@agentcairn/mcp-server 0.0.0-stage → 0.1.1

package/dist/security.d.ts

@@ -0,0 +1,49 @@
+import type { IncomingMessage } from 'node:http';
+export declare const SESSION_COOKIE = "aib_session";
+export interface Session {
+    username: string;
+    expires: number;
+}
+/** Dashboard logins live in memory: a restart signs everyone out, which is fine for an admin panel. */
+export declare class SessionStore {
+    private readonly clock;
+    private readonly sessions;
+    constructor(clock?: () => number);
+    create(username: string): {
+        id: string;
+        maxAgeSeconds: number;
+    };
+    get(id: string | undefined): Session | undefined;
+    destroy(id: string | undefined): void;
+    clear(): void;
+}
+export declare function parseCookies(req: IncomingMessage): Record<string, string>;
+export declare function sessionCookie(id: string, maxAgeSeconds: number, secure: boolean): string;
+export declare const clearedSessionCookie: (secure: boolean) => string;
+/** A cross-site page must not be able to drive the dashboard with the admin's cookie. */
+export declare function sameOrigin(req: IncomingMessage): boolean;
+/** Fixed-window limiter for login and setup-code guesses. */
+export declare class RateLimiter {
+    private readonly max;
+    private readonly windowMs;
+    private readonly clock;
+    private readonly hits;
+    constructor(max: number, windowMs: number, clock?: () => number);
+    /** Records an attempt; returns false once the key is over the limit. */
+    attempt(key: string): boolean;
+    reset(key: string): void;
+    retryAfterSeconds(key: string): number;
+}
+export declare function generateSetupCode(): string;
+/**
+ * The passcode printed in the startup log while no admin exists. It lives
+ * only in memory: a restart prints a new one, and creating the admin ends it.
+ */
+export declare class SetupGate {
+    private code;
+    open(): string;
+    close(): void;
+    get isOpen(): boolean;
+    check(given: string): boolean;
+}
+export declare function setupBanner(code: string, port: number): string;

package/dist/security.js

@@ -0,0 +1,143 @@
+import { randomBytes, timingSafeEqual } from 'node:crypto';
+import { header } from './util.js';
+// ---- sessions --------------------------------------------------------------
+export const SESSION_COOKIE = 'aib_session';
+const SESSION_MS = 12 * 60 * 60 * 1000;
+/** Dashboard logins live in memory: a restart signs everyone out, which is fine for an admin panel. */
+export class SessionStore {
+    clock;
+    sessions = new Map();
+    constructor(clock = Date.now) {
+        this.clock = clock;
+    }
+    create(username) {
+        const id = randomBytes(32).toString('base64url');
+        this.sessions.set(id, { username, expires: this.clock() + SESSION_MS });
+        for (const [k, s] of this.sessions)
+            if (s.expires < this.clock())
+                this.sessions.delete(k);
+        return { id, maxAgeSeconds: SESSION_MS / 1000 };
+    }
+    get(id) {
+        if (!id)
+            return undefined;
+        const s = this.sessions.get(id);
+        if (!s)
+            return undefined;
+        if (s.expires < this.clock()) {
+            this.sessions.delete(id);
+            return undefined;
+        }
+        return s;
+    }
+    destroy(id) {
+        if (id)
+            this.sessions.delete(id);
+    }
+    clear() {
+        this.sessions.clear();
+    }
+}
+export function parseCookies(req) {
+    const out = {};
+    for (const part of (req.headers.cookie ?? '').split(';')) {
+        const i = part.indexOf('=');
+        if (i > 0)
+            out[part.slice(0, i).trim()] = decodeURIComponent(part.slice(i + 1).trim());
+    }
+    return out;
+}
+export function sessionCookie(id, maxAgeSeconds, secure) {
+    return `${SESSION_COOKIE}=${id}; HttpOnly; SameSite=Strict; Path=/; Max-Age=${maxAgeSeconds}${secure ? '; Secure' : ''}`;
+}
+export const clearedSessionCookie = (secure) => `${SESSION_COOKIE}=; HttpOnly; SameSite=Strict; Path=/; Max-Age=0${secure ? '; Secure' : ''}`;
+/** A cross-site page must not be able to drive the dashboard with the admin's cookie. */
+export function sameOrigin(req) {
+    const origin = header(req, 'origin');
+    if (!origin)
+        return true;
+    try {
+        return new URL(origin).host === header(req, 'host');
+    }
+    catch {
+        return false;
+    }
+}
+// ---- rate limiting ---------------------------------------------------------
+/** Fixed-window limiter for login and setup-code guesses. */
+export class RateLimiter {
+    max;
+    windowMs;
+    clock;
+    hits = new Map();
+    constructor(max, windowMs, clock = Date.now) {
+        this.max = max;
+        this.windowMs = windowMs;
+        this.clock = clock;
+    }
+    /** Records an attempt; returns false once the key is over the limit. */
+    attempt(key) {
+        const now = this.clock();
+        for (const [k, v] of this.hits)
+            if (v.resetAt < now)
+                this.hits.delete(k);
+        const entry = this.hits.get(key) ?? { count: 0, resetAt: now + this.windowMs };
+        entry.count++;
+        this.hits.set(key, entry);
+        return entry.count <= this.max;
+    }
+    reset(key) {
+        this.hits.delete(key);
+    }
+    retryAfterSeconds(key) {
+        const e = this.hits.get(key);
+        return e ? Math.max(1, Math.ceil((e.resetAt - this.clock()) / 1000)) : 0;
+    }
+}
+// ---- one-time setup code ---------------------------------------------------
+const ALPHABET = '23456789ABCDEFGHJKMNPQRSTUVWXYZ';
+export function generateSetupCode() {
+    const bytes = randomBytes(12);
+    const chars = [...bytes].map(b => ALPHABET[b % ALPHABET.length]).join('');
+    return `${chars.slice(0, 4)}-${chars.slice(4, 8)}-${chars.slice(8, 12)}`;
+}
+const normalizeCode = (s) => s.toUpperCase().replace(/[^A-Z0-9]/g, '');
+/**
+ * The passcode printed in the startup log while no admin exists. It lives
+ * only in memory: a restart prints a new one, and creating the admin ends it.
+ */
+export class SetupGate {
+    code = null;
+    open() {
+        this.code = generateSetupCode();
+        return this.code;
+    }
+    close() {
+        this.code = null;
+    }
+    get isOpen() {
+        return this.code !== null;
+    }
+    check(given) {
+        if (!this.code)
+            return false;
+        const a = Buffer.from(normalizeCode(given).padEnd(32, '_'));
+        const b = Buffer.from(normalizeCode(this.code).padEnd(32, '_'));
+        return a.length === b.length && timingSafeEqual(a, b) && normalizeCode(given).length === 12;
+    }
+}
+export function setupBanner(code, port) {
+    const lines = [
+        'Agent Cairn: first-time setup',
+        '',
+        `Open  http://<this-server>:${port}/ui/  and enter this one-time code:`,
+        '',
+        `        ${code}`,
+        '',
+        'It works until the admin account is created, or the server restarts.',
+    ];
+    const width = Math.max(...lines.map(l => l.length)) + 4;
+    const bar = '─'.repeat(width);
+    return ['┌' + bar + '┐', ...lines.map(l => `│  ${l.padEnd(width - 2)}│`), '└' + bar + '┘'].join('\n');
+}
+//# sourceMappingURL=security.js.map

package/dist/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE1D,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAElC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAA;AAC3C,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAOtC,uGAAuG;AACvG,MAAM,OAAO,YAAY;IAGM;IAFZ,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IAEtD,YAA6B,QAAsB,IAAI,CAAC,GAAG;QAA9B,UAAK,GAAL,KAAK,CAAyB;IAAG,CAAC;IAE/D,MAAM,CAAC,QAAgB;QACrB,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC,CAAA;QACvE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACzF,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,IAAI,EAAE,CAAA;IACjD,CAAC;IAED,GAAG,CAAC,EAAsB;QACxB,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAA;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QACxB,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACxB,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,OAAO,CAAC,EAAsB;QAC5B,IAAI,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAClC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;IACvB,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,GAAoB;IAC/C,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,aAAqB,EAAE,MAAe;IAC9E,OAAO,GAAG,cAAc,IAAI,EAAE,gDAAgD,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AAC1H,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAe,EAAE,EAAE,CACtD,GAAG,cAAc,kDAAkD,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AAE/F,yFAAyF;AACzF,MAAM,UAAU,UAAU,CAAC,GAAoB;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,6DAA6D;AAC7D,MAAM,OAAO,WAAW;IAIH;IACA;IACA;IALF,IAAI,GAAG,IAAI,GAAG,EAA8C,CAAA;IAE7E,YACmB,GAAW,EACX,QAAgB,EAChB,QAAsB,IAAI,CAAC,GAAG;QAF9B,QAAG,GAAH,GAAG,CAAQ;QACX,aAAQ,GAAR,QAAQ,CAAQ;QAChB,UAAK,GAAL,KAAK,CAAyB;IAC9C,CAAC;IAEJ,wEAAwE;IACxE,OAAO,CAAC,GAAW;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAA;QACxB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC9E,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACzB,OAAO,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,GAAW;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IAED,iBAAiB,CAAC,GAAW;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1E,CAAC;CACF;AAED,+EAA+E;AAE/E,MAAM,QAAQ,GAAG,iCAAiC,CAAA;AAElD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAA;IAC7B,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1E,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAC1E,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;AAE9E;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,IAAI,GAAkB,IAAI,CAAA;IAElC,IAAI;QACF,IAAI,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAA;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAA;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAC3D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;QAC/D,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,EAAE,CAAA;IAC7F,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG;QACZ,+BAA+B;QAC/B,EAAE;QACF,8BAA8B,IAAI,qCAAqC;QACvE,EAAE;QACF,WAAW,IAAI,EAAE;QACjB,EAAE;QACF,sEAAsE;KACvE,CAAA;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAA;IACvD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvG,CAAC"}

package/dist/serve.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/serve.js

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+import { countAdmins, ensureSchema, hasDefaultCredentials, loadConfig, loadEnvironment, openBrain } from '@agentcairn/core';
+import { createBrainHttp } from './http.js';
+import { setupBanner } from './security.js';
+const log = (message) => console.error(`cairn: ${message}`);
+async function main() {
+    loadEnvironment();
+    const env = process.env;
+    const token = env.CAIRN_TOKEN || undefined;
+    const noAuth = env.CAIRN_NO_AUTH === '1';
+    if (noAuth)
+        log('warning: running WITHOUT authentication (CAIRN_NO_AUTH=1).');
+    const config = loadConfig();
+    if (hasDefaultCredentials(config))
+        log('warning: Neo4j is using the default credentials.');
+    const brain = openBrain(config);
+    const port = Number(env.CAIRN_PORT || 8787);
+    const host = env.CAIRN_HOST || '0.0.0.0';
+    const { server, setup } = createBrainHttp(brain, {
+        token,
+        noAuth,
+        log,
+        port,
+        capture: env.CAIRN_CAPTURE === 'meta' ? 'meta' : 'full',
+        eventCapacity: Number(env.CAIRN_EVENT_CAPACITY) || undefined,
+        trustProxy: env.CAIRN_TRUST_PROXY === '1',
+        secureCookies: env.CAIRN_COOKIE_SECURE === '1',
+    });
+    server.listen(port, host, () => log(`listening on http://${host}:${port} (dashboard /ui/, MCP /mcp, neo4j ${config.uri})`));
+    // Neo4j may still be starting; everything here is retried lazily on first use.
+    void (async () => {
+        try {
+            await ensureSchema(brain);
+            if (env.CAIRN_RESET_ADMIN === '1') {
+                await brain.run('MATCH (a:Admin) DETACH DELETE a');
+                await brain.run("MATCH (m:BrainMeta {id: 'setup'}) DELETE m");
+                log('CAIRN_RESET_ADMIN=1: all dashboard accounts were removed. Unset it after this start.');
+            }
+            log('schema ready');
+            if ((await countAdmins(brain)) === 0 && !setup.isOpen)
+                console.error(`\n${setupBanner(setup.open(), port)}\n`);
+            else if (!token && !noAuth)
+                log('dashboard account exists; create access tokens under Access in the dashboard.');
+        }
+        catch (error) {
+            log(`schema not ready yet (${error.message}); will retry on first request`);
+        }
+    })();
+    const shutdown = () => {
+        server.close(() => void brain.close().finally(() => process.exit(0)));
+        setTimeout(() => process.exit(0), 5000).unref();
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+}
+main().catch(error => {
+    log(`failed to start: ${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=serve.js.map

package/dist/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3H,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAE3C,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAA;AAEnE,KAAK,UAAU,IAAI;IACjB,eAAe,EAAE,CAAA;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;IACvB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,IAAI,SAAS,CAAA;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,KAAK,GAAG,CAAA;IACxC,IAAI,MAAM;QAAE,GAAG,CAAC,4DAA4D,CAAC,CAAA;IAE7E,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,kDAAkD,CAAC,CAAA;IAC1F,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAE/B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAA;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,IAAI,SAAS,CAAA;IACxC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE;QAC/C,KAAK;QACL,MAAM;QACN,GAAG;QACH,IAAI;QACJ,OAAO,EAAE,GAAG,CAAC,aAAa,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACvD,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS;QAC5D,UAAU,EAAE,GAAG,CAAC,iBAAiB,KAAK,GAAG;QACzC,aAAa,EAAE,GAAG,CAAC,mBAAmB,KAAK,GAAG;KAC/C,CAAC,CAAA;IAEF,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI,IAAI,qCAAqC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;IAE3H,+EAA+E;IAC/E,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,KAAK,CAAC,CAAA;YACzB,IAAI,GAAG,CAAC,iBAAiB,KAAK,GAAG,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAA;gBAClD,MAAM,KAAK,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAA;gBAC7D,GAAG,CAAC,sFAAsF,CAAC,CAAA;YAC7F,CAAC;YACD,GAAG,CAAC,cAAc,CAAC,CAAA;YACnB,IAAI,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;iBACzG,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,GAAG,CAAC,+EAA+E,CAAC,CAAA;QAClH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,yBAA0B,KAAe,CAAC,OAAO,gCAAgC,CAAC,CAAA;QACxF,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IAEJ,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACrE,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAA;IACjD,CAAC,CAAA;IACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,GAAG,CAAC,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/server.d.ts

@@ -0,0 +1,10 @@
+import type { Brain } from '@agentcairn/core';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { type Scope } from './context.js';
+export declare const SERVER_NAME = "cairn";
+export declare const SERVER_VERSION = "0.1.0";
+/** `scope` may be a folder (stdio mode) or a client-supplied project hint (remote mode). */
+export declare function createBrainServer(brain: Brain, scope: string | Scope, options?: {
+    agent?: string;
+    onProject?: (projectId: string) => void;
+}): McpServer;

package/dist/server.js

@@ -0,0 +1,14 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { BrainContext } from './context.js';
+import { SERVER_INSTRUCTIONS, registerTools } from './tools.js';
+export const SERVER_NAME = 'cairn';
+export const SERVER_VERSION = '0.1.0';
+/** `scope` may be a folder (stdio mode) or a client-supplied project hint (remote mode). */
+export function createBrainServer(brain, scope, options = {}) {
+    const server = new McpServer({ name: SERVER_NAME, version: SERVER_VERSION }, { instructions: SERVER_INSTRUCTIONS });
+    const resolved = typeof scope === 'string' ? { cwd: scope } : scope;
+    const ctx = new BrainContext(brain, resolved, () => server.server.getClientVersion()?.name ?? options.agent, options.onProject);
+    registerTools(server, ctx);
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACnE,OAAO,EAAE,YAAY,EAAc,MAAM,cAAc,CAAA;AACvD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAA;AAClC,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAA;AAErC,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAC/B,KAAY,EACZ,KAAqB,EACrB,UAAuE,EAAE;IAEzE,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAC9C,EAAE,YAAY,EAAE,mBAAmB,EAAE,CACtC,CAAA;IACD,MAAM,QAAQ,GAAU,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;IAC1E,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/H,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAC1B,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,8 @@
+import { type Memory, type Staleness } from '@agentcairn/core';
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { BrainContext } from './context.js';
+/** Turns any failure into a message the agent can act on; never throws. */
+export declare function describeError(error: unknown): string;
+export declare function formatMemory(m: Memory, staleness?: Staleness, score?: number | null): string;
+export declare const SERVER_INSTRUCTIONS = "Agent Cairn is the shared, persistent memory of this project, written by agents like you.\n- Start of a session: call cairn_briefing before exploring the repo and trust it over re-reading files. If it returns an onboarding prompt, follow it.\n- After finishing a goal or process: call cairn_checkpoint.\n- When you learn something durable (a decision and its reason, a convention, a trap): call cairn_remember. Replace outdated memories with supersedes (ids shown as #abc12345).\n- Look things up with cairn_recall instead of searching the repo for context that is probably recorded.";
+export declare function registerTools(server: McpServer, ctx: BrainContext): void;

package/dist/tools.js

@@ -0,0 +1,199 @@
+import { MAX_BRIEFING_TOKENS, MEMORY_KINDS, MemoryValidationError, MIN_BRIEFING_TOKENS, ProjectMissingError, ProjectNotFoundError, RemoteConflictError, SupersedeError, UnresolvedProjectError, buildBriefing, checkConnection, checkStaleness, checkpoint, countActiveByKind, forgetMemory, hasDefaultCredentials, listAreas, loadConfig, recall, remember, schemaVersion, shortId, } from '@agentcairn/core';
+import { z } from 'zod';
+const ok = (text) => ({ content: [{ type: 'text', text }] });
+const fail = (text) => ({ content: [{ type: 'text', text }], isError: true });
+/** Turns any failure into a message the agent can act on; never throws. */
+export function describeError(error) {
+    if (error instanceof MemoryValidationError ||
+        error instanceof SupersedeError ||
+        error instanceof UnresolvedProjectError ||
+        error instanceof ProjectNotFoundError ||
+        error instanceof ProjectMissingError ||
+        error instanceof RemoteConflictError) {
+        return error.message;
+    }
+    const e = error;
+    if (e.code === 'Neo.ClientError.Security.Unauthorized') {
+        return 'Neo4j rejected the credentials. Check NEO4J_USER and NEO4J_PASSWORD.';
+    }
+    if (e.code === 'ServiceUnavailable' || e.code === 'SessionExpired') {
+        return `Cannot reach Neo4j at ${loadConfig().uri}. Check that it is running and NEO4J_URI is right.`;
+    }
+    return `Unexpected error: ${e.message ?? String(error)}`;
+}
+const guard = (handler) => async (args) => {
+    try {
+        return await handler(args);
+    }
+    catch (error) {
+        return fail(describeError(error));
+    }
+};
+export function formatMemory(m, staleness, score) {
+    const meta = [m.kind + (m.area ? `/${m.area}` : ''), `importance ${m.importance}`, m.createdAt.slice(0, 10)];
+    if (m.status === 'superseded')
+        meta.push('superseded');
+    if (score != null)
+        meta.push(`score ${score.toFixed(2)}`);
+    const stale = staleness?.status === 'stale' ? `\n⚠ may be stale (changed: ${staleness.changedPaths.slice(0, 3).join(', ')})` : '';
+    const paths = m.paths.length ? `\npaths: ${m.paths.join(', ')}` : '';
+    return `#${shortId(m.id)} [${meta.join(', ')}] ${m.title}\n${m.body}${paths}${stale}`;
+}
+const kindSchema = z.enum(MEMORY_KINDS);
+const commitShaSchema = z.string().optional().describe('Set automatically by hooks; leave empty');
+const authorSchema = z.string().optional().describe('Set automatically by hooks; leave empty');
+const pathsSchema = z.array(z.string()).max(50).optional().describe('Repo-relative files or folders this concerns; used to detect staleness');
+const areaSchema = z.string().optional().describe('Module or subsystem this is about');
+export const SERVER_INSTRUCTIONS = `Agent Cairn is the shared, persistent memory of this project, written by agents like you.
+- Start of a session: call cairn_briefing before exploring the repo and trust it over re-reading files. If it returns an onboarding prompt, follow it.
+- After finishing a goal or process: call cairn_checkpoint.
+- When you learn something durable (a decision and its reason, a convention, a trap): call cairn_remember. Replace outdated memories with supersedes (ids shown as #abc12345).
+- Look things up with cairn_recall instead of searching the repo for context that is probably recorded.`;
+export function registerTools(server, ctx) {
+    server.registerTool('cairn_briefing', {
+        title: 'Project briefing',
+        description: 'Start here. Returns a compact, token-budgeted briefing of this project (overview, conventions, gotchas, open threads, recent checkpoints, decisions), with stale items flagged. If the project has no memories yet, returns onboarding instructions instead.',
+        inputSchema: {
+            max_tokens: z
+                .number()
+                .int()
+                .min(MIN_BRIEFING_TOKENS)
+                .max(MAX_BRIEFING_TOKENS)
+                .optional()
+                .describe('Token budget for the briefing (default 1500)'),
+        },
+    }, guard(async ({ max_tokens }) => {
+        const project = await ctx.project({ write: false });
+        const briefing = await buildBriefing(ctx.brain, project.projectId, { maxTokens: max_tokens, cwd: ctx.cwd });
+        return ok(briefing.text);
+    }));
+    server.registerTool('cairn_recall', {
+        title: 'Search project memory',
+        description: 'Search this project\'s memories by text, kind and area. Without a query, lists the most important and recent ones. Use it for details the briefing left out.',
+        inputSchema: {
+            query: z.string().optional().describe('Words to search for in titles and bodies'),
+            kind: kindSchema.optional(),
+            area: areaSchema,
+            limit: z.number().int().min(1).max(50).optional().describe('Default 10'),
+            include_superseded: z.boolean().optional().describe('Also return memories that were replaced'),
+        },
+    }, guard(async ({ query, kind, area, limit, include_superseded }) => {
+        const project = await ctx.project({ write: false });
+        const found = await recall(ctx.brain, project.projectId, {
+            query,
+            kind,
+            area,
+            limit,
+            includeSuperseded: include_superseded,
+        });
+        if (found.length === 0)
+            return ok('No matching memories.');
+        const staleness = ctx.cwd ? await checkStaleness(ctx.cwd, found) : undefined;
+        return ok(found.map(m => formatMemory(m, staleness?.get(m.id), m.score)).join('\n\n'));
+    }));
+    server.registerTool('cairn_remember', {
+        title: 'Record a memory',
+        description: 'Store one durable fact about this project: a decision (with its reason), convention, gotcha, overview, open thread or glossary term. One fact per memory. Use supersedes to replace outdated memories.',
+        inputSchema: {
+            kind: kindSchema,
+            title: z.string().min(1).max(200),
+            body: z.string().min(1).max(20_000).describe('Short and specific: the why and the non-obvious, no pasted code'),
+            area: areaSchema,
+            paths: pathsSchema,
+            importance: z.number().int().min(1).max(5).optional().describe('1 minor to 5 critical (default 3)'),
+            supersedes: z.array(z.string()).max(20).optional().describe('Ids (#abc12345) of memories this replaces'),
+            commit_sha: commitShaSchema,
+            author: authorSchema,
+        },
+    }, guard(async ({ commit_sha, author, ...input }) => {
+        const project = await ctx.project({ write: true });
+        const m = await remember(ctx.brain, project.projectId, {
+            ...input,
+            ...(await ctx.provenance({ commitSha: commit_sha, author })),
+        });
+        const replaced = m.supersedes.length ? ` (replaced ${m.supersedes.map(shortId).map(s => `#${s}`).join(', ')})` : '';
+        return ok(`Remembered #${shortId(m.id)}: ${m.title}${replaced}`);
+    }));
+    server.registerTool('cairn_checkpoint', {
+        title: 'Checkpoint a finished goal',
+        description: 'Call after finishing a goal or process. Records what was done, stores each decision as its own memory, and keeps what is next as an open thread.',
+        inputSchema: {
+            goal: z.string().min(1).max(200).describe('What you were doing'),
+            outcome: z.string().min(1).max(20_000).describe('What changed and how it ended'),
+            decisions: z
+                .array(z.object({
+                title: z.string().min(1).max(200),
+                body: z.string().min(1).max(20_000),
+                area: areaSchema,
+                paths: pathsSchema,
+            }))
+                .max(20)
+                .optional()
+                .describe('Choices worth keeping, each with its reason'),
+            next: z.string().optional().describe('What remains to be done'),
+            resolves: z.array(z.string()).max(20).optional().describe('Ids (#abc12345) of open threads this finished'),
+            area: areaSchema,
+            paths: pathsSchema,
+            commit_sha: commitShaSchema,
+            author: authorSchema,
+        },
+    }, guard(async ({ commit_sha, author, ...input }) => {
+        const project = await ctx.project({ write: true });
+        const r = await checkpoint(ctx.brain, project.projectId, {
+            ...input,
+            ...(await ctx.provenance({ commitSha: commit_sha, author })),
+        });
+        const parts = [`Checkpoint #${shortId(r.checkpoint.id)} recorded.`];
+        if (r.decisions.length)
+            parts.push(`${r.decisions.length} decision(s) stored.`);
+        if (r.thread)
+            parts.push(`Open thread #${shortId(r.thread.id)} created.`);
+        if (r.checkpoint.supersedes.length)
+            parts.push(`Resolved ${r.checkpoint.supersedes.length} thread(s).`);
+        return ok(parts.join(' '));
+    }));
+    server.registerTool('cairn_areas', {
+        title: 'List areas',
+        description: 'Lists the areas (modules or subsystems) memories have been filed under, with counts.',
+        inputSchema: {},
+    }, guard(async () => {
+        const project = await ctx.project({ write: false });
+        const areas = await listAreas(ctx.brain, project.projectId);
+        return ok(areas.length ? areas.map(a => `${a.name}: ${a.count}`).join('\n') : 'No areas yet.');
+    }));
+    server.registerTool('cairn_forget', {
+        title: 'Delete a memory',
+        description: 'Permanently deletes one memory by id (#abc12345). Memories it had replaced become active again. Use for memories that were wrong, not for outdated ones: supersede those.',
+        inputSchema: { id: z.string().min(6).describe('Memory id or unique prefix, e.g. abc12345') },
+    }, guard(async ({ id }) => {
+        const project = await ctx.project({ write: false });
+        const gone = await forgetMemory(ctx.brain, project.projectId, id.replace(/^#/, ''));
+        if (!gone)
+            return fail(`No memory matches "${id}" in this project.`);
+        const restored = gone.restored.length ? ` Restored ${gone.restored.length} earlier memory(ies).` : '';
+        return ok(`Deleted #${shortId(gone.id)}: ${gone.title}.${restored}`);
+    }));
+    server.registerTool('cairn_status', {
+        title: 'Brain status',
+        description: 'Health check: Neo4j connection, which project this folder maps to and how, and memory counts.',
+        inputSchema: {},
+    }, guard(async () => {
+        const config = loadConfig();
+        const info = await checkConnection(ctx.brain);
+        await ctx.ready();
+        const project = await ctx.project({ write: false });
+        const counts = await countActiveByKind(ctx.brain, project.projectId);
+        const total = [...counts.values()].reduce((a, b) => a + b, 0);
+        const lines = [
+            `Neo4j: ${info.agent} at ${config.uri} (schema v${await schemaVersion(ctx.brain)})`,
+            `Project: ${project.projectId} (via ${project.source === 'link' ? 'explicit project id' : 'git remote'}${project.isNew ? ', no memories yet' : ''})`,
+            `Active memories: ${total}${total ? ` (${[...counts].map(([k, n]) => `${k} ${n}`).join(', ')})` : ''}`,
+        ];
+        if (ctx.cwd)
+            lines.splice(2, 0, `Folder: ${ctx.cwd}`);
+        if (hasDefaultCredentials(config))
+            lines.push('Warning: Neo4j is using the default credentials.');
+        return ok(lines.join('\n'));
+    }));
+}
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,aAAa,EACb,eAAe,EACf,cAAc,EACd,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,MAAM,EACN,QAAQ,EACR,aAAa,EACb,OAAO,GAGR,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,MAAM,EAAE,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;AAChF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AAEjG,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IACE,KAAK,YAAY,qBAAqB;QACtC,KAAK,YAAY,cAAc;QAC/B,KAAK,YAAY,sBAAsB;QACvC,KAAK,YAAY,oBAAoB;QACrC,KAAK,YAAY,mBAAmB;QACpC,KAAK,YAAY,mBAAmB,EACpC,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAA;IACtB,CAAC;IACD,MAAM,CAAC,GAAG,KAA4C,CAAA;IACtD,IAAI,CAAC,CAAC,IAAI,KAAK,uCAAuC,EAAE,CAAC;QACvD,OAAO,sEAAsE,CAAA;IAC/E,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnE,OAAO,yBAAyB,UAAU,EAAE,CAAC,GAAG,oDAAoD,CAAA;IACtG,CAAC;IACD,OAAO,qBAAqB,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC1D,CAAC;AAED,MAAM,KAAK,GACT,CAAI,OAAyC,EAAE,EAAE,CACjD,KAAK,EAAE,IAAO,EAAuB,EAAE;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;IACnC,CAAC;AACH,CAAC,CAAA;AAEH,MAAM,UAAU,YAAY,CAAC,CAAS,EAAE,SAAqB,EAAE,KAAqB;IAClF,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IAC5G,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACtD,IAAI,KAAK,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACzD,MAAM,KAAK,GACT,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,8BAA8B,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACrH,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,GAAG,KAAK,EAAE,CAAA;AACvF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;AACvC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAA;AACjG,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAA;AAC9F,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wEAAwE,CAAC,CAAA;AAC7I,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAA;AAEtF,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;wGAIqE,CAAA;AAExG,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,GAAiB;IAChE,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EACT,8PAA8P;QAChQ,WAAW,EAAE;YACX,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,mBAAmB,CAAC;iBACxB,GAAG,CAAC,mBAAmB,CAAC;iBACxB,QAAQ,EAAE;iBACV,QAAQ,CAAC,8CAA8C,CAAC;SAC5D;KACF,EACD,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAA;QAC3G,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,CAAC,CACH,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,8JAA8J;QAChK,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACjF,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;YAC3B,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;YACxE,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;SAC/F;KACF,EACD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE;QAC/D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YACvD,KAAK;YACL,IAAI;YACJ,IAAI;YACJ,KAAK;YACL,iBAAiB,EAAE,kBAAkB;SACtC,CAAC,CAAA;QACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,uBAAuB,CAAC,CAAA;QAC1D,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5E,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IACxF,CAAC,CAAC,CACH,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,wMAAwM;QAC1M,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC;YAC/G,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YACnG,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;YACxG,UAAU,EAAE,eAAe;YAC3B,MAAM,EAAE,YAAY;SACrB;KACF,EACD,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE;QAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YACrD,GAAG,KAAK;YACR,GAAG,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;SAC7D,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QACnH,OAAO,EAAE,CAAC,eAAe,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC,CAAA;IAClE,CAAC,CAAC,CACH,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,kJAAkJ;QACpJ,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAChF,SAAS,EAAE,CAAC;iBACT,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;gBACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;gBACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;gBACnC,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,WAAW;aACnB,CAAC,CACH;iBACA,GAAG,CAAC,EAAE,CAAC;iBACP,QAAQ,EAAE;iBACV,QAAQ,CAAC,6CAA6C,CAAC;YAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YAC/D,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;YAC1G,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,eAAe;YAC3B,MAAM,EAAE,YAAY;SACrB;KACF,EACD,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE;QAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YACvD,GAAG,KAAK;YACR,GAAG,CAAC,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;SAC7D,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,CAAC,eAAe,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,CAAA;QACnE,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,sBAAsB,CAAC,CAAA;QAC/E,IAAI,CAAC,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;QACzE,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,aAAa,CAAC,CAAA;QACvG,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CACH,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,sFAAsF;QACnG,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QAC3D,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAA;IAChG,CAAC,CAAC,CACH,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,2KAA2K;QAC7K,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC,EAAE;KAC7F,EACD,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;QACnF,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAA;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,MAAM,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAA;QACrG,OAAO,EAAE,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAA;IACtE,CAAC,CAAC,CACH,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,+FAA+F;QAC5G,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;QAC3B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QACjB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QACnD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QACpE,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG;YACZ,UAAU,IAAI,CAAC,KAAK,OAAO,MAAM,CAAC,GAAG,aAAa,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG;YACnF,YAAY,OAAO,CAAC,SAAS,SAAS,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,GAAG;YACpJ,oBAAoB,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;SACvG,CAAA;QACD,IAAI,GAAG,CAAC,GAAG;YAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,GAAG,CAAC,GAAG,EAAE,CAAC,CAAA;QACrD,IAAI,qBAAqB,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;QACjG,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,CACH,CAAA;AACH,CAAC"}

package/dist/util.d.ts

@@ -0,0 +1,13 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly extra: Record<string, unknown>;
+    constructor(status: number, code: string, message: string, extra?: Record<string, unknown>);
+}
+export declare function send(res: ServerResponse, status: number, body: unknown, headers?: Record<string, string>): void;
+export declare function readJson(req: IncomingMessage, limit: number): Promise<unknown>;
+export declare const header: (req: IncomingMessage, name: string) => string | undefined;
+export declare const asRecord: (v: unknown) => Record<string, unknown>;
+/** Client address; X-Forwarded-For is believed only when the operator says a proxy is in front. */
+export declare function clientIp(req: IncomingMessage, trustProxy: boolean): string | undefined;

package/dist/util.js

@@ -0,0 +1,49 @@
+export class HttpError extends Error {
+    status;
+    code;
+    extra;
+    constructor(status, code, message, extra = {}) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.extra = extra;
+    }
+}
+export function send(res, status, body, headers = {}) {
+    const text = JSON.stringify(body);
+    res.writeHead(status, { 'content-type': 'application/json', 'content-length': Buffer.byteLength(text), ...headers });
+    res.end(text);
+}
+export async function readJson(req, limit) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > limit)
+            throw new HttpError(413, 'too_large', `Request body exceeds ${limit} bytes.`);
+        chunks.push(chunk);
+    }
+    if (size === 0)
+        return undefined;
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    catch {
+        throw new HttpError(400, 'bad_json', 'Request body is not valid JSON.');
+    }
+}
+export const header = (req, name) => {
+    const v = req.headers[name];
+    return (Array.isArray(v) ? v[0] : v)?.trim() || undefined;
+};
+export const asRecord = (v) => v && typeof v === 'object' && !Array.isArray(v) ? v : {};
+/** Client address; X-Forwarded-For is believed only when the operator says a proxy is in front. */
+export function clientIp(req, trustProxy) {
+    if (trustProxy) {
+        const forwarded = header(req, 'x-forwarded-for')?.split(',')[0]?.trim();
+        if (forwarded)
+            return forwarded;
+    }
+    return req.socket.remoteAddress?.replace(/^::ffff:/, '');
+}
+//# sourceMappingURL=util.js.map

package/dist/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,SAAU,SAAQ,KAAK;IAEvB;IACA;IAEA;IAJX,YACW,MAAc,EACd,IAAY,EACrB,OAAe,EACN,QAAiC,EAAE;QAE5C,KAAK,CAAC,OAAO,CAAC,CAAA;QALL,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAEZ,UAAK,GAAL,KAAK,CAA8B;IAG9C,CAAC;CACF;AAED,MAAM,UAAU,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa,EAAE,UAAkC,EAAE;IAC3G,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACjC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IACpH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,KAAa;IAChE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAA;QAChC,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,wBAAwB,KAAK,SAAS,CAAC,CAAA;QAC/F,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAA;IAC9B,CAAC;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,iCAAiC,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,GAAoB,EAAE,IAAY,EAAsB,EAAE;IAC/E,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;AAC3D,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2B,EAAE,CAC9D,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAA;AAEvF,mGAAmG;AACnG,MAAM,UAAU,QAAQ,CAAC,GAAoB,EAAE,UAAmB;IAChE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;QACvE,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;IACjC,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;AAC1D,CAAC"}