weflow-cli 1.7.0 → 1.8.0

package/dist/src/panel/server.js

@@ -0,0 +1,413 @@
+/**
+ * 助手守护进程的本机入口：**只绑回环**的 HTTP 端点，给悬浮窗（和 `weflow-cli panel`）用。
+ *
+ * 为什么要有它：助手的配额计数器、串行队列、被那条队列保护的实例字段都是**进程内状态**，
+ * 所以"两个入口"必须落在**一个宿主进程**里。悬浮窗自己 `new AssistantService()` 会变成
+ * 第二个大脑：配额各算各的、两进程并发写同一个 userId 的记忆（`save()` 虽是合并写，
+ * 但同一个 userId 仍是后写覆盖先写）。**面板只做客户端。**
+ *
+ * ## 信任边界（D-045）
+ *
+ * 这条端点能读到用户的聊天数据，所以照着 `docs/DECISIONS.md` 的 D-004（阅读器只绑回环）
+ * 往下走，但**必须比它严**：
+ *
+ * - **绑 `127.0.0.1`，不可配置**。不是 LAN 服务。
+ * - **每个请求都要 token**，`GET /api/status` 也不例外。阅读器（`scripts/fav_server.py`）
+ *   根本没有 token，而且它的 Origin 校验**不带 Origin 就放行**——那是给"本机阅读器"的设计，
+ *   不能照抄到这个能替用户读聊天记录的端点上来。
+ * - **Origin 是第二道**：带了 Origin 但不在白名单 → 403，**即使 token 正确**。
+ *   反过来，**不带** Origin 要放行：`file://` 加载的 Electron 渲染进程与 `curl` 都是这种形态，
+ *   硬要求 Origin 会把面板自己挡在门外。
+ * - **POST 必须 `Content-Type: application/json`**：挡掉"跨站简单请求"那种不发 preflight 的形态。
+ * - **同时只允许一轮在飞**：单轮最坏是分钟级（6 轮工具 + 守卫一轮 + 压缩/抽取各一次 LLM），
+ *   用户在转圈时连按回车会往队列里挂一串——每一个都烧配额。第 2 个直接 429，不入队。
+ *
+ * 与助手出站那个 `isSafeUrl()`（`assistantTools.ts`）**不是一回事**：它管的是"助手去抓网页"，
+ * 回答的是另一个问题（那边**拒绝**回环地址）。别把两者"统一"起来。
+ */
+import { createServer } from 'node:http';
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { DEFAULT_PANEL_PORT, PANEL_ENDPOINT_VERSION, PANEL_SERVICE_ID, generateToken, tokenMatches, writeEndpoint, } from './endpoint.js';
+import { privacyGate } from '../services/assistantPrivacy.js';
+import { configService } from '../services/configService.js';
+import { resolvePackageRoot } from '../utils/packageRoot.js';
+/** 8KB 够一句问题用；超了就是有人在灌东西 */
+const MAX_BODY_BYTES = 8 * 1024;
+/** 一轮最坏分钟级（见上），给足余量；客户端那边也有自己的超时 */
+const TURN_TIMEOUT_MS = 180_000;
+/** 浏览器那条路的会话 cookie 名。值是 token 本身，但 `HttpOnly` —— 页面脚本拿不到它 */
+const COOKIE_NAME = 'weflow_panel';
+/** 一次性口令的有效期。只用来"换 cookie"这一次，换个页面就该过期了 */
+const PAIR_TTL_MS = 60_000;
+/**
+ * 静态文件**白名单**。不是"把目录挂出去"：只认这三个名字，其余一律 404。
+ * 挂目录就得处理路径穿越，而这里根本不需要那个能力。
+ */
+const STATIC_FILES = {
+    '/panel': 'index.html',
+    '/panel/': 'index.html',
+    '/panel/index.html': 'index.html',
+    '/panel/renderer.js': 'renderer.js',
+    '/panel/panel.css': 'panel.css',
+    // 悬浮球上那张图（项目吉祥物）。走白名单而不是挂目录，理由同上。
+    '/panel/mascot.png': 'mascot.png',
+    // 被捏一下时换的那张（同一只猫，眯眼笑）。**必须一起进白名单**——漏了它，
+    // 球在按下的一瞬间会闪成一张空图（`PANEL_ASSET_MISSING` 只写在响应里，页面上看不到）。
+    '/panel/mascot-happy.png': 'mascot-happy.png',
+    // 三个真状态的脸（忙/连不上/额度用完）。与上面那张一样，**必须一起进白名单**——
+    // 漏一张，那个状态一出现球就闪成空图，而响应里的 PANEL_ASSET_MISSING 页面上看不到。
+    '/panel/mascot-focus.png': 'mascot-focus.png',
+    '/panel/mascot-sorry.png': 'mascot-sorry.png',
+    '/panel/mascot-tired.png': 'mascot-tired.png',
+};
+const CONTENT_TYPES = {
+    '.html': 'text/html; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8',
+    '.css': 'text/css; charset=utf-8',
+    '.png': 'image/png',
+};
+function json(res, status, payload) {
+    const body = JSON.stringify(payload);
+    res.writeHead(status, {
+        'Content-Type': 'application/json; charset=utf-8',
+        'Cache-Control': 'no-store',
+        'X-Content-Type-Options': 'nosniff',
+    });
+    res.end(body);
+}
+/** 只认本机来源。带 Origin 就必须对得上；不带 Origin 放行（curl / file:// 的 Electron） */
+export function isLocalOrigin(origin, port) {
+    if (!origin)
+        return true;
+    return origin === `http://127.0.0.1:${port}` || origin === `http://localhost:${port}`;
+}
+function bearer(req) {
+    const header = req.headers['authorization'];
+    if (typeof header !== 'string')
+        return undefined;
+    const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+    return match ? match[1] : undefined;
+}
+function cookieToken(req) {
+    const raw = req.headers['cookie'];
+    if (typeof raw !== 'string')
+        return undefined;
+    for (const part of raw.split(';')) {
+        const [name, ...rest] = part.trim().split('=');
+        if (name === COOKIE_NAME)
+            return rest.join('=');
+    }
+    return undefined;
+}
+/**
+ * 这一份请求是拿什么来证明自己的：CLI/Python 走 `Authorization`，**浏览器走 cookie**。
+ *
+ * 浏览器为什么不能也用 header：页面脚本一旦拿得到 token，就等于把 token 交给了渲染进程，
+ * 而渲染进程要显示的是**助手回复**——那里面有用户的聊天内容。用 `HttpOnly` cookie，
+ * 脚本就永远读不到它（防的是 XSS 拿 token 去干别的事），同时页面照常能发请求。
+ */
+function presentedToken(req) {
+    return bearer(req) ?? cookieToken(req);
+}
+/**
+ * 读请求体，超限就**立刻**给结论，但**不掐连接**。
+ *
+ * 第一版在这里 `req.destroy()` 了：结果是客户端看到"连接被重置"而不是 413
+ * ——`fetch` 直接抛 `fetch failed`，调用方拿不到那个状态码。所以超限之后**丢弃余下的字节**
+ * 而不是断开（回环端点上的这点带宽代价，比"给不出 413"划算得多）。
+ */
+function readBody(req) {
+    return new Promise((resolve) => {
+        let size = 0;
+        let tooLarge = false;
+        const chunks = [];
+        req.on('data', (chunk) => {
+            if (tooLarge)
+                return; // 已经下过结论了，余下的丢掉
+            size += chunk.length;
+            if (size > MAX_BODY_BYTES) {
+                tooLarge = true;
+                resolve({ ok: false, code: 'PAYLOAD_TOO_LARGE' });
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => { if (!tooLarge)
+            resolve({ ok: true, text: Buffer.concat(chunks).toString('utf8') }); });
+        req.on('error', () => resolve({ ok: false, code: 'BODY_READ_FAILED' }));
+    });
+}
+/**
+ * 端口的环境变量覆盖。**只给测试用**（`WEFLOW_PANEL_PORT=0` 让内核分配一个临时端口），
+ * 与 `WEFLOW_ASSISTANT_EXPORT_ROOT` 是同一个先例。
+ *
+ * 为什么需要它：测试里 `AssistantService.start()` 会真的把这个端点起起来，
+ * 于是**每个用到 store 的测试都会去抢生产端口 8766**——真守护进程在跑时就是 EADDRINUSE，
+ * 而且测试之间也会互相抢。非法值一律当没给（不猜、不静默用一个奇怪的端口）。
+ */
+function portFromEnv() {
+    const raw = process.env.WEFLOW_PANEL_PORT;
+    if (raw === undefined || raw === '')
+        return undefined;
+    const parsed = Number(raw);
+    if (!Number.isInteger(parsed) || parsed < 0 || parsed > 65535)
+        return undefined;
+    return parsed;
+}
+/**
+ * 起端点。返回**实际**监听的端口——调用方要把它写进端点文件，不要用请求的那个值。
+ */
+export async function startPanelServer(options) {
+    const { service, memoryBucket, memoryNote = '', channel, onLog } = options;
+    const wantedPort = options.port ?? portFromEnv() ?? DEFAULT_PANEL_PORT;
+    const token = generateToken();
+    const startedAt = new Date().toISOString();
+    let inFlight = false;
+    const server = createServer((req, res) => {
+        void handle(req, res).catch(() => {
+            if (!res.headersSent)
+                json(res, 500, { ok: false, code: 'INTERNAL' });
+            else
+                res.end();
+        });
+    });
+    /**
+     * 一次性口令 → cookie。**为什么要有这一步**：浏览器那条路（Edge `--app`）得先拿到凭据，
+     * 而**不能把 token 放进 URL**——命令行对同机任何进程可见（`wmic process get commandline`），
+     * 而且 URL 会进浏览器历史。所以给的是一个**一次性、60 秒、用完即废**的口令。
+     */
+    const pairCodes = new Map();
+    function issuePairCode() {
+        const code = randomBytes(18).toString('base64url');
+        pairCodes.set(code, Date.now() + PAIR_TTL_MS);
+        // 顺手清掉过期的，别让这张表无限长
+        for (const [k, exp] of pairCodes)
+            if (exp < Date.now())
+                pairCodes.delete(k);
+        return code;
+    }
+    function consumePairCode(code) {
+        const exp = pairCodes.get(code);
+        if (!exp)
+            return false;
+        pairCodes.delete(code); // **单次使用**：即使它被日志/历史记下来，也已经废了
+        return exp >= Date.now();
+    }
+    function serveStatic(res, fileName) {
+        try {
+            const full = join(resolvePackageRoot(import.meta.url), 'resources', 'panel', fileName);
+            if (!existsSync(full)) {
+                json(res, 503, { ok: false, code: 'PANEL_ASSET_MISSING', file: fileName });
+                return;
+            }
+            const ext = fileName.slice(fileName.lastIndexOf('.'));
+            res.writeHead(200, {
+                'Content-Type': CONTENT_TYPES[ext] ?? 'application/octet-stream',
+                'Cache-Control': 'no-store',
+                // CSP 走响应头而不是 <meta>：头不能被页面内容绕过
+                'Content-Security-Policy': "default-src 'none'; script-src 'self'; style-src 'self'; "
+                    + "connect-src 'self'; img-src 'self' data:; form-action 'none'; base-uri 'none'",
+                'X-Content-Type-Options': 'nosniff',
+                'Referrer-Policy': 'no-referrer',
+            });
+            res.end(readFileSync(full));
+        }
+        catch {
+            json(res, 500, { ok: false, code: 'INTERNAL' });
+        }
+    }
+    async function handle(req, res) {
+        const port = server.address()?.port ?? wantedPort;
+        const url = new URL(req.url ?? '/', `http://127.0.0.1:${port}`);
+        if (!isLocalOrigin(req.headers.origin, port)) {
+            json(res, 403, { ok: false, code: 'ORIGIN_DENIED' });
+            return;
+        }
+        // ---------------------------------------------------------- 页面（浏览器那条路）
+        const asset = STATIC_FILES[url.pathname];
+        if (asset) {
+            if (req.method !== 'GET') {
+                json(res, 405, { ok: false, code: 'METHOD_NOT_ALLOWED' });
+                return;
+            }
+            const code = url.searchParams.get('c');
+            const authed = tokenMatches(token, presentedToken(req));
+            if (!authed) {
+                // 没带凭据：只接受一次性口令，并把 cookie 种上（token **不进 URL**，见 issuePairCode）
+                if (!code || !consumePairCode(code)) {
+                    json(res, 401, { ok: false, code: 'UNAUTHORIZED', hint: '用 weflow-cli panel 打开' });
+                    return;
+                }
+                res.setHeader('Set-Cookie', `${COOKIE_NAME}=${token}; HttpOnly; SameSite=Strict; Path=/`);
+            }
+            // 只在**页面本身**加载时记一行。不记 `/api/status`：面板每 30 秒轮询一次状态，
+            // 记它会把日志灌满，而它想回答的问题（"界面开着吗、按哪条路进来的"）这一行就答了。
+            if (asset === 'index.html') {
+                onLog?.(`[panel] 界面已加载（${code && !authed ? '一次性口令' : 'cookie'}）`);
+            }
+            serveStatic(res, asset);
+            return;
+        }
+        if (!tokenMatches(token, presentedToken(req))) {
+            // 不回显任何东西：错的 token 与缺的 token 得到完全一样的响应
+            json(res, 401, { ok: false, code: 'UNAUTHORIZED' });
+            return;
+        }
+        if (url.pathname === '/api/pair') {
+            if (req.method !== 'POST') {
+                json(res, 405, { ok: false, code: 'METHOD_NOT_ALLOWED' });
+                return;
+            }
+            // 换口令这一步**必须带真实 token**（上面的检查已经过了），所以本机别的东西换不到
+            const code = issuePairCode();
+            json(res, 200, {
+                ok: true, code, expiresInMs: PAIR_TTL_MS,
+                url: `http://127.0.0.1:${port}/panel?c=${code}`,
+            });
+            return;
+        }
+        if (url.pathname === '/api/status') {
+            if (req.method !== 'GET') {
+                json(res, 405, { ok: false, code: 'METHOD_NOT_ALLOWED' });
+                return;
+            }
+            json(res, 200, {
+                ok: true,
+                service: PANEL_SERVICE_ID,
+                startedAt,
+                channel,
+                channelActive: service.isChannelActive(),
+                memoryBucket,
+                memoryNote,
+                quota: service.quotaState(),
+                aiConfigured: privacyGate.isLocalInference() || !!configService.get('deepseekApiKey'),
+                // 右键"快速回复"的名单（`config set quickReplyContacts "甲,乙"`）。
+                // 页面本来就在轮询这个端点，所以它不必再开一个入口——**面板那条路上不加新端点**。
+                // 名字与 id 都在这里：菜单显示名字，`/api/ask` 收到的是名字（解析交给助手那一侧，
+                // 重名会得到"匹配多个会话"这种可读的失败，不猜）。
+                quickReplies: String(configService.get('quickReplyContacts') || '')
+                    .split(',').map(item => item.trim()).filter(Boolean).slice(0, 20),
+            });
+            return;
+        }
+        if (url.pathname === '/api/ask') {
+            if (req.method !== 'POST') {
+                json(res, 405, { ok: false, code: 'METHOD_NOT_ALLOWED' });
+                return;
+            }
+            const contentType = String(req.headers['content-type'] ?? '');
+            if (!contentType.toLowerCase().startsWith('application/json')) {
+                json(res, 415, { ok: false, code: 'UNSUPPORTED_MEDIA_TYPE' });
+                return;
+            }
+            if (inFlight) {
+                // 不入队：入队意味着它**一定会被执行**，也就一定会烧配额
+                json(res, 429, { ok: false, code: 'BUSY', error: '上一句还在处理' });
+                return;
+            }
+            const body = await readBody(req);
+            if (!body.ok) {
+                json(res, body.code === 'PAYLOAD_TOO_LARGE' ? 413 : 400, { ok: false, code: body.code });
+                return;
+            }
+            let text = '';
+            try {
+                text = String(JSON.parse(body.text)?.text ?? '');
+            }
+            catch {
+                json(res, 400, { ok: false, code: 'BAD_JSON' });
+                return;
+            }
+            text = text.trim();
+            if (!text) {
+                json(res, 400, { ok: false, code: 'EMPTY_TEXT' });
+                return;
+            }
+            if (text.length > 4000) {
+                json(res, 413, { ok: false, code: 'TEXT_TOO_LONG' });
+                return;
+            }
+            inFlight = true;
+            try {
+                const raced = await withTimeout(service.ask(memoryBucket, text, onLog), TURN_TIMEOUT_MS);
+                if (raced.kind === 'timeout') {
+                    // 超时**不等于**这一轮没跑完：它可能还在队列里跑着。所以这里只是不再等它，
+                    // 那一轮之后仍会落记忆、仍会占配额。日志里说清，别让人以为它被取消了。
+                    onLog?.('  → 本机入口不再等待这一轮（它可能仍在队列里跑）');
+                    json(res, 504, { ok: false, code: 'TIMEOUT' });
+                    return;
+                }
+                if (raced.kind === 'failed') {
+                    onLog?.(`  → 本机入口抛错: ${raced.message}`);
+                    json(res, 500, { ok: false, code: 'TURN_FAILED' });
+                    return;
+                }
+                const outcome = raced.value;
+                if (outcome.status === 'replied' || outcome.status === 'quota-exceeded') {
+                    json(res, 200, { ok: true, status: outcome.status, reply: outcome.text, memoryBucket });
+                    return;
+                }
+                if (outcome.status === 'not-running') {
+                    json(res, 503, { ok: false, code: 'NOT_RUNNING' });
+                    return;
+                }
+                // `denied` / `ignored` 对本机入口不该出现（它不过白名单）。真出现就是接线错了，
+                // 记在本机日志里，对客户端只说"这一轮没成"，**不回显内部细节**。
+                onLog?.(`  → 本机入口异常结果: ${outcome.status}`);
+                json(res, 500, { ok: false, code: 'TURN_FAILED' });
+            }
+            finally {
+                inFlight = false;
+            }
+            return;
+        }
+        json(res, 404, { ok: false, code: 'NOT_FOUND' });
+    }
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        // **只绑回环**。这个字面量就是 D-004 那条决策的落点，不要做成可配置项。
+        server.listen(wantedPort, '127.0.0.1', () => {
+            server.removeListener('error', reject);
+            resolve();
+        });
+    }).catch((error) => {
+        if (error?.code === 'EADDRINUSE') {
+            throw new Error(`本机端点端口 ${wantedPort} 已被占用（换一个：--port，或先停掉占用的程序）`);
+        }
+        throw error;
+    });
+    const actualPort = server.address().port;
+    const endpoint = {
+        version: PANEL_ENDPOINT_VERSION,
+        service: PANEL_SERVICE_ID,
+        port: actualPort,
+        token,
+        pid: process.pid,
+        startedAt,
+        channel,
+        memoryBucket,
+    };
+    writeEndpoint(endpoint);
+    return {
+        port: actualPort,
+        endpoint,
+        close: () => new Promise((resolve) => {
+            server.close(() => resolve());
+            // 长连接挂着时 close 不会回调；本机服务没有长连接，但给个兜底
+            setTimeout(resolve, 500).unref?.();
+        }),
+    };
+}
+/**
+ * 等一轮，但不超过 `ms`。**超时与失败必须分开报**：把"抛错了"也说成"超时"，
+ * 用户会去查网络，而真正的原因在日志里被掩掉了。
+ */
+function withTimeout(promise, ms) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(() => resolve({ kind: 'timeout' }), ms);
+        promise.then((value) => { clearTimeout(timer); resolve({ kind: 'done', value }); }, (error) => { clearTimeout(timer); resolve({ kind: 'failed', message: String(error?.message ?? error) }); });
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/src/panel/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/panel/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAA;AAChG,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EACL,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EACzF,aAAa,GACd,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,4BAA4B;AAC5B,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAA;AAC/B,oCAAoC;AACpC,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,8DAA8D;AAC9D,MAAM,WAAW,GAAG,cAAc,CAAA;AAClC,2CAA2C;AAC3C,MAAM,WAAW,GAAG,MAAM,CAAA;AAC1B;;;GAGG;AACH,MAAM,YAAY,GAA2B;IAC3C,QAAQ,EAAE,YAAY;IACtB,SAAS,EAAE,YAAY;IACvB,mBAAmB,EAAE,YAAY;IACjC,oBAAoB,EAAE,aAAa;IACnC,kBAAkB,EAAE,WAAW;IAC/B,kCAAkC;IAClC,mBAAmB,EAAE,YAAY;IACjC,yCAAyC;IACzC,wDAAwD;IACxD,yBAAyB,EAAE,kBAAkB;IAC7C,6CAA6C;IAC7C,sDAAsD;IACtD,yBAAyB,EAAE,kBAAkB;IAC7C,yBAAyB,EAAE,kBAAkB;IAC7C,yBAAyB,EAAE,kBAAkB;CAC9C,CAAA;AACD,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,WAAW;CACpB,CAAA;AAkBD,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAgB;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACpC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;QAC3B,wBAAwB,EAAE,SAAS;KACpC,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,MAA0B,EAAE,IAAY;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,OAAO,MAAM,KAAK,oBAAoB,IAAI,EAAE,IAAI,MAAM,KAAK,oBAAoB,IAAI,EAAE,CAAA;AACvF,CAAC;AAED,SAAS,MAAM,CAAC,GAAoB;IAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACpD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACvC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC7C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,GAAoB;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,QAAQ;gBAAE,OAAM,CAAoB,gBAAgB;YACxD,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;YACpB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC1B,QAAQ,GAAG,IAAI,CAAA;gBACf,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAA;gBACjD,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAC3G,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;IACzC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK;QAAE,OAAO,SAAS,CAAA;IAC/E,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA2B;IAChE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,IAAI,kBAAkB,CAAA;IACtE,MAAM,KAAK,GAAG,aAAa,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;;gBAChE,GAAG,CAAC,GAAG,EAAE,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF;;;;OAIG;IACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE3C,SAAS,aAAa;QACpB,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAClD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAA;QAC7C,mBAAmB;QACnB,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,SAAS;YAAE,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;gBAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAA;IACb,CAAC;IAED,SAAS,eAAe,CAAC,IAAY;QACnC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QACtB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA,CAAU,8BAA8B;QAC9D,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IAC1B,CAAC;IAED,SAAS,WAAW,CAAC,GAAmB,EAAE,QAAgB;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;YACtF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC7G,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;YACrD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,0BAA0B;gBAChE,eAAe,EAAE,UAAU;gBAC3B,gCAAgC;gBAChC,yBAAyB,EAAE,2DAA2D;sBAClF,+EAA+E;gBACnF,wBAAwB,EAAE,SAAS;gBACnC,iBAAiB,EAAE,aAAa;aACjC,CAAC,CAAA;YACF,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;QACjD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,GAAoB,EAAE,GAAmB;QAC7D,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAA8B,EAAE,IAAI,IAAI,UAAU,CAAA;QAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAA;QAE/D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAA4B,EAAE,IAAI,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAA;YACpD,OAAM;QACR,CAAC;QAED,wEAAwE;QACxE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC/F,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAA;YACvD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,+DAA+D;gBAC/D,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAA;oBAClF,OAAM;gBACR,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,WAAW,IAAI,KAAK,qCAAqC,CAAC,CAAA;YAC3F,CAAC;YACD,oDAAoD;YACpD,4CAA4C;YAC5C,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBAC3B,KAAK,EAAE,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAA;YACnE,CAAC;YACD,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACvB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9C,uCAAuC;YACvC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAA;YACnD,OAAM;QACR,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAChG,+CAA+C;YAC/C,MAAM,IAAI,GAAG,aAAa,EAAE,CAAA;YAC5B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBACb,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW;gBACxC,GAAG,EAAE,oBAAoB,IAAI,YAAY,IAAI,EAAE;aAChD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC/F,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBACb,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,gBAAgB;gBACzB,SAAS;gBACT,OAAO;gBACP,aAAa,EAAE,OAAO,CAAC,eAAe,EAAE;gBACxC,YAAY;gBACZ,UAAU;gBACV,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE;gBAC3B,YAAY,EAAE,WAAW,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACrF,sDAAsD;gBACtD,6CAA6C;gBAC7C,kDAAkD;gBAClD,4BAA4B;gBAC5B,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;qBAChE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACpE,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAChG,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAA;YAC7D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAA;gBAC7D,OAAM;YACR,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,gCAAgC;gBAChC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;gBAC7D,OAAM;YACR,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAClH,IAAI,IAAI,GAAG,EAAE,CAAA;YACb,IAAI,CAAC;gBAAC,IAAI,GAAG,MAAM,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC;gBACvE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;gBAAC,OAAM;YACzD,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YAClB,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAExF,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;gBACxF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC7B,yCAAyC;oBACzC,qCAAqC;oBACrC,KAAK,EAAE,CAAC,4BAA4B,CAAC,CAAA;oBACrC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;oBAC9C,OAAM;gBACR,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5B,KAAK,EAAE,CAAC,eAAe,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;oBACvC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;oBAClD,OAAM;gBACR,CAAC;gBACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAA;gBAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;oBACxE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAA;oBACvF,OAAM;gBACR,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBACrC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;oBAClD,OAAM;gBACR,CAAC;gBACD,oDAAoD;gBACpD,qCAAqC;gBACrC,KAAK,EAAE,CAAC,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBAC1C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;YACpD,CAAC;oBAAS,CAAC;gBACT,QAAQ,GAAG,KAAK,CAAA;YAClB,CAAC;YACD,OAAM;QACR,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IAClD,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,2CAA2C;QAC3C,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE;YAC1C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACtC,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAU,EAAE,EAAE;QACtB,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,UAAU,UAAU,6BAA6B,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,MAAM,UAAU,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAA;IAC9D,MAAM,QAAQ,GAAkB;QAC9B,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,UAAU;QAChB,KAAK;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS;QACT,OAAO;QACP,YAAY;KACb,CAAA;IACD,aAAa,CAAC,QAAQ,CAAC,CAAA;IAEvB,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ;QACR,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YAC7B,oCAAoC;YACpC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;QACpC,CAAC,CAAC;KACH,CAAA;AACH,CAAC;AAOD;;;GAGG;AACH,SAAS,WAAW,CAAC,OAA6B,EAAE,EAAU;IAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;QAChE,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC,EACpE,CAAC,KAAU,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC,CAC/G,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/panel/userId.d.ts

@@ -0,0 +1,37 @@
+/**
+ * 本机面板用哪个记忆桶 —— **这决定了它跟微信里那个是不是"同一个大脑"**。
+ *
+ * 记忆的事实是**按 userId 分**的（`assistant_memory.json` 的 `users["<会话id>"].facts`），
+ * 所以"共用记忆"不是一句口号，它等于"两边用同一个字符串当 userId"。
+ *
+ * 推理链是硬的：直聊时 `resolveInboundRouting` 给出的 `conversationId` 就是 `senderId`
+ * （`assistantRouting.ts:73`、`:78-82`），而白名单比的正是 `senderId`（`:31-35`）。
+ * **但这条推理在真实微信消息上从未被观测过**——本机那条通道从来没登录成功过
+ * （`docs/PROJECT_STATE.md`）。所以这里的态度是：
+ *
+ * - **恰好一条**白名单 → 就用它（那正是坐在这台机器前的人），并标记 `shared: true`；
+ * - **零条或两条以上 → 不猜**。返回一个 `needsAnswer` 的结果，让界面**问一次**
+ *   并把答案存进 `assistantPanelUser`，而不是静默落进一个跟微信隔离的桶里
+ *   ——那样用户会以为在共用一个大脑，而实际上没有。
+ *
+ * 界面必须把解析出来的桶显示出来（"当前记忆桶：xxx"），否则上面这些区分用户看不见。
+ */
+export interface PanelUserResolution {
+    /** 用哪个 userId 当记忆桶 */
+    userId: string;
+    /** 是不是与白名单里那个人共用（true 才是"一个大脑"） */
+    shared: boolean;
+    /** 需要用户在界面上选一次（零条或两条以上且没有显式配置） */
+    needsAnswer: boolean;
+    /** 需要回答时列出候选（可能为空数组 = 白名单是空的） */
+    candidates: string[];
+    /** 给界面看的一句话，说明现在用的是哪个桶、为什么 */
+    note: string;
+}
+/** 与本机面板无关的兜底桶：白名单为空、用户又没指定时用它 */
+export declare const PANEL_FALLBACK_BUCKET = "panel";
+export declare function resolvePanelUserId(input: {
+    whitelist?: unknown;
+    configured?: unknown;
+}): PanelUserResolution;
+//# sourceMappingURL=userId.d.ts.map

package/dist/src/panel/userId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userId.d.ts","sourceRoot":"","sources":["../../../src/panel/userId.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,mBAAmB;IAClC,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAA;IACf,kCAAkC;IAClC,WAAW,EAAE,OAAO,CAAA;IACpB,iCAAiC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAA;CACb;AAED,kCAAkC;AAClC,eAAO,MAAM,qBAAqB,UAAU,CAAA;AAM5C,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,mBAAmB,CAgC5G"}

package/dist/src/panel/userId.js

@@ -0,0 +1,56 @@
+/**
+ * 本机面板用哪个记忆桶 —— **这决定了它跟微信里那个是不是"同一个大脑"**。
+ *
+ * 记忆的事实是**按 userId 分**的（`assistant_memory.json` 的 `users["<会话id>"].facts`），
+ * 所以"共用记忆"不是一句口号，它等于"两边用同一个字符串当 userId"。
+ *
+ * 推理链是硬的：直聊时 `resolveInboundRouting` 给出的 `conversationId` 就是 `senderId`
+ * （`assistantRouting.ts:73`、`:78-82`），而白名单比的正是 `senderId`（`:31-35`）。
+ * **但这条推理在真实微信消息上从未被观测过**——本机那条通道从来没登录成功过
+ * （`docs/PROJECT_STATE.md`）。所以这里的态度是：
+ *
+ * - **恰好一条**白名单 → 就用它（那正是坐在这台机器前的人），并标记 `shared: true`；
+ * - **零条或两条以上 → 不猜**。返回一个 `needsAnswer` 的结果，让界面**问一次**
+ *   并把答案存进 `assistantPanelUser`，而不是静默落进一个跟微信隔离的桶里
+ *   ——那样用户会以为在共用一个大脑，而实际上没有。
+ *
+ * 界面必须把解析出来的桶显示出来（"当前记忆桶：xxx"），否则上面这些区分用户看不见。
+ */
+/** 与本机面板无关的兜底桶：白名单为空、用户又没指定时用它 */
+export const PANEL_FALLBACK_BUCKET = 'panel';
+function parseList(value) {
+    return String(value ?? '').split(/[,;\s]+/).map(s => s.trim()).filter(Boolean);
+}
+export function resolvePanelUserId(input) {
+    const configured = String(input.configured ?? '').trim();
+    if (configured) {
+        // 显式配置**永远优先**，而且不再问：用户已经写过一次答案了
+        const inWhitelist = parseList(input.whitelist).includes(configured);
+        return {
+            userId: configured, shared: inWhitelist, needsAnswer: false, candidates: [],
+            note: inWhitelist
+                ? `记忆桶：${configured}（与微信白名单里的同一个 id，共用一个大脑）`
+                : `记忆桶：${configured}（不在微信白名单里，与微信那边是分开的记忆）`,
+        };
+    }
+    const ids = parseList(input.whitelist);
+    if (ids.length === 1) {
+        return {
+            userId: ids[0], shared: true, needsAnswer: false, candidates: ids,
+            note: `记忆桶：${ids[0]}（取自微信白名单里唯一的那个人，共用一个大脑）`,
+        };
+    }
+    if (ids.length === 0) {
+        return {
+            userId: PANEL_FALLBACK_BUCKET, shared: false, needsAnswer: true, candidates: [],
+            note: `微信白名单是空的，所以面板暂时用独立的「${PANEL_FALLBACK_BUCKET}」桶`
+                + '——与微信那边是**分开的**记忆。选定一个身份即可共用。',
+        };
+    }
+    return {
+        userId: PANEL_FALLBACK_BUCKET, shared: false, needsAnswer: true, candidates: ids,
+        note: `微信白名单里有 ${ids.length} 个人，不确定这台机器前是谁，所以面板暂时用独立的`
+            + `「${PANEL_FALLBACK_BUCKET}」桶。选定一个即可与那个人共用记忆。`,
+    };
+}
+//# sourceMappingURL=userId.js.map

package/dist/src/panel/userId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userId.js","sourceRoot":"","sources":["../../../src/panel/userId.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAeH,kCAAkC;AAClC,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAA;AAE5C,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AAChF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAoD;IACrF,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,iCAAiC;QACjC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;QACnE,OAAO;YACL,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3E,IAAI,EAAE,WAAW;gBACf,CAAC,CAAC,OAAO,UAAU,yBAAyB;gBAC5C,CAAC,CAAC,OAAO,UAAU,wBAAwB;SAC9C,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG;YACjE,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,yBAAyB;SAC7C,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;YAC/E,IAAI,EAAE,uBAAuB,qBAAqB,IAAI;kBAClD,+BAA+B;SACpC,CAAA;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG;QAChF,IAAI,EAAE,WAAW,GAAG,CAAC,MAAM,2BAA2B;cAClD,IAAI,qBAAqB,oBAAoB;KAClD,CAAA;AACH,CAAC"}

package/dist/src/services/assistantDaemon.d.ts

@@ -1,3 +1,10 @@
+import { spawn } from 'child_process';
+export interface StartDaemonOptions {
+    /** 注入的 spawn，测试用；默认 child_process.spawn */
+    spawnImpl?: typeof spawn;
+    /** 存活观察窗口(ms)，默认 700 */
+    settleMs?: number;
+}
 export declare function isDaemonAlive(): {
     alive: boolean;
     pid: number | null;
@@ -6,12 +13,22 @@ export declare function appendLog(line: string): void;
 /** 日志轮转: 超过 1MB 保留尾部 256KB, 防止常驻进程日志无限增长 */
 export declare function rotateLogIfNeeded(): void;
 export declare function tailLog(n?: number): string;
-/** 后台启动守护进程 (detached, 脱离终端生命周期) */
-export declare function startDaemon(): {
+/** 后台启动守护进程 (detached, 脱离终端生命周期)
+ *
+ * 子进程带 `--yes`：**确认发生在这一层**——人敲 `assistant start`，或机器用
+ * `--json --yes`——而 `assistant run` 自己那层确认要读 stdin，守护进程给它的 stdin
+ * 是 `ignore`，没人能回答那个提示。少了这个参数，子进程会死在确认提示上，而父进程
+ * 照样报「✓ 已启动」。（那个曾经「负责」这件事的 WEFLOW_ASSISTANT_DAEMON 环境变量
+ * 没有任何代码读它，而且它被当成了变量名里带 `=` 的键——已删。）
+ *
+ * 启动后**观察一小段时间再回报**：子进程立刻退出时（例如消息通道没登录），报出来的
+ * 是退出码与日志尾部，而不是一句假的成功。
+ */
+export declare function startDaemon(options?: StartDaemonOptions): Promise<{
     started: boolean;
     pid?: number;
     error?: string;
-};
+}>;
 export declare function stopDaemon(): {
     stopped: boolean;
     message: string;

package/dist/src/services/assistantDaemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assistantDaemon.d.ts","sourceRoot":"","sources":["../../../src/services/assistantDaemon.ts"],"names":[],"mappings":"AAgBA,wBAAgB,aAAa,IAAI;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAWtE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAK5C;AAED,4CAA4C;AAC5C,wBAAgB,iBAAiB,IAAI,IAAI,CAUxC;AAED,wBAAgB,OAAO,CAAC,CAAC,SAAK,GAAG,MAAM,CAOtC;AAED,oCAAoC;AACpC,wBAAgB,WAAW,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAqChF;AAED,wBAAgB,UAAU,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAYlE"}
+{"version":3,"file":"assistantDaemon.d.ts","sourceRoot":"","sources":["../../../src/services/assistantDaemon.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,EAAqB,MAAM,eAAe,CAAA;AAYxD,MAAM,WAAW,kBAAkB;IACjC,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,wBAAgB,aAAa,IAAI;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAWtE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAK5C;AAED,4CAA4C;AAC5C,wBAAgB,iBAAiB,IAAI,IAAI,CAUxC;AAED,wBAAgB,OAAO,CAAC,CAAC,SAAK,GAAG,MAAM,CAOtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC;IAC3E,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAC/C,CAAC,CA4DD;AAED,wBAAgB,UAAU,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAelE"}