@cliwant/mcp-sam-gov 0.3.0 → 1.0.0

package/dist/fema.d.ts

@@ -0,0 +1,181 @@
+/**
+ * OpenFEMA — keyless federal disaster declarations + emergency-assistance spend
+ * (ADR-0016). A NEW DOMAIN: federal disaster declarations + FEMA Public Assistance
+ * grants to state/local/tribal applicants (the SLED emergency-spend / B2G-adjacent
+ * angle). Fully PUBLIC, KEYLESS (no key, no token, no header — OpenFEMA is
+ * unauthenticated). Nth consumer of the fetch/map/meta shape after treasury /
+ * edgar / socrata / ckan.
+ *   Row query: https://www.fema.gov/api/open/{version}/{EntityName}?{OData params}
+ *
+ * REUSE (writes ZERO fetch/coercion/error code): `getJson`+`redirect:"error"`
+ * (datasource.ts), `num`/`str` (coerce.ts), `driftError` (datasource.ts),
+ * `withMeta`/`buildMeta` (meta.ts), the errors.ts taxonomy. COPIES (does NOT
+ * import) the socrata/ckan fixed-host SSRF + honesty PATTERN. NEW (small): the
+ * OData `$filter` builder (structured args → escaped filter string) + the
+ * `FEMA_DATASETS` registry (entityName+version+per-tool field-whitelist pins).
+ *
+ * ★ THE TOTAL-HONESTY CRUX — `metadata.count` (`$inlinecount=allpages`).
+ * OpenFEMA reports the exact FILTERED total in `metadata.count` — a real JSON
+ * NUMBER — but ONLY when the query carries `$inlinecount=allpages`. WITHOUT it,
+ * `metadata.count` is `0` — a SENTINEL, not the real total (live-verified
+ * 2026-07-12: `?$top=1` → count:0; `?$top=1&$inlinecount=allpages` → count:70049).
+ * So `getOpenFema` ALWAYS sets `$inlinecount=allpages` (inside the fetch fn, not
+ * the caller — no code path can omit it) and reads `metadata.count` as
+ * `totalAvailable`. Reading count off a query that omitted inlinecount would
+ * report `totalAvailable:0` on a full page — a data-absence-as-zero lie. The count
+ * is EXACT (respects the filter), so `hasMore`/`complete` are exact — NO
+ * totalIsLowerBound / totalIsEstimated hedge.
+ *
+ * ★ Entity-keyed envelope (the shape quirk). Results live under `body[EntityName]`
+ * (e.g. `body.DisasterDeclarationsSummaries`), NOT a fixed `results`/`data`. The
+ * dataset registry carries the entity name, known ahead of the fetch. `metadata`
+ * carries the exact filtered `count`.
+ *
+ * ★ SSRF guard (policy① — mirror socrata.ts / ckan.ts fixed-host). Fixed host
+ * `www.fema.gov` + a CURATED dataset registry pinning `{entityName, version}` (no
+ * free host, no free path, no free version — HMA's live v2→v4 drift is exactly why
+ * version is pinned, never a caller param):
+ *   1. `datasetKey` ∈ the frozen `FEMA_DATASETS` registry (belt-and-suspenders
+ *      recheck in the fetch fn → invalid_input before any fetch);
+ *   2. construct `https://www.fema.gov/api/open/${version}/${entityName}?${params}`
+ *      (host + path segments come ONLY from the pinned registry entry — nothing
+ *      caller-supplied interpolates into the path), then ASSERT the built URL's
+ *      hostname === "www.fema.gov" and protocol === "https:" (else invalid_input);
+ *   3. OData params via URLSearchParams — `$inlinecount`/`$top`/`$skip` set by the
+ *      module; `$filter` is MODULE-BUILT from structured args against a per-tool
+ *      field whitelist (NO raw caller `$filter` — no tool exposes one). String
+ *      values escape a single-quote by DOUBLING it (`'`→`''`, e.g. `O'Brien` →
+ *      `'O''Brien'`) then wrap in `'...'`; numbers are unquoted; booleans render
+ *      `true`/`false`. An un-whitelisted field is rejected (invalid_input) — zero
+ *      filter-injection surface AND guaranteed-valid, live-verified field names;
+ *   4. `redirect:"error"` on every fetch — a direct-JSON endpoint 3xx is anomalous
+ *      → fail closed, never follow off-host.
+ *
+ * ★ Silent-filter trap AVOIDED (unlike ECHO). A bad `$filter`/`$orderby` field is
+ * NOT silently ignored — OpenFEMA returns HTTP 400 (live-verified). We never
+ * present unfiltered-as-filtered. We still module-build `$filter` from a per-tool
+ * whitelist (belt-and-suspenders: no 400 in normal use + no injection surface).
+ *
+ * ★ 200-HTML maintenance-page guard (ADR-0016 OQ1). FEMA's Drupal can serve an
+ * "experiencing technical difficulties" HTML page. Observed failures were HTTP 404
+ * (→ not_found, thrown before r.json()); but IF an outage returns that page at
+ * HTTP 200, getJson's r.json() throws a SyntaxError. `getOpenFema` catches it →
+ * `driftError` (never a fake-empty, and a clean classification). Shared getJson
+ * stays byte-identical (the shape-drift check stays at the call site).
+ *
+ * ★ PER-DATASET FIELD NAMES DIFFER — live-verified (ADR-0016 M1). `state eq 'CA'`
+ * works on DisasterDeclarationsSummaries (1689) but `stateAbbreviation` → HTTP 400
+ * there; conversely `stateAbbreviation eq 'LA'` works on
+ * PublicAssistanceFundedProjectsDetails (39444) but `state` → HTTP 400 there. Each
+ * tool maps its user-facing `state` arg to ITS dataset's real OData field. Every
+ * shipped filter below NARROWS its dataset (live-verified 2026-07-12); a field
+ * that 400s or is silently ignored is NOT shipped.
+ *
+ * HMA v4 (HazardMitigationAssistanceProjects) is a 3rd-tool backlog item (per
+ * ADR-0016 §3) — slice 1 ships the 2 core tools.
+ */
+import { num } from "./coerce.js";
+import { type MetaBundle } from "./meta.js";
+export { num };
+export declare const FEMA_HOST = "www.fema.gov";
+/**
+ * The frozen dataset registry (SSRF core — no free host, no free path, no free
+ * version). Each entry's count + fields are LIVE-VERIFIED keyless (2026-07-12).
+ * Adding a dataset later = a registry edit + a live
+ * `$top=1&$inlinecount=allpages` verify (entity key, version, count) + a test
+ * note — NEVER a free runtime param. Re-verify periodically against
+ * `/api/open/v1/DataSets` (versions drift: HMA already moved v2→v4).
+ */
+export declare const FEMA_DATASETS: {
+    public_assistance: {
+        entityName: string;
+        version: string;
+        filterFields: Set<string>;
+        amountFields: string[];
+    };
+    disaster_declarations: {
+        entityName: string;
+        version: string;
+        filterFields: Set<string>;
+        amountFields: never[];
+    };
+};
+export type FemaDatasetKey = keyof typeof FEMA_DATASETS;
+type FilterOp = "eq" | "ge" | "le";
+export type FilterClause = {
+    field: string;
+    op: FilterOp;
+    type: "string";
+    value: string;
+} | {
+    field: string;
+    op: FilterOp;
+    type: "number";
+    value: number;
+} | {
+    field: string;
+    op: FilterOp;
+    type: "boolean";
+    value: boolean;
+};
+/** OData string-literal escaping: double every single-quote (`'` → `''`). This is
+ *  the ONLY escaping OData needs for a `'...'` literal — zero injection surface. */
+export declare function escapeODataString(v: string): string;
+/**
+ * Build the `$filter` string from structured clauses against the dataset's
+ * whitelist. Each clause's field MUST be in `FEMA_DATASETS[datasetKey].filterFields`
+ * (belt-and-suspenders — the tool functions only ever pass whitelisted fields, but
+ * an un-whitelisted field is a hard invalid_input, never silently dropped). Returns
+ * null when there are no clauses (⇒ no `$filter` param).
+ */
+export declare function buildFilter(datasetKey: FemaDatasetKey, clauses: FilterClause[]): string | null;
+export type FemaRow = Record<string, unknown>;
+/**
+ * Search FEMA Public Assistance funded projects (SLED emergency spend to state /
+ * local / tribal applicants). Dataset PublicAssistanceFundedProjectsDetails v2.
+ * Structured filters → module-built `$filter` (each field LIVE-VERIFIED to narrow):
+ *   state → stateAbbreviation eq · disasterNumber eq · applicantId eq ·
+ *   damageCategoryCode eq (e.g. "B" = Emergency Protective Measures) ·
+ *   incidentType eq · minProjectAmount → projectAmount ge · maxProjectAmount →
+ *   projectAmount le · declaredDateFrom/To → declarationDate ge/le.
+ * Rows carry projectAmount / federalShareObligated / totalObligated /
+ * mitigationAmount as number|null. Honest `_meta` (totalAvailable = exact filtered
+ * metadata.count).
+ */
+export declare function searchPublicAssistance(args: {
+    state?: string;
+    disasterNumber?: number;
+    applicantId?: string;
+    damageCategoryCode?: string;
+    incidentType?: string;
+    minProjectAmount?: number;
+    maxProjectAmount?: number;
+    declaredDateFrom?: string;
+    declaredDateTo?: string;
+    limit?: number;
+    offset?: number;
+}): Promise<MetaBundle>;
+/**
+ * Look up FEMA disaster / emergency declarations. Dataset
+ * DisasterDeclarationsSummaries v2. Structured filters → module-built `$filter`
+ * (each field LIVE-VERIFIED to narrow):
+ *   state → state eq · incidentType eq (e.g. "Flood") · declarationType eq
+ *   (DR/EM/FM) · fyDeclared eq · disasterNumber eq · declaredDateFrom/To →
+ *   declarationDate ge/le · paProgramDeclared / iaProgramDeclared → eq true/false
+ *   (BOOLEAN — `eq 1` 400s upstream).
+ * Honest `_meta` (totalAvailable = exact filtered metadata.count).
+ */
+export declare function disasterDeclarations(args: {
+    state?: string;
+    incidentType?: string;
+    declarationType?: string;
+    fyDeclared?: number;
+    disasterNumber?: number;
+    declaredDateFrom?: string;
+    declaredDateTo?: string;
+    paProgramDeclared?: boolean;
+    iaProgramDeclared?: boolean;
+    limit?: number;
+    offset?: number;
+}): Promise<MetaBundle>;
+//# sourceMappingURL=fema.d.ts.map

package/dist/fema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fema.d.ts","sourceRoot":"","sources":["../src/fema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AAIH,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAY,KAAK,UAAU,EAAqB,MAAM,WAAW,CAAC;AAKzE,OAAO,EAAE,GAAG,EAAE,CAAC;AAGf,eAAO,MAAM,SAAS,iBAAiB,CAAC;AAkBxC;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;CAyCgB,CAAC;AAE3C,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,aAAa,CAAC;AAKxD,KAAK,QAAQ,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACnC,MAAM,MAAM,YAAY,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAErE;oFACoF;AACpF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD;AAeD;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,YAAY,EAAE,GACtB,MAAM,GAAG,IAAI,CAef;AAGD,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA8K9C;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,UAAU,CAAC,CAmDtB;AAGD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,UAAU,CAAC,CAmDtB"}

package/dist/fema.js

@@ -0,0 +1,436 @@
+/**
+ * OpenFEMA — keyless federal disaster declarations + emergency-assistance spend
+ * (ADR-0016). A NEW DOMAIN: federal disaster declarations + FEMA Public Assistance
+ * grants to state/local/tribal applicants (the SLED emergency-spend / B2G-adjacent
+ * angle). Fully PUBLIC, KEYLESS (no key, no token, no header — OpenFEMA is
+ * unauthenticated). Nth consumer of the fetch/map/meta shape after treasury /
+ * edgar / socrata / ckan.
+ *   Row query: https://www.fema.gov/api/open/{version}/{EntityName}?{OData params}
+ *
+ * REUSE (writes ZERO fetch/coercion/error code): `getJson`+`redirect:"error"`
+ * (datasource.ts), `num`/`str` (coerce.ts), `driftError` (datasource.ts),
+ * `withMeta`/`buildMeta` (meta.ts), the errors.ts taxonomy. COPIES (does NOT
+ * import) the socrata/ckan fixed-host SSRF + honesty PATTERN. NEW (small): the
+ * OData `$filter` builder (structured args → escaped filter string) + the
+ * `FEMA_DATASETS` registry (entityName+version+per-tool field-whitelist pins).
+ *
+ * ★ THE TOTAL-HONESTY CRUX — `metadata.count` (`$inlinecount=allpages`).
+ * OpenFEMA reports the exact FILTERED total in `metadata.count` — a real JSON
+ * NUMBER — but ONLY when the query carries `$inlinecount=allpages`. WITHOUT it,
+ * `metadata.count` is `0` — a SENTINEL, not the real total (live-verified
+ * 2026-07-12: `?$top=1` → count:0; `?$top=1&$inlinecount=allpages` → count:70049).
+ * So `getOpenFema` ALWAYS sets `$inlinecount=allpages` (inside the fetch fn, not
+ * the caller — no code path can omit it) and reads `metadata.count` as
+ * `totalAvailable`. Reading count off a query that omitted inlinecount would
+ * report `totalAvailable:0` on a full page — a data-absence-as-zero lie. The count
+ * is EXACT (respects the filter), so `hasMore`/`complete` are exact — NO
+ * totalIsLowerBound / totalIsEstimated hedge.
+ *
+ * ★ Entity-keyed envelope (the shape quirk). Results live under `body[EntityName]`
+ * (e.g. `body.DisasterDeclarationsSummaries`), NOT a fixed `results`/`data`. The
+ * dataset registry carries the entity name, known ahead of the fetch. `metadata`
+ * carries the exact filtered `count`.
+ *
+ * ★ SSRF guard (policy① — mirror socrata.ts / ckan.ts fixed-host). Fixed host
+ * `www.fema.gov` + a CURATED dataset registry pinning `{entityName, version}` (no
+ * free host, no free path, no free version — HMA's live v2→v4 drift is exactly why
+ * version is pinned, never a caller param):
+ *   1. `datasetKey` ∈ the frozen `FEMA_DATASETS` registry (belt-and-suspenders
+ *      recheck in the fetch fn → invalid_input before any fetch);
+ *   2. construct `https://www.fema.gov/api/open/${version}/${entityName}?${params}`
+ *      (host + path segments come ONLY from the pinned registry entry — nothing
+ *      caller-supplied interpolates into the path), then ASSERT the built URL's
+ *      hostname === "www.fema.gov" and protocol === "https:" (else invalid_input);
+ *   3. OData params via URLSearchParams — `$inlinecount`/`$top`/`$skip` set by the
+ *      module; `$filter` is MODULE-BUILT from structured args against a per-tool
+ *      field whitelist (NO raw caller `$filter` — no tool exposes one). String
+ *      values escape a single-quote by DOUBLING it (`'`→`''`, e.g. `O'Brien` →
+ *      `'O''Brien'`) then wrap in `'...'`; numbers are unquoted; booleans render
+ *      `true`/`false`. An un-whitelisted field is rejected (invalid_input) — zero
+ *      filter-injection surface AND guaranteed-valid, live-verified field names;
+ *   4. `redirect:"error"` on every fetch — a direct-JSON endpoint 3xx is anomalous
+ *      → fail closed, never follow off-host.
+ *
+ * ★ Silent-filter trap AVOIDED (unlike ECHO). A bad `$filter`/`$orderby` field is
+ * NOT silently ignored — OpenFEMA returns HTTP 400 (live-verified). We never
+ * present unfiltered-as-filtered. We still module-build `$filter` from a per-tool
+ * whitelist (belt-and-suspenders: no 400 in normal use + no injection surface).
+ *
+ * ★ 200-HTML maintenance-page guard (ADR-0016 OQ1). FEMA's Drupal can serve an
+ * "experiencing technical difficulties" HTML page. Observed failures were HTTP 404
+ * (→ not_found, thrown before r.json()); but IF an outage returns that page at
+ * HTTP 200, getJson's r.json() throws a SyntaxError. `getOpenFema` catches it →
+ * `driftError` (never a fake-empty, and a clean classification). Shared getJson
+ * stays byte-identical (the shape-drift check stays at the call site).
+ *
+ * ★ PER-DATASET FIELD NAMES DIFFER — live-verified (ADR-0016 M1). `state eq 'CA'`
+ * works on DisasterDeclarationsSummaries (1689) but `stateAbbreviation` → HTTP 400
+ * there; conversely `stateAbbreviation eq 'LA'` works on
+ * PublicAssistanceFundedProjectsDetails (39444) but `state` → HTTP 400 there. Each
+ * tool maps its user-facing `state` arg to ITS dataset's real OData field. Every
+ * shipped filter below NARROWS its dataset (live-verified 2026-07-12); a field
+ * that 400s or is silently ignored is NOT shipped.
+ *
+ * HMA v4 (HazardMitigationAssistanceProjects) is a 3rd-tool backlog item (per
+ * ADR-0016 §3) — slice 1 ships the 2 core tools.
+ */
+import { ToolErrorCarrier } from "./errors.js";
+import { getJson, driftError } from "./datasource.js";
+import { num } from "./coerce.js";
+import { withMeta } from "./meta.js";
+// Re-export the shared honesty coercion (single audited copy in ./coerce.js —
+// ADR-0005 v2 FIX-C) so the fault suite's num-parity guard resolves the SAME
+// `num` from this module (fema.num === coerce.num === socrata.num === ckan.num).
+export { num };
+// ─── Fixed host + curated dataset registry (SSRF core) ────────────
+export const FEMA_HOST = "www.fema.gov";
+/**
+ * The frozen dataset registry (SSRF core — no free host, no free path, no free
+ * version). Each entry's count + fields are LIVE-VERIFIED keyless (2026-07-12).
+ * Adding a dataset later = a registry edit + a live
+ * `$top=1&$inlinecount=allpages` verify (entity key, version, count) + a test
+ * note — NEVER a free runtime param. Re-verify periodically against
+ * `/api/open/v1/DataSets` (versions drift: HMA already moved v2→v4).
+ */
+export const FEMA_DATASETS = {
+    // SLED emergency spend — 803,904 rows (2026-07-12). stateAbbreviation is THIS
+    // dataset's state field (`state` → HTTP 400 here). NO `applicantName` field
+    // exists (only applicantId + applicationTitle).
+    public_assistance: {
+        entityName: "PublicAssistanceFundedProjectsDetails",
+        version: "v2",
+        filterFields: new Set([
+            "stateAbbreviation", // state → 39444 for 'LA'
+            "disasterNumber", // → 15 for 3638
+            "applicantId", // → 8 for '015-UF5E0-00'
+            "damageCategoryCode", // → 232398 for 'B'
+            "incidentType", // → 80407 for 'Flood'
+            "projectAmount", // ge 1e6 → 25284; le 10000 → 354953
+            "declarationDate", // ge '2024-01-01' → 30082
+        ]),
+        amountFields: [
+            "projectAmount",
+            "federalShareObligated",
+            "totalObligated",
+            "mitigationAmount",
+        ],
+    },
+    // Declared disasters — 70,049 rows (2026-07-12). `state` is THIS dataset's state
+    // field (`stateAbbreviation` → HTTP 400 here). Program flags are BOOLEAN
+    // (`eq true`; `eq 1` → HTTP 400).
+    disaster_declarations: {
+        entityName: "DisasterDeclarationsSummaries",
+        version: "v2",
+        filterFields: new Set([
+            "state", // → 1689 for 'CA'
+            "incidentType", // → 11346 for 'Flood'
+            "declarationType", // DR 46462 / EM 21471 / FM 2116
+            "fyDeclared", // → 2147 for 2024
+            "disasterNumber", // → 64 for 4611
+            "declarationDate", // ge '2024-01-01' → 5067
+            "paProgramDeclared", // eq true → 65534
+            "iaProgramDeclared", // eq true → 17187
+        ]),
+        amountFields: [],
+    },
+};
+const SOURCE_LABEL = "openfema:" + FEMA_HOST;
+/** OData string-literal escaping: double every single-quote (`'` → `''`). This is
+ *  the ONLY escaping OData needs for a `'...'` literal — zero injection surface. */
+export function escapeODataString(v) {
+    return v.replace(/'/g, "''");
+}
+/** Render ONE clause's value: strings quoted+escaped, numbers bare, booleans
+ *  `true`/`false`. */
+function renderValue(c) {
+    switch (c.type) {
+        case "string":
+            return `'${escapeODataString(c.value)}'`;
+        case "number":
+            return String(c.value);
+        case "boolean":
+            return c.value ? "true" : "false";
+    }
+}
+/**
+ * Build the `$filter` string from structured clauses against the dataset's
+ * whitelist. Each clause's field MUST be in `FEMA_DATASETS[datasetKey].filterFields`
+ * (belt-and-suspenders — the tool functions only ever pass whitelisted fields, but
+ * an un-whitelisted field is a hard invalid_input, never silently dropped). Returns
+ * null when there are no clauses (⇒ no `$filter` param).
+ */
+export function buildFilter(datasetKey, clauses) {
+    if (clauses.length === 0)
+        return null;
+    const allowed = FEMA_DATASETS[datasetKey].filterFields;
+    return clauses
+        .map((c) => {
+        if (!allowed.has(c.field)) {
+            throw new ToolErrorCarrier({
+                kind: "invalid_input",
+                message: `OpenFEMA $filter field ${JSON.stringify(c.field)} is not in the ${datasetKey} whitelist — refusing to build an un-whitelisted filter (SSRF/injection safety).`,
+                retryable: false,
+            });
+        }
+        return `${c.field} ${c.op} ${renderValue(c)}`;
+    })
+        .join(" and ");
+}
+/**
+ * GET one OpenFEMA dataset page. SSRF guard (belt-and-suspenders behind the pinned
+ * registry): datasetKey ∈ registry, and the CONSTRUCTED URL's hostname ===
+ * www.fema.gov (https). ALWAYS sets `$inlinecount=allpages` (the total-honesty
+ * crux — no code path can omit it) + `redirect:"error"` (B1); NO headers (keyless).
+ * Reuses errors.ts retry/timeout/taxonomy (429 → rate_limited; 5xx →
+ * upstream_unavailable; 404 → not_found; 400 → invalid_input). A 200-non-JSON
+ * (Drupal maintenance page) → SyntaxError → driftError (ADR-0016 OQ1). Returns the
+ * parsed body (unknown; the caller validates the entity-keyed shape).
+ */
+async function getOpenFema(datasetKey, params) {
+    const def = FEMA_DATASETS[datasetKey];
+    if (!def) {
+        throw new ToolErrorCarrier({
+            kind: "invalid_input",
+            message: `OpenFEMA dataset ${JSON.stringify(datasetKey)} is not in the curated registry. Allowed: ${Object.keys(FEMA_DATASETS).join(", ")}.`,
+            retryable: false,
+        });
+    }
+    // ★ ALWAYS send $inlinecount=allpages — WITHOUT it metadata.count is a 0
+    // sentinel, not the real total (a data-absence-as-zero lie). Set HERE (not the
+    // caller) so no code path can omit it. Dropping this line turns a fault test RED.
+    params.set("$inlinecount", "allpages");
+    const url = `https://${FEMA_HOST}/api/open/${def.version}/${def.entityName}?${params.toString()}`;
+    // Belt-and-suspenders: host + path come ONLY from the pinned registry entry;
+    // assert the built URL cannot have been steered off-host.
+    const built = new URL(url);
+    if (built.hostname !== FEMA_HOST || built.protocol !== "https:") {
+        throw new ToolErrorCarrier({
+            kind: "invalid_input",
+            message: `Constructed OpenFEMA URL host ${JSON.stringify(built.hostname)} (${built.protocol}) is not ${FEMA_HOST} over https — refusing to fetch (SSRF safety).`,
+            retryable: false,
+        });
+    }
+    let body;
+    try {
+        // Keyless ⇒ NO headers key (byte-clean init); B1 redirect:"error"; host-only
+        // label → ToolError.upstreamEndpoint.
+        body = await getJson(url, { label: SOURCE_LABEL, redirect: "error" });
+    }
+    catch (e) {
+        // Preserve the structured taxonomy (404/429/5xx/400/timeout) unchanged.
+        if (e instanceof ToolErrorCarrier)
+            throw e;
+        // ★ OQ1 — a 200 non-JSON body (Drupal "technical difficulties" HTML) makes
+        // getJson's r.json() throw a SyntaxError. Classify it as schema_drift (an
+        // honest THROW + a clean classification), never a fake-empty. Shared getJson
+        // stays byte-identical (the check is at THIS call site).
+        if (e instanceof SyntaxError) {
+            throw driftError(SOURCE_LABEL, "OpenFEMA returned non-JSON at HTTP 200 — possible maintenance page");
+        }
+        throw e;
+    }
+    return { body, entityName: def.entityName };
+}
+// ─── map + meta ───────────────────────────────────────────────────
+const SHAPE_NOTE = "OpenFEMA OData envelope: rows live under the entity key (e.g. body.DisasterDeclarationsSummaries) and totalAvailable is the EXACT filtered total from metadata.count (we always send $inlinecount=allpages). Never inferred from the page length.";
+const AMOUNT_NOTE = "Amount fields (projectAmount / federalShareObligated / totalObligated / mitigationAmount) are number|null — a real 0 stays 0; absent/empty is null (never 0).";
+const DATE_NOTE = "Date filters use OData ISO compares on declarationDate; a bare 'YYYY-MM-DD' means midnight-UTC start of that day (pass a full ISO datetime for finer bounds; a 'to' bound is exclusive of intra-day times after midnight).";
+/**
+ * Coerce the declared amount fields through `num` (null-never-0): a real 0 stays
+ * 0; absent/""/"null" → null. Every declared amount field is always present as
+ * number|null in the output (honest "unknown", never a fabricated 0). Datasets
+ * with no amount fields pass rows through verbatim.
+ */
+function coerceAmounts(rows, amountFields) {
+    if (amountFields.length === 0)
+        return rows;
+    return rows.map((row) => {
+        const out = { ...row };
+        for (const f of amountFields)
+            out[f] = num(out[f]);
+        return out;
+    });
+}
+/**
+ * Validate the entity-keyed envelope + build the honest `_meta`. PRIMARY response:
+ *   - `body[entityName]` MUST be an array → else driftError (nothing valid to return).
+ *   - `metadata.count` MUST be a number (with $inlinecount it is the exact filtered
+ *     total) → else driftError. `totalAvailable = num(metadata.count)` — the EXACT
+ *     total, NEVER the page length (a wide page byte-truncates below $top).
+ *   - pagination: offset=$skip, limit=$top, hasMore = offset+returned <
+ *     totalAvailable (exact — no hedge), nextOffset. genuine-empty (count:0, []) →
+ *     complete:true/0 (via buildMeta). outage/5xx/timeout/400/404 already THREW in
+ *     getOpenFema (never a fake empty).
+ */
+function shapeResponse(args) {
+    const def = FEMA_DATASETS[args.datasetKey];
+    const b = (args.body ?? {});
+    const rawRows = b[def.entityName];
+    if (!Array.isArray(rawRows)) {
+        throw driftError(SOURCE_LABEL, `OpenFEMA ${def.entityName} returned an unexpected shape (body[${JSON.stringify(def.entityName)}] must be an array of rows).`);
+    }
+    // ★ The single most important honesty line: totalAvailable is the EXACT filtered
+    // metadata.count, NEVER rows.length. typeof-check BEFORE num() (num cannot tell a
+    // non-number from an absent one). Mutating this to rows.length must turn a test RED.
+    if (typeof b.metadata?.count !== "number") {
+        throw driftError(SOURCE_LABEL, `OpenFEMA ${def.entityName} returned a non-number metadata.count — with $inlinecount=allpages it must be the exact filtered total; treating as schema drift.`);
+    }
+    const totalAvailable = num(b.metadata.count);
+    const rows = coerceAmounts(rawRows, def.amountFields);
+    const returned = rows.length;
+    const hasMore = totalAvailable !== null && args.offset + returned < totalAvailable;
+    const nextOffset = hasMore ? args.offset + returned : null;
+    const notes = [SHAPE_NOTE];
+    if (def.amountFields.length > 0)
+        notes.push(AMOUNT_NOTE);
+    if (args.filtersApplied.some((f) => /date/i.test(f)))
+        notes.push(DATE_NOTE);
+    // Byte-cap disclosure: a wide page can byte-truncate below $top while more rows
+    // remain — metadata.count is authoritative, so page via $skip.
+    if (returned < args.limit && hasMore) {
+        notes.push("This page returned fewer rows than the requested limit while more remain (OpenFEMA byte-truncates a wide page below $top); metadata.count is authoritative — page with a larger offset ($skip).");
+    }
+    // Deep-offset caveat on the ~800k PA set (ADR-0016 OQ2).
+    if (args.offset > 100000) {
+        notes.push("Deep offset (>100000): very deep $skip into a large dataset may degrade upstream; prefer narrowing the filter over paging deep.");
+    }
+    return withMeta({
+        dataset: def.entityName,
+        rows,
+    }, {
+        source: `OpenFEMA ${def.entityName} (keyless)`,
+        keylessMode: true,
+        returned,
+        totalAvailable,
+        filtersApplied: args.filtersApplied,
+        filtersDropped: [],
+        fieldsUnavailable: [],
+        pagination: { offset: args.offset, limit: args.limit, hasMore, nextOffset },
+        notes,
+    });
+}
+// ─── Tool 1: fema_search_public_assistance ────────────────────────
+/**
+ * Search FEMA Public Assistance funded projects (SLED emergency spend to state /
+ * local / tribal applicants). Dataset PublicAssistanceFundedProjectsDetails v2.
+ * Structured filters → module-built `$filter` (each field LIVE-VERIFIED to narrow):
+ *   state → stateAbbreviation eq · disasterNumber eq · applicantId eq ·
+ *   damageCategoryCode eq (e.g. "B" = Emergency Protective Measures) ·
+ *   incidentType eq · minProjectAmount → projectAmount ge · maxProjectAmount →
+ *   projectAmount le · declaredDateFrom/To → declarationDate ge/le.
+ * Rows carry projectAmount / federalShareObligated / totalObligated /
+ * mitigationAmount as number|null. Honest `_meta` (totalAvailable = exact filtered
+ * metadata.count).
+ */
+export async function searchPublicAssistance(args) {
+    const limit = args.limit ?? 100;
+    const offset = args.offset ?? 0;
+    const clauses = [];
+    const filtersApplied = [];
+    if (args.state !== undefined) {
+        clauses.push({ field: "stateAbbreviation", op: "eq", type: "string", value: args.state });
+        filtersApplied.push("state");
+    }
+    if (args.disasterNumber !== undefined) {
+        clauses.push({ field: "disasterNumber", op: "eq", type: "number", value: args.disasterNumber });
+        filtersApplied.push("disasterNumber");
+    }
+    if (args.applicantId !== undefined) {
+        clauses.push({ field: "applicantId", op: "eq", type: "string", value: args.applicantId });
+        filtersApplied.push("applicantId");
+    }
+    if (args.damageCategoryCode !== undefined) {
+        clauses.push({ field: "damageCategoryCode", op: "eq", type: "string", value: args.damageCategoryCode });
+        filtersApplied.push("damageCategoryCode");
+    }
+    if (args.incidentType !== undefined) {
+        clauses.push({ field: "incidentType", op: "eq", type: "string", value: args.incidentType });
+        filtersApplied.push("incidentType");
+    }
+    if (args.minProjectAmount !== undefined) {
+        clauses.push({ field: "projectAmount", op: "ge", type: "number", value: args.minProjectAmount });
+        filtersApplied.push("minProjectAmount");
+    }
+    if (args.maxProjectAmount !== undefined) {
+        clauses.push({ field: "projectAmount", op: "le", type: "number", value: args.maxProjectAmount });
+        filtersApplied.push("maxProjectAmount");
+    }
+    if (args.declaredDateFrom !== undefined) {
+        clauses.push({ field: "declarationDate", op: "ge", type: "string", value: args.declaredDateFrom });
+        filtersApplied.push("declaredDateFrom");
+    }
+    if (args.declaredDateTo !== undefined) {
+        clauses.push({ field: "declarationDate", op: "le", type: "string", value: args.declaredDateTo });
+        filtersApplied.push("declaredDateTo");
+    }
+    const params = new URLSearchParams();
+    params.set("$top", String(limit));
+    params.set("$skip", String(offset));
+    const filter = buildFilter("public_assistance", clauses);
+    if (filter)
+        params.set("$filter", filter);
+    const { body } = await getOpenFema("public_assistance", params);
+    return shapeResponse({ body, datasetKey: "public_assistance", offset, limit, filtersApplied });
+}
+// ─── Tool 2: fema_disaster_declarations ───────────────────────────
+/**
+ * Look up FEMA disaster / emergency declarations. Dataset
+ * DisasterDeclarationsSummaries v2. Structured filters → module-built `$filter`
+ * (each field LIVE-VERIFIED to narrow):
+ *   state → state eq · incidentType eq (e.g. "Flood") · declarationType eq
+ *   (DR/EM/FM) · fyDeclared eq · disasterNumber eq · declaredDateFrom/To →
+ *   declarationDate ge/le · paProgramDeclared / iaProgramDeclared → eq true/false
+ *   (BOOLEAN — `eq 1` 400s upstream).
+ * Honest `_meta` (totalAvailable = exact filtered metadata.count).
+ */
+export async function disasterDeclarations(args) {
+    const limit = args.limit ?? 100;
+    const offset = args.offset ?? 0;
+    const clauses = [];
+    const filtersApplied = [];
+    if (args.state !== undefined) {
+        clauses.push({ field: "state", op: "eq", type: "string", value: args.state });
+        filtersApplied.push("state");
+    }
+    if (args.incidentType !== undefined) {
+        clauses.push({ field: "incidentType", op: "eq", type: "string", value: args.incidentType });
+        filtersApplied.push("incidentType");
+    }
+    if (args.declarationType !== undefined) {
+        clauses.push({ field: "declarationType", op: "eq", type: "string", value: args.declarationType });
+        filtersApplied.push("declarationType");
+    }
+    if (args.fyDeclared !== undefined) {
+        clauses.push({ field: "fyDeclared", op: "eq", type: "number", value: args.fyDeclared });
+        filtersApplied.push("fyDeclared");
+    }
+    if (args.disasterNumber !== undefined) {
+        clauses.push({ field: "disasterNumber", op: "eq", type: "number", value: args.disasterNumber });
+        filtersApplied.push("disasterNumber");
+    }
+    if (args.declaredDateFrom !== undefined) {
+        clauses.push({ field: "declarationDate", op: "ge", type: "string", value: args.declaredDateFrom });
+        filtersApplied.push("declaredDateFrom");
+    }
+    if (args.declaredDateTo !== undefined) {
+        clauses.push({ field: "declarationDate", op: "le", type: "string", value: args.declaredDateTo });
+        filtersApplied.push("declaredDateTo");
+    }
+    if (args.paProgramDeclared !== undefined) {
+        clauses.push({ field: "paProgramDeclared", op: "eq", type: "boolean", value: args.paProgramDeclared });
+        filtersApplied.push("paProgramDeclared");
+    }
+    if (args.iaProgramDeclared !== undefined) {
+        clauses.push({ field: "iaProgramDeclared", op: "eq", type: "boolean", value: args.iaProgramDeclared });
+        filtersApplied.push("iaProgramDeclared");
+    }
+    const params = new URLSearchParams();
+    params.set("$top", String(limit));
+    params.set("$skip", String(offset));
+    const filter = buildFilter("disaster_declarations", clauses);
+    if (filter)
+        params.set("$filter", filter);
+    const { body } = await getOpenFema("disaster_declarations", params);
+    return shapeResponse({ body, datasetKey: "disaster_declarations", offset, limit, filtersApplied });
+}
+//# sourceMappingURL=fema.js.map

package/dist/fema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fema.js","sourceRoot":"","sources":["../src/fema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAsC,MAAM,WAAW,CAAC;AAEzE,8EAA8E;AAC9E,6EAA6E;AAC7E,iFAAiF;AACjF,OAAO,EAAE,GAAG,EAAE,CAAC;AAEf,qEAAqE;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAC;AAkBxC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,8EAA8E;IAC9E,4EAA4E;IAC5E,gDAAgD;IAChD,iBAAiB,EAAE;QACjB,UAAU,EAAE,uCAAuC;QACnD,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,IAAI,GAAG,CAAC;YACpB,mBAAmB,EAAE,yBAAyB;YAC9C,gBAAgB,EAAE,gBAAgB;YAClC,aAAa,EAAE,yBAAyB;YACxC,oBAAoB,EAAE,mBAAmB;YACzC,cAAc,EAAE,sBAAsB;YACtC,eAAe,EAAE,oCAAoC;YACrD,iBAAiB,EAAE,0BAA0B;SAC9C,CAAC;QACF,YAAY,EAAE;YACZ,eAAe;YACf,uBAAuB;YACvB,gBAAgB;YAChB,kBAAkB;SACnB;KACF;IACD,iFAAiF;IACjF,yEAAyE;IACzE,kCAAkC;IAClC,qBAAqB,EAAE;QACrB,UAAU,EAAE,+BAA+B;QAC3C,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,IAAI,GAAG,CAAC;YACpB,OAAO,EAAE,kBAAkB;YAC3B,cAAc,EAAE,sBAAsB;YACtC,iBAAiB,EAAE,gCAAgC;YACnD,YAAY,EAAE,kBAAkB;YAChC,gBAAgB,EAAE,gBAAgB;YAClC,iBAAiB,EAAE,yBAAyB;YAC5C,mBAAmB,EAAE,kBAAkB;YACvC,mBAAmB,EAAE,kBAAkB;SACxC,CAAC;QACF,YAAY,EAAE,EAAE;KACjB;CACuC,CAAC;AAI3C,MAAM,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;AAS7C;oFACoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;sBACsB;AACtB,SAAS,WAAW,CAAC,CAAe;IAClC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC3C,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,UAA0B,EAC1B,OAAuB;IAEvB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC;IACvD,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,gBAAgB,CAAC;gBACzB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,0BAA0B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,UAAU,kFAAkF;gBACxK,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC,CAAC;SACD,IAAI,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAKD;;;;;;;;;GASG;AACH,KAAK,UAAU,WAAW,CACxB,UAA0B,EAC1B,MAAuB;IAEvB,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,6CAA6C,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC5I,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IACD,yEAAyE;IACzE,+EAA+E;IAC/E,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAEvC,MAAM,GAAG,GAAG,WAAW,SAAS,aAAa,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAClG,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,iCAAiC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,QAAQ,YAAY,SAAS,gDAAgD;YAChK,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,6EAA6E;QAC7E,sCAAsC;QACtC,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,wEAAwE;QACxE,IAAI,CAAC,YAAY,gBAAgB;YAAE,MAAM,CAAC,CAAC;QAC3C,2EAA2E;QAC3E,0EAA0E;QAC1E,6EAA6E;QAC7E,yDAAyD;QACzD,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC;YAC7B,MAAM,UAAU,CACd,YAAY,EACZ,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AAC9C,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,GACd,mPAAmP,CAAC;AACtP,MAAM,WAAW,GACf,+JAA+J,CAAC;AAClK,MAAM,SAAS,GACb,4NAA4N,CAAC;AAE/N;;;;;GAKG;AACH,SAAS,aAAa,CACpB,IAAe,EACf,YAA+B;IAE/B,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,GAAG,GAAY,EAAE,GAAG,GAAG,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,YAAY;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,IAMtB;IACC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAEC,CAAC;IAE5B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,YAAY,EACZ,YAAY,GAAG,CAAC,UAAU,uCAAuC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,8BAA8B,CAC9H,CAAC;IACJ,CAAC;IACD,iFAAiF;IACjF,kFAAkF;IAClF,qFAAqF;IACrF,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,UAAU,CACd,YAAY,EACZ,YAAY,GAAG,CAAC,UAAU,mIAAmI,CAC9J,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE7C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAoB,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,MAAM,OAAO,GACX,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,GAAG,cAAc,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3D,MAAM,KAAK,GAAa,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5E,gFAAgF;IAChF,+DAA+D;IAC/D,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,iMAAiM,CAClM,CAAC;IACJ,CAAC;IACD,yDAAyD;IACzD,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,iIAAiI,CAClI,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CACb;QACE,OAAO,EAAE,GAAG,CAAC,UAAU;QACvB,IAAI;KACL,EACD;QACE,MAAM,EAAE,YAAY,GAAG,CAAC,UAAU,YAAY;QAC9C,WAAW,EAAE,IAAI;QACjB,QAAQ;QACR,cAAc;QACd,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,EAAE;QACrB,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE;QAC3E,KAAK;KAC0B,CAClC,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAY5C;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAEhC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAChG,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1F,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACxG,cAAc,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5F,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACjG,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACjG,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACnG,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACjG,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAE1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAChE,OAAO,aAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,qEAAqE;AACrE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAY1C;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAEhC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9E,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5F,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAClG,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACxF,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAChG,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACnG,cAAc,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACjG,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACvG,cAAc,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACvG,cAAc,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAE1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,aAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;AACrG,CAAC"}