visionclaw 0.1.217 → 0.1.218-beta.0

package/dist/channels/qq-access.d.ts

@@ -0,0 +1,294 @@
+import { type QqAccessConfig, type QqResponseMode, type QqSenderPolicy } from "../config/qq-access.js";
+/** Group events the gateway can deliver on the GROUP_AND_C2C_EVENT intent (1 << 25). */
+export type QqGroupMessageEvent = "GROUP_AT_MESSAGE_CREATE" | "GROUP_MESSAGE_CREATE";
+export declare function isQqGroupMessageEvent(eventType: string): eventType is QqGroupMessageEvent;
+export type GroupDecision = {
+    accept: true;
+} | {
+    accept: false;
+    reason: "missing_member" | "group_not_allowed" | "member_not_allowed" | "owner_not_bound" | "mode_at_only";
+};
+export interface QqGroupPolicy {
+    mode: QqResponseMode;
+    senderPolicy: QqSenderPolicy;
+    /** Only read for the "list" policy. */
+    memberAllow: string[];
+}
+/** An owner binding verified by this process, not yet echoed back by the server. */
+export interface QqOwnerBinding {
+    groupOpenid: string;
+    memberOpenid: string;
+}
+/**
+ * The settings that apply to one group: its own override where it has one,
+ * otherwise the global default, separately for the mode and the sender list.
+ * Null when the group is not allowed at all: not in `allow` and `allowAllGroups`
+ * is off. An override for a group that is not allowed grants nothing.
+ */
+export declare function resolveGroupPolicy(access: QqAccessConfig | undefined, groupOpenId: string): QqGroupPolicy | null;
+/** The owner's member_openid in a group: from the server's confirmed list, or a binding this process just verified. */
+export declare function ownerMemberIn(access: QqAccessConfig | undefined, groupOpenId: string, local?: readonly QqOwnerBinding[], options?: {
+    provenOnly?: boolean;
+}): string[];
+/** True when this member is the group's owner only because their nickname matched the owner's name (not proven). */
+export declare function isNameRecognisedOwner(access: QqAccessConfig | undefined, groupOpenId: string, memberOpenId: string): boolean;
+/**
+ * Decide whether a group message may reach the agent, using the group's own
+ * settings when it has an override and the global ones otherwise.
+ *
+ * A group author carries only `member_openid`, which differs per group and is
+ * a different identifier from the `user_openid` bound as `homeChannelOpenId`,
+ * so nothing here treats a group sender as the owner by default. The "owner"
+ * sender policy accepts only the member_openid the owner proved with a binding
+ * code in that very group.
+ */
+export declare function decideGroupMessage(input: {
+    eventType: QqGroupMessageEvent;
+    access: QqAccessConfig | undefined;
+    groupOpenId: string;
+    memberOpenId: string;
+    /** Owner bindings verified here and not yet confirmed by the server. */
+    localOwners?: readonly QqOwnerBinding[];
+}): GroupDecision;
+/**
+ * The single mode the agent reports on and the page explains: "all" when any
+ * allowed group answers every message (with allowAllGroups: the global mode is
+ * all, or any override is), otherwise "at". With no allowed group
+ * there is nothing to override, so it is the global mode. GRU computes the
+ * same value from the saved policy; keep the two in step.
+ */
+export declare function overallDesiredMode(access: QqAccessConfig): QqResponseMode;
+export interface QqModeStatus {
+    desiredMode: QqResponseMode;
+    effectiveMode: QqResponseMode;
+    /**
+     * Stable code, present while no full-group-message event (GROUP_MESSAGE_CREATE) has reached this
+     * process: the platform has not enabled "receive all group messages" (or nobody posted yet).
+     * Reported whatever the response mode is, because reading and answering are separate.
+     */
+    degradedReason?: "GROUP_MESSAGE_EVENT_NOT_OBSERVED";
+}
+/**
+ * The bot always subscribes to every group message: GROUP_MESSAGE_CREATE rides on the same intent bit
+ * as @ messages (GROUP_AND_C2C_EVENT, 1 << 25), so there is nothing to opt into and an IDENTIFY is
+ * never rejected for it. Whether the platform really delivers them depends on a permission of the
+ * bot ("receive all group messages"); without it the gateway simply never sends the event and only
+ * @ messages arrive. Reading and answering are separate: the settings only decide whether a message
+ * makes the assistant answer.
+ *
+ * `degradedReason` is present while no GROUP_MESSAGE_CREATE has been seen on this connection (the
+ * platform has not enabled full group messages, or nobody has posted without @ yet). Then the
+ * effective response mode is "at" even if "every message" is chosen, honestly: it cannot answer what
+ * it never receives.
+ */
+export declare function resolveModeStatus(desiredMode: QqResponseMode, groupMessageEventObserved: boolean): QqModeStatus;
+/** Longest message excerpt an agent reports; the server enforces the same limit. */
+export declare const QQ_MESSAGE_PREVIEW_MAX_LENGTH = 30;
+/**
+ * One-line excerpt of a group message for the owner to recognise a group or
+ * sender on the GRU bot page: whitespace and control characters collapse to
+ * single spaces, at most 30 characters. Returns undefined when nothing is left.
+ * The excerpt goes only into the heartbeat report; it is never logged.
+ */
+export declare function summarizeQqMessage(text: string | undefined): string | undefined;
+/** A group or speaker name for display: control characters out, one line, at most 40 characters. */
+export declare function cleanQqName(value: unknown): string | undefined;
+/**
+ * Risk of recognising the owner by name, kept here so the code that does it points to one place:
+ * a QQ nickname can be copied, so a member who picks the owner's nickname before the owner speaks would be
+ * recognised as the owner. Mitigations: (1) only when the group has no owner binding at all, (2) a binding
+ * proven by a code or a Gru confirmation is never replaced, (3) a name binding is never treated as proof by the
+ * "only me" gate, (4) it is dropped as soon as a second member with the same name shows up, (5) the Gru page
+ * shows it as "recognised by name" and the owner can unbind it or confirm properly with the Bind button.
+ */
+export declare const QQ_NAME_MATCH_RISK = "owner recognised by nickname is unverified";
+export interface QqGroupReport {
+    groupOpenid: string;
+    lastSeen: string;
+    removed?: true;
+    /** Excerpt of the latest message; omitted when unknown. Older servers ignore it. */
+    lastMessage?: string;
+    /** The group's name from GET /v2/groups/{id}/info; omitted when QQ would not say. Older servers ignore it. */
+    name?: string;
+    /** Only the name is new (found by asking QQ again, no event): the service must not touch "last seen". Older servers ignore it. */
+    nameOnly?: true;
+}
+export interface QqMemberReport {
+    groupOpenid: string;
+    memberOpenid: string;
+    lastSeen: string;
+    /** The speaker's QQ nickname (`author.username` of the group event); omitted when absent. Older servers ignore it. */
+    name?: string;
+    /** Excerpt of the latest message; omitted when unknown. Older servers ignore it. */
+    lastMessage?: string;
+}
+/**
+ * One "identity check" sample: which identity fields a received message's `author` carried. It exists
+ * so the owner can see on the GRU bot page whether QQ really returns `union_openid` (a stable id across
+ * private chat and groups, which would make the binding code unnecessary). Full values are kept because
+ * the page is the owner's own debug view; they are never logged and never include message text.
+ */
+export interface QqIdentityProbe {
+    /** Random id, so a re-sent report is not stored twice. */
+    id: string;
+    at: string;
+    event: "c2c" | "group_at" | "group_message";
+    /** Shortened group_openid (first 6…last 4), groups only. */
+    group?: string;
+    /** Names of the keys the author object had, even when their value was empty. */
+    keys: string[];
+    userOpenid?: string;
+    memberOpenid?: string;
+    unionOpenid?: string;
+    unionUserAccount?: string;
+    username?: string;
+    memberRole?: string;
+}
+export declare const QQ_IDENTITY_PROBE_MAX = 20;
+/** The author object as QQ sends it; every field is optional and may be empty. */
+export type QqAuthorFields = Record<string, unknown>;
+/** Shorten a group_openid for display (first 6…last 4). */
+export declare const shortQqId: (id: string) => string;
+/** Build a sample from an event's author. Returns null when there is no author object at all. */
+export declare function buildQqIdentityProbe(input: {
+    event: QqIdentityProbe["event"];
+    author: unknown;
+    group?: string;
+    at?: string;
+    id?: string;
+}): QqIdentityProbe | null;
+/** The latest samples not yet delivered; bounded, re-queued when a heartbeat fails. */
+export declare class QqIdentityProbeTracker {
+    private pending;
+    note(probe: QqIdentityProbe | null): void;
+    drain(): QqIdentityProbe[];
+    requeue(probes: readonly QqIdentityProbe[]): void;
+}
+/** Heartbeat payload field `qqAccessReport`. */
+export interface QqAccessReport {
+    groups: QqGroupReport[];
+    members: QqMemberReport[];
+    mode?: QqModeStatus;
+    /** Owner binding codes verified in a group. The code itself is never sent, only the id of the pending code. */
+    ownerBindings?: (QqOwnerBinding & {
+        bindId: string;
+    })[];
+    /** Groups the owner has now been told (privately) the bot joined. The service never lists them again. */
+    groupNoticeAcks?: string[];
+    /** Identity-check samples (author fields of received messages). Older servers ignore the field. */
+    identityProbes?: QqIdentityProbe[];
+    /**
+     * A member whose QQ nickname equals the owner's name, in a group with no owner yet: a guess, which the service
+     * re-checks (see QQ_NAME_MATCH_RISK). Older servers ignore the field.
+     */
+    ownerNameClaims?: {
+        groupOpenid: string;
+        memberOpenid: string;
+    }[];
+    /** Groups where more than one member has the owner's name: any name recognition there is withdrawn. */
+    ownerNameAmbiguous?: string[];
+}
+export declare const QQ_REPORT_MAX_GROUPS = 100;
+export declare const QQ_REPORT_MAX_MEMBERS = 200;
+/**
+ * Buffers groups and speakers seen since the last successful heartbeat.
+ * Drained per heartbeat and re-queued if the heartbeat fails, so a network
+ * error never loses a first sighting. Unknown groups are recorded before the
+ * allowlist check on purpose: that is how the owner discovers them.
+ */
+export declare class QqAccessTracker {
+    private groups;
+    private members;
+    noteGroup(groupOpenId: string, options?: {
+        removed?: boolean;
+        at?: string;
+        lastMessage?: string;
+        name?: string;
+        nameOnly?: boolean;
+    }): void;
+    noteMember(groupOpenId: string, memberOpenId: string, at?: string, lastMessage?: string, name?: string): void;
+    /** Remove and return up to one heartbeat's worth of reports; null when idle. */
+    drain(): Pick<QqAccessReport, "groups" | "members"> | null;
+    /** Put an undelivered report back, without clobbering anything newer. */
+    requeue(report: Pick<QqAccessReport, "groups" | "members">): void;
+}
+/** What HeartbeatManager needs from the QQ adapter. */
+export interface QqAccessReporter {
+    drainQqAccessReport(): QqAccessReport | null;
+    requeueQqAccessReport(report: QqAccessReport): void;
+    /** Optional: lets the reporter ask for an early heartbeat. */
+    setReportWaker?(wake: () => void): void;
+    /** Owner commands typed in the private chat, to relay in the heartbeat (service-side validation). */
+    drainQqOwnerCommands?(): {
+        id: string;
+        text: string;
+        confirm: boolean;
+        locale: "en" | "zh";
+    }[];
+    requeueQqOwnerCommands?(requests: {
+        id: string;
+        text: string;
+        confirm: boolean;
+        locale: "en" | "zh";
+    }[]): void;
+    /** The service's answers: command replies and groups still to announce to the owner. */
+    handleQqServiceResponse?(response: {
+        qqOwnerCommandReplies?: unknown;
+        qqGroupNotices?: unknown;
+        qqGroupNamesWanted?: unknown;
+    }): void;
+}
+export declare function isQqAccessReporter(value: unknown): value is QqAccessReporter;
+/**
+ * The `/bind-owner <code>` command (and `/bind`, which handed out the code) is hidden for now: the only way to
+ * become the owner in a group is join -> private question -> "Bind me" button -> Gru confirmation link.
+ * While false the agent neither recognises nor answers the command (in a group or in private; it is plain text
+ * then), and the verification code below stays but is unreachable. Flip to true to bring the command back
+ * (also SHOW_BIND_OWNER_COMMAND in the onboarding service and the code box on the GRU page).
+ */
+export declare const SHOW_BIND_OWNER_COMMAND = false;
+/** Prefix of the binding command an owner types into a group. */
+export declare const QQ_OWNER_BIND_COMMAND = "/bind-owner";
+/**
+ * Parse a group message as the owner binding command. Returns null when it is
+ * not that command at all, otherwise the normalized code ("" when missing).
+ * Such a message is only ever used for binding: never AI input, never logged.
+ */
+export declare function parseOwnerBindCommand(text: string, enabled?: boolean): {
+    code: string;
+} | null;
+export declare function hashOwnerBindCode(salt: string, code: string): string;
+export type OwnerBindResult = "ok" | "invalid" | "rate_limited";
+/**
+ * Verifies owner binding codes. Failures are limited per sender and per group in a
+ * sliding window (one group being guessed at does not lock the others), so a code cannot be guessed by trying; a used code (or an
+ * expired one) never works again, and nothing but the code's hash is held.
+ */
+export declare class QqOwnerBinder {
+    private readonly now;
+    private failures;
+    /** Groups the owner was already told are locked, with when. */
+    private readonly limitNotified;
+    private readonly used;
+    /** Verified here, waiting to be reported (and until the server echoes them). */
+    private readonly bound;
+    private readonly unreported;
+    constructor(now?: () => number);
+    attempt(access: QqAccessConfig | undefined, groupOpenId: string, memberOpenId: string, code: string): OwnerBindResult;
+    /**
+     * True once per group and window after it was locked: the owner should be told (privately, never in
+     * the group, where an attacker would see it). Bounded overall so it cannot become a message storm.
+     */
+    takeLimitNotice(groupOpenId: string): boolean;
+    /** Bindings in force here before the server has echoed them. */
+    local(): QqOwnerBinding[];
+    /** The server confirmed these groups: stop carrying them locally. */
+    confirm(access: QqAccessConfig | undefined): void;
+    drain(): (QqOwnerBinding & {
+        bindId: string;
+    })[];
+    requeue(bindings: readonly (QqOwnerBinding & {
+        bindId: string;
+    })[]): void;
+}
+//# sourceMappingURL=qq-access.d.ts.map

package/dist/channels/qq-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qq-access.d.ts","sourceRoot":"","sources":["../../src/channels/qq-access.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,cAAc,EAEnB,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAEhC,wFAAwF;AACxF,MAAM,MAAM,mBAAmB,GAAG,yBAAyB,GAAG,sBAAsB,CAAC;AAErF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,IAAI,mBAAmB,CAEzF;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,GAChB;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,cAAc,CAAA;CAAE,CAAC;AAElI,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,cAAc,CAAC;IAC7B,uCAAuC;IACvC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAKD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAgBhH;AAED,uHAAuH;AACvH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,cAAc,GAAG,SAAS,EAClC,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE,SAAS,cAAc,EAAO,EACrC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,MAAM,EAAE,CAQV;AAED,oHAAoH;AACpH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAM5H;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,SAAS,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,WAAW,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CACzC,GAAG,aAAa,CAkBhB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,CASzE;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,cAAc,CAAC;IAC5B,aAAa,EAAE,cAAc,CAAC;IAC9B;;;;OAIG;IACH,cAAc,CAAC,EAAE,kCAAkC,CAAC;CACrD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,cAAc,EAAE,yBAAyB,EAAE,OAAO,GAAG,YAAY,CAG/G;AAED,oFAAoF;AACpF,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAM/E;AAED,oGAAoG;AACpG,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAK9D;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,+CAA+C,CAAC;AAE/E,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8GAA8G;IAC9G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kIAAkI;IAClI,QAAQ,CAAC,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,sHAAsH;IACtH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,GAAG,UAAU,GAAG,eAAe,CAAC;IAC5C,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAKxC,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AASrD,2DAA2D;AAC3D,eAAO,MAAM,SAAS,GAAI,IAAI,MAAM,KAAG,MAAsE,CAAC;AAE9G,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,eAAe,GAAG,IAAI,CAoBlK;AAED,uFAAuF;AACvF,qBAAa,sBAAsB;IACjC,OAAO,CAAC,OAAO,CAAyB;IAExC,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IAMzC,KAAK,IAAI,eAAe,EAAE;IAM1B,OAAO,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,IAAI;CAIlD;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,+GAA+G;IAC/G,aAAa,CAAC,EAAE,CAAC,cAAc,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IACxD,yGAAyG;IACzG,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,mGAAmG;IACnG,cAAc,CAAC,EAAE,eAAe,EAAE,CAAC;IACnC;;;OAGG;IACH,eAAe,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAClE,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAKzC;;;;;GAKG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAsH;IACpI,OAAO,CAAC,OAAO,CAAqC;IAEpD,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,IAAI;IAoB/I,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAA2B,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAY/H,gFAAgF;IAChF,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG,IAAI;IAuB1D,yEAAyE;IACzE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,SAAS,CAAC,GAAG,IAAI;CAgBlE;AAED,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,IAAI,cAAc,GAAG,IAAI,CAAC;IAC7C,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;IACpD,8DAA8D;IAC9D,cAAc,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IACxC,qGAAqG;IACrG,oBAAoB,CAAC,IAAI;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC;IAC/F,sBAAsB,CAAC,CAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,EAAE,GAAG,IAAI,CAAC;IAC/G,wFAAwF;IACxF,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAAE,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAC;QAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CACvI;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAI5E;AAED;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAC7C,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAGnD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAiC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKvH;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,SAAS,GAAG,cAAc,CAAC;AAWhE;;;;GAIG;AACH,qBAAa,aAAa;IASZ,OAAO,CAAC,QAAQ,CAAC,GAAG;IARhC,OAAO,CAAC,QAAQ,CAAoD;IACpE,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,gFAAgF;IAChF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;gBAE7C,GAAG,GAAE,MAAM,MAAiB;IAEzD,OAAO,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe;IAgCrH;;;OAGG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAS7C,gEAAgE;IAChE,KAAK,IAAI,cAAc,EAAE;IAIzB,qEAAqE;IACrE,OAAO,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI;IAMjD,KAAK,IAAI,CAAC,cAAc,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE;IAIhD,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,GAAG,IAAI;CAG1E"}