@atbas/m-mcp 0.1.0

package/dist/tools/gateway-tools.js

@@ -0,0 +1,381 @@
+import { z } from 'zod';
+import { buildTransaction } from '../builder/transaction-builder.js';
+import { resolveEndpoint } from '../catalogue/endpoints.js';
+import { UNKNOWN_FLOW_RESPONSE_HASH_OPTIONS } from '../catalogue/hash-options.js';
+import { JAZZCASH_ENVIRONMENTS } from '../config/environment.js';
+import { classifyResponse } from '../domain/response-codes.js';
+import { computeSecureHash, hashesMatch } from '../domain/secure-hash.js';
+import { minutesSinceTxnDateTime, STATUS_INQUIRY_MINIMUM_WAIT_MINUTES } from '../domain/datetime.js';
+import { JazzCashValidationError } from '../errors.js';
+import { renderCheckoutForm } from '../gateway/checkout-form.js';
+import { resolveCheckoutTarget, writeCheckoutForm } from '../gateway/checkout-output.js';
+import { guardGatewayCall } from '../gateway/guards.js';
+import { executeFlow } from '../gateway/rest-client.js';
+import { describeTransportMismatch } from '../gateway/transport.js';
+import { formatValidationResult } from '../validation/payload-validator.js';
+import { bulletList, citations, resolveEnvironment, resolveIntegritySalt, safeHandler, toolResult, } from './tool-kit.js';
+/**
+ * Gateway execution tools.
+ *
+ * These are the only tools that reach the network, and the only ones that can
+ * move money. Every one of them requires an explicit environment.
+ */
+const environmentSchema = z
+    .enum(JAZZCASH_ENVIRONMENTS)
+    .describe('REQUIRED. Which credential profile to use. Sandbox and production share the same URL, so this cannot be inferred.');
+const confirmLiveSchema = z
+    .boolean()
+    .optional()
+    .describe('Must be true to run a money-moving flow against production. The server must also have been started with JAZZCASH_ALLOW_LIVE=true.');
+function renderCallResult(result) {
+    return [
+        `# ${result.flowId} — ${result.classification.classification.toUpperCase()}`,
+        '',
+        result.warnings.length > 0 ? `${bulletList(result.warnings)}\n` : '',
+        `Environment: ${result.environment}`,
+        `Endpoint:    ${result.endpoint}`,
+        `HTTP:        ${String(result.httpStatus)} in ${String(result.durationMs)} ms`,
+        '',
+        '## Outcome',
+        result.classification.reason,
+        result.classification.message === undefined ? '' : `Gateway message: ${result.classification.message}`,
+        '',
+        '## Response',
+        '```json',
+        JSON.stringify(result.response, null, 2),
+        '```',
+        '',
+        `## Response hash: ${result.responseHash.verdict}`,
+        result.responseHash.note,
+        '',
+        '## Next steps',
+        bulletList([...result.nextSteps]),
+        '',
+        '## Request sent (credentials redacted)',
+        '```json',
+        JSON.stringify(result.requestPreview, null, 2),
+        '```',
+    ]
+        .filter((line) => line !== '')
+        .join('\n');
+}
+export const registerSendGatewayRequest = (server, deps) => {
+    server.registerTool('jazzcash_send_gateway_request', {
+        title: 'Send a request to the JazzCash gateway',
+        description: 'Validate, sign and send a REST request, then verify the response hash and classify the outcome. Covers MWallet payments, token payment, token inquiry and delete, status inquiry, and all refund variants. Requires an explicit environment; production money movement requires a dual opt-in.',
+        inputSchema: {
+            flowId: z.string().describe('REST flow to call, e.g. "status-inquiry-v2.0".'),
+            environment: environmentSchema,
+            parameters: z
+                .record(z.string(), z.union([z.string(), z.number(), z.null()]))
+                .describe('Complete payload WITHOUT pp_SecureHash, which is computed here. Use jazzcash_build_transaction_parameters to assemble it.'),
+            confirmLiveEnvironment: confirmLiveSchema,
+        },
+    }, safeHandler(deps, 'jazzcash_send_gateway_request', async ({ flowId, environment, parameters, confirmLiveEnvironment }) => {
+        const flow = deps.catalogue.get(flowId);
+        const result = await executeFlow(deps, {
+            flow,
+            environment,
+            parameters,
+            confirmLiveEnvironment,
+        });
+        return toolResult(`${renderCallResult(result)}${citations(flow.docRefs)}`, {
+            structuredContent: {
+                flowId: result.flowId,
+                environment: result.environment,
+                classification: result.classification.classification,
+                httpStatus: result.httpStatus,
+                response: result.response,
+                responseHash: result.responseHash,
+                nextSteps: result.nextSteps,
+                warnings: result.warnings,
+            },
+        });
+    }, 
+    // Refused before the payload is signed or transmitted. This is the tool
+    // that would otherwise put the value on the wire as well as in the
+    // transcript, and echo it back in the request preview.
+    { payloadArguments: ['parameters'], flowFrom: 'flowId' }));
+};
+/**
+ * Sandbox is the only environment this tool accepts.
+ *
+ * The name, title and description all promise a sandbox test, so accepting
+ * `production` would make a money-moving call reachable from a tool nobody reads
+ * as dangerous. A live transaction is a deliberate act and belongs in
+ * `jazzcash_send_gateway_request`, which says so in its own description.
+ */
+const sandboxOnlySchema = z
+    .literal('sandbox')
+    .describe('REQUIRED. Must be "sandbox". Use jazzcash_send_gateway_request for a production transaction.');
+export const registerRunSandboxSmokeTest = (server, deps) => {
+    server.registerTool('jazzcash_run_sandbox_smoke_test', {
+        title: 'Run a JazzCash sandbox smoke test',
+        description: 'Build, validate, sign, send and interpret one SANDBOX transaction in a single step, then say exactly how to confirm the outcome. The fastest way to prove an integration works end to end. Sandbox only: production is refused, so use jazzcash_send_gateway_request with its dual opt-in for a live transaction.',
+        inputSchema: {
+            flowId: z.string().describe('REST flow to exercise, e.g. "mwallet-rest-v1.1".'),
+            environment: sandboxOnlySchema,
+            amount: z.union([z.string(), z.number()]).optional().describe('Amount in major units, e.g. "1.00".'),
+            description: z.string().optional().describe('Order description.'),
+            extras: z
+                .record(z.string(), z.string())
+                .optional()
+                .describe('Flow-specific fields, e.g. { "ppmpf_1": "03123456789" } or { "pp_CNIC": "123456" }.'),
+        },
+    }, safeHandler(deps, 'jazzcash_run_sandbox_smoke_test', async ({ flowId, environment, amount, description, extras }) => {
+        const flow = deps.catalogue.get(flowId);
+        // `environment` is pinned to sandbox by the schema, so the live opt-in can
+        // never be satisfied here; the guard still runs for its credential and
+        // refund-capability checks.
+        const { profile } = guardGatewayCall(deps, { flow, environment, confirmLiveEnvironment: undefined });
+        const built = buildTransaction(flow, { amount: amount ?? '1.00', description: description ?? 'JazzCash MCP smoke test', extras }, profile);
+        if (!built.validation.valid) {
+            return toolResult([
+                `Could not build a ${flow.id} payload, so nothing was sent.`,
+                '',
+                formatValidationResult(built.validation),
+            ].join('\n'), { isError: true, structuredContent: { flowId: flow.id, sent: false, errors: built.validation.errors } });
+        }
+        // buildTransaction signs the payload; executeFlow signs again from the
+        // validated map, so the hash is stripped here rather than sent twice.
+        const { pp_SecureHash: _discarded, ...unsigned } = built.parameters;
+        const result = await executeFlow(deps, {
+            flow,
+            environment,
+            parameters: unsigned,
+        });
+        const reference = built.parameters['pp_TxnRefNo'] ?? '';
+        return toolResult([
+            renderCallResult(result),
+            '',
+            '## How to confirm this independently',
+            reference === ''
+                ? 'This flow carries no transaction reference to follow up.'
+                : `Wait at least ${String(STATUS_INQUIRY_MINIMUM_WAIT_MINUTES)} minutes, then call jazzcash_send_gateway_request with flowId "status-inquiry-v2.0" and pp_TxnRefNo "${reference}". Read pp_PaymentResponseCode, not pp_ResponseCode: 121 means the money moved.`,
+            citations(flow.docRefs),
+        ].join('\n'), {
+            structuredContent: {
+                flowId: flow.id,
+                sent: true,
+                environment,
+                txnRefNo: reference,
+                classification: result.classification.classification,
+                response: result.response,
+                responseHash: result.responseHash,
+                followUpAfterMinutes: STATUS_INQUIRY_MINIMUM_WAIT_MINUTES,
+            },
+        });
+    }, 
+    // Refused ahead of the gateway guard: a field this server must not accept
+    // is a property of the call, not of the credentials it would have used.
+    { payloadArguments: ['extras'], flowFrom: 'flowId' }));
+};
+export const registerBuildCheckoutForm = (server, deps) => {
+    server.registerTool('jazzcash_build_checkout_form', {
+        title: 'Build a signed JazzCash checkout form for manual testing',
+        description: 'Produce a signed, self-contained HTML page for a browser flow (card checkout, BNPL, wallet linking). These cannot be automated: the customer must complete them in a browser with card details or an MPIN. Writes the page to disk and explains what to do next.',
+        inputSchema: {
+            flowId: z.string().describe('Form-post flow, e.g. "card-page-redirection-v1.1".'),
+            environment: environmentSchema,
+            amount: z.union([z.string(), z.number()]).optional().describe('Amount in major units, e.g. "1.00".'),
+            description: z.string().optional().describe('Order description shown to the customer.'),
+            billReference: z.string().optional().describe('Alphanumeric bill reference. Generated if omitted.'),
+            extras: z
+                .record(z.string(), z.string())
+                .optional()
+                .describe('Flow-specific fields, e.g. { "pp_MSISDN": "03123456789" }.'),
+            outputPath: z
+                .string()
+                .optional()
+                .describe('File name, or a path relative to the server output directory, for the generated page. Absolute paths and paths escaping that directory are refused. Defaults to <flowId>-<environment>.html.'),
+            confirmLiveEnvironment: confirmLiveSchema,
+        },
+    }, safeHandler(deps, 'jazzcash_build_checkout_form', ({ flowId, environment, amount, description, billReference, extras, outputPath, confirmLiveEnvironment }) => {
+        const flow = deps.catalogue.get(flowId);
+        if (flow.transport !== 'form-post') {
+            throw new JazzCashValidationError(describeTransportMismatch(flow, 'form-post'));
+        }
+        // Resolved before anything is built or signed: a destination the server
+        // refuses is an argument error, and there is no point generating a
+        // transaction reference for a page that will never be written.
+        const target = resolveCheckoutTarget(outputPath, `${flow.id}-${environment}.html`);
+        const { profile, warnings } = guardGatewayCall(deps, { flow, environment, confirmLiveEnvironment });
+        const built = buildTransaction(flow, {
+            amount: amount ?? '1.00',
+            description: description ?? 'JazzCash MCP test transaction',
+            billReference,
+            extras,
+        }, profile);
+        if (!built.validation.valid) {
+            return toolResult([
+                `Could not build a ${flow.id} payload, so no form was written.`,
+                '',
+                formatValidationResult(built.validation),
+            ].join('\n'), { isError: true, structuredContent: { flowId: flow.id, written: false, errors: built.validation.errors } });
+        }
+        const html = renderCheckoutForm({ flow, environment, parameters: built.parameters });
+        writeCheckoutForm(target, html);
+        return toolResult([
+            `Wrote a signed ${flow.title} form for the ${environment} environment.`,
+            '',
+            `File: ${target.path}`,
+            `Posts to: ${resolveEndpoint(flow, environment)}`,
+            '',
+            warnings.length > 0 ? `## Warnings\n${bulletList([...warnings])}\n` : '',
+            '## This step needs a human',
+            'This flow cannot be completed programmatically: the customer enters card details or an MPIN on the JazzCash page.',
+            '',
+            '1. Open the file in a browser and review the parameter table.',
+            '2. Click Submit and complete the payment on the JazzCash page.',
+            '3. Confirm the result reaches your registered Return URL.',
+            `4. Wait ten minutes, then confirm the outcome with the Status Inquiry API using pp_TxnRefNo "${built.parameters['pp_TxnRefNo'] ?? ''}".`,
+            '5. Capture the screenshots JazzCash requires before go-live.',
+            '',
+            `The file contains a valid signed payload for your merchant account. Delete it after testing. The server only ever writes these pages inside ${target.root}; keep that directory out of version control, out of any web root, and out of any synced folder.`,
+            citations(flow.docRefs),
+        ]
+            .filter((line) => line !== '')
+            .join('\n'), {
+            structuredContent: {
+                flowId: flow.id,
+                environment,
+                written: true,
+                path: target.path,
+                outputDirectory: target.root,
+                endpoint: resolveEndpoint(flow, environment),
+                txnRefNo: built.parameters['pp_TxnRefNo'] ?? null,
+                warnings,
+            },
+        });
+    }, 
+    // Refused first, so that nothing is resolved, guarded, built or written to
+    // disk for a call carrying a field this server must not accept. The
+    // generated page renders every parameter as a hidden input, so a flagged
+    // value would land in a file as well as in the transcript.
+    { payloadArguments: ['extras'], flowFrom: 'flowId' }));
+};
+/**
+ * Body to return with HTTP 400 when a notification cannot be trusted.
+ *
+ * Identical to the rejection the generated IPN handlers emit (the
+ * `ipn-handler.tmpl` templates under `knowledge/templates`), so the tool and the
+ * code it generates state the same contract. Deliberately unsigned.
+ */
+const IPN_REJECTION_BODY = {
+    pp_ResponseCode: '400',
+    pp_ResponseMessage: 'Invalid secure hash',
+};
+/** Build the acknowledgement a merchant returns for a verified notification. */
+function signIpnAcknowledgement(salt) {
+    const acknowledgement = {
+        pp_ResponseCode: '000',
+        pp_ResponseMessage: 'IPN received successfully',
+    };
+    acknowledgement['pp_SecureHash'] = computeSecureHash(acknowledgement, salt);
+    return acknowledgement;
+}
+export const registerVerifyIpnNotification = (server, deps) => {
+    server.registerTool('jazzcash_verify_ipn_notification', {
+        title: 'Verify an inbound JazzCash IPN notification',
+        description: 'Verify the pp_SecureHash on an IPN notification, classify the payment outcome, and produce the exact body to return: a signed acknowledgement when the signature verifies, or the unsigned HTTP 400 rejection when it does not. An IPN endpoint is public, so verification is not optional.',
+        inputSchema: {
+            payload: z
+                .record(z.string(), z.union([z.string(), z.number(), z.null()]))
+                .describe('The notification body exactly as received, including pp_SecureHash.'),
+            environment: z
+                .enum(JAZZCASH_ENVIRONMENTS)
+                .optional()
+                .describe('Credential profile whose Integrity Salt to verify against. Defaults to the configured environment.'),
+            integritySalt: z.string().optional().describe('Integrity Salt to use instead of the configured one.'),
+        },
+    }, safeHandler(deps, 'jazzcash_verify_ipn_notification', ({ payload, environment, integritySalt }) => {
+        const environmentName = resolveEnvironment(deps, environment);
+        const { salt } = resolveIntegritySalt(deps, integritySalt, environmentName);
+        const supplied = payload['pp_SecureHash'];
+        const suppliedHash = typeof supplied === 'string' ? supplied : '';
+        // An IPN has no flow, so the unknown-flow response policy applies: no
+        // prefix filter. Inheriting the request default would be vacuous for any
+        // notification carrying unprefixed fields.
+        const recomputed = computeSecureHash(payload, salt, UNKNOWN_FLOW_RESPONSE_HASH_OPTIONS);
+        const verified = suppliedHash !== '' && hashesMatch(recomputed, suppliedHash);
+        // A notification names no flow, so there is no declared success contract
+        // to apply and the documented JazzCash tables are the whole rule. Passed
+        // explicitly rather than omitted: this is the one call site where having
+        // no contract is the truth, and it should read that way.
+        const classification = classifyResponse(payload, 'ipn', undefined);
+        const txnRefNo = typeof payload['pp_TxnRefNo'] === 'string' ? payload['pp_TxnRefNo'] : '';
+        const txnDateTime = typeof payload['pp_TxnDateTime'] === 'string' ? payload['pp_TxnDateTime'] : '';
+        // A signed acknowledgement is produced ONLY for a notification that
+        // verified. Returning one alongside "reject this and answer HTTP 400"
+        // hands an automation two contradictory instructions, and following the
+        // more actionable one positively acknowledges a forged notification.
+        const acknowledgement = verified ? signIpnAcknowledgement(salt) : undefined;
+        const age = txnDateTime === ''
+            ? undefined
+            : (() => {
+                try {
+                    return minutesSinceTxnDateTime(txnDateTime);
+                }
+                catch {
+                    return undefined;
+                }
+            })();
+        const text = [
+            verified ? '# Signature VERIFIED' : '# Signature NOT VERIFIED — do not act on this notification',
+            '',
+            verified
+                ? 'The pp_SecureHash matches. This notification genuinely came from JazzCash.'
+                : suppliedHash === ''
+                    ? 'The notification carried no pp_SecureHash. Reject it: an IPN endpoint is a public URL and anyone can post to it.'
+                    : `The pp_SecureHash does not match, so this notification was not signed with your Integrity Salt. Reject it and return HTTP 400. Received ${suppliedHash.toLowerCase()}. The expected hash is deliberately withheld: an IPN endpoint is public, so disclosing the correct hash for this body would let anyone resubmit the same body and pass verification. To compare hashes for a payload you generated yourself, use jazzcash_verify_secure_hash.`,
+            '',
+            `## Payment outcome: ${classification.classification}`,
+            classification.reason,
+            txnRefNo === '' ? '' : `Transaction reference: ${txnRefNo}`,
+            age === undefined ? '' : `Notification is for a transaction ${age.toFixed(0)} minutes old.`,
+            '',
+            acknowledgement === undefined ? '## What to return instead' : '## Acknowledgement to return',
+            acknowledgement === undefined
+                ? 'Do NOT acknowledge this notification. Return HTTP 400 with the body below, unsigned: a signed acknowledgement would confirm to whoever sent it that the forgery was accepted.'
+                : 'Return this within 60 seconds. JazzCash retries twice otherwise, so your handler must be idempotent.',
+            '```json',
+            JSON.stringify(acknowledgement ?? IPN_REJECTION_BODY, null, 2),
+            '```',
+            '',
+            '## Before you mark the order paid',
+            bulletList([
+                'Confirm the hash verified (above).',
+                'Confirm the amount matches the order you recorded.',
+                'Confirm the order is not already marked paid — this may be a retry.',
+                'Treat any code other than 121, 199 or 999 as unresolved, not failed, and reconcile with the Status Inquiry API.',
+            ]),
+            citations([{ docId: 'ipn-implementation', sectionId: 'handler-checklist' }]),
+        ]
+            .filter((line) => line !== '')
+            .join('\n');
+        // A determinate "not verified" is a successful verification with a
+        // negative outcome, not an execution failure — the same distinction
+        // jazzcash_verify_secure_hash makes. Marking it isError makes agent
+        // frameworks retry a verification that will never change its mind, and
+        // leads some clients to drop the structuredContent that carries the verdict.
+        return toolResult(text, {
+            structuredContent: {
+                verified,
+                // The recomputed hash is disclosed only when the caller already holds
+                // it. On a mismatch it is the valid signature for an attacker-supplied
+                // body, and an IPN endpoint is a public URL.
+                ...(verified ? { expectedHash: recomputed } : {}),
+                providedHash: suppliedHash.toLowerCase(),
+                classification: classification.classification,
+                txnRefNo,
+                ...(acknowledgement === undefined ? { rejection: IPN_REJECTION_BODY } : { acknowledgement }),
+            },
+        });
+    }, 
+    // A notification names no flow, so the catalogue-wide refusal list
+    // applies — and there is no flowId argument for the wrapper to read one
+    // from. A genuine notification carries none of these fields; a payload
+    // that does is a request someone pasted into the wrong tool.
+    { payloadArguments: ['payload'] }));
+};
+//# sourceMappingURL=gateway-tools.js.map

package/dist/tools/gateway-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-tools.js","sourceRoot":"","sources":["../../src/tools/gateway-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,WAAW,EAA0B,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EACL,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,UAAU,GACX,MAAM,eAAe,CAAC;AAEvB;;;;;GAKG;AAEH,MAAM,iBAAiB,GAAG,CAAC;KACxB,IAAI,CAAC,qBAAqB,CAAC;KAC3B,QAAQ,CACP,mHAAmH,CACpH,CAAC;AAEJ,MAAM,iBAAiB,GAAG,CAAC;KACxB,OAAO,EAAE;KACT,QAAQ,EAAE;KACV,QAAQ,CACP,mIAAmI,CACpI,CAAC;AAEJ,SAAS,gBAAgB,CAAC,MAAyB;IACjD,OAAO;QACL,KAAK,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE;QAC5E,EAAE;QACF,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACpE,gBAAgB,MAAM,CAAC,WAAW,EAAE;QACpC,gBAAgB,MAAM,CAAC,QAAQ,EAAE;QACjC,gBAAgB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK;QAC9E,EAAE;QACF,YAAY;QACZ,MAAM,CAAC,cAAc,CAAC,MAAM;QAC5B,MAAM,CAAC,cAAc,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE;QACtG,EAAE;QACF,aAAa;QACb,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,KAAK;QACL,EAAE;QACF,qBAAqB,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE;QAClD,MAAM,CAAC,YAAY,CAAC,IAAI;QACxB,EAAE;QACF,eAAe;QACf,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,EAAE;QACF,wCAAwC;QACxC,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,KAAK;KACN;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;IACxE,MAAM,CAAC,YAAY,CACjB,+BAA+B,EAC/B;QACE,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EACT,gSAAgS;QAClS,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;YAC7E,WAAW,EAAE,iBAAiB;YAC9B,UAAU,EAAE,CAAC;iBACV,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBAC/D,QAAQ,CACP,2HAA2H,CAC5H;YACH,sBAAsB,EAAE,iBAAiB;SAC1C;KACF,EACD,WAAW,CACT,IAAI,EACJ,+BAA+B,EAC/B,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,EAAE;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE;YACrC,IAAI;YACJ,WAAW;YACX,UAAU;YACV,sBAAsB;SACvB,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;YACzE,iBAAiB,EAAE;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,cAAc;gBACpD,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;IACD,wEAAwE;IACxE,mEAAmE;IACnE,uDAAuD;IACvD,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACzD,CACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,CAAC;KACxB,OAAO,CAAC,SAAS,CAAC;KAClB,QAAQ,CAAC,8FAA8F,CAAC,CAAC;AAE5G,MAAM,CAAC,MAAM,2BAA2B,GAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;IACzE,MAAM,CAAC,YAAY,CACjB,iCAAiC,EACjC;QACE,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,mTAAmT;QACrT,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;YAC/E,WAAW,EAAE,iBAAiB;YAC9B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YACpG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YACjE,MAAM,EAAE,CAAC;iBACN,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;iBAC9B,QAAQ,EAAE;iBACV,QAAQ,CAAC,qFAAqF,CAAC;SACnG;KACF,EACD,WAAW,CACT,IAAI,EACJ,iCAAiC,EACjC,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAExC,2EAA2E;QAC3E,uEAAuE;QACvE,4BAA4B;QAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC,CAAC;QAErG,MAAM,KAAK,GAAG,gBAAgB,CAC5B,IAAI,EACJ,EAAE,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,WAAW,EAAE,WAAW,IAAI,yBAAyB,EAAE,MAAM,EAAE,EAC3F,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,UAAU,CACf;gBACE,qBAAqB,IAAI,CAAC,EAAE,gCAAgC;gBAC5D,EAAE;gBACF,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC;aACzC,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CACxG,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE;YACrC,IAAI;YACJ,WAAW;YACX,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAExD,OAAO,UAAU,CACf;YACE,gBAAgB,CAAC,MAAM,CAAC;YACxB,EAAE;YACF,sCAAsC;YACtC,SAAS,KAAK,EAAE;gBACd,CAAC,CAAC,0DAA0D;gBAC5D,CAAC,CAAC,iBAAiB,MAAM,CAAC,mCAAmC,CAAC,wGAAwG,SAAS,iFAAiF;YAClQ,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;SACxB,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ;YACE,iBAAiB,EAAE;gBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI,EAAE,IAAI;gBACV,WAAW;gBACX,QAAQ,EAAE,SAAS;gBACnB,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,cAAc;gBACpD,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,oBAAoB,EAAE,mCAAmC;aAC1D;SACF,CACF,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,wEAAwE;IACxE,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACrD,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;IACvE,MAAM,CAAC,YAAY,CACjB,8BAA8B,EAC9B;QACE,KAAK,EAAE,0DAA0D;QACjE,WAAW,EACT,kQAAkQ;QACpQ,WAAW,EAAE;YACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YACjF,WAAW,EAAE,iBAAiB;YAC9B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;YACpG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACvF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YACnG,MAAM,EAAE,CAAC;iBACN,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;iBAC9B,QAAQ,EAAE;iBACV,QAAQ,CAAC,4DAA4D,CAAC;YACzE,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,8LAA8L,CAC/L;YACH,sBAAsB,EAAE,iBAAiB;SAC1C;KACF,EACD,WAAW,CACT,IAAI,EACJ,8BAA8B,EAC9B,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,sBAAsB,EAAE,EAAE,EAAE;QAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAExC,IAAI,IAAI,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,uBAAuB,CAAC,yBAAyB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,wEAAwE;QACxE,mEAAmE;QACnE,+DAA+D;QAC/D,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,WAAW,OAAO,CAAC,CAAC;QAEnF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAEpG,MAAM,KAAK,GAAG,gBAAgB,CAC5B,IAAI,EACJ;YACE,MAAM,EAAE,MAAM,IAAI,MAAM;YACxB,WAAW,EAAE,WAAW,IAAI,+BAA+B;YAC3D,aAAa;YACb,MAAM;SACP,EACD,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,UAAU,CACf;gBACE,qBAAqB,IAAI,CAAC,EAAE,mCAAmC;gBAC/D,EAAE;gBACF,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC;aACzC,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAC3G,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAErF,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEhC,OAAO,UAAU,CACf;YACE,kBAAkB,IAAI,CAAC,KAAK,iBAAiB,WAAW,eAAe;YACvE,EAAE;YACF,SAAS,MAAM,CAAC,IAAI,EAAE;YACtB,aAAa,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;YACjD,EAAE;YACF,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACxE,4BAA4B;YAC5B,mHAAmH;YACnH,EAAE;YACF,+DAA+D;YAC/D,gEAAgE;YAChE,2DAA2D;YAC3D,gGAAgG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI;YACzI,8DAA8D;YAC9D,EAAE;YACF,+IAA+I,MAAM,CAAC,IAAI,kGAAkG;YAC5P,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;SACxB;aACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC,EACb;YACE,iBAAiB,EAAE;gBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,WAAW;gBACX,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,eAAe,EAAE,MAAM,CAAC,IAAI;gBAC5B,QAAQ,EAAE,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC;gBAC5C,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI;gBACjD,QAAQ;aACT;SACF,CACF,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,oEAAoE;IACpE,yEAAyE;IACzE,2DAA2D;IAC3D,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CACrD,CACF,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAqC;IAC3D,eAAe,EAAE,KAAK;IACtB,kBAAkB,EAAE,qBAAqB;CAC1C,CAAC;AAEF,gFAAgF;AAChF,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,eAAe,GAA2B;QAC9C,eAAe,EAAE,KAAK;QACtB,kBAAkB,EAAE,2BAA2B;KAChD,CAAC;IACF,eAAe,CAAC,eAAe,CAAC,GAAG,iBAAiB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC5E,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;IAC3E,MAAM,CAAC,YAAY,CACjB,kCAAkC,EAClC;QACE,KAAK,EAAE,6CAA6C;QACpD,WAAW,EACT,6RAA6R;QAC/R,WAAW,EAAE;YACX,OAAO,EAAE,CAAC;iBACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBAC/D,QAAQ,CAAC,qEAAqE,CAAC;YAClF,WAAW,EAAE,CAAC;iBACX,IAAI,CAAC,qBAAqB,CAAC;iBAC3B,QAAQ,EAAE;iBACV,QAAQ,CACP,oGAAoG,CACrG;YACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;SACtG;KACF,EACD,WAAW,CACT,IAAI,EACJ,kCAAkC,EAClC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,EAAE;QAC1C,MAAM,eAAe,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,sEAAsE;QACtE,yEAAyE;QACzE,2CAA2C;QAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,YAAY,KAAK,EAAE,IAAI,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAE9E,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,cAAc,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnG,oEAAoE;QACpE,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5E,MAAM,GAAG,GACP,WAAW,KAAK,EAAE;YAChB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,GAAG,EAAE;gBACJ,IAAI,CAAC;oBACH,OAAO,uBAAuB,CAAC,WAAW,CAAC,CAAC;gBAC9C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QAEX,MAAM,IAAI,GAAG;YACX,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,4DAA4D;YAChG,EAAE;YACF,QAAQ;gBACN,CAAC,CAAC,4EAA4E;gBAC9E,CAAC,CAAC,YAAY,KAAK,EAAE;oBACnB,CAAC,CAAC,kHAAkH;oBACpH,CAAC,CAAC,2IAA2I,YAAY,CAAC,WAAW,EAAE,+QAA+Q;YAC1b,EAAE;YACF,uBAAuB,cAAc,CAAC,cAAc,EAAE;YACtD,cAAc,CAAC,MAAM;YACrB,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,QAAQ,EAAE;YAC3D,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qCAAqC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;YAC3F,EAAE;YACF,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,8BAA8B;YAC5F,eAAe,KAAK,SAAS;gBAC3B,CAAC,CAAC,+KAA+K;gBACjL,CAAC,CAAC,sGAAsG;YAC1G,SAAS;YACT,IAAI,CAAC,SAAS,CAAC,eAAe,IAAI,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,KAAK;YACL,EAAE;YACF,mCAAmC;YACnC,UAAU,CAAC;gBACT,oCAAoC;gBACpC,oDAAoD;gBACpD,qEAAqE;gBACrE,iHAAiH;aAClH,CAAC;YACF,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;SAC7E;aACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,6EAA6E;QAC7E,OAAO,UAAU,CAAC,IAAI,EAAE;YACtB,iBAAiB,EAAE;gBACjB,QAAQ;gBACR,sEAAsE;gBACtE,uEAAuE;gBACvE,6CAA6C;gBAC7C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,YAAY,EAAE,YAAY,CAAC,WAAW,EAAE;gBACxC,cAAc,EAAE,cAAc,CAAC,cAAc;gBAC7C,QAAQ;gBACR,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;aAC7F;SACF,CAAC,CAAC;IACL,CAAC;IACD,mEAAmE;IACnE,wEAAwE;IACxE,uEAAuE;IACvE,6DAA6D;IAC7D,EAAE,gBAAgB,EAAE,CAAC,SAAS,CAAC,EAAE,CAClC,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/tools/hash-tools.d.ts

@@ -0,0 +1,5 @@
+import type { Registrar } from '../registry.js';
+export declare const registerBuildSecureHash: Registrar;
+export declare const registerVerifySecureHash: Registrar;
+export declare const registerValidatePayload: Registrar;
+//# sourceMappingURL=hash-tools.d.ts.map

package/dist/tools/hash-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash-tools.d.ts","sourceRoot":"","sources":["../../src/tools/hash-tools.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAiChD,eAAO,MAAM,uBAAuB,EAAE,SAuGrC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,SAsHtC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,SAwCrC,CAAC"}