@atbas/m-mcp 0.1.0

package/dist/gateway/rest-client.js

@@ -0,0 +1,241 @@
+import { resolveEndpoint } from '../catalogue/endpoints.js';
+import { requestHashOptions, responseHashOptions, signatureFieldName } from '../catalogue/hash-options.js';
+import { credentialParameterValue } from '../config/credentials.js';
+import { classifyResponse } from '../domain/response-codes.js';
+import { hashesMatch, computeSecureHash } from '../domain/secure-hash.js';
+import { normaliseValue, toParameters, } from '../domain/types.js';
+import { JazzCashGatewayError, JazzCashValidationError } from '../errors.js';
+import { redactForLog, REDACTED } from '../telemetry/redaction.js';
+import { validatePayload } from '../validation/payload-validator.js';
+import { guardGatewayCall } from './guards.js';
+import { createHttpClient } from './http-client.js';
+import { describeTransportMismatch } from './transport.js';
+/**
+ * Verify the response hash.
+ *
+ * Assumption A2: no guide states which response fields feed the response hash,
+ * so a mismatch is reported as `unverified`, never as a failure. Telling a
+ * merchant their integration is broken on the strength of an unconfirmed rule
+ * would be worse than saying nothing.
+ */
+function checkResponseHash(flow, response, integritySalt) {
+    const field = flow.response.hashField;
+    // A flow whose responses carry no signature has no field to read. Reporting an
+    // absent hash for a field the provider never sends reads as a fault in the
+    // merchant's integration, and would have them chasing a hash that was never
+    // part of the contract.
+    if (field === undefined) {
+        return {
+            verdict: 'absent',
+            note: `${flow.id} declares no response signature, so there was nothing to verify. This is the provider's design, not a fault in the integration.`,
+        };
+    }
+    const supplied = response[field];
+    if (typeof supplied !== 'string' || supplied.trim() === '') {
+        return {
+            verdict: 'absent',
+            field,
+            note: `The response carried no ${field}, so there was nothing to verify.`,
+        };
+    }
+    // Response field selection is NOT the request's. See catalogue/hash-options.ts.
+    const recomputed = computeSecureHash(toParameters(response), integritySalt, responseHashOptions(flow));
+    if (hashesMatch(recomputed, supplied)) {
+        return { verdict: 'verified', field, note: `${field} matches a hash recomputed over the response fields.` };
+    }
+    return {
+        verdict: 'unverified',
+        field,
+        note: `${field} did not match a hash recomputed over all non-empty response fields. JazzCash does not document which fields feed the response hash, so this is UNVERIFIED rather than a failure — do not treat it as evidence that the integration is broken. Confirm the rule with JazzCash (assumption A2).`,
+    };
+}
+/**
+ * Choose the transport: per-call client, then the injected one, then a default.
+ *
+ * The injected tier exists so that orchestration tools which expose no transport
+ * argument of their own can still be tested without calling the live gateway.
+ */
+function resolveHttpClient(deps, perCall) {
+    return perCall ?? deps.httpClient ?? createHttpClient({ timeoutMs: deps.config.httpTimeoutMs, logger: deps.logger });
+}
+function buildNextSteps(flow, classification) {
+    const steps = [...classification.nextSteps];
+    if (classification.classification === 'completed' && flow.responseContext === 'payment') {
+        steps.push('Reconcile against the IPN notification, and record pp_RetreivalReferenceNo for support enquiries.');
+    }
+    if (classification.classification === 'pending' || classification.classification === 'unknown') {
+        steps.push(`Call the Status Inquiry API (${flow.companionFlows.find((id) => id.startsWith('status-inquiry')) ?? 'status-inquiry-v1.1'}) at least ten minutes after the transaction time.`);
+    }
+    return steps;
+}
+/**
+ * Resolve a credential parameter from the profile rather than from the caller.
+ *
+ * Shares `credentialParameterValue` with the builder so the two cannot drift,
+ * but excludes `pp_ReturnURL`: that one is registered rather than secret and is
+ * filled below only when the caller left it empty, for the reason given there.
+ */
+function profileCredential(name, profile) {
+    return name === 'pp_ReturnURL' ? undefined : credentialParameterValue(name, profile);
+}
+/**
+ * Fill the credential fields from the resolved profile before anything is signed.
+ *
+ * Credentials are never tool arguments (see `docs/mcp/SAFETY.md`), so the payload
+ * a caller holds — from `jazzcash_build_transaction_parameters`, or copied out of
+ * a log — carries them masked. They are refilled here, ahead of validation and
+ * signing, so that the transmitted map and its hash both carry the real values.
+ *
+ * The overwrite is unconditional for the identity fields: the Integrity Salt used
+ * to sign comes from this profile, so a caller-supplied merchant ID or password
+ * belonging to another profile could only produce a request signed by one
+ * merchant while claiming to be another.
+ *
+ * `pp_ReturnURL` is registered rather than secret, and the gateway treats any
+ * difference from the registered value as an authentication failure, so a
+ * supplied value is left alone for `returnUrlRule` to report. The profile only
+ * supplies it when the caller left it empty.
+ */
+function withProfileCredentials(flow, parameters, profile) {
+    const filled = { ...parameters };
+    for (const parameter of flow.parameters) {
+        const credential = profileCredential(parameter.name, profile);
+        if (credential !== undefined) {
+            filled[parameter.name] = credential;
+            continue;
+        }
+        const supplied = normaliseValue(filled[parameter.name]);
+        if (parameter.name === 'pp_ReturnURL' && profile.returnUrl !== undefined && supplied === '') {
+            filled[parameter.name] = profile.returnUrl;
+        }
+    }
+    return filled;
+}
+/**
+ * Refuse a payload still carrying the redaction sentinel.
+ *
+ * A masked value is not a value: `[redacted]` passes every presence check, would
+ * be HMAC'd with the real Integrity Salt and POSTed to a live gateway, and the
+ * merchant would be left with an authentication failure they cannot explain.
+ * Credentials have already been refilled by this point, so anything still masked
+ * is data only the caller can restore. The hash field is exempt because it is
+ * recomputed below.
+ */
+function assertNoRedactedValues(flow, parameters) {
+    const recomputed = new Set(flow.parameters.filter((parameter) => parameter.valueType === 'secure-hash').map((parameter) => parameter.name));
+    const masked = Object.keys(parameters).filter((name) => !recomputed.has(name) && normaliseValue(parameters[name]) === REDACTED);
+    if (masked.length === 0) {
+        return;
+    }
+    throw new JazzCashValidationError(`Refusing to send a ${flow.id} payload in which ${masked.join(', ')} still holds the literal redaction placeholder "${REDACTED}". Credential fields are filled from the server configuration, but these values are not recoverable here: supply the real ones, or rebuild the payload with jazzcash_build_transaction_parameters.`, { details: { fields: masked } });
+}
+/** How much of an unparseable body to quote back: enough to recognise it, no more. */
+const RESPONSE_SNIPPET_LIMIT = 500;
+/**
+ * Quote a bounded excerpt of a body that could not be parsed.
+ *
+ * A proxy's HTML 502, a WAF block page and a maintenance notice are all "not a
+ * JSON object", and telling a merchant only that leaves them nothing to act on.
+ * The excerpt is bounded and whitespace-collapsed because a gateway response is
+ * not trusted input, and it is masked on the way out by `toolError`.
+ */
+function responseSnippet(rawText) {
+    const collapsed = rawText.replace(/\s+/gu, ' ').trim();
+    if (collapsed === '') {
+        return '(the body was empty)';
+    }
+    return collapsed.length <= RESPONSE_SNIPPET_LIMIT ? collapsed : `${collapsed.slice(0, RESPONSE_SNIPPET_LIMIT)}…`;
+}
+/**
+ * Refill, validate and sign, in that order, returning the exact map to transmit.
+ *
+ * The order is the whole of it. Credentials are refilled before validation so a
+ * masked payload is not rejected for a field the server itself supplies, and the
+ * signature is computed last, from the normalised map rather than from the
+ * caller's, so the digest covers the bytes that actually go on the wire. The
+ * field it is written into comes from the flow, because `pp_SecureHash` is one
+ * provider's name for it.
+ *
+ * @throws JazzCashValidationError when the payload is masked or invalid, before
+ * anything is signed or sent.
+ */
+function signedPayloadFor(flow, parameters, profile) {
+    const filled = withProfileCredentials(flow, parameters, profile);
+    assertNoRedactedValues(flow, filled);
+    const validation = validatePayload(flow, filled, {
+        registeredReturnUrl: profile.returnUrl,
+    });
+    if (!validation.valid) {
+        throw new JazzCashValidationError(`Refusing to send an invalid ${flow.id} payload. ${validation.errors.map((entry) => `${entry.field ?? 'payload'}: ${entry.message}`).join(' ')}`, { details: { errors: validation.errors } });
+    }
+    const signatureField = signatureFieldName(flow);
+    // A flow that declares no signature field is transmitted unsigned rather than
+    // gaining one under a borrowed name: writing a digest into `pp_SecureHash` for
+    // a provider that never reads it sends a field the gateway ignores and omits
+    // the one it checks, which is a rejected transaction with nothing in the
+    // response to explain it.
+    if (signatureField === undefined) {
+        return validation.normalisedPayload;
+    }
+    return {
+        ...validation.normalisedPayload,
+        [signatureField]: computeSecureHash(validation.normalisedPayload, profile.integritySalt, requestHashOptions(flow)),
+    };
+}
+/** Send one REST request and interpret the result. */
+export async function executeFlow(deps, options) {
+    const { flow, environment } = options;
+    if (flow.transport !== 'rest') {
+        throw new JazzCashValidationError(describeTransportMismatch(flow, 'rest'));
+    }
+    const { profile, warnings } = guardGatewayCall(deps, {
+        flow,
+        environment,
+        confirmLiveEnvironment: options.confirmLiveEnvironment,
+    });
+    const signed = signedPayloadFor(flow, options.parameters, profile);
+    const endpoint = resolveEndpoint(flow, environment);
+    const httpClient = resolveHttpClient(deps, options.httpClient);
+    deps.logger.info('Sending gateway request', {
+        flowId: flow.id,
+        environment,
+        endpoint,
+        movesMoney: flow.movesMoney,
+    });
+    const httpResponse = await httpClient.postJson(endpoint, signed, {
+        // Only a read may be retried. Retrying a payment or refund could debit twice.
+        retryable: !flow.movesMoney,
+    });
+    if (typeof httpResponse.body !== 'object' || httpResponse.body === null) {
+        const snippet = responseSnippet(httpResponse.rawText);
+        throw new JazzCashGatewayError(`The gateway returned HTTP ${String(httpResponse.status)} with a body that is not a JSON object. The transaction outcome is UNKNOWN: resolve it with the Status Inquiry API rather than resending. The body began: ${snippet}`, { details: { status: httpResponse.status, bodySnippet: snippet } });
+    }
+    const response = httpResponse.body;
+    // The flow's own success contract, so that a provider whose service-level code
+    // says only "request accepted" is not read as a completed payment: the
+    // settlement level it declares is checked as well. A no-op for every JazzCash
+    // flow, which reports one outcome in one documented field.
+    const classification = classifyResponse(response, flow.responseContext, flow.response);
+    const responseHash = checkResponseHash(flow, response, profile.integritySalt);
+    deps.logger.info('Gateway request completed', {
+        flowId: flow.id,
+        httpStatus: httpResponse.status,
+        classification: classification.classification,
+        responseHash: responseHash.verdict,
+        durationMs: httpResponse.durationMs,
+    });
+    return {
+        flowId: flow.id,
+        environment,
+        endpoint,
+        requestPreview: redactForLog(signed),
+        response,
+        httpStatus: httpResponse.status,
+        durationMs: httpResponse.durationMs,
+        classification,
+        responseHash,
+        warnings,
+        nextSteps: buildNextSteps(flow, classification),
+    };
+}
+//# sourceMappingURL=rest-client.js.map

package/dist/gateway/rest-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-client.js","sourceRoot":"","sources":["../../src/gateway/rest-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAE3G,OAAO,EAAE,wBAAwB,EAA0B,MAAM,0BAA0B,CAAC;AAG5F,OAAO,EAAE,gBAAgB,EAA2B,MAAM,6BAA6B,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EACL,cAAc,EACd,YAAY,GAIb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAyB,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAmB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAwC3D;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACxB,IAAqB,EACrB,QAAiC,EACjC,aAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;IAEtC,+EAA+E;IAC/E,2EAA2E;IAC3E,4EAA4E;IAC5E,wBAAwB;IACxB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,iIAAiI;SAClJ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,KAAK;YACL,IAAI,EAAE,2BAA2B,KAAK,mCAAmC;SAC1E,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,MAAM,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvG,IAAI,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,sDAAsD,EAAE,CAAC;IAC9G,CAAC;IAED,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,KAAK;QACL,IAAI,EAAE,GAAG,KAAK,gSAAgS;KAC/S,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,IAAsB,EAAE,OAA+B;IAChF,OAAO,OAAO,IAAI,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AACvH,CAAC;AAED,SAAS,cAAc,CAAC,IAAqB,EAAE,cAAkC;IAC/E,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAE5C,IAAI,cAAc,CAAC,cAAc,KAAK,WAAW,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxF,KAAK,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,cAAc,CAAC,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/F,KAAK,CAAC,IAAI,CACR,gCAAgC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,IAAI,qBAAqB,oDAAoD,CAC/K,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAA0B;IACjE,OAAO,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,sBAAsB,CAC7B,IAAqB,EACrB,UAAyB,EACzB,OAA0B;IAE1B,MAAM,MAAM,GAAmC,EAAE,GAAG,UAAU,EAAE,CAAC;IAEjE,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;YACpC,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,IAAI,SAAS,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YAC5F,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,sBAAsB,CAAC,IAAqB,EAAE,UAAyB;IAC9E,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAChH,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAC3C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ,CACjF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,uBAAuB,CAC/B,sBAAsB,IAAI,CAAC,EAAE,qBAAqB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,mDAAmD,QAAQ,oMAAoM,EAClU,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAChC,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,GAAG,CAAC;AACnH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CACvB,IAAqB,EACrB,UAAyB,EACzB,OAA0B;IAE1B,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACjE,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAErC,MAAM,UAAU,GAAqB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE;QACjE,mBAAmB,EAAE,OAAO,CAAC,SAAS;KACvC,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAC/B,+BAA+B,IAAI,CAAC,EAAE,aAAa,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAChJ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEhD,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,yEAAyE;IACzE,0BAA0B;IAC1B,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,iBAAiB,CAAC;IACtC,CAAC;IAED,OAAO;QACL,GAAG,UAAU,CAAC,iBAAiB;QAC/B,CAAC,cAAc,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC;KACnH,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAsB,EAAE,OAAuB;IAC/E,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEtC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,uBAAuB,CAAC,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE;QACnD,IAAI;QACJ,WAAW;QACX,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;KACvD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAE/D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;QAC1C,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,WAAW;QACX,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE;QAC/D,8EAA8E;QAC9E,SAAS,EAAE,CAAC,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,IAAI,OAAO,YAAY,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,IAAI,oBAAoB,CAC5B,6BAA6B,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,6JAA6J,OAAO,EAAE,EAC9N,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAA+B,CAAC;IAC9D,+EAA+E;IAC/E,uEAAuE;IACvE,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAE9E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;QAC5C,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,UAAU,EAAE,YAAY,CAAC,MAAM;QAC/B,cAAc,EAAE,cAAc,CAAC,cAAc;QAC7C,YAAY,EAAE,YAAY,CAAC,OAAO;QAClC,UAAU,EAAE,YAAY,CAAC,UAAU;KACpC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,WAAW;QACX,QAAQ;QACR,cAAc,EAAE,YAAY,CAAC,MAAM,CAA4B;QAC/D,QAAQ;QACR,UAAU,EAAE,YAAY,CAAC,MAAM;QAC/B,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,cAAc;QACd,YAAY;QACZ,QAAQ;QACR,SAAS,EAAE,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC;KAChD,CAAC;AACJ,CAAC"}

package/dist/gateway/transport.d.ts

@@ -0,0 +1,31 @@
+import type { IntegrationFlow, Transport } from '../catalogue/types.js';
+/**
+ * Say what `flow` actually is, and what to reach for instead.
+ *
+ * `wanted` is the transport the caller's tool or artefact kind implies, so the
+ * message names both halves of the mismatch rather than only the flow.
+ *
+ * The switch is exhaustive by construction: the `never` binding stops a third
+ * transport compiling until it has a sentence of its own, rather than letting it
+ * inherit whichever refusal happened to be written last — which is precisely how
+ * a previous transport came to be described as both a browser form and a REST API.
+ */
+export declare function describeTransportMismatch(flow: IntegrationFlow, wanted: Transport): string;
+/**
+ * Say how a flow this server has just built a payload for is actually sent.
+ *
+ * The success-path counterpart to {@link describeTransportMismatch}, which
+ * refuses. A tool that has produced a valid payload still has to say what to do
+ * with it, and that sentence was written at the call site as one ternary: a
+ * browser-form instruction for `form-post` and a JSON one for everything else,
+ * which tells the caller of any future non-JSON transport to POST JSON to an
+ * endpoint that does not parse it. The payload is correct and the advice sends
+ * it to be rejected.
+ *
+ * Both halves come from the same table as the refusals above, so a flow cannot
+ * be one thing when this server declines to perform it and another when it
+ * succeeds. The switch is exhaustive by construction for the same reason: a
+ * third transport must be given its own sentence rather than inheriting one.
+ */
+export declare function describeHowToSend(flow: IntegrationFlow): string;
+//# sourceMappingURL=transport.d.ts.map

package/dist/gateway/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/gateway/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAmBxE;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,CAe1F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CAe/D"}

package/dist/gateway/transport.js

@@ -0,0 +1,73 @@
+/**
+ * One explanation for every refusal to perform a flow the way it was asked for.
+ *
+ * Three sites used to word this themselves and disagreed: for one transport the
+ * REST client called a flow a browser form post, the checkout-form tool called
+ * the same flow a REST API, and the generator offered "rest-client" as the kind
+ * that suits it and then refused that kind. A caller following any two of them
+ * is sent in a circle between tools each blaming the other, with nothing that
+ * says what the flow actually is.
+ */
+/** How each transport reads in a sentence, so no two refusals can describe it differently. */
+const TRANSPORT_DESCRIPTION = {
+    rest: 'a server-to-server REST API',
+    'form-post': 'a browser form post',
+};
+/**
+ * Say what `flow` actually is, and what to reach for instead.
+ *
+ * `wanted` is the transport the caller's tool or artefact kind implies, so the
+ * message names both halves of the mismatch rather than only the flow.
+ *
+ * The switch is exhaustive by construction: the `never` binding stops a third
+ * transport compiling until it has a sentence of its own, rather than letting it
+ * inherit whichever refusal happened to be written last — which is precisely how
+ * a previous transport came to be described as both a browser form and a REST API.
+ */
+export function describeTransportMismatch(flow, wanted) {
+    const opening = `${flow.id} is ${TRANSPORT_DESCRIPTION[flow.transport]}, not ${TRANSPORT_DESCRIPTION[wanted]}.`;
+    switch (flow.transport) {
+        case 'rest':
+            return `${opening} Send it with jazzcash_send_gateway_request, or generate the "rest-client" artefact for it.`;
+        case 'form-post':
+            return `${opening} It cannot be performed headlessly: the customer completes it in a browser, entering an MPIN or card details. Use jazzcash_build_checkout_form, or generate the "checkout-redirect" artefact, then confirm the outcome with the Status Inquiry API.`;
+        /* c8 ignore start -- unreachable: the switch above is exhaustive, and the assignment below is what proves it */
+        default: {
+            const unreachable = flow.transport;
+            return unreachable;
+        }
+        /* c8 ignore stop */
+    }
+}
+/**
+ * Say how a flow this server has just built a payload for is actually sent.
+ *
+ * The success-path counterpart to {@link describeTransportMismatch}, which
+ * refuses. A tool that has produced a valid payload still has to say what to do
+ * with it, and that sentence was written at the call site as one ternary: a
+ * browser-form instruction for `form-post` and a JSON one for everything else,
+ * which tells the caller of any future non-JSON transport to POST JSON to an
+ * endpoint that does not parse it. The payload is correct and the advice sends
+ * it to be rejected.
+ *
+ * Both halves come from the same table as the refusals above, so a flow cannot
+ * be one thing when this server declines to perform it and another when it
+ * succeeds. The switch is exhaustive by construction for the same reason: a
+ * third transport must be given its own sentence rather than inheriting one.
+ */
+export function describeHowToSend(flow) {
+    const description = TRANSPORT_DESCRIPTION[flow.transport];
+    switch (flow.transport) {
+        case 'rest':
+            return `This flow is ${description}. Send the payload as a JSON POST body to the endpoint, or pass it to jazzcash_send_gateway_request, which validates, re-signs and sends it for you.`;
+        case 'form-post':
+            return `This flow is ${description}. Render every field as a hidden input and submit it to the endpoint, or use jazzcash_build_checkout_form, which produces that page for you.`;
+        /* c8 ignore start -- unreachable: the switch above is exhaustive, and the assignment below is what proves it */
+        default: {
+            const unreachable = flow.transport;
+            return unreachable;
+        }
+        /* c8 ignore stop */
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/gateway/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/gateway/transport.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,8FAA8F;AAC9F,MAAM,qBAAqB,GAAwC;IACjE,IAAI,EAAE,6BAA6B;IACnC,WAAW,EAAE,qBAAqB;CACnC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAqB,EAAE,MAAiB;IAChF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,EAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC;IAEhH,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,GAAG,OAAO,6FAA6F,CAAC;QACjH,KAAK,WAAW;YACd,OAAO,GAAG,OAAO,qPAAqP,CAAC;QACzQ,gHAAgH;QAChH,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC,SAAS,CAAC;YAC1C,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,oBAAoB;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE1D,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,gBAAgB,WAAW,sJAAsJ,CAAC;QAC3L,KAAK,WAAW;YACd,OAAO,gBAAgB,WAAW,8IAA8I,CAAC;QACnL,gHAAgH;QAChH,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC,SAAS,CAAC;YAC1C,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,oBAAoB;IACtB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { describeError, JazzCashError } from './errors.js';
+import { createServer, createServerDependencies } from './server.js';
+import { createLogger } from './telemetry/logger.js';
+/**
+ * Executable entry point.
+ *
+ * Nothing here may write to stdout: on the stdio transport that channel carries
+ * JSON-RPC framing. Start-up failures and signals are reported on stderr.
+ */
+async function main() {
+    // Credentials come from the process environment, which the MCP client supplies
+    // through its own `env` block, or from JAZZCASH_CREDENTIALS_FILE. The server
+    // deliberately does NOT read a `.env`: an IDE spawns it with the merchant's
+    // workspace as the working directory, so a dotenv loader would silently adopt
+    // whatever credentials that project happens to hold — possibly production.
+    // Which environment is in play must always be a decision, never a side effect.
+    const deps = createServerDependencies();
+    const server = createServer(deps);
+    const transport = new StdioServerTransport();
+    let shuttingDown = false;
+    /**
+     * Close the server and leave with an exit code that describes why.
+     *
+     * The code is a parameter rather than a hardcoded 0 because `process.exit(0)`
+     * overrides anything already recorded in `process.exitCode`: a supervisor
+     * would read a clean exit for a run that had already failed. A requested 0
+     * therefore defers to whatever the process has recorded.
+     */
+    const shutdown = (reason, requestedExitCode) => {
+        if (shuttingDown) {
+            return;
+        }
+        shuttingDown = true;
+        deps.logger.info('Shutting down', { reason, exitCode: requestedExitCode });
+        void server
+            .close()
+            .catch((error) => {
+            deps.logger.error('Error during shutdown', { error: describeError(error) });
+        })
+            .finally(() => {
+            process.exit(requestedExitCode === 0 ? process.exitCode : requestedExitCode);
+        });
+    };
+    process.on('SIGINT', (signal) => {
+        shutdown(signal, 0);
+    });
+    process.on('SIGTERM', (signal) => {
+        shutdown(signal, 0);
+    });
+    process.on('unhandledRejection', (reason) => {
+        deps.logger.error('Unhandled promise rejection', { error: describeError(reason) });
+        // A rejection nothing handled leaves the server in an unknown state. This is
+        // a payment server: continuing to accept money-moving tool calls from there
+        // is worse than stopping, so the same shutdown path runs with a failure code
+        // rather than merely recording one and serving on.
+        shutdown('unhandledRejection', 1);
+    });
+    process.on('uncaughtException', (error) => {
+        deps.logger.error('Uncaught exception', { error: describeError(error) });
+        process.exit(1);
+    });
+    await server.connect(transport);
+    deps.logger.info('JazzCash MCP server ready on stdio');
+}
+main().catch((error) => {
+    // The logger may not exist yet if configuration itself failed, so build a
+    // minimal one rather than risking a second failure.
+    const logger = createLogger({ level: 'error' });
+    const hint = error instanceof JazzCashError ? ` (${error.code})` : '';
+    logger.error(`Failed to start JazzCash MCP server${hint}`, { error: describeError(error) });
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AAEH,KAAK,UAAU,IAAI;IACjB,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB;;;;;;;OAOG;IACH,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,iBAAyB,EAAQ,EAAE;QACnE,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM;aACR,KAAK,EAAE;aACP,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,OAAO,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAsB,EAAE,EAAE;QAC9C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,MAAsB,EAAE,EAAE;QAC/C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnF,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,mDAAmD;QACnD,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAY,EAAE,EAAE;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;AACzD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,sCAAsC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/install/cli.d.ts

@@ -0,0 +1,38 @@
+import { type HarnessDescriptor, type ServerEntry } from './harnesses.js';
+/**
+ * `npm run deploy` — register this MCP server with the AI harnesses on this
+ * machine.
+ *
+ * Every write preserves the rest of the file, lands atomically, and leaves a
+ * timestamped backup beside the original. That backup is a full copy of a file
+ * that may hold credentials, so it is written owner-only and reported to the
+ * user for deletion. Nothing is installed without being asked for, either
+ * interactively or through `--target`.
+ */
+interface Options {
+    readonly targets: readonly string[];
+    readonly all: boolean;
+    readonly list: boolean;
+    readonly remove: boolean;
+    readonly dryRun: boolean;
+    readonly name: string;
+    readonly help: boolean;
+}
+export declare function parseArguments(argv: readonly string[]): Options;
+interface TargetState {
+    readonly harness: HarnessDescriptor;
+    /** Existing config files, most canonical first. Empty when none exist. */
+    readonly present: readonly string[];
+    readonly installed: boolean;
+}
+export declare function inspect(harness: HarnessDescriptor, name: string): TargetState;
+interface WriteOutcome {
+    readonly path: string;
+    readonly action: 'written' | 'would-write' | 'skipped';
+    readonly backupPath?: string;
+    readonly reason?: string;
+}
+export declare function applyToFile(harness: HarnessDescriptor, path: string, name: string, entry: ServerEntry | undefined, dryRun: boolean): WriteOutcome;
+export declare function apply(state: TargetState, name: string, remove: boolean, dryRun: boolean): readonly WriteOutcome[];
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/install/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/install/cli.ts"],"names":[],"mappings":"AAOA,OAAO,EAOL,KAAK,iBAAiB,EACtB,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;GASG;AAEH,UAAU,OAAO;IACf,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAoB/D;AAoBD,UAAU,WAAW;IACnB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAe7E;AAuCD,UAAU,YAAY;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,WAAW,CACzB,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,WAAW,GAAG,SAAS,EAC9B,MAAM,EAAE,OAAO,GACd,YAAY,CAsBd;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,YAAY,EAAE,CAcjH"}