@databasin/mcp-client 0.1.0 → 0.2.0-beta.1

package/dist/login-url.js

@@ -0,0 +1,82 @@
+/**
+ * Microsoft-owned device sign-in locations. Entra has changed the
+ * verification URI it returns over time — the original pin of exactly
+ * microsoft.com/devicelogin rejected Microsoft's own current response
+ * (login.microsoft.com/device, observed 2026-08-26), making sign-in
+ * impossible. Every entry is a first-party Microsoft host with its exact
+ * expected path; anything else is still rejected, and the returned value is
+ * the canonical form, never the raw input.
+ */
+const DEVICE_LOGIN_LOCATIONS = new Map([
+    ['microsoft.com', new Set(['/devicelogin', '/devicelogin/'])],
+    ['www.microsoft.com', new Set(['/devicelogin', '/devicelogin/'])],
+    ['login.microsoft.com', new Set(['/device', '/device/'])]
+]);
+const INTERACTIVE_SUFFIX = '/oauth2/v2.0/authorize';
+export function projectDevicePrompt(response) {
+    const verificationUri = validateDeviceLoginUrl(response.verificationUri);
+    const userCode = validateUserCode(response.userCode);
+    const expiresIn = validateExpiresIn(response.expiresIn);
+    return Object.freeze({ userCode, verificationUri, expiresIn });
+}
+export function validateDeviceLoginUrl(value) {
+    const url = parseUrl(value);
+    assertSafeHttpsUrl(url);
+    const paths = DEVICE_LOGIN_LOCATIONS.get(url.hostname);
+    if (!paths || !paths.has(url.pathname)) {
+        throw new Error('Microsoft returned an unexpected device sign-in URL.');
+    }
+    if (url.search || url.hash)
+        throw new Error('Microsoft returned an unexpected device sign-in URL.');
+    return `https://${url.hostname}${url.pathname.replace(/\/$/u, '')}`;
+}
+export function validateInteractiveLoginUrl(rawUrl, profile) {
+    const url = parseUrl(rawUrl);
+    assertSafeHttpsUrl(url);
+    if (url.hash)
+        throw new Error('Refusing to open an unexpected OAuth URL.');
+    const segments = url.pathname.split('/').filter(Boolean);
+    const expectedTenant = profile?.tenantId.toLowerCase();
+    const tenant = segments[0]?.toLowerCase();
+    const expectedPath = tenant === undefined ? '' : `/${tenant}${INTERACTIVE_SUFFIX}`;
+    const validTenant = expectedTenant === undefined ? isUuid(tenant) : tenant === expectedTenant;
+    if (url.hostname !== 'login.microsoftonline.com' || !validTenant || url.pathname.toLowerCase() !== expectedPath) {
+        throw new Error('Refusing to open an unexpected OAuth URL.');
+    }
+    if (profile && url.searchParams.get('client_id') !== profile.clientId) {
+        throw new Error('Refusing to open an OAuth URL for an unexpected client.');
+    }
+    return url.toString();
+}
+function parseUrl(value) {
+    if (typeof value !== 'string' || value.length > 4_096)
+        throw new Error('Microsoft returned an invalid sign-in URL.');
+    try {
+        return new URL(value);
+    }
+    catch {
+        throw new Error('Microsoft returned an invalid sign-in URL.');
+    }
+}
+function assertSafeHttpsUrl(url) {
+    if (url.protocol !== 'https:' || url.username || url.password || url.port) {
+        throw new Error('Microsoft returned an unsafe sign-in URL.');
+    }
+}
+function validateUserCode(value) {
+    if (typeof value !== 'string' || !/^[A-Z0-9-]{4,32}$/iu.test(value)) {
+        throw new Error('Microsoft returned an invalid device sign-in code.');
+    }
+    return value;
+}
+function validateExpiresIn(value) {
+    if (typeof value !== 'number' || !Number.isInteger(value) || value < 1 || value > 1_800) {
+        throw new Error('Microsoft returned an invalid device sign-in expiry.');
+    }
+    return value;
+}
+function isUuid(value) {
+    return value !== undefined
+        && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu.test(value);
+}
+//# sourceMappingURL=login-url.js.map

package/dist/login-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-url.js","sourceRoot":"","sources":["../src/login-url.ts"],"names":[],"mappings":"AAiBA;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAA6C,IAAI,GAAG,CAAC;IAC/E,CAAC,eAAe,EAAE,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;IAC7D,CAAC,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;IACjE,CAAC,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;CAC1D,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAEpD,MAAM,UAAU,mBAAmB,CAAC,QAA+B;IACjE,MAAM,eAAe,GAAG,sBAAsB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACpG,OAAO,WAAW,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,OAA0B;IACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACnF,MAAM,WAAW,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC;IAC9F,IAAI,GAAG,CAAC,QAAQ,KAAK,2BAA2B,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,YAAY,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACrH,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAQ;IAClC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAyB;IACvC,OAAO,KAAK,KAAK,SAAS;WACrB,6EAA6E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjG,CAAC"}

package/dist/safety.d.ts

@@ -1,3 +1,7 @@
+export declare function isSensitiveKey(key: string): boolean;
+export declare function containsSensitiveMaterial(value: string): boolean;
+export declare function redactSensitiveText(value: string): string;
+export declare function sanitizeOutput(value: unknown): unknown;
 export declare function assertSafeOutput(value: unknown, maxBytes?: number): void;
 export declare function correlationId(): string;
 //# sourceMappingURL=safety.d.ts.map

package/dist/safety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../src/safety.ts"],"names":[],"mappings":"AAMA,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAY,GAAG,IAAI,CAK3E;AAgBD,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../src/safety.ts"],"names":[],"mappings":"AA0BA,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAShE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CASzD;AAMD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEtD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAY,GAAG,IAAI,CAM3E;AA8CD,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/safety.js

@@ -1,27 +1,111 @@
-import { randomUUID } from 'node:crypto';
+import { freshCorrelationId } from './correlation.js';
 import { DataBasinError } from './errors.js';
-const SENSITIVE_KEY = /(?:pass(word)?|secret|token|api[-_]?key|credential|authorization|cookie|webhook|signed[-_]?url|connection[-_]?string|private[-_]?key|client[-_]?secret|keyvault)/iu;
+const SENSITIVE_KEY = /(?:pass(?:word|wd)?|pwd|secret|token|api[-_]?key|credential|authorization|cookie|webhook|signed[-_]?url|connection[-_]?string|private[-_]?key|client[-_]?secret|keyvault)/iu;
+const JWT_SOURCE = String.raw `\beyJ[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\b`;
+const BEARER_SOURCE = String.raw `\bbearer\s+[a-z0-9._~+/=-]{12,}`;
+const JDBC_SOURCE = String.raw `\bjdbc:[^\s"'<>]+`;
+const DATABASE_URI_SOURCE = String.raw `\b(?:postgres(?:ql)?|mysql|mariadb|mongodb(?:\+srv)?|sqlserver|redis):\/\/[^\s"'<>]+`;
+const PEM_SOURCE = String.raw `-----BEGIN [A-Z0-9 ]*(?:PRIVATE KEY|CERTIFICATE)-----[\s\S]*?-----END [A-Z0-9 ]*(?:PRIVATE KEY|CERTIFICATE)-----`;
+const KEY_VALUE_SOURCE = String.raw `\b(?:password|passwd|pwd|secret|token|access[_-]?token|refresh[_-]?token|id[_-]?token|api[_-]?key|client[_-]?secret)\b\s*[:=]\s*(?:"[^"]*"|'[^']*'|[^\s,;]+)`;
+const JWT = new RegExp(JWT_SOURCE, 'u');
+const BEARER = new RegExp(BEARER_SOURCE, 'iu');
+const JDBC = new RegExp(JDBC_SOURCE, 'iu');
+const DATABASE_URI = new RegExp(DATABASE_URI_SOURCE, 'iu');
+const PEM = new RegExp(PEM_SOURCE, 'u');
+const KEY_VALUE = new RegExp(KEY_VALUE_SOURCE, 'iu');
+const REDACTED_KEY_VALUE = /\b(?:password|passwd|pwd|secret|token|access[_-]?token|refresh[_-]?token|id[_-]?token|api[_-]?key|client[_-]?secret)\b\s*[:=]\s*(?:"\[REDACTED\]"|'\[REDACTED\]'|\[REDACTED\])/giu;
+const DB_LOCATION_FIELD = /\b(?:server|host|data source|database)\s*=/iu;
+const DB_CREDENTIAL_FIELD = /\b(?:password|pwd|user id|uid)\s*=/iu;
+const REDACT_PEM = new RegExp(PEM_SOURCE, 'gu');
+const REDACT_JWT = new RegExp(JWT_SOURCE, 'gu');
+const REDACT_BEARER = new RegExp(BEARER_SOURCE, 'giu');
+const REDACT_JDBC = new RegExp(JDBC_SOURCE, 'giu');
+const REDACT_DATABASE_URI = new RegExp(DATABASE_URI_SOURCE, 'giu');
+const REDACT_KEY_VALUE = new RegExp(KEY_VALUE_SOURCE.replace('(?:password', '(password'), 'giu');
+export function isSensitiveKey(key) {
+    return SENSITIVE_KEY.test(key);
+}
+export function containsSensitiveMaterial(value) {
+    const candidate = value.replace(REDACTED_KEY_VALUE, '');
+    return JWT.test(candidate)
+        || BEARER.test(candidate)
+        || JDBC.test(candidate)
+        || DATABASE_URI.test(candidate)
+        || PEM.test(candidate)
+        || KEY_VALUE.test(candidate)
+        || isDatabaseConnectionString(candidate);
+}
+export function redactSensitiveText(value) {
+    if (isDatabaseConnectionString(value))
+        return '[REDACTED]';
+    return value
+        .replace(REDACT_PEM, '[REDACTED]')
+        .replace(REDACT_JWT, '[REDACTED]')
+        .replace(REDACT_BEARER, 'Bearer [REDACTED]')
+        .replace(REDACT_JDBC, '[REDACTED]')
+        .replace(REDACT_DATABASE_URI, '[REDACTED]')
+        .replace(REDACT_KEY_VALUE, '$1=[REDACTED]');
+}
+function isDatabaseConnectionString(value) {
+    return DB_LOCATION_FIELD.test(value) && DB_CREDENTIAL_FIELD.test(value);
+}
+export function sanitizeOutput(value) {
+    return sanitize(value);
+}
 export function assertSafeOutput(value, maxBytes = 1_048_576) {
-    inspectKeys(value, '$');
-    if (Buffer.byteLength(JSON.stringify(value), 'utf8') > maxBytes) {
+    inspect(value);
+    const serialized = JSON.stringify(value);
+    if (serialized === undefined || Buffer.byteLength(serialized, 'utf8') > maxBytes) {
         throw new DataBasinError('POLICY_DENIED', 'The tool output exceeded the response-size limit.');
     }
 }
-function inspectKeys(value, path) {
+function sanitize(value) {
+    if (Array.isArray(value))
+        return value.map(sanitize);
+    if (typeof value === 'string')
+        return redactSensitiveText(value);
+    if (!value || typeof value !== 'object')
+        return value;
+    return sanitizeRecord(value);
+}
+function sanitizeRecord(object) {
+    const output = {};
+    const fieldName = namedField(object);
+    for (const [key, child] of Object.entries(object)) {
+        output[key] = shouldRedact(key, fieldName) ? '[REDACTED]' : sanitize(child);
+    }
+    return output;
+}
+function namedField(object) {
+    if (typeof object.name === 'string')
+        return object.name;
+    return typeof object.key === 'string' ? object.key : undefined;
+}
+function shouldRedact(key, fieldName) {
+    if (isSensitiveKey(key))
+        return true;
+    return key === 'value' && fieldName !== undefined && isSensitiveKey(fieldName);
+}
+function inspect(value) {
     if (Array.isArray(value)) {
-        value.forEach((child, index) => inspectKeys(child, `${path}[${index}]`));
+        value.forEach(inspect);
+        return;
+    }
+    if (typeof value === 'string') {
+        if (containsSensitiveMaterial(value))
+            throw new DataBasinError('POLICY_DENIED', 'Sensitive material was blocked from tool output.');
         return;
     }
     if (!value || typeof value !== 'object')
         return;
     for (const [key, child] of Object.entries(value)) {
-        if (SENSITIVE_KEY.test(key)) {
-            throw new DataBasinError('INTERNAL_ERROR', `A sensitive field was blocked at ${path}.`);
+        if (isSensitiveKey(key) && child !== '[REDACTED]') {
+            throw new DataBasinError('POLICY_DENIED', 'Sensitive material was blocked from tool output.');
         }
-        inspectKeys(child, `${path}.${key}`);
+        inspect(child);
     }
 }
 export function correlationId() {
-    return randomUUID();
+    return freshCorrelationId();
 }
 //# sourceMappingURL=safety.js.map

package/dist/safety.js.map

@@ -1 +1 @@
-{"version":3,"file":"safety.js","sourceRoot":"","sources":["../src/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,aAAa,GAAG,oKAAoK,CAAC;AAE3L,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,QAAQ,GAAG,SAAS;IACnE,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,oCAAoC,IAAI,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,WAAW,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../src/safety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,aAAa,GAAG,6KAA6K,CAAC;AACpM,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,gEAAgE,CAAC;AAC9F,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,iCAAiC,CAAC;AAClE,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAA,mBAAmB,CAAC;AAClD,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAA,sFAAsF,CAAC;AAC7H,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,kHAAkH,CAAC;AAChJ,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAA,8JAA8J,CAAC;AAClM,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACxC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;AAC/C,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AAC3C,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;AAC3D,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AACxC,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;AACrD,MAAM,kBAAkB,GAAG,mLAAmL,CAAC;AAC/M,MAAM,iBAAiB,GAAG,8CAA8C,CAAC;AACzE,MAAM,mBAAmB,GAAG,sCAAsC,CAAC;AACnE,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAChD,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAChD,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AACvD,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AACnD,MAAM,mBAAmB,GAAG,IAAI,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AACnE,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;AAEjG,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;WACrB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;WACtB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;WACpB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;WAC5B,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;WACnB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;WACzB,0BAA0B,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,0BAA0B,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAC3D,OAAO,KAAK;SACT,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SACjC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SACjC,OAAO,CAAC,aAAa,EAAE,mBAAmB,CAAC;SAC3C,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC;SAClC,OAAO,CAAC,mBAAmB,EAAE,YAAY,CAAC;SAC1C,OAAO,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa;IAC/C,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,QAAQ,GAAG,SAAS;IACnE,OAAO,CAAC,KAAK,CAAC,CAAC;IACf,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACjF,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,cAAc,CAAC,KAAgC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B;IACrD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,MAA+B;IACjD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACxD,OAAO,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,SAA6B;IAC9D,IAAI,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,GAAG,KAAK,OAAO,IAAI,SAAS,KAAK,SAAS,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,yBAAyB,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAAC;QACpI,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAClD,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC"}