cc-lark 0.1.1

package/dist/core/lark-client.js

@@ -0,0 +1,315 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * Feishu / Lark SDK client management for MCP Server.
+ *
+ * Provides `LarkClient` — a unified manager for Lark SDK client instances,
+ * bot identity probing, and token management.
+ *
+ * Adapted from openclaw-lark for MCP Server architecture.
+ * - Removed OpenClaw runtime dependencies
+ * - Simplified singleton pattern for MCP Server use case
+ * - Works standalone with environment variables
+ */
+/* eslint-disable @typescript-eslint/no-explicit-any */
+import * as Lark from '@larksuiteoapi/node-sdk';
+import { loadAndValidateConfig, validateConfig } from './config.js';
+import { logger } from '../utils/logger.js';
+const log = logger('lark-client');
+// ---------------------------------------------------------------------------
+// Brand → SDK domain
+// ---------------------------------------------------------------------------
+const BRAND_TO_DOMAIN = {
+    feishu: Lark.Domain.Feishu,
+    lark: Lark.Domain.Lark,
+};
+/** Map a `LarkBrand` to the SDK `domain` parameter. */
+function resolveBrand(brand) {
+    return BRAND_TO_DOMAIN[brand ?? 'feishu'] ?? brand.replace(/\/+$/, '');
+}
+// ---------------------------------------------------------------------------
+// User-Agent setup
+// ---------------------------------------------------------------------------
+const GLOBAL_LARK_USER_AGENT_KEY = 'LARK_USER_AGENT';
+const USER_AGENT = 'cc-lark/0.1.0';
+function installGlobalUserAgent() {
+    // node-sdk built-in interceptor reads global.LARK_USER_AGENT and sets User-Agent
+    globalThis[GLOBAL_LARK_USER_AGENT_KEY] = USER_AGENT;
+}
+// Install User-Agent on module load
+installGlobalUserAgent();
+// Set up HTTP interceptor to add User-Agent header
+Lark.defaultHttpInstance.interceptors.request.handlers = [];
+Lark.defaultHttpInstance.interceptors.request.use((req) => {
+    if (req.headers) {
+        req.headers['User-Agent'] = USER_AGENT;
+    }
+    return req;
+}, undefined, { synchronous: true });
+// ---------------------------------------------------------------------------
+// LarkClient
+// ---------------------------------------------------------------------------
+/**
+ * Lark SDK client wrapper for MCP Server.
+ *
+ * Provides:
+ * - Lazy SDK client initialization
+ * - Bot identity probing and caching
+ * - Singleton pattern for global access
+ */
+export class LarkClient {
+    _config;
+    _sdk = null;
+    _botOpenId;
+    _botName;
+    _lastProbeResult = null;
+    _lastProbeAt = 0;
+    // ---- Singleton instance ---------------------------------------------------
+    static _instance = null;
+    /**
+     * Get the singleton LarkClient instance.
+     * Creates one from environment variables if not already created.
+     */
+    static getInstance() {
+        if (!LarkClient._instance) {
+            const config = loadAndValidateConfig();
+            LarkClient._instance = new LarkClient(config);
+        }
+        return LarkClient._instance;
+    }
+    /**
+     * Create a new LarkClient from environment variables.
+     * This will replace the singleton instance.
+     */
+    static fromEnv() {
+        const config = loadAndValidateConfig();
+        const instance = new LarkClient(config);
+        LarkClient._instance = instance;
+        return instance;
+    }
+    /**
+     * Create a LarkClient from explicit credentials.
+     * This replaces the singleton instance.
+     */
+    static fromCredentials(credentials) {
+        const config = {
+            appId: credentials.appId ?? '',
+            appSecret: credentials.appSecret ?? '',
+            brand: credentials.brand ?? 'feishu',
+            encryptKey: credentials.encryptKey,
+            verificationToken: credentials.verificationToken,
+        };
+        const validation = validateConfig(config);
+        if (!validation.valid) {
+            throw new Error(`Invalid credentials: ${validation.errors.join(', ')}`);
+        }
+        const instance = new LarkClient(config);
+        LarkClient._instance = instance;
+        return instance;
+    }
+    /**
+     * Reset the singleton instance.
+     * Useful for testing or when credentials change.
+     */
+    static resetInstance() {
+        if (LarkClient._instance) {
+            LarkClient._instance.dispose();
+            LarkClient._instance = null;
+        }
+    }
+    // --------------------------------------------------------------------------
+    /**
+     * Create a new LarkClient instance.
+     *
+     * @param config - Feishu configuration
+     */
+    constructor(config) {
+        this._config = config;
+        log.debug('LarkClient created', { appId: config.appId, brand: config.brand });
+    }
+    /** The configuration used by this client. */
+    get config() {
+        return this._config;
+    }
+    /** The App ID for this client. */
+    get appId() {
+        return this._config.appId;
+    }
+    /** The brand (feishu/lark) for this client. */
+    get brand() {
+        return this._config.brand ?? 'feishu';
+    }
+    // ---- SDK client (lazy) ---------------------------------------------------
+    /**
+     * Get the Lark SDK client instance.
+     * Lazily creates the client on first access.
+     */
+    get sdk() {
+        if (!this._sdk) {
+            const { appId, appSecret } = this.requireCredentials();
+            this._sdk = new Lark.Client({
+                appId,
+                appSecret,
+                appType: Lark.AppType.SelfBuild,
+                domain: resolveBrand(this._config.brand),
+            });
+            log.debug('SDK client created', { appId, brand: this._config.brand });
+        }
+        return this._sdk;
+    }
+    // ---- Bot identity ---------------------------------------------------------
+    /**
+     * Probe bot identity via the `bot/v3/info` API.
+     * Results are cached on the instance for subsequent access via
+     * `botOpenId` / `botName`.
+     *
+     * @param opts - Options including maxAgeMs for cache validity
+     * @returns Probe result with bot info or error
+     */
+    async probe(opts) {
+        const maxAge = opts?.maxAgeMs ?? 0;
+        if (maxAge > 0 && this._lastProbeResult && Date.now() - this._lastProbeAt < maxAge) {
+            return this._lastProbeResult;
+        }
+        if (!this._config.appId || !this._config.appSecret) {
+            return { ok: false, error: 'missing credentials (appId, appSecret)' };
+        }
+        try {
+            log.debug('Probing bot identity', { appId: this._config.appId });
+            const res = await this.sdk.request({
+                method: 'GET',
+                url: '/open-apis/bot/v3/info',
+                data: {},
+            });
+            if (res.code !== 0) {
+                const result = {
+                    ok: false,
+                    appId: this._config.appId,
+                    error: `API error: ${res.msg || `code ${res.code}`}`,
+                };
+                this._lastProbeResult = result;
+                this._lastProbeAt = Date.now();
+                log.warn('Bot probe failed', { code: res.code, msg: res.msg });
+                return result;
+            }
+            const bot = res.bot || res.data?.bot;
+            this._botOpenId = bot?.open_id;
+            this._botName = bot?.bot_name;
+            const result = {
+                ok: true,
+                appId: this._config.appId,
+                botName: this._botName,
+                botOpenId: this._botOpenId,
+            };
+            this._lastProbeResult = result;
+            this._lastProbeAt = Date.now();
+            log.info('Bot identity probed', { botName: this._botName, botOpenId: this._botOpenId });
+            return result;
+        }
+        catch (err) {
+            const result = {
+                ok: false,
+                appId: this._config.appId,
+                error: err instanceof Error ? err.message : String(err),
+            };
+            this._lastProbeResult = result;
+            this._lastProbeAt = Date.now();
+            log.error('Bot probe error', { error: result.error });
+            return result;
+        }
+    }
+    /** Cached bot open_id (available after `probe()`). */
+    get botOpenId() {
+        return this._botOpenId;
+    }
+    /** Cached bot name (available after `probe()`). */
+    get botName() {
+        return this._botName;
+    }
+    /** Last probe result (cached). */
+    get lastProbeResult() {
+        return this._lastProbeResult;
+    }
+    // ---- Token management ----------------------------------------------------
+    /**
+     * Get tenant access token.
+     * This is primarily for debugging - the SDK handles tokens automatically.
+     */
+    async getTenantAccessToken() {
+        try {
+            const res = await this.sdk.request({
+                method: 'POST',
+                url: '/open-apis/auth/v3/tenant_access_token/internal',
+                data: {
+                    app_id: this._config.appId,
+                    app_secret: this._config.appSecret,
+                },
+            });
+            if (res.code !== 0) {
+                log.warn('Failed to get tenant access token', { code: res.code, msg: res.msg });
+                return null;
+            }
+            return res.tenant_access_token ?? null;
+        }
+        catch (err) {
+            log.error('Error getting tenant access token', { error: err });
+            return null;
+        }
+    }
+    // ---- Utility methods ------------------------------------------------------
+    /**
+     * Clear cached probe result.
+     * Call this to force a fresh probe on next call.
+     */
+    clearProbeCache() {
+        this._lastProbeResult = null;
+        this._lastProbeAt = 0;
+        this._botOpenId = undefined;
+        this._botName = undefined;
+    }
+    /**
+     * Dispose of the client.
+     * Clears all caches and the SDK client reference.
+     */
+    dispose() {
+        log.debug('Disposing LarkClient', { appId: this._config.appId });
+        this.clearProbeCache();
+        this._sdk = null;
+    }
+    // ---- Private helpers ------------------------------------------------------
+    /** Assert credentials exist or throw. */
+    requireCredentials() {
+        const appId = this._config.appId;
+        const appSecret = this._config.appSecret;
+        if (!appId || !appSecret) {
+            throw new Error(`LarkClient: appId and appSecret are required`);
+        }
+        return { appId, appSecret };
+    }
+}
+// ---------------------------------------------------------------------------
+// Convenience functions
+// ---------------------------------------------------------------------------
+/**
+ * Get the singleton LarkClient instance.
+ * Creates one from environment variables if not already created.
+ */
+export function getLarkClient() {
+    return LarkClient.getInstance();
+}
+/**
+ * Create a LarkClient from environment variables.
+ * This will replace the singleton instance.
+ */
+export function createLarkClient() {
+    return LarkClient.fromEnv();
+}
+/**
+ * Reset the singleton LarkClient instance.
+ * Useful for testing or when credentials change.
+ */
+export function resetLarkClient() {
+    LarkClient.resetInstance();
+}
+//# sourceMappingURL=lark-client.js.map

package/dist/core/lark-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lark-client.js","sourceRoot":"","sources":["../../src/core/lark-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,uDAAuD;AAEvD,OAAO,KAAK,IAAI,MAAM,yBAAyB,CAAC;AAEhD,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;AAwBlC,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,eAAe,GAAgC;IACnD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;IAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;CACvB,CAAC;AAEF,uDAAuD;AACvD,SAAS,YAAY,CAAC,KAA4B;IAChD,OAAO,eAAe,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,KAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,0BAA0B,GAAG,iBAAiB,CAAC;AACrD,MAAM,UAAU,GAAG,eAAe,CAAC;AAEnC,SAAS,sBAAsB;IAC7B,iFAAiF;IAChF,UAAsC,CAAC,0BAA0B,CAAC,GAAG,UAAU,CAAC;AACnF,CAAC;AAED,oCAAoC;AACpC,sBAAsB,EAAE,CAAC;AAEzB,mDAAmD;AACnD,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC;AAC5D,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAC/C,CAAC,GAAG,EAAE,EAAE;IACN,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,EACD,SAAS,EACT,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,OAAO,UAAU;IACJ,OAAO,CAAe;IAC/B,IAAI,GAAuB,IAAI,CAAC;IAChC,UAAU,CAAqB;IAC/B,QAAQ,CAAqB;IAC7B,gBAAgB,GAA6B,IAAI,CAAC;IAClD,YAAY,GAAG,CAAC,CAAC;IAEzB,8EAA8E;IAEtE,MAAM,CAAC,SAAS,GAAsB,IAAI,CAAC;IAEnD;;;OAGG;IACH,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;YACvC,UAAU,CAAC,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,UAAU,CAAC,SAAS,CAAC;IAC9B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,OAAO;QACZ,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,UAAU,CAAC,SAAS,GAAG,QAAQ,CAAC;QAChC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,WAAkC;QACvD,MAAM,MAAM,GAAiB;YAC3B,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;YAC9B,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,EAAE;YACtC,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,QAAQ;YACpC,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;SACjD,CAAC;QAEF,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,UAAU,CAAC,SAAS,GAAG,QAAQ,CAAC;QAChC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,aAAa;QAClB,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YACzB,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC/B,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACH,YAAY,MAAoB;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,6CAA6C;IAC7C,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,kCAAkC;IAClC,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,+CAA+C;IAC/C,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC;IACxC,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,IAAI,GAAG;QACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;gBAC1B,KAAK;gBACL,SAAS;gBACT,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBAC/B,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;aACzC,CAAC,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,8EAA8E;IAE9E;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,IAA4B;QACtC,MAAM,MAAM,GAAG,IAAI,EAAE,QAAQ,IAAI,CAAC,CAAC;QAEnC,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC;YACnF,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;QACxE,CAAC;QAED,IAAI,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAEjE,MAAM,GAAG,GAAG,MAAO,IAAI,CAAC,GAAW,CAAC,OAAO,CAAC;gBAC1C,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,wBAAwB;gBAC7B,IAAI,EAAE,EAAE;aACT,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAsB;oBAChC,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;oBACzB,KAAK,EAAE,cAAc,GAAG,CAAC,GAAG,IAAI,QAAQ,GAAG,CAAC,IAAI,EAAE,EAAE;iBACrD,CAAC;gBACF,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;gBAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC/D,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;YACrC,IAAI,CAAC,UAAU,GAAG,GAAG,EAAE,OAAO,CAAC;YAC/B,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,QAAQ,CAAC;YAE9B,MAAM,MAAM,GAAsB;gBAChC,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAC;YACF,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;YAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACxF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAsB;gBAChC,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;YACF,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;YAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,mDAAmD;IACnD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,kCAAkC;IAClC,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,KAAK,CAAC,oBAAoB;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAO,IAAI,CAAC,GAAW,CAAC,OAAO,CAAC;gBAC1C,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,iDAAiD;gBACtD,IAAI,EAAE;oBACJ,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;oBAC1B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;iBACnC;aACF,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E;;;OAGG;IACH,eAAe;QACb,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,8EAA8E;IAE9E,yCAAyC;IACjC,kBAAkB;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;;AAGH,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,UAAU,CAAC,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,UAAU,CAAC,aAAa,EAAE,CAAC;AAC7B,CAAC"}

package/dist/core/token-store.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * UAT (User Access Token) persistent storage for cc-lark MCP Server.
+ *
+ * Stores OAuth token data in a file-based storage in the user's home directory.
+ * For MCP Server architecture, we use a simple JSON file approach instead of
+ * OS-native credential services for simplicity and portability.
+ *
+ * Storage location: ~/.cc-lark/tokens.json
+ *
+ * Adapted from openclaw-lark for MCP Server architecture.
+ */
+export interface StoredUAToken {
+    userOpenId: string;
+    appId: string;
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: number;
+    refreshExpiresAt: number;
+    scope: string;
+    grantedAt: number;
+}
+/** Mask a token for safe logging: only the last 4 chars are visible. */
+export declare function maskToken(token: string): string;
+/**
+ * Read the stored UAT for a given (appId, userOpenId) pair.
+ * Returns `null` when no entry exists or the payload is unparseable.
+ */
+export declare function getStoredToken(appId: string, userOpenId: string): Promise<StoredUAToken | null>;
+/**
+ * Persist a UAT using file-based storage.
+ *
+ * Overwrites any existing entry for the same (appId, userOpenId).
+ */
+export declare function setStoredToken(token: StoredUAToken): Promise<void>;
+/**
+ * Remove a stored UAT from the storage.
+ */
+export declare function removeStoredToken(appId: string, userOpenId: string): Promise<void>;
+/**
+ * List all stored tokens for a given appId.
+ */
+export declare function listStoredTokens(appId: string): Promise<StoredUAToken[]>;
+/**
+ * Clear all stored tokens.
+ * Use with caution - this removes all stored credentials.
+ */
+export declare function clearAllTokens(): Promise<void>;
+/**
+ * Determine the freshness of a stored token.
+ *
+ * - `"valid"`         – access_token is still good (expires > 5 min from now)
+ * - `"needs_refresh"` – access_token expired/expiring but refresh_token is valid
+ * - `"expired"`       – both tokens are expired; re-authorization required
+ */
+export declare function tokenStatus(token: StoredUAToken): 'valid' | 'needs_refresh' | 'expired';
+/**
+ * Get the path to the tokens storage file.
+ */
+export declare function getTokensFilePath(): string;
+/**
+ * Check if tokens storage file exists.
+ */
+export declare function tokensStorageExists(): Promise<boolean>;
+//# sourceMappingURL=token-store.d.ts.map

package/dist/core/token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../src/core/token-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AA0BD,wEAAwE;AACxE,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/C;AAkED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CASrG;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxE;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUxF;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAW9E;AAED;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CASpD;AAMD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,GAAG,eAAe,GAAG,SAAS,CASvF;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO5D"}

package/dist/core/token-store.js

@@ -0,0 +1,215 @@
+/**
+ * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+ * SPDX-License-Identifier: MIT
+ *
+ * UAT (User Access Token) persistent storage for cc-lark MCP Server.
+ *
+ * Stores OAuth token data in a file-based storage in the user's home directory.
+ * For MCP Server architecture, we use a simple JSON file approach instead of
+ * OS-native credential services for simplicity and portability.
+ *
+ * Storage location: ~/.cc-lark/tokens.json
+ *
+ * Adapted from openclaw-lark for MCP Server architecture.
+ */
+import { mkdir, readFile, writeFile, unlink, chmod, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { logger } from '../utils/logger.js';
+const log = logger('token-store');
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const TOKENS_DIR = join(homedir(), '.cc-lark');
+const TOKENS_FILE = join(TOKENS_DIR, 'tokens.json');
+/** Refresh proactively when access_token expires within this window. */
+const REFRESH_AHEAD_MS = 5 * 60 * 1000; // 5 minutes
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function accountKey(appId, userOpenId) {
+    return `${appId}:${userOpenId}`;
+}
+/** Mask a token for safe logging: only the last 4 chars are visible. */
+export function maskToken(token) {
+    if (token.length <= 8)
+        return '****';
+    return `****${token.slice(-4)}`;
+}
+// ---------------------------------------------------------------------------
+// File operations
+// ---------------------------------------------------------------------------
+/**
+ * Ensure the tokens directory exists with proper permissions.
+ */
+async function ensureTokensDir() {
+    try {
+        await mkdir(TOKENS_DIR, { recursive: true, mode: 0o700 });
+    }
+    catch (err) {
+        if (err.code !== 'EEXIST') {
+            throw err;
+        }
+    }
+    // Ensure directory has restrictive permissions
+    try {
+        await chmod(TOKENS_DIR, 0o700);
+    }
+    catch {
+        // Ignore permission errors on Windows
+    }
+}
+/**
+ * Read the token storage file.
+ * Returns null if the file doesn't exist or is invalid.
+ */
+async function readTokenStorage() {
+    try {
+        const data = await readFile(TOKENS_FILE, 'utf8');
+        const parsed = JSON.parse(data);
+        if (parsed.version !== 1) {
+            log.warn('unsupported token storage version, ignoring');
+            return null;
+        }
+        return parsed;
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return null;
+        }
+        log.warn(`failed to read token storage: ${err instanceof Error ? err.message : err}`);
+        return null;
+    }
+}
+/**
+ * Write the token storage file.
+ */
+async function writeTokenStorage(storage) {
+    await ensureTokensDir();
+    const data = JSON.stringify(storage, null, 2);
+    await writeFile(TOKENS_FILE, data, { mode: 0o600 });
+    // Ensure file has restrictive permissions
+    try {
+        await chmod(TOKENS_FILE, 0o600);
+    }
+    catch {
+        // Ignore permission errors on Windows
+    }
+}
+// ---------------------------------------------------------------------------
+// Public API – Credential operations
+// ---------------------------------------------------------------------------
+/**
+ * Read the stored UAT for a given (appId, userOpenId) pair.
+ * Returns `null` when no entry exists or the payload is unparseable.
+ */
+export async function getStoredToken(appId, userOpenId) {
+    try {
+        const storage = await readTokenStorage();
+        if (!storage)
+            return null;
+        const key = accountKey(appId, userOpenId);
+        return storage.tokens[key] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Persist a UAT using file-based storage.
+ *
+ * Overwrites any existing entry for the same (appId, userOpenId).
+ */
+export async function setStoredToken(token) {
+    const storage = (await readTokenStorage()) ?? { version: 1, tokens: {} };
+    const key = accountKey(token.appId, token.userOpenId);
+    storage.tokens[key] = token;
+    await writeTokenStorage(storage);
+    log.info(`saved UAT for ${token.userOpenId} (at:${maskToken(token.accessToken)})`);
+}
+/**
+ * Remove a stored UAT from the storage.
+ */
+export async function removeStoredToken(appId, userOpenId) {
+    const storage = await readTokenStorage();
+    if (!storage)
+        return;
+    const key = accountKey(appId, userOpenId);
+    if (storage.tokens[key]) {
+        delete storage.tokens[key];
+        await writeTokenStorage(storage);
+        log.info(`removed UAT for ${userOpenId}`);
+    }
+}
+/**
+ * List all stored tokens for a given appId.
+ */
+export async function listStoredTokens(appId) {
+    const storage = await readTokenStorage();
+    if (!storage)
+        return [];
+    const tokens = [];
+    for (const [key, token] of Object.entries(storage.tokens)) {
+        if (key.startsWith(`${appId}:`)) {
+            tokens.push(token);
+        }
+    }
+    return tokens;
+}
+/**
+ * Clear all stored tokens.
+ * Use with caution - this removes all stored credentials.
+ */
+export async function clearAllTokens() {
+    try {
+        await unlink(TOKENS_FILE);
+        log.info('cleared all stored tokens');
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            throw err;
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Token validity check
+// ---------------------------------------------------------------------------
+/**
+ * Determine the freshness of a stored token.
+ *
+ * - `"valid"`         – access_token is still good (expires > 5 min from now)
+ * - `"needs_refresh"` – access_token expired/expiring but refresh_token is valid
+ * - `"expired"`       – both tokens are expired; re-authorization required
+ */
+export function tokenStatus(token) {
+    const now = Date.now();
+    if (now < token.expiresAt - REFRESH_AHEAD_MS) {
+        return 'valid';
+    }
+    if (now < token.refreshExpiresAt) {
+        return 'needs_refresh';
+    }
+    return 'expired';
+}
+// ---------------------------------------------------------------------------
+// Storage path utilities (for testing/debugging)
+// ---------------------------------------------------------------------------
+/**
+ * Get the path to the tokens storage file.
+ */
+export function getTokensFilePath() {
+    return TOKENS_FILE;
+}
+/**
+ * Check if tokens storage file exists.
+ */
+export async function tokensStorageExists() {
+    try {
+        await stat(TOKENS_FILE);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=token-store.js.map

package/dist/core/token-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../../src/core/token-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;AAuBlC,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEpD,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAEpD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,UAAU,CAAC,KAAa,EAAE,UAAkB;IACnD,OAAO,GAAG,KAAK,IAAI,UAAU,EAAE,CAAC;AAClC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;GAEG;AACH,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,+CAA+C;IAC/C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;QAChD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAAC,OAAqB;IACpD,MAAM,eAAe,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,0CAA0C;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,UAAkB;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAoB;IACvD,MAAM,OAAO,GAAG,CAAC,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5B,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACjC,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,UAAU,QAAQ,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,UAAkB;IACvE,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa;IAClD,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,gBAAgB,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,GAAG,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}