@cliwant/mcp-sam-gov 0.3.0 → 1.0.0

package/dist/nih.js

@@ -0,0 +1,291 @@
+/**
+ * NIH RePORTER v2 — federal research-GRANT project records (keyless).
+ *
+ * A NEW capability axis: **federal research-funding footprint by organization /
+ * UEI / state** — awarded NIH project money keyed to a recipient org (with UEI +
+ * DUNS), a recipient-ENRICHMENT layer orthogonal to the spend/contract/regulatory
+ * sources. It joins the SAM/USAspending recipient graph via `primary_uei` (the
+ * SAME UEI space) — but the award nature DIFFERS (grants fund research, not
+ * goods/services), so every response carries the grant-vs-contract caveat (M2).
+ *
+ * ON-DOMAIN HONESTY: this is research-funding / grants-adjacent, the AWARDED-money
+ * sibling of grants.gov opportunities and the biomedical-R&D slice of USAspending
+ * assistance awards — NOT core procurement. Positioned as recipient-enrichment /
+ * R&D market intel, never as a contract source.
+ *
+ * THE R2 PORT'S FIRST NON-GET CONSUMER (ADR-0014): NIH RePORTER is a
+ * POST-with-JSON-body API. `getJson` (ADR-0005) gained a byte-neutral,
+ * backward-compatible `method`/`body` passthrough for exactly this; this module
+ * writes ZERO fetch/coercion/error code — it REUSES `getJson` / `driftError` /
+ * `num`·`str` / `withMeta` and COPIES (does not import) the fixed-host SSRF +
+ * honesty PATTERN from CKAN/ECHO/FPDS, adapted:
+ *
+ * ★ SSRF GUARD (policy① — the SMALLEST surface of any source): the request URL is
+ * a compile-time CONSTANT (fixed host `api.reporter.nih.gov` + fixed path
+ * `/v2/projects/search`); NO caller input touches it. All filters ride in the POST
+ * body, which is MODULE-BUILT from a validated typed criteria object then
+ * `JSON.stringify`'d — there is NO raw-body / raw-criteria passthrough, so a
+ * caller value cannot break out of its criterion into another key. A
+ * post-construction hostname/protocol assertion + `redirect:"error"` lock it
+ * (fail closed on any off-host 3xx; its body is never read).
+ *
+ * ★ FILTER HONESTY (M1 — the load-bearing discipline): a criterion is shipped ONLY
+ * after being LIVE-CONFIRMED to actually narrow the result set. The confirmed
+ * v1 set is `orgStates` + `orgNames` + `fiscalYears` (each live-verified to
+ * reduce the total below the unfiltered baseline). `agency_ic_codes` is EXCLUDED
+ * — it is silently DROPPED upstream (a filter that no-ops is never presented as
+ * applied). A shipped filter goes in `_meta.filtersApplied`; a silent-drop filter
+ * is never listed there and never exposed in the schema.
+ *
+ * ★ 15,000-RECORD RETRIEVAL WINDOW (M3+M4 — the critical disclosure): NIH caps
+ * keyless retrieval at `offset 0..14,999` (`limit ≤ 500`), so only the first
+ * 15,000 records of any result set are reachable. This is a cap on RETRIEVAL, NOT
+ * on the COUNT: `meta.total` stays EXACT (never truncated to 15,000, never marked
+ * `totalIsLowerBound`). `offset >= 15,000` is refused pre-fetch (`invalid_input`);
+ * after a page, `nextOffset` is null once `offset+returned` reaches the cap or the
+ * exact total (never a dead-end `nextOffset=15000`). `truncated` is derived by
+ * buildMeta from `returned < totalAvailable`; when the count exceeds the window a
+ * `_meta.notes` line discloses the unreachable remainder and recommends narrowing.
+ *
+ * ★ HONESTY `_meta`: shape-guard FIRST (a 200 body that is not `{meta,results:[]}`
+ * → driftError, NEVER a fake empty); a non-numeric/absent `meta.total` →
+ * driftError BEFORE `num(meta.total)`; genuine-empty (`total:0`) → complete:true /
+ * totalAvailable:0; outage/5xx/timeout → getJson throws; 400 (bad offset/limit/
+ * type) → invalid_input (surfaced, never `[]`). `num` is null-never-0 on
+ * `award_amount` (a real $0 award is 0; an absent amount is null). Every response
+ * discloses the grant-vs-contract caveat + a data-currency note.
+ */
+import { ToolErrorCarrier } from "./errors.js";
+import { getJson, driftError } from "./datasource.js";
+import { num, str } from "./coerce.js";
+import { withMeta } from "./meta.js";
+// Re-export the shared honesty coercion (single audited copy in ./coerce.js —
+// ADR-0005 v2 FIX-C) so the fault suite's num-parity guard resolves the SAME
+// `num` (nih.num === coerce.num === treasury.num — a num regression fails together).
+export { num };
+// ─── Fixed endpoint (SSRF core — a compile-time CONSTANT) ─────────
+const NIH_HOST = "api.reporter.nih.gov";
+const NIH_PATH = "/v2/projects/search";
+const NIH_PROJECTS_URL = `https://${NIH_HOST}${NIH_PATH}`;
+// HOST-only-ish label (path is fixed + carries no token — keyless). Surfaces in
+// ToolError.upstreamEndpoint; no secret can appear here (the API is anonymous).
+const NIH_LABEL = "nih:/v2/projects/search";
+// ─── The 15,000-record RETRIEVAL window (live-verified: offset ≤ 14,999,
+// limit ≤ 500). A cap on RETRIEVAL, not on the exact meta.total count. The
+// limit ≤ 500 ceiling is enforced by the server's Zod schema; this module owns
+// the offset-window guard + the never-a-dead-end nextOffset boundary. ──
+const RETRIEVAL_CAP = 15_000;
+// ─── Frozen US state/territory 2-letter USPS enum (UPPERCASE-only) ─
+// Built FROM this array by the Zod enum in server.ts (single source of truth).
+// It is BOTH an org_states value guard AND the silent-zero guard: live, an unknown
+// but well-typed value (e.g. "ZZ") returns a genuine total:0 indistinguishable
+// from a real empty, and a lowercase "ca" silently returns zeros — so a typo must
+// be an invalid_input, never read as "no NIH funding" (a silent honesty failure).
+export const NIH_ORG_STATES = [
+    "AL", "AK", "AZ", "AR", "CA", "CO", "CT", "DE", "DC", "FL",
+    "GA", "HI", "ID", "IL", "IN", "IA", "KS", "KY", "LA", "ME",
+    "MD", "MA", "MI", "MN", "MS", "MO", "MT", "NE", "NV", "NH",
+    "NJ", "NM", "NY", "NC", "ND", "OH", "OK", "OR", "PA", "RI",
+    "SC", "SD", "TN", "TX", "UT", "VT", "VA", "WA", "WV", "WI",
+    "WY", "AS", "GU", "MP", "PR", "VI",
+];
+// ─── Disclosure constants (honesty obligations) ──────────────────
+/** M2 — the mandatory grant-vs-contract caveat carried in EVERY response. */
+const NIH_GRANT_CAVEAT = "NIH RePORTER records are RESEARCH GRANTS awarded by NIH, NOT federal procurement contracts. The primary_uei joins to SAM/USAspending recipient records, but the award nature differs (grants fund research, not goods/services) — do not present these amounts as contract awards.";
+/** m-currency — a conservative data-currency note (not API-verifiable). */
+const DATA_CURRENCY_NOTE = "NIH RePORTER updates on a rolling basis; per-record refresh lag is not API-verifiable.";
+/** The UEI join disclosure — how to bridge to the SAM/USAspending recipient graph. */
+const UEI_JOIN_NOTE = "organization.primaryUei is the join key to SAM entities and USAspending recipients (same UEI space); a grant recipient is not necessarily a federal contractor.";
+/** M3+M4 — the retrieval-window disclosure when the count exceeds the 15,000 cap. */
+function retrievalCapNote(total) {
+    return `NIH caps keyless retrieval at the first ${RETRIEVAL_CAP} of ${total} matching records; the count is EXACT but records beyond ${RETRIEVAL_CAP} cannot be retrieved via this API — narrow criteria (org, fiscal year, state) to bring the target set under ${RETRIEVAL_CAP}.`;
+}
+const SOURCE = "api.reporter.nih.gov v2 (keyless)";
+/** "true"/true → true, "false"/false → false, absent/other → null (never a
+ *  fabricated false). */
+function boolOrNull(x) {
+    if (x === true)
+        return true;
+    if (x === false)
+        return false;
+    if (x === "true")
+        return true;
+    if (x === "false")
+        return false;
+    return null;
+}
+/** A 2-letter uppercase string array from a mixed value, else []. */
+function strArray(x) {
+    if (!Array.isArray(x))
+        return [];
+    return x.map((v) => str(v)).filter((v) => v !== null);
+}
+/** Map ONE NIH results[] row → the curated enrichment shape. Every scalar is
+ *  null-never-fabricated (str/num); `award_amount` is num (a real $0 → 0, absent
+ *  → null). Field names are NIH v2 documented keys; an absent field maps to null
+ *  (honest "unknown"), never a crash. */
+function mapProject(raw) {
+    const r = (raw ?? {});
+    const org = (r.organization ?? {});
+    const ic = (r.agency_ic_admin ?? {});
+    const pis = Array.isArray(r.principal_investigators)
+        ? r.principal_investigators
+        : [];
+    return {
+        projectNum: str(r.project_num),
+        projectTitle: str(r.project_title),
+        fiscalYear: num(r.fiscal_year),
+        awardAmount: num(r.award_amount),
+        awardType: str(r.award_type),
+        activityCode: str(r.activity_code),
+        isActive: boolOrNull(r.is_active),
+        organization: {
+            name: str(org.org_name),
+            city: str(org.org_city),
+            state: str(org.org_state),
+            country: str(org.org_country),
+            primaryUei: str(org.primary_uei),
+            primaryDuns: str(org.primary_duns),
+            ueis: strArray(org.org_ueis),
+            duns: strArray(org.org_duns),
+        },
+        principalInvestigators: pis.map((p) => ({
+            profileId: num(p.profile_id),
+            firstName: str(p.first_name),
+            lastName: str(p.last_name),
+            fullName: str(p.full_name),
+            isContactPi: boolOrNull(p.is_contact_pi),
+            title: str(p.title),
+        })),
+        contactPiName: str(r.contact_pi_name),
+        fundingIc: {
+            code: str(ic.code),
+            abbreviation: str(ic.abbreviation),
+            name: str(ic.name),
+        },
+    };
+}
+/**
+ * Search awarded NIH research projects (POST /v2/projects/search). Structured,
+ * LIVE-CONFIRMED-narrowing criteria only (orgStates / orgNames / fiscalYears),
+ * AND-combined in a MODULE-BUILT criteria object → JSON.stringify (no raw
+ * passthrough). Returns curated recipient-enrichment rows + honest `_meta`:
+ * exact totalAvailable, exact within-window pagination, the 15,000-retrieval-cap
+ * disclosure when the count exceeds it, and the mandatory grant-vs-contract
+ * caveat. Disclose-not-refuse: an unscoped query is NOT refused — it returns the
+ * first page + the exact total + a note recommending a criterion when the total
+ * exceeds the window.
+ */
+export async function searchProjects(args) {
+    const limit = args.limit ?? 50;
+    const offset = args.offset ?? 0;
+    // ── 15k window pre-fetch guard (M3): offset >= 15,000 is UNREACHABLE — refuse
+    //    BEFORE any fetch (also enforced by the server's Zod .max(14_999); this is
+    //    the belt-and-suspenders module guard so a direct caller can't slip past). ──
+    if (offset >= RETRIEVAL_CAP) {
+        throw new ToolErrorCarrier({
+            kind: "invalid_input",
+            message: `NIH RePORTER caps pagination at the first ${RETRIEVAL_CAP} records (offset 0..${RETRIEVAL_CAP - 1}); offset ${offset} is unreachable via this keyless API. Narrow criteria (org, fiscal year, state) to bring the target set under ${RETRIEVAL_CAP}.`,
+            retryable: false,
+            upstreamEndpoint: NIH_LABEL,
+        });
+    }
+    // ── Build the criteria object from VALIDATED typed input (SSRF: no raw
+    //    passthrough; every value is enum/typed by the server's Zod before here). A
+    //    filter is added — and listed in filtersApplied — ONLY when it is one of the
+    //    LIVE-CONFIRMED narrowing criteria (M1). agency_ic_codes is never built (it
+    //    silently no-ops upstream and is not in the schema). ──
+    const criteria = {};
+    const filtersApplied = [];
+    if (args.fiscalYears && args.fiscalYears.length > 0) {
+        criteria.fiscal_years = args.fiscalYears;
+        filtersApplied.push("fiscalYears");
+    }
+    if (args.orgStates && args.orgStates.length > 0) {
+        criteria.org_states = args.orgStates;
+        filtersApplied.push("orgStates");
+    }
+    if (args.orgNames && args.orgNames.length > 0) {
+        criteria.org_names = args.orgNames;
+        filtersApplied.push("orgNames");
+    }
+    const payload = { criteria, limit, offset };
+    // ── SSRF belt-and-suspenders: the URL is a compile-time constant, but assert it
+    //    cannot have drifted (a future typo) — exactly the CKAN/FPDS post-construction
+    //    check, adapted (no URLSearchParams: there are no query params). ──
+    const built = new URL(NIH_PROJECTS_URL);
+    if (built.hostname !== NIH_HOST || built.protocol !== "https:") {
+        throw new ToolErrorCarrier({
+            kind: "invalid_input",
+            message: `Constructed NIH URL host ${JSON.stringify(built.hostname)} (${built.protocol}) is not ${NIH_HOST} over https — refusing to fetch (SSRF safety).`,
+            retryable: false,
+            upstreamEndpoint: NIH_LABEL,
+        });
+    }
+    // ── The R2 port's first POST call. Content-Type is MANDATORY for NIH (415
+    //    without it, 405 on GET). redirect:"error" fails closed on any off-host 3xx
+    //    (its body is never read). The body is the module-built, JSON.stringify'd
+    //    typed payload — never string-concatenated. ──
+    const body = await getJson(NIH_PROJECTS_URL, {
+        label: NIH_LABEL,
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(payload),
+        redirect: "error",
+    });
+    // ── Shape guard FIRST → THROW (never fake-empty). A 200 body must be an OBJECT
+    //    with a `meta` object and an array `results`. An array body (a 200-with-array
+    //    drift), a missing `meta`, or a non-array `results` → driftError; NEVER read
+    //    `results` as []. ──
+    if (typeof body !== "object" ||
+        body === null ||
+        Array.isArray(body)) {
+        throw driftError(NIH_LABEL, "NIH /v2/projects/search returned a 200 body that is not an object {meta,results} (an array or scalar) — refusing to report it as an empty result.");
+    }
+    const b = body;
+    if (typeof b.meta !== "object" || b.meta === null || !Array.isArray(b.results)) {
+        throw driftError(NIH_LABEL, "NIH /v2/projects/search returned an unexpected shape (expected an object with a `meta` object and an array `results`).");
+    }
+    const meta = b.meta;
+    // ── m-total-guard: a non-number `meta.total` (or absent) is drift — num() cannot
+    //    tell a non-number from an absent one, so typeof-check BEFORE num() (CKAN m6).
+    //    Nothing trustworthy to report as a total → THROW, never proceed with null. ──
+    if (typeof meta.total !== "number") {
+        throw driftError(NIH_LABEL, "NIH meta.total absent/non-numeric — nothing trustworthy to report as a total (treating as schema drift).");
+    }
+    // EXACT total (§1a) — NEVER results.length, NEVER a lower bound. num() defensively
+    // (a finite number passes through; a non-finite would be caught, but the typeof
+    // guard above already rejected non-numbers).
+    const totalAvailable = num(meta.total);
+    const projects = b.results.map(mapProject);
+    const returned = projects.length;
+    // ── Pagination (M3+M4): NEVER hand a dead-end nextOffset=15000. nextOffset is
+    //    null once offset+returned reaches the cap OR the exact total; hasMore mirrors
+    //    it. NO mid-page clamp (offset+limit>15000 does NOT 400 — only offset≥15000). ──
+    const candidateNext = offset + returned;
+    const nextOffset = candidateNext >= RETRIEVAL_CAP ||
+        (totalAvailable !== null && candidateNext >= totalAvailable)
+        ? null
+        : candidateNext;
+    const hasMore = nextOffset !== null;
+    const notes = [NIH_GRANT_CAVEAT, UEI_JOIN_NOTE, DATA_CURRENCY_NOTE];
+    // Disclose-not-refuse + the reachability-cap disclosure: fire whenever the exact
+    // count exceeds the reachable window (records beyond 15,000 are UNREACHABLE — the
+    // honest superset of "truncated by the cap" and "an unscoped broad query").
+    if (totalAvailable !== null && totalAvailable > RETRIEVAL_CAP) {
+        notes.push(retrievalCapNote(totalAvailable));
+    }
+    const metaOut = {
+        source: SOURCE,
+        keylessMode: true,
+        returned,
+        totalAvailable,
+        filtersApplied,
+        filtersDropped: [],
+        fieldsUnavailable: [],
+        pagination: { offset, limit, hasMore, nextOffset },
+        notes,
+    };
+    return withMeta({ projects }, metaOut);
+}
+//# sourceMappingURL=nih.js.map

package/dist/nih.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nih.js","sourceRoot":"","sources":["../src/nih.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAsC,MAAM,WAAW,CAAC;AAEzE,8EAA8E;AAC9E,6EAA6E;AAC7E,qFAAqF;AACrF,OAAO,EAAE,GAAG,EAAE,CAAC;AAEf,qEAAqE;AACrE,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AACxC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,MAAM,gBAAgB,GAAG,WAAW,QAAQ,GAAG,QAAQ,EAAE,CAAC;AAC1D,gFAAgF;AAChF,gFAAgF;AAChF,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAE5C,0EAA0E;AAC1E,2EAA2E;AAC3E,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,sEAAsE;AACtE,+EAA+E;AAC/E,mFAAmF;AACnF,+EAA+E;AAC/E,kFAAkF;AAClF,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CAC1B,CAAC;AAIX,oEAAoE;AACpE,6EAA6E;AAC7E,MAAM,gBAAgB,GACpB,oRAAoR,CAAC;AAEvR,2EAA2E;AAC3E,MAAM,kBAAkB,GACtB,wFAAwF,CAAC;AAE3F,sFAAsF;AACtF,MAAM,aAAa,GACjB,iKAAiK,CAAC;AAEpK,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,2CAA2C,aAAa,OAAO,KAAK,4DAA4D,aAAa,+GAA+G,aAAa,GAAG,CAAC;AACtR,CAAC;AAED,MAAM,MAAM,GAAG,mCAAmC,CAAC;AAwCnD;yBACyB;AACzB,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC;AAED;;;yCAGyC;AACzC,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAA4B,CAAC;IAC9D,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;IAChE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;QAClD,CAAC,CAAE,CAAC,CAAC,uBAAqD;QAC1D,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9B,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;QAClC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9B,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QAChC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;QAC5B,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;QAClC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACjC,YAAY,EAAE;YACZ,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YACzB,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;YAC7B,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;YAChC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;YAClC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC5B,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;SAC7B;QACD,sBAAsB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5B,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5B,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1B,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1B,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;YACxC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;SACpB,CAAC,CAAC;QACH,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC;QACrC,SAAS,EAAE;YACT,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;YAClB,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC;YAClC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;SACnB;KACF,CAAC;AACJ,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAmB;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IAEhC,+EAA+E;IAC/E,+EAA+E;IAC/E,kFAAkF;IAClF,IAAI,MAAM,IAAI,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,6CAA6C,aAAa,uBAAuB,aAAa,GAAG,CAAC,aAAa,MAAM,iHAAiH,aAAa,GAAG;YAC/P,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,gFAAgF;IAChF,iFAAiF;IACjF,gFAAgF;IAChF,4DAA4D;IAC5D,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC;QACzC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACrC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAE5C,iFAAiF;IACjF,mFAAmF;IACnF,wEAAwE;IACxE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/D,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,QAAQ,YAAY,QAAQ,gDAAgD;YAC1J,SAAS,EAAE,KAAK;YAChB,gBAAgB,EAAE,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,gFAAgF;IAChF,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAU,gBAAgB,EAAE;QACpD,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IAEH,gFAAgF;IAChF,kFAAkF;IAClF,iFAAiF;IACjF,yBAAyB;IACzB,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EACnB,CAAC;QACD,MAAM,UAAU,CACd,SAAS,EACT,mJAAmJ,CACpJ,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,IAA6C,CAAC;IACxD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,MAAM,UAAU,CACd,SAAS,EACT,wHAAwH,CACzH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2B,CAAC;IAE3C,kFAAkF;IAClF,mFAAmF;IACnF,mFAAmF;IACnF,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,UAAU,CACd,SAAS,EACT,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,mFAAmF;IACnF,gFAAgF;IAChF,6CAA6C;IAC7C,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEvC,MAAM,QAAQ,GAAI,CAAC,CAAC,OAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IAEjC,+EAA+E;IAC/E,mFAAmF;IACnF,qFAAqF;IACrF,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;IACxC,MAAM,UAAU,GACd,aAAa,IAAI,aAAa;QAC9B,CAAC,cAAc,KAAK,IAAI,IAAI,aAAa,IAAI,cAAc,CAAC;QAC1D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,aAAa,CAAC;IACpB,MAAM,OAAO,GAAG,UAAU,KAAK,IAAI,CAAC;IAEpC,MAAM,KAAK,GAAa,CAAC,gBAAgB,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAC9E,iFAAiF;IACjF,kFAAkF;IAClF,4EAA4E;IAC5E,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,aAAa,EAAE,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAA0B;QACrC,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,QAAQ;QACR,cAAc;QACd,cAAc;QACd,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,EAAE;QACrB,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE;QAClD,KAAK;KACN,CAAC;IAEF,OAAO,QAAQ,CAAC,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/nppes.d.ts

@@ -0,0 +1,157 @@
+/**
+ * NPPES NPI Registry — CMS/HHS healthcare-provider identity/credentialing lane
+ * (keyless). Source #27 on the R2 `getJson` port (ADR-0036).
+ *
+ * ONE tool `nppes_lookup_provider` over the CMS/HHS National Plan & Provider
+ * Enumeration System (`https://npiregistry.cms.hhs.gov/api/?version=2.1`) — the
+ * authoritative PUBLIC registry of every US healthcare provider (individual
+ * NPI-1 + organization NPI-2). The B2G unlock: vet a healthcare
+ * subcontractor/provider/org for a VA/HHS/CMS contract — validate an NPI,
+ * confirm taxonomy (specialty), enumeration status (Active), practice state, and
+ * org/name match for credentialing / teaming due-diligence.
+ *
+ * TWO modes, inferred from `number` (NO mode flag):
+ *   - EXACT-NPI (`number` supplied): validate `^\d{10}$` + the CMS Luhn
+ *     (Luhn over `80840` + the first 9 digits, 14 total) CLIENT-SIDE →
+ *     `invalid_input` on failure (a typo must NEVER fake a not-found; NPPES
+ *     validates ONLY length, so the Luhn pre-check is LOAD-BEARING). ★ M1: the
+ *     outgoing query carries `number` (+`version`) as the SOLE param — a
+ *     co-supplied filter is NEVER forwarded (NPPES AND-combines a number with
+ *     filters, so `number=<active NPI>&last_name=Zztypo` → result_count:0, a
+ *     FALSE "does not exist"). Co-filters are dropped from the wire and surfaced
+ *     as a CLIENT-SIDE post-match annotation (`data.filterMatch`).
+ *   - SEARCH: by first_name / last_name / organization_name /
+ *     taxonomy_description / city / postal_code (REQUIRED-one set), refined by
+ *     state / enumeration_type (REFINERS — never sufficient alone, S2),
+ *     paginated (limit ≤ 200, skip ≤ 1000 — our POLICY reach cap, S3).
+ *
+ * HONESTY (writes ZERO fetch/coerce/error/meta code — REUSES getJson/throughGate/
+ * driftError + coerce.num/str + withMeta/buildMeta):
+ *   P1 result_count === results.length (else driftError); NPPES exposes NO
+ *      grand-total field → totalAvailable is a LOWER BOUND on a full page
+ *      (totalIsLowerBound) + the ≤200/≤1000 policy caps disclosed.
+ *   P2 `^\d{10}$` + CMS-Luhn → invalid_input (typo never fakes not-found); a
+ *      genuine {result_count:0} → honest found:false; a {Errors:[…]} 200 body
+ *      (NO results key — the NSF serviceNotification twin) → THROW; any
+ *      4xx/5xx/timeout/off-host-redirect/non-JSON → THROW.
+ *   P3 active = basic.status === "A" (deactivated/absent ⇒ NOT active); epochs
+ *      (created_epoch/last_updated_epoch, ms numeric STRINGS) via coerce.num
+ *      (null-never-0).
+ *   P4 no silent filter drop (per-mode filtersApplied/filtersDropped; the M1
+ *      exact-mode drop disclosed via filterMatch + a note).
+ *
+ * SSRF (the NSF fixed-host idiom, COPIED not imported): host + path + version are
+ * compile-time CONSTANTS; every caller input rides in a MODULE-BUILT
+ * URLSearchParams assembled key-by-key from validated typed args (NO raw-query
+ * passthrough) + a post-construction hostname/protocol assert + redirect:"error".
+ *
+ * PII boundary (S3): NPPES public professional-registration data is IN-SCOPE per
+ * the shipped NSF-PI-name precedent (src/nsf.ts surfaces PI names/emails),
+ * bounded to a per-query targeted lookup (the ≤1,200 reach is a courtesy cap;
+ * cross-query enumeration is NOT architecturally prevented, matching NSF). The
+ * mandatory not-a-fitness/cross-check-SAM+OFAC caveat rides EVERY response.
+ */
+import { num } from "./coerce.js";
+import { type MetaBundle } from "./meta.js";
+export { num };
+export declare const NPPES_STATES: readonly ["AL", "AK", "AZ", "AR", "CA", "CO", "CT", "DE", "DC", "FL", "GA", "HI", "ID", "IL", "IN", "IA", "KS", "KY", "LA", "ME", "MD", "MA", "MI", "MN", "MS", "MO", "MT", "NE", "NV", "NH", "NJ", "NM", "NY", "NC", "ND", "OH", "OK", "OR", "PA", "RI", "SC", "SD", "TN", "TX", "UT", "VT", "VA", "WA", "WV", "WI", "WY", "AS", "GU", "MP", "PR", "VI"];
+export type NppesState = (typeof NPPES_STATES)[number];
+/**
+ * ★ S3 — the mandatory not-a-fitness-determination caveat carried in EVERY
+ * response (mirrors OFAC_NOT_DETERMINATION_NOTE). Kept verbatim so the fault
+ * suite can assert it. It discloses (1) not a determination + cross-check SAM/OFAC;
+ * (2) individual (NPI-1) records may surface personal/home addresses + phone/fax
+ * verbatim, with NO enrichment or cross-source join.
+ */
+export declare const NPPES_NOT_DETERMINATION_NOTE = "Public professional-registration data (CMS NPPES NPI Registry). Confirms enumeration / identity / taxonomy only \u2014 it is NOT a fitness, exclusion, licensure, or sanctions determination. Cross-check SAM exclusions + OFAC for debarment/sanctions and the state licensing board for licensure. Individual (NPI-1) records may include personal / home practice or mailing addresses plus telephone/fax surfaced VERBATIM from the public registry; this tool performs NO enrichment and NO cross-source join on them.";
+/** ★ S3 — the per-query reach-cap POLICY disclosure carried on EVERY response. */
+export declare const NPPES_REACH_CAP_NOTE = "This vetting tool reaches at most the first ~1,200 matches per query (limit \u2264 200, skip \u2264 1,000) as a deliberate targeted-lookup boundary \u2014 NPPES itself no longer enforces a skip ceiling. This is a PER-QUERY cap only; cross-query enumeration (iterating name/city/postal filters) is NOT architecturally prevented (inherent to any search API), matching the NSF precedent. Narrow your filters (name + state + taxonomy) for a complete, targeted result set rather than paging deeper.";
+export type NppesAddress = {
+    purpose: string | null;
+    address1: string | null;
+    address2: string | null;
+    city: string | null;
+    state: string | null;
+    postalCode: string | null;
+    telephone: string | null;
+    fax: string | null;
+    countryCode: string | null;
+    countryName: string | null;
+    addressType: string | null;
+};
+export type NppesTaxonomy = {
+    code: string | null;
+    desc: string | null;
+    primary: boolean | null;
+    state: string | null;
+    license: string | null;
+    taxonomyGroup: string | null;
+};
+export type NppesProvider = {
+    number: string | null;
+    enumerationType: string | null;
+    active: boolean;
+    status: string | null;
+    basic: {
+        firstName: string | null;
+        lastName: string | null;
+        middleName: string | null;
+        namePrefix: string | null;
+        nameSuffix: string | null;
+        credential: string | null;
+        sex: string | null;
+        soleProprietor: string | null;
+        organizationName: string | null;
+        organizationalSubpart: string | null;
+        authorizedOfficialFirstName: string | null;
+        authorizedOfficialLastName: string | null;
+        authorizedOfficialMiddleName: string | null;
+        authorizedOfficialTitleOrPosition: string | null;
+        authorizedOfficialTelephoneNumber: string | null;
+        status: string | null;
+        enumerationDate: string | null;
+        certificationDate: string | null;
+        lastUpdated: string | null;
+    };
+    taxonomies: NppesTaxonomy[];
+    addresses: NppesAddress[];
+    /** ★ S1 — additional practice sites, surfaced as their own array (a provider
+     *  can practice in a state that appears ONLY here). NEVER merged into addresses[]. */
+    practiceLocations: NppesAddress[];
+    identifiers: unknown[];
+    otherNames: unknown[];
+    endpoints: unknown[];
+    createdEpoch: number | null;
+    lastUpdatedEpoch: number | null;
+};
+/**
+ * Validate the CMS NPI check digit: the Luhn algorithm over `80840` + the first 9
+ * NPI digits (14 digits total, ISO/IEC 7812) must reproduce the 10th NPI digit.
+ * `npi` MUST already be `^\d{10}$`. A Luhn-FAILING 10-digit string is provably
+ * NOT a valid NPI ⇒ invalid_input (a typo must NOT read as found:false).
+ */
+export declare function cmsLuhnValid(npi: string): boolean;
+export type NppesLookupArgs = {
+    number?: string;
+    enumeration_type?: string;
+    first_name?: string;
+    last_name?: string;
+    organization_name?: string;
+    taxonomy_description?: string;
+    city?: string;
+    state?: string;
+    postal_code?: string;
+    limit?: number;
+    skip?: number;
+};
+/**
+ * `nppes_lookup_provider` — keyless NPPES NPI Registry lookup. Mode inferred from
+ * `number`: EXACT-NPI detail (Luhn-validated, number-only wire, M1 co-filter
+ * annotation) OR a filtered SEARCH (required-one gate + refiners, S2; ≤200/≤1000
+ * pagination policy caps, S3). NEVER fakes a not-found: a typo'd NPI ⇒
+ * invalid_input; a {Errors} body ⇒ THROW; a genuine {result_count:0} ⇒ honest
+ * found:false / empty. The not-a-fitness caveat + reach-cap policy ride EVERY
+ * response.
+ */
+export declare function lookupProvider(args: NppesLookupArgs): Promise<MetaBundle<unknown>>;
+//# sourceMappingURL=nppes.d.ts.map

package/dist/nppes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nppes.d.ts","sourceRoot":"","sources":["../src/nppes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAIH,OAAO,EAAE,GAAG,EAAO,MAAM,aAAa,CAAC;AACvC,OAAO,EAAY,KAAK,UAAU,EAAqB,MAAM,WAAW,CAAC;AAKzE,OAAO,EAAE,GAAG,EAAE,CAAC;AA8Bf,eAAO,MAAM,YAAY,2VAOf,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAmCvD;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,ggBACid,CAAC;AAE3f,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,kfACic,CAAC;AAUne,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE;QACL,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;QACrC,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1C,4BAA4B,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5C,iCAAiC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjD,iCAAiC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B;0FACsF;IACtF,iBAAiB,EAAE,YAAY,EAAE,CAAC;IAClC,WAAW,EAAE,OAAO,EAAE,CAAC;IACvB,UAAU,EAAE,OAAO,EAAE,CAAC;IACtB,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAgHF;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAgBjD;AAqMD,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAGF;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CA+P9B"}