@cliwant/mcp-sam-gov 0.2.1 → 1.0.0

package/dist/datagov-catalog.d.ts

@@ -0,0 +1,84 @@
+/**
+ * datagov-catalog.ts — data.gov v4 Catalog API (`api.gsa.gov/technology/datagov/v4`)
+ * federal DATASET DISCOVERY (ADR-0046, resilience-initiative Phase 3).
+ *
+ * WHAT IT ADDS: data.gov RETIRED its CKAN `package_search` endpoint in 2025; the
+ * v4 Catalog API is its replacement. This restores federal open-dataset DISCOVERY
+ * across all publishing agencies (hundreds of thousands of datasets) as a NEW
+ * keyless-first source. It is a SEPARATE host from datagov.ts's api.data.gov trio
+ * (Regulations.gov / Congress.gov), but it shares the IDENTICAL api.data.gov key
+ * (`api.gsa.gov` accepts the same DATA_GOV_API_KEY / DEMO_KEY via `X-Api-Key`), so
+ * it REUSES the audited `datagovKey.ts` key seam verbatim (keyHeader / keyModeLabel
+ * / pushKeyNote) — keylessMode:false (genuinely keyed, mirroring the regulations trio).
+ *
+ * The module writes ZERO fetch/coercion/error/meta code — it REUSES `getJson`
+ * (redirect:"error", the X-Api-Key header) / `driftError` / `str` (coerce.ts,
+ * null-never-empty-string) / `withMeta`·`buildMeta` / `ResponseMeta.nextCursor`,
+ * and MIRRORS datagov.ts's `searchDockets` schema_drift catch-ladder verbatim.
+ *
+ * ★ SSRF: the host is a compile-time literal (`DATAGOV_CATALOG_HOST`); every filter
+ *   (`_q`/`organization`/`_size`/`_format`) rides in a MODULE-BUILT `URLSearchParams`
+ *   assembled key-by-key from validated typed args — NO raw-query passthrough. The
+ *   opaque `cursor` is charclass-validated (`^[A-Za-z0-9+/=_-]{1,4096}$`, rejecting
+ *   `../` / spaces / `%`) BEFORE it rides the `after=` query param. A post-construction
+ *   hostname/protocol assertion + `redirect:"error"` lock it (fail closed on any
+ *   off-host 3xx — a 3xx off api.gsa.gov could carry the X-Api-Key header away).
+ *
+ * ★ THE HONESTY PILLARS (P1-P4, captured live 2026-07-14 — the v4 facts):
+ *   P1 (NO total): the v4 search response is `{ after, results, sort }` — it reports
+ *     NO match count. `totalAvailable = null` (NEVER results.length, NEVER a fabricated
+ *     total). Pagination is an OPAQUE `after` cursor: `hasMore = after is a non-empty
+ *     string`; `nextCursor = hasMore ? after : null` (passed back VERBATIM as the next
+ *     `cursor` argument). offset/nextOffset are null (a numeric offset is meaningless).
+ *   P2: getJson→fetchWithRetry THROWS on 429 (rate_limited — very likely at DEMO_KEY's
+ *     ~10/hr), 5xx (upstream_unavailable), timeout — NEVER a fake empty. A genuine
+ *     no-match (results:[], no after) ⇒ honest empty (datasets:[], returned:0,
+ *     nextCursor:null, complete:true).
+ *   P3: every scalar via `str` (null-never-empty-string — a missing accessLevel /
+ *     license / landingPage is null, NEVER "").
+ *   P4: `body.results` absent/non-array ⇒ driftError; a 200 non-JSON body ⇒ schema_drift
+ *     via the catch-ladder (ToolErrorCarrier rethrow FIRST so a 429/5xx keeps its
+ *     taxonomy → SyntaxError→driftError → bare rethrow).
+ *   accessLevel is surfaced VERBATIM (public / restricted public / non-public), null
+ *     when absent — the consumer judges the dataset's openness (this tool only
+ *     DISCOVERS datasets; it does not ingest distributions).
+ */
+import { type MetaBundle } from "./meta.js";
+export declare const DATAGOV_CATALOG_HOST = "api.gsa.gov";
+export declare const DATAGOV_CURSOR_RE: RegExp;
+export type CatalogDistribution = {
+    title: string | null;
+    format: string | null;
+};
+export type CatalogDataset = {
+    id: string | null;
+    title: string | null;
+    organization: string | null;
+    description: string | null;
+    accessLevel: string | null;
+    license: string | null;
+    landingPage: string | null;
+    modified: string | null;
+    lastHarvested: string | null;
+    keywords: string[];
+    themes: string[];
+    distributions: CatalogDistribution[];
+    identifier: string | null;
+};
+export type DatagovSearchDatasetsArgs = {
+    query?: string;
+    organization?: string;
+    limit?: number;
+    cursor?: string;
+};
+/**
+ * Search the data.gov v4 dataset catalog (the CKAN-retirement replacement).
+ * Filters: `query` (→_q), `organization` (publisher slug), `limit` (→_size),
+ * `cursor` (→after, the opaque continuation). The query is MODULE-BUILT from
+ * validated typed args through URLSearchParams (NO raw passthrough); `_format=json`
+ * is ALWAYS appended. Returns curated dataset rows + honest `_meta`: totalAvailable
+ * is NULL (the v4 API reports no count — P1), the opaque-cursor continuation, the
+ * accessLevel openness field surfaced verbatim, and the DEMO_KEY rate disclosure.
+ */
+export declare function searchDatasets(args: DatagovSearchDatasetsArgs): Promise<MetaBundle>;
+//# sourceMappingURL=datagov-catalog.d.ts.map

package/dist/datagov-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"datagov-catalog.d.ts","sourceRoot":"","sources":["../src/datagov-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAKH,OAAO,EAAY,KAAK,UAAU,EAAqB,MAAM,WAAW,CAAC;AAOzE,eAAO,MAAM,oBAAoB,gBAAgB,CAAC;AAelD,eAAO,MAAM,iBAAiB,QAA2C,CAAC;AAO1E,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,mBAAmB,EAAE,CAAC;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AA2EF,MAAM,MAAM,yBAAyB,GAAG;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,UAAU,CAAC,CAyGrB"}

package/dist/datagov-catalog.js

@@ -0,0 +1,233 @@
+/**
+ * datagov-catalog.ts — data.gov v4 Catalog API (`api.gsa.gov/technology/datagov/v4`)
+ * federal DATASET DISCOVERY (ADR-0046, resilience-initiative Phase 3).
+ *
+ * WHAT IT ADDS: data.gov RETIRED its CKAN `package_search` endpoint in 2025; the
+ * v4 Catalog API is its replacement. This restores federal open-dataset DISCOVERY
+ * across all publishing agencies (hundreds of thousands of datasets) as a NEW
+ * keyless-first source. It is a SEPARATE host from datagov.ts's api.data.gov trio
+ * (Regulations.gov / Congress.gov), but it shares the IDENTICAL api.data.gov key
+ * (`api.gsa.gov` accepts the same DATA_GOV_API_KEY / DEMO_KEY via `X-Api-Key`), so
+ * it REUSES the audited `datagovKey.ts` key seam verbatim (keyHeader / keyModeLabel
+ * / pushKeyNote) — keylessMode:false (genuinely keyed, mirroring the regulations trio).
+ *
+ * The module writes ZERO fetch/coercion/error/meta code — it REUSES `getJson`
+ * (redirect:"error", the X-Api-Key header) / `driftError` / `str` (coerce.ts,
+ * null-never-empty-string) / `withMeta`·`buildMeta` / `ResponseMeta.nextCursor`,
+ * and MIRRORS datagov.ts's `searchDockets` schema_drift catch-ladder verbatim.
+ *
+ * ★ SSRF: the host is a compile-time literal (`DATAGOV_CATALOG_HOST`); every filter
+ *   (`_q`/`organization`/`_size`/`_format`) rides in a MODULE-BUILT `URLSearchParams`
+ *   assembled key-by-key from validated typed args — NO raw-query passthrough. The
+ *   opaque `cursor` is charclass-validated (`^[A-Za-z0-9+/=_-]{1,4096}$`, rejecting
+ *   `../` / spaces / `%`) BEFORE it rides the `after=` query param. A post-construction
+ *   hostname/protocol assertion + `redirect:"error"` lock it (fail closed on any
+ *   off-host 3xx — a 3xx off api.gsa.gov could carry the X-Api-Key header away).
+ *
+ * ★ THE HONESTY PILLARS (P1-P4, captured live 2026-07-14 — the v4 facts):
+ *   P1 (NO total): the v4 search response is `{ after, results, sort }` — it reports
+ *     NO match count. `totalAvailable = null` (NEVER results.length, NEVER a fabricated
+ *     total). Pagination is an OPAQUE `after` cursor: `hasMore = after is a non-empty
+ *     string`; `nextCursor = hasMore ? after : null` (passed back VERBATIM as the next
+ *     `cursor` argument). offset/nextOffset are null (a numeric offset is meaningless).
+ *   P2: getJson→fetchWithRetry THROWS on 429 (rate_limited — very likely at DEMO_KEY's
+ *     ~10/hr), 5xx (upstream_unavailable), timeout — NEVER a fake empty. A genuine
+ *     no-match (results:[], no after) ⇒ honest empty (datasets:[], returned:0,
+ *     nextCursor:null, complete:true).
+ *   P3: every scalar via `str` (null-never-empty-string — a missing accessLevel /
+ *     license / landingPage is null, NEVER "").
+ *   P4: `body.results` absent/non-array ⇒ driftError; a 200 non-JSON body ⇒ schema_drift
+ *     via the catch-ladder (ToolErrorCarrier rethrow FIRST so a 429/5xx keeps its
+ *     taxonomy → SyntaxError→driftError → bare rethrow).
+ *   accessLevel is surfaced VERBATIM (public / restricted public / non-public), null
+ *     when absent — the consumer judges the dataset's openness (this tool only
+ *     DISCOVERS datasets; it does not ingest distributions).
+ */
+import { ToolErrorCarrier } from "./errors.js";
+import { getJson, driftError } from "./datasource.js";
+import { str } from "./coerce.js";
+import { withMeta } from "./meta.js";
+// The SHARED api.data.gov key seam (ADR-0010 §2). api.gsa.gov accepts the SAME
+// DATA_GOV_API_KEY / DEMO_KEY via the X-Api-Key header, so this is a THIRD consumer
+// of the audited key discipline — a key-leak regression now fails this suite too.
+import { keyHeader, keyModeLabel, pushKeyNote } from "./datagovKey.js";
+// ─── Fixed endpoint (SSRF core — compile-time CONSTANTS) ──────────
+export const DATAGOV_CATALOG_HOST = "api.gsa.gov";
+const DATAGOV_CATALOG_BASE = "/technology/datagov/v4";
+const DATAGOV_CATALOG_SEARCH_PATH = `${DATAGOV_CATALOG_BASE}/search`;
+// HOST+path label — surfaces in ToolError.upstreamEndpoint; the key rides ONLY in
+// the X-Api-Key header, so no token can ever appear here.
+const DATAGOV_CATALOG_LABEL = "datagov-catalog:/technology/datagov/v4/search";
+const DATAGOV_CATALOG_SOURCE = (mode) => `${DATAGOV_CATALOG_HOST} via data.gov v4 Catalog API (${mode})`;
+// The opaque `after` cursor grammar (SSRF + injection guard). data.gov's cursor is
+// a base64/URL-safe token — `+/=_-`, no `%` (URLSearchParams would double-encode a
+// literal `%` ('%2e'→'%252e') and corrupt the cursor; the real tokens carry none).
+// Validated BEFORE the value rides `after=` — a `../` / space / `%` ⇒ invalid_input,
+// 0 fetch (mirrors clinicaltrials CT_TOKEN_RE).
+export const DATAGOV_CURSOR_RE = new RegExp("^[A-Za-z0-9+/=_-]{1,4096}$");
+// The P1 no-total disclosure — the load-bearing honesty caveat carried EVERY response.
+const DATAGOV_CATALOG_NO_TOTAL_NOTE = "data.gov catalog does not report a total match count — use nextCursor to page; totalAvailable is unknown (null). Pagination is an OPAQUE cursor (offset/nextOffset are meaningless/null); pass _meta.nextCursor back as the `cursor` argument. nextCursor:null / hasMore:false means this is the last page.";
+/** A string[] from a mixed value (drops null/empty via str), else [] when absent/non-array. */
+function strArray(x) {
+    if (!Array.isArray(x))
+        return [];
+    return x.map((v) => str(v)).filter((v) => v !== null);
+}
+/**
+ * Map ONE `results[]` row → the curated dataset shape. Every scalar via `str`
+ * (null-never-empty-string — a missing accessLevel/license/landingPage is null,
+ * NEVER ""). description falls back from the row-level to the DCAT-US field.
+ * keywords/themes/distributions default to [] (an honest "none listed"); a
+ * distribution is kept only when it carries a title OR a format.
+ */
+function mapDataset(row) {
+    const r = (row ?? {});
+    const dcat = (r.dcat ?? {});
+    const distributions = Array.isArray(dcat.distribution)
+        ? dcat.distribution
+            .map((d) => {
+            const it = (d ?? {});
+            return { title: str(it.title), format: str(it.format ?? it.mediaType) };
+        })
+            .filter((x) => x.title !== null || x.format !== null)
+        : [];
+    return {
+        id: str(r.slug),
+        title: str(r.title),
+        organization: str(r.organization),
+        description: str(r.description ?? dcat.description),
+        accessLevel: str(dcat.accessLevel),
+        license: str(dcat.license),
+        landingPage: str(dcat.landingPage),
+        modified: str(dcat.modified),
+        lastHarvested: str(r.last_harvested_date),
+        keywords: strArray(r.keyword),
+        themes: strArray(r.theme),
+        distributions,
+        identifier: str(dcat.identifier),
+    };
+}
+// ─── SSRF-guarded fetch (fixed host + hostname assertion + redirect) ──
+/**
+ * GET one data.gov v4 Catalog JSON resource. `path` is a fixed base path; all
+ * caller params ride in `params` (URLSearchParams, encoded). Builds
+ * `https://${DATAGOV_CATALOG_HOST}${path}?${params}` on the FIXED host, asserts the
+ * CONSTRUCTED URL's hostname === the host over https (belt-and-suspenders), sets
+ * `redirect:"error"` (an off-host 3xx must NOT be followed — it could carry the
+ * X-Api-Key header to a foreign host), and attaches the key ONLY in the X-Api-Key
+ * header. `label` is host+path only (→ ToolError.upstreamEndpoint).
+ */
+async function getDatagovCatalog(path, label, params) {
+    const qs = params.toString();
+    const url = `https://${DATAGOV_CATALOG_HOST}${path}${qs ? `?${qs}` : ""}`;
+    const built = new URL(url);
+    if (built.hostname !== DATAGOV_CATALOG_HOST || built.protocol !== "https:") {
+        throw new ToolErrorCarrier({
+            kind: "invalid_input",
+            message: `Constructed data.gov catalog URL host ${JSON.stringify(built.hostname)} (${built.protocol}) does not match the fixed host ${JSON.stringify(DATAGOV_CATALOG_HOST)} over https — refusing to fetch (SSRF safety).`,
+            retryable: false,
+            upstreamEndpoint: label,
+        });
+    }
+    // The key rides in the X-Api-Key header ONLY (never the URL/label/_meta);
+    // redirect:"error" (fail closed on any off-host 3xx).
+    return getJson(url, { label, headers: keyHeader(), redirect: "error" });
+}
+/**
+ * Search the data.gov v4 dataset catalog (the CKAN-retirement replacement).
+ * Filters: `query` (→_q), `organization` (publisher slug), `limit` (→_size),
+ * `cursor` (→after, the opaque continuation). The query is MODULE-BUILT from
+ * validated typed args through URLSearchParams (NO raw passthrough); `_format=json`
+ * is ALWAYS appended. Returns curated dataset rows + honest `_meta`: totalAvailable
+ * is NULL (the v4 API reports no count — P1), the opaque-cursor continuation, the
+ * accessLevel openness field surfaced verbatim, and the DEMO_KEY rate disclosure.
+ */
+export async function searchDatasets(args) {
+    const label = DATAGOV_CATALOG_LABEL;
+    const limit = args.limit ?? 20;
+    // ── Belt-and-suspenders cursor grammar (behind the server's Zod). A bad cursor
+    //    would ride `after=` and either 400 or silently mis-page; reject it pre-fetch
+    //    (0 network call) so a `../` / space / `%` can never reach the query. ──
+    if (args.cursor !== undefined && !DATAGOV_CURSOR_RE.test(args.cursor)) {
+        throw new ToolErrorCarrier({
+            kind: "invalid_input",
+            message: `Invalid cursor (opaque continuation token) — must be a ≤4096-char base64/URL-safe token (no spaces, '../', or '%'). Pass back the _meta.nextCursor from the previous page.`,
+            retryable: false,
+            upstreamEndpoint: label,
+        });
+    }
+    // ── Build the query from VALIDATED typed args, key-by-key (SSRF: no raw
+    //    passthrough). _format=json is ALWAYS appended. ──
+    const params = new URLSearchParams();
+    const filtersApplied = [];
+    if (args.query !== undefined) {
+        params.set("_q", args.query);
+        filtersApplied.push("query");
+    }
+    if (args.organization !== undefined) {
+        params.set("organization", args.organization);
+        filtersApplied.push("organization");
+    }
+    params.set("_size", String(limit));
+    if (args.cursor !== undefined) {
+        params.set("after", args.cursor);
+        filtersApplied.push("cursor");
+    }
+    params.set("_format", "json");
+    // ── The typed catch-ladder (datagov.ts searchDockets shape, VERBATIM). Preserve
+    //    the 429/404/5xx/400/timeout ToolErrorCarrier taxonomy FIRST (LOAD-BEARING:
+    //    the DEMO_KEY-~10/hr 429→rate_limited frontier would regress to schema_drift
+    //    under a broader catch); reclassify a 200 non-JSON `.json()` SyntaxError to
+    //    schema_drift SECOND; bare-rethrow LAST. The host-assert ToolErrorCarrier is
+    //    also rethrown first. ──
+    let body;
+    try {
+        body = await getDatagovCatalog(DATAGOV_CATALOG_SEARCH_PATH, label, params);
+    }
+    catch (e) {
+        if (e instanceof ToolErrorCarrier)
+            throw e;
+        if (e instanceof SyntaxError)
+            throw driftError(label, "data.gov catalog returned a non-JSON body at HTTP 200 — schema drift.");
+        throw e;
+    }
+    const b = (body ?? {});
+    // ── P4: `results` MUST be an array (a missing/string/null results is drift,
+    //    never a fabricated empty — a TypeError must never mask drift as
+    //    upstream_unavailable). ──
+    if (!Array.isArray(b.results)) {
+        throw driftError(label, "data.gov catalog shape drift — /search response.results must be an array.");
+    }
+    const datasets = b.results.map(mapDataset);
+    const returned = datasets.length;
+    // ── P1: NO total is reported ⇒ totalAvailable = null (NEVER results.length,
+    //    NEVER a fabricated total). Pagination is the opaque `after` cursor: hasMore
+    //    from cursor-presence; nextCursor passed back VERBATIM (never derived). ──
+    const rawAfter = b.after;
+    const hasMore = typeof rawAfter === "string" && rawAfter.length > 0;
+    const nextCursor = hasMore ? rawAfter : null;
+    const notes = [DATAGOV_CATALOG_NO_TOTAL_NOTE];
+    pushKeyNote(notes);
+    if (filtersApplied.length === 0) {
+        notes.push("No filters were applied — this is an unscoped scan of the WHOLE data.gov catalog. Add `query` and/or `organization` for a meaningful scoped result set.");
+    }
+    return withMeta({ datasets }, {
+        source: DATAGOV_CATALOG_SOURCE(keyModeLabel()),
+        keylessMode: false, // genuinely keyed (api.data.gov X-Api-Key)
+        returned,
+        // P1 — the v4 API reports NO match count. NULL, never results.length.
+        totalAvailable: null,
+        // complete is DERIVED by buildMeta: a page with no `after` (hasMore:false) and
+        // no dropped filters ⇒ complete:true (an honest exact empty on a no-match); a
+        // page WITH an `after` cursor ⇒ hasMore:true ⇒ complete:false.
+        filtersApplied,
+        filtersDropped: [],
+        fieldsUnavailable: [],
+        // Cursor page: offset/nextOffset null (no numeric offset); continuation is
+        // nextCursor (the opaque `after` token, passed back verbatim as `cursor`).
+        pagination: { offset: null, limit, hasMore, nextOffset: null },
+        nextCursor,
+        notes,
+    });
+}
+//# sourceMappingURL=datagov-catalog.js.map

package/dist/datagov-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"datagov-catalog.js","sourceRoot":"","sources":["../src/datagov-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAsC,MAAM,WAAW,CAAC;AACzE,+EAA+E;AAC/E,oFAAoF;AACpF,kFAAkF;AAClF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEvE,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAClD,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AACtD,MAAM,2BAA2B,GAAG,GAAG,oBAAoB,SAAS,CAAC;AACrE,kFAAkF;AAClF,0DAA0D;AAC1D,MAAM,qBAAqB,GAAG,+CAA+C,CAAC;AAE9E,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9C,GAAG,oBAAoB,iCAAiC,IAAI,GAAG,CAAC;AAElE,mFAAmF;AACnF,mFAAmF;AACnF,mFAAmF;AACnF,qFAAqF;AACrF,gDAAgD;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE1E,uFAAuF;AACvF,MAAM,6BAA6B,GACjC,6SAA6S,CAAC;AAwBhT,+FAA+F;AAC/F,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC;IACjD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACvD,MAAM,aAAa,GAA0B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;QAC3E,CAAC,CAAE,IAAI,CAAC,YAA0B;aAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;YAChD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1E,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC;QACzD,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACf,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACnB,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QACjC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;QACnD,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1B,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAClC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC5B,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACzC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACzB,aAAa;QACb,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE;;;;;;;;GAQG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAAY,EACZ,KAAa,EACb,MAAuB;IAEvB,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,WAAW,oBAAoB,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,oBAAoB,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,yCAAyC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,QAAQ,mCAAmC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,gDAAgD;YAC1N,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IACD,0EAA0E;IAC1E,sDAAsD;IACtD,OAAO,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAUD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA+B;IAE/B,MAAM,KAAK,GAAG,qBAAqB,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAE/B,gFAAgF;IAChF,kFAAkF;IAClF,6EAA6E;IAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,4KAA4K;YACrL,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,uDAAuD;IACvD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAE9B,iFAAiF;IACjF,gFAAgF;IAChF,iFAAiF;IACjF,gFAAgF;IAChF,iFAAiF;IACjF,6BAA6B;IAC7B,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,iBAAiB,CAAC,2BAA2B,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB;YAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,WAAW;YAC1B,MAAM,UAAU,CACd,KAAK,EACL,uEAAuE,CACxE,CAAC;QACJ,MAAM,CAAC,CAAC;IACV,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA2C,CAAC;IAEjE,6EAA6E;IAC7E,qEAAqE;IACrE,+BAA+B;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,UAAU,CACd,KAAK,EACL,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAI,CAAC,CAAC,OAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IAEjC,6EAA6E;IAC7E,iFAAiF;IACjF,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAE,QAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzD,MAAM,KAAK,GAAa,CAAC,6BAA6B,CAAC,CAAC;IACxD,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,yJAAyJ,CAC1J,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CACb,EAAE,QAAQ,EAAE,EACZ;QACE,MAAM,EAAE,sBAAsB,CAAC,YAAY,EAAE,CAAC;QAC9C,WAAW,EAAE,KAAK,EAAE,2CAA2C;QAC/D,QAAQ;QACR,sEAAsE;QACtE,cAAc,EAAE,IAAI;QACpB,+EAA+E;QAC/E,8EAA8E;QAC9E,+DAA+D;QAC/D,cAAc;QACd,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,EAAE;QACrB,2EAA2E;QAC3E,2EAA2E;QAC3E,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;QAC9D,UAAU;QACV,KAAK;KAC0B,CAClC,CAAC;AACJ,CAAC"}

package/dist/datagov.d.ts

@@ -0,0 +1,146 @@
+/**
+ * datagov.ts — the api.data.gov KEYED trio (slice 1: Regulations.gov +
+ * Congress.gov). ADR-0007.
+ *
+ * This is the project's FIRST KEYED (non-keyless) source — every prior source
+ * (Treasury, EDGAR, Socrata, CKAN) is anonymous. It exercises policy② ("keyless-
+ * first, but when a free public key is required, research + automate its
+ * issuance"), so the load-bearing concern is a SAFE env-key adapter whose secret
+ * can NEVER leak into a ToolError, a URL, a log, or `_meta`. Built on the R2
+ * `DataSource` port (ADR-0005) exactly like CKAN — it writes ZERO fetch/coercion/
+ * error/meta code (reuses `getJson`/`driftError`/`num`·`str`/`withMeta`) and
+ * COPIES (does not import) the Socrata/CKAN SSRF + honesty PATTERN.
+ *
+ * ★ THE KEY-SECURITY DISCIPLINE (ADR-0007 §2 — the load-bearing rules):
+ *  1. The key travels in `headers:{ "X-Api-Key": <key> }` ONLY — NEVER in the
+ *     URL/query (no `?api_key=`). Live-verified: the `X-Api-Key` header works for
+ *     BOTH api.regulations.gov and api.congress.gov, so the key is structurally
+ *     absent from the request URL (→ never in a CDN/proxy/access log, never in
+ *     `getJson`'s `label`, never in `ToolError.upstreamEndpoint`).
+ *  2. `label` is HOST+PATH only (e.g. "regulations:/v4/documents",
+ *     "congress:/v3/bill") — never the full URL, never a token. This is what
+ *     reaches `ToolError.upstreamEndpoint`.
+ *  3. `_meta.source`/`notes` are host + key-MODE only ("…(DEMO_KEY)" /
+ *     "…(DATA_GOV_API_KEY)") — never the URL, never the key value, never the
+ *     `X-Api-Key` header.
+ *  4. Headers are never logged/echoed; upstream `next`/`pagination.next` URLs are
+ *     NEVER surfaced verbatim — pagination is re-derived NUMERICALLY.
+ *  5. Never commit the key — read from env only; the DEMO_KEY fallback is a
+ *     literal public constant (safe in source), the real key never is.
+ *
+ * ★ KEYLESS-FIRST UX (policy② / §3): DATA_GOV_API_KEY from env, else the public
+ * literal "DEMO_KEY" + a `_meta.notes` disclosure of the ~10 req/hr shared ceiling
+ * and the free-key signup path. `keylessMode:false` (this is the FIRST source to
+ * report it — it is genuinely keyed).
+ *
+ * ★ SSRF (§4): two fixed hosts (constants, no free host param); all caller params
+ * via URLSearchParams; path segments that interpolate caller input (Congress
+ * `/v3/bill/{congress}/{billType}/{billNumber}`) are Zod-constrained to int/enum;
+ * post-construction `hostname===host && https` assertion; `redirect:"error"`.
+ *
+ * ★ HONESTY (§5): totals are EXACT integers read from the PRIMARY container
+ * (`meta.totalElements` / `pagination.count`) with container guards (a null/absent
+ * container or a non-number total → `driftError`, NOT a TypeError/upstream_unavail);
+ * the primary array (`data`/`bills`) must be an array or → `driftError`; a
+ * genuine-empty (0 results) → complete:true/total:0; an outage/5xx/timeout throws
+ * (never a fake empty). Regulations.gov's 40-page/10,000-record HARD CAP is
+ * handled with the EDGAR window-cap pattern (B1): `hasMore:true` (more genuinely
+ * exists) BUT `nextOffset:null` (no reachable continuation) + a disclosing note.
+ */
+import { num } from "./coerce.js";
+import { type MetaBundle } from "./meta.js";
+export { num };
+export declare const REGULATIONS_HOST = "api.regulations.gov";
+export declare const CONGRESS_HOST = "api.congress.gov";
+export declare const REGULATIONS_SORTS: readonly ["-postedDate", "postedDate", "-lastModifiedDate", "lastModifiedDate", "-commentEndDate"];
+export type RegulationsSort = (typeof REGULATIONS_SORTS)[number];
+export declare const REGULATIONS_DOCUMENT_TYPES: readonly ["Rule", "Proposed Rule", "Notice", "Supporting & Related Material", "Other"];
+export type RegulationsDocumentType = (typeof REGULATIONS_DOCUMENT_TYPES)[number];
+export declare const REGULATIONS_DOCKET_TYPES: readonly ["Rulemaking", "Nonrulemaking"];
+export type RegulationsDocketType = (typeof REGULATIONS_DOCKET_TYPES)[number];
+export declare const REGULATIONS_DOCKET_SORTS: readonly ["-lastModifiedDate", "lastModifiedDate", "title", "-title"];
+export type RegulationsDocketSort = (typeof REGULATIONS_DOCKET_SORTS)[number];
+export declare const CONGRESS_BILL_TYPES: readonly ["hr", "s", "hjres", "sjres", "hconres", "sconres", "hres", "sres"];
+export type CongressBillType = (typeof CONGRESS_BILL_TYPES)[number];
+type RegulationsSearchArgs = {
+    searchTerm?: string;
+    query?: string;
+    agencyId?: string;
+    docketId?: string;
+    documentType?: RegulationsDocumentType;
+    withinCommentPeriod?: boolean;
+    postedDateGe?: string;
+    postedDateLe?: string;
+    sort?: RegulationsSort;
+    pageNumber?: number;
+    pageSize?: number;
+};
+/** Tool: regulations_search_documents. */
+export declare function searchDocuments(args: RegulationsSearchArgs): Promise<MetaBundle>;
+/** Tool: regulations_search_comments. */
+export declare function searchComments(args: RegulationsSearchArgs): Promise<MetaBundle>;
+type RegulationsSearchDocketsArgs = {
+    searchTerm?: string;
+    query?: string;
+    agencyId?: string;
+    docketType?: RegulationsDocketType;
+    lastModifiedDateGe?: string;
+    lastModifiedDateLe?: string;
+    sort?: RegulationsDocketSort;
+    limit?: number;
+    pageNumber?: number;
+};
+type RegulationsGetDocketArgs = {
+    docketId: string;
+};
+/**
+ * Tool: regulations_search_dockets (`GET /v4/dockets`). Lists rulemaking/
+ * nonrulemaking docket CONTAINERS with the same 40-page/10,000-record ceiling and
+ * `totalElements`-exact total doctrine as regulationsSearch.
+ *
+ * ★ min-5 floor (ADR-0044): the API 400s on page[size]<5. The friendly `limit`
+ * exposes 1..250; the wire page[size] is `max(5, limit)` and a `limit<5` returns
+ * the first `limit` of the fetched rows client-side (disclosed) — `totalAvailable`
+ * stays the EXACT server total.
+ */
+export declare function searchDockets(args: RegulationsSearchDocketsArgs): Promise<MetaBundle>;
+/**
+ * Tool: regulations_get_docket (`GET /v4/dockets/{docketId}`). Single-docket
+ * detail — the ONLY view carrying `rin`. `docketId` is charclass-validated at the
+ * Zod layer (S1); it is the only caller value reaching a path segment.
+ */
+export declare function getDocket(args: RegulationsGetDocketArgs): Promise<MetaBundle>;
+type CongressSearchBillsArgs = {
+    query?: string;
+    congress?: number;
+    billType?: CongressBillType;
+    fromDateTime?: string;
+    toDateTime?: string;
+    offset?: number;
+    limit?: number;
+};
+/**
+ * Tool: congress_search_bills. Lists bills via `/v3/bill`, `/v3/bill/{congress}`,
+ * or `/v3/bill/{congress}/{billType}` (congress/billType are Zod-constrained PATH
+ * segments — §4). Numeric offset/limit pagination; `totalAvailable =
+ * pagination.count` (EXACT). `nextOffset` is re-derived NUMERICALLY (never the
+ * upstream `pagination.next` URL — §2 rule 4).
+ *
+ * HONESTY on `query`: the Congress.gov `/v3/bill` endpoint has NO keyword-search
+ * parameter, so a supplied `query` is NOT sent and is disclosed in
+ * `filtersDropped` (a filter we cannot honor is surfaced, never silently ignored).
+ */
+export declare function searchBills(args: CongressSearchBillsArgs): Promise<MetaBundle>;
+type CongressGetBillArgs = {
+    congress: number;
+    billType: CongressBillType;
+    billNumber: number;
+};
+/**
+ * Tool: congress_get_bill. Fetches one bill via
+ * `/v3/bill/{congress}/{billType}/{billNumber}` (all three path segments are
+ * Zod-constrained to int/enum — §4, no injection). Single-record honest `_meta`
+ * (complete:true). A 404 (nonexistent bill) → not_found (never fabricated).
+ */
+export declare function getBill(args: CongressGetBillArgs): Promise<MetaBundle>;
+//# sourceMappingURL=datagov.d.ts.map

package/dist/datagov.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"datagov.d.ts","sourceRoot":"","sources":["../src/datagov.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAIH,OAAO,EAAE,GAAG,EAAO,MAAM,aAAa,CAAC;AACvC,OAAO,EAAY,KAAK,UAAU,EAAqB,MAAM,WAAW,CAAC;AAWzE,OAAO,EAAE,GAAG,EAAE,CAAC;AAGf,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AACtD,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAahD,eAAO,MAAM,iBAAiB,oGAMpB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIjE,eAAO,MAAM,0BAA0B,wFAM7B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAKlF,eAAO,MAAM,wBAAwB,0CAA2C,CAAC;AACjF,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAO9E,eAAO,MAAM,wBAAwB,uEAK3B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI9E,eAAO,MAAM,mBAAmB,8EAStB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AA4CpE,KAAK,qBAAqB,GAAG;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AA0NF,0CAA0C;AAC1C,wBAAsB,eAAe,CACnC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAErB;AAED,yCAAyC;AACzC,wBAAsB,cAAc,CAClC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAErB;AASD,KAAK,4BAA4B,GAAG;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAoEF;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,UAAU,CAAC,CA0IrB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAoDrB;AA2BD,KAAK,uBAAuB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,UAAU,CAAC,CA0FrB;AAED,KAAK,mBAAmB,GAAG;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAgC5E"}