@curless/shopify-storefront 0.1.0

package/dist/__tests__/oauth.test.js

@@ -0,0 +1,112 @@
+// The install flow's security, which is the whole of it. Both checks below pass
+// silently when omitted — the merchant still installs, the token still arrives —
+// which is exactly why they need tests rather than a careful reading.
+import { createHmac } from 'node:crypto';
+import { describe, expect, test, vi } from 'vitest';
+import { exchangeCode, installUrl, isShopDomain, makeState, verifyCallbackHmac, verifyState, } from '../oauth.js';
+const CONFIG = {
+    clientId: 'cid',
+    clientSecret: 'shhh',
+    shopDomain: 'moodylenses.myshopify.com',
+    appUrl: 'https://mcp.curless.ai/moody',
+    scopes: 'read_products,read_orders',
+};
+// Build a signed callback query string the way Shopify does: raw (already
+// encoded) pairs, sorted by key, hmac appended.
+const signedQuery = (secret, query) => {
+    const pairs = Object.keys(query)
+        .sort()
+        .map((k) => `${k}=${encodeURIComponent(query[k])}`);
+    const hmac = createHmac('sha256', secret).update(pairs.join('&')).digest('hex');
+    return `?${pairs.join('&')}&hmac=${hmac}`;
+};
+describe('shop domain', () => {
+    test('only real Shopify domains', () => {
+        expect(isShopDomain('moodylenses.myshopify.com')).toBe(true);
+        // A lookalike here would send the merchant's authorisation elsewhere.
+        expect(isShopDomain('moodylenses.myshopify.com.evil.com')).toBe(false);
+        expect(isShopDomain('evil.com/moodylenses.myshopify.com')).toBe(false);
+        expect(isShopDomain('')).toBe(false);
+    });
+});
+describe('callback hmac', () => {
+    const Q = { code: 'abc', shop: CONFIG.shopDomain, state: 'x.1.y', timestamp: '1' };
+    test('accepts what Shopify signed', () => {
+        expect(verifyCallbackHmac('shhh', signedQuery('shhh', Q))).toBe(true);
+    });
+    // The one that matters: Shopify's signature, the attacker's code.
+    test('rejects a tampered parameter', () => {
+        const good = signedQuery('shhh', Q);
+        expect(verifyCallbackHmac('shhh', good.replace('code=abc', 'code=attacker'))).toBe(false);
+    });
+    test('rejects a signature made with another secret', () => {
+        expect(verifyCallbackHmac('shhh', signedQuery('not-ours', Q))).toBe(false);
+    });
+    test('a missing hmac is a rejection, not a skip', () => {
+        expect(verifyCallbackHmac('shhh', '?code=abc&shop=x.myshopify.com')).toBe(false);
+    });
+    // Verified against the RAW query, so a value that had to be encoded still
+    // matches. Rebuilding the message from DECODED values fails here — and fails
+    // closed, i.e. as "the merchant cannot install", which reads like anything but
+    // a signing bug.
+    test('a value containing encoded characters still verifies', () => {
+        const q = { ...Q, host: 'bW9vZHlsZW5zZXM=', code: 'a+b/c=' };
+        expect(verifyCallbackHmac('shhh', signedQuery('shhh', q))).toBe(true);
+    });
+});
+describe('state nonce', () => {
+    test('round-trips what we issued', () => {
+        expect(verifyState('shhh', makeState('shhh'))).toBe(true);
+    });
+    test('a state we did not issue is refused', () => {
+        expect(verifyState('shhh', 'made.up.x')).toBe(false);
+        expect(verifyState('shhh', makeState('another-secret'))).toBe(false);
+        expect(verifyState('shhh', '')).toBe(false);
+    });
+    // Without an expiry a state stays usable forever — a URL captured once (a
+    // history entry, a proxy log) remains a valid start-of-install indefinitely.
+    test('an old state expires', () => {
+        const now = 1_700_000_000_000;
+        const state = makeState('shhh', now);
+        expect(verifyState('shhh', state, now + 60_000)).toBe(true);
+        expect(verifyState('shhh', state, now + 16 * 60_000)).toBe(false);
+    });
+    test('a state from the future is refused too', () => {
+        const now = 1_700_000_000_000;
+        expect(verifyState('shhh', makeState('shhh', now + 10 * 60_000), now)).toBe(false);
+    });
+    test('two installs do not share a nonce', () => {
+        expect(makeState('shhh')).not.toBe(makeState('shhh'));
+    });
+});
+describe('install url', () => {
+    test('asks the right shop for the right scopes, back to our callback', () => {
+        const url = new URL(installUrl(CONFIG, 'st.at'));
+        expect(url.host).toBe('moodylenses.myshopify.com');
+        expect(url.pathname).toBe('/admin/oauth/authorize');
+        expect(url.searchParams.get('scope')).toBe('read_products,read_orders');
+        expect(url.searchParams.get('redirect_uri')).toBe('https://mcp.curless.ai/moody/auth/callback');
+        expect(url.searchParams.get('state')).toBe('st.at');
+        // Absent = offline token. Present-but-empty is neither offline nor per-user.
+        expect(url.searchParams.has('grant_options[]')).toBe(false);
+    });
+});
+describe('code exchange', () => {
+    test('returns the token and the scopes actually granted', async () => {
+        const f = vi.fn(async () => new Response(JSON.stringify({ access_token: 'shpat_x', scope: 'read_products' }), {
+            status: 200,
+            headers: { 'content-type': 'application/json' },
+        }));
+        // Shopify may grant LESS than asked; the caller records what it got.
+        await expect(exchangeCode(CONFIG, 'code', f)).resolves.toEqual({
+            accessToken: 'shpat_x',
+            scope: 'read_products',
+        });
+    });
+    test('a failure never echoes the response body', async () => {
+        const f = vi.fn(async () => new Response('{"error":"reflected input here"}', { status: 400 }));
+        await expect(exchangeCode(CONFIG, 'bad', f)).rejects.toThrow(/HTTP 400/);
+        await expect(exchangeCode(CONFIG, 'bad', f)).rejects.not.toThrow(/reflected/);
+    });
+});
+//# sourceMappingURL=oauth.test.js.map

package/dist/__tests__/oauth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.test.js","sourceRoot":"","sources":["../../src/__tests__/oauth.test.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,iFAAiF;AACjF,sEAAsE;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACpD,OAAO,EAEL,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,SAAS,EACT,kBAAkB,EAClB,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,GAAgB;IAC1B,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,2BAA2B;IACvC,MAAM,EAAE,8BAA8B;IACtC,MAAM,EAAE,2BAA2B;CACpC,CAAC;AAEF,0EAA0E;AAC1E,gDAAgD;AAChD,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,KAA6B,EAAU,EAAE;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC7B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;AAC5C,CAAC,CAAC;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,YAAY,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,sEAAsE;QACtE,MAAM,CAAC,YAAY,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,YAAY,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAEnF,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACxC,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,6EAA6E;IAC7E,+EAA+E;IAC/E,iBAAiB;IACjB,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7D,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,6EAA6E;IAC7E,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;QAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAChG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,6EAA6E;QAC7E,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CACb,KAAK,IAAI,EAAE,CACT,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE;YAChF,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CACsB,CAAC;QAC7B,qEAAqE;QACrE,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC7D,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CACb,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CACnD,CAAC;QAC7B,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzE,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/output-schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=output-schema.test.d.ts.map

package/dist/__tests__/output-schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schema.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/output-schema.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/output-schema.test.js

@@ -0,0 +1,112 @@
+// The declared shape must match what the tools actually return.
+//
+// An outputSchema is a promise to the model about what it is holding. A promise
+// that is sometimes false is worse than none: the reader trusting it is the
+// assistant deciding what to tell a buyer. So every `view` a tool can produce is
+// checked against the enum that claims to list them.
+import { describe, expect, test } from 'vitest';
+import { toolNames, vocabulary } from '../config.js';
+import { buildOutputSchemas, buildTools } from '../tools.js';
+// The names this suite was written against. Keeping moody's here means the
+// schema coverage doubles as parity: every shape asserted below is the shape
+// the live connector answers with today.
+const MOODY_CONFIG = {
+    id: 'moody',
+    server: { name: 'moody-lenses', title: 'Moody Lenses' },
+    naming: { prefix: 'moody', noun: 'lens', nounPlural: 'lenses' },
+    shopify: { mode: 'env' },
+    urls: { appUrl: 'https://shopify.curless.ai/moody' },
+    legal: {},
+};
+const NAMES = toolNames(MOODY_CONFIG);
+const TOOLS = buildTools(NAMES, vocabulary(MOODY_CONFIG));
+const OUTPUT_SCHEMAS = buildOutputSchemas(NAMES);
+const schemaFor = (name) => OUTPUT_SCHEMAS[name];
+const viewsOf = (name) => {
+    const v = schemaFor(name)?.properties.view;
+    return v?.enum ?? (v?.const ? [v.const] : []);
+};
+describe('output schemas', () => {
+    test('every tool declares one — the submission flags the ones that do not', () => {
+        for (const t of TOOLS)
+            expect(schemaFor(t.name), t.name).toBeTruthy();
+    });
+    // `view` is how a reader tells a checkout link from "tell me the other eye".
+    // Everything else about a payload can evolve; this cannot go missing.
+    test('view is always present and always required', () => {
+        for (const t of TOOLS) {
+            expect(schemaFor(t.name)?.required, t.name).toContain('view');
+            expect(viewsOf(t.name).length, t.name).toBeGreaterThan(0);
+        }
+    });
+    // The list is drawn from tools.ts itself, so a new branch that returns a new
+    // view fails here rather than silently contradicting the declaration.
+    test('the declared views cover every view the code can return', async () => {
+        const src = await import('node:fs/promises').then((fs) => fs.readFile(new URL('../tools.ts', import.meta.url), 'utf8'));
+        // Only the ones inside `structured: { view: '…' }`, not the schema's own.
+        const returned = new Set([...src.matchAll(/structured:\s*\{\s*\n?\s*view:\s*'([a-z-]+)'/g)].map((m) => m[1]));
+        const declared = new Set(TOOLS.flatMap((t) => viewsOf(t.name)));
+        // 'error' is reachable from several tools; it is declared where returned.
+        const missing = [...returned].filter((v) => !declared.has(v));
+        expect(missing, `views returned by the code but not declared: ${missing.join(', ')}`).toEqual([]);
+    });
+    test('a checkout result declares the field the buyer is actually sent to', () => {
+        expect(Object.keys(schemaFor('create_moody_checkout').properties)).toContain('checkoutUrl');
+    });
+    // Both mean "we will not tell you", and the schema must not imply otherwise by
+    // offering a shape that distinguishes them.
+    test('order lookup declares one not-found view, not two', () => {
+        const views = viewsOf('lookup_moody_order');
+        expect(views).toContain('order-not-found');
+        expect(views.filter((v) => v.includes('not-found'))).toHaveLength(1);
+    });
+});
+// Anthropic's pre-submission checklist: "Every tool must include a `title` and
+// the applicable hint". The hints were there from the start because OpenAI asks
+// for them; the title was missing on all four and nothing failed — an automated
+// policy scan passed us into the directory anyway, and the gap only showed up on
+// a read of the criteria. So it gets a test rather than a memory.
+describe('tool annotations', () => {
+    test('every tool carries a title and all three hints', () => {
+        for (const t of TOOLS) {
+            const a = t.annotations;
+            expect(a?.title, `${t.name} has no title`).toBeTruthy();
+            // The title is read by a BUYER in a permission line, so it must not be the
+            // function name wearing a hat.
+            expect(a?.title, `${t.name} title is just the tool name`).not.toBe(t.name);
+            expect(a?.readOnlyHint, `${t.name} is not declared read-only`).toBe(true);
+        }
+    });
+    test('tool names stay inside the 64-character limit', () => {
+        for (const t of TOOLS)
+            expect(t.name.length, t.name).toBeLessThanOrEqual(64);
+    });
+});
+// Anthropic's criteria reject tool descriptions that "interfere with Claude
+// calling other tools": describe what the tool does, do not tell the model how
+// to behave. This connector shipped such a line for a day — "Use this INSTEAD
+// of web search" — written in good faith after watching a host answer from a
+// scraped page, and it read as reasonable right up until the criteria were
+// read. It is a tempting sentence to write again the next time a host routes
+// somewhere else, so it gets a guard rather than a resolution.
+//
+// Note what is NOT banned: telling the model how to use THIS tool ("call this
+// FIRST, with no arguments", "do not interview them first"). That is the tool
+// describing its own correct use. The line is drawn at reaching for the other
+// tools in the list.
+describe('tool descriptions stay inside the directory criteria', () => {
+    const STEERING = [
+        /instead of (?:web )?search/i,
+        /rather than (?:using )?(?:web )?search/i,
+        /do not (?:use|call) (?:the )?(?:web|other|any other)/i,
+        /don'?t (?:use|call) (?:the )?(?:web|other|any other)/i,
+    ];
+    test('no description steers the model away from other tools', () => {
+        for (const t of TOOLS) {
+            for (const pattern of STEERING) {
+                expect(pattern.test(t.description), `${t.name}: ${pattern}`).toBe(false);
+            }
+        }
+    });
+});
+//# sourceMappingURL=output-schema.test.js.map

package/dist/__tests__/output-schema.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schema.test.js","sourceRoot":"","sources":["../../src/__tests__/output-schema.test.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,iFAAiF;AACjF,qDAAqD;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE7D,2EAA2E;AAC3E,6EAA6E;AAC7E,yCAAyC;AACzC,MAAM,YAAY,GAAG;IACnB,EAAE,EAAE,OAAO;IACX,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE;IACvD,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE;IAC/D,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;IACxB,IAAI,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE;IACpD,KAAK,EAAE,EAAE;CACD,CAAC;AACX,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;AACtC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;AAC1D,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAQjD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAuB,CAAC;AAE/E,MAAM,OAAO,GAAG,CAAC,IAAY,EAAY,EAAE;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC;IAC3C,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC/E,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACtD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC9D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,sEAAsE;IACtE,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACvD,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC7D,CAAC;QACF,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAC9F,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAyB,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxF,0EAA0E;QAC1E,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,EAAE,gDAAgD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAC3F,EAAE,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAE,SAAS,CAAC,uBAAuB,CAAY,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CACtF,aAAa,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,4CAA4C;IAC5C,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AACjF,kEAAkE;AAClE,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC1D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC,WAAqE,CAAC;YAClF,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,UAAU,EAAE,CAAC;YACxD,2EAA2E;YAC3E,+BAA+B;YAC/B,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,8BAA8B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3E,MAAM,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACzD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,+DAA+D;AAC/D,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,qBAAqB;AACrB,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,MAAM,QAAQ,GAAG;QACf,6BAA6B;QAC7B,yCAAyC;QACzC,uDAAuD;QACvD,uDAAuD;KACxD,CAAC;IAEF,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/ping.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ping.test.d.ts.map

package/dist/__tests__/ping.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ping.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/ping.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/ping.test.js

@@ -0,0 +1,22 @@
+// The spec's `ping` is a request the receiver MUST answer promptly with an
+// empty result, and hosts use it to decide whether the server is still there.
+// Answering -32601 made Claude tell the buyer "Unable to reach Moody Lenses"
+// and "There was a problem displaying content" — on a connection where every
+// tool call in the same log line was succeeding. The banner said nothing
+// worked; the server log said everything did.
+//
+// Asserted against the SOURCE because the module starts a listener on import.
+import { readFileSync } from 'node:fs';
+import { describe, expect, test } from 'vitest';
+const SRC = readFileSync(new URL('../index.ts', import.meta.url), 'utf8');
+describe('JSON-RPC methods a host relies on', () => {
+    test('ping is handled, not left to fall through to method-not-found', () => {
+        expect(SRC).toMatch(/method === 'ping'/);
+    });
+    test('and it answers with a result, which is what "MUST respond" means', () => {
+        const at = SRC.indexOf("method === 'ping'");
+        expect(at).toBeGreaterThan(-1);
+        expect(SRC.slice(at, at + 400)).toMatch(/return ok\(c, id, \{\}\)/);
+    });
+});
+//# sourceMappingURL=ping.test.js.map

package/dist/__tests__/ping.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ping.test.js","sourceRoot":"","sources":["../../src/__tests__/ping.test.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,8EAA8E;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAEhD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AAE1E,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC5E,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/rate-limit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rate-limit.test.d.ts.map

package/dist/__tests__/rate-limit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/rate-limit.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/rate-limit.test.js

@@ -0,0 +1,46 @@
+// `/mcp` is public and unauthenticated — a shopper has no account with us — so
+// the limiter is the only thing between the internet and the merchant's Shopify
+// quota, and between a guessed order number and someone's purchase history.
+import { describe, expect, test } from 'vitest';
+import { RateLimiter, clientIp } from '../rate-limit.js';
+describe('RateLimiter', () => {
+    test('allows up to the limit, then refuses', () => {
+        const rl = new RateLimiter(3, 60_000);
+        expect([rl.take('a'), rl.take('a'), rl.take('a')]).toEqual([true, true, true]);
+        expect(rl.take('a')).toBe(false);
+    });
+    test('one caller cannot spend another caller"s budget', () => {
+        const rl = new RateLimiter(1, 60_000);
+        expect(rl.take('a')).toBe(true);
+        expect(rl.take('a')).toBe(false);
+        expect(rl.take('b'), 'a different address is a different bucket').toBe(true);
+    });
+    test('the window reopens', () => {
+        const rl = new RateLimiter(1, 1_000);
+        const t = 1_700_000_000_000;
+        expect(rl.take('a', t)).toBe(true);
+        expect(rl.take('a', t + 500)).toBe(false);
+        expect(rl.take('a', t + 1_001)).toBe(true);
+    });
+    test('a flood of distinct addresses cannot grow the map without bound', () => {
+        const rl = new RateLimiter(1, 60_000, 100);
+        for (let i = 0; i < 500; i++)
+            rl.take(`ip-${i}`);
+        // No assertion on internals — the point is that it neither throws nor keeps
+        // every key. A limiter that OOMs is a denial of service with extra steps.
+        expect(rl.take('ip-final')).toBe(true);
+    });
+});
+describe('clientIp', () => {
+    test('takes the client, not the proxy chain', () => {
+        const h = new Headers({ 'x-forwarded-for': '203.0.113.7, 10.0.0.1, 10.0.0.2' });
+        expect(clientIp(h)).toBe('203.0.113.7');
+    });
+    test('falls back through x-real-ip, then to a constant', () => {
+        expect(clientIp(new Headers({ 'x-real-ip': '198.51.100.4' }))).toBe('198.51.100.4');
+        // Everything unknown shares one bucket — strictly safer than treating every
+        // unidentified caller as brand new.
+        expect(clientIp(new Headers())).toBe('unknown');
+    });
+});
+//# sourceMappingURL=rate-limit.test.js.map

package/dist/__tests__/rate-limit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.test.js","sourceRoot":"","sources":["../../src/__tests__/rate-limit.test.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEzD,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC3D,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,2CAA2C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC9B,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,iBAAiB,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;QAC3E,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,iBAAiB,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpF,4EAA4E;QAC5E,oCAAoC;QACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/stock.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=stock.test.d.ts.map

package/dist/__tests__/stock.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stock.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/stock.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/stock.test.js

@@ -0,0 +1,109 @@
+// The picker's stock rule, tested away from the card.
+//
+// It decides which prescriptions a buyer is allowed to pick, and it was written
+// because the first version let them pick any of 26x26 and told them "sold out"
+// on almost every one — at the real store 674 of the 676 Matcha Green pairs do
+// not exist. A rule that load-bearing should not only be checkable by clicking
+// through a live store, so it lives in its own module and is exercised here.
+import { describe, expect, test } from 'vitest';
+import { offeredValue, pruneChoices, stockOf } from '../stock.js';
+// What the real store has for Matcha Green: two pairs out of 676.
+const MATCHA = [
+    { Left: '-5.75', Right: '-5.50' },
+    { Left: '-2.00', Right: '-2.00' },
+];
+describe('offeredValue', () => {
+    test('a value no stocked combination has is not offered', () => {
+        expect(offeredValue(MATCHA, {}, 'Left', '-3.00')).toBe(false);
+        expect(offeredValue(MATCHA, {}, 'Left', '-5.75')).toBe(true);
+    });
+    // The point of the whole rule: one eye narrows the other. Right -2.00 exists
+    // in the store, but NOT alongside Left -5.75 — and a picker that offered it
+    // would take the buyer straight to a sold-out checkout.
+    test('choosing one eye narrows what the other may be', () => {
+        expect(offeredValue(MATCHA, { Left: '-5.75' }, 'Right', '-5.50')).toBe(true);
+        expect(offeredValue(MATCHA, { Left: '-5.75' }, 'Right', '-2.00')).toBe(false);
+    });
+    // Otherwise, once Left is chosen, no other Left could ever be chosen again —
+    // the group would freeze on the first pick.
+    test('a group does not lock itself: its own current pick is excluded', () => {
+        expect(offeredValue(MATCHA, { Left: '-5.75' }, 'Left', '-2.00')).toBe(true);
+    });
+    // An empty list means the server truncated it, not that the store is empty.
+    // Filtering on a partial list would HIDE prescriptions the store has, and an
+    // invisible option cannot be argued with — a sold-out message at least can.
+    test('no stock information offers everything rather than hiding it', () => {
+        expect(offeredValue([], { Left: '-5.75' }, 'Right', '-9.99')).toBe(true);
+    });
+});
+describe('pruneChoices', () => {
+    test('a pick that contradicts the new one is dropped, not silently kept', () => {
+        // Left -5.75 with Right -2.00 is not a pair this store has. Keeping both
+        // would light up Buy over a combination that cannot be bought.
+        expect(pruneChoices(MATCHA, { Left: '-5.75', Right: '-2.00' })).not.toEqual({
+            Left: '-5.75',
+            Right: '-2.00',
+        });
+    });
+    test('a combination the store really has survives intact', () => {
+        expect(pruneChoices(MATCHA, { Left: '-5.75', Right: '-5.50' })).toEqual({
+            Left: '-5.75',
+            Right: '-5.50',
+        });
+        expect(pruneChoices(MATCHA, { Left: '-2.00', Right: '-2.00' })).toEqual({
+            Left: '-2.00',
+            Right: '-2.00',
+        });
+    });
+    test('without stock information nothing is pruned', () => {
+        expect(pruneChoices([], { Left: '-9.99' })).toEqual({ Left: '-9.99' });
+    });
+    test('a single-option product keeps a stocked value and drops an unstocked one', () => {
+        const single = [{ Diopter: '-1.00' }, { Diopter: '-2.00' }];
+        expect(pruneChoices(single, { Diopter: '-2.00' })).toEqual({ Diopter: '-2.00' });
+        expect(pruneChoices(single, { Diopter: '-3.00' })).toEqual({});
+    });
+});
+// The bug this function exists to prevent, from the real payloads.
+//
+// `get_moody_lens` nests everything about the lens under `product`, while
+// `needs-options` keeps the answer to "what is still missing" at the top level.
+// The card read only the top level, so on the product view the stock list was
+// always empty — and empty means "we do not know", which offers everything. At a
+// store with 2 of 676 in stock, every prescription looked available and nothing
+// was struck through. Nothing threw; the buyer was just quietly told they could
+// have anything.
+describe('stockOf', () => {
+    test('finds it on the product view, where it is nested under `product`', () => {
+        const sc = {
+            view: 'product',
+            product: { inStock: MATCHA, inStockTruncated: false, inStockCount: 2 },
+        };
+        expect(stockOf(sc)).toEqual(MATCHA);
+    });
+    test('finds it on needs-options, where it sits at the top level', () => {
+        const sc = { view: 'needs-options', inStock: MATCHA, inStockTruncated: false, product: {} };
+        expect(stockOf(sc)).toEqual(MATCHA);
+    });
+    // Filtering on a partial list would HIDE prescriptions the store has, which is
+    // worse than the sold-out message: an invisible option cannot be argued with.
+    test('a truncated list turns filtering off, wherever it was found', () => {
+        expect(stockOf({ product: { inStock: MATCHA, inStockTruncated: true } })).toEqual([]);
+        expect(stockOf({ inStock: MATCHA, inStockTruncated: true })).toEqual([]);
+    });
+    test('a payload with no stock information at all is handled, not thrown on', () => {
+        expect(stockOf(undefined)).toEqual([]);
+        expect(stockOf({})).toEqual([]);
+        expect(stockOf({ product: {} })).toEqual([]);
+    });
+    // Ties the two halves together: what the reader finds must actually drive the
+    // rule. A lookup that returns the list but is never consulted is the same bug
+    // wearing a different hat.
+    test('what it finds is what decides the chips', () => {
+        const sc = { product: { inStock: MATCHA, inStockTruncated: false } };
+        const stock = stockOf(sc);
+        expect(offeredValue(stock, {}, 'Left', '-5.75')).toBe(true);
+        expect(offeredValue(stock, {}, 'Left', '-3.50')).toBe(false);
+    });
+});
+//# sourceMappingURL=stock.test.js.map

package/dist/__tests__/stock.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stock.test.js","sourceRoot":"","sources":["../../src/__tests__/stock.test.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAc,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE9E,kEAAkE;AAClE,MAAM,MAAM,GAAY;IACtB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;IACjC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;CAClC,CAAC;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,4CAA4C;IAC5C,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC7E,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;YAC1E,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACtE,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACtE,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;QACpF,MAAM,MAAM,GAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,mEAAmE;AACnE,EAAE;AACF,0EAA0E;AAC1E,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,iBAAiB;AACjB,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC5E,MAAM,EAAE,GAAG;YACT,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE;SACvE,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACrE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC5F,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,8EAA8E;IAC9E,2BAA2B;IAC3B,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACnD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/tenant.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tenant.test.d.ts.map

package/dist/__tests__/tenant.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/tenant.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/tenant.test.js

@@ -0,0 +1,105 @@
+import { describe, expect, test } from 'vitest';
+import { resolveStorefront } from '../config.js';
+import { explainNoTenant, multiShopResolver, singleShopResolver } from '../tenant.js';
+// The fakes are typed against the reader slices the resolvers declare, so a
+// required member added to either store fails HERE, at compile time, instead of
+// compiling fine and throwing once the suite runs.
+const fakeCatalog = (tag) => ({ tag });
+const token = (shopDomain = 'rqxbft-fw.myshopify.com') => ({
+    shopDomain,
+    accessToken: 'x',
+    scope: 'read_products',
+    installedAt: '2026-01-01T00:00:00.000Z',
+});
+const single = (opts) => singleShopResolver({
+    store: resolveStorefront({
+        id: 'moody',
+        server: { name: 'moody', title: 'Moody' },
+        shopify: { mode: 'env', shopDomain: 'rqxbft-fw.myshopify.com' },
+        urls: { appUrl: 'https://shopify.curless.ai/moody' },
+        legal: {},
+    }),
+    catalog: fakeCatalog('single'),
+    tokens: { get: async () => (opts.installed ? token() : null) },
+});
+const multi = (installed) => {
+    const started = [];
+    const registry = {
+        for: (s) => {
+            started.push(s);
+            return fakeCatalog(s);
+        },
+    };
+    const tokens = {
+        get: async (s) => (installed.includes(s) ? token(s) : null),
+    };
+    const resolve = multiShopResolver({ registry, tokens });
+    return { resolve, started };
+};
+describe('branded deployment', () => {
+    test('a request naming nothing gets the one shop it serves', async () => {
+        const r = await single({ installed: true })();
+        expect(r.ok && r.tenant.shopDomain).toBe('rqxbft-fw.myshopify.com');
+    });
+    test('a request naming the SAME shop is fine', async () => {
+        const r = await single({ installed: true })('RQXBFT-FW.myshopify.com');
+        expect(r.ok).toBe(true);
+    });
+    // The shop is fixed, so a `shop` on the request is a claim to check, not a
+    // question to answer. Serving the only catalogue we have would answer a
+    // question about someone else's store with this store's products.
+    test('a request naming a DIFFERENT shop is refused, not quietly served', async () => {
+        const r = await single({ installed: true })('someone-else.myshopify.com');
+        expect(r).toEqual({ ok: false, reason: 'bad-shop', given: 'someone-else.myshopify.com' });
+    });
+    test('before install, not-installed rather than an empty catalogue', async () => {
+        const r = await single({ installed: false })();
+        expect(r.ok).toBe(false);
+        expect(r.ok === false && r.reason).toBe('not-installed');
+    });
+});
+describe('listed app', () => {
+    test('each shop resolves to its own catalogue', async () => {
+        const { resolve, started } = multi(['a.myshopify.com', 'b.myshopify.com']);
+        const a = await resolve('a.myshopify.com');
+        const b = await resolve('b.myshopify.com');
+        expect(a.ok && b.ok).toBe(true);
+        expect(started).toEqual(['a.myshopify.com', 'b.myshopify.com']);
+    });
+    // There is no default shop. Picking one would answer as whichever merchant
+    // happened to be first, which is the failure this whole layer exists for.
+    test('no shop named is refused, never defaulted', async () => {
+        const { resolve, started } = multi(['a.myshopify.com']);
+        expect(await resolve()).toEqual({ ok: false, reason: 'no-shop' });
+        expect(await resolve('   ')).toEqual({ ok: false, reason: 'no-shop' });
+        expect(started).toEqual([]);
+    });
+    test('a shop we will not name never reaches the token store or the registry', async () => {
+        const { resolve, started } = multi(['a.myshopify.com']);
+        const r = await resolve('../../etc/passwd');
+        expect(r.ok).toBe(false);
+        expect(r.ok === false && r.reason).toBe('bad-shop');
+        expect(started).toEqual([]);
+    });
+    test('a real shop that has not installed is ordinary, not an error', async () => {
+        const { resolve, started } = multi([]);
+        const r = await resolve('c.myshopify.com');
+        expect(r.ok === false && r.reason).toBe('not-installed');
+        // No catalogue is started for a shop with no token — that would poll
+        // Shopify for a store that never installed us.
+        expect(started).toEqual([]);
+    });
+    test('case is folded, so one store is one tenant', async () => {
+        const { resolve, started } = multi(['a.myshopify.com']);
+        expect((await resolve('A.MyShopify.com')).ok).toBe(true);
+        expect(started).toEqual(['a.myshopify.com']);
+    });
+});
+describe('what the buyer is told', () => {
+    test('each refusal says something actionable and names no internals', () => {
+        expect(explainNoTenant({ reason: 'no-shop' })).toMatch(/say which store/i);
+        expect(explainNoTenant({ reason: 'bad-shop', given: 'x.com' })).toContain('x.com');
+        expect(explainNoTenant({ reason: 'not-installed', shop: 'a.myshopify.com' })).toMatch(/has not installed/i);
+    });
+});
+//# sourceMappingURL=tenant.test.js.map

package/dist/__tests__/tenant.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.test.js","sourceRoot":"","sources":["../../src/__tests__/tenant.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGtF,4EAA4E;AAC5E,gFAAgF;AAChF,mDAAmD;AACnD,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAClC,CAAC,EAAE,GAAG,EAAE,CAAmE,CAAC;AAE9E,MAAM,KAAK,GAAG,CAAC,UAAU,GAAG,yBAAyB,EAAe,EAAE,CAAC,CAAC;IACtE,UAAU;IACV,WAAW,EAAE,GAAG;IAChB,KAAK,EAAE,eAAe;IACtB,WAAW,EAAE,0BAA0B;CACxC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,IAA4B,EAAE,EAAE,CAC9C,kBAAkB,CAAC;IACjB,KAAK,EAAE,iBAAiB,CAAC;QACvB,EAAE,EAAE,OAAO;QACX,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;QACzC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,yBAAyB,EAAE;QAC/D,IAAI,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE;QACpD,KAAK,EAAE,EAAE;KACV,CAAC;IACF,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC;IAC9B,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAwB;CACrF,CAAC,CAAC;AAEL,MAAM,KAAK,GAAG,CAAC,SAAmB,EAAE,EAAE;IACpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAkB;QAC9B,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;KACF,CAAC;IACF,MAAM,MAAM,GAAqB;QAC/B,GAAG,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;KACpE,CAAC;IACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,yBAAyB,CAAC,CAAC;QACvE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,wEAAwE;IACxE,kEAAkE;IAClE,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC;QAC1E,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzD,qEAAqE;QACrE,+CAA+C;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC3E,MAAM,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnF,MAAM,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,OAAO,CACnF,oBAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/tools.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tools.test.d.ts.map

package/dist/__tests__/tools.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/tools.test.ts"],"names":[],"mappings":""}