botmux 3.15.0 → 3.16.0

package/dist/dashboard/h5-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"h5-auth.js","sourceRoot":"","sources":["../../src/dashboard/h5-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EACL,kBAAkB,GAGnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AACnE,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,GAAG,MAAM,CAAC;AAC5D,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AACpD,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,CAAC;AACrC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAE1C;;oCAEoC;AACpC,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAgDrD,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC3G,CAAC;AAED;gFACgF;AAChF,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,qBAAqB;IACf,cAAc,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC3D,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,SAAS,GAAG,IAAI,GAAG,EAAgF,CAAC;IACpG,KAAK,CAAS;IACd,GAAG,CAAe;IAClB,WAAW,CAAe;IAC1B,QAAQ,CAAoB;IAC5B,MAAM,CAAsB;IAE7C,YAAY,OAAqC,EAAE;QACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,gCAAgC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAC;QAC/G,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACtG,MAAM,QAAQ,GAA0B;YACtC,IAAI,EAAE,WAAW;YACjB,MAAM;YACN,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YACpD,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK;SAC5B,CAAC;QACF,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,GAA2B,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACxE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAED,YAAY,CAAC,KAAyB;QACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjF,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,WAAW,CAAC,KAAyB;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClF,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,iBAAiB,CAAC,aAAqB,EAAE,SAAoC,QAAQ;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnD,CAAC;IAED;;oFAEgF;IAChF,eAAe,CAAC,aAAqB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS;gBAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,QAAsF;QAC1F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAEO,OAAO,CAAC,IAAY,EAAE,MAAiC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,cAAc,CAAC,MAA8B;QACnD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA0B,EAAE,IAAY;IACvE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa,EAAE,KAAa,EAAE,MAAM,GAAG,KAAK;IACjF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IACrD,OAAO,GAAG,wBAAwB,IAAI,KAAK,6CAA6C,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC9H,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAM,GAAG,KAAK;IACxD,OAAO,GAAG,wBAAwB,+CAA+C,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC9G,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/E,MAAM,cAAc,GAAG,GAAG,CAAC,qCAAqC,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC;IAC3F,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;QAClG,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACnC,CAAC,CAAC,cAAc,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gCAAgC,CAAC;IAClF,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtD,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAC1E,MAAM,gBAAgB,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;WACjD,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,mCAAmC;QAChE,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,CAAC,CAAC;IACN,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,CAAC,kCAAkC,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;QACrF,KAAK,EAAE,GAAG,CAAC,gCAAgC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QAC1E,KAAK,EAAE,GAAG,CAAC,iCAAiC,EAAE,IAAI,EAAE,IAAI,EAAE;QAC1D,SAAS,EAAE,GAAG,CAAC,qCAAqC,EAAE,IAAI,EAAE,IAAI,EAAE;QAClE,cAAc,EAAE,CAAC,GAAG,CAAC,2CAA2C,IAAI,EAAE,CAAC;aACpE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QAC5D,SAAS;QACT,YAAY;QACZ,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;eAC1C,CAAC,GAAG,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;QAClF,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAoE,EACpE,OAAqC,EAAE;IAEvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,2BAA2B,CAAC;IAChE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;IAC7C,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,WAAyB;YACpD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC/E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACzC,WAAW,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,8CAA8C,EAAE;oBACzF,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;oBAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;oBAC5E,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA0B,CAAC;gBACpF,MAAM,cAAc,GAAG,OAAO,EAAE,IAAI,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;oBACxF,CAAC,CAAC,OAAO,CAAC,gBAAgB;oBAC1B,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,cAAc;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBAE7E,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,mCAAmC,EAAE;oBAC/E,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,iCAAiC;wBACjD,aAAa,EAAE,UAAU,cAAc,EAAE;qBAC1C;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;oBAChE,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA0B,CAAC;gBACtF,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,QAAQ,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACrG,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC3C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,WAAW,CAAC,YAAY,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;gBAEnG,uEAAuE;gBACvE,uDAAuD;gBACvD,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;gBACnD,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,CAAC,eAAe;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC1G,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,gCAAgC,EAAE;oBAC5E,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,eAAe,EAAE;wBAC1C,cAAc,EAAE,iCAAiC;qBAClD;oBACD,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAA0B,CAAC;gBACtF,MAAM,MAAM,GAAG,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC;gBACvC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,QAAQ,EAAE,IAAI,KAAK,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnG,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,WAAW,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;AACtD,MAAM,CAAC,MAAM,2CAA2C,GAAG,EAAE,CAAC;AAC9D,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC;AACtD;;;gCAGgC;AAChC,MAAM,CAAC,MAAM,2CAA2C,GAAG,EAAE,CAAC;AAC9D;gFACgF;AAChF,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,CAAC;AAC3D,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAE5C,SAAS,oBAAoB,CAAC,KAAyB;IACrD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,wEAAwE;IACxE,2DAA2D;IAC3D,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAoB,EAAE,gBAAgB,GAAG,CAAC;IAC5E,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,mCAAmC,CAAC;QAC9E,CAAC,CAAC,CAAC,CAAC;IACN,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,aAAa,IAAI,SAAS,CAAC;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;SACxE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,oBAAoB,CAAC;SACzB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,OAAO,uBAAuB;IAClC,8EAA8E;IAC7D,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IACvC,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrE,gFAAgF;IAC/D,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,UAAU,CAAW;IAC9B,UAAU,GAAG,CAAC,CAAC;IACf,YAAY,GAAG,CAAC,CAAC;IACR,GAAG,CAAe;IAClB,QAAQ,CAAS;IACjB,iBAAiB,CAAS;IAC1B,aAAa,CAAS;IACtB,aAAa,CAAS;IACtB,cAAc,CAAS;IACvB,aAAa,CAAS;IACtB,eAAe,CAAS;IACjC,WAAW,CAAS;IACpB,MAAM,GAAG,CAAC,CAAC;IAEnB,YAAY,OAAuC,EAAE;QACnD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,+BAA+B,CAAC;QACjE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,2CAA2C,CAAC;QAC/F,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,oCAAoC,CAAC;QAChF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,IAAI,qCAAqC,CAAC,CAAC;QAC9F,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,IAAI,6BAA6B,CAAC,CAAC;QACtF,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,2CAA2C,EAAE,OAAO,CAAC,CAAC,CAAC;QACzH,IAAI,CAAC,UAAU,GAAG,IAAI,KAAK,CAAS,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAC;QAC7D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,EAAU;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,iEAAiE;QACjE,0EAA0E;QAC1E,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,eAAe;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;YAChC,uEAAuE;YACvE,+DAA+D;YAC/D,IAAI,KAAK;gBAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACjE,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM;YAAE,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,2DAA2D;IACnD,kBAAkB,CAAC,GAAW;QACpC,IAAI,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,MAAM,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QAClD,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED;;wCAEoC;IAC5B,QAAQ,CAAC,EAAU,EAAE,IAAc;QACzC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,+DAA+D;IAC/D,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED,0EAA0E;IAC1E,OAAO,CAAC,GAAW;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAI,GAAW,EAAE,KAAuB;QAG3C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAsB,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,mEAAmE;QACnE,iDAAiD;QACjD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED;6EACyE;IACzE,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnC,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;iBAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/C,IAAI,GAAG,IAAI,SAAS;gBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;IACzB,CAAC;IAED,cAAc,KAAa,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,aAAa,KAAa,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,cAAc,KAAa,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD;yEACqE;IACrE,UAAU,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;CAC7C;AAmBD,SAAS,WAAW,CAAC,GAAmB,EAAE,KAAa,EAAE,YAAoB;IAC3E,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,KAAc,EAAE,UAAkC,EAAE;IACrG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;QAC3B,iBAAiB,EAAE,aAAa;QAChC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,mBAAmB;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACzE,CAAC,CAAE,MAA6B,CAAC,IAAI;QACrC,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACjG,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAgC;IACtE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1F,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,SAAS;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YAAC,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,CAAC;QAAC,CAAC;QACpE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,CAAC;QAC1F,OAAO,IAAI,IAAI,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,YAAoB,EAAE,QAAQ,GAAG,GAAG;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChG,OAAO;;;;;;;YAOG,SAAS,aAAa,gBAAgB,aAAa,YAAY,sLAAsL,8BAA8B;;;;;;;;6BAQlQ,CAAC;AAC9B,CAAC;AAUD;;;;;GAKG;AACH,MAAM,uBAAwB,SAAQ,KAAK;IACpB;IAAwB;IAA7C,YAAqB,KAAa,EAAW,MAAe;QAC1D,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QAD7B,UAAK,GAAL,KAAK,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAS;QAE1D,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;mCACmC;AACnC,SAAS,eAAe,CAAC,MAAe;IACtC,OAAO,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAsC;IACpF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,uBAAuB,EAAE,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,YAAY,GAAG,GAAG,SAAS,WAAW,CAAC;IAC7C,MAAM,WAAW,GAAG,GAAG,SAAS,UAAU,CAAC;IAC3C,MAAM,UAAU,GAAG,GAAG,SAAS,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAC7D,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAC/D,CAAC;IAEF;6BACyB;IACzB,MAAM,cAAc,GAAG,CAAC,MAAe,EAAU,EAAE;QACjD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,CAAC,CAAC;IAEF,kDAAkD;IAClD,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,MAA0B,EAAQ,EAAE;QACvE,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,uBAAuB,CAAC,SAAS,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,YAAY,GAAG,KAAK,EAAE,OAAe,EAAE,IAAY,EAA8B,EAAE;QACvF,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sCAAsC;YACtC,8CAA8C;YAC9C,IAAI,CAAC;gBACH,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,2CAA2C,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;QACD,gEAAgE;QAChE,8CAA8C;QAC9C,2CAA2C;QAC3C,wBAAwB;QACxB,wDAAwD;QACxD,iCAAiC;QACjC,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAClC,IAAI,OAA2D,CAAC;QAChE,IAAI,CAAC;YACH,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QAC7D,CAAC;QACD,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC3F,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,GAAQ,EAAoB,EAAE;QAC7F,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY;eACvE,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,CAAC;QACjE,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClF,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;YAC9F,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,0BAA0B;gBAC1C,eAAe,EAAE,UAAU;gBAC3B,iBAAiB,EAAE,aAAa;gBAChC,wBAAwB,EAAE,SAAS;gBACnC,yBAAyB,EAAE,2OAA2O;aACvQ,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,GAAG,CAAC,GAAG,EAAE,CAAC;;gBAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC3D,qEAAqE;YACrE,yEAAyE;YACzE,yEAAyE;YACzE,4CAA4C;YAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACjG,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;gBACvC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;gBACzD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACtC,qEAAqE;YACrE,wEAAwE;YACxE,mEAAmE;YACnE,+DAA+D;YAC/D,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBACxE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,uEAAuE;YACvE,+DAA+D;YAC/D,sEAAsE;YACtE,mBAAmB;YACnB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,OAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wCAAwC;gBACxC,8CAA8C;gBAC9C,gCAAgC;gBAChC,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;oBAC7C,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,CAAC,KAAK,KAAK,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACtF,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBAC1D,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,kCAAkC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACvE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBACb,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,GAAG;aAChB,EAAE,EAAE,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACvG,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;YAC7E,oCAAoC;YACpC,6CAA6C;YAC7C,yBAAyB;YACzB,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC;gBACH,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,4CAA4C,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,2BAA2B,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC/E,CAAC"}

package/dist/dashboard/managed-spawn.d.ts

@@ -0,0 +1,36 @@
+import type { GlobalInstallPlan } from '../utils/global-install.js';
+export interface BotLifecycleSpawnResult {
+    ok: boolean;
+    message?: string;
+}
+/**
+ * Bring a freshly-onboarded bot online without a fleet-wide restart by spawning
+ * `botmux start-bot <appId> --json` (see cli.ts:ensureBotDaemonStarted). The new
+ * daemon is forked+supervised by pm2 (reparented off this process), self-registers
+ * and opens its Feishu WSClient, then publishes a descriptor the DaemonRegistry
+ * auto-discovers — so no dashboard reload is needed either. Runs `botmux` on the
+ * SAME host as the dashboard (shared pm2 home / bots.json — the documented
+ * dashboard↔daemon co-location assumption). Resolves best-effort; the caller
+ * falls back to the restart hint on failure.
+ */
+export declare function spawnStartBotLive(appId: string): Promise<BotLifecycleSpawnResult>;
+export declare function spawnStopBotLive(appId: string): Promise<BotLifecycleSpawnResult>;
+/**
+ * Run the ownership-aware npm/pnpm/Bun update for the manual-update flow WITHOUT blocking
+ * the event loop (async spawn, not execSync — the dashboard must keep serving
+ * during the ~10-30s install). Resolves on exit 0; rejects with the tail of
+ * stdout/stderr on a non-zero exit, spawn error, or 3-minute timeout. Args are
+ * a fixed literal — no shell interpolation of untrusted input.
+ */
+export declare function runGlobalInstall(plan: GlobalInstallPlan): Promise<void>;
+/**
+ * Run one local-dev update step (`git pull --ff-only` / `pnpm build`) in `dir`,
+ * capturing output so a failure surfaces an actionable tail rather than a bare
+ * exit code. Like the other host children this runs on `redactChildEnv` — the
+ * git/pnpm child (and any lifecycle/hook it spawns) must not inherit the
+ * dashboard's Feishu H5 credentials; the denylist still keeps PATH/HOME/etc. so
+ * the tools resolve normally. 300s timeout (a cold `pnpm build` is slower than a
+ * package install). No shell interpolation of untrusted input.
+ */
+export declare function runLocalDevStep(dir: string, command: string, args: string[]): Promise<void>;
+//# sourceMappingURL=managed-spawn.d.ts.map

package/dist/dashboard/managed-spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-spawn.d.ts","sourceRoot":"","sources":["../../src/dashboard/managed-spawn.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyDD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEjF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEhF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB3F"}

package/dist/dashboard/managed-spawn.js

@@ -0,0 +1,169 @@
+// Child processes the dashboard forks on the HOST: `botmux start-bot/stop-bot`
+// (onboarding brings a bot online without a fleet restart), the global
+// npm/pnpm/bun install behind the update button, and — for a local-dev
+// checkout — the `git pull` / `pnpm build` steps behind the local update button.
+//
+// One shared rule, and the reason this lives in its own module: every one of
+// them runs with `redactChildEnv(process.env)`, never raw process.env. The
+// dashboard holds the Feishu H5 login family by design (index-dashboard.ts is
+// the only channel for it, APP_SECRET included) plus whatever the host
+// environment carries; a global install additionally runs arbitrary npm
+// lifecycle scripts, and `start-bot` hands its env to pm2, which persists it
+// into the managed app's metadata and dump.pm2. Neither has any consumer for
+// those credentials.
+//
+// Extracted from dashboard.ts so the env each child actually receives can be
+// asserted in a test — dashboard.ts is a side-effect module (importing it binds
+// ports and starts probes), so nothing inside it is reachable from a unit test.
+import { spawn } from 'node:child_process';
+import { botmuxCliEntry } from '../utils/install-info.js';
+import { globalInstallUpdateCwd } from '../core/maintenance.js';
+import { redactChildEnv } from '../utils/child-env.js';
+/** `botmux <verb>-bot <appId> --json` with a redacted env. */
+function spawnBotLifecycleCli(verb, appId, timeoutLabel, okMessage) {
+    return new Promise((resolve) => {
+        let out = '';
+        let err = '';
+        let settled = false;
+        const done = (r) => { if (!settled) {
+            settled = true;
+            resolve(r);
+        } };
+        try {
+            const child = spawn(process.execPath, [botmuxCliEntry(), verb, appId, '--json'], {
+                stdio: ['ignore', 'pipe', 'pipe'],
+                // NOT process.env: this child re-enters the botmux CLI, which invokes
+                // pm2 — pm2 bakes the caller env into the managed app and into
+                // dump.pm2, so a raw copy would persist the dashboard's H5 APP_SECRET
+                // on disk and hand it to every bot daemon. The fresh daemon resolves
+                // its own settings from ~/.botmux/.env (index-daemon.ts) and bots.json.
+                env: redactChildEnv(process.env),
+                // Run from HOME, not the dashboard's cwd (pm2 `cwd: PKG_ROOT`): a global
+                // package update replaces that dir, so a still-running dashboard would spawn
+                // start-bot in a deleted directory (uv_cwd/ENOENT). See globalInstallUpdateCwd.
+                cwd: globalInstallUpdateCwd(),
+            });
+            const timer = setTimeout(() => {
+                try {
+                    child.kill('SIGKILL');
+                }
+                catch { /* already gone */ }
+                done({ ok: false, message: timeoutLabel });
+            }, 30_000);
+            timer.unref?.();
+            child.stdout?.on('data', (d) => { out += String(d); });
+            child.stderr?.on('data', (d) => { err += String(d); });
+            child.on('error', (e) => {
+                clearTimeout(timer);
+                done({ ok: false, message: e instanceof Error ? e.message : String(e) });
+            });
+            child.on('exit', (code) => {
+                clearTimeout(timer);
+                // `<verb>-bot --json` prints a single result object; prefer its own
+                // message/processName over the raw exit code.
+                let parsed;
+                try {
+                    parsed = JSON.parse(out.trim());
+                }
+                catch { /* non-JSON → fall through */ }
+                if (code === 0) {
+                    done({ ok: true, message: parsed?.processName ? okMessage(parsed.processName) : undefined });
+                }
+                else {
+                    done({ ok: false, message: parsed?.message || err.trim() || `${verb} 退出码 ${code}` });
+                }
+            });
+        }
+        catch (e) {
+            done({ ok: false, message: e instanceof Error ? e.message : String(e) });
+        }
+    });
+}
+/**
+ * Bring a freshly-onboarded bot online without a fleet-wide restart by spawning
+ * `botmux start-bot <appId> --json` (see cli.ts:ensureBotDaemonStarted). The new
+ * daemon is forked+supervised by pm2 (reparented off this process), self-registers
+ * and opens its Feishu WSClient, then publishes a descriptor the DaemonRegistry
+ * auto-discovers — so no dashboard reload is needed either. Runs `botmux` on the
+ * SAME host as the dashboard (shared pm2 home / bots.json — the documented
+ * dashboard↔daemon co-location assumption). Resolves best-effort; the caller
+ * falls back to the restart hint on failure.
+ */
+export function spawnStartBotLive(appId) {
+    return spawnBotLifecycleCli('start-bot', appId, 'start-bot 超时（30s）', name => `${name} 已上线`);
+}
+export function spawnStopBotLive(appId) {
+    return spawnBotLifecycleCli('stop-bot', appId, 'stop-bot 超时（30s）', name => `${name} 已停止`);
+}
+/**
+ * Run the ownership-aware npm/pnpm/Bun update for the manual-update flow WITHOUT blocking
+ * the event loop (async spawn, not execSync — the dashboard must keep serving
+ * during the ~10-30s install). Resolves on exit 0; rejects with the tail of
+ * stdout/stderr on a non-zero exit, spawn error, or 3-minute timeout. Args are
+ * a fixed literal — no shell interpolation of untrusted input.
+ */
+export function runGlobalInstall(plan) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(plan.command, plan.args, {
+            cwd: globalInstallUpdateCwd(),
+            // A package install runs arbitrary lifecycle scripts (preinstall/postinstall
+            // of botmux AND of every dependency) with this env. `plan.env` still wins —
+            // it carries the registry/ownership knobs the plan resolved.
+            env: { ...redactChildEnv(process.env), ...plan.env },
+            stdio: ['ignore', 'pipe', 'pipe'],
+            shell: process.platform === 'win32', // resolve npm.cmd / pnpm.cmd / bun.exe
+        });
+        let tail = '';
+        const capture = (d) => { tail = (tail + d.toString()).slice(-2000); };
+        child.stdout?.on('data', capture);
+        child.stderr?.on('data', capture);
+        const timer = setTimeout(() => {
+            child.kill('SIGKILL');
+            reject(new Error(`${plan.manager} install timed out after 180s`));
+        }, 180_000);
+        child.on('error', (e) => { clearTimeout(timer); reject(e); });
+        child.on('exit', (code) => {
+            clearTimeout(timer);
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error(`${plan.manager} exited ${code}: ${tail.trim().slice(-500)}`));
+        });
+    });
+}
+/**
+ * Run one local-dev update step (`git pull --ff-only` / `pnpm build`) in `dir`,
+ * capturing output so a failure surfaces an actionable tail rather than a bare
+ * exit code. Like the other host children this runs on `redactChildEnv` — the
+ * git/pnpm child (and any lifecycle/hook it spawns) must not inherit the
+ * dashboard's Feishu H5 credentials; the denylist still keeps PATH/HOME/etc. so
+ * the tools resolve normally. 300s timeout (a cold `pnpm build` is slower than a
+ * package install). No shell interpolation of untrusted input.
+ */
+export function runLocalDevStep(dir, command, args) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            cwd: dir,
+            env: redactChildEnv(process.env),
+            stdio: ['ignore', 'pipe', 'pipe'],
+            shell: process.platform === 'win32', // resolve git / pnpm .cmd shims on win32
+        });
+        let tail = '';
+        const capture = (d) => { tail = (tail + d.toString()).slice(-4000); };
+        child.stdout?.on('data', capture);
+        child.stderr?.on('data', capture);
+        const timer = setTimeout(() => {
+            child.kill('SIGKILL');
+            reject(new Error(`\`${command} ${args.join(' ')}\` timed out after 300s`));
+        }, 300_000);
+        child.on('error', (e) => { clearTimeout(timer); reject(e); });
+        child.on('exit', (code) => {
+            clearTimeout(timer);
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error(`\`${command} ${args.join(' ')}\` exited ${code}: ${tail.trim().slice(-800)}`));
+        });
+    });
+}
+//# sourceMappingURL=managed-spawn.js.map

package/dist/dashboard/managed-spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-spawn.js","sourceRoot":"","sources":["../../src/dashboard/managed-spawn.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,uEAAuE;AACvE,uEAAuE;AACvE,iFAAiF;AACjF,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,uEAAuE;AACvE,wEAAwE;AACxE,6EAA6E;AAC7E,6EAA6E;AAC7E,qBAAqB;AACrB,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAQvD,8DAA8D;AAC9D,SAAS,oBAAoB,CAC3B,IAA8B,EAC9B,KAAa,EACb,YAAoB,EACpB,SAA0C;IAE1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,CAA0B,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE;gBAC/E,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,sEAAsE;gBACtE,+DAA+D;gBAC/D,sEAAsE;gBACtE,qEAAqE;gBACrE,wEAAwE;gBACxE,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC;gBAChC,yEAAyE;gBACzE,6EAA6E;gBAC7E,gFAAgF;gBAChF,GAAG,EAAE,sBAAsB,EAAE;aAC9B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC3D,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7C,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,oEAAoE;gBACpE,8CAA8C;gBAC9C,IAAI,MAAW,CAAC;gBAChB,IAAI,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;gBAChF,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC/F,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,oBAAoB,CAAC,WAAW,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,oBAAoB,CAAC,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,sBAAsB,EAAE;YAC7B,6EAA6E;YAC7E,4EAA4E;YAC5E,6DAA6D;YAC7D,GAAG,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YACpD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,uCAAuC;SAC7E,CAAC,CAAC;QACH,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,CAAS,EAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,+BAA+B,CAAC,CAAC,CAAC;QACpE,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,WAAW,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,OAAe,EAAE,IAAc;IAC1E,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC;YAChC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,yCAAyC;SAC/E,CAAC,CAAC;QACH,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,CAAS,EAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC7E,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/dashboard/preview-content-capability.d.ts

@@ -0,0 +1,41 @@
+/** Long enough for an ordinary working session, short enough that a copied
+ *  preview URL dies on its own. The guard shell refreshes itself shortly
+ *  before this elapses so a long-lived pane never silently breaks. */
+export declare const PREVIEW_CONTENT_CAPABILITY_TTL_MS: number;
+/** Characters a capability may use inside a URL path segment. */
+export declare const PREVIEW_CONTENT_CAPABILITY_PATTERN: RegExp;
+export interface PreviewContentCapabilityClaims {
+    version: 1;
+    purpose: 'preview-content';
+    sessionId: string;
+    userId: string;
+    authSessionId: string;
+    capabilityId: string;
+    issuedAt: number;
+    expiresAt: number;
+}
+export interface PreviewContentCapabilityIdentity {
+    userId: string;
+    authSessionId: string;
+    /** Authentication expiry of the minting identity; the capability never
+     *  outlives the session that created it. */
+    expiresAt: number;
+}
+export type PreviewContentCapabilityVerification = {
+    ok: true;
+    claims: PreviewContentCapabilityClaims;
+} | {
+    ok: false;
+    reason: 'missing' | 'malformed' | 'invalid' | 'expired' | 'session_mismatch';
+};
+/**
+ * Mint the capability for one session. Returns null (never a fallback token)
+ * for out-of-shape identities or an already-expired authentication, so the
+ * caller fails closed instead of serving an unauthenticated content path.
+ */
+export declare function mintPreviewContentCapability(secret: string, sessionId: string, identity: PreviewContentCapabilityIdentity, now?: number): {
+    token: string;
+    expiresAt: number;
+} | null;
+export declare function verifyPreviewContentCapability(secret: string, token: string | undefined, expectedSessionId: string, now?: number): PreviewContentCapabilityVerification;
+//# sourceMappingURL=preview-content-capability.d.ts.map

package/dist/dashboard/preview-content-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-content-capability.d.ts","sourceRoot":"","sources":["../../src/dashboard/preview-content-capability.ts"],"names":[],"mappings":"AAgCA;;sEAEsE;AACtE,eAAO,MAAM,iCAAiC,QAAkB,CAAC;AAEjE,iEAAiE;AACjE,eAAO,MAAM,kCAAkC,QAA6B,CAAC;AAE7E,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,iBAAiB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB;gDAC4C;IAC5C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,oCAAoC,GAC5C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,8BAA8B,CAAA;CAAE,GACpD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,kBAAkB,CAAC;CAC9E,CAAC;AA4BN;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,gCAAgC,EAC1C,GAAG,SAAa,GACf;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAoB7C;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,iBAAiB,EAAE,MAAM,EACzB,GAAG,SAAa,GACf,oCAAoC,CA6BtC"}

package/dist/dashboard/preview-content-capability.js

@@ -0,0 +1,127 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+/**
+ * Path-scoped capability that authorises ONE session's preview content stream.
+ *
+ * Why this exists at all: the preview iframe is now an opaque-origin sandbox
+ * (no `allow-same-origin`), which is what severs "agent HTML runs on the
+ * dashboard origin → management API → debug terminal → host bash". The price
+ * of an opaque origin is that the framed document's own subresource and
+ * WebSocket requests are *cross-site* to the browser, so the dashboard cookie
+ * is no longer attached to them — the dev server's own JS/CSS/WS would 401.
+ *
+ * Accepting `Origin: null` as proof of "this came from our sandboxed frame"
+ * is NOT an option: any page anywhere (and plain `curl -H 'Origin: null'`)
+ * can produce it, which would turn the preview proxy into an unauthenticated
+ * SSRF hop into loopback dev servers. So the guard shell — which IS cookie
+ * authenticated — mints this capability and puts it in the iframe's path.
+ * Relative subresources and WebSockets inherit the path automatically, and no
+ * ambient authority is involved.
+ *
+ * Scope: this capability proves nothing except "may proxy to the registered
+ * preview target of session X". It is never accepted on /api, /events, the
+ * terminal proxy or the debug terminal, and it carries no dashboard token.
+ * It is bound to the minting auth session so logout / token rotation revokes
+ * it centrally (see `isAuthSessionLive` in the proxy options), and expiry
+ * bounds a leaked URL even without revocation.
+ */
+const TOKEN_PREFIX = 'bmxpv1';
+const CAPABILITY_DOMAIN = 'botmux-preview-content-capability-v1\0';
+const MAX_CAPABILITY_BYTES = 4_096;
+/** Long enough for an ordinary working session, short enough that a copied
+ *  preview URL dies on its own. The guard shell refreshes itself shortly
+ *  before this elapses so a long-lived pane never silently breaks. */
+export const PREVIEW_CONTENT_CAPABILITY_TTL_MS = 2 * 60 * 60_000;
+/** Characters a capability may use inside a URL path segment. */
+export const PREVIEW_CONTENT_CAPABILITY_PATTERN = /^[A-Za-z0-9_.-]{1,4096}$/;
+function boundedIdentity(value) {
+    return value.length > 0 && value.length <= 512 && !/[\r\n\0]/.test(value);
+}
+function exactCapabilityClaims(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const record = value;
+    const keys = Object.keys(record).sort();
+    const expected = [
+        'authSessionId', 'capabilityId', 'expiresAt', 'issuedAt', 'purpose', 'sessionId', 'userId', 'version',
+    ];
+    if (keys.length !== expected.length || keys.some((key, index) => key !== expected[index]))
+        return false;
+    return record.version === 1
+        && record.purpose === 'preview-content'
+        && typeof record.sessionId === 'string' && boundedIdentity(record.sessionId)
+        && typeof record.userId === 'string' && boundedIdentity(record.userId)
+        && typeof record.authSessionId === 'string' && boundedIdentity(record.authSessionId)
+        && typeof record.capabilityId === 'string' && /^[A-Za-z0-9_-]{16,128}$/.test(record.capabilityId)
+        && Number.isSafeInteger(record.issuedAt) && record.issuedAt >= 0
+        && Number.isSafeInteger(record.expiresAt) && record.expiresAt > record.issuedAt;
+}
+function signature(secret, payload) {
+    return createHmac('sha256', secret).update(CAPABILITY_DOMAIN).update(payload).digest();
+}
+/**
+ * Mint the capability for one session. Returns null (never a fallback token)
+ * for out-of-shape identities or an already-expired authentication, so the
+ * caller fails closed instead of serving an unauthenticated content path.
+ */
+export function mintPreviewContentCapability(secret, sessionId, identity, now = Date.now()) {
+    if (!secret)
+        return null;
+    const expiresAt = Math.min(identity.expiresAt, now + PREVIEW_CONTENT_CAPABILITY_TTL_MS);
+    if (!Number.isSafeInteger(expiresAt) || expiresAt <= now)
+        return null;
+    const claims = {
+        version: 1,
+        purpose: 'preview-content',
+        sessionId,
+        userId: identity.userId,
+        authSessionId: identity.authSessionId,
+        capabilityId: randomBytes(18).toString('base64url'),
+        issuedAt: now,
+        expiresAt,
+    };
+    if (!exactCapabilityClaims(claims))
+        return null;
+    const payload = Buffer.from(JSON.stringify(claims), 'utf8').toString('base64url');
+    const token = `${TOKEN_PREFIX}.${payload}.${signature(secret, payload).toString('base64url')}`;
+    // A capability that cannot survive a URL path round-trip must not be issued.
+    if (!PREVIEW_CONTENT_CAPABILITY_PATTERN.test(token))
+        return null;
+    return { token, expiresAt };
+}
+export function verifyPreviewContentCapability(secret, token, expectedSessionId, now = Date.now()) {
+    if (typeof token !== 'string' || !token)
+        return { ok: false, reason: 'missing' };
+    if (!secret || token.length > MAX_CAPABILITY_BYTES)
+        return { ok: false, reason: 'malformed' };
+    const parts = token.split('.');
+    if (parts.length !== 3 || parts[0] !== TOKEN_PREFIX
+        || !/^[A-Za-z0-9_-]+$/.test(parts[1]) || !/^[A-Za-z0-9_-]+$/.test(parts[2])) {
+        return { ok: false, reason: 'malformed' };
+    }
+    const expected = signature(secret, parts[1]);
+    const provided = Buffer.from(parts[2], 'base64url');
+    if (provided.length !== expected.length || !timingSafeEqual(provided, expected)) {
+        return { ok: false, reason: 'invalid' };
+    }
+    let parsed;
+    try {
+        const json = Buffer.from(parts[1], 'base64url').toString('utf8');
+        if (Buffer.byteLength(json) > MAX_CAPABILITY_BYTES)
+            return { ok: false, reason: 'malformed' };
+        parsed = JSON.parse(json);
+    }
+    catch {
+        return { ok: false, reason: 'malformed' };
+    }
+    if (!exactCapabilityClaims(parsed))
+        return { ok: false, reason: 'malformed' };
+    // Session binding is checked before expiry so a capability for another
+    // session never reads as "merely stale".
+    if (parsed.sessionId !== expectedSessionId)
+        return { ok: false, reason: 'session_mismatch' };
+    if (!Number.isFinite(now) || now < parsed.issuedAt - 30_000 || now >= parsed.expiresAt) {
+        return { ok: false, reason: 'expired' };
+    }
+    return { ok: true, claims: parsed };
+}
+//# sourceMappingURL=preview-content-capability.js.map

package/dist/dashboard/preview-content-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-content-capability.js","sourceRoot":"","sources":["../../src/dashboard/preview-content-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,iBAAiB,GAAG,wCAAwC,CAAC;AACnE,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC;;sEAEsE;AACtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;AAEjE,iEAAiE;AACjE,MAAM,CAAC,MAAM,kCAAkC,GAAG,0BAA0B,CAAC;AA4B7E,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG;QACf,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS;KACtG,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxG,OAAO,MAAM,CAAC,OAAO,KAAK,CAAC;WACtB,MAAM,CAAC,OAAO,KAAK,iBAAiB;WACpC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC;WACzE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC;WACnE,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,CAAC,aAAa,CAAC;WACjF,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;WAC9F,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAK,MAAM,CAAC,QAAmB,IAAI,CAAC;WACzE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,IAAK,MAAM,CAAC,SAAoB,GAAI,MAAM,CAAC,QAAmB,CAAC;AAC5G,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,OAAe;IAChD,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAc,EACd,SAAiB,EACjB,QAA0C,EAC1C,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,GAAG,iCAAiC,CAAC,CAAC;IACxF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,MAAM,GAAmC;QAC7C,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,iBAAiB;QAC1B,SAAS;QACT,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnD,QAAQ,EAAE,GAAG;QACb,SAAS;KACV,CAAC;IACF,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,YAAY,IAAI,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IAC/F,6EAA6E;IAC7E,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAAc,EACd,KAAyB,EACzB,iBAAyB,EACzB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjF,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY;WAC9C,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,oBAAoB;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAC9F,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9E,uEAAuE;IACvE,yCAAyC;IACzC,IAAI,MAAM,CAAC,SAAS,KAAK,iBAAiB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC"}

package/dist/dashboard/preview-contract.d.ts

@@ -0,0 +1,85 @@
+import { type SessionPreviewDescriptor, type SessionPreviewTarget } from '../core/session-preview.js';
+/** Internal daemon rows carry the literal loopback target so the central
+ * dashboard can proxy it. Browser rows never do: they receive only a
+ * same-origin path plus a timestamp.
+ *
+ * Riff 矩阵：远端 sandbox 会话在 daemon 的 loopback 上不可能有 Web 服务，注册路由
+ * 已经拒绝它们；这里再拦一道，让任何来源（历史行、切后端前留下的行）都不会给
+ * 浏览器一个点进去必然失败的预览入口。 */
+export declare function projectSessionPreviewForBrowser(session: unknown): unknown;
+export declare function projectSessionPreviewsForBrowser(sessions: unknown[]): unknown[];
+/** Projection for daemon `GET /api/sessions/:id` envelopes. Keep this beside
+ * the list/SSE projectors so every browser delivery path shares one rule. */
+export declare function projectSessionDetailForBrowser(body: unknown): unknown;
+/** Apply the identical projection to the central SSE stream. A future clear
+ * patch maps to `preview: null`, ensuring browser stores discard stale state. */
+export declare function projectSessionPreviewEventForBrowser(type: string, body: unknown): unknown;
+export type SessionPreviewResolution = {
+    ok: true;
+    target: SessionPreviewTarget;
+} | {
+    ok: false;
+    status: 403 | 404 | 409 | 501;
+    error: 'unknown_session' | 'session_owner_mismatch' | 'session_not_active' | 'preview_not_registered' | 'remote_host_forbidden' | 'invalid_preview_target'
+    /** Riff 等远端 backend：daemon loopback 天然不可达，明确不支持而非「不可达」。 */
+     | 'preview_unsupported'
+    /** P1-12：端口已经不由注册时那个进程持有，路由失效。 */
+     | 'preview_target_stale';
+};
+/** Resolve an aggregator row under positive session + daemon ownership proof.
+ * The requested URL never supplies a host or port; both come solely from this
+ * exact owned row and are revalidated as literal loopback data. */
+export declare function resolveSessionPreviewFromRow(input: {
+    row: unknown;
+    sessionId: string;
+    ownerLarkAppId: string | undefined;
+}): SessionPreviewResolution;
+/**
+ * 中央 Dashboard 每一跳预览请求的完整判定。顺序即安全次序，任何一步失败都不代理：
+ *
+ *   会话归属 → 会话仍活着 → backend 支持预览 → 目标本身合法 → 拥有它的 daemon 在线
+ *   → **端口此刻仍由注册时那个进程持有**（P1-12）。
+ *
+ * 最后一条是每次落地前都要重跑的：注册时的一次 TCP connect 只证明当时有人在监听，
+ * 而 dev server 退出后端口号会被内核回收，下一个抢到它的本机进程就继承了这条已登录
+ * 用户可达的同源代理路由。判定失效时同步回 `preview_target_stale`，并通过
+ * `onStaleTarget` 触发收口（断掉既有预览长连接、收回交互租约、让 daemon 清 target 并
+ * 广播 `preview: null`）。
+ */
+export declare function resolveSessionPreviewForProxy(input: {
+    row: unknown;
+    sessionId: string;
+    ownerLarkAppId: string | undefined;
+    daemonOnline: boolean;
+    isTargetOwned: (target: SessionPreviewTarget) => boolean;
+    /** P1-3：把判定失效的**那一个** target 一起交出去，收口方据此只作废这一次注册
+     *  （见 `takeSessionPreviewTarget` 的 `expectedRegisteredAt`）。 */
+    onStaleTarget?: (sessionId: string, staleTarget: SessionPreviewTarget) => void;
+}): SessionPreviewResolution | {
+    ok: false;
+    status: 503;
+    error: 'daemon_offline';
+};
+export declare function previewDescriptorFromRow(row: unknown): SessionPreviewDescriptor | undefined;
+/**
+ * P1-1：daemon 生命周期事件 → 「这个会话的预览长连接要不要收口」。
+ *
+ * 原来只认两件事：`session.exited`，以及带 `previewTarget` 的 `session.update`。
+ * 漏掉的是 `session.spawned`——daemon 的 `/api/events` **每次**被连上都会把全部会话
+ * 重放成 spawned（SSE attach 的确定性重放），而 daemon 重启期间广播的
+ * `preview: null` 是丢的（事件总线没有 replay buffer），重连之后只以 spawned 形式
+ * 补齐。于是「目标已经没了，浏览器那条流还在流」这一支完全不在收口范围内。
+ *
+ * 但 spawned 不能无条件收口：aggregator 在通知监听器**之前**就把整行覆盖掉了，
+ * 每次 SSE 重连都会重放全部会话，无条件 teardown 等于每次重连误杀全部预览长连接。
+ * 所以 dashboard 侧自记一份「上次见过的目标指纹」，只有指纹**确实变了**才收口；
+ * 第一次见到某个会话不算变（那是重放/新建，不是换靶）。
+ *
+ * `lastSeenFingerprints` 由调用方持有并在此原地更新——收口判据和记忆必须是同一个
+ * 动作，分开写迟早会漏更新一条分支。
+ */
+export declare function previewTeardownForDaemonEvent(event: {
+    type: string;
+    body: unknown;
+}, lastSeenFingerprints: Map<string, string>): string | undefined;
+//# sourceMappingURL=preview-contract.d.ts.map

package/dist/dashboard/preview-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-contract.d.ts","sourceRoot":"","sources":["../../src/dashboard/preview-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAC1B,MAAM,4BAA4B,CAAC;AAEpC;;;;;;wBAMwB;AACxB,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAazE;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAG/E;AAED;6EAC6E;AAC7E,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAKrE;AAED;iFACiF;AACjF,wBAAgB,oCAAoC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CA+BzF;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GAC1C;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC9B,KAAK,EAAE,iBAAiB,GAAG,wBAAwB,GAAG,oBAAoB,GACtE,wBAAwB,GAAG,uBAAuB,GAAG,wBAAwB;IAC/E,2DAA2D;OACzD,qBAAqB;IACvB,kCAAkC;OAChC,sBAAsB,CAAC;CAC5B,CAAC;AAEN;;mEAEmE;AACnE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,GAAG,EAAE,OAAO,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,GAAG,wBAAwB,CAiC3B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,GAAG,EAAE,OAAO,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,OAAO,CAAC;IACzD;mEAC+D;IAC/D,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAChF,GAAG,wBAAwB,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,CAejF;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,wBAAwB,GAAG,SAAS,CAM3F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,EACtC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACxC,MAAM,GAAG,SAAS,CAgCpB"}