botmux 3.14.0 → 3.16.0

package/dist/dashboard/aggregator.d.ts

@@ -22,7 +22,16 @@ export declare class Aggregator {
     applyEvent(larkAppId: string, ev: DashboardEvent): void;
     /** Bulk-load on dashboard start before SSE catches up. Idempotent. */
     hydrateSessions(larkAppId: string, rows: Row[]): void;
-    hydrateSchedules(rows: Sched[]): void;
+    /**
+     * Per-daemon reconcile for schedules. Upserts `rows` and REMOVES schedules
+     * owned by `larkAppId` that are absent from the snapshot: a
+     * `schedule.deleted` missed while the SSE stream was down would otherwise
+     * ghost forever, since upsert alone can't delete. Schedules owned by other
+     * daemons (and ownerless rows) are untouched. Rows missing `larkAppId`
+     * are tagged with the hydrating daemon, which is authoritative for them
+     * (they came from its /api/schedules).
+     */
+    hydrateSchedules(larkAppId: string, rows: Sched[]): void;
     getSessions(): Row[];
     getSession(sessionId: string): Row | undefined;
     getSchedules(): Sched[];
@@ -52,8 +61,29 @@ export declare class Aggregator {
 }
 /**
  * Subscribe to one daemon's SSE stream and feed events into the aggregator.
- * Auto-reconnects on error with 1s backoff. Returns an abort function.
+ * Auto-reconnects on error OR clean EOF with 1s backoff. Returns an abort
+ * function.
+ *
+ * `onConnected` fires after EVERY successful stream establishment — the first
+ * connection included — BEFORE any frame is read, and receives the
+ * subscription's abort signal. While it runs, incoming frames stay queued in
+ * the stream; once it resolves, reading begins and the queued frames are
+ * applied in order. The caller uses it to install an authoritative snapshot
+ * (GET /api/sessions) that is therefore at least as fresh as every frame
+ * applied afterwards: a slow snapshot response can never clobber state that
+ * a faster SSE event already delivered (the reverse race of a naive
+ * post-subscribe hydrate). The same barrier on reconnect recovers events
+ * missed while the stream was down.
+ *
+ * The signal is also the generation arbitration: if this subscription is
+ * aborted (daemon offline, superseded by a newer generation) while the
+ * callback is in flight, the callback MUST discard its result instead of
+ * applying it — otherwise the stale generation's snapshot reverse-clobbers
+ * the newer one. The callback should fetch with
+ * `AbortSignal.any([signal, timeout])` and re-check `signal.aborted` before
+ * every aggregator mutation. If `onConnected` throws, frames are still read
+ * (best-effort).
  */
-export declare function subscribeDaemon(d: DaemonInfo, agg: Aggregator, onError: (e: Error) => void, fetchImpl?: typeof fetch): () => void;
+export declare function subscribeDaemon(d: DaemonInfo, agg: Aggregator, onError: (e: Error) => void, fetchImpl?: typeof fetch, onConnected?: (signal: AbortSignal) => Promise<void> | void): () => void;
 export {};
 //# sourceMappingURL=aggregator.d.ts.map

package/dist/dashboard/aggregator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aggregator.d.ts","sourceRoot":"","sources":["../../src/dashboard/aggregator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,KAAK,GAAG,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAC1E,KAAK,KAAK,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAelD;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,SAAS,CAAkE;IAEnF,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,IAAI;IAiDvD,sEAAsE;IACtE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;IAKrD,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI;IAIrC,WAAW,IAAI,GAAG,EAAE;IACpB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS;IAC9C,YAAY,IAAI,KAAK,EAAE;IAEvB,sEAAsE;IACtE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI9C;;;gFAG4E;IAC5E,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI1D;;;;uDAImD;IACnD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAGzC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI/C;;;;yEAIqE;IACrE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAInC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,MAAM,IAAI;CAIxE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,UAAU,EACb,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,EAC3B,SAAS,GAAE,OAAO,KAAa,GAC9B,MAAM,IAAI,CA6CZ"}
+{"version":3,"file":"aggregator.d.ts","sourceRoot":"","sources":["../../src/dashboard/aggregator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,KAAK,GAAG,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAC1E,KAAK,KAAK,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAelD;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,SAAS,CAAkE;IAEnF,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,IAAI;IAwDvD,sEAAsE;IACtE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;IAKrD;;;;;;;;OAQG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI;IAWxD,WAAW,IAAI,GAAG,EAAE;IACpB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS;IAC9C,YAAY,IAAI,KAAK,EAAE;IAEvB,sEAAsE;IACtE,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI9C;;;gFAG4E;IAC5E,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI1D;;;;uDAImD;IACnD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAGzC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI/C;;;;yEAIqE;IACrE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAInC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,MAAM,IAAI;CAIxE;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,eAAe,CAC7B,CAAC,EAAE,UAAU,EACb,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,EAC3B,SAAS,GAAE,OAAO,KAAa,EAC/B,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAC1D,MAAM,IAAI,CA+EZ"}

package/dist/dashboard/aggregator.js

@@ -50,9 +50,16 @@ export class Aggregator {
                     this.sessions.set(ev.body.sessionId, { ...cur, status: 'closed' });
                 break;
             }
-            case 'schedule.created':
-                this.schedules.set(ev.body.schedule.id, ev.body.schedule);
+            case 'schedule.created': {
+                const schedule = ev.body.schedule;
+                // Tag ownerless rows with the reporting daemon so scoped reconcile
+                // (hydrateSchedules) can account for them.
+                this.schedules.set(schedule.id, {
+                    ...schedule,
+                    larkAppId: schedule.larkAppId ?? larkAppId,
+                });
                 break;
+            }
             case 'schedule.updated': {
                 const cur = this.schedules.get(ev.body.id);
                 if (cur)
@@ -77,9 +84,25 @@ export class Aggregator {
             this.sessions.set(r.sessionId, mergeSpawnedRow(this.sessions.get(r.sessionId), r, larkAppId));
         }
     }
-    hydrateSchedules(rows) {
-        for (const r of rows)
-            this.schedules.set(r.id, r);
+    /**
+     * Per-daemon reconcile for schedules. Upserts `rows` and REMOVES schedules
+     * owned by `larkAppId` that are absent from the snapshot: a
+     * `schedule.deleted` missed while the SSE stream was down would otherwise
+     * ghost forever, since upsert alone can't delete. Schedules owned by other
+     * daemons (and ownerless rows) are untouched. Rows missing `larkAppId`
+     * are tagged with the hydrating daemon, which is authoritative for them
+     * (they came from its /api/schedules).
+     */
+    hydrateSchedules(larkAppId, rows) {
+        const incoming = new Set(rows.map(r => r.id));
+        for (const r of rows) {
+            const owner = r.larkAppId ?? larkAppId;
+            this.schedules.set(r.id, { ...r, larkAppId: owner });
+        }
+        for (const [id, cur] of this.schedules) {
+            if (cur.larkAppId === larkAppId && !incoming.has(id))
+                this.schedules.delete(id);
+        }
     }
     getSessions() { return [...this.sessions.values()]; }
     getSession(sessionId) { return this.sessions.get(sessionId); }
@@ -121,25 +144,80 @@ export class Aggregator {
 }
 /**
  * Subscribe to one daemon's SSE stream and feed events into the aggregator.
- * Auto-reconnects on error with 1s backoff. Returns an abort function.
+ * Auto-reconnects on error OR clean EOF with 1s backoff. Returns an abort
+ * function.
+ *
+ * `onConnected` fires after EVERY successful stream establishment — the first
+ * connection included — BEFORE any frame is read, and receives the
+ * subscription's abort signal. While it runs, incoming frames stay queued in
+ * the stream; once it resolves, reading begins and the queued frames are
+ * applied in order. The caller uses it to install an authoritative snapshot
+ * (GET /api/sessions) that is therefore at least as fresh as every frame
+ * applied afterwards: a slow snapshot response can never clobber state that
+ * a faster SSE event already delivered (the reverse race of a naive
+ * post-subscribe hydrate). The same barrier on reconnect recovers events
+ * missed while the stream was down.
+ *
+ * The signal is also the generation arbitration: if this subscription is
+ * aborted (daemon offline, superseded by a newer generation) while the
+ * callback is in flight, the callback MUST discard its result instead of
+ * applying it — otherwise the stale generation's snapshot reverse-clobbers
+ * the newer one. The callback should fetch with
+ * `AbortSignal.any([signal, timeout])` and re-check `signal.aborted` before
+ * every aggregator mutation. If `onConnected` throws, frames are still read
+ * (best-effort).
  */
-export function subscribeDaemon(d, agg, onError, fetchImpl = fetch) {
+export function subscribeDaemon(d, agg, onError, fetchImpl = fetch, onConnected) {
     const ctrl = new AbortController();
     const url = `http://127.0.0.1:${d.ipcPort}/api/events`;
+    let reconnectTimer;
+    // Clear the reconnect backoff immediately on abort so the loop exits
+    // without waiting the full second.
+    ctrl.signal.addEventListener('abort', () => {
+        if (reconnectTimer)
+            clearTimeout(reconnectTimer);
+    }, { once: true });
+    const applyFrame = (evt, body) => {
+        if (evt === 'session.spawned' && d.botAvatarUrl && body?.session) {
+            const session = body.session;
+            body.session = { ...session, botAvatarUrl: d.botAvatarUrl };
+        }
+        agg.applyEvent(d.larkAppId, { type: evt, body });
+    };
     (async () => {
         while (!ctrl.signal.aborted) {
             try {
                 const res = await fetchImpl(url, { signal: ctrl.signal });
                 if (!res.ok || !res.body)
                     throw new Error(`bad status ${res.status}`);
+                // Snapshot barrier: install the caller's authoritative snapshot
+                // before any frame is applied. Frames arriving during this call
+                // remain queued in the stream and are applied afterwards, in order,
+                // so the snapshot can never overwrite fresher SSE-delivered state.
+                // The subscription signal is passed through as the generation
+                // arbitration — the callback must not apply after abort.
+                if (onConnected) {
+                    try {
+                        await onConnected(ctrl.signal);
+                    }
+                    catch (e) {
+                        onError(e instanceof Error ? e : new Error(String(e)));
+                    }
+                }
+                if (ctrl.signal.aborted)
+                    break;
                 const reader = res.body.getReader();
                 const dec = new TextDecoder();
                 let buf = '';
                 let evt = '';
                 for (;;) {
                     const { value, done } = await reader.read();
-                    if (done)
-                        break;
+                    if (done) {
+                        // Clean EOF of an established stream means the daemon went away.
+                        // Treat it as a disconnect: fall through to the backoff +
+                        // barrier re-run path instead of silently tight-looping.
+                        throw new Error('sse stream ended (clean EOF)');
+                    }
                     buf += dec.decode(value, { stream: true });
                     let nl;
                     while ((nl = buf.indexOf('\n')) >= 0) {
@@ -150,11 +228,7 @@ export function subscribeDaemon(d, agg, onError, fetchImpl = fetch) {
                         else if (line.startsWith('data:') && evt) {
                             const data = line.slice(5).trim();
                             try {
-                                const body = JSON.parse(data);
-                                if (evt === 'session.spawned' && d.botAvatarUrl && body?.session) {
-                                    body.session = { ...body.session, botAvatarUrl: d.botAvatarUrl };
-                                }
-                                agg.applyEvent(d.larkAppId, { type: evt, body });
+                                applyFrame(evt, JSON.parse(data));
                             }
                             catch {
                                 // Skip malformed frame
@@ -165,9 +239,11 @@ export function subscribeDaemon(d, agg, onError, fetchImpl = fetch) {
                 }
             }
             catch (e) {
-                if (!ctrl.signal.aborted)
-                    onError(e);
-                await new Promise(r => setTimeout(r, 1_000));
+                if (ctrl.signal.aborted)
+                    break;
+                onError(e);
+                await new Promise(r => { reconnectTimer = setTimeout(r, 1_000); });
+                reconnectTimer = undefined;
             }
         }
     })();

package/dist/dashboard/aggregator.js.map

@@ -1 +1 @@
-{"version":3,"file":"aggregator.js","sourceRoot":"","sources":["../../src/dashboard/aggregator.ts"],"names":[],"mappings":"AAMA,MAAM,2BAA2B,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAEvF,SAAS,eAAe,CAAC,OAAwB,EAAE,QAAa,EAAE,SAAiB;IACjF,MAAM,IAAI,GAAQ,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7C,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,2BAA2B,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9D,IAAI,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACb,QAAQ,GAAG,IAAI,GAAG,EAAe,CAAC;IAClC,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAC;IACrC,SAAS,GAAG,IAAI,GAAG,EAAuD,CAAC;IAEnF,UAAU,CAAC,SAAiB,EAAE,EAAkB;QAC9C,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAc,CAAC;gBACjC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC3E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACrC,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7C,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACnC,IACE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC;2BACtD,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,EACtC,CAAC;wBACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;wBACtB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;oBACzB,CAAC;oBACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;oBAC3D,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,GAAG;oBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC5E,MAAM;YACR,CAAC;YACD,KAAK,kBAAkB;gBACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAE,EAAE,CAAC,IAAI,CAAC,QAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAiB,CAAC,CAAC;gBAC9E,MAAM;YACR,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG;oBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACtE,MAAM;YACR,CAAC;YACD,KAAK,kBAAkB;gBACrB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClC,MAAM;YACR,oEAAoE;QACtE,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,eAAe,CAAC,SAAiB,EAAE,IAAW;QAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,gBAAgB,CAAC,IAAa;QAC5B,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,WAAW,KAAY,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,UAAU,CAAC,SAAiB,IAAqB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACvF,YAAY,KAAc,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhE,sEAAsE;IACtE,OAAO,CAAC,SAAiB;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IACjD,CAAC;IAED;;;gFAG4E;IAC5E,mBAAmB,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAA+B,CAAC;IACvE,CAAC;IAED;;;;uDAImD;IACnD,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IACD,eAAe,CAAC,EAAU;QACxB,OAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAwC,EAAE,SAAS,CAAC;IACnF,CAAC;IAED;;;;yEAIqE;IACrE,cAAc,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,EAAE,CAAC,EAAuD;QACxD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,CAAa,EACb,GAAe,EACf,OAA2B,EAC3B,YAA0B,KAAK;IAE/B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,oBAAoB,CAAC,CAAC,OAAO,aAAa,CAAC;IAEvD,CAAC,KAAK,IAAI,EAAE;QACV,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,SAAS,CAAC;oBACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,IAAI,IAAI;wBAAE,MAAM;oBAChB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,IAAI,EAAU,CAAC;oBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;wBACxB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;4BAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;6BACrD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;4BACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;4BAClC,IAAI,CAAC;gCACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gCAC9B,IAAI,GAAG,KAAK,iBAAiB,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;oCACjE,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;gCACnE,CAAC;gCACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAS,CAAC,CAAC;4BAC1D,CAAC;4BAAC,MAAM,CAAC;gCACP,uBAAuB;4BACzB,CAAC;4BACD,GAAG,GAAG,EAAE,CAAC;wBACX,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO,CAAC,CAAU,CAAC,CAAC;gBAC9C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"aggregator.js","sourceRoot":"","sources":["../../src/dashboard/aggregator.ts"],"names":[],"mappings":"AAMA,MAAM,2BAA2B,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAEvF,SAAS,eAAe,CAAC,OAAwB,EAAE,QAAa,EAAE,SAAiB;IACjF,MAAM,IAAI,GAAQ,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7C,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,2BAA2B,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9D,IAAI,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACb,QAAQ,GAAG,IAAI,GAAG,EAAe,CAAC;IAClC,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAC;IACrC,SAAS,GAAG,IAAI,GAAG,EAAuD,CAAC;IAEnF,UAAU,CAAC,SAAiB,EAAE,EAAkB;QAC9C,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAc,CAAC;gBACjC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC3E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACrC,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7C,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACnC,IACE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC;2BACtD,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,EACtC,CAAC;wBACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;wBACtB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;oBACzB,CAAC;oBACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;oBAC3D,OAAO,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,GAAG;oBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC5E,MAAM;YACR,CAAC;YACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,QAA0C,CAAC;gBACpE,mEAAmE;gBACnE,2CAA2C;gBAC3C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;oBAC9B,GAAG,QAAQ;oBACX,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,SAAS;iBAC3C,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG;oBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACtE,MAAM;YACR,CAAC;YACD,KAAK,kBAAkB;gBACrB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClC,MAAM;YACR,oEAAoE;QACtE,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,eAAe,CAAC,SAAiB,EAAE,IAAW;QAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD;;;;;;;;OAQG;IACH,gBAAgB,CAAC,SAAiB,EAAE,IAAa;QAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAI,CAA4B,CAAC,SAAS,IAAI,SAAS,CAAC;YACnE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,WAAW,KAAY,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,UAAU,CAAC,SAAiB,IAAqB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACvF,YAAY,KAAc,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhE,sEAAsE;IACtE,OAAO,CAAC,SAAiB;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IACjD,CAAC;IAED;;;gFAG4E;IAC5E,mBAAmB,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAA+B,CAAC;IACvE,CAAC;IAED;;;;uDAImD;IACnD,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IACD,eAAe,CAAC,EAAU;QACxB,OAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAwC,EAAE,SAAS,CAAC;IACnF,CAAC;IAED;;;;yEAIqE;IACrE,cAAc,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,EAAE,CAAC,EAAuD;QACxD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,eAAe,CAC7B,CAAa,EACb,GAAe,EACf,OAA2B,EAC3B,YAA0B,KAAK,EAC/B,WAA2D;IAE3D,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,oBAAoB,CAAC,CAAC,OAAO,aAAa,CAAC;IACvD,IAAI,cAAyD,CAAC;IAE9D,qEAAqE;IACrE,mCAAmC;IACnC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;QACzC,IAAI,cAAc;YAAE,YAAY,CAAC,cAAc,CAAC,CAAC;IACnD,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnB,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAa,EAAQ,EAAE;QACtD,IAAI,GAAG,KAAK,iBAAiB,IAAI,CAAC,CAAC,YAAY,IAAK,IAA8B,EAAE,OAAO,EAAE,CAAC;YAC5F,MAAM,OAAO,GAAI,IAA6C,CAAC,OAAO,CAAC;YACtE,IAA6B,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;QACxF,CAAC;QACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAS,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,CAAC,KAAK,IAAI,EAAE;QACV,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAEtE,gEAAgE;gBAChE,gEAAgE;gBAChE,oEAAoE;gBACpE,mEAAmE;gBACnE,8DAA8D;gBAC9D,yDAAyD;gBACzD,IAAI,WAAW,EAAE,CAAC;oBAChB,IAAI,CAAC;wBACH,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACjC,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzD,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM;gBAE/B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,GAAG,EAAE,CAAC;gBACb,SAAS,CAAC;oBACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC5C,IAAI,IAAI,EAAE,CAAC;wBACT,iEAAiE;wBACjE,0DAA0D;wBAC1D,yDAAyD;wBACzD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBAClD,CAAC;oBACD,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,IAAI,EAAU,CAAC;oBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;wBACxB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;4BAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;6BACrD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;4BACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;4BAClC,IAAI,CAAC;gCACH,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;4BACpC,CAAC;4BAAC,MAAM,CAAC;gCACP,uBAAuB;4BACzB,CAAC;4BACD,GAAG,GAAG,EAAE,CAAC;wBACX,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM;gBAC/B,OAAO,CAAC,CAAU,CAAC,CAAC;gBACpB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,GAAG,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnE,cAAc,GAAG,SAAS,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/dashboard/auth-session-connections.d.ts

@@ -0,0 +1,59 @@
+/**
+ * P1-8：把「长连接」挂到签发它的认证会话下，认证一结束就立刻掐断。
+ *
+ * 背景：H5 logout / 会话到期、legacy token rotate、平台解绑之后，短请求会立刻
+ * 401，但**已经建立的流**不会——`/events` SSE、Preview 的 SSE/长响应、Preview
+ * WebSocket 都是登出前握好的手，握完就一直流，直到对端自己断开。这等于登出只
+ * 关了前门，后窗还开着：一台被借走的手机、一个已经交接掉的工作台页面，仍然能持
+ * 续看到会话板与预览内容，旧的 management SSE 甚至会收到**登出之后新产生**的
+ * `riffAccessUrl`（Riff 沙箱写凭据）。
+ *
+ * 这里只做一件事：authSessionId → 一组「关闭器」。建流时登记，流自然结束时注销，
+ * 身份结束时遍历关闭。它不认识 HTTP，也不认识 WebSocket——调用方给什么关闭动作
+ * 就执行什么（`res.destroy()` / `socket.destroy()`），因此同一份索引可以同时管
+ * SSE 响应和 WS 桥接 socket。
+ *
+ * 与 `TerminalControlManager.registerReadSocket` 的关系：那份索引是终端读流专用
+ * 的（P1-5），语义与写租约耦合；本索引是通用的，覆盖终端之外的所有长连接。两者
+ * 都由 `dashboardSessions.onEnd` / rotate / unbind 同一批钩子驱动。
+ */
+/** 关闭一条已建立的长连接。必须幂等：可能与对端自己断开竞争。 */
+export type AuthSessionConnectionCloser = () => void;
+export declare class AuthSessionConnectionRegistry {
+    private readonly byAuthSession;
+    /**
+     * P1-13：同一批连接的第二个索引——按被预览的**业务会话** id。
+     *
+     * 身份还在、但预览目标没了（worker 换代 / 切 CLI / 会话关闭 / 端口被别的进程接管）
+     * 时，authSession 那把钥匙开不了这扇门：登录用户完全合法，只是他正在看的那条流已经
+     * 指向一个不再属于这个会话的进程。必须能按 sessionId 单独把这批流掐掉，且不碰同一
+     * 认证会话名下其它会话的连接。
+     */
+    private readonly bySession;
+    /**
+     * 登记一条属于 `authSessionId` 的长连接，返回注销闭包。
+     * 调用方必须在连接自然关闭时调用注销闭包，否则 Map 会随连接数无限增长。
+     *
+     * `sessionId` 可选：预览类长连接传它，好让预览目标失效时能定点断流。
+     */
+    register(authSessionId: string, close: AuthSessionConnectionCloser, sessionId?: string): () => void;
+    private add;
+    private drop;
+    /**
+     * 身份结束（logout / 到期 / rotate / 解绑）时调用：关闭该认证会话名下的全部
+     * 长连接，返回关闭条数。先把整组摘下来再逐个关，避免关闭回调同步触发注销时
+     * 改动正在遍历的集合。别的认证会话的连接一条都不动。
+     */
+    closeAuthSession(authSessionId: string): number;
+    /**
+     * P1-13：预览目标失效（换代 / 关闭 / 端口易主）时，关闭这个业务会话名下的全部
+     * 长连接。注销闭包会把它们同时从 authSession 索引里摘掉，两个索引不会漂移。
+     */
+    closeSessionStreams(sessionId: string): number;
+    private closeAll;
+    /** 当前登记的连接数：不传参是全量，传参是单个认证会话。仅用于测试与自检。 */
+    count(authSessionId?: string): number;
+    /** 某个业务会话名下的连接数。仅用于测试与自检。 */
+    countSessionStreams(sessionId: string): number;
+}
+//# sourceMappingURL=auth-session-connections.d.ts.map

package/dist/dashboard/auth-session-connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session-connections.d.ts","sourceRoot":"","sources":["../../src/dashboard/auth-session-connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,oCAAoC;AACpC,MAAM,MAAM,2BAA2B,GAAG,MAAM,IAAI,CAAC;AAErD,qBAAa,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuD;IACrF;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuD;IAEjF;;;;;OAKG;IACH,QAAQ,CACN,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,2BAA2B,EAClC,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,IAAI;IASb,OAAO,CAAC,GAAG;IAaX,OAAO,CAAC,IAAI;IAWZ;;;;OAIG;IACH,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM;IAI/C;;;OAGG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAI9C,OAAO,CAAC,QAAQ;IAiBhB,0CAA0C;IAC1C,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM;IAOrC,6BAA6B;IAC7B,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAG/C"}

package/dist/dashboard/auth-session-connections.js

@@ -0,0 +1,109 @@
+/**
+ * P1-8：把「长连接」挂到签发它的认证会话下，认证一结束就立刻掐断。
+ *
+ * 背景：H5 logout / 会话到期、legacy token rotate、平台解绑之后，短请求会立刻
+ * 401，但**已经建立的流**不会——`/events` SSE、Preview 的 SSE/长响应、Preview
+ * WebSocket 都是登出前握好的手，握完就一直流，直到对端自己断开。这等于登出只
+ * 关了前门，后窗还开着：一台被借走的手机、一个已经交接掉的工作台页面，仍然能持
+ * 续看到会话板与预览内容，旧的 management SSE 甚至会收到**登出之后新产生**的
+ * `riffAccessUrl`（Riff 沙箱写凭据）。
+ *
+ * 这里只做一件事：authSessionId → 一组「关闭器」。建流时登记，流自然结束时注销，
+ * 身份结束时遍历关闭。它不认识 HTTP，也不认识 WebSocket——调用方给什么关闭动作
+ * 就执行什么（`res.destroy()` / `socket.destroy()`），因此同一份索引可以同时管
+ * SSE 响应和 WS 桥接 socket。
+ *
+ * 与 `TerminalControlManager.registerReadSocket` 的关系：那份索引是终端读流专用
+ * 的（P1-5），语义与写租约耦合；本索引是通用的，覆盖终端之外的所有长连接。两者
+ * 都由 `dashboardSessions.onEnd` / rotate / unbind 同一批钩子驱动。
+ */
+export class AuthSessionConnectionRegistry {
+    byAuthSession = new Map();
+    /**
+     * P1-13：同一批连接的第二个索引——按被预览的**业务会话** id。
+     *
+     * 身份还在、但预览目标没了（worker 换代 / 切 CLI / 会话关闭 / 端口被别的进程接管）
+     * 时，authSession 那把钥匙开不了这扇门：登录用户完全合法，只是他正在看的那条流已经
+     * 指向一个不再属于这个会话的进程。必须能按 sessionId 单独把这批流掐掉，且不碰同一
+     * 认证会话名下其它会话的连接。
+     */
+    bySession = new Map();
+    /**
+     * 登记一条属于 `authSessionId` 的长连接，返回注销闭包。
+     * 调用方必须在连接自然关闭时调用注销闭包，否则 Map 会随连接数无限增长。
+     *
+     * `sessionId` 可选：预览类长连接传它，好让预览目标失效时能定点断流。
+     */
+    register(authSessionId, close, sessionId) {
+        this.add(this.byAuthSession, authSessionId, close);
+        if (sessionId !== undefined)
+            this.add(this.bySession, sessionId, close);
+        return () => {
+            this.drop(this.byAuthSession, authSessionId, close);
+            if (sessionId !== undefined)
+                this.drop(this.bySession, sessionId, close);
+        };
+    }
+    add(index, key, close) {
+        let closers = index.get(key);
+        if (!closers) {
+            closers = new Set();
+            index.set(key, closers);
+        }
+        closers.add(close);
+    }
+    drop(index, key, close) {
+        const current = index.get(key);
+        if (!current)
+            return;
+        current.delete(close);
+        if (current.size === 0)
+            index.delete(key);
+    }
+    /**
+     * 身份结束（logout / 到期 / rotate / 解绑）时调用：关闭该认证会话名下的全部
+     * 长连接，返回关闭条数。先把整组摘下来再逐个关，避免关闭回调同步触发注销时
+     * 改动正在遍历的集合。别的认证会话的连接一条都不动。
+     */
+    closeAuthSession(authSessionId) {
+        return this.closeAll(this.byAuthSession, authSessionId);
+    }
+    /**
+     * P1-13：预览目标失效（换代 / 关闭 / 端口易主）时，关闭这个业务会话名下的全部
+     * 长连接。注销闭包会把它们同时从 authSession 索引里摘掉，两个索引不会漂移。
+     */
+    closeSessionStreams(sessionId) {
+        return this.closeAll(this.bySession, sessionId);
+    }
+    closeAll(index, key) {
+        const closers = index.get(key);
+        if (!closers)
+            return 0;
+        // 先把整组摘下来再逐个关：关闭回调会同步触发注销闭包，那会改动这个集合。
+        index.delete(key);
+        let closed = 0;
+        for (const close of [...closers]) {
+            closed++;
+            // 单条关闭失败（socket 已被对端销毁等）不能拖垮同批其它连接的撤销。
+            try {
+                close();
+            }
+            catch { /* already gone */ }
+        }
+        return closed;
+    }
+    /** 当前登记的连接数：不传参是全量，传参是单个认证会话。仅用于测试与自检。 */
+    count(authSessionId) {
+        if (authSessionId !== undefined)
+            return this.byAuthSession.get(authSessionId)?.size ?? 0;
+        let total = 0;
+        for (const closers of this.byAuthSession.values())
+            total += closers.size;
+        return total;
+    }
+    /** 某个业务会话名下的连接数。仅用于测试与自检。 */
+    countSessionStreams(sessionId) {
+        return this.bySession.get(sessionId)?.size ?? 0;
+    }
+}
+//# sourceMappingURL=auth-session-connections.js.map

package/dist/dashboard/auth-session-connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-session-connections.js","sourceRoot":"","sources":["../../src/dashboard/auth-session-connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,MAAM,OAAO,6BAA6B;IACvB,aAAa,GAAG,IAAI,GAAG,EAA4C,CAAC;IACrF;;;;;;;OAOG;IACc,SAAS,GAAG,IAAI,GAAG,EAA4C,CAAC;IAEjF;;;;;OAKG;IACH,QAAQ,CACN,aAAqB,EACrB,KAAkC,EAClC,SAAkB;QAElB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACxE,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC,CAAC;IACJ,CAAC;IAEO,GAAG,CACT,KAAoD,EACpD,GAAW,EACX,KAAkC;QAElC,IAAI,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAEO,IAAI,CACV,KAAoD,EACpD,GAAW,EACX,KAAkC;QAElC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,aAAqB;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;IAEO,QAAQ,CACd,KAAoD,EACpD,GAAW;QAEX,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;QACvB,sCAAsC;QACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,EAAE,CAAC;YACT,uCAAuC;YACvC,IAAI,CAAC;gBAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,aAAsB;QAC1B,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;QACzF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6BAA6B;IAC7B,mBAAmB,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/dashboard/auth.d.ts

@@ -40,9 +40,26 @@ export declare function generateToken(): string;
 /**
  * Load a dashboard HMAC secret from disk. Empty / whitespace-only files are
  * treated as missing so callers never sign requests with an empty key.
+ *
+ * Goes through the same strict host-authority primitives as the persisted
+ * token: the leaf must be a regular 0600 file owned by the current user and
+ * must not be a symlink, and its directory (`~/.botmux`) must not be
+ * group/other-writable. An unsafe shape throws
+ * {@link UnsafeHostAuthorityFileError} (fail-closed) instead of being followed:
+ * a symlinked or loose-perms secret could be planted by a local attacker who
+ * can replace the credential directory, letting them forge CLI HMAC headers
+ * and mint dashboard tokens.
  */
 export declare function loadDashboardSecret(secretPath: string): string | null;
-/** Load the dashboard HMAC secret, creating a fresh 0600 secret when absent. */
+/**
+ * Load the dashboard HMAC secret, creating a fresh 0600 secret when absent or
+ * empty. The credential directory is pinned once (Linux: via an open directory
+ * descriptor) and the lock, the read, and the write all resolve through that
+ * same anchor — so a symlinked HOME / shared-drive ancestor still works while
+ * an ancestor rename mid-section cannot redirect the secret into a substituted
+ * directory, and a leaf symlink is refused. The file lock makes get-or-create
+ * linearizable across dashboard processes.
+ */
 export declare function loadOrCreateDashboardSecret(secretPath: string): string;
 /**
  * Load the persisted active dashboard token from `tokenPath`, or `null` when
@@ -113,6 +130,8 @@ export declare function buildSetCookie(token: string): string;
  *   - `GET/HEAD /`, `/assets/*`, root icons    — static SPA shell
  *   - `GET /api/workflows/*`                   — zero-I/O legacy retirement
  *                                                tombstone (HTTP 410).
+ *   - `GET /workbench-ticket/<ticket>`         — 短时票据兑换（票据即凭证，
+ *                                                处理器自行验票，P2-1）。
  *
  * Outside those always-public surfaces, the explicit `publicReadOnly`
  * allow-list controls tokenless observation. Mutations and private reads still
@@ -128,6 +147,25 @@ export type AuthDecision = {
 } | {
     kind: 'deny401';
 };
+/**
+ * Feishu/Lark H5 sessions are deliberately narrower than the legacy owner
+ * cookie.  They can render the Workbench, observe its session stream, and use
+ * the two explicitly leased interaction surfaces; they can never fall through
+ * into Dashboard administration merely because a new route was added.
+ *
+ * Keep this as a positive capability map.  In particular, broad rules such as
+ * "all GETs" would expose config/secrets, while "all POSTs under /api/sessions"
+ * would turn an H5 viewer into a host operator.
+ */
+export type WorkbenchH5Capability = 'workbench.view' | 'terminal.view' | 'terminal.operate' | 'preview.view' | 'preview.operate';
+export declare function workbenchH5Capability(method: string, pathname: string): WorkbenchH5Capability | null;
+/** Fail-closed auth decision for an already-authenticated H5/readonly-platform
+ * identity. Static shell reads retain the ordinary public behavior; everything
+ * else must name one of the Workbench capabilities above. */
+export declare function decideWorkbenchH5Auth(opts: {
+    method: string;
+    pathname: string;
+}): AuthDecision;
 export declare function decideDashboardAuth(opts: {
     method: string;
     pathname: string;
@@ -141,4 +179,64 @@ export declare function decideDashboardAuth(opts: {
      *  all writes) still requires the active token. */
     publicReadOnly?: boolean;
 }): AuthDecision;
+/**
+ * 前端可见的"最小操作能力集"。`workbenchAuthed` 只能证明可进工作台，不代表任何
+ * 一项操作权限；三布尔各自对应一条真实路由的门禁：
+ *
+ *   - `canLocate`   → `POST /api/sessions/:id/locate`（话题定位）。
+ *   - `canControl`  → `POST /api/sessions/:id/control/takeover|release`
+ *                     （终端接管/释放）。
+ *   - `canInteract` → `POST /api/sessions/:id/preview-interaction/unlock|
+ *                     activity|lock`（Preview 交互解锁）。
+ *
+ * 边界（P1-6 write token）：`canControl` 只描述该身份**不带显式 token 时**在
+ * Dashboard control API 上的默认能力。显式 `?token=`（write token）走终端前置
+ * 代理的独立授权链——它既不经过这三条 API，也不受本投影影响；一个 teammate 被
+ * 递了显式 write token 仍可直接写终端，本投影不试图（也不可能）描述那条通道。
+ */
+export interface WorkbenchOperationCapabilities {
+    canLocate: boolean;
+    canControl: boolean;
+    canInteract: boolean;
+}
+/** 匿名 / 解析失败时的 fail-closed 值：三项全 false。 */
+export declare const WORKBENCH_NO_OPERATION_CAPABILITIES: Readonly<WorkbenchOperationCapabilities>;
+/**
+ * 处理器级角色门禁：谁能对预览交互做写操作（unlock / activity / lock）。
+ *
+ * 这一条判据同时被三处消费，必须只有一份实现，否则「画不画解锁按钮」和「POST 会
+ * 不会 403」会各走各的：
+ *   1. `dashboard.ts` 的 `/api/sessions/:id/preview-interaction/*` 路由（唯一权威，
+ *      false → 403 `preview_operation_forbidden`）；
+ *   2. 下面 {@link projectWorkbenchOperationCapabilities} 的 `canInteract`；
+ *   3. 由 2 驱动的工作台「开启交互」按钮与 Preview guard 壳里的解锁按钮。
+ *
+ * 身份缺失或 `previewCapability` 不是明确的 `'operate'` 一律 false（fail closed）。
+ */
+export declare function previewInteractionWriteAllowed(identity: {
+    previewCapability?: 'operate' | 'readonly';
+} | null | undefined): boolean;
+/** 投影所需的最小身份切面——与 dashboard.ts 的 DashboardRequestIdentity 结构兼容
+ *  （kind 枚举 + terminal-control.ts 的角色能力字段）。 */
+export interface WorkbenchCapabilityActor {
+    kind: 'legacy-dashboard' | 'platform-dashboard' | 'feishu-h5';
+    terminalCapability?: 'controlled' | 'owner' | 'readonly';
+    previewCapability: 'operate' | 'readonly';
+}
+/**
+ * 由身份投影三布尔能力集。**不是一张平行的权限表**：每一项都通过复算真实路由
+ * 的两层门禁得出——
+ *
+ *   1. 路由级 auth 决策：workbench-only 身份（H5 / platform）走
+ *      {@link decideWorkbenchH5Auth}（capability 表里没有 /locate，所以 H5 与
+ *      platform 全员 canLocate=false）；legacy owner 走
+ *      {@link decideDashboardAuth}（cookie == active token，等价于 allow）。
+ *   2. 处理器级角色检查：dashboard.ts 对 control/preview-interaction 写操作分别
+ *      用 `terminalCapability === 'readonly'` / `previewCapability === 'readonly'`
+ *      403，这里逐字复用同一判据。
+ *
+ * 因此「投影为 true 而路由 401/403」或反向漂移只可能来自这两层规则本身的改动，
+ * 而 test/dashboard-auth.test.ts 的矩阵测试把两边钉在一起。
+ */
+export declare function projectWorkbenchOperationCapabilities(identity: WorkbenchCapabilityActor | null): WorkbenchOperationCapabilities;
 //# sourceMappingURL=auth.d.ts.map

package/dist/dashboard/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/dashboard/auth.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,WAAW;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;CAAE;AAExE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEvF;AAED;;gFAEgF;AAChF,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAM5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CACxB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA4BlC;AAED,qEAAqE;AACrE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIrE;AAED,gFAAgF;AAChF,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CA+CtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEnE;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEnE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAUpE;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQ9D;AAaD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,sBAAsB,GAAG,mBAAmB,EAClD,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,GAChB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAoDnD;AAED,mEAAmE;AACnE,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAO1E;AAED,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAsBxB,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;uDAImD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,YAAY,CAkDf"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/dashboard/auth.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,WAAW;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;CAAE;AAExE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEvF;AAED;;gFAEgF;AAChF,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAM5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CACxB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA4BlC;AAED,qEAAqE;AACrE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAUtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEnE;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEnE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAUpE;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQ9D;AAaD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,sBAAsB,GAAG,mBAAmB,EAClD,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,GAChB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAoDnD;AAED,mEAAmE;AACnE,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAO1E;AAED,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAID;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,eAAe,GACf,kBAAkB,GAClB,cAAc,GACd,iBAAiB,CAAC;AAEtB,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAyCpG;AAED;;6DAE6D;AAC7D,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,YAAY,CAaf;AAsBD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;uDAImD;IACnD,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,YAAY,CA4Ef;AAID;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,2CAA2C;AAC3C,eAAO,MAAM,mCAAmC,EAAE,QAAQ,CAAC,8BAA8B,CACb,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE;IAAE,iBAAiB,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAC1E,OAAO,CAET;AAED;+CAC+C;AAC/C,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,kBAAkB,GAAG,oBAAoB,GAAG,WAAW,CAAC;IAC9D,kBAAkB,CAAC,EAAE,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;IACzD,iBAAiB,EAAE,SAAS,GAAG,UAAU,CAAC;CAC3C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qCAAqC,CACnD,QAAQ,EAAE,wBAAwB,GAAG,IAAI,GACxC,8BAA8B,CA2BhC"}