crewly 1.13.1 → 1.14.0

package/dist/backend/backend/src/services/slack/slack-agent-identity.service.d.ts

@@ -0,0 +1,209 @@
+/**
+ * Slack Agent Identity Service — one real Slack bot user per agent.
+ *
+ * Crewly Cloud (`/api/cloud/slack/*`) creates one Slack app per agent with
+ * the owner's app configuration token, hands back an install link, and after
+ * the owner's one consent click holds the agent's bot token. This service is
+ * the OSS half:
+ *
+ *  - talks to Cloud with the OSS install's Cloud access token;
+ *  - caches identities (bot user id, bot token) in
+ *    `~/.crewly/slack-agent-identities.json` (mode 0600) so posting works
+ *    without a Cloud round-trip;
+ *  - polls Cloud while any install is pending so a click on the link shows
+ *    up here within ~30 s;
+ *  - remembers where each install link was announced and which channels the
+ *    bot has been invited into, so the team-channel service does each once.
+ *
+ * Team channels use it to post replies as the agent (its own token) and to
+ * resolve native `<@U…>` mentions. Everything degrades gracefully: with no
+ * Cloud login or no identity, replies fall back to the cosmetic
+ * username/icon override.
+ *
+ * @module services/slack/slack-agent-identity.service
+ */
+import type { SlackAgentIdentityRecord, SlackAgentIdentitiesFile } from '../../types/slack.types.js';
+/** The slice of CloudClientService this service needs. */
+export interface IdentityCloudClient {
+    isConnected(): boolean;
+    getToken(): string | null;
+    getCloudUrl(): string | null;
+}
+/** Constructor dependencies. */
+export interface SlackAgentIdentityServiceDeps {
+    cloud: IdentityCloudClient;
+    storePath?: string;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+    /** Timer override for tests. */
+    setInterval?: typeof setInterval;
+    clearInterval?: typeof clearInterval;
+}
+/** Cloud's config-token status. */
+export interface CloudConfigTokenStatus {
+    configured: boolean;
+    status?: 'ok' | 'invalid';
+    expiresAt?: string;
+    lastError?: string;
+}
+/** Cloud's `/slack/status` payload. */
+export interface CloudSlackStatus {
+    enabled: boolean;
+    configToken: CloudConfigTokenStatus;
+    agents: {
+        total: number;
+        installed: number;
+        pending: number;
+    };
+}
+/** Error from Cloud with the stable code it returned. */
+export declare class SlackIdentityCloudError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string, message: string);
+}
+/**
+ * Service — see module docs.
+ */
+export declare class SlackAgentIdentityService {
+    private readonly logger;
+    private readonly deps;
+    private readonly storePath;
+    private readonly fetchImpl;
+    private store;
+    private loading;
+    private pollTimer;
+    private pollingSince;
+    private readonly listeners;
+    constructor(deps: SlackAgentIdentityServiceDeps);
+    /**
+     * Whether Cloud can be reached (logged in with a token).
+     *
+     * @returns True when the OSS install is connected to Crewly Cloud
+     */
+    isAvailable(): boolean;
+    /**
+     * Register a callback for the moment an identity becomes installed
+     * (bot user id + token known). The team-channel service uses it to invite
+     * the new bot into its channels.
+     *
+     * @param listener - Called with the installed record
+     * @returns Unsubscribe
+     */
+    onInstalled(listener: (record: SlackAgentIdentityRecord) => void): () => void;
+    /**
+     * Cloud-side status: whether the feature is enabled there, whether this
+     * account has a config token, and agent counts.
+     *
+     * @returns The status
+     * @throws {SlackIdentityCloudError} on a Cloud failure
+     */
+    getCloudStatus(): Promise<CloudSlackStatus>;
+    /**
+     * Store the owner's Slack app configuration token on Cloud (validated
+     * there by rotating it once).
+     *
+     * @param token - Config access token (may be empty/expired)
+     * @param refreshToken - Config refresh token (required)
+     * @returns The stored token's status
+     */
+    setConfigToken(token: string, refreshToken: string): Promise<CloudConfigTokenStatus>;
+    /**
+     * Remove the config token on Cloud.
+     *
+     * @returns True when one existed
+     */
+    deleteConfigToken(): Promise<boolean>;
+    /**
+     * Ask Cloud for an identity for an agent (idempotent). Returns the cached
+     * record updated with Cloud's answer, including `installUrl` while the
+     * install is pending.
+     *
+     * @param agentSession - Stable agent id
+     * @param displayName - Name the bot will carry in Slack
+     * @param description - Optional app description
+     * @returns The record
+     */
+    provision(agentSession: string, displayName: string, description?: string): Promise<SlackAgentIdentityRecord>;
+    /**
+     * Pull every identity (with tokens) from Cloud into the local cache.
+     * Newly installed ones fire {@link onInstalled}.
+     *
+     * @returns All records after the merge
+     */
+    refreshFromCloud(): Promise<SlackAgentIdentityRecord[]>;
+    /**
+     * Delete an agent's Slack app on Cloud and forget it locally.
+     *
+     * @param agentSession - The agent
+     * @returns True when a record existed on Cloud
+     */
+    remove(agentSession: string): Promise<boolean>;
+    /**
+     * All cached identities (tokens included — callers must not log them).
+     *
+     * @returns Copies
+     */
+    list(): Promise<SlackAgentIdentityRecord[]>;
+    /**
+     * Cached identity for an agent, if any. Synchronous read of the loaded
+     * cache (call {@link list} or any Cloud method first to load it).
+     *
+     * @param agentSession - The agent
+     * @returns The record or null
+     */
+    get(agentSession: string): SlackAgentIdentityRecord | null;
+    /**
+     * Installed identity (bot user + token) for an agent, or null.
+     *
+     * @param agentSession - The agent
+     * @returns `{ botUserId, botToken }` when installed
+     */
+    getInstalled(agentSession: string): {
+        botUserId: string;
+        botToken: string;
+    } | null;
+    /**
+     * Agent session for a Slack bot user id (native mention resolution).
+     *
+     * @param botUserId - Slack user id
+     * @returns The agent session or null
+     */
+    findByBotUserId(botUserId: string): string | null;
+    /**
+     * Mark that an install link was announced in a channel / the bot was
+     * invited into a channel, so it is not repeated.
+     *
+     * @param agentSession - The agent
+     * @param patch - Channel ids to add to either list
+     */
+    markChannel(agentSession: string, patch: {
+        announcedIn?: string;
+        invitedTo?: string;
+    }): Promise<void>;
+    /** Load the cache once. */
+    load(): Promise<SlackAgentIdentitiesFile>;
+    /** Stop timers (shutdown / tests). */
+    stop(): void;
+    private mergeView;
+    private save;
+    private ensurePolling;
+    private stopPolling;
+    /** One poll: refresh from Cloud; give up after the max age. */
+    pollTick(): Promise<void>;
+    private now;
+    private cloudRequest;
+}
+/**
+ * Install the process-wide instance (composition root).
+ *
+ * @param service - The service or null
+ */
+export declare function setSlackAgentIdentityService(service: SlackAgentIdentityService | null): void;
+/**
+ * The process-wide instance, or null before wiring.
+ *
+ * @returns The service or null
+ */
+export declare function getSlackAgentIdentityService(): SlackAgentIdentityService | null;
+//# sourceMappingURL=slack-agent-identity.service.d.ts.map

package/dist/backend/backend/src/services/slack/slack-agent-identity.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-agent-identity.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/slack/slack-agent-identity.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAMrG,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,WAAW,IAAI,OAAO,CAAC;IACvB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,IAAI,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,gCAAgC;AAChC,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,mBAAmB,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,gCAAgC;IAChC,WAAW,CAAC,EAAE,OAAO,WAAW,CAAC;IACjC,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;CACtC;AAED,mCAAmC;AACnC,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,uCAAuC;AACvC,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,sBAAsB,CAAC;IACpC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D;AAeD,yDAAyD;AACzD,qBAAa,uBAAwB,SAAQ,KAAK;aAE9B,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;gBADZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM;CAKlB;AAID;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgC;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,OAAO,CAAkD;IACjE,OAAO,CAAC,SAAS,CAA+C;IAChE,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyD;gBAEvE,IAAI,EAAE,6BAA6B;IAY/C;;;;OAIG;IACH,WAAW,IAAI,OAAO;IAItB;;;;;;;OAOG;IACH,WAAW,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,wBAAwB,KAAK,IAAI,GAAG,MAAM,IAAI;IAS7E;;;;;;OAMG;IACG,cAAc,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAIjD;;;;;;;OAOG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAI1F;;;;OAIG;IACG,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC;IAK3C;;;;;;;;;OASG;IACG,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAOnH;;;;;OAKG;IACG,gBAAgB,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAQ7D;;;;;OAKG;IACG,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAkBpD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAKjD;;;;;;OAMG;IACH,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI;IAI1D;;;;;OAKG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAQlF;;;;;OAKG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIjD;;;;;;OAMG;IACG,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3G,2BAA2B;IACrB,IAAI,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAa/C,sCAAsC;IACtC,IAAI,IAAI,IAAI;YAQE,SAAS;YA6CT,IAAI;IAOlB,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,WAAW;IAOnB,+DAA+D;IACzD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAc/B,OAAO,CAAC,GAAG;YAIG,YAAY;CA0C3B;AASD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,yBAAyB,GAAG,IAAI,GAAG,IAAI,CAE5F;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,yBAAyB,GAAG,IAAI,CAE/E"}

package/dist/backend/backend/src/services/slack/slack-agent-identity.service.js

@@ -0,0 +1,416 @@
+/**
+ * Slack Agent Identity Service — one real Slack bot user per agent.
+ *
+ * Crewly Cloud (`/api/cloud/slack/*`) creates one Slack app per agent with
+ * the owner's app configuration token, hands back an install link, and after
+ * the owner's one consent click holds the agent's bot token. This service is
+ * the OSS half:
+ *
+ *  - talks to Cloud with the OSS install's Cloud access token;
+ *  - caches identities (bot user id, bot token) in
+ *    `~/.crewly/slack-agent-identities.json` (mode 0600) so posting works
+ *    without a Cloud round-trip;
+ *  - polls Cloud while any install is pending so a click on the link shows
+ *    up here within ~30 s;
+ *  - remembers where each install link was announced and which channels the
+ *    bot has been invited into, so the team-channel service does each once.
+ *
+ * Team channels use it to post replies as the agent (its own token) and to
+ * resolve native `<@U…>` mentions. Everything degrades gracefully: with no
+ * Cloud login or no identity, replies fall back to the cosmetic
+ * username/icon override.
+ *
+ * @module services/slack/slack-agent-identity.service
+ */
+import * as path from 'path';
+import { promises as fs } from 'fs';
+import { getCrewlyHomePath } from '../core/crewly-home.utils.js';
+import { atomicWriteJson, safeReadJson } from '../../utils/file-io.utils.js';
+import { LoggerService } from '../core/logger.service.js';
+import { SLACK_AGENT_IDENTITY_CONSTANTS } from '../../constants.js';
+/** Error from Cloud with the stable code it returned. */
+export class SlackIdentityCloudError extends Error {
+    status;
+    code;
+    constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'SlackIdentityCloudError';
+    }
+}
+const EMPTY = { version: 1, identities: [] };
+/**
+ * Service — see module docs.
+ */
+export class SlackAgentIdentityService {
+    logger;
+    deps;
+    storePath;
+    fetchImpl;
+    store = null;
+    loading = null;
+    pollTimer = null;
+    pollingSince = 0;
+    listeners = new Set();
+    constructor(deps) {
+        this.deps = deps;
+        this.storePath =
+            deps.storePath ?? path.join(getCrewlyHomePath(), SLACK_AGENT_IDENTITY_CONSTANTS.STORE_FILENAME);
+        this.fetchImpl = deps.fetchImpl ?? fetch;
+        this.logger = LoggerService.getInstance().createComponentLogger('SlackAgentIdentity');
+    }
+    // -------------------------------------------------------------------------
+    // Availability
+    // -------------------------------------------------------------------------
+    /**
+     * Whether Cloud can be reached (logged in with a token).
+     *
+     * @returns True when the OSS install is connected to Crewly Cloud
+     */
+    isAvailable() {
+        return this.deps.cloud.isConnected() && !!this.deps.cloud.getToken() && !!this.deps.cloud.getCloudUrl();
+    }
+    /**
+     * Register a callback for the moment an identity becomes installed
+     * (bot user id + token known). The team-channel service uses it to invite
+     * the new bot into its channels.
+     *
+     * @param listener - Called with the installed record
+     * @returns Unsubscribe
+     */
+    onInstalled(listener) {
+        this.listeners.add(listener);
+        return () => this.listeners.delete(listener);
+    }
+    // -------------------------------------------------------------------------
+    // Cloud calls
+    // -------------------------------------------------------------------------
+    /**
+     * Cloud-side status: whether the feature is enabled there, whether this
+     * account has a config token, and agent counts.
+     *
+     * @returns The status
+     * @throws {SlackIdentityCloudError} on a Cloud failure
+     */
+    async getCloudStatus() {
+        return this.cloudRequest('GET', '/status');
+    }
+    /**
+     * Store the owner's Slack app configuration token on Cloud (validated
+     * there by rotating it once).
+     *
+     * @param token - Config access token (may be empty/expired)
+     * @param refreshToken - Config refresh token (required)
+     * @returns The stored token's status
+     */
+    async setConfigToken(token, refreshToken) {
+        return this.cloudRequest('PUT', '/config-token', { token, refreshToken });
+    }
+    /**
+     * Remove the config token on Cloud.
+     *
+     * @returns True when one existed
+     */
+    async deleteConfigToken() {
+        const res = await this.cloudRequest('DELETE', '/config-token');
+        return res.removed;
+    }
+    /**
+     * Ask Cloud for an identity for an agent (idempotent). Returns the cached
+     * record updated with Cloud's answer, including `installUrl` while the
+     * install is pending.
+     *
+     * @param agentSession - Stable agent id
+     * @param displayName - Name the bot will carry in Slack
+     * @param description - Optional app description
+     * @returns The record
+     */
+    async provision(agentSession, displayName, description) {
+        const view = await this.cloudRequest('POST', '/agents', { agentSession, displayName, description });
+        const record = await this.mergeView(view);
+        if (record.status === 'pending_install')
+            this.ensurePolling();
+        return record;
+    }
+    /**
+     * Pull every identity (with tokens) from Cloud into the local cache.
+     * Newly installed ones fire {@link onInstalled}.
+     *
+     * @returns All records after the merge
+     */
+    async refreshFromCloud() {
+        const views = await this.cloudRequest('GET', '/agents?includeTokens=1');
+        for (const view of views)
+            await this.mergeView(view);
+        const store = await this.load();
+        if (!store.identities.some((r) => r.status === 'pending_install'))
+            this.stopPolling();
+        return store.identities.map((r) => ({ ...r }));
+    }
+    /**
+     * Delete an agent's Slack app on Cloud and forget it locally.
+     *
+     * @param agentSession - The agent
+     * @returns True when a record existed on Cloud
+     */
+    async remove(agentSession) {
+        let removed = false;
+        try {
+            const res = await this.cloudRequest('DELETE', `/agents/${encodeURIComponent(agentSession)}`);
+            removed = res.removed;
+        }
+        catch (err) {
+            if (!(err instanceof SlackIdentityCloudError && err.status === 404))
+                throw err;
+        }
+        const store = await this.load();
+        store.identities = store.identities.filter((r) => r.agentSession !== agentSession);
+        await this.save();
+        return removed;
+    }
+    // -------------------------------------------------------------------------
+    // Local cache
+    // -------------------------------------------------------------------------
+    /**
+     * All cached identities (tokens included — callers must not log them).
+     *
+     * @returns Copies
+     */
+    async list() {
+        const store = await this.load();
+        return store.identities.map((r) => ({ ...r }));
+    }
+    /**
+     * Cached identity for an agent, if any. Synchronous read of the loaded
+     * cache (call {@link list} or any Cloud method first to load it).
+     *
+     * @param agentSession - The agent
+     * @returns The record or null
+     */
+    get(agentSession) {
+        return this.store?.identities.find((r) => r.agentSession === agentSession) ?? null;
+    }
+    /**
+     * Installed identity (bot user + token) for an agent, or null.
+     *
+     * @param agentSession - The agent
+     * @returns `{ botUserId, botToken }` when installed
+     */
+    getInstalled(agentSession) {
+        const r = this.get(agentSession);
+        if (r && r.status === 'installed' && r.botUserId && r.botToken) {
+            return { botUserId: r.botUserId, botToken: r.botToken };
+        }
+        return null;
+    }
+    /**
+     * Agent session for a Slack bot user id (native mention resolution).
+     *
+     * @param botUserId - Slack user id
+     * @returns The agent session or null
+     */
+    findByBotUserId(botUserId) {
+        return this.store?.identities.find((r) => r.botUserId === botUserId)?.agentSession ?? null;
+    }
+    /**
+     * Mark that an install link was announced in a channel / the bot was
+     * invited into a channel, so it is not repeated.
+     *
+     * @param agentSession - The agent
+     * @param patch - Channel ids to add to either list
+     */
+    async markChannel(agentSession, patch) {
+        const store = await this.load();
+        const r = store.identities.find((x) => x.agentSession === agentSession);
+        if (!r)
+            return;
+        if (patch.announcedIn && !r.announcedIn.includes(patch.announcedIn))
+            r.announcedIn.push(patch.announcedIn);
+        if (patch.invitedTo && !r.invitedTo.includes(patch.invitedTo))
+            r.invitedTo.push(patch.invitedTo);
+        r.updatedAt = new Date(this.now()).toISOString();
+        await this.save();
+    }
+    /** Load the cache once. */
+    async load() {
+        if (this.store)
+            return this.store;
+        if (!this.loading) {
+            this.loading = safeReadJson(this.storePath, EMPTY).then((raw) => {
+                const identities = Array.isArray(raw?.identities) ? raw.identities.filter(isRecord) : [];
+                this.store = { version: 1, identities };
+                if (identities.some((r) => r.status === 'pending_install'))
+                    this.ensurePolling();
+                return this.store;
+            });
+        }
+        return this.loading;
+    }
+    /** Stop timers (shutdown / tests). */
+    stop() {
+        this.stopPolling();
+    }
+    // -------------------------------------------------------------------------
+    // Internals
+    // -------------------------------------------------------------------------
+    async mergeView(view) {
+        const store = await this.load();
+        const nowIso = new Date(this.now()).toISOString();
+        let record = store.identities.find((r) => r.agentSession === view.agentSession);
+        const wasInstalled = record?.status === 'installed';
+        if (!record) {
+            record = {
+                agentSession: view.agentSession,
+                displayName: view.displayName,
+                appId: view.appId,
+                status: view.status,
+                announcedIn: [],
+                invitedTo: [],
+                updatedAt: nowIso,
+            };
+            store.identities.push(record);
+        }
+        record.displayName = view.displayName;
+        record.appId = view.appId;
+        record.status = view.status;
+        record.updatedAt = nowIso;
+        if (view.botUserId)
+            record.botUserId = view.botUserId;
+        if (view.teamId)
+            record.teamId = view.teamId;
+        if (view.botToken)
+            record.botToken = view.botToken;
+        if (view.installUrl)
+            record.installUrl = view.installUrl;
+        else if (view.status === 'installed')
+            delete record.installUrl;
+        if (view.error)
+            record.error = view.error;
+        else
+            delete record.error;
+        await this.save();
+        if (!wasInstalled && record.status === 'installed' && record.botToken) {
+            this.logger.info('Slack agent identity installed', {
+                agentSession: record.agentSession,
+                botUserId: record.botUserId,
+            });
+            for (const l of this.listeners) {
+                try {
+                    l({ ...record });
+                }
+                catch (err) {
+                    this.logger.warn('onInstalled listener threw', { error: err instanceof Error ? err.message : String(err) });
+                }
+            }
+        }
+        return { ...record };
+    }
+    async save() {
+        const store = await this.load();
+        await fs.mkdir(path.dirname(this.storePath), { recursive: true });
+        await atomicWriteJson(this.storePath, store);
+        await fs.chmod(this.storePath, 0o600).catch(() => undefined);
+    }
+    ensurePolling() {
+        if (this.pollTimer)
+            return;
+        this.pollingSince = this.now();
+        const setI = this.deps.setInterval ?? setInterval;
+        this.pollTimer = setI(() => {
+            void this.pollTick();
+        }, SLACK_AGENT_IDENTITY_CONSTANTS.PENDING_POLL_INTERVAL_MS);
+        // Never keep the process alive just for this.
+        this.pollTimer.unref?.();
+    }
+    stopPolling() {
+        if (!this.pollTimer)
+            return;
+        const clearI = this.deps.clearInterval ?? clearInterval;
+        clearI(this.pollTimer);
+        this.pollTimer = null;
+    }
+    /** One poll: refresh from Cloud; give up after the max age. */
+    async pollTick() {
+        if (this.now() - this.pollingSince > SLACK_AGENT_IDENTITY_CONSTANTS.PENDING_POLL_MAX_AGE_MS) {
+            this.logger.info('Stopped polling for pending Slack installs (max age reached)');
+            this.stopPolling();
+            return;
+        }
+        if (!this.isAvailable())
+            return;
+        try {
+            await this.refreshFromCloud();
+        }
+        catch (err) {
+            this.logger.debug('Pending-install poll failed', { error: err instanceof Error ? err.message : String(err) });
+        }
+    }
+    now() {
+        return this.deps.now?.() ?? Date.now();
+    }
+    async cloudRequest(method, suffix, body) {
+        const token = this.deps.cloud.getToken();
+        const base = this.deps.cloud.getCloudUrl();
+        if (!token || !base) {
+            throw new SlackIdentityCloudError(401, 'not_logged_in', 'Not logged in to Crewly Cloud');
+        }
+        const url = `${base.replace(/\/$/, '')}${SLACK_AGENT_IDENTITY_CONSTANTS.CLOUD_PATH}${suffix}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), SLACK_AGENT_IDENTITY_CONSTANTS.REQUEST_TIMEOUT_MS);
+        try {
+            const res = await this.fetchImpl(url, {
+                method,
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    ...(body !== undefined ? { 'Content-Type': 'application/json' } : {}),
+                },
+                body: body !== undefined ? JSON.stringify(body) : undefined,
+                signal: controller.signal,
+            });
+            const text = await res.text();
+            let parsed = {};
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                parsed = {};
+            }
+            if (!res.ok || parsed.success !== true) {
+                throw new SlackIdentityCloudError(res.status, parsed.code ?? `http_${res.status}`, parsed.error ?? `Cloud request failed (${res.status})`);
+            }
+            return parsed.data;
+        }
+        catch (err) {
+            if (err instanceof SlackIdentityCloudError)
+                throw err;
+            const message = err instanceof Error ? err.message : String(err);
+            throw new SlackIdentityCloudError(502, 'network', `Cloud unreachable: ${message}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+function isRecord(value) {
+    const v = value;
+    return !!v && typeof v.agentSession === 'string' && typeof v.appId === 'string' && typeof v.status === 'string';
+}
+let instance = null;
+/**
+ * Install the process-wide instance (composition root).
+ *
+ * @param service - The service or null
+ */
+export function setSlackAgentIdentityService(service) {
+    instance = service;
+}
+/**
+ * The process-wide instance, or null before wiring.
+ *
+ * @returns The service or null
+ */
+export function getSlackAgentIdentityService() {
+    return instance;
+}
+//# sourceMappingURL=slack-agent-identity.service.js.map

package/dist/backend/backend/src/services/slack/slack-agent-identity.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-agent-identity.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/slack/slack-agent-identity.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAgDpE,yDAAyD;AACzD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAE9B;IACA;IAFlB,YACkB,MAAc,EACd,IAAY,EAC5B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAI5B,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,KAAK,GAA6B,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAEvE;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACnB,MAAM,CAAkB;IACxB,IAAI,CAAgC;IACpC,SAAS,CAAS;IAClB,SAAS,CAAe;IACjC,KAAK,GAAoC,IAAI,CAAC;IAC9C,OAAO,GAA6C,IAAI,CAAC;IACzD,SAAS,GAA0C,IAAI,CAAC;IACxD,YAAY,GAAG,CAAC,CAAC;IACR,SAAS,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEnF,YAAY,IAAmC;QAC7C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS;YACZ,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,8BAA8B,CAAC,cAAc,CAAC,CAAC;QAClG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;IACxF,CAAC;IAED,4EAA4E;IAC5E,eAAe;IACf,4EAA4E;IAE5E;;;;OAIG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC1G,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,QAAoD;QAC9D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,4EAA4E;IAC5E,cAAc;IACd,4EAA4E;IAE5E;;;;;;OAMG;IACH,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,YAAY,CAAmB,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,YAAoB;QACtD,OAAO,IAAI,CAAC,YAAY,CAAyB,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACpG,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAuB,QAAQ,EAAE,eAAe,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,SAAS,CAAC,YAAoB,EAAE,WAAmB,EAAE,WAAoB;QAC7E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAiB,MAAM,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAmB,KAAK,EAAE,yBAAyB,CAAC,CAAC;QAC1F,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAuB,QAAQ,EAAE,WAAW,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACnH,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,uBAAuB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;QACjF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QACnF,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4EAA4E;IAC5E,cAAc;IACd,4EAA4E;IAE5E;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACH,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,IAAI,IAAI,CAAC;IACrF,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,YAAoB;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC/D,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,SAAiB;QAC/B,OAAO,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC;IAC7F,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,YAAoB,EAAE,KAAmD;QACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;YAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3G,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjG,CAAC,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,YAAY,CAA2B,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACxF,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;gBACxC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC;oBAAE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjF,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,sCAAsC;IACtC,IAAI;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAEpE,KAAK,CAAC,SAAS,CAAC,IAAoB;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;QAChF,MAAM,YAAY,GAAG,MAAM,EAAE,MAAM,KAAK,WAAW,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,MAAM;aAClB,CAAC;YACF,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACtC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1B,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC;QAC1B,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC7C,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnD,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;aACpD,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC;QAC/D,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;;YACrC,OAAO,MAAM,CAAC,KAAK,CAAC;QACzB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBACjD,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;gBACnB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YACzB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvB,CAAC,EAAE,8BAA8B,CAAC,wBAAwB,CAAC,CAAC;QAC5D,8CAA8C;QAC7C,IAAI,CAAC,SAAoC,CAAC,KAAK,EAAE,EAAE,CAAC;IACvD,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,GAAG,8BAA8B,CAAC,uBAAuB,EAAE,CAAC;YAC5F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YACjF,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAI,MAAyC,EAAE,MAAc,EAAE,IAAc;QACrG,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,eAAe,EAAE,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,8BAA8B,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;QAC9F,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,8BAA8B,CAAC,kBAAkB,CAAC,CAAC;QACtG,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACpC,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtE;gBACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,MAAM,GAAmE,EAAE,CAAC;YAChF,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,EAAE,CAAC;YACd,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBACvC,MAAM,IAAI,uBAAuB,CAC/B,GAAG,CAAC,MAAM,EACV,MAAM,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EACnC,MAAM,CAAC,KAAK,IAAI,yBAAyB,GAAG,CAAC,MAAM,GAAG,CACvD,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,IAAS,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAuB;gBAAE,MAAM,GAAG,CAAC;YACtD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,CAAC,GAAG,KAAiD,CAAC;IAC5D,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;AAClH,CAAC;AAED,IAAI,QAAQ,GAAqC,IAAI,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAyC;IACpF,QAAQ,GAAG,OAAO,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO,QAAQ,CAAC;AAClB,CAAC"}