@chrischall/mcp-utils 2.15.1 → 3.0.1

package/dist/http/fetch-bounded.js

@@ -0,0 +1,138 @@
+/**
+ * `fetchBounded` — one bounded `fetch` for the clients that cannot use
+ * {@link createApiClient}.
+ *
+ * Fleet audit 2026-09, cluster 1: about twenty servers call `fetch` bare —
+ * cookie scrapers, multi-host clients, HTML/RSC readers and file downloads,
+ * none of which fit a single-base bearer client. Each one hand-rolled (or
+ * forgot) the same four things, and the audit found every combination
+ * missing: no timeout (a hung upstream holds the tool call until the host
+ * kills it), no cancellation (a cancelled call keeps its request in flight),
+ * a timeout that stops at the headers (a body that stalls afterwards is
+ * unbounded — #534, #584, #783), and no size cap (#989 and #1026 buffer
+ * whole downloads into memory).
+ *
+ * `createApiClient` already had every piece internally; this exports them as
+ * one call:
+ *  - a timer (default {@link DEFAULT_REQUEST_TIMEOUT_MS}, 30 s) that stays
+ *    armed until the body has been read, raced rather than trusted to the
+ *    stream, so a custom `fetchImpl` whose body ignores the abort is bounded
+ *    too;
+ *  - the caller's cancellation — `init.signal` and the ambient tool-call
+ *    signal ({@link currentCallSignal}) — folded in, either one firing aborts;
+ *  - an optional `maxBytes` cap, checked against `Content-Length` before any
+ *    read and counted while streaming;
+ *  - a typed body read (`text`, `json`, `bytes`, or `none`).
+ *
+ * It does NOT judge the status: a 404 or a 500 comes back like a 200, body
+ * read and bounded, because these clients each have their own idea of what a
+ * non-2xx means (a login redirect, an edge block, a soft miss).
+ */
+import { withAmbientCancellation } from '../cancel/index.js';
+import { McpToolError } from '../errors/index.js';
+import { cancelStream, readBytesCapped, ResponseTooLargeError } from './body-limit.js';
+import { DEFAULT_REQUEST_TIMEOUT_MS, RequestTimeoutError } from './index.js';
+// The cap and its error are shared with `createApiClient` (`body-limit.ts`).
+export { ResponseTooLargeError };
+/**
+ * `fetch` with a timeout that covers the body read, the caller's
+ * cancellation (`init.signal` + the ambient tool-call signal), an optional
+ * byte cap, and a typed body read. See the module header for why.
+ *
+ * Errors: {@link RequestTimeoutError} when the timer fires; the caller's own
+ * abort reason (as an `Error`) when the caller cancels;
+ * {@link ResponseTooLargeError} over `maxBytes`; an {@link McpToolError} for
+ * unparseable JSON; anything else `fetch` throws, unchanged.
+ */
+export async function fetchBounded(url, init, opts = {}) {
+    const doFetch = opts.fetchImpl ?? fetch;
+    const service = opts.service ?? hostOf(url);
+    const read = opts.read ?? 'text';
+    const timeoutMs = opts.timeoutMs === false ? 0 : (opts.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS);
+    // The caller's side: its own signal and the ambient tool-call signal.
+    const caller = withAmbientCancellation(init?.signal ?? undefined);
+    if (caller?.aborted)
+        throw reasonOf(caller);
+    const timer = timeoutMs > 0 ? new AbortController() : undefined;
+    const signal = combine(timer?.signal, caller);
+    let handle;
+    let detach = () => { };
+    // Rejects the moment either side gives up; raced against every await.
+    const stop = signal
+        ? new Promise((_resolve, reject) => {
+            const onAbort = () => reject(timer?.signal.aborted ? new RequestTimeoutError(service, timeoutMs) : reasonOf(caller));
+            signal.addEventListener('abort', onAbort, { once: true });
+            detach = () => signal.removeEventListener('abort', onAbort);
+        })
+        : undefined;
+    stop?.catch(() => { });
+    const bounded = (p) => (stop ? Promise.race([p, stop]) : p);
+    if (timer)
+        handle = setTimeout(() => timer.abort(), timeoutMs);
+    try {
+        let res;
+        try {
+            res = await bounded(doFetch(url, { ...init, ...(signal ? { signal } : {}) }));
+        }
+        catch (err) {
+            // An abort surfaces from fetch as an AbortError whichever side caused
+            // it; name it by WHICH side fired, so a caller's cancellation is never
+            // reported as this upstream timing out.
+            if (timer?.signal.aborted)
+                throw new RequestTimeoutError(service, timeoutMs);
+            if (caller?.aborted)
+                throw reasonOf(caller);
+            throw err;
+        }
+        if (read === 'none') {
+            cancelStream(res.body);
+            return done(res, undefined);
+        }
+        const bytes = await readBytesCapped(res, opts.maxBytes, service, bounded);
+        if (read === 'bytes')
+            return done(res, bytes);
+        const text = new TextDecoder().decode(bytes);
+        if (read === 'text')
+            return done(res, text);
+        if (text.length === 0)
+            return done(res, undefined);
+        try {
+            return done(res, JSON.parse(text));
+        }
+        catch (cause) {
+            const type = res.headers.get('content-type') ?? 'no content-type';
+            throw new McpToolError(`${service} returned a non-JSON response (HTTP ${res.status}, ${type}).`, {
+                hint: 'The upstream may have served an error or sign-in page instead of data.',
+                cause,
+                status: res.status,
+            });
+        }
+    }
+    finally {
+        clearTimeout(handle);
+        detach();
+    }
+    function done(res, body) {
+        return { res, status: res.status, ok: res.ok, headers: res.headers, body: body };
+    }
+}
+/** One signal for "either fired", or whichever exists. */
+function combine(a, b) {
+    if (a && b)
+        return AbortSignal.any([a, b]);
+    return a ?? b;
+}
+/** The signal's own reason as an Error, as `throwIfCancelled` reports it. */
+function reasonOf(signal) {
+    const reason = signal.reason;
+    return reason instanceof Error ? reason : new Error(String(reason));
+}
+function hostOf(url) {
+    try {
+        return new URL(url).host;
+    }
+    catch {
+        return String(url);
+    }
+}
+//# sourceMappingURL=fetch-bounded.js.map

package/dist/http/fetch-bounded.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-bounded.js","sourceRoot":"","sources":["../../src/http/fetch-bounded.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA2D7E,6EAA6E;AAC7E,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAiB,EACjB,IAAkB,EAClB,IAAI,GAA2B,EAAE;IAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAgB,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAAC,CAAC;IAEhG,sEAAsE;IACtE,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC;IAClE,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,MAAiD,CAAC;IACtD,IAAI,MAAM,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;IAC5B,sEAAsE;IACtE,MAAM,IAAI,GAAG,MAAM;QACjB,CAAC,CAAC,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,OAAO,GAAG,GAAS,EAAE,CACzB,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAO,CAAC,CAAC,CAAC;YAClG,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,CAAI,CAAa,EAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,KAAK;QAAE,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAE/D,IAAI,CAAC;QACH,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,uEAAuE;YACvE,wCAAwC;YACxC,IAAI,KAAK,EAAE,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC7E,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,iBAAiB,CAAC;YAClE,MAAM,IAAI,YAAY,CAAC,GAAG,OAAO,uCAAuC,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,EAAE;gBAC/F,IAAI,EAAE,wEAAwE;gBAC9E,KAAK;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,EAAE,CAAC;IACX,CAAC;IAED,SAAS,IAAI,CAAC,GAAa,EAAE,IAAa;QACxC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAsB,EAAE,CAAC;IACrG,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,SAAS,OAAO,CAAC,CAA0B,EAAE,CAA0B;IACrE,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ,CAAC,MAAmB;IACnC,MAAM,MAAM,GAAY,MAAM,CAAC,MAAM,CAAC;IACtC,OAAO,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,MAAM,CAAC,GAAiB;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/http/index.d.ts

@@ -16,9 +16,13 @@
  *  - {@link createApiClient} never embeds the token in a thrown message; a 401
  *    yields a fixed "unauthorized" string, not the credential.
  */
+import { McpToolError } from '../errors/index.js';
+import type { ExpectedJsonShape, McpToolErrorKind } from '../errors/index.js';
 export * from './throttle.js';
 export * from './response-cache.js';
 export * from './net-atoms.js';
+export * from './fetch-bounded.js';
+export * from './url-safety.js';
 /** Retry policy for transient responses (HTTP 429 by default). */
 export interface RetryPolicy {
     /** Number of retries after the initial attempt. The fleet default is 1. */
@@ -128,10 +132,75 @@ export interface ApiClientOptions {
      * bounded by an {@link AbortController} — from the request until its body
      * has been read, so a body that stalls after the headers is bounded too; on
      * expiry it throws a {@link RequestTimeoutError} instead of hanging until the
-     * host kills the tool call. A 429 retry gets a fresh timeout. Omit/0 to
-     * disable (default).
+     * host kills the tool call (a {@link WriteOutcomeUnknownError} for a sent
+     * write — see {@link writeOutcomeUnknown}). A 429 retry gets a fresh timeout.
+     *
+     * Defaults to {@link DEFAULT_REQUEST_TIMEOUT_MS} (30 s), matching
+     * `createGraphqlClient`. Before 2.16 the default was unbounded, and the
+     * clients that never passed one (gemini, simplisafe, tripadvisor's web
+     * client — fleet audit 2026-09, cluster 1) held a tool call open on a hung
+     * upstream until the host killed it. Pass `0` or `false` to disable — the
+     * caller's cancellation still applies either way. A download that
+     * legitimately takes longer passes a larger value.
      */
-    timeout?: number;
+    timeout?: number | false;
+    /**
+     * How redirects are handled. Omitted (the default) leaves `fetch`'s own
+     * behaviour unchanged: it follows them, re-sending the credential to
+     * wherever they point. `'manual'` and `'error'` are passed straight to
+     * `fetch`.
+     *
+     * `'same-origin'` follows redirects itself (`fetch` is called with
+     * `redirect: 'manual'`) and re-checks every `Location` against the base
+     * origin BEFORE re-sending: a hop to another origin, a scheme downgrade or
+     * a hop that adds userinfo throws {@link RedirectRefusedError} and nothing
+     * is sent to it (fleet audit 2026-09, cluster 6: accessoticketing #322,
+     * thumbtack #768). A 303, or a 301/302 answering a POST, becomes a
+     * body-less GET; 307/308 keep the method and body. Needs a server-side
+     * `fetch` (Node/undici) that exposes the 3xx and its `Location`.
+     */
+    redirect?: 'same-origin' | 'manual' | 'error' | 'follow';
+    /**
+     * With `redirect: 'same-origin'`, the most hops followed per request.
+     * Default 5. Must be a non-negative integer (a `TypeError` otherwise).
+     */
+    maxRedirects?: number;
+    /**
+     * Report a write whose outcome is unknown as such. On (the default), a
+     * request whose method is not safe (anything but GET / HEAD / OPTIONS /
+     * TRACE) that was SENT but timed out, lost its connection, or broke off
+     * while its response body was read throws {@link WriteOutcomeUnknownError}
+     * instead of a plain {@link RequestTimeoutError} or `fetch`'s raw
+     * `TypeError` — both of which read as "safe to retry", and the model
+     * re-sent the email or booking (fleet audit 2026-09, cluster 7). Mirrors
+     * `createGraphqlClient`'s `outcomeUnknown`. Pass `false` to keep the plain
+     * errors for every request; {@link RequestOptions.idempotent} does it for
+     * one (a search sent as POST).
+     */
+    writeOutcomeUnknown?: boolean;
+    /**
+     * The `hint` on a {@link WriteOutcomeUnknownError}, e.g. to name the read
+     * tool that checks whether the write landed. Defaults to
+     * {@link DEFAULT_WRITE_OUTCOME_HINT}.
+     */
+    writeOutcomeHint?: string;
+    /**
+     * Default byte cap on every response body this client reads, overridden per
+     * call by {@link RequestOptions.maxBytes}. A `Content-Length` over it is
+     * refused before reading; a body that grows past it is cancelled mid-stream.
+     * Either way {@link ResponseTooLargeError} (`kind: 'too_large'`), which never
+     * echoes the body — except on an error status, where the status error
+     * still throws and an over-cap body is dropped (see
+     * {@link RequestOptions.maxBytes}). Omitted (the default), bodies are
+     * unlimited, as before.
+     * Must be a non-negative number (a `TypeError` otherwise); `Infinity` is
+     * the same as omitting it.
+     *
+     * Fleet audit 2026-09 (#733): `fetchRaw` buffered whole downloads — a
+     * splitwise receipt, then base64-encoded — with no cap. Same implementation
+     * as {@link fetchBounded}'s `maxBytes`.
+     */
+    maxResponseBytes?: number;
 }
 /**
  * What {@link ApiClientOptions.onRateLimited} is told about the 429 that
@@ -198,13 +267,46 @@ export interface RequestOptions {
     headers?: Record<string, string>;
     /** Query params appended via {@link buildQueryString} when present. */
     query?: Record<string, unknown>;
+    /**
+     * `fetchJson` only: the JSON shape the body must have. When set, a `null`,
+     * a scalar, the other container, an empty body or a 204 throws
+     * {@link UpstreamFormatError} instead of being returned. Omitted (the
+     * default), any valid JSON is returned and an empty body or 204 resolves
+     * `undefined`, exactly as before. Never sent upstream; `fetchHtml` and
+     * `fetchRaw` ignore it. Shape validation beyond the container kind belongs
+     * to `parseLenient`.
+     */
+    expect?: ExpectedJsonShape;
+    /**
+     * This request is safe to repeat even though its method is not (a search or
+     * lookup sent as POST): a timeout or dropped connection then throws the
+     * plain {@link RequestTimeoutError} / `fetch` error, as a read does, never
+     * {@link WriteOutcomeUnknownError}. Never sent upstream.
+     */
+    idempotent?: boolean;
+    /**
+     * Largest response body, in bytes, this call will read; overrides the
+     * client's {@link ApiClientOptions.maxResponseBytes} (larger or smaller).
+     * Over it: {@link ResponseTooLargeError}, refused on `Content-Length`
+     * before reading or cancelled mid-stream. The timeout still covers the
+     * whole read. A non-2xx whose error body is over the cap still throws its
+     * {@link ApiError}, with the body dropped; a 401 / 429 body (read only to
+     * spot an edge refusal page) is capped the same way, and over the cap is
+     * treated as no page, so {@link UnauthorizedError} /
+     * {@link RateLimitedError} (or the hooks' errors) still throw. Must be a non-negative number (a
+     * `TypeError` otherwise). Never sent upstream.
+     */
+    maxBytes?: number;
 }
 /** The minimal client surface returned by {@link createApiClient}. */
 export interface ApiClient {
     /**
      * Authenticated JSON request. Returns the parsed body, or `undefined` for a
      * 204 / empty body. Throws on 401 (unauthorized), exhausted-429, and other
-     * non-2xx responses (with a redacted, truncated message).
+     * non-2xx responses (with a redacted, truncated message). A 2xx body is read
+     * by {@link parseJsonBody}: a non-JSON body throws {@link UpstreamFormatError}
+     * (or {@link EdgeBlockedError} for a CDN challenge), and `opts.expect`
+     * rejects a body of the wrong shape the same way.
      */
     fetchJson: <T = unknown>(method: string, path: string, opts?: RequestOptions) => Promise<T>;
     /** Authenticated request returning the raw response body as text (e.g. HTML scrapes). */
@@ -230,9 +332,24 @@ export interface RawApiResponse {
     /** The response body bytes. */
     bytes: Uint8Array;
 }
-/** Thrown for an upstream 401. Carries the status so callers can trigger a re-auth. */
+/**
+ * The per-attempt timeout {@link createApiClient} (and {@link fetchBounded})
+ * apply when the caller names none: 30 s, the same budget
+ * `createGraphqlClient` has always used, so every fleet transport bounds a
+ * hung upstream the same way.
+ */
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 30000;
+/** Default hop limit for `createApiClient({ redirect: 'same-origin' })`. */
+export declare const DEFAULT_MAX_REDIRECTS = 5;
+/**
+ * Thrown for an upstream 401. Carries the status so callers can trigger a
+ * re-auth, and `kind: 'credential_rejected'` (an `McpToolErrorKind`) so a
+ * classifier reads it without matching the message.
+ */
 export declare class UnauthorizedError extends Error {
     readonly status = 401;
+    /** Always `'credential_rejected'` unless a subclass says otherwise. */
+    readonly kind: McpToolErrorKind;
     constructor(service: string);
 }
 /**
@@ -242,14 +359,56 @@ export declare class UnauthorizedError extends Error {
  */
 export declare class RateLimitedError extends Error {
     readonly status = 429;
+    /** `'http'`: the far side answered, with a 429 (see `status`). */
+    readonly kind: McpToolErrorKind;
     readonly retryAfterMs: number | undefined;
     constructor(service: string, retryAfterMs?: number);
 }
-/** Thrown when a request exceeds {@link ApiClientOptions.timeout}. */
+/** Thrown when a request exceeds {@link ApiClientOptions.timeout}. Its `kind` is `'timeout'`. */
 export declare class RequestTimeoutError extends Error {
     readonly timeoutMs: number;
+    /** Always `'timeout'` unless a subclass says otherwise. */
+    readonly kind: McpToolErrorKind;
     constructor(service: string, timeoutMs: number);
 }
+/** The default `hint` on a {@link WriteOutcomeUnknownError}. */
+export declare const DEFAULT_WRITE_OUTCOME_HINT = "The write may have happened \u2014 check before retrying; do not resend blindly.";
+/**
+ * A write (a request whose method is not safe) was SENT, but no usable
+ * response came back: it timed out, the connection dropped, or the response
+ * body broke off. The server may already have committed it, so the outcome is
+ * UNKNOWN, and re-sending it blindly can duplicate an email, a booking or a
+ * payment (fleet audit 2026-09, cluster 7: opentable #632, honeybook #1023,
+ * office-outlook #1073, vibo #1135, untappd #1132).
+ *
+ * An {@link McpToolError}, so its {@link McpToolError.hint} ("check before
+ * retrying") reaches the model through `wrapToolError` / `errorResult`. It
+ * still DECLARES a timeout when one caused it (`timedOut: true`, the marker
+ * `isTimeoutError` reads), but carries `retrySafe: false`, so
+ * `retryOnceOnTimeout` never replays it. Mirrors `GraphqlTransportError`'s
+ * `outcomeUnknown` and fetchproxy's `FetchproxyTimeoutError.retrySafe`.
+ *
+ * Thrown by {@link createApiClient} (see
+ * {@link ApiClientOptions.writeOutcomeUnknown}); exported so a hand-rolled
+ * client can throw the same thing.
+ */
+export declare class WriteOutcomeUnknownError extends McpToolError {
+    /** Always `true`: whether the write happened is not known. */
+    readonly outcomeUnknown: true;
+    /** Always `false`: never replay this request without checking first. */
+    readonly retrySafe: false;
+    /** `true` when the request's timeout expired; `false` for a dropped connection or broken body. */
+    readonly timedOut: boolean;
+    /** The timeout that expired, when {@link timedOut}. */
+    readonly timeoutMs: number | undefined;
+    /** The request method, upper-cased. */
+    readonly method: string;
+    constructor(service: string, method: string, opts?: {
+        timeoutMs?: number;
+        cause?: unknown;
+        hint?: string;
+    });
+}
 /**
  * Thrown by {@link ApiClient.fetchJson} / {@link ApiClient.fetchHtml} for a
  * non-2xx response that isn't a 401/429 (those map to
@@ -294,6 +453,8 @@ export declare class UpstreamHttpError extends ApiError {
 export declare class EdgeBlockedError extends ApiError {
     /** Which edge refused the request, e.g. `'CloudFront'` or `'Cloudflare'`. */
     readonly vendor: string;
+    /** Always `'edge_blocked'`: the credential was never judged. */
+    readonly kind: McpToolErrorKind;
     /**
      * @param where The service the request was for, and — when the thrower knows
      *   it — the method and path, which the message names.
@@ -325,6 +486,48 @@ export declare function detectEdgeBlock(input: {
 }): {
     vendor: string;
 } | null;
+/** Options for {@link parseJsonBody}. All optional; the request fields only enrich the error message. */
+export interface ParseJsonBodyOptions {
+    /**
+     * The JSON shape the body must have. When set, `null`, a scalar, the other
+     * container or an empty body throws {@link UpstreamFormatError}. Omitted,
+     * any valid JSON is returned and an empty body yields `undefined`.
+     */
+    expect?: ExpectedJsonShape;
+    /** The upstream's display name, for the error message. */
+    service?: string;
+    /** The request method, for the error message. */
+    method?: string;
+    /** The request path, for the error message. */
+    path?: string;
+    /**
+     * The response status. Also passed to {@link detectEdgeBlock}, so on a 2xx
+     * only a challenge (or `cf-mitigated`) counts as an edge block.
+     */
+    status?: number;
+    /** The response headers: read for `cf-mitigated` and, absent `contentType`, the `Content-Type`. */
+    headers?: EdgeBlockHeaders;
+    /** The response `Content-Type`, for the error message. */
+    contentType?: string;
+}
+/**
+ * Parse an upstream response body as JSON, turning every way it can fail into
+ * a typed, message-safe error instead of a raw `SyntaxError` (whose message
+ * quotes the body) or a later `TypeError` on `null`:
+ *
+ *  - a body that is not JSON is first checked with {@link detectEdgeBlock}
+ *    (a Cloudflare challenge served with a 200 becomes {@link EdgeBlockedError});
+ *    otherwise it throws {@link UpstreamFormatError} with `received: 'non-json'`,
+ *    naming the service, request, status and content type but never the body;
+ *  - with `expect`, an empty body, `null`, a scalar or the wrong container
+ *    throws {@link UpstreamFormatError} too.
+ *
+ * An empty (or whitespace-only) body without `expect` returns `undefined`, the
+ * same contract `fetchJson` has for a 204. `fetchJson` runs every 2xx body
+ * through this; export it for hand-rolled clients and OAuth token exchanges
+ * that read the body themselves (skylight, ofw).
+ */
+export declare function parseJsonBody<T = unknown>(text: string, opts?: ParseJsonBodyOptions): T;
 /**
  * Build a bearer-auth fetch client with one-shot 429 retry, 401 mapping, 204 /
  * empty-body handling, and redacted error formatting.
@@ -453,6 +656,28 @@ export type SetCookieSource = string[] | string | null | undefined | {
     getSetCookie?: () => string[];
     get(name: string): string | null;
 };
+/**
+ * Apply a response's `Set-Cookie`s to a caller-owned name→value jar, in place,
+ * and report whether the jar changed (so the caller knows when to persist it).
+ *
+ *  - A deletion marker — `Max-Age <= 0`, an `Expires` before 2000 (comma- or
+ *    dash-format epoch), or an **empty value** — removes the name. Unlike
+ *    {@link CookieJar.absorb}, an empty value is a delete here, so a cleared
+ *    session cookie never lingers in a persisted jar as `name=`.
+ *  - Any other entry sets the name (later entries win).
+ *  - Entries with no name (`=v`, `noequals`) are ignored.
+ *
+ * Returns `true` only when a value was added, replaced with a different value,
+ * or removed; re-setting an identical value or deleting an absent name is
+ * `false`. Accepts the same sources as {@link CookieJar.absorb}: a `Headers`
+ * object (prefers `getSetCookie()`), the `getSetCookie()` array, or a single
+ * comma-joined string (split safely around `Expires` commas).
+ *
+ * Consolidates the hand-rolled `getSetCookie` absorb loops in artsonia,
+ * canvas-parent, crowntowncompost, evite, infinitecampus, myatriumhealth, ofw
+ * and simplepractice (myatriumhealth's stored deletions as empty values).
+ */
+export declare function mergeSetCookies(jar: Map<string, string>, setCookie: SetCookieSource): boolean;
 /**
  * Stateful cookie jar for multi-step session logins (login page → CSRF prime →
  * credential POST → API calls), built on the {@link parseCookieJar} semantics.

package/dist/http/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAS/B,kEAAkE;AAClE,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,2CAA2C;AAC3C;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC;;;OAGG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC;IAC7B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC;IACjD,oEAAoE;IACpE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;OAIG;IACH,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;;;OAMG;IACH,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrC,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6DAA6D;AAC7D,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC/E;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,sEAAsE;AACtE,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5F,yFAAyF;IACzF,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpF;;;;;;;OAOG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5F;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,+EAA+E;IAC/E,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B;IAC/B,KAAK,EAAE,UAAU,CAAC;CACnB;AAMD,uFAAuF;AACvF,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,OAAO;IACtB,YAAY,OAAO,EAAE,MAAM,EAI1B;CACF;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,OAAO;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,YAAY,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAKjD;CACF;AAED,sEAAsE;AACtE,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,YAAY,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAK7C;CACF;AAED;;;;;;;;GAQG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAK1C;CACF;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAkB,SAAQ,QAAQ;IAC7C,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAI1C;CACF;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ;IAC5C,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,YAAY,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAcrG;CACF;AAED,gFAAgF;AAChF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AA+D5E;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAa5B;AAqDD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAkUjE;AAMD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAcxE;AAMD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,MAAM,CAAC,EACpF,IAAI,EAAE,CAAC,EACP,cAAc,EAAE,SAAS,CAAC,EAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAQrB;AAMD,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,qBAA0B,GAC/B,MAAM,CAKR;AAMD,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,gBAAgB,CAQnF;AAMD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAC;CACtB;AAoCD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,CAetG;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxE;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GACvB,MAAM,EAAE,GACR,MAAM,GACN,IAAI,GACJ,SAAS,GACT;IAAE,YAAY,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAYxE;;;;;;;;;;;;GAYG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IAEjD,8EAA8E;IAC9E,MAAM,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,CAWxC;IAED,yEAAyE;IACzE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEpC;IAED,4EAA4E;IAC5E,MAAM,IAAI,MAAM,CAEf;IAED,8CAA8C;IAC9C,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AA8BD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK/D;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIpE;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAmB,GAAG,eAAe,CAmB5F;AAMD,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB,CAAC,CAAC,EAAE,CAAC;IAC1C;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,CAAC,CAAC;IACzC;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,CAAC,CAAC;IACtD;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,KAAK,OAAO,CAAC;IACnD,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,CAAC,EAClC,KAAK,EAAE,CAAC,EAAE,EACV,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EACrD,IAAI,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,GACjC,OAAO,CAAC,CAAC,EAAE,CAAC,CA+Ed"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/http/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,YAAY,EAAwD,MAAM,oBAAoB,CAAC;AACxG,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAoB,MAAM,oBAAoB,CAAC;AAGhG,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAWhC,kEAAkE;AAClE,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,2CAA2C;AAC3C;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC;;;OAGG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,KAAK,CAAC;IAC7B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC;IACjD,oEAAoE;IACpE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,aAAa,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACzD;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;OAeG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;OAIG;IACH,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;;;OAMG;IACH,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrC,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6DAA6D;AAC7D,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC/E;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,sEAAsE;AACtE,MAAM,WAAW,SAAS;IACxB;;;;;;;OAOG;IACH,SAAS,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5F,yFAAyF;IACzF,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpF;;;;;;;OAOG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5F;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,+EAA+E;IAC/E,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B;IAC/B,KAAK,EAAE,UAAU,CAAC;CACnB;AAMD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAevC;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,OAAO;IACtB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAyB;IACxD,YAAY,OAAO,EAAE,MAAM,EAI1B;CACF;AAED;;;;GAIG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,OAAO;IACtB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAU;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,YAAY,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAKjD;CACF;AAED,iGAAiG;AACjG,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAa;IAC5C,YAAY,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAK7C;CACF;AAED,gEAAgE;AAChE,eAAO,MAAM,0BAA0B,qFACwC,CAAC;AAEhF;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,wBAAyB,SAAQ,YAAY;IACxD,8DAA8D;IAC9D,QAAQ,CAAC,cAAc,OAAiB;IACxC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,QAAkB;IACpC,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,EAe7G;CACF;AAKD;;;;;;;;GAQG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAK1C;CACF;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAkB,SAAQ,QAAQ;IAC7C,YAAY,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAI1C;CACF;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAiB,SAAQ,QAAQ;IAC5C,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAkB;IACjD;;;OAGG;IACH,YAAY,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAcrG;CACF;AAED,gFAAgF;AAChF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AA+D5E;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAa5B;AAED,yGAAyG;AACzG,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAQD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,oBAAyB,GAAG,CAAC,CAiC3F;AAqDD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAkiBjE;AAkBD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAcxE;AAMD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,MAAM,CAAC,EACpF,IAAI,EAAE,CAAC,EACP,cAAc,EAAE,SAAS,CAAC,EAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAQrB;AAMD,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,qBAA0B,GAC/B,MAAM,CAKR;AAMD,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,gBAAgB,CAQnF;AAMD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAC;CACtB;AAoCD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,CAetG;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxE;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GACvB,MAAM,EAAE,GACR,MAAM,GACN,IAAI,GACJ,SAAS,GACT;IAAE,YAAY,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAYxE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAe7F;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IAEjD,8EAA8E;IAC9E,MAAM,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,CAWxC;IAED,yEAAyE;IACzE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEpC;IAED,4EAA4E;IAC5E,MAAM,IAAI,MAAM,CAEf;IAED,8CAA8C;IAC9C,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AA8BD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK/D;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIpE;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAmB,GAAG,eAAe,CAmB5F;AAMD,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB,CAAC,CAAC,EAAE,CAAC;IAC1C;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,CAAC,CAAC;IACzC;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,CAAC,CAAC;IACtD;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,KAAK,OAAO,CAAC;IACnD,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,CAAC,EAClC,KAAK,EAAE,CAAC,EAAE,EACV,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EACrD,IAAI,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,GACjC,OAAO,CAAC,CAAC,EAAE,CAAC,CA+Ed"}