@adcp/sdk 5.23.0

package/dist/lib/server/index.js

@@ -0,0 +1,164 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toMcpResponse = exports.TestControllerError = exports.handleTestControllerRequest = exports.registerTestController = exports.MCP_TASKS_MIGRATION = exports.getMcpTasksMigration = exports.cleanupExpiredTasks = exports.PostgresTaskStore = exports.isTerminal = exports.InMemoryTaskStore = exports.createTaskCapableServer = exports.registerAdcpTaskTool = exports.taskToolResponse = exports.validActionsForStatus = exports.toStructuredContent = exports.reportUsageResponse = exports.syncGovernanceResponse = exports.syncAccountsResponse = exports.acquireRightsRejected = exports.acquireRightsPendingApproval = exports.acquireRightsAcquired = exports.acquireRightsResponse = exports.cancelMediaBuyResponse = exports.activateSignalResponse = exports.getSignalsResponse = exports.syncCreativesResponse = exports.getPlanAuditLogsResponse = exports.listContentStandardsResponse = exports.listCollectionListsResponse = exports.listPropertyListsResponse = exports.listCreativesResponse = exports.creativeDeliveryResponse = exports.previewCreativeResponse = exports.buildCreativeMultiResponse = exports.buildCreativeResponse = exports.performanceFeedbackResponse = exports.getMediaBuysResponse = exports.updateMediaBuyResponse = exports.listCreativeFormatsResponse = exports.listAccountsResponse = exports.deliveryResponse = exports.mediaBuyResponse = exports.productsResponse = exports.capabilitiesResponse = exports.CONFLICT_ADCP_ERROR_ALLOWLIST = exports.ADCP_ERROR_FIELD_ALLOWLIST = exports.DEFAULT_ERROR_ENVELOPE_FIELDS = exports.ERROR_ENVELOPE_FIELD_ALLOWLIST = exports.wrapEnvelope = exports.adcpError = void 0;
+exports.ADCP_STATE_MIGRATION = exports.getAdcpStateMigration = exports.PostgresStateStore = exports.validateWrite = exports.validatePayloadSize = exports.validateId = exports.validateCollection = exports.isPutIfMatchConflict = exports.patchWithRetry = exports.scopedStore = exports.createSessionedStore = exports.SESSION_KEY_FIELD = exports.DEFAULT_MAX_DOCUMENT_BYTES = exports.PatchConflictError = exports.StateError = exports.InMemoryStateStore = exports.mcpToolNameResolver = exports.requireAuthenticatedOrSigned = exports.requireSignatureWhenPresent = exports.verifySignatureAsAuthenticator = exports.verifyIntrospection = exports.DEFAULT_JWT_CLOCK_TOLERANCE_SECONDS = exports.DEFAULT_JWT_ALGORITHMS = exports.getServeRequestContext = exports.ADCP_SERVE_REQUEST_CONTEXT = exports.isAuthenticatorPresenceGated = exports.tagAuthenticatorPresenceGated = exports.AUTH_PRESENCE_GATED = exports.authenticatorNeedsRawBody = exports.tagAuthenticatorNeedsRawBody = exports.AUTH_NEEDS_RAW_BODY = exports.AuthError = exports.signatureErrorCodeFromCause = exports.respondUnauthorized = exports.extractBearerToken = exports.anyOf = exports.verifyBearer = exports.verifyApiKey = exports.createExpressAdapter = exports.resolveHost = exports.hostname = exports.UnknownHostError = exports.serve = exports.createSeedFixtureCache = exports.enforceMapCap = exports.SESSION_ENTRY_CAP = exports.SEED_MESSAGES = exports.SEED_SCENARIOS = exports.CONTROLLER_SCENARIOS = exports.TOOL_INPUT_SHAPE = void 0;
+exports.matchesCollectionList = exports.matchesPropertyList = exports.resolveCollectionList = exports.resolvePropertyList = exports.governanceDeniedError = exports.checkGovernance = exports.LOOPBACK_OK_WEBHOOK_SSRF_POLICY = exports.WEBHOOK_SSRF_POLICY = exports.createPinAndBindFetch = exports.memoryWebhookKeyStore = exports.createWebhookEmitter = exports.A2AInvocationError = exports.createA2AAdapter = exports.hashPayload = exports.cleanupExpiredIdempotency = exports.IDEMPOTENCY_MIGRATION = exports.getIdempotencyMigration = exports.pgBackend = exports.memoryBackend = exports.probeIdempotencyStore = exports.createIdempotencyStore = exports.bridgeFromSessionStore = exports.bridgeFromTestControllerStore = exports.filterValidSeededProducts = exports.mergeSeededProductsIntoResponse = exports.isSandboxRequest = exports.DEFAULT_REPORTING_CAPABILITIES = exports.ADCP_SIGNED_REQUESTS_STATE = exports.ADCP_PRE_TRANSPORT = exports.requireSessionKey = exports.createAdcpServer = exports.structuredDeserialize = exports.structuredSerialize = void 0;
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "adcpError", { enumerable: true, get: function () { return errors_1.adcpError; } });
+var wrap_envelope_1 = require("./wrap-envelope");
+Object.defineProperty(exports, "wrapEnvelope", { enumerable: true, get: function () { return wrap_envelope_1.wrapEnvelope; } });
+var envelope_allowlist_1 = require("./envelope-allowlist");
+Object.defineProperty(exports, "ERROR_ENVELOPE_FIELD_ALLOWLIST", { enumerable: true, get: function () { return envelope_allowlist_1.ERROR_ENVELOPE_FIELD_ALLOWLIST; } });
+Object.defineProperty(exports, "DEFAULT_ERROR_ENVELOPE_FIELDS", { enumerable: true, get: function () { return envelope_allowlist_1.DEFAULT_ERROR_ENVELOPE_FIELDS; } });
+Object.defineProperty(exports, "ADCP_ERROR_FIELD_ALLOWLIST", { enumerable: true, get: function () { return envelope_allowlist_1.ADCP_ERROR_FIELD_ALLOWLIST; } });
+Object.defineProperty(exports, "CONFLICT_ADCP_ERROR_ALLOWLIST", { enumerable: true, get: function () { return envelope_allowlist_1.CONFLICT_ADCP_ERROR_ALLOWLIST; } });
+var responses_1 = require("./responses");
+Object.defineProperty(exports, "capabilitiesResponse", { enumerable: true, get: function () { return responses_1.capabilitiesResponse; } });
+Object.defineProperty(exports, "productsResponse", { enumerable: true, get: function () { return responses_1.productsResponse; } });
+Object.defineProperty(exports, "mediaBuyResponse", { enumerable: true, get: function () { return responses_1.mediaBuyResponse; } });
+Object.defineProperty(exports, "deliveryResponse", { enumerable: true, get: function () { return responses_1.deliveryResponse; } });
+Object.defineProperty(exports, "listAccountsResponse", { enumerable: true, get: function () { return responses_1.listAccountsResponse; } });
+Object.defineProperty(exports, "listCreativeFormatsResponse", { enumerable: true, get: function () { return responses_1.listCreativeFormatsResponse; } });
+Object.defineProperty(exports, "updateMediaBuyResponse", { enumerable: true, get: function () { return responses_1.updateMediaBuyResponse; } });
+Object.defineProperty(exports, "getMediaBuysResponse", { enumerable: true, get: function () { return responses_1.getMediaBuysResponse; } });
+Object.defineProperty(exports, "performanceFeedbackResponse", { enumerable: true, get: function () { return responses_1.performanceFeedbackResponse; } });
+Object.defineProperty(exports, "buildCreativeResponse", { enumerable: true, get: function () { return responses_1.buildCreativeResponse; } });
+Object.defineProperty(exports, "buildCreativeMultiResponse", { enumerable: true, get: function () { return responses_1.buildCreativeMultiResponse; } });
+Object.defineProperty(exports, "previewCreativeResponse", { enumerable: true, get: function () { return responses_1.previewCreativeResponse; } });
+Object.defineProperty(exports, "creativeDeliveryResponse", { enumerable: true, get: function () { return responses_1.creativeDeliveryResponse; } });
+Object.defineProperty(exports, "listCreativesResponse", { enumerable: true, get: function () { return responses_1.listCreativesResponse; } });
+Object.defineProperty(exports, "listPropertyListsResponse", { enumerable: true, get: function () { return responses_1.listPropertyListsResponse; } });
+Object.defineProperty(exports, "listCollectionListsResponse", { enumerable: true, get: function () { return responses_1.listCollectionListsResponse; } });
+Object.defineProperty(exports, "listContentStandardsResponse", { enumerable: true, get: function () { return responses_1.listContentStandardsResponse; } });
+Object.defineProperty(exports, "getPlanAuditLogsResponse", { enumerable: true, get: function () { return responses_1.getPlanAuditLogsResponse; } });
+Object.defineProperty(exports, "syncCreativesResponse", { enumerable: true, get: function () { return responses_1.syncCreativesResponse; } });
+Object.defineProperty(exports, "getSignalsResponse", { enumerable: true, get: function () { return responses_1.getSignalsResponse; } });
+Object.defineProperty(exports, "activateSignalResponse", { enumerable: true, get: function () { return responses_1.activateSignalResponse; } });
+Object.defineProperty(exports, "cancelMediaBuyResponse", { enumerable: true, get: function () { return responses_1.cancelMediaBuyResponse; } });
+Object.defineProperty(exports, "acquireRightsResponse", { enumerable: true, get: function () { return responses_1.acquireRightsResponse; } });
+Object.defineProperty(exports, "acquireRightsAcquired", { enumerable: true, get: function () { return responses_1.acquireRightsAcquired; } });
+Object.defineProperty(exports, "acquireRightsPendingApproval", { enumerable: true, get: function () { return responses_1.acquireRightsPendingApproval; } });
+Object.defineProperty(exports, "acquireRightsRejected", { enumerable: true, get: function () { return responses_1.acquireRightsRejected; } });
+Object.defineProperty(exports, "syncAccountsResponse", { enumerable: true, get: function () { return responses_1.syncAccountsResponse; } });
+Object.defineProperty(exports, "syncGovernanceResponse", { enumerable: true, get: function () { return responses_1.syncGovernanceResponse; } });
+Object.defineProperty(exports, "reportUsageResponse", { enumerable: true, get: function () { return responses_1.reportUsageResponse; } });
+Object.defineProperty(exports, "toStructuredContent", { enumerable: true, get: function () { return responses_1.toStructuredContent; } });
+var media_buy_helpers_1 = require("./media-buy-helpers");
+Object.defineProperty(exports, "validActionsForStatus", { enumerable: true, get: function () { return media_buy_helpers_1.validActionsForStatus; } });
+var tasks_1 = require("./tasks");
+Object.defineProperty(exports, "taskToolResponse", { enumerable: true, get: function () { return tasks_1.taskToolResponse; } });
+Object.defineProperty(exports, "registerAdcpTaskTool", { enumerable: true, get: function () { return tasks_1.registerAdcpTaskTool; } });
+Object.defineProperty(exports, "createTaskCapableServer", { enumerable: true, get: function () { return tasks_1.createTaskCapableServer; } });
+Object.defineProperty(exports, "InMemoryTaskStore", { enumerable: true, get: function () { return tasks_1.InMemoryTaskStore; } });
+Object.defineProperty(exports, "isTerminal", { enumerable: true, get: function () { return tasks_1.isTerminal; } });
+var postgres_task_store_1 = require("./postgres-task-store");
+Object.defineProperty(exports, "PostgresTaskStore", { enumerable: true, get: function () { return postgres_task_store_1.PostgresTaskStore; } });
+Object.defineProperty(exports, "cleanupExpiredTasks", { enumerable: true, get: function () { return postgres_task_store_1.cleanupExpiredTasks; } });
+Object.defineProperty(exports, "getMcpTasksMigration", { enumerable: true, get: function () { return postgres_task_store_1.getMcpTasksMigration; } });
+Object.defineProperty(exports, "MCP_TASKS_MIGRATION", { enumerable: true, get: function () { return postgres_task_store_1.MCP_TASKS_MIGRATION; } });
+var test_controller_1 = require("./test-controller");
+Object.defineProperty(exports, "registerTestController", { enumerable: true, get: function () { return test_controller_1.registerTestController; } });
+Object.defineProperty(exports, "handleTestControllerRequest", { enumerable: true, get: function () { return test_controller_1.handleTestControllerRequest; } });
+Object.defineProperty(exports, "TestControllerError", { enumerable: true, get: function () { return test_controller_1.TestControllerError; } });
+Object.defineProperty(exports, "toMcpResponse", { enumerable: true, get: function () { return test_controller_1.toMcpResponse; } });
+Object.defineProperty(exports, "TOOL_INPUT_SHAPE", { enumerable: true, get: function () { return test_controller_1.TOOL_INPUT_SHAPE; } });
+Object.defineProperty(exports, "CONTROLLER_SCENARIOS", { enumerable: true, get: function () { return test_controller_1.CONTROLLER_SCENARIOS; } });
+Object.defineProperty(exports, "SEED_SCENARIOS", { enumerable: true, get: function () { return test_controller_1.SEED_SCENARIOS; } });
+Object.defineProperty(exports, "SEED_MESSAGES", { enumerable: true, get: function () { return test_controller_1.SEED_MESSAGES; } });
+Object.defineProperty(exports, "SESSION_ENTRY_CAP", { enumerable: true, get: function () { return test_controller_1.SESSION_ENTRY_CAP; } });
+Object.defineProperty(exports, "enforceMapCap", { enumerable: true, get: function () { return test_controller_1.enforceMapCap; } });
+Object.defineProperty(exports, "createSeedFixtureCache", { enumerable: true, get: function () { return test_controller_1.createSeedFixtureCache; } });
+var serve_1 = require("./serve");
+Object.defineProperty(exports, "serve", { enumerable: true, get: function () { return serve_1.serve; } });
+Object.defineProperty(exports, "UnknownHostError", { enumerable: true, get: function () { return serve_1.UnknownHostError; } });
+Object.defineProperty(exports, "hostname", { enumerable: true, get: function () { return serve_1.hostname; } });
+Object.defineProperty(exports, "resolveHost", { enumerable: true, get: function () { return serve_1.resolveHost; } });
+var express_adapter_1 = require("./express-adapter");
+Object.defineProperty(exports, "createExpressAdapter", { enumerable: true, get: function () { return express_adapter_1.createExpressAdapter; } });
+var auth_1 = require("./auth");
+Object.defineProperty(exports, "verifyApiKey", { enumerable: true, get: function () { return auth_1.verifyApiKey; } });
+Object.defineProperty(exports, "verifyBearer", { enumerable: true, get: function () { return auth_1.verifyBearer; } });
+Object.defineProperty(exports, "anyOf", { enumerable: true, get: function () { return auth_1.anyOf; } });
+Object.defineProperty(exports, "extractBearerToken", { enumerable: true, get: function () { return auth_1.extractBearerToken; } });
+Object.defineProperty(exports, "respondUnauthorized", { enumerable: true, get: function () { return auth_1.respondUnauthorized; } });
+Object.defineProperty(exports, "signatureErrorCodeFromCause", { enumerable: true, get: function () { return auth_1.signatureErrorCodeFromCause; } });
+Object.defineProperty(exports, "AuthError", { enumerable: true, get: function () { return auth_1.AuthError; } });
+Object.defineProperty(exports, "AUTH_NEEDS_RAW_BODY", { enumerable: true, get: function () { return auth_1.AUTH_NEEDS_RAW_BODY; } });
+Object.defineProperty(exports, "tagAuthenticatorNeedsRawBody", { enumerable: true, get: function () { return auth_1.tagAuthenticatorNeedsRawBody; } });
+Object.defineProperty(exports, "authenticatorNeedsRawBody", { enumerable: true, get: function () { return auth_1.authenticatorNeedsRawBody; } });
+Object.defineProperty(exports, "AUTH_PRESENCE_GATED", { enumerable: true, get: function () { return auth_1.AUTH_PRESENCE_GATED; } });
+Object.defineProperty(exports, "tagAuthenticatorPresenceGated", { enumerable: true, get: function () { return auth_1.tagAuthenticatorPresenceGated; } });
+Object.defineProperty(exports, "isAuthenticatorPresenceGated", { enumerable: true, get: function () { return auth_1.isAuthenticatorPresenceGated; } });
+Object.defineProperty(exports, "ADCP_SERVE_REQUEST_CONTEXT", { enumerable: true, get: function () { return auth_1.ADCP_SERVE_REQUEST_CONTEXT; } });
+Object.defineProperty(exports, "getServeRequestContext", { enumerable: true, get: function () { return auth_1.getServeRequestContext; } });
+Object.defineProperty(exports, "DEFAULT_JWT_ALGORITHMS", { enumerable: true, get: function () { return auth_1.DEFAULT_JWT_ALGORITHMS; } });
+Object.defineProperty(exports, "DEFAULT_JWT_CLOCK_TOLERANCE_SECONDS", { enumerable: true, get: function () { return auth_1.DEFAULT_JWT_CLOCK_TOLERANCE_SECONDS; } });
+var auth_introspection_1 = require("./auth-introspection");
+Object.defineProperty(exports, "verifyIntrospection", { enumerable: true, get: function () { return auth_introspection_1.verifyIntrospection; } });
+var auth_signature_1 = require("./auth-signature");
+Object.defineProperty(exports, "verifySignatureAsAuthenticator", { enumerable: true, get: function () { return auth_signature_1.verifySignatureAsAuthenticator; } });
+Object.defineProperty(exports, "requireSignatureWhenPresent", { enumerable: true, get: function () { return auth_signature_1.requireSignatureWhenPresent; } });
+Object.defineProperty(exports, "requireAuthenticatedOrSigned", { enumerable: true, get: function () { return auth_signature_1.requireAuthenticatedOrSigned; } });
+Object.defineProperty(exports, "mcpToolNameResolver", { enumerable: true, get: function () { return auth_signature_1.mcpToolNameResolver; } });
+var state_store_1 = require("./state-store");
+Object.defineProperty(exports, "InMemoryStateStore", { enumerable: true, get: function () { return state_store_1.InMemoryStateStore; } });
+Object.defineProperty(exports, "StateError", { enumerable: true, get: function () { return state_store_1.StateError; } });
+Object.defineProperty(exports, "PatchConflictError", { enumerable: true, get: function () { return state_store_1.PatchConflictError; } });
+Object.defineProperty(exports, "DEFAULT_MAX_DOCUMENT_BYTES", { enumerable: true, get: function () { return state_store_1.DEFAULT_MAX_DOCUMENT_BYTES; } });
+Object.defineProperty(exports, "SESSION_KEY_FIELD", { enumerable: true, get: function () { return state_store_1.SESSION_KEY_FIELD; } });
+Object.defineProperty(exports, "createSessionedStore", { enumerable: true, get: function () { return state_store_1.createSessionedStore; } });
+Object.defineProperty(exports, "scopedStore", { enumerable: true, get: function () { return state_store_1.scopedStore; } });
+Object.defineProperty(exports, "patchWithRetry", { enumerable: true, get: function () { return state_store_1.patchWithRetry; } });
+Object.defineProperty(exports, "isPutIfMatchConflict", { enumerable: true, get: function () { return state_store_1.isPutIfMatchConflict; } });
+Object.defineProperty(exports, "validateCollection", { enumerable: true, get: function () { return state_store_1.validateCollection; } });
+Object.defineProperty(exports, "validateId", { enumerable: true, get: function () { return state_store_1.validateId; } });
+Object.defineProperty(exports, "validatePayloadSize", { enumerable: true, get: function () { return state_store_1.validatePayloadSize; } });
+Object.defineProperty(exports, "validateWrite", { enumerable: true, get: function () { return state_store_1.validateWrite; } });
+var postgres_state_store_1 = require("./postgres-state-store");
+Object.defineProperty(exports, "PostgresStateStore", { enumerable: true, get: function () { return postgres_state_store_1.PostgresStateStore; } });
+Object.defineProperty(exports, "getAdcpStateMigration", { enumerable: true, get: function () { return postgres_state_store_1.getAdcpStateMigration; } });
+Object.defineProperty(exports, "ADCP_STATE_MIGRATION", { enumerable: true, get: function () { return postgres_state_store_1.ADCP_STATE_MIGRATION; } });
+var structured_serialize_1 = require("./structured-serialize");
+Object.defineProperty(exports, "structuredSerialize", { enumerable: true, get: function () { return structured_serialize_1.structuredSerialize; } });
+Object.defineProperty(exports, "structuredDeserialize", { enumerable: true, get: function () { return structured_serialize_1.structuredDeserialize; } });
+var create_adcp_server_1 = require("./create-adcp-server");
+Object.defineProperty(exports, "createAdcpServer", { enumerable: true, get: function () { return create_adcp_server_1.createAdcpServer; } });
+Object.defineProperty(exports, "requireSessionKey", { enumerable: true, get: function () { return create_adcp_server_1.requireSessionKey; } });
+Object.defineProperty(exports, "ADCP_PRE_TRANSPORT", { enumerable: true, get: function () { return create_adcp_server_1.ADCP_PRE_TRANSPORT; } });
+Object.defineProperty(exports, "ADCP_SIGNED_REQUESTS_STATE", { enumerable: true, get: function () { return create_adcp_server_1.ADCP_SIGNED_REQUESTS_STATE; } });
+var product_defaults_1 = require("./product-defaults");
+Object.defineProperty(exports, "DEFAULT_REPORTING_CAPABILITIES", { enumerable: true, get: function () { return product_defaults_1.DEFAULT_REPORTING_CAPABILITIES; } });
+var test_controller_bridge_1 = require("./test-controller-bridge");
+Object.defineProperty(exports, "isSandboxRequest", { enumerable: true, get: function () { return test_controller_bridge_1.isSandboxRequest; } });
+Object.defineProperty(exports, "mergeSeededProductsIntoResponse", { enumerable: true, get: function () { return test_controller_bridge_1.mergeSeededProductsIntoResponse; } });
+Object.defineProperty(exports, "filterValidSeededProducts", { enumerable: true, get: function () { return test_controller_bridge_1.filterValidSeededProducts; } });
+Object.defineProperty(exports, "bridgeFromTestControllerStore", { enumerable: true, get: function () { return test_controller_bridge_1.bridgeFromTestControllerStore; } });
+Object.defineProperty(exports, "bridgeFromSessionStore", { enumerable: true, get: function () { return test_controller_bridge_1.bridgeFromSessionStore; } });
+var idempotency_1 = require("./idempotency");
+Object.defineProperty(exports, "createIdempotencyStore", { enumerable: true, get: function () { return idempotency_1.createIdempotencyStore; } });
+Object.defineProperty(exports, "probeIdempotencyStore", { enumerable: true, get: function () { return idempotency_1.probeIdempotencyStore; } });
+Object.defineProperty(exports, "memoryBackend", { enumerable: true, get: function () { return idempotency_1.memoryBackend; } });
+Object.defineProperty(exports, "pgBackend", { enumerable: true, get: function () { return idempotency_1.pgBackend; } });
+Object.defineProperty(exports, "getIdempotencyMigration", { enumerable: true, get: function () { return idempotency_1.getIdempotencyMigration; } });
+Object.defineProperty(exports, "IDEMPOTENCY_MIGRATION", { enumerable: true, get: function () { return idempotency_1.IDEMPOTENCY_MIGRATION; } });
+Object.defineProperty(exports, "cleanupExpiredIdempotency", { enumerable: true, get: function () { return idempotency_1.cleanupExpiredIdempotency; } });
+Object.defineProperty(exports, "hashPayload", { enumerable: true, get: function () { return idempotency_1.hashPayload; } });
+var a2a_adapter_1 = require("./a2a-adapter");
+Object.defineProperty(exports, "createA2AAdapter", { enumerable: true, get: function () { return a2a_adapter_1.createA2AAdapter; } });
+Object.defineProperty(exports, "A2AInvocationError", { enumerable: true, get: function () { return a2a_adapter_1.A2AInvocationError; } });
+var webhook_emitter_1 = require("./webhook-emitter");
+Object.defineProperty(exports, "createWebhookEmitter", { enumerable: true, get: function () { return webhook_emitter_1.createWebhookEmitter; } });
+Object.defineProperty(exports, "memoryWebhookKeyStore", { enumerable: true, get: function () { return webhook_emitter_1.memoryWebhookKeyStore; } });
+var pin_and_bind_fetch_1 = require("./pin-and-bind-fetch");
+Object.defineProperty(exports, "createPinAndBindFetch", { enumerable: true, get: function () { return pin_and_bind_fetch_1.createPinAndBindFetch; } });
+Object.defineProperty(exports, "WEBHOOK_SSRF_POLICY", { enumerable: true, get: function () { return pin_and_bind_fetch_1.WEBHOOK_SSRF_POLICY; } });
+Object.defineProperty(exports, "LOOPBACK_OK_WEBHOOK_SSRF_POLICY", { enumerable: true, get: function () { return pin_and_bind_fetch_1.LOOPBACK_OK_WEBHOOK_SSRF_POLICY; } });
+var governance_1 = require("./governance");
+Object.defineProperty(exports, "checkGovernance", { enumerable: true, get: function () { return governance_1.checkGovernance; } });
+Object.defineProperty(exports, "governanceDeniedError", { enumerable: true, get: function () { return governance_1.governanceDeniedError; } });
+var targeting_helpers_1 = require("./targeting-helpers");
+Object.defineProperty(exports, "resolvePropertyList", { enumerable: true, get: function () { return targeting_helpers_1.resolvePropertyList; } });
+Object.defineProperty(exports, "resolveCollectionList", { enumerable: true, get: function () { return targeting_helpers_1.resolveCollectionList; } });
+Object.defineProperty(exports, "matchesPropertyList", { enumerable: true, get: function () { return targeting_helpers_1.matchesPropertyList; } });
+Object.defineProperty(exports, "matchesCollectionList", { enumerable: true, get: function () { return targeting_helpers_1.matchesCollectionList; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/server/index.ts"],"names":[],"mappings":";;;;;AAAA,mCAAqC;AAA5B,mGAAA,SAAS,OAAA;AAGlB,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AAGrB,2DAK8B;AAJ5B,oIAAA,8BAA8B,OAAA;AAC9B,mIAAA,6BAA6B,OAAA;AAC7B,gIAAA,0BAA0B,OAAA;AAC1B,mIAAA,6BAA6B,OAAA;AAG/B,yCA+BqB;AA9BnB,iHAAA,oBAAoB,OAAA;AACpB,6GAAA,gBAAgB,OAAA;AAChB,6GAAA,gBAAgB,OAAA;AAChB,6GAAA,gBAAgB,OAAA;AAChB,iHAAA,oBAAoB,OAAA;AACpB,wHAAA,2BAA2B,OAAA;AAC3B,mHAAA,sBAAsB,OAAA;AACtB,iHAAA,oBAAoB,OAAA;AACpB,wHAAA,2BAA2B,OAAA;AAC3B,kHAAA,qBAAqB,OAAA;AACrB,uHAAA,0BAA0B,OAAA;AAC1B,oHAAA,uBAAuB,OAAA;AACvB,qHAAA,wBAAwB,OAAA;AACxB,kHAAA,qBAAqB,OAAA;AACrB,sHAAA,yBAAyB,OAAA;AACzB,wHAAA,2BAA2B,OAAA;AAC3B,yHAAA,4BAA4B,OAAA;AAC5B,qHAAA,wBAAwB,OAAA;AACxB,kHAAA,qBAAqB,OAAA;AACrB,+GAAA,kBAAkB,OAAA;AAClB,mHAAA,sBAAsB,OAAA;AACtB,mHAAA,sBAAsB,OAAA;AACtB,kHAAA,qBAAqB,OAAA;AACrB,kHAAA,qBAAqB,OAAA;AACrB,yHAAA,4BAA4B,OAAA;AAC5B,kHAAA,qBAAqB,OAAA;AACrB,iHAAA,oBAAoB,OAAA;AACpB,mHAAA,sBAAsB,OAAA;AACtB,gHAAA,mBAAmB,OAAA;AACnB,gHAAA,mBAAmB,OAAA;AAIrB,yDAA4D;AAAnD,0HAAA,qBAAqB,OAAA;AAG9B,iCAMiB;AALf,yGAAA,gBAAgB,OAAA;AAChB,6GAAA,oBAAoB,OAAA;AACpB,gHAAA,uBAAuB,OAAA;AACvB,0GAAA,iBAAiB,OAAA;AACjB,mGAAA,UAAU,OAAA;AAeZ,6DAK+B;AAJ7B,wHAAA,iBAAiB,OAAA;AACjB,0HAAA,mBAAmB,OAAA;AACnB,2HAAA,oBAAoB,OAAA;AACpB,0HAAA,mBAAmB,OAAA;AAIrB,qDAY2B;AAXzB,yHAAA,sBAAsB,OAAA;AACtB,8HAAA,2BAA2B,OAAA;AAC3B,sHAAA,mBAAmB,OAAA;AACnB,gHAAA,aAAa,OAAA;AACb,mHAAA,gBAAgB,OAAA;AAChB,uHAAA,oBAAoB,OAAA;AACpB,iHAAA,cAAc,OAAA;AACd,gHAAA,aAAa,OAAA;AACb,oHAAA,iBAAiB,OAAA;AACjB,gHAAA,aAAa,OAAA;AACb,yHAAA,sBAAsB,OAAA;AAWxB,iCAAyE;AAAhE,8FAAA,KAAK,OAAA;AAAE,yGAAA,gBAAgB,OAAA;AAAE,iGAAA,QAAQ,OAAA;AAAE,oGAAA,WAAW,OAAA;AAGvD,qDAAyD;AAAhD,uHAAA,oBAAoB,OAAA;AAG7B,+BAkBgB;AAjBd,oGAAA,YAAY,OAAA;AACZ,oGAAA,YAAY,OAAA;AACZ,6FAAA,KAAK,OAAA;AACL,0GAAA,kBAAkB,OAAA;AAClB,2GAAA,mBAAmB,OAAA;AACnB,mHAAA,2BAA2B,OAAA;AAC3B,iGAAA,SAAS,OAAA;AACT,2GAAA,mBAAmB,OAAA;AACnB,oHAAA,4BAA4B,OAAA;AAC5B,iHAAA,yBAAyB,OAAA;AACzB,2GAAA,mBAAmB,OAAA;AACnB,qHAAA,6BAA6B,OAAA;AAC7B,oHAAA,4BAA4B,OAAA;AAC5B,kHAAA,0BAA0B,OAAA;AAC1B,8GAAA,sBAAsB,OAAA;AACtB,8GAAA,sBAAsB,OAAA;AACtB,2HAAA,mCAAmC,OAAA;AAYrC,2DAA2D;AAAlD,yHAAA,mBAAmB,OAAA;AAO5B,mDAK0B;AAJxB,gIAAA,8BAA8B,OAAA;AAC9B,6HAAA,2BAA2B,OAAA;AAC3B,8HAAA,4BAA4B,OAAA;AAC5B,qHAAA,mBAAmB,OAAA;AAQrB,6CAcuB;AAbrB,iHAAA,kBAAkB,OAAA;AAClB,yGAAA,UAAU,OAAA;AACV,iHAAA,kBAAkB,OAAA;AAClB,yHAAA,0BAA0B,OAAA;AAC1B,gHAAA,iBAAiB,OAAA;AACjB,mHAAA,oBAAoB,OAAA;AACpB,0GAAA,WAAW,OAAA;AACX,6GAAA,cAAc,OAAA;AACd,mHAAA,oBAAoB,OAAA;AACpB,iHAAA,kBAAkB,OAAA;AAClB,yGAAA,UAAU,OAAA;AACV,kHAAA,mBAAmB,OAAA;AACnB,4GAAA,aAAa,OAAA;AAaf,+DAAyG;AAAhG,0HAAA,kBAAkB,OAAA;AAAE,6HAAA,qBAAqB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAGxE,+DAAoF;AAA3E,2HAAA,mBAAmB,OAAA;AAAE,6HAAA,qBAAqB,OAAA;AAEnD,2DAK8B;AAJ5B,sHAAA,gBAAgB,OAAA;AAChB,uHAAA,iBAAiB,OAAA;AACjB,wHAAA,kBAAkB,OAAA;AAClB,gIAAA,0BAA0B,OAAA;AAiC5B,uDAAoE;AAA3D,kIAAA,8BAA8B,OAAA;AAEvC,mEAMkC;AALhC,0HAAA,gBAAgB,OAAA;AAChB,yIAAA,+BAA+B,OAAA;AAC/B,mIAAA,yBAAyB,OAAA;AACzB,uIAAA,6BAA6B,OAAA;AAC7B,gIAAA,sBAAsB,OAAA;AAQxB,6CASuB;AARrB,qHAAA,sBAAsB,OAAA;AACtB,oHAAA,qBAAqB,OAAA;AACrB,4GAAA,aAAa,OAAA;AACb,wGAAA,SAAS,OAAA;AACT,sHAAA,uBAAuB,OAAA;AACvB,oHAAA,qBAAqB,OAAA;AACrB,wHAAA,yBAAyB,OAAA;AACzB,0GAAA,WAAW,OAAA;AAYb,6CAAqE;AAA5D,+GAAA,gBAAgB,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAS7C,qDAAgF;AAAvE,uHAAA,oBAAoB,OAAA;AAAE,wHAAA,qBAAqB,OAAA;AAcpD,2DAAmH;AAA1G,2HAAA,qBAAqB,OAAA;AAAE,yHAAA,mBAAmB,OAAA;AAAE,qIAAA,+BAA+B,OAAA;AAGpF,2CAAsE;AAA7D,6GAAA,eAAe,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAS/C,yDAK6B;AAJ3B,wHAAA,mBAAmB,OAAA;AACnB,0HAAA,qBAAqB,OAAA;AACrB,wHAAA,mBAAmB,OAAA;AACnB,0HAAA,qBAAqB,OAAA"}

package/dist/lib/server/media-buy-helpers.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Media buy response helpers that eliminate common implementation traps.
+ *
+ * These helpers encode protocol rules (status→valid_actions mapping,
+ * required cancellation metadata, initial revision numbers) so agent
+ * builders get the right shape by default.
+ */
+import type { MediaBuyStatus, CanceledBy, CreateMediaBuySuccess, Package } from '../types/core.generated';
+/**
+ * Actions a buyer can perform on a media buy.
+ * Derived from the generated schema to stay in sync automatically.
+ */
+export type ValidAction = NonNullable<CreateMediaBuySuccess['valid_actions']>[number];
+/**
+ * Returns the default set of valid buyer actions for a given media buy status.
+ *
+ * Terminal statuses (completed, rejected, canceled) return an empty array.
+ * Active statuses return the full set of actions; paused restricts to
+ * resume, cancel, and budget/date updates.
+ *
+ * Both pending statuses allow full modification — the protocol permits
+ * restructuring a buy (packages, budget, dates) while awaiting creatives
+ * or start date.
+ *
+ * Sellers with restricted capabilities can filter the result:
+ * ```typescript
+ * const actions = validActionsForStatus('active')
+ *   .filter(a => a !== 'sync_creatives'); // no creative management
+ * ```
+ */
+export declare function validActionsForStatus(status: MediaBuyStatus): ValidAction[];
+/**
+ * Input for cancelMediaBuyResponse(). Requires the fields that agent builders
+ * commonly forget — canceled_by and revision are mandatory,
+ * canceled_at defaults to now.
+ */
+export interface CancelMediaBuyInput {
+    media_buy_id: string;
+    canceled_by: CanceledBy;
+    /** Current revision after the cancellation update. */
+    revision: number;
+    reason?: string;
+    canceled_at?: string;
+    affected_packages?: Package[];
+    sandbox?: boolean;
+}
+//# sourceMappingURL=media-buy-helpers.d.ts.map

package/dist/lib/server/media-buy-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-buy-helpers.d.ts","sourceRoot":"","sources":["../../../src/lib/server/media-buy-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAE1G;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,WAAW,EAAE,CAc3E;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,UAAU,CAAC;IACxB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB"}

package/dist/lib/server/media-buy-helpers.js

@@ -0,0 +1,43 @@
+"use strict";
+/**
+ * Media buy response helpers that eliminate common implementation traps.
+ *
+ * These helpers encode protocol rules (status→valid_actions mapping,
+ * required cancellation metadata, initial revision numbers) so agent
+ * builders get the right shape by default.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validActionsForStatus = validActionsForStatus;
+/**
+ * Returns the default set of valid buyer actions for a given media buy status.
+ *
+ * Terminal statuses (completed, rejected, canceled) return an empty array.
+ * Active statuses return the full set of actions; paused restricts to
+ * resume, cancel, and budget/date updates.
+ *
+ * Both pending statuses allow full modification — the protocol permits
+ * restructuring a buy (packages, budget, dates) while awaiting creatives
+ * or start date.
+ *
+ * Sellers with restricted capabilities can filter the result:
+ * ```typescript
+ * const actions = validActionsForStatus('active')
+ *   .filter(a => a !== 'sync_creatives'); // no creative management
+ * ```
+ */
+function validActionsForStatus(status) {
+    switch (status) {
+        case 'pending_creatives':
+        case 'pending_start':
+            return ['cancel', 'update_budget', 'update_dates', 'update_packages', 'add_packages', 'sync_creatives'];
+        case 'active':
+            return ['pause', 'cancel', 'update_budget', 'update_dates', 'update_packages', 'add_packages', 'sync_creatives'];
+        case 'paused':
+            return ['resume', 'cancel', 'update_budget', 'update_dates'];
+        case 'completed':
+        case 'rejected':
+        case 'canceled':
+            return [];
+    }
+}
+//# sourceMappingURL=media-buy-helpers.js.map

package/dist/lib/server/media-buy-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-buy-helpers.js","sourceRoot":"","sources":["../../../src/lib/server/media-buy-helpers.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA2BH,sDAcC;AA/BD;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,qBAAqB,CAAC,MAAsB;IAC1D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,mBAAmB,CAAC;QACzB,KAAK,eAAe;YAClB,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC1G,KAAK,QAAQ;YACX,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACnH,KAAK,QAAQ;YACX,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;QAC/D,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/lib/server/pin-and-bind-fetch.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Pin-and-bind fetch — DNS-rebinding-resistant `fetch` for outbound webhook
+ * delivery and other callbacks where the destination is buyer-supplied.
+ *
+ * The problem: validating a `push_notification_config.url`'s LITERAL hostname
+ * against an SSRF deny list does not protect against a DNS-rebinding attack.
+ * A buyer can register `https://rebind.attacker.com/`, pass the literal-host
+ * check, and then flip the A-record TTL to `169.254.169.254` (cloud metadata)
+ * or `127.0.0.1` (loopback) before the webhook fires. Node's `fetch` resolves
+ * the host fresh at request time, gets the rebound IP, and posts the
+ * signed payload to the attacker-controlled destination.
+ *
+ * The fix: control DNS resolution and connect-target inside the fetch itself.
+ *   1. Resolve the hostname.
+ *   2. Validate every resolved IP against the SSRF policy (CIDR deny lists,
+ *      metadata-host names, scheme rules).
+ *   3. Pin the connection to the validated IP — undici opens TCP/TLS to that
+ *      specific address, but the original hostname is preserved for TLS SNI
+ *      and the `Host:` header so HTTPS routing still works.
+ *
+ * Implementation note: undici's `Agent` accepts a `connect.lookup` callback
+ * with the same signature as `dns.lookup`. We hook the callback, resolve via
+ * `dns.lookup({ all: true })` to see EVERY address the host can reach, run
+ * the resolved IPs through {@link enforceSsrfPolicyResolved}, and only return
+ * a pinned address when every resolved IP is in an allowed range. This
+ * matches the AdCP substitution-observer SSRF contract — a host that
+ * resolves to *any* denied IP is treated as suspect and rejected wholesale.
+ */
+import { Agent } from 'undici';
+import { type LookupAddress } from 'node:dns';
+import type { SsrfPolicy } from '../substitution/types';
+/**
+ * Default SSRF policy for outbound webhook delivery. Stricter than
+ * `DEFAULT_SSRF_POLICY` (substitution observer) only in that it allows
+ * `host_literal_policy: 'allow'` — webhook URLs MAY use IP literals
+ * (e.g. `https://203.0.113.10/cb`) as long as the IP is not in a denied
+ * CIDR range. Schemes restricted to https; signed webhooks SHOULD be
+ * delivered over TLS.
+ *
+ * For storyboard / in-process tests where the receiver runs on
+ * `http://127.0.0.1:port`, use {@link LOOPBACK_OK_WEBHOOK_SSRF_POLICY}
+ * instead. That preset relaxes only the loopback + http rules and keeps
+ * every other deny range — adopters get most of the SSRF protection
+ * during tests without disabling pin-and-bind entirely.
+ */
+export declare const WEBHOOK_SSRF_POLICY: SsrfPolicy;
+/**
+ * Pin-and-bind policy that allows http URLs and IPv4/IPv6 loopback so
+ * adopters can enable pin-and-bind for production webhook delivery while
+ * keeping storyboard / in-process tests working — `createWebhookReceiver`
+ * listens on `http://127.0.0.1:port`. Every other private CIDR, metadata
+ * host, and link-local range is still denied, so loopback is the only
+ * relaxation. Pass to `createPinAndBindFetch({ policy })` from your test
+ * fixture or storyboard runner harness; do NOT use in production.
+ */
+export declare const LOOPBACK_OK_WEBHOOK_SSRF_POLICY: SsrfPolicy;
+/**
+ * Signature of the lookup callback `dns.lookup` accepts. Re-declared here
+ * because the native type from `node:dns` is a complex overload set; the
+ * shape we actually need is the all=true variant the Agent expects.
+ */
+export type DnsLookupAll = (hostname: string, options: {
+    family?: number;
+    hints?: number;
+    all: true;
+    verbatim?: boolean;
+}, callback: (err: NodeJS.ErrnoException | null, addresses: LookupAddress[]) => void) => void;
+export interface PinAndBindFetchOptions {
+    /**
+     * SSRF policy to enforce against resolved IPs. Defaults to
+     * {@link WEBHOOK_SSRF_POLICY} (https-only, all private/loopback/metadata
+     * ranges denied, IP literals allowed).
+     */
+    policy?: SsrfPolicy;
+    /**
+     * Override the underlying DNS lookup. Default uses `dns.lookup` with
+     * `all: true`. Tests inject a stub to simulate rebinding attacks without
+     * touching real DNS.
+     */
+    lookup?: DnsLookupAll;
+    /**
+     * Forward to `Agent` — connect-attempt timeout, TLS options, etc. Cannot
+     * override `lookup`; that is wired by this helper.
+     */
+    agentOptions?: Omit<Agent.Options, 'connect'> & {
+        connect?: Omit<NonNullable<Agent.Options['connect']>, 'lookup'>;
+    };
+}
+/**
+ * Build a `fetch` that pins outbound connections to the IPs the SSRF policy
+ * allows, defeating DNS-rebinding attacks against per-attempt DNS resolution.
+ *
+ * Pass as the `fetch` argument to `createWebhookEmitter` /
+ * `createAdcpServer({ webhooks: { fetch } })` to enable rebinding protection
+ * on outbound webhook delivery. Recommended for production. The default
+ * `fetch` for `createWebhookEmitter` remains `globalThis.fetch` until v6 —
+ * see `docs/guides/SIGNING-GUIDE.md` § Webhook SSRF defense for the
+ * migration plan and {@link LOOPBACK_OK_WEBHOOK_SSRF_POLICY} for storyboard
+ * tests that need loopback http delivery.
+ *
+ * Construct once per emitter and reuse — each call instantiates a fresh
+ * `undici.Agent` with its own connection pool.
+ *
+ * @example
+ * ```ts
+ * import { createWebhookEmitter, createPinAndBindFetch } from '@adcp/sdk/server';
+ *
+ * const emitter = createWebhookEmitter({
+ *   signerKey: webhookKey,
+ *   fetch: createPinAndBindFetch(),
+ * });
+ * ```
+ */
+export declare function createPinAndBindFetch(options?: PinAndBindFetchOptions): typeof fetch;
+//# sourceMappingURL=pin-and-bind-fetch.d.ts.map

package/dist/lib/server/pin-and-bind-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pin-and-bind-fetch.d.ts","sourceRoot":"","sources":["../../../src/lib/server/pin-and-bind-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,KAAK,EAAyC,MAAM,QAAQ,CAAC;AACtE,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB,EAAE,UA+BlB,CAAC;AAEjB;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B,EAAE,UA8B9B,CAAC;AAEjB;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3E,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,IAAI,KAC9E,IAAI,CAAC;AAEV,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;OAGG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG;QAC9C,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;KACjE,CAAC;CACH;AAQD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,OAAO,KAAK,CA+ExF"}