACF,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,sDAAsD;YACtD,IAAI,yBAAyB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;gBAAE,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC7F,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,+CAA+C;QACvD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC1C,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,kCAAkC;YAClC,IAAI,yBAAyB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;gBAAE,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC7F,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;KACF;IAED,yCAAyC;IACzC;QACE,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,+DAA+D;QACvE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC7B,MAAM,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEpB,uBAAuB;YACvB,iDAAiD;YACjD,mEAAmE;YACnE,uEAAuE;YACvE,mEAAmE;YACnE,qEAAqE;YACrE,gEAAgE;YAChE,mEAAmE;YACnE,kEAAkE;YAClE,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;gBACzE,CAAC;gBACD,mEAAmE;gBACnE,mEAAmE;gBACnE,8DAA8D;gBAC9D,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;gBACzE,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,GAAG,CAAC,WAAW,EACf,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,EACpD;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;iBAClD,CACF,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,CAAC;YACD,gEAAgE;YAChE,2DAA2D;YAC3D,EAAE;YACF,qEAAqE;YACrE,qEAAqE;YACrE,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAChE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,CAAC;YAChF,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,KAAK,EACL,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,EACpD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aAClD,CACF,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,CAAC;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACtB,KAAK,MAAM,CAAC,IAAI,MAAM;IAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAc,EACd,GAAQ,EACR,OAAe,EACf,IAA2B,EAC3B,WAAoB;IAEpB,IAAI,IAAI,GAAY,SAAS,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACnC,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC;QAAC,CAAC;IAC3E,CAAC;IAED,MAAM,GAAG,GAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IAEjE,IAAI,yBAAyB,GAAG,KAAK,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAAC,yBAAyB,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,yBAAyB,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,oDAAoD;AACpD,SAAS,kBAAkB,CAAC,GAAmB,EAAE,MAAqB;IACpE,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAClF,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACvF,CAAC;AAWD,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,EAAE,CAAC;IAEzD,KAAK,UAAU,MAAM,CACnB,GAAoB,EACpB,GAAmB,EACnB,GAAQ;QAER,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,iEAAiE;QACjE,4DAA4D;QAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,kBAAkB,CAAC,GAAG,EAAE;gBACtB,MAAM,EAAE,MAAM,CAAC,UAAU;gBACzB,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;aAC1C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,GAAG,CAAC,MAAM,IAAI,KAAK,EACnB,UAAU,EACV,MAAM,CAAC,OAAO,EACd,IAAI,EACJ,MAAM,CAAC,KAAK,CACb,CAAC;QACF,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,GAAQ,EACR,UAAkB,EAAE,EACpB,WAAoB;QAEpB,OAAO,6BAA6B,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACrC,CAAC"}