@atbas/m-mcp 0.1.0

package/dist/tools/codegen-tools.js

@@ -0,0 +1,131 @@
+import { z } from 'zod';
+import { availableKinds, generateCode } from '../codegen/generate.js';
+import { LANGUAGES, TEMPLATE_KINDS } from '../codegen/types.js';
+import { JAZZCASH_ENVIRONMENTS } from '../config/environment.js';
+import { JazzCashValidationError } from '../errors.js';
+import { describeHowToSend } from '../gateway/transport.js';
+import { citations, resolveEnvironment, safeHandler, toolResult } from './tool-kit.js';
+/**
+ * Code generation tools.
+ *
+ * Generated code deliberately diverges from the official samples where those
+ * samples are defective: strict emptiness tests, deterministic sorting, escaped
+ * HTML output, and server-side hashing for the wallet-linking form.
+ */
+const FENCE_BY_LANGUAGE = {
+    php: 'php',
+    node: 'javascript',
+    python: 'python',
+};
+function renderResult(result, docRefs) {
+    return [
+        `# ${result.kind} for ${result.flowId} (${result.language})`,
+        '',
+        ...result.files.flatMap((file) => [
+            `## ${file.path}`,
+            '',
+            `\`\`\`${FENCE_BY_LANGUAGE[file.language]}`,
+            file.contents,
+            '```',
+            '',
+        ]),
+        '## Still to do',
+        result.followUp.map((step, index) => `${String(index + 1)}. ${step}`).join('\n'),
+        '',
+        '## .env fragment',
+        '```',
+        result.envExample,
+        '```',
+        citations(docRefs),
+    ].join('\n');
+}
+export const registerGenerateIntegrationCode = (server, deps) => {
+    server.registerTool('jazzcash_generate_integration_code', {
+        title: 'Generate JazzCash integration code',
+        description: 'Generate working PHP, Node.js or Python for a flow: hosted checkout, REST client, or the wallet-linking form. The parameter list comes from the flow specification, so it cannot drift from the documented field set, and the known defects in the official samples are corrected.',
+        inputSchema: {
+            flowId: z.string().describe('Flow to generate for, e.g. "mwallet-rest-v1.1".'),
+            language: z.enum(LANGUAGES).describe('php, node or python.'),
+            kind: z
+                .enum(TEMPLATE_KINDS)
+                .optional()
+                .describe('Artefact to generate. Defaults to the one that suits the flow: checkout-redirect, rest-client or wallet-linking.'),
+            environment: z
+                .enum(JAZZCASH_ENVIRONMENTS)
+                .optional()
+                .describe('Which endpoint to embed. Both environments share the same URL, so this only affects the comments.'),
+        },
+    }, safeHandler(deps, 'jazzcash_generate_integration_code', ({ flowId, language, kind, environment }) => {
+        const flow = deps.catalogue.get(flowId);
+        const resolvedKind = kind ?? availableKinds(flow)[0];
+        // Required by the type and unreachable today: every shipped transport has
+        // an artefact kind, so `availableKinds` is currently total. It is kept
+        // rather than asserted away because a transport nothing here generates for
+        // must refuse in words rather than crash — a bare `Error` named the
+        // outcome and withheld the reason, leaving the caller to guess whether the
+        // flow, the language or the server was at fault.
+        /* c8 ignore next 6 -- unreachable while every transport has an artefact kind */
+        if (resolvedKind === undefined) {
+            throw new JazzCashValidationError(`There is no artefact kind to generate for ${flow.id}. ${describeHowToSend(flow)}`, { details: { flowId: flow.id, transport: flow.transport } });
+        }
+        const result = generateCode({
+            flow,
+            language,
+            kind: resolvedKind,
+            environment: resolveEnvironment(deps, environment),
+        });
+        return toolResult(renderResult(result, flow.docRefs), {
+            structuredContent: {
+                flowId: result.flowId,
+                language: result.language,
+                kind: result.kind,
+                files: result.files,
+                followUp: result.followUp,
+                envExample: result.envExample,
+            },
+        });
+    }));
+};
+export const registerGenerateIpnHandler = (server, deps) => {
+    server.registerTool('jazzcash_generate_ipn_handler', {
+        title: 'Generate a JazzCash IPN listener',
+        description: 'Generate an Instant Payment Notification listener that verifies pp_SecureHash before acting, is idempotent against the documented two retries, and acknowledges with pp_ResponseCode "000" inside the 60-second window. IPN is a mandatory integration.',
+        inputSchema: {
+            language: z.enum(LANGUAGES).describe('php, node or python.'),
+            framework: z
+                .string()
+                .optional()
+                .describe('Web framework, e.g. "Express", "Flask", "Laravel". Affects comments and routing only. The name is rendered inside a comment in the generated file, so it is reduced to letters, digits and simple punctuation first: anything else, including a comment terminator, is dropped.'),
+            flowId: z
+                .string()
+                .optional()
+                .describe('Flow whose notifications this listens for. Defaults to mwallet-rest-v1.1, whose IPN shape the guide documents.'),
+        },
+    }, safeHandler(deps, 'jazzcash_generate_ipn_handler', ({ language, framework, flowId }) => {
+        const flow = deps.catalogue.get(flowId ?? 'mwallet-rest-v1.1');
+        const result = generateCode({
+            flow,
+            language,
+            kind: 'ipn-handler',
+            environment: deps.config.defaultEnvironment,
+            framework,
+        });
+        const ipnDocRef = [{ docId: 'ipn-implementation', sectionId: 'handler-checklist' }];
+        return toolResult([
+            renderResult(result, ipnDocRef),
+            '',
+            '## Register the URL',
+            'Open Integration → Credentials in the merchant portal and set the IPN URL to the public address of this endpoint.',
+            'For WooCommerce the documented path is `{yourBaseURL}/jazzcash_ipn_v2`.',
+        ].join('\n'), {
+            structuredContent: {
+                language: result.language,
+                framework: framework ?? null,
+                files: result.files,
+                followUp: result.followUp,
+                envExample: result.envExample,
+            },
+        });
+    }));
+};
+//# sourceMappingURL=codegen-tools.js.map

package/dist/tools/codegen-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codegen-tools.js","sourceRoot":"","sources":["../../src/tools/codegen-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAqC,MAAM,qBAAqB,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEvF;;;;;;GAMG;AAEH,MAAM,iBAAiB,GAAuC;IAC5D,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,SAAS,YAAY,CACnB,MAAqB,EACrB,OAAqE;IAErE,OAAO;QACL,KAAK,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,GAAG;QAC5D,EAAE;QACF,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,IAAI,EAAE;YACjB,EAAE;YACF,SAAS,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC3C,IAAI,CAAC,QAAQ;YACb,KAAK;YACL,EAAE;SACH,CAAC;QACF,gBAAgB;QAChB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAChF,EAAE;QACF,kBAAkB;QAClB,KAAK;QACL,MAAM,CAAC,UAAU;QACjB,KAAK;QACL,SAAS,CAAC,OAAO,CAAC;KACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;IACzE,MAAM,CAAC,YAAY,CACjB,oCAAoC,EACpC;QACE,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,oRAAoR;QACtR,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;YAC9E,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC5D,IAAI,EAAE,CAAC;iBACJ,IAAI,CAAC,cAAc,CAAC;iBACpB,QAAQ,EAAE;iBACV,QAAQ,CACP,kHAAkH,CACnH;YACH,WAAW,EAAE,CAAC;iBACX,IAAI,CAAC,qBAAqB,CAAC;iBAC3B,QAAQ,EAAE;iBACV,QAAQ,CACP,mGAAmG,CACpG;SACJ;KACF,EACD,WAAW,CAAC,IAAI,EAAE,oCAAoC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;QAClG,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAErD,0EAA0E;QAC1E,uEAAuE;QACvE,2EAA2E;QAC3E,oEAAoE;QACpE,2EAA2E;QAC3E,iDAAiD;QACjD,gFAAgF;QAChF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,uBAAuB,CAC/B,6CAA6C,IAAI,CAAC,EAAE,KAAK,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAClF,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,IAAI;YACJ,QAAQ;YACR,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC;SACnD,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YACpD,iBAAiB,EAAE;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;IACpE,MAAM,CAAC,YAAY,CACjB,+BAA+B,EAC/B;QACE,KAAK,EAAE,kCAAkC;QACzC,WAAW,EACT,yPAAyP;QAC3P,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAC5D,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,iRAAiR,CAClR;YACH,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,gHAAgH,CACjH;SACJ;KACF,EACD,WAAW,CAAC,IAAI,EAAE,+BAA+B,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;QACrF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,IAAI;YACJ,QAAQ;YACR,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YAC3C,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAEpF,OAAO,UAAU,CACf;YACE,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC;YAC/B,EAAE;YACF,qBAAqB;YACrB,mHAAmH;YACnH,yEAAyE;SAC1E,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;YACE,iBAAiB,EAAE;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,SAAS,IAAI,IAAI;gBAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CACF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC"}

package/dist/tools/credential-tools.d.ts

@@ -0,0 +1,32 @@
+import { type CoreToolDescriptor } from './descriptor.js';
+/**
+ * The tools that cannot run without a merchant credential.
+ *
+ * Written out here rather than filtered from the full descriptor list, and
+ * imported from this narrow module rather than from `./register.js`, because
+ * this list is what the published connector is built from. Reaching it through
+ * `./register.js` would put every other tool's registrar in the same module
+ * graph — the corpus loader, the search index, the code generators, the
+ * diagnostics — and a merchant installing four credential tools would receive
+ * all of it.
+ *
+ * A deployment that holds no credential must not offer these: the tool would
+ * fail on every call at best, and at worst would run against a credential that
+ * belongs to somebody other than the caller.
+ *
+ * Each descriptor is also exported on its own, because `./register.js` places
+ * these four among the credential-free ones in group order and needs to name
+ * them individually to do it. Sharing the objects rather than restating them is
+ * what makes the two lists the same descriptors rather than two descriptions of
+ * the same tools. `tests/tools/register.test.ts` asserts both halves of that:
+ * that this list and the `requiresCredentials` flag select the same tools, and
+ * that they select the same *objects* — a name comparison alone could not tell a
+ * shared descriptor from a duplicate carrying a different registrar.
+ */
+export declare const BUILD_TRANSACTION_PARAMETERS: CoreToolDescriptor;
+export declare const SEND_GATEWAY_REQUEST: CoreToolDescriptor;
+export declare const RUN_SANDBOX_SMOKE_TEST: CoreToolDescriptor;
+export declare const BUILD_CHECKOUT_FORM: CoreToolDescriptor;
+/** Listed in the order they appear in `TOOL_DESCRIPTORS`. */
+export declare const CREDENTIAL_TOOLS: readonly CoreToolDescriptor[];
+//# sourceMappingURL=credential-tools.d.ts.map

package/dist/tools/credential-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-tools.d.ts","sourceRoot":"","sources":["../../src/tools/credential-tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAG1D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,eAAO,MAAM,4BAA4B,EAAE,kBAO1C,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,kBAMlC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,kBAOpC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,kBAMjC,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,EAAE,SAAS,kBAAkB,EAKzD,CAAC"}

package/dist/tools/credential-tools.js

@@ -0,0 +1,65 @@
+import { registerBuildTransactionParameters } from './build-transaction-parameters.js';
+import {} from './descriptor.js';
+import { registerBuildCheckoutForm, registerRunSandboxSmokeTest, registerSendGatewayRequest } from './gateway-tools.js';
+/**
+ * The tools that cannot run without a merchant credential.
+ *
+ * Written out here rather than filtered from the full descriptor list, and
+ * imported from this narrow module rather than from `./register.js`, because
+ * this list is what the published connector is built from. Reaching it through
+ * `./register.js` would put every other tool's registrar in the same module
+ * graph — the corpus loader, the search index, the code generators, the
+ * diagnostics — and a merchant installing four credential tools would receive
+ * all of it.
+ *
+ * A deployment that holds no credential must not offer these: the tool would
+ * fail on every call at best, and at worst would run against a credential that
+ * belongs to somebody other than the caller.
+ *
+ * Each descriptor is also exported on its own, because `./register.js` places
+ * these four among the credential-free ones in group order and needs to name
+ * them individually to do it. Sharing the objects rather than restating them is
+ * what makes the two lists the same descriptors rather than two descriptions of
+ * the same tools. `tests/tools/register.test.ts` asserts both halves of that:
+ * that this list and the `requiresCredentials` flag select the same tools, and
+ * that they select the same *objects* — a name comparison alone could not tell a
+ * shared descriptor from a duplicate carrying a different registrar.
+ */
+export const BUILD_TRANSACTION_PARAMETERS = {
+    // `deps.credentials.get(environment)` on every path: the payload is signed
+    // with the configured Integrity Salt and carries the merchant password.
+    name: 'jazzcash_build_transaction_parameters',
+    registrar: registerBuildTransactionParameters,
+    group: 'hash',
+    requiresCredentials: true,
+};
+export const SEND_GATEWAY_REQUEST = {
+    // `executeFlow` → `guardGatewayCall` → `deps.credentials.get`.
+    name: 'jazzcash_send_gateway_request',
+    registrar: registerSendGatewayRequest,
+    group: 'gateway',
+    requiresCredentials: true,
+};
+export const RUN_SANDBOX_SMOKE_TEST = {
+    // Runs the guard for its credential resolution even though the sandbox-only
+    // schema means the live opt-in can never fire.
+    name: 'jazzcash_run_sandbox_smoke_test',
+    registrar: registerRunSandboxSmokeTest,
+    group: 'gateway',
+    requiresCredentials: true,
+};
+export const BUILD_CHECKOUT_FORM = {
+    // `guardGatewayCall`, and the page it writes embeds the merchant password.
+    name: 'jazzcash_build_checkout_form',
+    registrar: registerBuildCheckoutForm,
+    group: 'gateway',
+    requiresCredentials: true,
+};
+/** Listed in the order they appear in `TOOL_DESCRIPTORS`. */
+export const CREDENTIAL_TOOLS = [
+    BUILD_TRANSACTION_PARAMETERS,
+    SEND_GATEWAY_REQUEST,
+    RUN_SANDBOX_SMOKE_TEST,
+    BUILD_CHECKOUT_FORM,
+];
+//# sourceMappingURL=credential-tools.js.map

package/dist/tools/credential-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-tools.js","sourceRoot":"","sources":["../../src/tools/credential-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAA2B,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAExH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAuB;IAC9D,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,EAAE,uCAAuC;IAC7C,SAAS,EAAE,kCAAkC;IAC7C,KAAK,EAAE,MAAM;IACb,mBAAmB,EAAE,IAAI;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAuB;IACtD,+DAA+D;IAC/D,IAAI,EAAE,+BAA+B;IACrC,SAAS,EAAE,0BAA0B;IACrC,KAAK,EAAE,SAAS;IAChB,mBAAmB,EAAE,IAAI;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAuB;IACxD,4EAA4E;IAC5E,+CAA+C;IAC/C,IAAI,EAAE,iCAAiC;IACvC,SAAS,EAAE,2BAA2B;IACtC,KAAK,EAAE,SAAS;IAChB,mBAAmB,EAAE,IAAI;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAuB;IACrD,2EAA2E;IAC3E,IAAI,EAAE,8BAA8B;IACpC,SAAS,EAAE,yBAAyB;IACpC,KAAK,EAAE,SAAS;IAChB,mBAAmB,EAAE,IAAI;CAC1B,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAkC;IAC7D,4BAA4B;IAC5B,oBAAoB;IACpB,sBAAsB;IACtB,mBAAmB;CACpB,CAAC"}

package/dist/tools/descriptor.d.ts

@@ -0,0 +1,52 @@
+import type { CoreRegistrar } from '../core/registry.js';
+/**
+ * The facts about a tool that no consumer can derive for itself, and the
+ * descriptor shape for the tools that need no documentation corpus.
+ *
+ * Split out of `./register.js` so that a consumer needing only the credential
+ * half — the published connector, which serves those four tools on a merchant's
+ * own machine — can reach the descriptors without importing the module that
+ * references every registrar in the project. That import is not free: it would
+ * pull the corpus loader, the search index, the code generators and the
+ * diagnostics into a package built for four tools that read none of them.
+ */
+/** The functional families a tool belongs to. Used for scoping, not for safety. */
+export type ToolGroup = 'knowledge' | 'hash' | 'codegen' | 'gateway' | 'diagnostics';
+/**
+ * What a descriptor records about a tool, apart from how to register it.
+ *
+ * A registrar names its tool inline, so until the descriptor list existed
+ * nothing outside a tool module knew a tool's name or whether it needs a
+ * merchant credential to run. Every consumer that has to answer one of those
+ * questions — a hosted endpoint deciding what to expose, a connector deciding
+ * what to serve locally — would otherwise keep its own copy of the answer, and a
+ * copy is what drifts.
+ */
+export interface ToolFacts {
+    /** The name the registrar passes to `server.registerTool`, character for character. */
+    readonly name: string;
+    readonly group: ToolGroup;
+    /**
+     * True when the tool cannot run without a configured `CredentialProfile`.
+     *
+     * Read from the handler, never inferred from `group` — see the note above the
+     * descriptor list in `./register.js`.
+     */
+    readonly requiresCredentials: boolean;
+}
+/**
+ * A tool that needs a merchant credential and reads no documentation corpus.
+ *
+ * Both halves of that sentence are enforced by the type rather than asserted in
+ * prose: `requiresCredentials` is narrowed to `true`, and the registrar is a
+ * {@link CoreRegistrar}, so a handler that reaches for `deps.corpus`,
+ * `deps.search` or `deps.symptoms` fails to compile. The two travel together
+ * because the same four tools satisfy both, and because the published connector
+ * relies on both at once: it serves exactly the credential tools, and it is
+ * built without a corpus to serve them from.
+ */
+export interface CoreToolDescriptor extends ToolFacts {
+    readonly registrar: CoreRegistrar;
+    readonly requiresCredentials: true;
+}
+//# sourceMappingURL=descriptor.d.ts.map

package/dist/tools/descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.d.ts","sourceRoot":"","sources":["../../src/tools/descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;;;;GAUG;AAEH,mFAAmF;AACnF,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;AAErF;;;;;;;;;GASG;AACH,MAAM,WAAW,SAAS;IACxB,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC;CACpC"}

package/dist/tools/descriptor.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=descriptor.js.map

package/dist/tools/descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.js","sourceRoot":"","sources":["../../src/tools/descriptor.ts"],"names":[],"mappings":""}

package/dist/tools/diagnostic-tools.d.ts

@@ -0,0 +1,3 @@
+import type { Registrar } from '../registry.js';
+export declare const registerDiagnoseIntegrationIssue: Registrar;
+//# sourceMappingURL=diagnostic-tools.d.ts.map

package/dist/tools/diagnostic-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic-tools.d.ts","sourceRoot":"","sources":["../../src/tools/diagnostic-tools.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAqBhD,eAAO,MAAM,gCAAgC,EAAE,SAyJ9C,CAAC"}

package/dist/tools/diagnostic-tools.js

@@ -0,0 +1,128 @@
+import { z } from 'zod';
+import { forensicProvenance, requestHashOptions } from '../catalogue/hash-options.js';
+import { classifyResponse } from '../domain/response-codes.js';
+import { diagnoseHashMismatch } from '../domain/secure-hash.js';
+import { formatValidationResult, validatePayload } from '../validation/payload-validator.js';
+import { citations, resolveEnvironment, resolveIntegritySalt, safeHandler, toolResult } from './tool-kit.js';
+/**
+ * Triage tool.
+ *
+ * Where a payload is supplied it does not guess: it runs the validator and the
+ * hash diagnosis and reports what they actually found. The symptom knowledge
+ * base is the fallback for when there is nothing concrete to inspect.
+ */
+function renderSymptom(symptom) {
+    return [
+        `### ${symptom.title}`,
+        ...symptom.causes.map((cause, index) => `${String(index + 1)}. **${cause.cause}**\n   Check: ${cause.check}\n   Fix: ${cause.fix}`),
+    ].join('\n');
+}
+export const registerDiagnoseIntegrationIssue = (server, deps) => {
+    server.registerTool('jazzcash_diagnose_integration_issue', {
+        title: 'Diagnose a JazzCash integration problem',
+        description: 'Triage an integration failure. Given a payload or a response it runs the real validator and hash diagnosis rather than guessing; given only a description it returns ranked causes from the documented failure modes, each with a check and a fix.',
+        inputSchema: {
+            symptom: z
+                .string()
+                .optional()
+                .describe('What you observe, in your own words, e.g. "hash mismatch on every request".'),
+            flowId: z
+                .string()
+                .optional()
+                .describe('Flow being integrated, e.g. "mwallet-rest-v1.1". Enables payload validation.'),
+            requestPayload: z
+                .record(z.string(), z.union([z.string(), z.number(), z.null()]))
+                .optional()
+                .describe('The request you sent, including pp_SecureHash if you have it.'),
+            responsePayload: z
+                .record(z.string(), z.union([z.string(), z.number(), z.null()]))
+                .optional()
+                .describe('The response you received.'),
+            errorText: z.string().optional().describe('Any error message or code the gateway returned.'),
+        },
+    }, safeHandler(deps, 'jazzcash_diagnose_integration_issue', ({ symptom, flowId, requestPayload, responsePayload, errorText }) => {
+        const sections = ['# JazzCash integration diagnosis'];
+        const findings = {};
+        const docRefs = [];
+        const flow = flowId === undefined ? undefined : deps.catalogue.get(flowId);
+        // 1. Concrete evidence first: validate the actual payload.
+        if (flow !== undefined && requestPayload !== undefined) {
+            const environment = resolveEnvironment(deps, undefined);
+            const registeredReturnUrl = deps.credentials.has(environment)
+                ? deps.credentials.get(environment).returnUrl
+                : undefined;
+            const validation = validatePayload(flow, requestPayload, { registeredReturnUrl });
+            findings['validation'] = {
+                valid: validation.valid,
+                errors: validation.errors,
+                warnings: validation.warnings,
+            };
+            sections.push('## Payload validation', formatValidationResult(validation));
+            docRefs.push(...flow.docRefs);
+        }
+        // 2. If a hash was supplied, demonstrate what produced it.
+        const suppliedHash = requestPayload?.['pp_SecureHash'];
+        if (flow !== undefined &&
+            requestPayload !== undefined &&
+            typeof suppliedHash === 'string' &&
+            suppliedHash !== '') {
+            const environment = resolveEnvironment(deps, undefined);
+            const { salt } = resolveIntegritySalt(deps, undefined, environment);
+            const { pp_SecureHash: _supplied, ...withoutHash } = requestPayload;
+            // A request, so the construction is the flow's own declared one and a
+            // variant that reproduces the merchant's hash is a demonstration
+            // rather than a guess. Passed explicitly rather than left to a
+            // default, because the value that reports less is the safe one: a
+            // call site that says nothing must not be the one that accuses.
+            const diagnosis = diagnoseHashMismatch(withoutHash, salt, suppliedHash, requestHashOptions(flow), forensicProvenance(flow, 'request'));
+            findings['hash'] = {
+                matches: diagnosis.matches,
+                hypotheses: diagnosis.hypotheses.map((entry) => ({ id: entry.id, confidence: entry.confidence })),
+            };
+            sections.push('## Secure hash', diagnosis.matches
+                ? 'The supplied pp_SecureHash matches a hash computed from this payload. The hash is not the problem.'
+                : [
+                    diagnosis.summary,
+                    '',
+                    diagnosis.hypotheses
+                        .map((entry) => `- **${entry.label}** (${entry.confidence})\n  Fix: ${entry.fix}`)
+                        .join('\n'),
+                ].join('\n'));
+        }
+        // 3. Interpret the response.
+        if (responsePayload !== undefined) {
+            // The flow's own success contract, where a flow was named. Without it
+            // a declined card reads as "no recognisable response code field" and
+            // the merchant is sent to Status Inquiry instead of being told not to
+            // release the goods — on the tool they reach for after a payment has
+            // already gone wrong.
+            const classification = classifyResponse(responsePayload, flow?.responseContext ?? 'inquiry', flow?.response);
+            findings['response'] = { classification: classification.classification, reason: classification.reason };
+            sections.push('## Response', `Outcome: **${classification.classification}** — ${classification.reason}`, classification.nextSteps.map((step) => `- ${step}`).join('\n'));
+        }
+        // 4. Fall back to the documented failure modes.
+        const description = [symptom, errorText].filter((part) => part !== undefined && part !== '').join(' ');
+        const matches = description === '' ? [] : deps.symptoms.match(description);
+        if (matches.length > 0) {
+            findings['symptoms'] = matches.map((match) => match.symptom.id);
+            sections.push('## Documented failure modes matching your description', matches.map((match) => renderSymptom(match.symptom)).join('\n\n'));
+            for (const match of matches) {
+                docRefs.push(...deps.symptoms.docRefsFor(match.symptom));
+            }
+        }
+        if (sections.length === 1) {
+            sections.push('', 'Nothing to diagnose from the information supplied.', '', 'Supply at least one of: a description of what you observe, the request payload with its flowId, or the response you received.', '', `Documented failure modes: ${deps.symptoms
+                .symptoms()
+                .map((entry) => entry.title)
+                .join('; ')}.`);
+        }
+        return toolResult(`${sections.join('\n\n')}${citations(docRefs)}`, { structuredContent: findings });
+    }, 
+    // Both payloads, refused before either is validated or hashed. A triage
+    // tool is where a merchant is most likely to paste a whole failing
+    // request, so it is the likeliest route for a PAN to arrive. An unknown
+    // flowId is still the handler's to report: the wrapper looks the flow up
+    // tolerantly, so this call answers a refusal with the refusal.
+    { payloadArguments: ['requestPayload', 'responsePayload'], flowFrom: 'flowId' }));
+};
+//# sourceMappingURL=diagnostic-tools.js.map

package/dist/tools/diagnostic-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostic-tools.js","sourceRoot":"","sources":["../../src/tools/diagnostic-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE7G;;;;;;GAMG;AAEH,SAAS,aAAa,CAAC,OAA0B;IAC/C,OAAO;QACL,OAAO,OAAO,CAAC,KAAK,EAAE;QACtB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CACnB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,iBAAiB,KAAK,CAAC,KAAK,aAAa,KAAK,CAAC,GAAG,EAAE,CAC7G;KACF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;IAC1E,MAAM,CAAC,YAAY,CACjB,qCAAqC,EACrC;QACE,KAAK,EAAE,yCAAyC;QAChD,WAAW,EACT,oPAAoP;QACtP,WAAW,EAAE;YACX,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,6EAA6E,CAAC;YAC1F,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8EAA8E,CAAC;YAC3F,cAAc,EAAE,CAAC;iBACd,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBAC/D,QAAQ,EAAE;iBACV,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,eAAe,EAAE,CAAC;iBACf,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBAC/D,QAAQ,EAAE;iBACV,QAAQ,CAAC,4BAA4B,CAAC;YACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;SAC7F;KACF,EACD,WAAW,CACT,IAAI,EACJ,qCAAqC,EACrC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,EAAE,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAa,CAAC,kCAAkC,CAAC,CAAC;QAChE,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAwD,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE3E,2DAA2D;QAC3D,IAAI,IAAI,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACxD,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC3D,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,SAAS;gBAC7C,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAClF,QAAQ,CAAC,YAAY,CAAC,GAAG;gBACvB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;aAC9B,CAAC;YAEF,QAAQ,CAAC,IAAI,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAED,2DAA2D;QAC3D,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC;QACvD,IACE,IAAI,KAAK,SAAS;YAClB,cAAc,KAAK,SAAS;YAC5B,OAAO,YAAY,KAAK,QAAQ;YAChC,YAAY,KAAK,EAAE,EACnB,CAAC;YACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACxD,MAAM,EAAE,IAAI,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YACpE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,GAAG,cAAc,CAAC;YAEpE,sEAAsE;YACtE,iEAAiE;YACjE,+DAA+D;YAC/D,kEAAkE;YAClE,gEAAgE;YAChE,MAAM,SAAS,GAAG,oBAAoB,CACpC,WAAW,EACX,IAAI,EACJ,YAAY,EACZ,kBAAkB,CAAC,IAAI,CAAC,EACxB,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CACpC,CAAC;YACF,QAAQ,CAAC,MAAM,CAAC,GAAG;gBACjB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;aAClG,CAAC;YAEF,QAAQ,CAAC,IAAI,CACX,gBAAgB,EAChB,SAAS,CAAC,OAAO;gBACf,CAAC,CAAC,oGAAoG;gBACtG,CAAC,CAAC;oBACE,SAAS,CAAC,OAAO;oBACjB,EAAE;oBACF,SAAS,CAAC,UAAU;yBACjB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,UAAU,aAAa,KAAK,CAAC,GAAG,EAAE,CAAC;yBACjF,IAAI,CAAC,IAAI,CAAC;iBACd,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CAAC;QACJ,CAAC;QAED,6BAA6B;QAC7B,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,sEAAsE;YACtE,qEAAqE;YACrE,sEAAsE;YACtE,qEAAqE;YACrE,sBAAsB;YACtB,MAAM,cAAc,GAAG,gBAAgB,CAAC,eAAe,EAAE,IAAI,EAAE,eAAe,IAAI,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7G,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;YAExG,QAAQ,CAAC,IAAI,CACX,aAAa,EACb,cAAc,cAAc,CAAC,cAAc,QAAQ,cAAc,CAAC,MAAM,EAAE,EAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/D,CAAC;QACJ,CAAC;QAED,gDAAgD;QAChD,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE3E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAChE,QAAQ,CAAC,IAAI,CACX,uDAAuD,EACvD,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAClE,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CACX,EAAE,EACF,oDAAoD,EACpD,EAAE,EACF,+HAA+H,EAC/H,EAAE,EACF,6BAA6B,IAAI,CAAC,QAAQ;iBACvC,QAAQ,EAAE;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;iBAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,wEAAwE;IACxE,mEAAmE;IACnE,wEAAwE;IACxE,yEAAyE;IACzE,+DAA+D;IAC/D,EAAE,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAChF,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/tools/gateway-tools.d.ts

@@ -0,0 +1,6 @@
+import type { CoreRegistrar } from '../core/registry.js';
+export declare const registerSendGatewayRequest: CoreRegistrar;
+export declare const registerRunSandboxSmokeTest: CoreRegistrar;
+export declare const registerBuildCheckoutForm: CoreRegistrar;
+export declare const registerVerifyIpnNotification: CoreRegistrar;
+//# sourceMappingURL=gateway-tools.d.ts.map

package/dist/tools/gateway-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-tools.d.ts","sourceRoot":"","sources":["../../src/tools/gateway-tools.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAgEzD,eAAO,MAAM,0BAA0B,EAAE,aAkDxC,CAAC;AAcF,eAAO,MAAM,2BAA2B,EAAE,aAuFzC,CAAC;AAEF,eAAO,MAAM,yBAAyB,EAAE,aAgHvC,CAAC;AAwBF,eAAO,MAAM,6BAA6B,EAAE,aAwH3C,CAAC"}