botmux 3.10.0 → 3.23.1

package/dist/dashboard/federation-api.js

@@ -1,580 +0,0 @@
-import { config } from '../config.js';
-import { jsonRes } from './http.js';
-import { consumeInvite } from '../services/invite-store.js';
-import { getTeam } from '../services/team-store.js';
-import { registerDeployment, syncDeployment, getDeploymentByToken, removeDeploymentByToken, } from '../services/federation-store.js';
-import { buildFederatedRoster } from '../services/federation-roster.js';
-import { listTeamGroups } from '../services/team-groups-store.js';
-import { listTeamReports, readTeamBoard, recordTeamSessions, sanitizeReportedSessions, setTeamBoardEntry, } from '../services/team-board-store.js';
-import { findMembershipByDelegationToken } from '../services/federation-membership-store.js';
-import { buildTeamRoster } from '../services/team-roster.js';
-import { getDeploymentIdentity } from '../services/deployment-identity.js';
-import { orchestrateFederatedGroup, } from './federated-group-core.js';
-import { addUsersToChatByUnionId } from '../services/groups-store.js';
-import { loadBotConfigs, registerBot, getBot } from '../bot-registry.js';
-/** Ensure a Lark client exists for larkAppId in THIS (dashboard) process, which
- *  has no bot registry — register on demand from bots.json (carries the secret).
- *  Used by delegate-add-owner so it can add a user via a specific local bot. */
-function ensureLocalClient(larkAppId) {
-    try {
-        getBot(larkAppId);
-        return true;
-    }
-    catch { /* not registered yet */ }
-    try {
-        const cfg = loadBotConfigs().find(c => c.larkAppId === larkAppId);
-        if (!cfg)
-            return false;
-        registerBot(cfg);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-const MAX_BOTS = 200;
-const MAX_OWNERS = 100;
-/** Short-TTL idempotency cache for delegate-group: a hub may retry the SAME
- *  request (timeout/lost response) — replaying must return the first result, not
- *  create a duplicate group. Keyed by delegationToken+requestId. In-memory is
- *  enough (single dashboard process; the dedup window is seconds–minutes). */
-const DELEGATE_IDEM_TTL_MS = 10 * 60 * 1000;
-const delegateIdem = new Map();
-function idemGet(key) {
-    const e = delegateIdem.get(key);
-    if (!e)
-        return null;
-    if (Date.now() > e.expiresAt) {
-        delegateIdem.delete(key);
-        return null;
-    }
-    return e.result;
-}
-function idemSet(key, result) {
-    const now = Date.now();
-    for (const [k, v] of delegateIdem)
-        if (v.expiresAt <= now)
-            delegateIdem.delete(k); // opportunistic prune
-    delegateIdem.set(key, { expiresAt: now + DELEGATE_IDEM_TTL_MS, result });
-}
-/** Federation bearer token: prefer the header (keeps the long-lived syncToken out
- *  of URLs / access logs); fall back to ?syncToken= for short-term hub compat. */
-function federationToken(req, url) {
-    const auth = req.headers['authorization'];
-    if (typeof auth === 'string' && auth.startsWith('Bearer '))
-        return auth.slice(7).trim();
-    const x = req.headers['x-botmux-federation-token'];
-    if (typeof x === 'string' && x)
-        return x.trim();
-    return (url.searchParams.get('syncToken') ?? '').trim();
-}
-/** Header-only bearer for pre-auth WRITE endpoints (group create): the token must
- *  never come from URL/body — keep it out of access logs and off replayable surfaces.
- *  Unlike federationToken() there is NO ?syncToken= / body fallback here. */
-function bearerOnly(req) {
-    const auth = req.headers['authorization'];
-    return (typeof auth === 'string' && auth.startsWith('Bearer ')) ? auth.slice(7).trim() : '';
-}
-async function readBody(req, maxBytes = 256 * 1024) {
-    const chunks = [];
-    let total = 0;
-    for await (const c of req) {
-        const b = c;
-        total += b.length;
-        if (total > maxBytes)
-            throw new Error('too_large');
-        chunks.push(b);
-    }
-    if (chunks.length === 0)
-        return {};
-    return JSON.parse(Buffer.concat(chunks).toString('utf-8'));
-}
-/** Defensive: only keep the fields we expect, cap the count, coerce types. */
-function sanitizeBots(input) {
-    if (!Array.isArray(input))
-        return [];
-    const out = [];
-    for (const raw of input.slice(0, MAX_BOTS)) {
-        if (!raw || typeof raw !== 'object')
-            continue;
-        const r = raw;
-        if (typeof r.larkAppId !== 'string' || !r.larkAppId)
-            continue;
-        out.push({
-            larkAppId: r.larkAppId,
-            botName: typeof r.botName === 'string' ? r.botName : r.larkAppId,
-            cliId: typeof r.cliId === 'string' ? r.cliId : '',
-            botUnionId: typeof r.botUnionId === 'string' ? r.botUnionId : undefined,
-            capability: typeof r.capability === 'string' ? r.capability : null,
-            hasTeamRole: !!r.hasTeamRole,
-            // Preserve the remote's transport capability. ABSENT (pre-capability spoke)
-            // stays undefined → consumers treat undefined as legacy normal (true).
-            // Only an explicit boolean is propagated, so a false (apiOnly) survives.
-            larkTransportEnabled: typeof r.larkTransportEnabled === 'boolean' ? r.larkTransportEnabled : undefined,
-            ownerUnionId: typeof r.ownerUnionId === 'string' ? r.ownerUnionId : undefined,
-            ownerName: typeof r.ownerName === 'string' ? r.ownerName : undefined,
-        });
-    }
-    return out;
-}
-export async function handleFederationApi(req, res, url, deps = {}) {
-    const path = url.pathname;
-    if (!path.startsWith('/api/federation/'))
-        return false;
-    const dataDir = deps.dataDir ?? config.session.dataDir;
-    const method = req.method ?? 'GET';
-    // Spoke registers via an invite → issued a syncToken bound to the team.
-    if (path === '/api/federation/join' && method === 'POST') {
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const inviteCode = String(body?.inviteCode ?? '').trim();
-        const dep = body?.deployment;
-        if (!inviteCode) {
-            jsonRes(res, 400, { ok: false, error: 'code_required' });
-            return true;
-        }
-        if (!dep || typeof dep.deploymentId !== 'string' || !dep.deploymentId) {
-            jsonRes(res, 400, { ok: false, error: 'deployment_required' });
-            return true;
-        }
-        // Self-join is meaningless (a deployment federating with itself) — reject
-        // clearly before consuming the invite, so the spoke can surface it.
-        if (dep.deploymentId === getDeploymentIdentity(dataDir).deploymentId) {
-            jsonRes(res, 400, { ok: false, error: 'cannot_join_self' });
-            return true;
-        }
-        const inv = consumeInvite(dataDir, inviteCode);
-        if (!inv.ok) {
-            jsonRes(res, 403, { ok: false, error: `invite_${inv.reason}` });
-            return true;
-        }
-        const team = getTeam(dataDir, inv.teamId);
-        if (!team) {
-            jsonRes(res, 403, { ok: false, error: 'invite_team_deleted' });
-            return true;
-        }
-        const reg = registerDeployment(dataDir, inv.teamId, {
-            deploymentId: dep.deploymentId,
-            name: typeof dep.name === 'string' && dep.name ? dep.name : dep.deploymentId,
-            bots: sanitizeBots(dep.bots),
-            ownerUnionId: typeof dep.ownerUnionId === 'string' ? dep.ownerUnionId : undefined,
-            ownerName: typeof dep.ownerName === 'string' ? dep.ownerName : undefined,
-            callbackUrl: typeof dep.callbackUrl === 'string' && /^https?:\/\//i.test(dep.callbackUrl) ? dep.callbackUrl.replace(/\/+$/, '') : undefined,
-            delegationToken: typeof dep.delegationToken === 'string' ? dep.delegationToken : undefined,
-        });
-        // deploymentId is public (shows in roster) — never hand back an existing
-        // deployment's long-lived token. A duplicate must re-bind via an explicit
-        // reset proving the old token (future), not by re-joining with an invite.
-        if (!reg.created) {
-            jsonRes(res, 409, { ok: false, error: 'deployment_already_joined' });
-            return true;
-        }
-        jsonRes(res, 200, { ok: true, teamId: inv.teamId, teamName: team.name, syncToken: reg.syncToken });
-        return true;
-    }
-    // Spoke-initiated leave/revoke: drop this deployment from its team (authed by
-    // its own syncToken). Idempotent — unknown token is treated as already gone.
-    if (path === '/api/federation/leave' && method === 'POST') {
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const syncToken = String(body?.syncToken ?? '').trim() || federationToken(req, url);
-        if (!syncToken) {
-            jsonRes(res, 401, { ok: false, error: 'token_required' });
-            return true;
-        }
-        removeDeploymentByToken(dataDir, syncToken);
-        jsonRes(res, 200, { ok: true });
-        return true;
-    }
-    // Spoke pushes its current bots + heartbeat.
-    if (path === '/api/federation/sync' && method === 'POST') {
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const syncToken = String(body?.syncToken ?? '').trim();
-        if (!syncToken) {
-            jsonRes(res, 401, { ok: false, error: 'token_required' });
-            return true;
-        }
-        const ok = syncDeployment(dataDir, syncToken, sanitizeBots(body?.bots), {
-            ownerUnionId: typeof body?.ownerUnionId === 'string' ? body.ownerUnionId : undefined,
-            ownerName: typeof body?.ownerName === 'string' ? body.ownerName : undefined,
-            name: typeof body?.name === 'string' ? body.name : undefined,
-        });
-        if (!ok) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        // 顺带下发该团队的协作群清单——spoke 据此筛出要上报给团队看板的会话。
-        const synced = getDeploymentByToken(dataDir, syncToken);
-        jsonRes(res, 200, {
-            ok: true,
-            groupChatIds: synced ? listTeamGroups(dataDir, synced.teamId).map(b => b.chatId) : [],
-        });
-        return true;
-    }
-    // ── 团队看板（既定架构：编排存 host，会话源数据各部署自持）────────────────
-    // 成员上报会话裁剪行：白名单清洗后按 deploymentId 覆盖式落盘。
-    if (path === '/api/federation/team-sessions' && method === 'POST') {
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const found = getDeploymentByToken(dataDir, bearerOnly(req));
-        if (!found) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        const sessions = sanitizeReportedSessions(body?.sessions);
-        recordTeamSessions(dataDir, found.teamId, found.deployment.deploymentId, found.deployment.name, sessions);
-        jsonRes(res, 200, { ok: true, accepted: sessions.length });
-        return true;
-    }
-    // 成员拉取团队看板：共享编排 + 各部署最近一次上报（含调用方自己的，
-    // 前端按 deploymentId 去掉自己那份，本地数据走实时 store）。
-    if (path === '/api/federation/team-board' && method === 'GET') {
-        const found = getDeploymentByToken(dataDir, federationToken(req, url));
-        if (!found) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        jsonRes(res, 200, {
-            ok: true,
-            teamId: found.teamId,
-            deploymentId: found.deployment.deploymentId,
-            board: readTeamBoard(dataDir, found.teamId),
-            reports: listTeamReports(dataDir, found.teamId),
-            groupChatIds: listTeamGroups(dataDir, found.teamId).map(b => b.chatId),
-        });
-        return true;
-    }
-    // 成员拖拽团队看板卡片：编排是全团队共享的一份，谁拖都写 host 这里。
-    if (path === '/api/federation/team-board-move' && method === 'POST') {
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const found = getDeploymentByToken(dataDir, bearerOnly(req));
-        if (!found) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        const entry = setTeamBoardEntry(dataDir, found.teamId, String(body?.sessionId ?? ''), body?.column, body?.position);
-        if (!entry) {
-            jsonRes(res, 400, { ok: false, error: 'bad_request' });
-            return true;
-        }
-        jsonRes(res, 200, { ok: true, entry });
-        return true;
-    }
-    // Spoke pulls the aggregated cross-deployment roster for its team. Hub's own
-    // local bots come from the live registry (liveBots) so an empty bots-info.json
-    // doesn't hide them from the roster spokes see.
-    if (path === '/api/federation/roster' && method === 'GET') {
-        const found = getDeploymentByToken(dataDir, federationToken(req, url));
-        if (!found) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        jsonRes(res, 200, { ok: true, ...buildFederatedRoster(dataDir, found.teamId, undefined, undefined, deps.liveBots?.()) });
-        return true;
-    }
-    // Spoke initiates 拉群 on the team it joined; the HUB orchestrates (local
-    // creator or delegate). Authed by the spoke's syncToken (team-internal trust).
-    // operator = the calling spoke's owner, DERIVED FROM THE TOKEN (never the body).
-    if (path === '/api/federation/group' && method === 'POST') {
-        if (!deps.createTeamGroup) {
-            jsonRes(res, 501, { ok: false, error: 'group_create_unavailable' });
-            return true;
-        }
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const token = bearerOnly(req); // header-only: a write endpoint must not take the token from URL/body
-        const found = getDeploymentByToken(dataDir, token);
-        if (!found) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        const requestId = String(body?.requestId ?? '').trim();
-        if (!requestId) {
-            jsonRes(res, 400, { ok: false, error: 'request_id_required' });
-            return true;
-        }
-        const larkAppIds = Array.isArray(body?.larkAppIds) ? body.larkAppIds.filter((x) => typeof x === 'string') : [];
-        const name = String(body?.name ?? '').trim() || '协作群';
-        // Idempotency: replay of the same {syncToken, requestId} returns the FIRST
-        // terminal result verbatim — including failures (delegation_timeout /
-        // group_create_proxy_failed) which may already have side-effected. A genuine
-        // retry must use a fresh requestId; replaying must never re-orchestrate.
-        const idemKey = `group:${token}:${requestId}`;
-        const cached = idemGet(idemKey);
-        if (cached) {
-            jsonRes(res, cached.status, cached.body);
-            return true;
-        }
-        const out = await orchestrateFederatedGroup(dataDir, { name, larkAppIds, operatorUnionId: found.deployment.ownerUnionId, requestId, teamId: found.teamId }, {
-            createTeamGroup: deps.createTeamGroup,
-            transferTeamGroupOwner: deps.transferTeamGroupOwner,
-            fetcher: deps.fetcher ?? fetch,
-            live: deps.liveBots?.(),
-        });
-        idemSet(idemKey, { status: out.status, body: out.body });
-        jsonRes(res, out.status, out.body);
-        return true;
-    }
-    // Hub delegates 拉群 to THIS spoke (hub→spoke): the hub had no local online
-    // creator, so it asks the deployment that owns a selected bot to create the
-    // group with ITS own online bot. Authed by the delegationToken THIS spoke
-    // issued to that hub at join (team-internal trust).
-    if (path === '/api/federation/delegate-group' && method === 'POST') {
-        if (!deps.createTeamGroup) {
-            jsonRes(res, 501, { ok: false, error: 'group_create_unavailable' });
-            return true;
-        }
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const token = bearerOnly(req); // header-only: same pre-auth write semantics as /group (never URL/body)
-        if (!findMembershipByDelegationToken(dataDir, token)) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        const requestId = String(body?.requestId ?? '').trim();
-        if (!requestId) {
-            jsonRes(res, 400, { ok: false, error: 'request_id_required' });
-            return true;
-        }
-        // Idempotency: replay of {token, requestId} returns the FIRST terminal result
-        // verbatim — including failures (createTeamGroup may have side-effected). A
-        // genuine retry must use a fresh requestId; replaying never re-creates.
-        const idemKey = `delegate:${token}:${requestId}`;
-        const cached = idemGet(idemKey);
-        if (cached) {
-            jsonRes(res, cached.status, cached.body);
-            return true;
-        }
-        // Dedup + cap inputs (pre-auth command endpoint — keep blast radius small).
-        const larkAppIds = Array.from(new Set((Array.isArray(body?.larkAppIds) ? body.larkAppIds : []).filter((x) => typeof x === 'string')));
-        const ownerUnionIds = Array.from(new Set((Array.isArray(body?.ownerUnionIds) ? body.ownerUnionIds : []).filter((x) => typeof x === 'string')));
-        const transferOwnerUnionId = typeof body?.transferOwnerUnionId === 'string'
-            ? body.transferOwnerUnionId.trim()
-            : '';
-        const name = (String(body?.name ?? '').trim()) || '协作群';
-        if (larkAppIds.length === 0) {
-            jsonRes(res, 400, { ok: false, error: 'no_bots_selected' });
-            return true;
-        }
-        if (larkAppIds.length > MAX_BOTS || ownerUnionIds.length > MAX_OWNERS) {
-            jsonRes(res, 400, { ok: false, error: 'too_many' });
-            return true;
-        }
-        if (body?.transferOwnerUnionId !== undefined
-            && (!transferOwnerUnionId.startsWith('on_') || !ownerUnionIds.includes(transferOwnerUnionId))) {
-            jsonRes(res, 400, { ok: false, error: 'invalid_transfer_owner_union_id' });
-            return true;
-        }
-        // Guardrail: the delegation must involve at least one of OUR local bots
-        // (otherwise it's unrelated to this deployment — refuse to act as creator).
-        const localIds = new Set(buildTeamRoster(dataDir, undefined, undefined, deps.liveBots?.()).bots.map(b => b.larkAppId));
-        if (!larkAppIds.some(id => localIds.has(id))) {
-            jsonRes(res, 400, { ok: false, error: 'no_local_bot' });
-            return true;
-        }
-        const r = await deps.createTeamGroup({
-            name,
-            larkAppIds,
-            ownerUnionIds,
-            transferOwnerUnionId: transferOwnerUnionId || undefined,
-        });
-        if (r.ok
-            && r.chatId
-            && r.creator
-            && transferOwnerUnionId
-            && r.invalidOwnerUnionIds?.includes(transferOwnerUnionId)) {
-            // Mint a short-lived capability bound to THIS authenticated delegate
-            // request. The hub can trigger it only after the owner's deployment has
-            // successfully added the operator; it cannot substitute chat/creator/id.
-            idemSet(`delegate-transfer-pending:${token}:${requestId}`, {
-                creatorLarkAppId: r.creator,
-                chatId: r.chatId,
-                transferOwnerUnionId,
-            });
-        }
-        const result = { status: r.ok ? 200 : 502, body: r };
-        idemSet(idemKey, result); // cache terminal result (success AND failure)
-        jsonRes(res, result.status, result.body);
-        return true;
-    }
-    // Hub finishes a deferred transfer on THIS creator deployment after the
-    // target's own deployment has successfully added them to the chat. The only
-    // client input is requestId; target/chat/creator come from the authenticated
-    // delegate-group result cached above, closing the confused-deputy gap.
-    if (path === '/api/federation/delegate-transfer-owner' && method === 'POST') {
-        if (!deps.transferTeamGroupOwner) {
-            jsonRes(res, 501, { ok: false, error: 'owner_transfer_unavailable' });
-            return true;
-        }
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const token = bearerOnly(req);
-        if (!findMembershipByDelegationToken(dataDir, token)) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        const requestId = String(body?.requestId ?? '').trim();
-        if (!requestId) {
-            jsonRes(res, 400, { ok: false, error: 'request_id_required' });
-            return true;
-        }
-        const resultKey = `delegate-transfer-result:${token}:${requestId}`;
-        const cached = idemGet(resultKey);
-        if (cached) {
-            jsonRes(res, cached.status, cached.body);
-            return true;
-        }
-        const pending = idemGet(`delegate-transfer-pending:${token}:${requestId}`);
-        if (!pending) {
-            jsonRes(res, 409, { ok: false, error: 'owner_transfer_not_pending' });
-            return true;
-        }
-        const transferred = await deps.transferTeamGroupOwner(pending);
-        const result = { status: 200, body: { ok: true, ...transferred } };
-        // Successful transfer is idempotent and may have sent an @ notification;
-        // cache it to suppress duplicate notifications. Failures remain retryable.
-        if (transferred.ownerTransferredTo && !transferred.transferError)
-            idemSet(resultKey, result);
-        jsonRes(res, result.status, result.body);
-        return true;
-    }
-    // Hub asks THIS spoke to add ITS OWN owner(s) to an existing chat (hub→spoke):
-    // the hub's creator bot can't add users outside its app's visibility scope
-    // (Lark code 232024), but THIS deployment's bot has its owner in scope. We add
-    // via `viaLarkAppId` — one of our bots that's already a member of the chat.
-    // Authed by the delegationToken THIS spoke issued (team-internal trust).
-    if (path === '/api/federation/delegate-add-owner' && method === 'POST') {
-        let body;
-        try {
-            body = await readBody(req);
-        }
-        catch {
-            jsonRes(res, 400, { ok: false, error: 'bad_json' });
-            return true;
-        }
-        const token = bearerOnly(req);
-        if (!findMembershipByDelegationToken(dataDir, token)) {
-            jsonRes(res, 403, { ok: false, error: 'unknown_token' });
-            return true;
-        }
-        const requestId = String(body?.requestId ?? '').trim();
-        if (!requestId) {
-            jsonRes(res, 400, { ok: false, error: 'request_id_required' });
-            return true;
-        }
-        const idemKey = `add-owner:${token}:${requestId}`;
-        const cached = idemGet(idemKey);
-        if (cached) {
-            jsonRes(res, cached.status, cached.body);
-            return true;
-        }
-        const chatId = String(body?.chatId ?? '').trim();
-        const viaLarkAppId = String(body?.viaLarkAppId ?? '').trim();
-        // Via-bot candidates to try IN ORDER. The hub sends every bot of THIS
-        // deployment that's already a member of the chat; we fall through them so a
-        // bot lacking im:chat.members:write_only (99991672) or owner visibility
-        // (232024) doesn't strand the owner — another of our bots can still add them.
-        // Back-compat: older hubs send only viaLarkAppId.
-        const rawCandidates = Array.isArray(body?.viaCandidates) ? body.viaCandidates : [];
-        const viaCandidates = Array.from(new Set([viaLarkAppId, ...rawCandidates.filter((x) => typeof x === 'string')].map(s => s.trim()).filter(Boolean)));
-        const rawOwners = Array.isArray(body?.ownerUnionIds) ? body.ownerUnionIds : [];
-        const ownerUnionIds = Array.from(new Set(rawOwners.filter((x) => typeof x === 'string')));
-        if (!chatId || ownerUnionIds.length === 0) {
-            jsonRes(res, 400, { ok: false, error: 'bad_request' });
-            return true;
-        }
-        if (ownerUnionIds.length > MAX_OWNERS) {
-            jsonRes(res, 400, { ok: false, error: 'too_many' });
-            return true;
-        }
-        const roster = buildTeamRoster(dataDir, undefined, undefined, deps.liveBots?.());
-        // Guardrail: viaLarkAppId must be one of OUR local bots.
-        if (!roster.bots.some(b => b.larkAppId === viaLarkAppId)) {
-            jsonRes(res, 400, { ok: false, error: 'not_a_local_bot' });
-            return true;
-        }
-        // Drop any candidate that isn't one of OUR local bots (the hub may list bots
-        // we no longer host); viaLarkAppId itself is guaranteed present by the check above.
-        const localCandidates = viaCandidates.filter(via => roster.bots.some(b => b.larkAppId === via));
-        // Capability limit: only add people who are OUR owners (this deployment's owner
-        // or a local bot's owner). A delegationToken holder must NOT use our bot to pull
-        // arbitrary in-scope users into arbitrary chats. Non-owners → invalid, no Lark call.
-        const me = getDeploymentIdentity(dataDir);
-        const allowedOwners = new Set([me.ownerUnionId, ...roster.bots.map(b => b.owner?.unionId)].filter((x) => !!x));
-        const toAdd = ownerUnionIds.filter(u => allowedOwners.has(u));
-        const notOurs = ownerUnionIds.filter(u => !allowedOwners.has(u));
-        const addOwners = deps.addOwners ?? (async (via, chat, ids) => {
-            if (!ensureLocalClient(via))
-                return { invalidUserIds: ids };
-            return addUsersToChatByUnionId(via, chat, ids);
-        });
-        // Try each local candidate in turn, narrowing to the owners still not added.
-        // Stop as soon as everyone landed; a bot that can't add them (no write scope
-        // / no visibility) just leaves them in `remaining` for the next candidate.
-        let remaining = [...toAdd];
-        for (const via of localCandidates) {
-            if (remaining.length === 0)
-                break;
-            const ar = await addOwners(via, chatId, remaining);
-            const invalid = new Set(ar.invalidUserIds);
-            remaining = remaining.filter(u => invalid.has(u));
-        }
-        const result = { status: 200, body: { ok: true, invalidUserIds: [...notOurs, ...remaining] } };
-        idemSet(idemKey, result);
-        jsonRes(res, result.status, result.body);
-        return true;
-    }
-    jsonRes(res, 404, { ok: false, error: 'not_found' });
-    return true;
-}
-//# sourceMappingURL=federation-api.js.map

package/dist/dashboard/federation-api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"federation-api.js","sourceRoot":"","sources":["../../src/dashboard/federation-api.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EACL,kBAAkB,EAAE,cAAc,EAAE,oBAAoB,EAAE,uBAAuB,GAElF,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EACL,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACxB,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAgB,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EACL,yBAAyB,GAI1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;gFAEgF;AAChF,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,CAAC;QAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB;;;8EAG8E;AAC9E,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkD,CAAC;AAC/E,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACxE,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AACD,SAAS,OAAO,CAAC,GAAW,EAAE,MAAe;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY;QAAE,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;YAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IACzG,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,oBAAoB,EAAE,MAAM,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;kFACkF;AAClF,SAAS,eAAe,CAAC,GAAoB,EAAE,GAAQ;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxF,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED;;6EAE6E;AAC7E,SAAS,UAAU,CAAC,GAAoB;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,OAAO,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,QAAQ,GAAG,GAAG,GAAG,IAAI;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAW,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QAClB,IAAI,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,SAAS;QAC9D,GAAG,CAAC,IAAI,CAAC;YACP,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACjD,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACvE,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YAClE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;YAC5B,4EAA4E;YAC5E,uEAAuE;YACvE,yEAAyE;YACzE,oBAAoB,EAAE,OAAO,CAAC,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;YACtG,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YAC7E,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SACrE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAuBD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAA0B,EAAE;IAE5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;IACvD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IAEnC,wEAAwE;IACxE,IAAI,IAAI,KAAK,sBAAsB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACzD,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,EAAE,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YACtE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC9E,CAAC;QACD,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,GAAG,CAAC,YAAY,KAAK,qBAAqB,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,CAAC;YACrE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC3E,CAAC;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE;YAClD,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY;YAC5E,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAC5B,YAAY,EAAE,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACjF,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACxE,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3I,eAAe,EAAE,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;SAC3F,CAAC,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACxG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,IAAI,IAAI,KAAK,uBAAuB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1D,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpF,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3F,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI,KAAK,sBAAsB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACzD,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3F,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;YACtE,YAAY,EAAE,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACpF,SAAS,EAAE,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC3E,IAAI,EAAE,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACnF,wCAAwC;QACxC,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE;YAChB,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;SACtF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oDAAoD;IACpD,wCAAwC;IACxC,IAAI,IAAI,KAAK,+BAA+B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAClE,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1D,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1G,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,0CAA0C;IAC1C,IAAI,IAAI,KAAK,4BAA4B,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE;YAChB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY;YAC3C,KAAK,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YAC3C,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YAC/C,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACvE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uCAAuC;IACvC,IAAI,IAAI,KAAK,iCAAiC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACpE,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpH,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACpF,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,gDAAgD;IAChD,IAAI,IAAI,KAAK,wBAAwB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACzH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,+EAA+E;IAC/E,iFAAiF;IACjF,IAAI,IAAI,KAAK,uBAAuB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChH,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,sEAAsE;QACrG,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChG,MAAM,UAAU,GAAa,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9H,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC;QACtD,2EAA2E;QAC3E,sEAAsE;QACtE,6EAA6E;QAC7E,yEAAyE;QACzE,MAAM,OAAO,GAAG,SAAS,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAA8C,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,OAAO,EACjD,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACrG;YACE,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;YACnD,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;YAC9B,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;SACxB,CAAC,CAAC;QACL,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,IAAI,KAAK,gCAAgC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChH,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,wEAAwE;QACvG,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChI,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChG,8EAA8E;QAC9E,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,OAAO,GAAG,YAAY,KAAK,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAA8C,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtE,4EAA4E;QAC5E,MAAM,UAAU,GAAa,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrJ,MAAM,aAAa,GAAa,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9J,MAAM,oBAAoB,GAAG,OAAO,IAAI,EAAE,oBAAoB,KAAK,QAAQ;YACzE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE;YAClC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;QACxD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1G,IAAI,UAAU,CAAC,MAAM,GAAG,QAAQ,IAAI,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC5I,IAAI,IAAI,EAAE,oBAAoB,KAAK,SAAS;eACvC,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,EAAE,CAAC;YAChG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAC1F,CAAC;QACD,wEAAwE;QACxE,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACvH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;YACnC,IAAI;YACJ,UAAU;YACV,aAAa;YACb,oBAAoB,EAAE,oBAAoB,IAAI,SAAS;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,EAAE;eACH,CAAC,CAAC,MAAM;eACR,CAAC,CAAC,OAAO;eACT,oBAAoB;eACpB,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC5D,qEAAqE;YACrE,wEAAwE;YACxE,yEAAyE;YACzE,OAAO,CAAC,6BAA6B,KAAK,IAAI,SAAS,EAAE,EAAE;gBACzD,gBAAgB,EAAE,CAAC,CAAC,OAAO;gBAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,oBAAoB;aACrB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,8CAA8C;QACxE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,IAAI,KAAK,yCAAyC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACzH,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChI,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChG,MAAM,SAAS,GAAG,4BAA4B,KAAK,IAAI,SAAS,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAA8C,CAAC;QAC/E,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtE,MAAM,OAAO,GAAG,OAAO,CAAC,6BAA6B,KAAK,IAAI,SAAS,EAAE,CAI5D,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAErG,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,EAAE,CAAC;QACnE,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,WAAW,CAAC,kBAAkB,IAAI,CAAC,WAAW,CAAC,aAAa;YAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7F,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,2EAA2E;IAC3E,+EAA+E;IAC/E,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,IAAI,KAAK,oCAAoC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvE,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,+BAA+B,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChI,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAChG,MAAM,OAAO,GAAG,aAAa,KAAK,IAAI,SAAS,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAA8C,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,sEAAsE;QACtE,4EAA4E;QAC5E,wEAAwE;QACxE,8EAA8E;QAC9E,kDAAkD;QAClD,MAAM,aAAa,GAAc,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,aAAa,GAAa,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAChD,CAAC,YAAY,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CACtH,CAAC,CAAC;QACH,MAAM,SAAS,GAAc,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,aAAa,GAAa,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjH,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACnH,IAAI,aAAa,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjF,yDAAyD;QACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtI,6EAA6E;QAC7E,oFAAoF;QACpF,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC;QAChG,gFAAgF;QAChF,iFAAiF;QACjF,qFAAqF;QACrF,MAAM,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpI,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,GAAW,EAAE,IAAY,EAAE,GAAa,EAAE,EAAE;YACtF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;YAC5D,OAAO,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,6EAA6E;QAC7E,6EAA6E;QAC7E,2EAA2E;QAC3E,IAAI,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM;YAClC,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;YAC3C,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC;QAC/F,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC"}