teamclaws 1.0.0

package/dist/validation.js

@@ -0,0 +1,458 @@
+import { isIP } from "node:net";
+import { TeamClawsError } from "./errors.js";
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+export function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function assertExactKeys(value, required, optional = [], label = "response") {
+    const allowed = new Set([...required, ...optional]);
+    for (const key of Object.keys(value)) {
+        if (!allowed.has(key)) {
+            throw new TeamClawsError("invalid_response", `TeamClaws returned an invalid ${label}.`, { exitCode: 9 });
+        }
+    }
+    for (const key of required) {
+        if (!(key in value)) {
+            throw new TeamClawsError("invalid_response", `TeamClaws returned an incomplete ${label}.`, { exitCode: 9 });
+        }
+    }
+}
+export function requireString(value, label, maxLength = 2_048) {
+    if (typeof value !== "string" ||
+        value.length === 0 ||
+        value.length > maxLength) {
+        throw new TeamClawsError("invalid_response", `TeamClaws returned an invalid ${label}.`, {
+            exitCode: 9,
+        });
+    }
+    return value;
+}
+export function requireInteger(value, label, minimum, maximum) {
+    if (!Number.isInteger(value) ||
+        Number(value) < minimum ||
+        Number(value) > maximum) {
+        throw new TeamClawsError("invalid_response", `TeamClaws returned an invalid ${label}.`, {
+            exitCode: 9,
+        });
+    }
+    return Number(value);
+}
+export function normalizeUuid(value, label = "server identifier") {
+    const normalized = requireString(value, label, 36).toLowerCase();
+    if (!UUID_PATTERN.test(normalized)) {
+        throw new TeamClawsError("invalid_target", `The ${label} is not valid.`, {
+            exitCode: 2,
+        });
+    }
+    return normalized;
+}
+export function canonicalWorkspaceUrl(value) {
+    return `${canonicalWorkspaceOrigin(value)}/`;
+}
+export function canonicalWorkspaceOrigin(value) {
+    const raw = requireString(value, "workspace address", 2_048);
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new TeamClawsError("invalid_target", "The workspace address is not valid.", {
+            exitCode: 2,
+        });
+    }
+    if (url.protocol !== "https:" ||
+        url.username !== "" ||
+        url.password !== "" ||
+        url.search !== "" ||
+        url.hash !== "" ||
+        url.port !== "" ||
+        (url.pathname !== "" && url.pathname !== "/") ||
+        url.hostname === "localhost" ||
+        isIP(url.hostname) !== 0) {
+        throw new TeamClawsError("invalid_target", "Use a canonical HTTPS TeamClaws workspace address.", { exitCode: 2 });
+    }
+    return url.origin;
+}
+export function parsePairingTarget(value) {
+    if (UUID_PATTERN.test(value))
+        return { server_id: value.toLowerCase() };
+    return { workspace_url: canonicalWorkspaceUrl(value) };
+}
+export function validateDirectTarget(value) {
+    if (!isObject(value)) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid target.", {
+            exitCode: 9,
+        });
+    }
+    assertExactKeys(value, [
+        "origin",
+        "token_poll_path",
+        "cancellation_path",
+        "credential_verification_path",
+    ], [], "target");
+    const origin = canonicalWorkspaceOrigin(value.origin);
+    const target = {
+        origin,
+        token_poll_path: validateRelativeTargetPath(value.token_poll_path, origin),
+        cancellation_path: validateRelativeTargetPath(value.cancellation_path, origin),
+        credential_verification_path: validateRelativeTargetPath(value.credential_verification_path, origin),
+    };
+    return target;
+}
+export function validateRelativeTargetPath(value, origin) {
+    const path = requireString(value, "target path", 2_048);
+    if (!path.startsWith("/") ||
+        path.startsWith("//") ||
+        path.includes("\\") ||
+        path.includes("?") ||
+        path.includes("#")) {
+        throw new TeamClawsError("unsafe_target", "TeamClaws returned an unsafe target path.", {
+            exitCode: 9,
+        });
+    }
+    const resolved = new URL(path, origin);
+    if (resolved.origin !== origin || resolved.pathname !== path) {
+        throw new TeamClawsError("unsafe_target", "TeamClaws returned an unsafe target path.", {
+            exitCode: 9,
+        });
+    }
+    return path;
+}
+export function directTargetUrl(target, path) {
+    return new URL(path, `${target.origin}/`).toString();
+}
+export function parsePendingPairing(value) {
+    if (!isObject(value)) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid pairing response.", {
+            exitCode: 9,
+        });
+    }
+    assertExactKeys(value, [
+        "contract_version",
+        "server_id",
+        "target",
+        "user_code",
+        "verification_uri_complete",
+        "expires_in",
+        "interval",
+        "status",
+        "device_code",
+    ], ["agent_action"], "pairing response");
+    if (value.contract_version !== 1 || value.status !== "pending") {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an unsupported pairing response.", {
+            exitCode: 9,
+        });
+    }
+    const target = validateDirectTarget(value.target);
+    const verificationText = requireString(value.verification_uri_complete, "approval address", 2_048);
+    const verification = requireHttpsUrl(verificationText, "approval address");
+    if (verification.origin !== target.origin) {
+        throw new TeamClawsError("unsafe_target", "The pairing approval address does not match the selected workspace.", { exitCode: 9 });
+    }
+    const userCode = requireString(value.user_code, "user code", 64);
+    const deviceCode = requireString(value.device_code, "device code", 4_096);
+    const pending = {
+        contract_version: 1,
+        server_id: normalizeUuid(value.server_id),
+        target,
+        user_code: userCode,
+        verification_uri_complete: verificationText,
+        expires_in: requireInteger(value.expires_in, "pairing expiry", 1, 1_800),
+        interval: requireInteger(value.interval, "polling interval", 1, 60),
+        status: "pending",
+        device_code: deviceCode,
+    };
+    if ("agent_action" in value) {
+        pending.agent_action = parseAgentAction(value.agent_action, verificationText, userCode, deviceCode);
+    }
+    return pending;
+}
+export function parseAgentAction(value, verificationUri, userCode, deviceCode) {
+    if (!isObject(value)) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid agent action.", { exitCode: 9 });
+    }
+    assertExactKeys(value, [
+        "schema_version",
+        "type",
+        "message_format",
+        "message_markdown",
+        "expires_at",
+    ], [], "agent action");
+    const message = requireString(value.message_markdown, "agent action message", 8_192);
+    if (value.schema_version !== 1 ||
+        value.type !== "deliver_and_stop" ||
+        value.message_format !== "markdown" ||
+        !message.includes(verificationUri) ||
+        !message.includes(userCode) ||
+        message.includes(deviceCode)) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an unsafe agent action.", { exitCode: 9 });
+    }
+    return {
+        schema_version: 1,
+        type: "deliver_and_stop",
+        message_format: "markdown",
+        message_markdown: message,
+        expires_at: requireIsoDate(value.expires_at, "agent action expiry"),
+    };
+}
+export function requireHttpsUrl(value, label) {
+    const raw = requireString(value, label, 4_096);
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new TeamClawsError("invalid_response", `TeamClaws returned an invalid ${label}.`, {
+            exitCode: 9,
+        });
+    }
+    if (url.protocol !== "https:" || url.username !== "" || url.password !== "") {
+        throw new TeamClawsError("invalid_response", `TeamClaws returned an unsafe ${label}.`, {
+            exitCode: 9,
+        });
+    }
+    return url;
+}
+export function parsePairingCredential(value) {
+    if (!isObject(value) || value.status !== "paired") {
+        throw new TeamClawsError("invalid_response", "The workspace returned an invalid credential.", {
+            exitCode: 9,
+        });
+    }
+    if (value.token_type !== "Bearer") {
+        throw new TeamClawsError("invalid_response", "The workspace returned an unsupported credential.", {
+            exitCode: 9,
+        });
+    }
+    return {
+        device_id: normalizeUuid(value.device_id, "device identifier"),
+        device_token: requireString(value.device_token, "device token", 8_192),
+        ...(Object.hasOwn(value, "external_chat_capabilities")
+            ? {
+                external_chat_capabilities: value.external_chat_capabilities,
+                external_chat_capabilities_generated_at: value.external_chat_capabilities_generated_at,
+            }
+            : {}),
+    };
+}
+export function parseVerifiedDevice(value, expectedDeviceId) {
+    if (!isObject(value) || !isObject(value.paired_device)) {
+        throw new TeamClawsError("credential_verification_failed", "The workspace credential was not verified.", {
+            exitCode: 9,
+        });
+    }
+    const id = normalizeUuid(value.paired_device.id, "device identifier");
+    if (id !== expectedDeviceId || value.paired_device.status !== "active") {
+        throw new TeamClawsError("credential_verification_failed", "The workspace credential was not verified.", {
+            exitCode: 9,
+        });
+    }
+    return requireString(value.paired_device.display_name, "workspace device name", 120);
+}
+export function parseVerifiedWorkspace(value, expectedDeviceId, origin) {
+    if (!isObject(value)) {
+        throw new TeamClawsError("credential_verification_failed", "The workspace credential was not verified.", { exitCode: 9 });
+    }
+    return {
+        display_name: parseVerifiedDevice(value, expectedDeviceId),
+        external_chat_handoff: parseExternalChatHandoff(value.external_chat_handoff, origin),
+    };
+}
+export function parseExternalChatHandoff(value, origin) {
+    if (!isObject(value) ||
+        value.schema_version !== 1 ||
+        value.contract_version !== 1) {
+        throw invalidExternalChatHandoff();
+    }
+    const reasonCodes = parseReasonCodes(value.reason_codes);
+    if (value.status === "re_pair_required" &&
+        value.recommended_action === "re_pair" &&
+        reasonCodes.length > 0) {
+        return {
+            schema_version: 1,
+            contract_version: 1,
+            status: "re_pair_required",
+            reason_codes: reasonCodes,
+            recommended_action: "re_pair",
+        };
+    }
+    if (value.status === "unavailable" &&
+        value.recommended_action === "retry_later" &&
+        reasonCodes.includes("client_bundle_unavailable")) {
+        return {
+            schema_version: 1,
+            contract_version: 1,
+            status: "unavailable",
+            reason_codes: reasonCodes,
+            recommended_action: "retry_later",
+        };
+    }
+    const skillUrl = `${origin}/teamclaws-admin/device-chat-client/SKILL.md`;
+    const bundleSha256 = requireString(value.bundle_sha256, "external chat bundle digest", 64);
+    if (value.status !== "ready" ||
+        value.recommended_action !== "load_skill" ||
+        reasonCodes.length !== 0 ||
+        value.skill_name !== "teamclaws-external-chat-client" ||
+        value.skill_url !== skillUrl ||
+        value.capabilities_url !==
+            "/teamclaws-admin/api/device-chat/v1/capabilities/" ||
+        !/^[0-9a-f]{64}$/u.test(bundleSha256)) {
+        throw invalidExternalChatHandoff();
+    }
+    return {
+        schema_version: 1,
+        contract_version: 1,
+        status: "ready",
+        reason_codes: [],
+        skill_url: skillUrl,
+        skill_name: "teamclaws-external-chat-client",
+        bundle_sha256: bundleSha256,
+        capabilities_url: "/teamclaws-admin/api/device-chat/v1/capabilities/",
+        recommended_action: "load_skill",
+    };
+}
+export function parseSafeUserResponse(value) {
+    if (!isObject(value)) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid account response.", {
+            exitCode: 9,
+        });
+    }
+    assertExactKeys(value, ["id", "email", "display_name", "expires_at", "token_expired"], [], "account response");
+    if (value.token_expired !== false) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid account response.", {
+            exitCode: 9,
+        });
+    }
+    requireIsoDate(value.expires_at, "access-token expiry");
+    return {
+        id: normalizeUuid(value.id, "user identifier"),
+        display_name: requireString(value.display_name, "display name", 200),
+        email: requireString(value.email, "email", 320),
+    };
+}
+export function parseServersResponse(value) {
+    if (!isObject(value)) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid server list.", {
+            exitCode: 9,
+        });
+    }
+    assertExactKeys(value, ["servers"], [], "server list");
+    if (!Array.isArray(value.servers)) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid server list.", {
+            exitCode: 9,
+        });
+    }
+    if (value.servers.length > 1_000) {
+        throw new TeamClawsError("invalid_response", "TeamClaws returned too many servers.", {
+            exitCode: 9,
+        });
+    }
+    return value.servers.map((server) => {
+        if (!isObject(server)) {
+            throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid server.", {
+                exitCode: 9,
+            });
+        }
+        assertExactKeys(server, ["id", "alias", "workspace_url", "status", "pairing_ready"], [], "server");
+        if (typeof server.pairing_ready !== "boolean") {
+            throw new TeamClawsError("invalid_response", "TeamClaws returned an invalid server.", {
+                exitCode: 9,
+            });
+        }
+        return {
+            server_id: normalizeUuid(server.id),
+            alias: requireString(server.alias, "server alias", 200),
+            workspace_url: canonicalWorkspaceUrl(server.workspace_url),
+            status: requireString(server.status, "server status", 40),
+            pairing_ready: server.pairing_ready,
+        };
+    });
+}
+export function parseLoginCredential(value) {
+    if (!isObject(value))
+        throw invalidCredentialFile();
+    assertExactKeys(value, ["version", "token_type", "access_token", "refresh_token", "expires_at"], [], "login credential file");
+    if (value.version !== 1 || value.token_type !== "Bearer")
+        throw invalidCredentialFile();
+    return {
+        version: 1,
+        token_type: "Bearer",
+        access_token: requireSecret(value.access_token),
+        refresh_token: requireSecret(value.refresh_token),
+        expires_at: requireIsoDate(value.expires_at, "login credential expiry"),
+    };
+}
+export function parseWorkspaceCredential(value) {
+    if (!isObject(value))
+        throw invalidCredentialFile();
+    assertExactKeys(value, [
+        "version",
+        "server_id",
+        "origin",
+        "display_name",
+        "device_id",
+        "device_token",
+        "created_at",
+    ], [], "workspace credential file");
+    if (value.version !== 1)
+        throw invalidCredentialFile();
+    return {
+        version: 1,
+        server_id: normalizeUuid(value.server_id),
+        origin: canonicalWorkspaceOrigin(value.origin),
+        display_name: requireString(value.display_name, "display name", 120),
+        device_id: normalizeUuid(value.device_id, "device identifier"),
+        device_token: requireSecret(value.device_token),
+        created_at: requireIsoDate(value.created_at, "credential creation date"),
+    };
+}
+export function parseStatusWorkspaceCredential(value, expectedServerId) {
+    if (!isObject(value) || value.version !== 1)
+        throw invalidCredentialFile();
+    const serverId = normalizeUuid(value.server_id);
+    if (serverId !== normalizeUuid(expectedServerId))
+        throw invalidCredentialFile();
+    return {
+        version: 1,
+        server_id: serverId,
+        origin: canonicalWorkspaceOrigin(value.origin),
+        display_name: typeof value.display_name === "string" && value.display_name.length > 0
+            ? requireString(value.display_name, "display name", 120)
+            : "Paired device",
+        device_id: normalizeUuid(value.device_id, "device identifier"),
+        device_token: requireSecret(value.device_token),
+    };
+}
+function requireSecret(value) {
+    if (typeof value !== "string" || value.length < 8 || value.length > 8_192) {
+        throw invalidCredentialFile();
+    }
+    return value;
+}
+function parseReasonCodes(value) {
+    if (!Array.isArray(value) ||
+        value.length > 8 ||
+        value.some((item) => typeof item !== "string" ||
+            item.length === 0 ||
+            item.length > 64 ||
+            !/^[a-z0-9_]+$/u.test(item))) {
+        throw invalidExternalChatHandoff();
+    }
+    return [...new Set(value)].sort();
+}
+function invalidExternalChatHandoff() {
+    return new TeamClawsError("invalid_external_chat_handoff", "The workspace returned an unsupported external chat handoff.", { exitCode: 9 });
+}
+function requireIsoDate(value, label) {
+    const text = requireString(value, label, 64);
+    if (!Number.isFinite(Date.parse(text))) {
+        throw new TeamClawsError("invalid_response", `TeamClaws returned an invalid ${label}.`, {
+            exitCode: 9,
+        });
+    }
+    return text;
+}
+function invalidCredentialFile() {
+    return new TeamClawsError("invalid_credential_file", "The local TeamClaws credential file is invalid.", { exitCode: 9 });
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAiB7C,MAAM,YAAY,GAChB,4EAA4E,CAAC;AAE/E,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAiB,EACjB,QAA2B,EAC3B,WAA8B,EAAE,EAChC,KAAK,GAAG,UAAU;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iCAAiC,KAAK,GAAG,EACzC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,oCAAoC,KAAK,GAAG,EAC5C,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,KAAa,EACb,SAAS,GAAG,KAAK;IAEjB,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,SAAS,EACxB,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iCAAiC,KAAK,GAAG,EACzC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAc,EACd,KAAa,EACb,OAAe,EACf,OAAe;IAEf,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO;QACvB,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,EACvB,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iCAAiC,KAAK,GAAG,EACzC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,KAAK,GAAG,mBAAmB;IAE3B,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,OAAO,KAAK,gBAAgB,EAAE;YACvE,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,qCAAqC,EACrC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC;QAC7C,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EACxB,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,oDAAoD,EACpD,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IACxE,OAAO,EAAE,aAAa,EAAE,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,uCAAuC,EACvC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,eAAe,CACb,KAAK,EACL;QACE,QAAQ;QACR,iBAAiB;QACjB,mBAAmB;QACnB,8BAA8B;KAC/B,EACD,EAAE,EACF,QAAQ,CACT,CAAC;IACF,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG;QACb,MAAM;QACN,eAAe,EAAE,0BAA0B,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC;QAC1E,iBAAiB,EAAE,0BAA0B,CAC3C,KAAK,CAAC,iBAAiB,EACvB,MAAM,CACP;QACD,4BAA4B,EAAE,0BAA0B,CACtD,KAAK,CAAC,4BAA4B,EAClC,MAAM,CACP;KACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAc,EACd,MAAc;IAEd,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IACxD,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAClB,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,2CAA2C,EAC3C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7D,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,2CAA2C,EAC3C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,IAAY;IAChE,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iDAAiD,EACjD;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,eAAe,CACb,KAAK,EACL;QACE,kBAAkB;QAClB,WAAW;QACX,QAAQ;QACR,WAAW;QACX,2BAA2B;QAC3B,YAAY;QACZ,UAAU;QACV,QAAQ;QACR,aAAa;KACd,EACD,CAAC,cAAc,CAAC,EAChB,kBAAkB,CACnB,CAAC;IACF,IAAI,KAAK,CAAC,gBAAgB,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,qDAAqD,EACrD;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,aAAa,CACpC,KAAK,CAAC,yBAAyB,EAC/B,kBAAkB,EAClB,KAAK,CACN,CAAC;IACF,MAAM,YAAY,GAAG,eAAe,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC3E,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,qEAAqE,EACrE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAmB;QAC9B,gBAAgB,EAAE,CAAC;QACnB,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QACzC,MAAM;QACN,SAAS,EAAE,QAAQ;QACnB,yBAAyB,EAAE,gBAAgB;QAC3C,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,EAAE,CAAC,EAAE,KAAK,CAAC;QACxE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;QACnE,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,UAAU;KACxB,CAAC;IACF,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;QAC5B,OAAO,CAAC,YAAY,GAAG,gBAAgB,CACrC,KAAK,CAAC,YAAY,EAClB,gBAAgB,EAChB,QAAQ,EACR,UAAU,CACX,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,eAAuB,EACvB,QAAgB,EAChB,UAAkB;IAElB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,6CAA6C,EAC7C,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,eAAe,CACb,KAAK,EACL;QACE,gBAAgB;QAChB,MAAM;QACN,gBAAgB;QAChB,kBAAkB;QAClB,YAAY;KACb,EACD,EAAE,EACF,cAAc,CACf,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAC3B,KAAK,CAAC,gBAAgB,EACtB,sBAAsB,EACtB,KAAK,CACN,CAAC;IACF,IACE,KAAK,CAAC,cAAc,KAAK,CAAC;QAC1B,KAAK,CAAC,IAAI,KAAK,kBAAkB;QACjC,KAAK,CAAC,cAAc,KAAK,UAAU;QACnC,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QAClC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAC5B,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,4CAA4C,EAC5C,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,IAAI,EAAE,kBAAkB;QACxB,cAAc,EAAE,UAAU;QAC1B,gBAAgB,EAAE,OAAO;QACzB,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iCAAiC,KAAK,GAAG,EACzC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC5E,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,gCAAgC,KAAK,GAAG,EACxC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,+CAA+C,EAC/C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,mDAAmD,EACnD;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC9D,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC;YACpD,CAAC,CAAC;gBACE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;gBAC5D,uCAAuC,EACrC,KAAK,CAAC,uCAAuC;aAChD;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,gBAAwB;IAExB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,cAAc,CACtB,gCAAgC,EAChC,4CAA4C,EAC5C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACtE,IAAI,EAAE,KAAK,gBAAgB,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvE,MAAM,IAAI,cAAc,CACtB,gCAAgC,EAChC,4CAA4C,EAC5C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAClB,KAAK,CAAC,aAAa,CAAC,YAAY,EAChC,uBAAuB,EACvB,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,gBAAwB,EACxB,MAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CACtB,gCAAgC,EAChC,4CAA4C,EAC5C,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,YAAY,EAAE,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC;QAC1D,qBAAqB,EAAE,wBAAwB,CAC7C,KAAK,CAAC,qBAAqB,EAC3B,MAAM,CACP;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,MAAc;IAEd,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,KAAK,CAAC,cAAc,KAAK,CAAC;QAC1B,KAAK,CAAC,gBAAgB,KAAK,CAAC,EAC5B,CAAC;QACD,MAAM,0BAA0B,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzD,IACE,KAAK,CAAC,MAAM,KAAK,kBAAkB;QACnC,KAAK,CAAC,kBAAkB,KAAK,SAAS;QACtC,WAAW,CAAC,MAAM,GAAG,CAAC,EACtB,CAAC;QACD,OAAO;YACL,cAAc,EAAE,CAAC;YACjB,gBAAgB,EAAE,CAAC;YACnB,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,WAAW;YACzB,kBAAkB,EAAE,SAAS;SAC9B,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,aAAa;QAC9B,KAAK,CAAC,kBAAkB,KAAK,aAAa;QAC1C,WAAW,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACjD,CAAC;QACD,OAAO;YACL,cAAc,EAAE,CAAC;YACjB,gBAAgB,EAAE,CAAC;YACnB,MAAM,EAAE,aAAa;YACrB,YAAY,EAAE,WAAW;YACzB,kBAAkB,EAAE,aAAa;SAClC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,MAAM,8CAA8C,CAAC;IACzE,MAAM,YAAY,GAAG,aAAa,CAChC,KAAK,CAAC,aAAa,EACnB,6BAA6B,EAC7B,EAAE,CACH,CAAC;IACF,IACE,KAAK,CAAC,MAAM,KAAK,OAAO;QACxB,KAAK,CAAC,kBAAkB,KAAK,YAAY;QACzC,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,KAAK,CAAC,UAAU,KAAK,gCAAgC;QACrD,KAAK,CAAC,SAAS,KAAK,QAAQ;QAC5B,KAAK,CAAC,gBAAgB;YACpB,mDAAmD;QACrD,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,EACrC,CAAC;QACD,MAAM,0BAA0B,EAAE,CAAC;IACrC,CAAC;IACD,OAAO;QACL,cAAc,EAAE,CAAC;QACjB,gBAAgB,EAAE,CAAC;QACnB,MAAM,EAAE,OAAO;QACf,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,gCAAgC;QAC5C,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,mDAAmD;QACrE,kBAAkB,EAAE,YAAY;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iDAAiD,EACjD;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,eAAe,CACb,KAAK,EACL,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,CAAC,EAC9D,EAAE,EACF,kBAAkB,CACnB,CAAC;IACF,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iDAAiD,EACjD;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACxD,OAAO;QACL,EAAE,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC;QAC9C,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,GAAG,CAAC;QACpE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,4CAA4C,EAC5C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,eAAe,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,4CAA4C,EAC5C;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,sCAAsC,EACtC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,uCAAuC,EACvC;gBACE,QAAQ,EAAE,CAAC;aACZ,CACF,CAAC;QACJ,CAAC;QACD,eAAe,CACb,MAAM,EACN,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,CAAC,EAC3D,EAAE,EACF,QAAQ,CACT,CAAC;QACF,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,uCAAuC,EACvC;gBACE,QAAQ,EAAE,CAAC;aACZ,CACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC;YACvD,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC;YAC1D,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;YACzD,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,qBAAqB,EAAE,CAAC;IACpD,eAAe,CACb,KAAK,EACL,CAAC,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC,EACxE,EAAE,EACF,uBAAuB,CACxB,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ;QACtD,MAAM,qBAAqB,EAAE,CAAC;IAChC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;QAC/C,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;QACjD,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,yBAAyB,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,qBAAqB,EAAE,CAAC;IACpD,eAAe,CACb,KAAK,EACL;QACE,SAAS;QACT,WAAW;QACX,QAAQ;QACR,cAAc;QACd,WAAW;QACX,cAAc;QACd,YAAY;KACb,EACD,EAAE,EACF,2BAA2B,CAC5B,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,qBAAqB,EAAE,CAAC;IACvD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;QACzC,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9C,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,GAAG,CAAC;QACpE,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC9D,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;QAC/C,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,0BAA0B,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAc,EACd,gBAAwB;IAExB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,qBAAqB,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,aAAa,CAAC,gBAAgB,CAAC;QAC9C,MAAM,qBAAqB,EAAE,CAAC;IAChC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC;QAC9C,YAAY,EACV,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACrE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,EAAE,GAAG,CAAC;YACxD,CAAC,CAAC,eAAe;QACrB,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC9D,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC1E,MAAM,qBAAqB,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,EAAE;YAChB,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9B,EACD,CAAC;QACD,MAAM,0BAA0B,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,0BAA0B;IACjC,OAAO,IAAI,cAAc,CACvB,+BAA+B,EAC/B,8DAA8D,EAC9D,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,iCAAiC,KAAK,GAAG,EACzC;YACE,QAAQ,EAAE,CAAC;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,IAAI,cAAc,CACvB,yBAAyB,EACzB,iDAAiD,EACjD,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "teamclaws",
+  "version": "1.0.0",
+  "description": "Official TeamClaws command-line client and agent skills",
+  "license": "PolyForm-Shield-1.0.0",
+  "type": "module",
+  "private": false,
+  "engines": {
+    "node": ">=22"
+  },
+  "bin": {
+    "teamclaws": "./dist/cli.js"
+  },
+  "files": [
+    "dist/",
+    "skills/",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint .",
+    "format:check": "prettier --check .",
+    "format": "prettier --write .",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "test:package": "npm run build && node scripts/test-packed-package.mjs",
+    "audit": "npm audit --audit-level=high",
+    "verify": "npm run format:check && npm run lint && npm run typecheck && npm run test:coverage && npm run test:package && npm run audit"
+  },
+  "devDependencies": {
+    "@eslint/js": "10.0.1",
+    "@types/node": "22.20.1",
+    "@vitest/coverage-v8": "4.1.11",
+    "eslint": "10.9.1",
+    "prettier": "3.9.6",
+    "typescript": "6.0.3",
+    "typescript-eslint": "8.68.0",
+    "vitest": "4.1.11"
+  }
+}

package/skills/teamclaws-chat/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: teamclaws-chat
+description: Start, continue, or resume one external-agent TCChat through the official TeamClaws CLI after this computer is paired with the exact workspace.
+---
+
+# TeamClaws external chat
+
+Use the official `teamclaws` executable. The CLI owns credential loading,
+authoritative handoff validation, target capability discovery, direct target
+transport, idempotency, and durable request polling.
+
+## Required boundary
+
+- Do not read, print, copy, transform, or pass the workspace credential.
+- Do not call `www.teamclaws.com` for post-pair chat. The CLI talks directly to
+  the paired workspace.
+- Do not download or execute the generated target helper when the installed CLI
+  supports these native chat commands.
+- Use only an explicit stable server identifier or canonical workspace origin.
+- Treat the newline-delimited JSON as an allowlisted protocol. Never expose raw
+  HTTP responses or provider-native identifiers.
+
+## Start one conversation
+
+Obtain a non-empty user message, then run:
+
+```text
+teamclaws chat start <target> --message <text> --json
+```
+
+Use the workspace recommendation by default. Pass `--provider`, `--model`,
+`--reasoning`, `--fast`, or `--no-fast` only when the user explicitly requests
+an advertised alternative. Preserve `session_id`, `request_id`, `revision`, and
+the last assistant `message_id` from safe output.
+
+If `approval_required` appears, present its authenticated
+`owner_conversation_url` and continue waiting. Emit each `assistant_message`
+once. Claim success only after `request_succeeded` with at least one response.
+
+## Continue or resume
+
+To add a later turn to the same conversation:
+
+```text
+teamclaws chat send <target> --session-id <uuid> --message <text> --json
+```
+
+To resume monitoring an already-created request without creating anything:
+
+```text
+teamclaws chat watch <target> --session-id <uuid> --request-id <uuid> --known-revision <n> --after-response-message-id <n> --json
+```
+
+Reuse `--client-request-id <uuid>` after an uncertain create response. Never
+invent a new idempotency key to hide uncertainty about whether a turn exists.
+
+## Failure handling
+
+- `re_pair_required`: direct the user to TCChat Pair & Transfer.
+- `selection_unavailable`: use the advertised recommendation unless the user
+  asks for another valid selection.
+- `rejected`, `expired`, or `canceled`: stop and report the terminal state.
+- `failed`: report the safe returned detail and retain the request identifiers.
+- network failure: retain identifiers and resume with `chat watch`; do not
+  silently create another session or turn.

package/skills/teamclaws-login/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: teamclaws-login
+description: Sign the official TeamClaws command-line client in, inspect its safe login status, or sign this computer out without exposing login credentials.
+---
+
+# TeamClaws command-line login
+
+Use the official executable:
+
+```text
+npx teamclaws login --json
+npx teamclaws login owner@example.com --json
+npx teamclaws auth status --json
+npx teamclaws logout --json
+```
+
+Login uses OAuth 2.0 Device Authorization Grant against www.teamclaws.com. The
+next owner-facing line is `verification_uri_complete`. Optional email is a bind
+sent to TeamClawsdeploy, not identity asserted by this process. Never transfer a
+model or harness token into this process. The command-line client stores its own
+protected login credential locally.
+
+Only treat the fixed structured events as safe. Never expose access tokens,
+refresh tokens, device codes, cookies, or authorization headers.
+
+Logout always removes the local command-line login credential. A
+`local_only_warning` status means local logout succeeded but remote revocation
+could not be confirmed. Completed Clawgate workspace credentials are not
+deleted by logout.