crewly 1.16.0 → 1.17.1

package/dist/backend/backend/src/services/slack/slack-cloud-config.service.d.ts

@@ -0,0 +1,186 @@
+/**
+ * Slack Cloud Config Service — the Cloud-owned Slack setup, cached locally.
+ *
+ * Slack v3 ("Crewly Cloud owns Slack"): the owner installs the Crewly Slack
+ * app once from the portal; every OSS instance signed in to the same Crewly
+ * account then gets the workspace bot token, bot user id and the installed
+ * per-agent identities from `GET /api/cloud/slack/config` — no manual
+ * tokens. This service:
+ *
+ *  - fetches that config on boot and every 10 minutes while signed in;
+ *  - caches it at `~/.crewly/slack-cloud-config.json` (mode 0600) so a
+ *    restart without Cloud reachability still connects;
+ *  - exposes the master bot as a {@link SlackConfig} with the `cloud`
+ *    transport for `SlackService`, and the agents for
+ *    `SlackAgentIdentityService`;
+ *  - notifies listeners when the config appears, changes or goes away, so
+ *    the initializer can (re)connect without a restart.
+ *
+ * Source precedence lives in {@link resolveSlackSourceMode}: unset → Cloud
+ * wins when both exist (logged once), `CREWLY_SLACK_SOURCE=env` → never
+ * touch Cloud, `CREWLY_SLACK_SOURCE=cloud` → never use local tokens.
+ *
+ * @module services/slack/slack-cloud-config.service
+ */
+import type { SlackCloudAgentConfig, SlackCloudConfig, SlackConfig } from '../../types/slack.types.js';
+import { type IdentityCloudClient } from './slack-agent-identity.service.js';
+/** Where the Slack tokens come from. */
+export type SlackSourceMode = 'env' | 'cloud' | 'auto';
+/** Constructor dependencies. */
+export interface SlackCloudConfigServiceDeps {
+    cloud: IdentityCloudClient;
+    /** Cache path; defaults to `<CREWLY_HOME>/slack-cloud-config.json`. */
+    storePath?: string;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+    /** Timer overrides for tests. */
+    setInterval?: typeof setInterval;
+    clearInterval?: typeof clearInterval;
+    /** Environment override for tests. */
+    env?: NodeJS.ProcessEnv;
+}
+/** Listener for config changes (`null` = Cloud has no workspace any more). */
+export type SlackCloudConfigListener = (config: SlackCloudConfig | null) => void;
+/**
+ * Read `CREWLY_SLACK_SOURCE` into a mode. Anything but `env` / `cloud`
+ * (case-insensitive) is `auto`.
+ *
+ * @param env - Environment to read (defaults to `process.env`)
+ * @returns The mode
+ */
+export declare function resolveSlackSourceMode(env?: NodeJS.ProcessEnv): SlackSourceMode;
+/**
+ * Service — see module docs.
+ */
+export declare class SlackCloudConfigService {
+    private readonly logger;
+    private readonly deps;
+    private readonly storePath;
+    private readonly fetchImpl;
+    private config;
+    private fetchedAt;
+    private loading;
+    private refreshTimer;
+    private lastError;
+    private readonly listeners;
+    constructor(deps: SlackCloudConfigServiceDeps);
+    /**
+     * Whether Cloud can be asked (signed in, url + token known) and the source
+     * mode does not forbid it.
+     *
+     * @returns True when `refresh()` can reach Cloud
+     */
+    isAvailable(): boolean;
+    /**
+     * The configured source mode (`CREWLY_SLACK_SOURCE`).
+     *
+     * @returns `env`, `cloud` or `auto`
+     */
+    getSourceMode(): SlackSourceMode;
+    /**
+     * Load the cached config from disk once. Never touches Cloud.
+     *
+     * @returns The cached config or null
+     */
+    load(): Promise<SlackCloudConfig | null>;
+    /**
+     * Fetch `GET /api/cloud/slack/config`, update the cache and notify
+     * listeners when the config changed. A 404 means the account has no
+     * workspace installed: the cache is cleared. A network / Cloud failure
+     * keeps whatever is cached and is reported via {@link getLastError}.
+     *
+     * @returns The current config after the refresh (cached on failure)
+     */
+    refresh(): Promise<SlackCloudConfig | null>;
+    /**
+     * Convenience for boot: cached copy first, then a Cloud refresh when
+     * possible. Returns the best available config.
+     *
+     * @returns The config or null
+     */
+    loadOrRefresh(): Promise<SlackCloudConfig | null>;
+    /**
+     * Forget the cached config (workspace removed). Notifies listeners.
+     */
+    clear(): Promise<void>;
+    /**
+     * Remove the account's Slack workspace on Cloud (`DELETE
+     * /api/cloud/slack/workspace`) and forget the local cache. Every instance
+     * of the account loses Slack on its next refresh.
+     *
+     * @returns True when Cloud removed a workspace
+     * @throws {SlackIdentityCloudError} on a Cloud failure
+     */
+    removeWorkspace(): Promise<boolean>;
+    /**
+     * Periodic refresh (every 10 min). Idempotent; never keeps the process
+     * alive on its own.
+     */
+    start(): void;
+    /** Stop the periodic refresh. */
+    stop(): void;
+    /**
+     * The in-memory config (call {@link load} / {@link refresh} first).
+     *
+     * @returns The config or null
+     */
+    getConfig(): SlackCloudConfig | null;
+    /**
+     * ISO timestamp of the last successful Cloud fetch (or the cache's).
+     *
+     * @returns Timestamp or null
+     */
+    getFetchedAt(): string | null;
+    /**
+     * Last refresh failure, if the most recent attempt failed.
+     *
+     * @returns Error message or null
+     */
+    getLastError(): string | null;
+    /**
+     * The master workspace as a {@link SlackConfig} for `SlackService`
+     * (`transport: 'cloud'`, no socket credentials). Optional env knobs
+     * (`SLACK_DEFAULT_CHANNEL`, `SLACK_ALLOWED_USERS`) still apply.
+     *
+     * @returns The config, or null without a workspace
+     */
+    toSlackConfig(): SlackConfig | null;
+    /**
+     * Installed per-agent identities from the config.
+     *
+     * @returns Copies (tokens included — never log them)
+     */
+    getAgents(): SlackCloudAgentConfig[];
+    /**
+     * Register a change listener. Fired after the cache is written.
+     *
+     * @param listener - Called with the new config (null when removed)
+     * @returns Unsubscribe
+     */
+    onChange(listener: SlackCloudConfigListener): () => void;
+    /** Persist + notify when the config differs from the current one. */
+    private apply;
+    /** `GET /api/cloud/slack/config`; null on 404 (not connected). */
+    private fetchFromCloud;
+    private now;
+}
+/**
+ * Runtime guard for the Cloud config payload.
+ *
+ * @param value - Parsed JSON
+ * @returns True when it has a workspace with a bot token and an agents list
+ */
+export declare function isCloudConfig(value: unknown): value is SlackCloudConfig;
+/**
+ * Install the process-wide instance (composition root).
+ *
+ * @param service - The service or null
+ */
+export declare function setSlackCloudConfigService(service: SlackCloudConfigService | null): void;
+/**
+ * The process-wide instance, or null before wiring.
+ *
+ * @returns The service or null
+ */
+export declare function getSlackCloudConfigService(): SlackCloudConfigService | null;
+//# sourceMappingURL=slack-cloud-config.service.d.ts.map

package/dist/backend/backend/src/services/slack/slack-cloud-config.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-cloud-config.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/slack/slack-cloud-config.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EACV,qBAAqB,EACrB,gBAAgB,EAEhB,WAAW,EACZ,MAAM,4BAA4B,CAAC;AAKpC,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAEtG,wCAAwC;AACxC,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AAEvD,gCAAgC;AAChC,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,mBAAmB,CAAC;IAC3B,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iCAAiC;IACjC,WAAW,CAAC,EAAE,OAAO,WAAW,CAAC;IACjC,aAAa,CAAC,EAAE,OAAO,aAAa,CAAC;IACrC,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,8EAA8E;AAC9E,MAAM,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,KAAK,IAAI,CAAC;AAEjF;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,eAAe,CAI5F;AAED;;GAEG;AACH,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA8B;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,MAAM,CAAiC;IAC/C,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,OAAO,CAAiD;IAChE,OAAO,CAAC,YAAY,CAA+C;IACnE,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;gBAErD,IAAI,EAAE,2BAA2B;IAY7C;;;;;OAKG;IACH,WAAW,IAAI,OAAO;IAKtB;;;;OAIG;IACH,aAAa,IAAI,eAAe;IAQhC;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAc9C;;;;;;;OAOG;IACG,OAAO,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAiBjD;;;;;OAKG;IACG,aAAa,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAMvD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B;;;;;;;OAOG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IA0CzC;;;OAGG;IACH,KAAK,IAAI,IAAI;IASb,iCAAiC;IACjC,IAAI,IAAI,IAAI;IAWZ;;;;OAIG;IACH,SAAS,IAAI,gBAAgB,GAAG,IAAI;IAIpC;;;;OAIG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAI7B;;;;OAIG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAI7B;;;;;;OAMG;IACH,aAAa,IAAI,WAAW,GAAG,IAAI;IAgBnC;;;;OAIG;IACH,SAAS,IAAI,qBAAqB,EAAE;IAIpC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,GAAG,MAAM,IAAI;IASxD,qEAAqE;YACvD,KAAK;IA0BnB,kEAAkE;YACpD,cAAc;IA2C5B,OAAO,CAAC,GAAG;CAGZ;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAavE;AAID;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,GAAG,IAAI,CAExF;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,uBAAuB,GAAG,IAAI,CAE3E"}

package/dist/backend/backend/src/services/slack/slack-cloud-config.service.js

@@ -0,0 +1,409 @@
+/**
+ * Slack Cloud Config Service — the Cloud-owned Slack setup, cached locally.
+ *
+ * Slack v3 ("Crewly Cloud owns Slack"): the owner installs the Crewly Slack
+ * app once from the portal; every OSS instance signed in to the same Crewly
+ * account then gets the workspace bot token, bot user id and the installed
+ * per-agent identities from `GET /api/cloud/slack/config` — no manual
+ * tokens. This service:
+ *
+ *  - fetches that config on boot and every 10 minutes while signed in;
+ *  - caches it at `~/.crewly/slack-cloud-config.json` (mode 0600) so a
+ *    restart without Cloud reachability still connects;
+ *  - exposes the master bot as a {@link SlackConfig} with the `cloud`
+ *    transport for `SlackService`, and the agents for
+ *    `SlackAgentIdentityService`;
+ *  - notifies listeners when the config appears, changes or goes away, so
+ *    the initializer can (re)connect without a restart.
+ *
+ * Source precedence lives in {@link resolveSlackSourceMode}: unset → Cloud
+ * wins when both exist (logged once), `CREWLY_SLACK_SOURCE=env` → never
+ * touch Cloud, `CREWLY_SLACK_SOURCE=cloud` → never use local tokens.
+ *
+ * @module services/slack/slack-cloud-config.service
+ */
+import * as path from 'path';
+import { promises as fs } from 'fs';
+import { getCrewlyHomePath } from '../core/crewly-home.utils.js';
+import { atomicWriteJson, safeReadJson } from '../../utils/file-io.utils.js';
+import { LoggerService } from '../core/logger.service.js';
+import { SLACK_CLOUD_CONSTANTS } from '../../constants.js';
+import { SlackIdentityCloudError } from './slack-agent-identity.service.js';
+/**
+ * Read `CREWLY_SLACK_SOURCE` into a mode. Anything but `env` / `cloud`
+ * (case-insensitive) is `auto`.
+ *
+ * @param env - Environment to read (defaults to `process.env`)
+ * @returns The mode
+ */
+export function resolveSlackSourceMode(env = process.env) {
+    const raw = (env[SLACK_CLOUD_CONSTANTS.SOURCE_ENV_VAR] ?? '').trim().toLowerCase();
+    if (raw === 'env' || raw === 'cloud')
+        return raw;
+    return 'auto';
+}
+/**
+ * Service — see module docs.
+ */
+export class SlackCloudConfigService {
+    logger;
+    deps;
+    storePath;
+    fetchImpl;
+    config = null;
+    fetchedAt = null;
+    loading = null;
+    refreshTimer = null;
+    lastError = null;
+    listeners = new Set();
+    constructor(deps) {
+        this.deps = deps;
+        this.storePath =
+            deps.storePath ?? path.join(getCrewlyHomePath(), SLACK_CLOUD_CONSTANTS.CONFIG_CACHE_FILENAME);
+        this.fetchImpl = deps.fetchImpl ?? fetch;
+        this.logger = LoggerService.getInstance().createComponentLogger('SlackCloudConfig');
+    }
+    // -------------------------------------------------------------------------
+    // Availability / mode
+    // -------------------------------------------------------------------------
+    /**
+     * Whether Cloud can be asked (signed in, url + token known) and the source
+     * mode does not forbid it.
+     *
+     * @returns True when `refresh()` can reach Cloud
+     */
+    isAvailable() {
+        if (this.getSourceMode() === 'env')
+            return false;
+        return this.deps.cloud.isConnected() && !!this.deps.cloud.getToken() && !!this.deps.cloud.getCloudUrl();
+    }
+    /**
+     * The configured source mode (`CREWLY_SLACK_SOURCE`).
+     *
+     * @returns `env`, `cloud` or `auto`
+     */
+    getSourceMode() {
+        return resolveSlackSourceMode(this.deps.env ?? process.env);
+    }
+    // -------------------------------------------------------------------------
+    // Cache + Cloud
+    // -------------------------------------------------------------------------
+    /**
+     * Load the cached config from disk once. Never touches Cloud.
+     *
+     * @returns The cached config or null
+     */
+    async load() {
+        if (this.config)
+            return this.config;
+        if (!this.loading) {
+            this.loading = safeReadJson(this.storePath, null).then((raw) => {
+                if (raw && isCloudConfig(raw.config)) {
+                    this.config = raw.config;
+                    this.fetchedAt = typeof raw.fetchedAt === 'string' ? raw.fetchedAt : null;
+                }
+                return this.config;
+            });
+        }
+        return this.loading;
+    }
+    /**
+     * Fetch `GET /api/cloud/slack/config`, update the cache and notify
+     * listeners when the config changed. A 404 means the account has no
+     * workspace installed: the cache is cleared. A network / Cloud failure
+     * keeps whatever is cached and is reported via {@link getLastError}.
+     *
+     * @returns The current config after the refresh (cached on failure)
+     */
+    async refresh() {
+        await this.load();
+        if (!this.isAvailable())
+            return this.config;
+        try {
+            const fetched = await this.fetchFromCloud();
+            this.lastError = null;
+            await this.apply(fetched);
+        }
+        catch (err) {
+            this.lastError = err instanceof Error ? err.message : String(err);
+            this.logger.warn('Cloud Slack config refresh failed — keeping cached copy', {
+                error: this.lastError,
+                cached: !!this.config,
+            });
+        }
+        return this.config;
+    }
+    /**
+     * Convenience for boot: cached copy first, then a Cloud refresh when
+     * possible. Returns the best available config.
+     *
+     * @returns The config or null
+     */
+    async loadOrRefresh() {
+        await this.load();
+        if (this.isAvailable())
+            await this.refresh();
+        return this.config;
+    }
+    /**
+     * Forget the cached config (workspace removed). Notifies listeners.
+     */
+    async clear() {
+        await this.apply(null);
+    }
+    /**
+     * Remove the account's Slack workspace on Cloud (`DELETE
+     * /api/cloud/slack/workspace`) and forget the local cache. Every instance
+     * of the account loses Slack on its next refresh.
+     *
+     * @returns True when Cloud removed a workspace
+     * @throws {SlackIdentityCloudError} on a Cloud failure
+     */
+    async removeWorkspace() {
+        const token = this.deps.cloud.getToken();
+        const base = this.deps.cloud.getCloudUrl();
+        if (!token || !base) {
+            throw new SlackIdentityCloudError(401, 'not_logged_in', 'Not logged in to Crewly Cloud');
+        }
+        const url = `${base.replace(/\/$/, '')}${SLACK_CLOUD_CONSTANTS.CLOUD_PATH}${SLACK_CLOUD_CONSTANTS.WORKSPACE_PATH}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), SLACK_CLOUD_CONSTANTS.REQUEST_TIMEOUT_MS);
+        let removed = false;
+        try {
+            const res = await this.fetchImpl(url, {
+                method: 'DELETE',
+                headers: { Authorization: `Bearer ${token}` },
+                signal: controller.signal,
+            });
+            const text = await res.text();
+            let parsed = {};
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                parsed = {};
+            }
+            if (res.status !== 404 && (!res.ok || parsed.success !== true)) {
+                throw new SlackIdentityCloudError(res.status, parsed.code ?? `http_${res.status}`, parsed.error ?? `Cloud request failed (${res.status})`);
+            }
+            removed = res.ok && parsed.data?.removed !== false;
+        }
+        catch (err) {
+            if (err instanceof SlackIdentityCloudError)
+                throw err;
+            const message = err instanceof Error ? err.message : String(err);
+            throw new SlackIdentityCloudError(502, 'network', `Cloud unreachable: ${message}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        await this.clear();
+        return removed;
+    }
+    /**
+     * Periodic refresh (every 10 min). Idempotent; never keeps the process
+     * alive on its own.
+     */
+    start() {
+        if (this.refreshTimer)
+            return;
+        const setI = this.deps.setInterval ?? setInterval;
+        this.refreshTimer = setI(() => {
+            void this.refresh();
+        }, SLACK_CLOUD_CONSTANTS.CONFIG_REFRESH_INTERVAL_MS);
+        this.refreshTimer.unref?.();
+    }
+    /** Stop the periodic refresh. */
+    stop() {
+        if (!this.refreshTimer)
+            return;
+        const clearI = this.deps.clearInterval ?? clearInterval;
+        clearI(this.refreshTimer);
+        this.refreshTimer = null;
+    }
+    // -------------------------------------------------------------------------
+    // Read model
+    // -------------------------------------------------------------------------
+    /**
+     * The in-memory config (call {@link load} / {@link refresh} first).
+     *
+     * @returns The config or null
+     */
+    getConfig() {
+        return this.config;
+    }
+    /**
+     * ISO timestamp of the last successful Cloud fetch (or the cache's).
+     *
+     * @returns Timestamp or null
+     */
+    getFetchedAt() {
+        return this.fetchedAt;
+    }
+    /**
+     * Last refresh failure, if the most recent attempt failed.
+     *
+     * @returns Error message or null
+     */
+    getLastError() {
+        return this.lastError;
+    }
+    /**
+     * The master workspace as a {@link SlackConfig} for `SlackService`
+     * (`transport: 'cloud'`, no socket credentials). Optional env knobs
+     * (`SLACK_DEFAULT_CHANNEL`, `SLACK_ALLOWED_USERS`) still apply.
+     *
+     * @returns The config, or null without a workspace
+     */
+    toSlackConfig() {
+        const workspace = this.config?.workspace;
+        if (!workspace?.botToken)
+            return null;
+        const env = this.deps.env ?? process.env;
+        return {
+            botToken: workspace.botToken,
+            appToken: '',
+            signingSecret: '',
+            socketMode: false,
+            transport: 'cloud',
+            botUserId: workspace.botUserId,
+            defaultChannelId: env.SLACK_DEFAULT_CHANNEL,
+            allowedUserIds: env.SLACK_ALLOWED_USERS?.split(',').filter(Boolean),
+        };
+    }
+    /**
+     * Installed per-agent identities from the config.
+     *
+     * @returns Copies (tokens included — never log them)
+     */
+    getAgents() {
+        return (this.config?.agents ?? []).map((a) => ({ ...a }));
+    }
+    /**
+     * Register a change listener. Fired after the cache is written.
+     *
+     * @param listener - Called with the new config (null when removed)
+     * @returns Unsubscribe
+     */
+    onChange(listener) {
+        this.listeners.add(listener);
+        return () => this.listeners.delete(listener);
+    }
+    // -------------------------------------------------------------------------
+    // Internals
+    // -------------------------------------------------------------------------
+    /** Persist + notify when the config differs from the current one. */
+    async apply(next) {
+        const changed = JSON.stringify(next) !== JSON.stringify(this.config);
+        this.config = next;
+        this.fetchedAt = new Date(this.now()).toISOString();
+        if (next) {
+            const file = { version: 1, fetchedAt: this.fetchedAt, config: next };
+            await fs.mkdir(path.dirname(this.storePath), { recursive: true });
+            await atomicWriteJson(this.storePath, file);
+            await fs.chmod(this.storePath, 0o600).catch(() => undefined);
+        }
+        else {
+            await fs.unlink(this.storePath).catch(() => undefined);
+        }
+        if (!changed)
+            return;
+        this.logger.info(next ? 'Cloud Slack config updated' : 'Cloud Slack config removed', {
+            workspace: next?.workspace.slackTeamName,
+            agents: next?.agents.length ?? 0,
+        });
+        for (const listener of this.listeners) {
+            try {
+                listener(next ? { ...next } : null);
+            }
+            catch (err) {
+                this.logger.warn('onChange listener threw', { error: err instanceof Error ? err.message : String(err) });
+            }
+        }
+    }
+    /** `GET /api/cloud/slack/config`; null on 404 (not connected). */
+    async fetchFromCloud() {
+        const token = this.deps.cloud.getToken();
+        const base = this.deps.cloud.getCloudUrl();
+        if (!token || !base) {
+            throw new SlackIdentityCloudError(401, 'not_logged_in', 'Not logged in to Crewly Cloud');
+        }
+        const url = `${base.replace(/\/$/, '')}${SLACK_CLOUD_CONSTANTS.CLOUD_PATH}${SLACK_CLOUD_CONSTANTS.CONFIG_PATH}`;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), SLACK_CLOUD_CONSTANTS.REQUEST_TIMEOUT_MS);
+        try {
+            const res = await this.fetchImpl(url, {
+                method: 'GET',
+                headers: { Authorization: `Bearer ${token}` },
+                signal: controller.signal,
+            });
+            if (res.status === 404)
+                return null;
+            const text = await res.text();
+            let parsed = {};
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                parsed = {};
+            }
+            if (!res.ok || parsed.success !== true) {
+                throw new SlackIdentityCloudError(res.status, parsed.code ?? `http_${res.status}`, parsed.error ?? `Cloud request failed (${res.status})`);
+            }
+            if (!isCloudConfig(parsed.data)) {
+                throw new SlackIdentityCloudError(502, 'bad_config', 'Cloud returned a malformed Slack config');
+            }
+            return parsed.data;
+        }
+        catch (err) {
+            if (err instanceof SlackIdentityCloudError)
+                throw err;
+            const message = err instanceof Error ? err.message : String(err);
+            throw new SlackIdentityCloudError(502, 'network', `Cloud unreachable: ${message}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    now() {
+        return this.deps.now?.() ?? Date.now();
+    }
+}
+/**
+ * Runtime guard for the Cloud config payload.
+ *
+ * @param value - Parsed JSON
+ * @returns True when it has a workspace with a bot token and an agents list
+ */
+export function isCloudConfig(value) {
+    const v = value;
+    if (!v || typeof v !== 'object')
+        return false;
+    const w = v.workspace;
+    if (!w || typeof w.botToken !== 'string' || !w.botToken || typeof w.slackTeamId !== 'string')
+        return false;
+    if (!Array.isArray(v.agents))
+        return false;
+    return v.agents.every((a) => a &&
+        typeof a.agentSession === 'string' &&
+        typeof a.botToken === 'string' &&
+        typeof a.botUserId === 'string');
+}
+let instance = null;
+/**
+ * Install the process-wide instance (composition root).
+ *
+ * @param service - The service or null
+ */
+export function setSlackCloudConfigService(service) {
+    instance = service;
+}
+/**
+ * The process-wide instance, or null before wiring.
+ *
+ * @returns The service or null
+ */
+export function getSlackCloudConfigService() {
+    return instance;
+}
+//# sourceMappingURL=slack-cloud-config.service.js.map

package/dist/backend/backend/src/services/slack/slack-cloud-config.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-cloud-config.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/slack/slack-cloud-config.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AAOpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAA4B,MAAM,mCAAmC,CAAC;AAsBtG;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnF,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,uBAAuB;IACjB,MAAM,CAAkB;IACxB,IAAI,CAA8B;IAClC,SAAS,CAAS;IAClB,SAAS,CAAe;IACjC,MAAM,GAA4B,IAAI,CAAC;IACvC,SAAS,GAAkB,IAAI,CAAC;IAChC,OAAO,GAA4C,IAAI,CAAC;IACxD,YAAY,GAA0C,IAAI,CAAC;IAC3D,SAAS,GAAkB,IAAI,CAAC;IACvB,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEjE,YAAY,IAAiC;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS;YACZ,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAChG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IACtF,CAAC;IAED,4EAA4E;IAC5E,sBAAsB;IACtB,4EAA4E;IAE5E;;;;;OAKG;IACH,WAAW;QACT,IAAI,IAAI,CAAC,aAAa,EAAE,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC1G,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,4EAA4E;IAC5E,gBAAgB;IAChB,4EAA4E;IAE5E;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,YAAY,CAA8B,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1F,IAAI,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;oBACzB,IAAI,CAAC,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5E,CAAC;gBACD,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yDAAyD,EAAE;gBAC1E,KAAK,EAAE,IAAI,CAAC,SAAS;gBACrB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,eAAe,EAAE,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,qBAAqB,CAAC,UAAU,GAAG,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACnH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAC7F,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACpC,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;gBAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,MAAM,GAAuF,EAAE,CAAC;YACpG,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,EAAE,CAAC;YACd,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,uBAAuB,CAC/B,GAAG,CAAC,MAAM,EACV,MAAM,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EACnC,MAAM,CAAC,KAAK,IAAI,yBAAyB,GAAG,CAAC,MAAM,GAAG,CACvD,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,KAAK,KAAK,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAuB;gBAAE,MAAM,GAAG,CAAC;YACtD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC,EAAE,qBAAqB,CAAC,0BAA0B,CAAC,CAAC;QACpD,IAAI,CAAC,YAAuC,CAAC,KAAK,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,iCAAiC;IACjC,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,4EAA4E;IAC5E,aAAa;IACb,4EAA4E;IAE5E;;;;OAIG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,aAAa;QACX,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;QACzC,IAAI,CAAC,SAAS,EAAE,QAAQ;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACzC,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,EAAE;YACZ,aAAa,EAAE,EAAE;YACjB,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,OAAO;YAClB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,gBAAgB,EAAE,GAAG,CAAC,qBAAqB;YAC3C,cAAc,EAAE,GAAG,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SACpE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,SAAS;QACP,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,QAAkC;QACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAE5E,qEAAqE;IAC7D,KAAK,CAAC,KAAK,CAAC,IAA6B;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,GAAyB,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC3F,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,MAAM,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,4BAA4B,EAAE;YACnF,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa;YACxC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;SACjC,CAAC,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAC1D,KAAK,CAAC,cAAc;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,eAAe,EAAE,+BAA+B,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,qBAAqB,CAAC,UAAU,GAAG,qBAAqB,CAAC,WAAW,EAAE,CAAC;QAChH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAC7F,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;gBACpC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;gBAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,MAAM,GAAyE,EAAE,CAAC;YACtF,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,EAAE,CAAC;YACd,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBACvC,MAAM,IAAI,uBAAuB,CAC/B,GAAG,CAAC,MAAM,EACV,MAAM,CAAC,IAAI,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EACnC,MAAM,CAAC,KAAK,IAAI,yBAAyB,GAAG,CAAC,MAAM,GAAG,CACvD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,YAAY,EAAE,yCAAyC,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,uBAAuB;gBAAE,MAAM,GAAG,CAAC;YACtD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACzC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,CAAC,GAAG,KAAyC,CAAC;IACpD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAA+D,CAAC;IAC5E,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CACnB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACD,OAAQ,CAA2B,CAAC,YAAY,KAAK,QAAQ;QAC7D,OAAQ,CAA2B,CAAC,QAAQ,KAAK,QAAQ;QACzD,OAAQ,CAA2B,CAAC,SAAS,KAAK,QAAQ,CAC7D,CAAC;AACJ,CAAC;AAED,IAAI,QAAQ,GAAmC,IAAI,CAAC;AAEpD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAuC;IAChF,QAAQ,GAAG,OAAO,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,QAAQ,CAAC;AAClB,CAAC"}