@carrierllc/mcp 0.1.0 → 0.2.0

package/dist/stripe-connect-tools.js

@@ -0,0 +1,504 @@
+/**
+ * Carrier MCP — Stripe Connect tools (Phase 16).
+ *
+ * Provides AI-agent access to the operator Stripe Connect layer.
+ * All tools call the Stripe API directly using STRIPE_SECRET_KEY from env.
+ * The connected account ID is looked up from CARRIER_USERS KV
+ * under key `stripe_account:<operatorId>`.
+ *
+ * Tools registered here:
+ *   stripe_connect_status        — read-only: account status + capabilities
+ *   stripe_connect_payouts       — read-only: list recent payouts
+ *   stripe_connect_balance       — read-only: available + pending balance
+ *   stripe_connect_refund        — write (HARD_BLOCK): refund a charge
+ *   stripe_connect_dispute_list  — read-only: list active disputes
+ *   radar_review_list            — read-only: list pending Radar reviews
+ *   radar_review_approve         — admin (HARD_BLOCK): approve a review
+ *   radar_review_decline         — admin (HARD_BLOCK): decline/close a review
+ *   radar_value_list_add         — admin (HARD_BLOCK): add to block/allow list
+ *   radar_rule_toggle            — admin: documented stub (Stripe API limitation)
+ *
+ * HARD_BLOCK pattern: destructive tools require a confirm_token stored in
+ * OAUTH_KV with a 5-min TTL (same pattern as pricing-tools.ts).
+ */
+import { z } from "zod";
+import * as Sentry from "@sentry/cloudflare";
+import { writeAudit } from "./audit.js";
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/** Hard-block confirm token stored in KV with 5-min TTL. */
+async function verifyConfirmToken(env, sub, toolName, token) {
+    const key = `confirm:${sub}:${toolName}`;
+    const stored = await env.OAUTH_KV.get(key);
+    if (!stored || stored !== token)
+        return false;
+    await env.OAUTH_KV.delete(key); // single-use
+    return true;
+}
+async function issueConfirmToken(env, sub, toolName) {
+    const bytes = crypto.getRandomValues(new Uint8Array(16));
+    const token = Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+    const key = `confirm:${sub}:${toolName}`;
+    await env.OAUTH_KV.put(key, token, { expirationTtl: 300 }); // 5 min TTL
+    return token;
+}
+function ok(text) {
+    return { content: [{ type: "text", text }] };
+}
+function err(text) {
+    return { isError: true, content: [{ type: "text", text }] };
+}
+/** Call Stripe REST API (GET). */
+async function stripeGet(stripeKey, path, connectedAccountId) {
+    const headers = { Authorization: `Bearer ${stripeKey}` };
+    if (connectedAccountId)
+        headers["Stripe-Account"] = connectedAccountId;
+    const res = await fetch(`https://api.stripe.com${path}`, { headers });
+    const data = (await res.json());
+    return { ok: res.ok, status: res.status, data };
+}
+/** Call Stripe REST API (POST, form-encoded). */
+async function stripePost(stripeKey, path, params, connectedAccountId) {
+    const headers = {
+        Authorization: `Bearer ${stripeKey}`,
+        "Content-Type": "application/x-www-form-urlencoded",
+    };
+    if (connectedAccountId)
+        headers["Stripe-Account"] = connectedAccountId;
+    const res = await fetch(`https://api.stripe.com${path}`, {
+        method: "POST",
+        headers,
+        body: new URLSearchParams(params).toString(),
+    });
+    const data = (await res.json());
+    return { ok: res.ok, status: res.status, data };
+}
+/** Doc + registry merge — mirrors the tool inventory in this file's header comment. */
+export const STRIPE_CONNECT_TOOL_SCOPES = {
+    stripe_connect_status: "read",
+    stripe_connect_payouts: "read",
+    stripe_connect_balance: "read",
+    stripe_connect_refund: "write",
+    stripe_connect_dispute_list: "read",
+    radar_review_list: "read",
+    radar_review_approve: "admin",
+    radar_review_decline: "admin",
+    radar_value_list_add: "admin",
+    radar_rule_toggle: "admin",
+};
+// ---------------------------------------------------------------------------
+// Registration
+// ---------------------------------------------------------------------------
+export function registerStripeConnectTools(server, ctx) {
+    const { env, props } = ctx;
+    const operatorId = props.org_id ?? props.sub;
+    const kvKey = `stripe_account:${operatorId}`;
+    /** Look up the operator's connected Stripe account ID from KV. */
+    async function getAccountId() {
+        return env.CARRIER_USERS.get(kvKey);
+    }
+    // -------------------------------------------------------------------------
+    // stripe_connect_status
+    // -------------------------------------------------------------------------
+    server.tool("stripe_connect_status", "Read-only: returns the Stripe Connect account status, capabilities, and requirements for the authenticated operator.", {
+        operator_id: z
+            .string()
+            .optional()
+            .describe("Override operator_id (admin use). Defaults to caller's org/user."),
+    }, async ({ operator_id }) => {
+        const opId = operator_id ?? operatorId;
+        const opKvKey = operator_id ? `stripe_account:${operator_id}` : kvKey;
+        const start = Date.now();
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            const accountId = await env.CARRIER_USERS.get(opKvKey);
+            if (!accountId) {
+                return ok(JSON.stringify({ status: "not_connected", operator_id: opId }));
+            }
+            const result = await stripeGet(stripeKey, `/v1/accounts/${accountId}`);
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            const a = result.data;
+            const status = a.charges_enabled && a.details_submitted ? "active" : "pending";
+            writeAudit(env, {
+                tool_name: "stripe_connect_status",
+                ocs_method: "stripe.account.read",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(JSON.stringify({
+                status,
+                operator_id: opId,
+                account_id: accountId,
+                charges_enabled: a.charges_enabled,
+                payouts_enabled: a.payouts_enabled,
+                details_submitted: a.details_submitted,
+                requirements: a.requirements,
+                capabilities: a.capabilities,
+                default_currency: a.default_currency,
+                payout_schedule: a.settings?.payouts?.schedule,
+            }));
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // stripe_connect_payouts
+    // -------------------------------------------------------------------------
+    server.tool("stripe_connect_payouts", "Read-only: list recent payouts for the operator's connected Stripe account.", {
+        limit: z.number().int().min(1).max(50).default(10).describe("Number of payouts to return."),
+        status: z
+            .enum(["pending", "paid", "failed", "canceled", "in_transit"])
+            .optional()
+            .describe("Filter by payout status."),
+    }, async ({ limit, status }) => {
+        const start = Date.now();
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            const accountId = await getAccountId();
+            if (!accountId)
+                return err("No connected Stripe account found.");
+            const params = new URLSearchParams({ limit: String(limit) });
+            if (status)
+                params.set("status", status);
+            const result = await stripeGet(stripeKey, `/v1/payouts?${params.toString()}`, accountId);
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            writeAudit(env, {
+                tool_name: "stripe_connect_payouts",
+                ocs_method: "stripe.payouts.list",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(JSON.stringify({ payouts: result.data.data, has_more: result.data.has_more }));
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // stripe_connect_balance
+    // -------------------------------------------------------------------------
+    server.tool("stripe_connect_balance", "Read-only: returns the current available and pending balance per currency for the operator's connected Stripe account.", {}, async () => {
+        const start = Date.now();
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            const accountId = await getAccountId();
+            if (!accountId)
+                return err("No connected Stripe account found.");
+            const result = await stripeGet(stripeKey, `/v1/balance`, accountId);
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            writeAudit(env, {
+                tool_name: "stripe_connect_balance",
+                ocs_method: "stripe.balance.read",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(JSON.stringify({
+                account_id: accountId,
+                available: result.data.available ?? [],
+                pending: result.data.pending ?? [],
+            }));
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // stripe_connect_refund (HARD_BLOCK)
+    // -------------------------------------------------------------------------
+    server.tool("stripe_connect_refund", "Admin: issue a refund on a charge via the operator's connected Stripe account. Requires confirm_token (call without token first to get one).", {
+        charge_id: z.string().min(1).describe("Stripe charge ID (ch_...)."),
+        amount_cents: z
+            .number()
+            .int()
+            .min(1)
+            .optional()
+            .describe("Partial refund amount in cents. Omit for full refund."),
+        reason: z.enum(["duplicate", "fraudulent", "requested_by_customer"]).optional(),
+        confirm_token: z
+            .string()
+            .optional()
+            .describe("Confirmation token from previous call. Required to execute."),
+    }, async ({ charge_id, amount_cents, reason, confirm_token }) => {
+        const start = Date.now();
+        const toolName = "stripe_connect_refund";
+        if (!confirm_token) {
+            const token = await issueConfirmToken(env, props.sub, toolName);
+            return ok(`HARD_BLOCK: Refund ${amount_cents ? `${amount_cents} cents on` : "(full) on"} charge ${charge_id} requires confirmation.\n` +
+                `confirm_token: ${token}\n` +
+                `Call again with confirm_token="${token}" to execute. Token expires in 5 minutes.`);
+        }
+        const valid = await verifyConfirmToken(env, props.sub, toolName, confirm_token);
+        if (!valid) {
+            return err("Invalid or expired confirm_token. Call without token to get a new one.");
+        }
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            const accountId = await getAccountId();
+            if (!accountId)
+                return err("No connected Stripe account found.");
+            const params = { charge: charge_id };
+            if (amount_cents)
+                params.amount = String(amount_cents);
+            if (reason)
+                params.reason = reason;
+            const result = await stripePost(stripeKey, "/v1/refunds", params, accountId);
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            writeAudit(env, {
+                tool_name: toolName,
+                ocs_method: "stripe.refund.create",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(`Refund issued: ${result.data.id} — status: ${result.data.status}`);
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // stripe_connect_dispute_list
+    // -------------------------------------------------------------------------
+    server.tool("stripe_connect_dispute_list", "Read-only: list active disputes for the operator's connected Stripe account.", {
+        limit: z.number().int().min(1).max(50).default(10),
+        status: z
+            .string()
+            .optional()
+            .describe("Filter by dispute status (e.g. needs_response, under_review)."),
+    }, async ({ limit, status }) => {
+        const start = Date.now();
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            const accountId = await getAccountId();
+            if (!accountId)
+                return err("No connected Stripe account found.");
+            const params = new URLSearchParams({ limit: String(limit) });
+            if (status)
+                params.set("status", status);
+            const result = await stripeGet(stripeKey, `/v1/disputes?${params.toString()}`, accountId);
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            writeAudit(env, {
+                tool_name: "stripe_connect_dispute_list",
+                ocs_method: "stripe.disputes.list",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(JSON.stringify({ disputes: result.data.data, has_more: result.data.has_more }));
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // radar_review_list
+    // -------------------------------------------------------------------------
+    server.tool("radar_review_list", "Read-only: list pending Radar reviews requiring manual platform decision.", {
+        open_only: z.boolean().default(true).describe("If true, only returns open (undecided) reviews."),
+        limit: z.number().int().min(1).max(50).default(10),
+    }, async ({ open_only, limit }) => {
+        const start = Date.now();
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            const params = new URLSearchParams({ limit: String(limit) });
+            if (open_only)
+                params.set("open", "true");
+            const result = await stripeGet(stripeKey, `/v1/radar/reviews?${params.toString()}`);
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            writeAudit(env, {
+                tool_name: "radar_review_list",
+                ocs_method: "stripe.radar.reviews.list",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(JSON.stringify({ reviews: result.data.data, has_more: result.data.has_more }));
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // radar_review_approve (HARD_BLOCK)
+    // -------------------------------------------------------------------------
+    server.tool("radar_review_approve", "Admin: approve a Radar review, allowing the charge to proceed. Requires confirm_token.", {
+        review_id: z.string().min(1).describe("Stripe Radar review ID (prv_...)."),
+        confirm_token: z.string().optional(),
+    }, async ({ review_id, confirm_token }) => {
+        const toolName = "radar_review_approve";
+        const start = Date.now();
+        if (!confirm_token) {
+            const token = await issueConfirmToken(env, props.sub, toolName);
+            return ok(`HARD_BLOCK: Approving review ${review_id} allows the charge to proceed.\n` +
+                `confirm_token: ${token}\nCall again with confirm_token="${token}" to execute. Expires in 5 minutes.`);
+        }
+        const valid = await verifyConfirmToken(env, props.sub, toolName, confirm_token);
+        if (!valid)
+            return err("Invalid or expired confirm_token.");
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            const result = await stripePost(stripeKey, `/v1/radar/reviews/${review_id}/approve`, {});
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            writeAudit(env, {
+                tool_name: toolName,
+                ocs_method: "stripe.radar.review.approve",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(`Review ${review_id} approved. Charge will proceed.`);
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // radar_review_decline (HARD_BLOCK)
+    // -------------------------------------------------------------------------
+    server.tool("radar_review_decline", "Admin: decline a Radar review, blocking/closing the charge. Requires confirm_token.", {
+        review_id: z.string().min(1),
+        confirm_token: z.string().optional(),
+    }, async ({ review_id, confirm_token }) => {
+        const toolName = "radar_review_decline";
+        const start = Date.now();
+        if (!confirm_token) {
+            const token = await issueConfirmToken(env, props.sub, toolName);
+            return ok(`HARD_BLOCK: Declining review ${review_id} will close/block the charge.\n` +
+                `confirm_token: ${token}\nExpires in 5 minutes.`);
+        }
+        const valid = await verifyConfirmToken(env, props.sub, toolName, confirm_token);
+        if (!valid)
+            return err("Invalid or expired confirm_token.");
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            // Stripe closes a review by approving it with close_reason=fraudulent
+            // or by calling close on the underlying charge. The /approve endpoint
+            // with a reason is the supported path for platform-level decline.
+            const result = await stripePost(stripeKey, `/v1/radar/reviews/${review_id}/approve`, { reason: "fraudulent" });
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            writeAudit(env, {
+                tool_name: toolName,
+                ocs_method: "stripe.radar.review.decline",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(`Review ${review_id} declined.`);
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // radar_value_list_add (HARD_BLOCK)
+    // -------------------------------------------------------------------------
+    server.tool("radar_value_list_add", "Admin: add an item (email, IP, card fingerprint, country code) to a Stripe Radar block/allow list. Requires confirm_token.", {
+        value_list_id: z.string().min(1).describe("Stripe Radar value list ID (rsl_...)."),
+        value: z
+            .string()
+            .min(1)
+            .describe("The value to add (email, IP address, country code, etc.)."),
+        confirm_token: z.string().optional(),
+    }, async ({ value_list_id, value, confirm_token }) => {
+        const toolName = "radar_value_list_add";
+        const start = Date.now();
+        if (!confirm_token) {
+            const token = await issueConfirmToken(env, props.sub, toolName);
+            return ok(`HARD_BLOCK: Adding "${value}" to list ${value_list_id} will affect future charge decisions.\n` +
+                `confirm_token: ${token}\nExpires in 5 minutes.`);
+        }
+        const valid = await verifyConfirmToken(env, props.sub, toolName, confirm_token);
+        if (!valid)
+            return err("Invalid or expired confirm_token.");
+        try {
+            const stripeKey = env.STRIPE_SECRET_KEY;
+            if (!stripeKey)
+                return err("Stripe not configured");
+            const result = await stripePost(stripeKey, "/v1/radar/value_list_items", { value_list: value_list_id, value });
+            if (!result.ok)
+                return err(`Stripe error: ${JSON.stringify(result.data)}`);
+            writeAudit(env, {
+                tool_name: toolName,
+                ocs_method: "stripe.radar.value_list.add",
+                status: "ok",
+                dry_run: false,
+                duration_ms: Date.now() - start,
+                sub: props.sub,
+                reseller_id: props.reseller_id,
+            });
+            return ok(`Added "${value}" to Radar list ${value_list_id}.`);
+        }
+        catch (e) {
+            Sentry.captureException(e);
+            return err(`Error: ${e instanceof Error ? e.message : "unknown"}`);
+        }
+    });
+    // -------------------------------------------------------------------------
+    // radar_rule_toggle
+    // -------------------------------------------------------------------------
+    server.tool("radar_rule_toggle", "Admin: enable or disable a Stripe Radar rule. NOTE: Stripe does not expose rule CRUD via the public API — this tool returns Dashboard instructions.", {
+        rule_id: z.string().min(1).describe("Stripe Radar rule ID."),
+        enabled: z.boolean().describe("true = enable, false = disable."),
+    }, async ({ rule_id, enabled }) => {
+        // Stripe Radar rules are not manageable via the REST API — only the Dashboard.
+        return ok(`Stripe Radar does not expose rule enable/disable via the public API.\n` +
+            `To ${enabled ? "enable" : "disable"} rule ${rule_id}:\n` +
+            `1. Open https://dashboard.stripe.com/radar/rules\n` +
+            `2. Find rule ${rule_id} and toggle it ${enabled ? "on" : "off"}.\n\n` +
+            `Note: If you need this automated, use the Radar for Platforms beta — contact Stripe support at https://support.stripe.com.`);
+    });
+}
+//# sourceMappingURL=stripe-connect-tools.js.map

package/dist/stripe-connect-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-connect-tools.js","sourceRoot":"","sources":["../src/stripe-connect-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAWxC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,4DAA4D;AAC5D,KAAK,UAAU,kBAAkB,CAC/B,GAAQ,EACR,GAAW,EACX,QAAgB,EAChB,KAAa;IAEb,MAAM,GAAG,GAAG,WAAW,GAAG,IAAI,QAAQ,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAQ,EAAE,GAAW,EAAE,QAAgB;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,WAAW,GAAG,IAAI,QAAQ,EAAE,CAAC;IACzC,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAID,SAAS,EAAE,CAAC,IAAY;IACtB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,GAAG,CAAC,IAAY;IACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,kCAAkC;AAClC,KAAK,UAAU,SAAS,CACtB,SAAiB,EACjB,IAAY,EACZ,kBAA2B;IAE3B,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,CAAC;IACjF,IAAI,kBAAkB;QAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,kBAAkB,CAAC;IACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,yBAAyB,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACrC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,iDAAiD;AACjD,KAAK,UAAU,UAAU,CACvB,SAAiB,EACjB,IAAY,EACZ,MAA8B,EAC9B,kBAA2B;IAE3B,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,SAAS,EAAE;QACpC,cAAc,EAAE,mCAAmC;KACpD,CAAC;IACF,IAAI,kBAAkB;QAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,kBAAkB,CAAC;IACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,yBAAyB,IAAI,EAAE,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KAC7C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACrC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAA8B;IACnE,qBAAqB,EAAE,MAAM;IAC7B,sBAAsB,EAAE,MAAM;IAC9B,sBAAsB,EAAE,MAAM;IAC9B,qBAAqB,EAAE,OAAO;IAC9B,2BAA2B,EAAE,MAAM;IACnC,iBAAiB,EAAE,MAAM;IACzB,oBAAoB,EAAE,OAAO;IAC7B,oBAAoB,EAAE,OAAO;IAC7B,oBAAoB,EAAE,OAAO;IAC7B,iBAAiB,EAAE,OAAO;CAC3B,CAAC;AAEF,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,UAAU,0BAA0B,CACxC,MAAiB,EACjB,GAA6B;IAE7B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC;IAC7C,MAAM,KAAK,GAAG,kBAAkB,UAAU,EAAE,CAAC;IAE7C,kEAAkE;IAClE,KAAK,UAAU,YAAY;QACzB,OAAO,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,4EAA4E;IAC5E,wBAAwB;IACxB,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,sHAAsH,EACtH;QACE,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,kEAAkE,CAAC;KAChF,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,WAAW,IAAI,UAAU,CAAC;QACvC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAkB,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAEpD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5E,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAS3B,SAAS,EAAE,gBAAgB,SAAS,EAAE,CAAC,CAAC;YAE3C,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAE/E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,uBAAuB;gBAClC,UAAU,EAAE,qBAAqB;gBACjC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBACvB,MAAM;gBACN,WAAW,EAAE,IAAI;gBACjB,UAAU,EAAE,SAAS;gBACrB,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,eAAe,EAAE,CAAC,CAAC,eAAe;gBAClC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;gBACtC,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;gBACpC,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ;aAC/C,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,yBAAyB;IACzB,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,6EAA6E,EAC7E;QACE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC3F,MAAM,EAAE,CAAC;aACN,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;aAC7D,QAAQ,EAAE;aACV,QAAQ,CAAC,0BAA0B,CAAC;KACxC,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAEjE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAEzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAW3B,SAAS,EAAE,eAAe,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;YAE7D,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,wBAAwB;gBACnC,UAAU,EAAE,qBAAqB;gBACjC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,yBAAyB;IACzB,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,wHAAwH,EACxH,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAEjE,MAAM,MAAM,GAAG,MAAM,SAAS,CAG3B,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;YAExC,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,wBAAwB;gBACnC,UAAU,EAAE,qBAAqB;gBACjC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;gBACvB,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE;gBACtC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE;aACnC,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,qCAAqC;IACrC,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,8IAA8I,EAC9I;QACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACnE,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,uDAAuD,CAAC;QACpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC/E,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QAEzC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChE,OAAO,EAAE,CACP,sBAAsB,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,WAAW,CAAC,CAAC,CAAC,WAAW,WAAW,SAAS,2BAA2B;gBAC5H,kBAAkB,KAAK,IAAI;gBAC3B,kCAAkC,KAAK,2CAA2C,CACnF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAEjE,MAAM,MAAM,GAA2B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC7D,IAAI,YAAY;gBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;YACvD,IAAI,MAAM;gBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YAEnC,MAAM,MAAM,GAAG,MAAM,UAAU,CAM5B,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAEhD,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE,sBAAsB;gBAClC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,EAAE,cAAc,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,8BAA8B;IAC9B,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,6BAA6B,EAC7B,8EAA8E,EAC9E;QACE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,EAAE,CAAC;aACN,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,+DAA+D,CAAC;KAC7E,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAEjE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAEzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAW3B,SAAS,EAAE,gBAAgB,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;YAE9D,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,6BAA6B;gBACxC,UAAU,EAAE,sBAAsB;gBAClC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,oBAAoB;IACpB,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,2EAA2E,EAC3E;QACE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;QAChG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACnD,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAE1C,MAAM,MAAM,GAAG,MAAM,SAAS,CAW3B,SAAS,EAAE,qBAAqB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAExD,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,mBAAmB;gBAC9B,UAAU,EAAE,2BAA2B;gBACvC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,oCAAoC;IACpC,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,wFAAwF,EACxF;QACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC1E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrC,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChE,OAAO,EAAE,CACP,gCAAgC,SAAS,kCAAkC;gBAC3E,kBAAkB,KAAK,oCAAoC,KAAK,qCAAqC,CACtG,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,SAAS,EACT,qBAAqB,SAAS,UAAU,EACxC,EAAE,CACH,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE,6BAA6B;gBACzC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,UAAU,SAAS,iCAAiC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,oCAAoC;IACpC,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,qFAAqF,EACrF;QACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrC,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE;QACrC,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChE,OAAO,EAAE,CACP,gCAAgC,SAAS,iCAAiC;gBAC1E,kBAAkB,KAAK,yBAAyB,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAEpD,sEAAsE;YACtE,sEAAsE;YACtE,kEAAkE;YAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,SAAS,EACT,qBAAqB,SAAS,UAAU,EACxC,EAAE,MAAM,EAAE,YAAY,EAAE,CACzB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE,6BAA6B;gBACzC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,UAAU,SAAS,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,oCAAoC;IACpC,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,4HAA4H,EAC5H;QACE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;QAClF,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,2DAA2D,CAAC;QACxE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrC,EACD,KAAK,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE;QAChD,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChE,OAAO,EAAE,CACP,uBAAuB,KAAK,aAAa,aAAa,yCAAyC;gBAC/F,kBAAkB,KAAK,yBAAyB,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,iBAAiB,CAAC;YACxC,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,SAAS,EACT,4BAA4B,EAC5B,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CACrC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE3E,UAAU,CAAC,GAAG,EAAE;gBACd,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE,6BAA6B;gBACzC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,UAAU,KAAK,mBAAmB,aAAa,GAAG,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC,UAAU,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,oBAAoB;IACpB,4EAA4E;IAE5E,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,qJAAqJ,EACrJ;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KACjE,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QAC7B,+EAA+E;QAC/E,OAAO,EAAE,CACP,wEAAwE;YACxE,MAAM,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,SAAS,OAAO,KAAK;YACzD,oDAAoD;YACpD,gBAAgB,OAAO,kBAAkB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO;YACtE,4HAA4H,CAC7H,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/timing-safe-equal.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Constant-time string equality for secrets, bearer tokens, and hex digests (ASCII).
+ */
+export declare function timingSafeEqual(a: string, b: string): boolean;
+//# sourceMappingURL=timing-safe-equal.d.ts.map

package/dist/timing-safe-equal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing-safe-equal.d.ts","sourceRoot":"","sources":["../src/timing-safe-equal.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAO7D"}

package/dist/timing-safe-equal.js

@@ -0,0 +1,13 @@
+/**
+ * Constant-time string equality for secrets, bearer tokens, and hex digests (ASCII).
+ */
+export function timingSafeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++) {
+        diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    }
+    return diff === 0;
+}
+//# sourceMappingURL=timing-safe-equal.js.map

package/dist/timing-safe-equal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timing-safe-equal.js","sourceRoot":"","sources":["../src/timing-safe-equal.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/tools-backlog.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Carrier MCP — v1.1 backlog tool registrations (9 tools).
+ *
+ * These are OCS methods confirmed live in the eSIMVault API docs but not yet
+ * exposed in the v1 server. All 9 are wired here to close coverage gaps
+ * identified in the 2026-05-12 forensic audit (mango/.planning/research/03-carrier-llc-audit.md).
+ *
+ * Scope assignments:
+ *   write  — affect_subscriber_phone_number, modify_subscriber_mobile_plan,
+ *             modify_subscriber_package_active_period, modify_subscriber_voip_plan,
+ *             push_steering_to_subscriber
+ *   read   — get_subscriber_location_by_cell_id, list_destination_lists
+ *   admin  — reset_subscriber_gz_counter
+ *
+ * Schema notes:
+ *   - All ICCID-accepting tools use the subscriber-record lookup cache pattern
+ *     (resolveSubscriberByIccid) for IMSI resolution where required.
+ *   - pushSteeringToSubs is listed as "write" in the live docs; marked write here
+ *     pending confirmation from eSIMVault support (gap G-04).
+ *   - resetSubsGzCounter is admin-scoped; usage counter resets are irreversible.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type ToolContext } from "./tools.js";
+import type { ToolScope } from "./types.js";
+/** Scope lookup for the 9 backlog tools. */
+export declare const BACKLOG_TOOL_SCOPES: Record<string, ToolScope>;
+export declare function registerAllBacklogTools(server: McpServer, ctx: ToolContext): void;
+//# sourceMappingURL=tools-backlog.d.ts.map

package/dist/tools-backlog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools-backlog.d.ts","sourceRoot":"","sources":["../src/tools-backlog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAW5C,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CASzD,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,EACjB,GAAG,EAAE,WAAW,GACf,IAAI,CA6XN"}