teams-api-mcp 0.1.0

package/dist/teams-client.js

@@ -0,0 +1,545 @@
+"use strict";
+/**
+ * TeamsClient — the public API for interacting with Microsoft Teams.
+ *
+ * This is the primary entry point for the teams-api package.
+ * It wraps authentication, conversation listing, message reading/sending,
+ * and member management behind a clean, strongly-typed interface.
+ *
+ * @example
+ *   // Auto-login (macOS with FIDO2 passkey)
+ *   const client = await TeamsClient.fromAutoLogin({
+ *     email: "user@company.com",
+ *   });
+ *
+ *   // List conversations
+ *   const conversations = await client.listConversations();
+ *
+ *   // Read messages
+ *   const messages = await client.getMessages(conversations[0].id);
+ *
+ *   // Send a message
+ *   await client.sendMessage(conversations[0].id, "Hello from the API!");
+ *
+ * @example
+ *   // From an existing token
+ *   const client = TeamsClient.fromToken(
+ *     "skype-token-here",
+ *     "apac",
+ *     "optional-bearer-token",
+ *     "optional-substrate-token",
+ *   );
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TeamsClient = exports.formatOutput = exports.actions = exports.clearToken = exports.loadToken = exports.saveToken = exports.isSuccessfulRecording = exports.extractMeetingTitle = exports.extractTranscriptUrl = exports.parseVtt = exports.fetchTranscriptVtt = exports.fetchTranscript = exports.searchChats = exports.searchPeople = exports.fetchProfiles = exports.ApiRateLimitError = exports.ApiAuthError = exports.parseRawMessage = exports.SYSTEM_STREAM_TYPES = exports.acquireTokenViaDebugSession = exports.acquireTokenViaInteractiveLogin = exports.acquireTokenViaAutoLogin = void 0;
+const api_js_1 = require("./api.js");
+const auth_js_1 = require("./auth.js");
+const token_store_js_1 = require("./token-store.js");
+var auth_js_2 = require("./auth.js");
+Object.defineProperty(exports, "acquireTokenViaAutoLogin", { enumerable: true, get: function () { return auth_js_2.acquireTokenViaAutoLogin; } });
+Object.defineProperty(exports, "acquireTokenViaInteractiveLogin", { enumerable: true, get: function () { return auth_js_2.acquireTokenViaInteractiveLogin; } });
+Object.defineProperty(exports, "acquireTokenViaDebugSession", { enumerable: true, get: function () { return auth_js_2.acquireTokenViaDebugSession; } });
+var types_js_1 = require("./types.js");
+Object.defineProperty(exports, "SYSTEM_STREAM_TYPES", { enumerable: true, get: function () { return types_js_1.SYSTEM_STREAM_TYPES; } });
+var api_js_2 = require("./api.js");
+Object.defineProperty(exports, "parseRawMessage", { enumerable: true, get: function () { return api_js_2.parseRawMessage; } });
+Object.defineProperty(exports, "ApiAuthError", { enumerable: true, get: function () { return api_js_2.ApiAuthError; } });
+Object.defineProperty(exports, "ApiRateLimitError", { enumerable: true, get: function () { return api_js_2.ApiRateLimitError; } });
+Object.defineProperty(exports, "fetchProfiles", { enumerable: true, get: function () { return api_js_2.fetchProfiles; } });
+Object.defineProperty(exports, "searchPeople", { enumerable: true, get: function () { return api_js_2.searchPeople; } });
+Object.defineProperty(exports, "searchChats", { enumerable: true, get: function () { return api_js_2.searchChats; } });
+Object.defineProperty(exports, "fetchTranscript", { enumerable: true, get: function () { return api_js_2.fetchTranscript; } });
+Object.defineProperty(exports, "fetchTranscriptVtt", { enumerable: true, get: function () { return api_js_2.fetchTranscriptVtt; } });
+Object.defineProperty(exports, "parseVtt", { enumerable: true, get: function () { return api_js_2.parseVtt; } });
+Object.defineProperty(exports, "extractTranscriptUrl", { enumerable: true, get: function () { return api_js_2.extractTranscriptUrl; } });
+Object.defineProperty(exports, "extractMeetingTitle", { enumerable: true, get: function () { return api_js_2.extractMeetingTitle; } });
+Object.defineProperty(exports, "isSuccessfulRecording", { enumerable: true, get: function () { return api_js_2.isSuccessfulRecording; } });
+var token_store_js_2 = require("./token-store.js");
+Object.defineProperty(exports, "saveToken", { enumerable: true, get: function () { return token_store_js_2.saveToken; } });
+Object.defineProperty(exports, "loadToken", { enumerable: true, get: function () { return token_store_js_2.loadToken; } });
+Object.defineProperty(exports, "clearToken", { enumerable: true, get: function () { return token_store_js_2.clearToken; } });
+var actions_js_1 = require("./actions.js");
+Object.defineProperty(exports, "actions", { enumerable: true, get: function () { return actions_js_1.actions; } });
+Object.defineProperty(exports, "formatOutput", { enumerable: true, get: function () { return actions_js_1.formatOutput; } });
+const SYSTEM_STREAMS = [
+    "streamofannotations",
+    "streamofthreads",
+    "streamofnotifications",
+    "streamofmentions",
+    "streamofnotes",
+];
+/**
+ * Extract the MRI suffix from a sender URL or return the input unchanged.
+ * API messages use full URLs (e.g. ".../contacts/8:orgid:uuid"),
+ * while member IDs are just the MRI suffix ("8:orgid:uuid").
+ */
+function extractMriSuffix(senderMri) {
+    const contactsPrefix = "/contacts/";
+    const contactsIndex = senderMri.lastIndexOf(contactsPrefix);
+    if (contactsIndex >= 0) {
+        return senderMri.slice(contactsIndex + contactsPrefix.length);
+    }
+    return senderMri;
+}
+class TeamsClient {
+    token;
+    autoLoginOptions = null;
+    cachedDisplayName = null;
+    constructor(token) {
+        this.token = token;
+    }
+    /**
+     * Create a client with secure token caching and automatic refresh.
+     *
+     * This is the recommended entry point. It:
+     *   1. Checks the macOS Keychain for a cached, non-expired token
+     *   2. If none found, launches auto-login to acquire a fresh token
+     *   3. Saves the token to the Keychain for future use
+     *   4. Automatically re-acquires the token if a 401 occurs mid-session
+     *
+     * Token lifetime is ~24 hours. Cached tokens are reused within 23 hours.
+     */
+    static async create(options) {
+        const log = options.verbose ? console.error.bind(console) : () => { };
+        const cachedToken = (0, token_store_js_1.loadToken)(options.email);
+        if (cachedToken) {
+            log("Using cached token from Keychain");
+            const client = new TeamsClient(cachedToken);
+            client.autoLoginOptions = options;
+            return client;
+        }
+        log("No cached token found, acquiring via auto-login...");
+        const token = await (0, auth_js_1.acquireTokenViaAutoLogin)(options);
+        (0, token_store_js_1.saveToken)(options.email, token);
+        log("Token saved to Keychain");
+        const client = new TeamsClient(token);
+        client.autoLoginOptions = options;
+        return client;
+    }
+    /**
+     * Create a client by automatically logging in via FIDO2 passkey.
+     *
+     * Launches system Chrome with a fresh profile, completes the Microsoft
+     * Entra ID FIDO2 login flow using a platform authenticator, and
+     * captures the skype token. Zero user interaction required.
+     */
+    static async fromAutoLogin(options) {
+        const token = await (0, auth_js_1.acquireTokenViaAutoLogin)(options);
+        return new TeamsClient(token);
+    }
+    /**
+     * Create a client by connecting to a running Chrome debug session.
+     *
+     * Requires Chrome started with --remote-debugging-port and Teams
+     * already open and authenticated.
+     */
+    static async fromDebugSession(options) {
+        const token = await (0, auth_js_1.acquireTokenViaDebugSession)(options);
+        return new TeamsClient(token);
+    }
+    /**
+     * Create a client via interactive browser login.
+     *
+     * Opens a visible Chromium window where the user manually logs into
+     * Teams. Works on all platforms (macOS, Windows, Linux) without
+     * requiring FIDO2 passkeys or system Chrome.
+     */
+    static async fromInteractiveLogin(options) {
+        const token = await (0, auth_js_1.acquireTokenViaInteractiveLogin)(options);
+        return new TeamsClient(token);
+    }
+    /**
+     * Create a client from an existing token bundle.
+     *
+     * `bearerToken` enables profile/member resolution and `substrateToken`
+     * enables reliable people/chat search. Both are optional; basic chat
+     * operations only require `skypeToken`.
+     */
+    static fromToken(skypeToken, region = "apac", bearerToken, substrateToken) {
+        return new TeamsClient({ skypeToken, region, bearerToken, substrateToken });
+    }
+    /**
+     * Clear a cached token from the macOS Keychain.
+     *
+     * Use this to force a fresh login on the next `create()` call.
+     */
+    static clearCachedToken(email) {
+        (0, token_store_js_1.clearToken)(email);
+    }
+    /** Get the underlying token (for persistence or debugging). */
+    getToken() {
+        return { ...this.token };
+    }
+    /**
+     * List conversations (chats, group chats, meetings, channels).
+     *
+     * By default, excludes system streams (annotations, notifications,
+     * mentions). Set `excludeSystemStreams: false` to include everything.
+     */
+    async listConversations(options) {
+        return this.withTokenRefresh(async () => {
+            const pageSize = options?.pageSize ?? 50;
+            const excludeSystem = options?.excludeSystemStreams ?? true;
+            const conversations = await (0, api_js_1.fetchConversations)(this.token, pageSize);
+            if (!excludeSystem) {
+                return conversations;
+            }
+            return conversations.filter((conversation) => !SYSTEM_STREAMS.includes(conversation.threadType));
+        });
+    }
+    /**
+     * Find a conversation by topic name (case-insensitive partial match).
+     *
+     * When a Substrate token is available, also searches via the Substrate
+     * chat search API for matches by name or member. Falls back to local
+     * topic matching when Substrate is unavailable.
+     */
+    async findConversation(query) {
+        return this.withTokenRefresh(async () => {
+            const conversations = await this.listConversations({ pageSize: 100 });
+            const queryLower = query.toLowerCase();
+            // Try local topic matching first (fast, no extra API call)
+            const topicMatch = conversations.find((conversation) => conversation.topic &&
+                conversation.topic.toLowerCase().includes(queryLower));
+            if (topicMatch)
+                return topicMatch;
+            // Use Substrate chat search for broader matching (by member names, etc.)
+            if (this.token.substrateToken) {
+                const chatResults = await (0, api_js_1.searchChats)(this.token, query, 5);
+                for (const chatResult of chatResults) {
+                    const matchingConversation = conversations.find((conversation) => conversation.id === chatResult.threadId);
+                    if (matchingConversation)
+                        return matchingConversation;
+                }
+            }
+            return null;
+        });
+    }
+    /**
+     * Search for people in the organization directory by name.
+     *
+     * Uses the Substrate search API (requires a Substrate token captured
+     * during authentication). Returns matching people with MRIs, emails,
+     * job titles, and departments.
+     */
+    async findPeople(query, maxResults = 10) {
+        return this.withTokenRefresh(async () => {
+            return (0, api_js_1.searchPeople)(this.token, query, maxResults);
+        });
+    }
+    /**
+     * Search for chats by name or member name.
+     *
+     * Uses the Substrate search API (requires a Substrate token captured
+     * during authentication). Returns matching chats with thread IDs,
+     * member lists, and matching member details.
+     */
+    async findChats(query, maxResults = 10) {
+        return this.withTokenRefresh(async () => {
+            return (0, api_js_1.searchChats)(this.token, query, maxResults);
+        });
+    }
+    /**
+     * Find a 1:1 conversation with a specific person.
+     *
+     * Uses the Substrate people/chat search API to find the person by name
+     * and locate the corresponding 1:1 chat thread. Falls back to scanning
+     * message history when the Substrate token is unavailable.
+     *
+     * Also checks the self-chat (48:notes) if the query matches the
+     * current user's name.
+     */
+    async findOneOnOneConversation(personName) {
+        return this.withTokenRefresh(async () => {
+            const targetLower = personName.toLowerCase();
+            // Check self-chat first
+            const conversations = await (0, api_js_1.fetchConversations)(this.token, 100);
+            const selfChat = conversations.find((conversation) => conversation.id.startsWith("48:notes"));
+            if (selfChat) {
+                const currentUserName = await this.getCurrentUserDisplayName();
+                if (currentUserName.toLowerCase().includes(targetLower)) {
+                    return {
+                        conversationId: selfChat.id,
+                        memberDisplayName: `${currentUserName} (self)`,
+                    };
+                }
+            }
+            // Primary: use Substrate search API for people + chat lookup
+            if (this.token.substrateToken) {
+                // Search for the person to confirm they exist and get their MRI
+                const people = await (0, api_js_1.searchPeople)(this.token, personName, 5);
+                const matchedPerson = people.find((person) => person.displayName.toLowerCase().includes(targetLower));
+                if (matchedPerson) {
+                    // Search for chats that include this person
+                    const chats = await (0, api_js_1.searchChats)(this.token, personName, 10);
+                    // Look for a 1:1 chat (Chat type, exactly 2 members)
+                    for (const chat of chats) {
+                        if (chat.threadType === "Chat" &&
+                            chat.totalMemberCount === 2 &&
+                            chat.matchingMembers.some((member) => member.mri === matchedPerson.mri)) {
+                            return {
+                                conversationId: chat.threadId,
+                                memberDisplayName: matchedPerson.displayName,
+                            };
+                        }
+                    }
+                    // If no 1:1 chat was found in search results, check if any
+                    // conversation in our list matches the person's MRI
+                    const personUuid = matchedPerson.mri.replace("8:orgid:", "");
+                    const matchingConversation = conversations.find((conversation) => conversation.id.includes(personUuid) &&
+                        conversation.threadType === "chat");
+                    if (matchingConversation) {
+                        return {
+                            conversationId: matchingConversation.id,
+                            memberDisplayName: matchedPerson.displayName,
+                        };
+                    }
+                }
+                return null;
+            }
+            // Fallback: scan message senders when substrate token is unavailable
+            const untitledChats = conversations.filter((conversation) => conversation.threadType === "chat" &&
+                !conversation.topic &&
+                !conversation.id.startsWith("48:"));
+            for (const chat of untitledChats) {
+                try {
+                    const page = await (0, api_js_1.fetchMessagesPage)(this.token, chat.id, 10);
+                    const textMessages = page.messages.filter((message) => message.messageType === "RichText/Html" ||
+                        message.messageType === "Text");
+                    const senderNames = [
+                        ...new Set(textMessages
+                            .map((message) => message.senderDisplayName)
+                            .filter((name) => name.length > 0)),
+                    ];
+                    for (const senderName of senderNames) {
+                        if (senderName.toLowerCase().includes(targetLower)) {
+                            return {
+                                conversationId: chat.id,
+                                memberDisplayName: senderName,
+                            };
+                        }
+                    }
+                }
+                catch {
+                    continue;
+                }
+            }
+            return null;
+        });
+    }
+    /**
+     * Get all messages from a conversation.
+     *
+     * Follows pagination links to fetch the complete message history.
+     * Use `maxPages` and `pageSize` to control how much is fetched.
+     */
+    async getMessages(conversationId, options) {
+        return this.withTokenRefresh(async () => {
+            const maxPages = options?.maxPages ?? 100;
+            const pageSize = options?.pageSize ?? 200;
+            const allMessages = [];
+            let backwardLink;
+            for (let pageIndex = 0; pageIndex < maxPages; pageIndex++) {
+                const result = await (0, api_js_1.fetchMessagesPage)(this.token, conversationId, pageSize, backwardLink);
+                allMessages.push(...result.messages);
+                options?.onProgress?.(allMessages.length);
+                if (!result.backwardLink)
+                    break;
+                backwardLink = result.backwardLink;
+            }
+            return allMessages;
+        });
+    }
+    /**
+     * Get one page of messages from a conversation.
+     *
+     * Returns the page along with a backwardLink for manual pagination.
+     */
+    async getMessagesPage(conversationId, pageSize = 50, backwardLink) {
+        return this.withTokenRefresh(async () => {
+            return (0, api_js_1.fetchMessagesPage)(this.token, conversationId, pageSize, backwardLink);
+        });
+    }
+    /**
+     * Send a message to a conversation.
+     *
+     * The `format` parameter controls how `content` is interpreted:
+     * - `"text"` — plain text, sent as-is
+     * - `"markdown"` (default) — converted from Markdown to HTML
+     * - `"html"` — raw HTML, sent as-is
+     */
+    async sendMessage(conversationId, content, format = "markdown") {
+        return this.withTokenRefresh(async () => {
+            const displayName = await this.getCurrentUserDisplayName();
+            return (0, api_js_1.postMessage)(this.token, conversationId, content, displayName, format);
+        });
+    }
+    /**
+     * Get members of a conversation.
+     *
+     * Display names are resolved via the Teams middle-tier profile API when a
+     * Bearer token is available. Falls back to scanning message history when it
+     * is not.
+     */
+    async getMembers(conversationId) {
+        return this.withTokenRefresh(async () => {
+            const members = await (0, api_js_1.fetchMembers)(this.token, conversationId);
+            const unresolvedPeople = members.filter((member) => member.memberType === "person" && !member.displayName);
+            if (unresolvedPeople.length === 0) {
+                return members;
+            }
+            // Primary: resolve via middle-tier profile API (requires bearerToken)
+            if (this.token.bearerToken) {
+                const mris = unresolvedPeople.map((member) => member.id);
+                try {
+                    const profiles = await (0, api_js_1.fetchProfiles)(this.token, mris);
+                    const profileLookup = new Map(profiles.map((profile) => [profile.mri, profile.displayName]));
+                    for (const member of members) {
+                        if (!member.displayName) {
+                            member.displayName = profileLookup.get(member.id) ?? "";
+                        }
+                    }
+                    return members;
+                }
+                catch {
+                    // Fall through to message-history fallback
+                }
+            }
+            // Fallback: resolve from message sender names in conversation history
+            const unresolvedMris = new Set(unresolvedPeople.map((member) => member.id));
+            const nameLookup = new Map();
+            const maxPages = 10;
+            let backwardLink;
+            try {
+                for (let page = 0; page < maxPages; page++) {
+                    const result = await (0, api_js_1.fetchMessagesPage)(this.token, conversationId, 200, backwardLink);
+                    for (const message of result.messages) {
+                        if (message.senderDisplayName) {
+                            const mriSuffix = extractMriSuffix(message.senderMri);
+                            if (unresolvedMris.has(mriSuffix)) {
+                                nameLookup.set(mriSuffix, message.senderDisplayName);
+                                unresolvedMris.delete(mriSuffix);
+                            }
+                        }
+                    }
+                    if (unresolvedMris.size === 0 || !result.backwardLink) {
+                        break;
+                    }
+                    backwardLink = result.backwardLink;
+                }
+            }
+            catch {
+                // If message fetch fails, return members with whatever names we have
+            }
+            for (const member of members) {
+                if (!member.displayName) {
+                    member.displayName = nameLookup.get(member.id) ?? "";
+                }
+            }
+            return members;
+        });
+    }
+    /**
+     * Get the meeting transcript for a conversation.
+     *
+     * Searches messages for a successful recording, extracts the AMS
+     * transcript URL, fetches the VTT, and parses it into structured entries.
+     */
+    async getTranscript(conversationId) {
+        return this.withTokenRefresh(async () => {
+            return (0, api_js_1.fetchTranscript)(this.token, conversationId);
+        });
+    }
+    /**
+     * Get the display name of the currently authenticated user.
+     *
+     * Resolved by reading messages from the self-chat (48:notes) or
+     * falling back to the user properties endpoint.
+     */
+    async getCurrentUserDisplayName() {
+        return this.withTokenRefresh(async () => {
+            if (this.cachedDisplayName) {
+                return this.cachedDisplayName;
+            }
+            const conversations = await (0, api_js_1.fetchConversations)(this.token, 10);
+            // First try: self-chat messages (most reliable)
+            for (const conversation of conversations) {
+                try {
+                    if (!conversation.id.startsWith("48:notes"))
+                        continue;
+                    const page = await (0, api_js_1.fetchMessagesPage)(this.token, conversation.id, 10);
+                    const textMessage = page.messages.find((message) => (message.messageType === "RichText/Html" ||
+                        message.messageType === "Text") &&
+                        message.senderDisplayName.length > 0);
+                    if (textMessage) {
+                        this.cachedDisplayName = textMessage.senderDisplayName;
+                        return this.cachedDisplayName;
+                    }
+                }
+                catch {
+                    continue;
+                }
+            }
+            // Fallback: user properties endpoint (userDetails JSON field)
+            try {
+                const properties = await (0, api_js_1.fetchUserProperties)(this.token);
+                if (typeof properties.displayname === "string") {
+                    this.cachedDisplayName = properties.displayname;
+                    return this.cachedDisplayName;
+                }
+                if (typeof properties.userDetails === "string") {
+                    try {
+                        const userDetails = JSON.parse(properties.userDetails);
+                        if (userDetails.name) {
+                            this.cachedDisplayName = userDetails.name;
+                            return this.cachedDisplayName;
+                        }
+                    }
+                    catch {
+                        // Malformed JSON — fall through
+                    }
+                }
+            }
+            catch {
+                // Fall through
+            }
+            return "Unknown User";
+        });
+    }
+    /**
+     * Re-acquire the token via auto-login and update the cached version.
+     *
+     * Called automatically by `withTokenRefresh` on 401 errors.
+     */
+    async refreshToken() {
+        if (!this.autoLoginOptions) {
+            throw new Error("Cannot refresh token: no auto-login options configured");
+        }
+        (0, token_store_js_1.clearToken)(this.autoLoginOptions.email);
+        const freshToken = await (0, auth_js_1.acquireTokenViaAutoLogin)(this.autoLoginOptions);
+        (0, token_store_js_1.saveToken)(this.autoLoginOptions.email, freshToken);
+        this.token = freshToken;
+        this.cachedDisplayName = null;
+    }
+    /**
+     * Wrap an operation with automatic token refresh on 401.
+     *
+     * If the operation throws an `ApiAuthError` and auto-login options
+     * are configured, the token is re-acquired and the operation retried
+     * exactly once.
+     */
+    async withTokenRefresh(operation) {
+        try {
+            return await operation();
+        }
+        catch (error) {
+            if (error instanceof api_js_1.ApiAuthError && this.autoLoginOptions) {
+                await this.refreshToken();
+                return await operation();
+            }
+            throw error;
+        }
+    }
+}
+exports.TeamsClient = TeamsClient;
+//# sourceMappingURL=teams-client.js.map

package/dist/teams-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams-client.js","sourceRoot":"","sources":["../src/teams-client.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AAqBH,qCAYkB;AAClB,uCAImB;AACnB,qDAAoE;AAEpE,qCAImB;AAHjB,mHAAA,wBAAwB,OAAA;AACxB,0HAAA,+BAA+B,OAAA;AAC/B,sHAAA,2BAA2B,OAAA;AAwB7B,uCAAiD;AAAxC,+GAAA,mBAAmB,OAAA;AAC5B,mCAakB;AAZhB,yGAAA,eAAe,OAAA;AACf,sGAAA,YAAY,OAAA;AACZ,2GAAA,iBAAiB,OAAA;AACjB,uGAAA,aAAa,OAAA;AACb,sGAAA,YAAY,OAAA;AACZ,qGAAA,WAAW,OAAA;AACX,yGAAA,eAAe,OAAA;AACf,4GAAA,kBAAkB,OAAA;AAClB,kGAAA,QAAQ,OAAA;AACR,8GAAA,oBAAoB,OAAA;AACpB,6GAAA,mBAAmB,OAAA;AACnB,+GAAA,qBAAqB,OAAA;AAEvB,mDAAoE;AAA3D,2GAAA,SAAS,OAAA;AAAE,2GAAA,SAAS,OAAA;AAAE,4GAAA,UAAU,OAAA;AACzC,2CAAqD;AAA5C,qGAAA,OAAO,OAAA;AAAE,0GAAA,YAAY,OAAA;AAO9B,MAAM,cAAc,GAAsB;IACxC,qBAAqB;IACrB,iBAAiB;IACjB,uBAAuB;IACvB,kBAAkB;IAClB,eAAe;CAChB,CAAC;AAEF;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,cAAc,GAAG,YAAY,CAAC;IACpC,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAC5D,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC,KAAK,CAAC,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAa,WAAW;IACd,KAAK,CAAa;IAClB,gBAAgB,GAA4B,IAAI,CAAC;IACjD,iBAAiB,GAAkB,IAAI,CAAC;IAEhD,YAAoB,KAAiB;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAyB;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QAErE,MAAM,WAAW,GAAG,IAAA,0BAAS,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,kCAAkC,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;YAC5C,MAAM,CAAC,gBAAgB,GAAG,OAAO,CAAC;YAClC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,IAAA,kCAAwB,EAAC,OAAO,CAAC,CAAC;QACtD,IAAA,0BAAS,EAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,OAAyB;QAClD,MAAM,KAAK,GAAG,MAAM,IAAA,kCAAwB,EAAC,OAAO,CAAC,CAAC;QACtD,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,OAA4B;QAE5B,MAAM,KAAK,GAAG,MAAM,IAAA,qCAA2B,EAAC,OAAO,CAAC,CAAC;QACzD,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAC/B,OAAiC;QAEjC,MAAM,KAAK,GAAG,MAAM,IAAA,yCAA+B,EAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,CACd,UAAkB,EAClB,MAAM,GAAG,MAAM,EACf,WAAoB,EACpB,cAAuB;QAEvB,OAAO,IAAI,WAAW,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,gBAAgB,CAAC,KAAa;QACnC,IAAA,2BAAU,EAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,+DAA+D;IAC/D,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAkC;QAElC,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;YACzC,MAAM,aAAa,GAAG,OAAO,EAAE,oBAAoB,IAAI,IAAI,CAAC;YAE5D,MAAM,aAAa,GAAG,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAErE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,aAAa,CAAC;YACvB,CAAC;YAED,OAAO,aAAa,CAAC,MAAM,CACzB,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,CAAC,CACpE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;YAEvC,2DAA2D;YAC3D,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CACnC,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,KAAK;gBAClB,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CACxD,CAAC;YACF,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC;YAElC,yEAAyE;YACzE,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC5D,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;oBACrC,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,CAC7C,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,UAAU,CAAC,QAAQ,CAC1D,CAAC;oBACF,IAAI,oBAAoB;wBAAE,OAAO,oBAAoB,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CACd,KAAa,EACb,UAAU,GAAG,EAAE;QAEf,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,OAAO,IAAA,qBAAY,EAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,UAAU,GAAG,EAAE;QAC5C,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,OAAO,IAAA,oBAAW,EAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,wBAAwB,CAC5B,UAAkB;QAElB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;YAE7C,wBAAwB;YACxB,MAAM,aAAa,GAAG,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CACnD,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CACvC,CAAC;YACF,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBAC/D,IAAI,eAAe,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBACxD,OAAO;wBACL,cAAc,EAAE,QAAQ,CAAC,EAAE;wBAC3B,iBAAiB,EAAE,GAAG,eAAe,SAAS;qBAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,6DAA6D;YAC7D,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC9B,gEAAgE;gBAChE,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAY,EAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CACvD,CAAC;gBAEF,IAAI,aAAa,EAAE,CAAC;oBAClB,4CAA4C;oBAC5C,MAAM,KAAK,GAAG,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;oBAE5D,qDAAqD;oBACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,IACE,IAAI,CAAC,UAAU,KAAK,MAAM;4BAC1B,IAAI,CAAC,gBAAgB,KAAK,CAAC;4BAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CACvB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG,CAC7C,EACD,CAAC;4BACD,OAAO;gCACL,cAAc,EAAE,IAAI,CAAC,QAAQ;gCAC7B,iBAAiB,EAAE,aAAa,CAAC,WAAW;6BAC7C,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAED,2DAA2D;oBAC3D,oDAAoD;oBACpD,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;oBAC7D,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,CAC7C,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;wBACpC,YAAY,CAAC,UAAU,KAAK,MAAM,CACrC,CAAC;oBACF,IAAI,oBAAoB,EAAE,CAAC;wBACzB,OAAO;4BACL,cAAc,EAAE,oBAAoB,CAAC,EAAE;4BACvC,iBAAiB,EAAE,aAAa,CAAC,WAAW;yBAC7C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;YAED,qEAAqE;YACrE,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CACxC,CAAC,YAAY,EAAE,EAAE,CACf,YAAY,CAAC,UAAU,KAAK,MAAM;gBAClC,CAAC,YAAY,CAAC,KAAK;gBACnB,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CACrC,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAiB,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CACvC,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,WAAW,KAAK,eAAe;wBACvC,OAAO,CAAC,WAAW,KAAK,MAAM,CACjC,CAAC;oBAEF,MAAM,WAAW,GAAG;wBAClB,GAAG,IAAI,GAAG,CACR,YAAY;6BACT,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;6BAC3C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CACrC;qBACF,CAAC;oBAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;wBACrC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;4BACnD,OAAO;gCACL,cAAc,EAAE,IAAI,CAAC,EAAE;gCACvB,iBAAiB,EAAE,UAAU;6BAC9B,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,cAAsB,EACtB,OAA4B;QAE5B,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAC;YAC1C,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAC;YAC1C,MAAM,WAAW,GAAc,EAAE,CAAC;YAClC,IAAI,YAAgC,CAAC;YAErC,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC;gBAC1D,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAiB,EACpC,IAAI,CAAC,KAAK,EACV,cAAc,EACd,QAAQ,EACR,YAAY,CACb,CAAC;gBACF,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAErC,OAAO,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAE1C,IAAI,CAAC,MAAM,CAAC,YAAY;oBAAE,MAAM;gBAChC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACrC,CAAC;YAED,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACnB,cAAsB,EACtB,QAAQ,GAAG,EAAE,EACb,YAAqB;QAErB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,OAAO,IAAA,0BAAiB,EACtB,IAAI,CAAC,KAAK,EACV,cAAc,EACd,QAAQ,EACR,YAAY,CACb,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CACf,cAAsB,EACtB,OAAe,EACf,SAAwB,UAAU;QAElC,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC3D,OAAO,IAAA,oBAAW,EAChB,IAAI,CAAC,KAAK,EACV,cAAc,EACd,OAAO,EACP,WAAW,EACX,MAAM,CACP,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,cAAsB;QACrC,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAY,EAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAE/D,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,WAAW,CAClE,CAAC;YAEF,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,sEAAsE;YACtE,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzD,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAA,sBAAa,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACvD,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAC9D,CAAC;oBACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;wBAC7B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;4BACxB,MAAM,CAAC,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;wBAC1D,CAAC;oBACH,CAAC;oBACD,OAAO,OAAO,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;YACH,CAAC;YAED,sEAAsE;YACtE,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAC5C,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC;YACpB,IAAI,YAAgC,CAAC;YAErC,IAAI,CAAC;gBACH,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;oBAC3C,MAAM,MAAM,GAAG,MAAM,IAAA,0BAAiB,EACpC,IAAI,CAAC,KAAK,EACV,cAAc,EACd,GAAG,EACH,YAAY,CACb,CAAC;oBAEF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACtC,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;4BAC9B,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;4BACtD,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gCAClC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;gCACrD,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;4BACnC,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;wBACtD,MAAM;oBACR,CAAC;oBACD,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBACrC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;YACvE,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBACxB,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACvD,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,cAAsB;QACxC,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,OAAO,IAAA,wBAAe,EAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,yBAAyB;QAC7B,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACtC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,iBAAiB,CAAC;YAChC,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,IAAA,2BAAkB,EAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAE/D,gDAAgD;YAChD,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;wBAAE,SAAS;oBAEtD,MAAM,IAAI,GAAG,MAAM,IAAA,0BAAiB,EAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBACtE,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CACpC,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,OAAO,CAAC,WAAW,KAAK,eAAe;wBACtC,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC;wBACjC,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CACvC,CAAC;oBAEF,IAAI,WAAW,EAAE,CAAC;wBAChB,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC,iBAAiB,CAAC;wBACvD,OAAO,IAAI,CAAC,iBAAiB,CAAC;oBAChC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;YAED,8DAA8D;YAC9D,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAA,4BAAmB,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzD,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;oBAC/C,IAAI,CAAC,iBAAiB,GAAG,UAAU,CAAC,WAAW,CAAC;oBAChD,OAAO,IAAI,CAAC,iBAAiB,CAAC;gBAChC,CAAC;gBACD,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;oBAC/C,IAAI,CAAC;wBACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAEpD,CAAC;wBACF,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;4BACrB,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC,IAAI,CAAC;4BAC1C,OAAO,IAAI,CAAC,iBAAiB,CAAC;wBAChC,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,gCAAgC;oBAClC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe;YACjB,CAAC;YAED,OAAO,cAAc,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QAED,IAAA,2BAAU,EAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,IAAA,kCAAwB,EAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzE,IAAA,0BAAS,EAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QACxB,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,gBAAgB,CAAI,SAA2B;QAC3D,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,qBAAY,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3D,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC1B,OAAO,MAAM,SAAS,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAllBD,kCAklBC"}

package/dist/token-store.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Secure token persistence using the macOS Keychain.
+ *
+ * Stores Teams tokens in the system Keychain via the `security` CLI tool.
+ * Tokens are base64-encoded JSON with an acquisition timestamp.
+ * Expired tokens (older than TOKEN_LIFETIME) are automatically cleared.
+ *
+ * Uses `execFileSync` (not `execSync`) to avoid shell injection risks.
+ */
+import type { TeamsToken } from "./types.js";
+export declare function saveToken(email: string, token: TeamsToken): void;
+export declare function loadToken(email: string): TeamsToken | null;
+export declare function clearToken(email: string): void;
+//# sourceMappingURL=token-store.d.ts.map

package/dist/token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAa7C,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAoBhE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAiC1D;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAY9C"}

package/dist/token-store.js

@@ -0,0 +1,79 @@
+"use strict";
+/**
+ * Secure token persistence using the macOS Keychain.
+ *
+ * Stores Teams tokens in the system Keychain via the `security` CLI tool.
+ * Tokens are base64-encoded JSON with an acquisition timestamp.
+ * Expired tokens (older than TOKEN_LIFETIME) are automatically cleared.
+ *
+ * Uses `execFileSync` (not `execSync`) to avoid shell injection risks.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.saveToken = saveToken;
+exports.loadToken = loadToken;
+exports.clearToken = clearToken;
+const node_child_process_1 = require("node:child_process");
+const KEYCHAIN_SERVICE = "teams-api";
+const TOKEN_LIFETIME = 23 * 60 * 60 * 1_000; // 23 hours (tokens last ~24h, 1h safety margin)
+function saveToken(email, token) {
+    const storedToken = {
+        skypeToken: token.skypeToken,
+        region: token.region,
+        bearerToken: token.bearerToken,
+        substrateToken: token.substrateToken,
+        acquiredAt: Date.now(),
+    };
+    const encoded = Buffer.from(JSON.stringify(storedToken)).toString("base64");
+    (0, node_child_process_1.execFileSync)("security", [
+        "add-generic-password",
+        "-a",
+        email,
+        "-s",
+        KEYCHAIN_SERVICE,
+        "-w",
+        encoded,
+        "-U",
+    ]);
+}
+function loadToken(email) {
+    let encoded;
+    try {
+        encoded = (0, node_child_process_1.execFileSync)("security", ["find-generic-password", "-a", email, "-s", KEYCHAIN_SERVICE, "-w"], { encoding: "utf-8" }).trim();
+    }
+    catch {
+        return null;
+    }
+    let storedToken;
+    try {
+        storedToken = JSON.parse(Buffer.from(encoded, "base64").toString("utf-8"));
+    }
+    catch {
+        clearToken(email);
+        return null;
+    }
+    if (Date.now() - storedToken.acquiredAt > TOKEN_LIFETIME) {
+        clearToken(email);
+        return null;
+    }
+    return {
+        skypeToken: storedToken.skypeToken,
+        region: storedToken.region,
+        bearerToken: storedToken.bearerToken,
+        substrateToken: storedToken.substrateToken,
+    };
+}
+function clearToken(email) {
+    try {
+        (0, node_child_process_1.execFileSync)("security", [
+            "delete-generic-password",
+            "-a",
+            email,
+            "-s",
+            KEYCHAIN_SERVICE,
+        ]);
+    }
+    catch {
+        // Token may not exist in keychain, that's fine
+    }
+}
+//# sourceMappingURL=token-store.js.map