@dontcode2/backend 0.2.0 → 0.2.2

package/dist/chunk-6DFTM26Y.js

@@ -0,0 +1,448 @@
+import {
+  DontCodeError,
+  Transport,
+  dontcode,
+  isDontCodeError
+} from "./chunk-LBN4R3GH.js";
+
+// src/credentials.ts
+import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { dirname, join } from "path";
+function configDir() {
+  return process.env.DONTCODE_CONFIG_DIR || join(homedir(), ".dontcode");
+}
+function credentialsPath() {
+  return join(configDir(), "credentials.json");
+}
+function readStore() {
+  try {
+    return JSON.parse(readFileSync(credentialsPath(), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function writeStore(store) {
+  const path = credentialsPath();
+  mkdirSync(dirname(path), { recursive: true, mode: 448 });
+  writeFileSync(path, JSON.stringify(store, null, 2), { mode: 384 });
+}
+function loadCredential(baseUrl2) {
+  return readStore()[baseUrl2] ?? null;
+}
+function saveCredential(cred) {
+  const store = readStore();
+  store[cred.base_url] = cred;
+  writeStore(store);
+}
+function clearCredential(baseUrl2) {
+  const store = readStore();
+  delete store[baseUrl2];
+  writeStore(store);
+}
+function isExpired(cred, skewMs = 3e4) {
+  return new Date(cred.expires_at).getTime() - skewMs <= Date.now();
+}
+function resolveActiveToken(baseUrl2) {
+  const env = process.env.DONTCODE_API_KEY;
+  if (env) return { token: env, source: "env" };
+  const cred = loadCredential(baseUrl2);
+  if (cred && !isExpired(cred)) {
+    return {
+      token: cred.access_token,
+      source: "device",
+      projectId: cred.project_id,
+      expiresAt: cred.expires_at
+    };
+  }
+  return { source: "none" };
+}
+
+// src/auth-device.ts
+var START_PATH = "/api/v1/auth/device/start";
+var TOKEN_PATH = "/api/v1/auth/device/token";
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function startDeviceAuth(baseUrl2, clientName) {
+  const transport = new Transport({ baseUrl: baseUrl2 });
+  return transport.json(START_PATH, { client_name: clientName });
+}
+async function pollDeviceToken(baseUrl2, start, opts = {}) {
+  const transport = new Transport({ baseUrl: baseUrl2 });
+  let intervalMs = Math.max(1, start.interval) * 1e3;
+  const expiry = Date.now() + start.expires_in * 1e3;
+  const deadline = opts.maxWaitMs && opts.maxWaitMs > 0 ? Math.min(expiry, Date.now() + opts.maxWaitMs) : expiry;
+  while (Date.now() < deadline) {
+    await sleep(intervalMs);
+    try {
+      return await transport.json(TOKEN_PATH, {
+        device_code: start.device_code
+      });
+    } catch (err) {
+      if (err instanceof DontCodeError) {
+        const message = err.body?.error ?? err.message;
+        if (err.status === 428 || message.includes("authorization_pending")) {
+          opts.onPending?.();
+          continue;
+        }
+        if (message.includes("slow_down")) {
+          intervalMs += 2e3;
+          continue;
+        }
+      }
+      throw err;
+    }
+  }
+  const stillOpen = Date.now() < expiry;
+  throw new DontCodeError(408, {
+    error: stillOpen ? "Still waiting for browser approval." : "Device login timed out before approval. Start again.",
+    code: stillOpen ? "WaitTimeout" : "Timeout"
+  });
+}
+async function openBrowser(url) {
+  try {
+    const { spawn } = await import("child_process");
+    const platform = process.platform;
+    const command = platform === "darwin" ? "open" : platform === "win32" ? "cmd" : "xdg-open";
+    const args = platform === "win32" ? ["/c", "start", "", url] : [url];
+    spawn(command, args, { stdio: "ignore", detached: true }).unref();
+  } catch {
+  }
+}
+async function login(options) {
+  const log = options.log ?? (() => {
+  });
+  const start = await startDeviceAuth(options.baseUrl, options.clientName);
+  log(
+    `
+Open this URL to connect:
+  ${start.verification_uri_complete}
+
+Confirm this code matches:
+  ${start.user_code}
+
+Waiting for approval...
+`
+  );
+  if (options.open !== false) await openBrowser(start.verification_uri_complete);
+  const token = await pollDeviceToken(options.baseUrl, start);
+  const cred = {
+    access_token: token.access_token,
+    project_id: token.project_id,
+    expires_at: new Date(Date.now() + token.expires_in * 1e3).toISOString(),
+    base_url: options.baseUrl
+  };
+  saveCredential(cred);
+  return cred;
+}
+
+// src/mcp/server.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+var SERVER_NAME = "dontcode-backend";
+var SERVER_VERSION = "0.3.0";
+function baseUrl() {
+  return (process.env.DONTCODE_API_URL || "https://backend.dontcode.co").replace(/\/+$/, "");
+}
+var pendingFlow = null;
+function text(value) {
+  const body = typeof value === "string" ? value : JSON.stringify(value, null, 2);
+  return { content: [{ type: "text", text: body }] };
+}
+function failure(message) {
+  return { content: [{ type: "text", text: message }], isError: true };
+}
+function describeError(err) {
+  if (isDontCodeError(err)) {
+    if (err.status === 401) {
+      return "Not signed in or the session expired. Use the `auth_login` tool, approve in the browser, then `auth_wait`.";
+    }
+    if (err.status === 403) {
+      return `Your project role does not allow that. (${err.message})`;
+    }
+    if (err.rateLimited) {
+      return `Rate limited. ${err.message}`;
+    }
+    return err.message;
+  }
+  return err instanceof Error ? err.message : "Unknown error";
+}
+function requireClient() {
+  const active = resolveActiveToken(baseUrl());
+  if (!active.token) {
+    throw new Error(
+      "Not signed in. Use the `auth_login` tool first (or set DONTCODE_API_KEY for non-interactive use)."
+    );
+  }
+  return dontcode({ apiKey: active.token, baseUrl: baseUrl() });
+}
+async function run(fn) {
+  try {
+    return text(await fn());
+  } catch (err) {
+    return failure(describeError(err));
+  }
+}
+function createMcpServer() {
+  const server = new McpServer({ name: SERVER_NAME, version: SERVER_VERSION });
+  const tool = (name, config, handler) => server.registerTool(name, config, handler);
+  tool(
+    "auth_login",
+    {
+      title: "Sign in to DontCode",
+      description: "Start a browser sign-in. Returns a URL and a short code; tell the user to open the URL, confirm the code matches, pick a project, and approve. Then call `auth_wait`. Not needed if DONTCODE_API_KEY is set.",
+      inputSchema: {
+        client_name: z.string().optional().describe('Label shown to the user on the approval screen, e.g. "Claude Code".')
+      },
+      annotations: { readOnlyHint: false, openWorldHint: true }
+    },
+    async ({ client_name }) => run(async () => {
+      const start = await startDeviceAuth(baseUrl(), client_name ?? "Claude Code (MCP)");
+      pendingFlow = start;
+      await openBrowser(start.verification_uri_complete);
+      return {
+        message: "Ask the user to open this URL, confirm the code, choose a project, and approve. Then call auth_wait.",
+        verification_uri: start.verification_uri_complete,
+        user_code: start.user_code,
+        expires_in_seconds: start.expires_in
+      };
+    })
+  );
+  tool(
+    "auth_wait",
+    {
+      title: "Wait for sign-in approval",
+      description: "Poll for the result of `auth_login`. Returns connected once the user approves in the browser, or asks you to call it again if still pending. Safe to call repeatedly.",
+      inputSchema: {},
+      annotations: { readOnlyHint: false, openWorldHint: true }
+    },
+    async () => run(async () => {
+      if (!pendingFlow) {
+        return { status: "no_login_in_progress", hint: "Call auth_login first." };
+      }
+      try {
+        const token = await pollDeviceToken(baseUrl(), pendingFlow, {
+          maxWaitMs: 5e4
+        });
+        saveCredential({
+          access_token: token.access_token,
+          project_id: token.project_id,
+          expires_at: new Date(Date.now() + token.expires_in * 1e3).toISOString(),
+          base_url: baseUrl()
+        });
+        pendingFlow = null;
+        return { status: "connected", project_id: token.project_id };
+      } catch (err) {
+        if (isDontCodeError(err) && err.code === "WaitTimeout") {
+          return {
+            status: "pending",
+            hint: "Still waiting for approval. Ask the user to approve, then call auth_wait again."
+          };
+        }
+        pendingFlow = null;
+        throw err;
+      }
+    })
+  );
+  tool(
+    "auth_status",
+    {
+      title: "Check the current session",
+      description: "Validate the current credential and report the project, your role, and what you are allowed to do.",
+      inputSchema: {},
+      annotations: { readOnlyHint: true, openWorldHint: true }
+    },
+    async () => run(async () => {
+      const active = resolveActiveToken(baseUrl());
+      if (!active.token) {
+        return { signed_in: false, hint: "Use auth_login to sign in." };
+      }
+      const client = dontcode({ apiKey: active.token, baseUrl: baseUrl() });
+      const info = await client.auth.info();
+      return { signed_in: true, source: active.source, ...info };
+    })
+  );
+  tool(
+    "auth_logout",
+    {
+      title: "Forget the cached session",
+      description: "Remove the locally cached device token for this gateway.",
+      inputSchema: {},
+      annotations: { readOnlyHint: false, destructiveHint: true }
+    },
+    async () => run(async () => {
+      clearCredential(baseUrl());
+      pendingFlow = null;
+      return { ok: true };
+    })
+  );
+  tool(
+    "db_query",
+    {
+      title: "Query the database",
+      description: "Read rows from a table with a structured query (no raw SQL). Supports where/select/orderBy/limit/offset and count.",
+      inputSchema: {
+        table: z.string(),
+        operation: z.enum(["find", "findMany", "findFirst", "findOne", "count"]).default("find"),
+        where: z.record(z.string(), z.any()).optional(),
+        select: z.array(z.string()).optional(),
+        orderBy: z.record(z.string(), z.enum(["asc", "desc"])).optional(),
+        limit: z.number().int().positive().max(1e3).optional(),
+        offset: z.number().int().nonnegative().optional()
+      },
+      annotations: { readOnlyHint: true, openWorldHint: true }
+    },
+    async ({ table, operation, where, select, orderBy, limit, offset }) => run(async () => {
+      const t = requireClient().db(table);
+      if (operation === "count") return { count: await t.count({ where }) };
+      const options = { where, select, orderBy, limit, offset };
+      if (operation === "findFirst" || operation === "findOne") {
+        return { row: await t.findFirst(options) };
+      }
+      return { rows: await t.find(options) };
+    })
+  );
+  tool(
+    "db_insert",
+    {
+      title: "Insert a row",
+      description: "Insert one row into a table. Returns the new row id.",
+      inputSchema: { table: z.string(), data: z.record(z.string(), z.any()) },
+      annotations: { readOnlyHint: false, openWorldHint: true }
+    },
+    async ({ table, data }) => run(async () => requireClient().db(table).insert(data))
+  );
+  tool(
+    "db_update",
+    {
+      title: "Update rows",
+      description: "Update rows matching a where clause. Returns the number of rows changed.",
+      inputSchema: {
+        table: z.string(),
+        where: z.record(z.string(), z.any()),
+        data: z.record(z.string(), z.any())
+      },
+      annotations: { readOnlyHint: false, openWorldHint: true }
+    },
+    async ({ table, where, data }) => run(async () => requireClient().db(table).update({ where, data }))
+  );
+  tool(
+    "db_delete",
+    {
+      title: "Delete rows",
+      description: "Delete rows matching a where clause. Destructive: confirm with the user before calling. Returns the number of rows deleted.",
+      inputSchema: { table: z.string(), where: z.record(z.string(), z.any()) },
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    async ({ table, where }) => run(async () => requireClient().db(table).delete({ where }))
+  );
+  tool(
+    "db_migrate",
+    {
+      title: "Run a schema migration",
+      description: "Apply DDL (CREATE/ALTER/DROP TABLE, indexes, etc.) to the project database. Destructive and schema-shaping: confirm with the user, and note it needs an admin/owner role on device-token sessions.",
+      inputSchema: { sql: z.string() },
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    async ({ sql }) => run(async () => requireClient().db.migrate({ sql }))
+  );
+  const bucketArg = z.enum(["public", "private"]).default("private");
+  const bucketOf = (client, bucket) => bucket === "public" ? client.storage.public : client.storage.private;
+  tool(
+    "storage_list",
+    {
+      title: "List files",
+      description: "List objects in a storage bucket, optionally under a prefix.",
+      inputSchema: { bucket: bucketArg, prefix: z.string().optional() },
+      annotations: { readOnlyHint: true, openWorldHint: true }
+    },
+    async ({ bucket, prefix }) => run(async () => bucketOf(requireClient(), bucket).list(prefix))
+  );
+  tool(
+    "storage_get_url",
+    {
+      title: "Get a public URL",
+      description: "Get the permanent public URL for an object in the public bucket.",
+      inputSchema: { path: z.string() },
+      annotations: { readOnlyHint: true, openWorldHint: true }
+    },
+    async ({ path }) => run(async () => requireClient().storage.public.getUrl(path))
+  );
+  tool(
+    "storage_temporary_url",
+    {
+      title: "Get a temporary URL",
+      description: "Get a short-lived signed URL for an object (default 300s, max 7 days).",
+      inputSchema: {
+        bucket: bucketArg,
+        path: z.string(),
+        expires_in: z.number().int().positive().optional()
+      },
+      annotations: { readOnlyHint: true, openWorldHint: true }
+    },
+    async ({ bucket, path, expires_in }) => run(async () => bucketOf(requireClient(), bucket).getTemporaryUrl(path, expires_in))
+  );
+  tool(
+    "storage_upload",
+    {
+      title: "Upload a text file",
+      description: "Upload UTF-8 text content to a path. For binary or large files, use storage_temporary_url + a direct PUT instead.",
+      inputSchema: {
+        bucket: bucketArg,
+        path: z.string(),
+        content: z.string(),
+        content_type: z.string().optional()
+      },
+      annotations: { readOnlyHint: false, openWorldHint: true }
+    },
+    async ({ bucket, path, content, content_type }) => run(
+      async () => bucketOf(requireClient(), bucket).upload(
+        path,
+        content,
+        content_type ?? "text/plain"
+      )
+    )
+  );
+  tool(
+    "storage_remove",
+    {
+      title: "Delete files",
+      description: "Delete one or more objects. Destructive: confirm with the user.",
+      inputSchema: { bucket: bucketArg, paths: z.array(z.string()).min(1) },
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    async ({ bucket, paths }) => run(async () => bucketOf(requireClient(), bucket).remove(paths))
+  );
+  tool(
+    "storage_move",
+    {
+      title: "Move or rename a file",
+      description: "Move/rename an object within a bucket.",
+      inputSchema: { bucket: bucketArg, from: z.string(), to: z.string() },
+      annotations: { readOnlyHint: false, openWorldHint: true }
+    },
+    async ({ bucket, from, to }) => run(async () => bucketOf(requireClient(), bucket).move(from, to))
+  );
+  return server;
+}
+async function startMcpServer() {
+  const server = createMcpServer();
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  console.error(`[${SERVER_NAME}] MCP server ready on stdio (gateway: ${baseUrl()})`);
+}
+
+export {
+  loadCredential,
+  saveCredential,
+  clearCredential,
+  isExpired,
+  resolveActiveToken,
+  startDeviceAuth,
+  pollDeviceToken,
+  openBrowser,
+  login,
+  createMcpServer,
+  startMcpServer
+};
+//# sourceMappingURL=chunk-6DFTM26Y.js.map

package/dist/chunk-6DFTM26Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/credentials.ts","../src/auth-device.ts","../src/mcp/server.ts"],"sourcesContent":["import { mkdirSync, readFileSync, writeFileSync } from 'node:fs'\nimport { homedir } from 'node:os'\nimport { dirname, join } from 'node:path'\n\n/**\n * Local credential cache for the CLI / MCP server (Node only — never import\n * from the browser entry).\n *\n * The browser device-authorization flow hands back a short-lived,\n * project-scoped, user-bound `dct_` token. We cache it on disk so the MCP\n * server can reuse it across tool calls and restarts until it expires, then\n * the user signs in again. The file is written 0600 and lives under\n * `~/.dontcode` (override with `DONTCODE_CONFIG_DIR`).\n */\n\nexport interface StoredCredential {\n    /** The `dct_` device token. Sent to the gateway as `Authorization: Bearer`. */\n    access_token: string\n    project_id: string\n    /** ISO timestamp. */\n    expires_at: string\n    /** Gateway origin this credential is valid for. */\n    base_url: string\n}\n\n/** Credentials keyed by gateway origin, so one machine can hold several. */\ntype Store = Record<string, StoredCredential>\n\nfunction configDir(): string {\n    return process.env.DONTCODE_CONFIG_DIR || join(homedir(), '.dontcode')\n}\n\nfunction credentialsPath(): string {\n    return join(configDir(), 'credentials.json')\n}\n\nfunction readStore(): Store {\n    try {\n        return JSON.parse(readFileSync(credentialsPath(), 'utf8')) as Store\n    } catch {\n        return {}\n    }\n}\n\nfunction writeStore(store: Store): void {\n    const path = credentialsPath()\n    mkdirSync(dirname(path), { recursive: true, mode: 0o700 })\n    writeFileSync(path, JSON.stringify(store, null, 2), { mode: 0o600 })\n}\n\nexport function loadCredential(baseUrl: string): StoredCredential | null {\n    return readStore()[baseUrl] ?? null\n}\n\nexport function saveCredential(cred: StoredCredential): void {\n    const store = readStore()\n    store[cred.base_url] = cred\n    writeStore(store)\n}\n\nexport function clearCredential(baseUrl: string): void {\n    const store = readStore()\n    delete store[baseUrl]\n    writeStore(store)\n}\n\n/** A small skew so we don't hand back a token that expires mid-request. */\nexport function isExpired(cred: StoredCredential, skewMs = 30_000): boolean {\n    return new Date(cred.expires_at).getTime() - skewMs <= Date.now()\n}\n\nexport interface ActiveToken {\n    token?: string\n    source: 'env' | 'device' | 'none'\n    projectId?: string\n    expiresAt?: string\n}\n\n/**\n * The credential the MCP server should use right now. An explicit\n * `DONTCODE_API_KEY` (e.g. CI) always wins; otherwise a cached, unexpired\n * device token; otherwise nothing (the user needs to run `login`).\n */\nexport function resolveActiveToken(baseUrl: string): ActiveToken {\n    const env = process.env.DONTCODE_API_KEY\n    if (env) return { token: env, source: 'env' }\n\n    const cred = loadCredential(baseUrl)\n    if (cred && !isExpired(cred)) {\n        return {\n            token: cred.access_token,\n            source: 'device',\n            projectId: cred.project_id,\n            expiresAt: cred.expires_at,\n        }\n    }\n    return { source: 'none' }\n}\n","import { saveCredential, type StoredCredential } from './credentials'\nimport { DontCodeError } from './errors'\nimport { Transport } from './http'\n\n/**\n * Client side of the browser device-authorization flow.\n *\n * The tool starts a flow, shows the user a short code and a URL, the user\n * approves in the browser while signed in, and the tool polls until it\n * receives a short-lived `dct_` access token. No long-lived secret ever\n * touches the terminal until the human has explicitly approved.\n */\n\nconst START_PATH = '/api/v1/auth/device/start'\nconst TOKEN_PATH = '/api/v1/auth/device/token'\n\nexport interface DeviceStartResponse {\n    device_code: string\n    user_code: string\n    verification_uri: string\n    verification_uri_complete: string\n    interval: number\n    expires_in: number\n}\n\nexport interface DeviceTokenResponse {\n    access_token: string\n    token_type: string\n    expires_in: number\n    project_id: string\n}\n\nconst sleep = (ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms))\n\nexport async function startDeviceAuth(\n    baseUrl: string,\n    clientName?: string\n): Promise<DeviceStartResponse> {\n    // No credential yet — this is the bootstrap step.\n    const transport = new Transport({ baseUrl })\n    return transport.json<DeviceStartResponse>(START_PATH, { client_name: clientName })\n}\n\nexport interface PollOptions {\n    onPending?: () => void\n    /** Stop polling after this many ms (throws code `WaitTimeout`), so a caller\n     *  like an MCP tool can poll in bounded slices instead of blocking for the\n     *  full 10-minute window. Defaults to the request's own expiry. */\n    maxWaitMs?: number\n}\n\n/**\n * Poll until the request is approved (token), denied/expired (throws), or the\n * wait budget closes (throws 408). Honors the server's interval and `slow_down`.\n */\nexport async function pollDeviceToken(\n    baseUrl: string,\n    start: DeviceStartResponse,\n    opts: PollOptions = {}\n): Promise<DeviceTokenResponse> {\n    const transport = new Transport({ baseUrl })\n    let intervalMs = Math.max(1, start.interval) * 1000\n    const expiry = Date.now() + start.expires_in * 1000\n    const deadline =\n        opts.maxWaitMs && opts.maxWaitMs > 0\n            ? Math.min(expiry, Date.now() + opts.maxWaitMs)\n            : expiry\n\n    while (Date.now() < deadline) {\n        await sleep(intervalMs)\n        try {\n            return await transport.json<DeviceTokenResponse>(TOKEN_PATH, {\n                device_code: start.device_code,\n            })\n        } catch (err) {\n            if (err instanceof DontCodeError) {\n                const message = err.body?.error ?? err.message\n                if (err.status === 428 || message.includes('authorization_pending')) {\n                    opts.onPending?.()\n                    continue\n                }\n                if (message.includes('slow_down')) {\n                    intervalMs += 2_000\n                    continue\n                }\n            }\n            throw err\n        }\n    }\n    // Distinguish \"your slice ended, keep waiting\" from \"the whole window closed\".\n    const stillOpen = Date.now() < expiry\n    throw new DontCodeError(408, {\n        error: stillOpen\n            ? 'Still waiting for browser approval.'\n            : 'Device login timed out before approval. Start again.',\n        code: stillOpen ? 'WaitTimeout' : 'Timeout',\n    })\n}\n\n/** Best-effort: open the verification URL in the user's browser. */\nexport async function openBrowser(url: string): Promise<void> {\n    try {\n        const { spawn } = await import('node:child_process')\n        const platform = process.platform\n        const command = platform === 'darwin' ? 'open' : platform === 'win32' ? 'cmd' : 'xdg-open'\n        const args = platform === 'win32' ? ['/c', 'start', '', url] : [url]\n        spawn(command, args, { stdio: 'ignore', detached: true }).unref()\n    } catch {\n        // Opening the browser is a convenience; the URL is also printed.\n    }\n}\n\nexport interface LoginOptions {\n    baseUrl: string\n    clientName?: string\n    /** Open the browser automatically. Default true. */\n    open?: boolean\n    /** Where human-facing prompts go. Default: no-op. */\n    log?: (message: string) => void\n}\n\n/**\n * Run the full device flow and cache the resulting credential. Returns the\n * stored credential (token, project, expiry).\n */\nexport async function login(options: LoginOptions): Promise<StoredCredential> {\n    const log = options.log ?? (() => {})\n\n    const start = await startDeviceAuth(options.baseUrl, options.clientName)\n    log(\n        `\\nOpen this URL to connect:\\n  ${start.verification_uri_complete}\\n\\n` +\n            `Confirm this code matches:\\n  ${start.user_code}\\n\\nWaiting for approval...\\n`\n    )\n    if (options.open !== false) await openBrowser(start.verification_uri_complete)\n\n    const token = await pollDeviceToken(options.baseUrl, start)\n    const cred: StoredCredential = {\n        access_token: token.access_token,\n        project_id: token.project_id,\n        expires_at: new Date(Date.now() + token.expires_in * 1000).toISOString(),\n        base_url: options.baseUrl,\n    }\n    saveCredential(cred)\n    return cred\n}\n","import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'\nimport { z } from 'zod'\nimport {\n    login as runLogin,\n    openBrowser,\n    pollDeviceToken,\n    startDeviceAuth,\n    type DeviceStartResponse,\n} from '../auth-device'\nimport { dontcode, type DontCodeClient } from '../client'\nimport {\n    clearCredential,\n    resolveActiveToken,\n    saveCredential,\n} from '../credentials'\nimport { isDontCodeError } from '../errors'\n\n/**\n * DontCode Backend MCP server (stdio).\n *\n * Exposes the v1 gateway to an AI agent (Claude Code and others) as tools:\n * sign in by browser, query and mutate the project database, run migrations,\n * manage storage, and check the current session. Every tool is a thin call\n * onto the public SDK, so the agent can only do what the gateway allows — and,\n * for device-token sessions, only what the signed-in user's project role\n * allows.\n *\n * IMPORTANT: stdout is the MCP transport. All human-facing logging goes to\n * stderr (console.error), never console.log.\n */\n\nconst SERVER_NAME = 'dontcode-backend'\nconst SERVER_VERSION = '0.3.0'\n\nfunction baseUrl(): string {\n    return (process.env.DONTCODE_API_URL || 'https://backend.dontcode.co').replace(/\\/+$/, '')\n}\n\n/** A login flow waiting to be polled by `auth_wait`, kept off the wire. */\nlet pendingFlow: DeviceStartResponse | null = null\n\nfunction text(value: unknown) {\n    const body = typeof value === 'string' ? value : JSON.stringify(value, null, 2)\n    return { content: [{ type: 'text' as const, text: body }] }\n}\n\nfunction failure(message: string) {\n    return { content: [{ type: 'text' as const, text: message }], isError: true }\n}\n\n/** Turn SDK errors into agent-friendly guidance without leaking internals. */\nfunction describeError(err: unknown): string {\n    if (isDontCodeError(err)) {\n        if (err.status === 401) {\n            return 'Not signed in or the session expired. Use the `auth_login` tool, approve in the browser, then `auth_wait`.'\n        }\n        if (err.status === 403) {\n            return `Your project role does not allow that. (${err.message})`\n        }\n        if (err.rateLimited) {\n            return `Rate limited. ${err.message}`\n        }\n        return err.message\n    }\n    return err instanceof Error ? err.message : 'Unknown error'\n}\n\nfunction requireClient(): DontCodeClient {\n    const active = resolveActiveToken(baseUrl())\n    if (!active.token) {\n        throw new Error(\n            'Not signed in. Use the `auth_login` tool first (or set DONTCODE_API_KEY for non-interactive use).'\n        )\n    }\n    return dontcode({ apiKey: active.token, baseUrl: baseUrl() })\n}\n\n/** Run a tool body, mapping thrown errors to an MCP error result. */\nasync function run(fn: () => Promise<unknown>) {\n    try {\n        return text(await fn())\n    } catch (err) {\n        return failure(describeError(err))\n    }\n}\n\nexport function createMcpServer(): McpServer {\n    const server = new McpServer({ name: SERVER_NAME, version: SERVER_VERSION })\n\n    // The MCP SDK infers each tool's argument type from its `inputSchema`\n    // through deep conditional types. Across this many tools that inference\n    // exhausts tsc's heap during declaration emit (TS2589). The gateway\n    // re-validates every call, so these handlers never rely on the inferred\n    // types — register through a thin wrapper that keeps inference shallow.\n    const tool = (\n        name: string,\n        config: {\n            title: string\n            description: string\n            inputSchema?: z.ZodRawShape\n            annotations?: Record<string, boolean>\n        },\n        handler: (args: Record<string, any>) => Promise<unknown>\n    ) => server.registerTool(name, config as never, handler as never)\n\n    // --- Authentication ----------------------------------------------------\n\n    tool(\n        'auth_login',\n        {\n            title: 'Sign in to DontCode',\n            description:\n                'Start a browser sign-in. Returns a URL and a short code; tell the user to open the URL, confirm the code matches, pick a project, and approve. Then call `auth_wait`. Not needed if DONTCODE_API_KEY is set.',\n            inputSchema: {\n                client_name: z\n                    .string()\n                    .optional()\n                    .describe('Label shown to the user on the approval screen, e.g. \"Claude Code\".'),\n            },\n            annotations: { readOnlyHint: false, openWorldHint: true },\n        },\n        async ({ client_name }) =>\n            run(async () => {\n                const start = await startDeviceAuth(baseUrl(), client_name ?? 'Claude Code (MCP)')\n                pendingFlow = start\n                await openBrowser(start.verification_uri_complete)\n                return {\n                    message:\n                        'Ask the user to open this URL, confirm the code, choose a project, and approve. Then call auth_wait.',\n                    verification_uri: start.verification_uri_complete,\n                    user_code: start.user_code,\n                    expires_in_seconds: start.expires_in,\n                }\n            })\n    )\n\n    tool(\n        'auth_wait',\n        {\n            title: 'Wait for sign-in approval',\n            description:\n                'Poll for the result of `auth_login`. Returns connected once the user approves in the browser, or asks you to call it again if still pending. Safe to call repeatedly.',\n            inputSchema: {},\n            annotations: { readOnlyHint: false, openWorldHint: true },\n        },\n        async () =>\n            run(async () => {\n                if (!pendingFlow) {\n                    return { status: 'no_login_in_progress', hint: 'Call auth_login first.' }\n                }\n                try {\n                    const token = await pollDeviceToken(baseUrl(), pendingFlow, {\n                        maxWaitMs: 50_000,\n                    })\n                    saveCredential({\n                        access_token: token.access_token,\n                        project_id: token.project_id,\n                        expires_at: new Date(Date.now() + token.expires_in * 1000).toISOString(),\n                        base_url: baseUrl(),\n                    })\n                    pendingFlow = null\n                    return { status: 'connected', project_id: token.project_id }\n                } catch (err) {\n                    if (isDontCodeError(err) && err.code === 'WaitTimeout') {\n                        return {\n                            status: 'pending',\n                            hint: 'Still waiting for approval. Ask the user to approve, then call auth_wait again.',\n                        }\n                    }\n                    pendingFlow = null\n                    throw err\n                }\n            })\n    )\n\n    tool(\n        'auth_status',\n        {\n            title: 'Check the current session',\n            description:\n                'Validate the current credential and report the project, your role, and what you are allowed to do.',\n            inputSchema: {},\n            annotations: { readOnlyHint: true, openWorldHint: true },\n        },\n        async () =>\n            run(async () => {\n                const active = resolveActiveToken(baseUrl())\n                if (!active.token) {\n                    return { signed_in: false, hint: 'Use auth_login to sign in.' }\n                }\n                const client = dontcode({ apiKey: active.token, baseUrl: baseUrl() })\n                // /api/v1/info is a thin GET; reuse the transport via a raw call.\n                const info = await client.auth.info()\n                return { signed_in: true, source: active.source, ...info }\n            })\n    )\n\n    tool(\n        'auth_logout',\n        {\n            title: 'Forget the cached session',\n            description: 'Remove the locally cached device token for this gateway.',\n            inputSchema: {},\n            annotations: { readOnlyHint: false, destructiveHint: true },\n        },\n        async () =>\n            run(async () => {\n                clearCredential(baseUrl())\n                pendingFlow = null\n                return { ok: true }\n            })\n    )\n\n    // --- Database ----------------------------------------------------------\n\n    tool(\n        'db_query',\n        {\n            title: 'Query the database',\n            description:\n                'Read rows from a table with a structured query (no raw SQL). Supports where/select/orderBy/limit/offset and count.',\n            inputSchema: {\n                table: z.string(),\n                operation: z\n                    .enum(['find', 'findMany', 'findFirst', 'findOne', 'count'])\n                    .default('find'),\n                where: z.record(z.string(), z.any()).optional(),\n                select: z.array(z.string()).optional(),\n                orderBy: z.record(z.string(), z.enum(['asc', 'desc'])).optional(),\n                limit: z.number().int().positive().max(1000).optional(),\n                offset: z.number().int().nonnegative().optional(),\n            },\n            annotations: { readOnlyHint: true, openWorldHint: true },\n        },\n        async ({ table, operation, where, select, orderBy, limit, offset }) =>\n            run(async () => {\n                const t = requireClient().db(table)\n                if (operation === 'count') return { count: await t.count({ where }) }\n                const options = { where, select, orderBy, limit, offset }\n                if (operation === 'findFirst' || operation === 'findOne') {\n                    return { row: await t.findFirst(options) }\n                }\n                return { rows: await t.find(options) }\n            })\n    )\n\n    tool(\n        'db_insert',\n        {\n            title: 'Insert a row',\n            description: 'Insert one row into a table. Returns the new row id.',\n            inputSchema: { table: z.string(), data: z.record(z.string(), z.any()) },\n            annotations: { readOnlyHint: false, openWorldHint: true },\n        },\n        async ({ table, data }) => run(async () => requireClient().db(table).insert(data))\n    )\n\n    tool(\n        'db_update',\n        {\n            title: 'Update rows',\n            description: 'Update rows matching a where clause. Returns the number of rows changed.',\n            inputSchema: {\n                table: z.string(),\n                where: z.record(z.string(), z.any()),\n                data: z.record(z.string(), z.any()),\n            },\n            annotations: { readOnlyHint: false, openWorldHint: true },\n        },\n        async ({ table, where, data }) =>\n            run(async () => requireClient().db(table).update({ where, data }))\n    )\n\n    tool(\n        'db_delete',\n        {\n            title: 'Delete rows',\n            description:\n                'Delete rows matching a where clause. Destructive: confirm with the user before calling. Returns the number of rows deleted.',\n            inputSchema: { table: z.string(), where: z.record(z.string(), z.any()) },\n            annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },\n        },\n        async ({ table, where }) => run(async () => requireClient().db(table).delete({ where }))\n    )\n\n    tool(\n        'db_migrate',\n        {\n            title: 'Run a schema migration',\n            description:\n                'Apply DDL (CREATE/ALTER/DROP TABLE, indexes, etc.) to the project database. Destructive and schema-shaping: confirm with the user, and note it needs an admin/owner role on device-token sessions.',\n            inputSchema: { sql: z.string() },\n            annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },\n        },\n        async ({ sql }) => run(async () => requireClient().db.migrate({ sql }))\n    )\n\n    // --- Storage -----------------------------------------------------------\n\n    const bucketArg = z.enum(['public', 'private']).default('private')\n    const bucketOf = (client: DontCodeClient, bucket: 'public' | 'private') =>\n        bucket === 'public' ? client.storage.public : client.storage.private\n\n    tool(\n        'storage_list',\n        {\n            title: 'List files',\n            description: 'List objects in a storage bucket, optionally under a prefix.',\n            inputSchema: { bucket: bucketArg, prefix: z.string().optional() },\n            annotations: { readOnlyHint: true, openWorldHint: true },\n        },\n        async ({ bucket, prefix }) =>\n            run(async () => bucketOf(requireClient(), bucket).list(prefix))\n    )\n\n    tool(\n        'storage_get_url',\n        {\n            title: 'Get a public URL',\n            description: 'Get the permanent public URL for an object in the public bucket.',\n            inputSchema: { path: z.string() },\n            annotations: { readOnlyHint: true, openWorldHint: true },\n        },\n        async ({ path }) => run(async () => requireClient().storage.public.getUrl(path))\n    )\n\n    tool(\n        'storage_temporary_url',\n        {\n            title: 'Get a temporary URL',\n            description: 'Get a short-lived signed URL for an object (default 300s, max 7 days).',\n            inputSchema: {\n                bucket: bucketArg,\n                path: z.string(),\n                expires_in: z.number().int().positive().optional(),\n            },\n            annotations: { readOnlyHint: true, openWorldHint: true },\n        },\n        async ({ bucket, path, expires_in }) =>\n            run(async () => bucketOf(requireClient(), bucket).getTemporaryUrl(path, expires_in))\n    )\n\n    tool(\n        'storage_upload',\n        {\n            title: 'Upload a text file',\n            description:\n                'Upload UTF-8 text content to a path. For binary or large files, use storage_temporary_url + a direct PUT instead.',\n            inputSchema: {\n                bucket: bucketArg,\n                path: z.string(),\n                content: z.string(),\n                content_type: z.string().optional(),\n            },\n            annotations: { readOnlyHint: false, openWorldHint: true },\n        },\n        async ({ bucket, path, content, content_type }) =>\n            run(async () =>\n                bucketOf(requireClient(), bucket).upload(\n                    path,\n                    content,\n                    content_type ?? 'text/plain'\n                )\n            )\n    )\n\n    tool(\n        'storage_remove',\n        {\n            title: 'Delete files',\n            description: 'Delete one or more objects. Destructive: confirm with the user.',\n            inputSchema: { bucket: bucketArg, paths: z.array(z.string()).min(1) },\n            annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },\n        },\n        async ({ bucket, paths }) => run(async () => bucketOf(requireClient(), bucket).remove(paths))\n    )\n\n    tool(\n        'storage_move',\n        {\n            title: 'Move or rename a file',\n            description: 'Move/rename an object within a bucket.',\n            inputSchema: { bucket: bucketArg, from: z.string(), to: z.string() },\n            annotations: { readOnlyHint: false, openWorldHint: true },\n        },\n        async ({ bucket, from, to }) =>\n            run(async () => bucketOf(requireClient(), bucket).move(from, to))\n    )\n\n    return server\n}\n\n/** Entry point used by the `dontcode mcp` CLI command. */\nexport async function startMcpServer(): Promise<void> {\n    const server = createMcpServer()\n    const transport = new StdioServerTransport()\n    await server.connect(transport)\n    console.error(`[${SERVER_NAME}] MCP server ready on stdio (gateway: ${baseUrl()})`)\n}\n\n// Re-export so a programmatic caller can drive the device flow too.\nexport { runLogin as login }\n"],"mappings":";;;;;;;;AAAA,SAAS,WAAW,cAAc,qBAAqB;AACvD,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AA0B9B,SAAS,YAAoB;AACzB,SAAO,QAAQ,IAAI,uBAAuB,KAAK,QAAQ,GAAG,WAAW;AACzE;AAEA,SAAS,kBAA0B;AAC/B,SAAO,KAAK,UAAU,GAAG,kBAAkB;AAC/C;AAEA,SAAS,YAAmB;AACxB,MAAI;AACA,WAAO,KAAK,MAAM,aAAa,gBAAgB,GAAG,MAAM,CAAC;AAAA,EAC7D,QAAQ;AACJ,WAAO,CAAC;AAAA,EACZ;AACJ;AAEA,SAAS,WAAW,OAAoB;AACpC,QAAM,OAAO,gBAAgB;AAC7B,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACzD,gBAAc,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AACvE;AAEO,SAAS,eAAeA,UAA0C;AACrE,SAAO,UAAU,EAAEA,QAAO,KAAK;AACnC;AAEO,SAAS,eAAe,MAA8B;AACzD,QAAM,QAAQ,UAAU;AACxB,QAAM,KAAK,QAAQ,IAAI;AACvB,aAAW,KAAK;AACpB;AAEO,SAAS,gBAAgBA,UAAuB;AACnD,QAAM,QAAQ,UAAU;AACxB,SAAO,MAAMA,QAAO;AACpB,aAAW,KAAK;AACpB;AAGO,SAAS,UAAU,MAAwB,SAAS,KAAiB;AACxE,SAAO,IAAI,KAAK,KAAK,UAAU,EAAE,QAAQ,IAAI,UAAU,KAAK,IAAI;AACpE;AAcO,SAAS,mBAAmBA,UAA8B;AAC7D,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,IAAK,QAAO,EAAE,OAAO,KAAK,QAAQ,MAAM;AAE5C,QAAM,OAAO,eAAeA,QAAO;AACnC,MAAI,QAAQ,CAAC,UAAU,IAAI,GAAG;AAC1B,WAAO;AAAA,MACH,OAAO,KAAK;AAAA,MACZ,QAAQ;AAAA,MACR,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,IACpB;AAAA,EACJ;AACA,SAAO,EAAE,QAAQ,OAAO;AAC5B;;;ACpFA,IAAM,aAAa;AACnB,IAAM,aAAa;AAkBnB,IAAM,QAAQ,CAAC,OAAe,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAEpF,eAAsB,gBAClBC,UACA,YAC4B;AAE5B,QAAM,YAAY,IAAI,UAAU,EAAE,SAAAA,SAAQ,CAAC;AAC3C,SAAO,UAAU,KAA0B,YAAY,EAAE,aAAa,WAAW,CAAC;AACtF;AAcA,eAAsB,gBAClBA,UACA,OACA,OAAoB,CAAC,GACO;AAC5B,QAAM,YAAY,IAAI,UAAU,EAAE,SAAAA,SAAQ,CAAC;AAC3C,MAAI,aAAa,KAAK,IAAI,GAAG,MAAM,QAAQ,IAAI;AAC/C,QAAM,SAAS,KAAK,IAAI,IAAI,MAAM,aAAa;AAC/C,QAAM,WACF,KAAK,aAAa,KAAK,YAAY,IAC7B,KAAK,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,SAAS,IAC5C;AAEV,SAAO,KAAK,IAAI,IAAI,UAAU;AAC1B,UAAM,MAAM,UAAU;AACtB,QAAI;AACA,aAAO,MAAM,UAAU,KAA0B,YAAY;AAAA,QACzD,aAAa,MAAM;AAAA,MACvB,CAAC;AAAA,IACL,SAAS,KAAK;AACV,UAAI,eAAe,eAAe;AAC9B,cAAM,UAAU,IAAI,MAAM,SAAS,IAAI;AACvC,YAAI,IAAI,WAAW,OAAO,QAAQ,SAAS,uBAAuB,GAAG;AACjE,eAAK,YAAY;AACjB;AAAA,QACJ;AACA,YAAI,QAAQ,SAAS,WAAW,GAAG;AAC/B,wBAAc;AACd;AAAA,QACJ;AAAA,MACJ;AACA,YAAM;AAAA,IACV;AAAA,EACJ;AAEA,QAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,QAAM,IAAI,cAAc,KAAK;AAAA,IACzB,OAAO,YACD,wCACA;AAAA,IACN,MAAM,YAAY,gBAAgB;AAAA,EACtC,CAAC;AACL;AAGA,eAAsB,YAAY,KAA4B;AAC1D,MAAI;AACA,UAAM,EAAE,MAAM,IAAI,MAAM,OAAO,eAAoB;AACnD,UAAM,WAAW,QAAQ;AACzB,UAAM,UAAU,aAAa,WAAW,SAAS,aAAa,UAAU,QAAQ;AAChF,UAAM,OAAO,aAAa,UAAU,CAAC,MAAM,SAAS,IAAI,GAAG,IAAI,CAAC,GAAG;AACnE,UAAM,SAAS,MAAM,EAAE,OAAO,UAAU,UAAU,KAAK,CAAC,EAAE,MAAM;AAAA,EACpE,QAAQ;AAAA,EAER;AACJ;AAeA,eAAsB,MAAM,SAAkD;AAC1E,QAAM,MAAM,QAAQ,QAAQ,MAAM;AAAA,EAAC;AAEnC,QAAM,QAAQ,MAAM,gBAAgB,QAAQ,SAAS,QAAQ,UAAU;AACvE;AAAA,IACI;AAAA;AAAA,IAAkC,MAAM,yBAAyB;AAAA;AAAA;AAAA,IAC5B,MAAM,SAAS;AAAA;AAAA;AAAA;AAAA,EACxD;AACA,MAAI,QAAQ,SAAS,MAAO,OAAM,YAAY,MAAM,yBAAyB;AAE7E,QAAM,QAAQ,MAAM,gBAAgB,QAAQ,SAAS,KAAK;AAC1D,QAAM,OAAyB;AAAA,IAC3B,cAAc,MAAM;AAAA,IACpB,YAAY,MAAM;AAAA,IAClB,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,aAAa,GAAI,EAAE,YAAY;AAAA,IACvE,UAAU,QAAQ;AAAA,EACtB;AACA,iBAAe,IAAI;AACnB,SAAO;AACX;;;AChJA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,SAAS;AA8BlB,IAAM,cAAc;AACpB,IAAM,iBAAiB;AAEvB,SAAS,UAAkB;AACvB,UAAQ,QAAQ,IAAI,oBAAoB,+BAA+B,QAAQ,QAAQ,EAAE;AAC7F;AAGA,IAAI,cAA0C;AAE9C,SAAS,KAAK,OAAgB;AAC1B,QAAM,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,OAAO,MAAM,CAAC;AAC9E,SAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,CAAC,EAAE;AAC9D;AAEA,SAAS,QAAQ,SAAiB;AAC9B,SAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,QAAQ,CAAC,GAAG,SAAS,KAAK;AAChF;AAGA,SAAS,cAAc,KAAsB;AACzC,MAAI,gBAAgB,GAAG,GAAG;AACtB,QAAI,IAAI,WAAW,KAAK;AACpB,aAAO;AAAA,IACX;AACA,QAAI,IAAI,WAAW,KAAK;AACpB,aAAO,2CAA2C,IAAI,OAAO;AAAA,IACjE;AACA,QAAI,IAAI,aAAa;AACjB,aAAO,iBAAiB,IAAI,OAAO;AAAA,IACvC;AACA,WAAO,IAAI;AAAA,EACf;AACA,SAAO,eAAe,QAAQ,IAAI,UAAU;AAChD;AAEA,SAAS,gBAAgC;AACrC,QAAM,SAAS,mBAAmB,QAAQ,CAAC;AAC3C,MAAI,CAAC,OAAO,OAAO;AACf,UAAM,IAAI;AAAA,MACN;AAAA,IACJ;AAAA,EACJ;AACA,SAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,SAAS,QAAQ,EAAE,CAAC;AAChE;AAGA,eAAe,IAAI,IAA4B;AAC3C,MAAI;AACA,WAAO,KAAK,MAAM,GAAG,CAAC;AAAA,EAC1B,SAAS,KAAK;AACV,WAAO,QAAQ,cAAc,GAAG,CAAC;AAAA,EACrC;AACJ;AAEO,SAAS,kBAA6B;AACzC,QAAM,SAAS,IAAI,UAAU,EAAE,MAAM,aAAa,SAAS,eAAe,CAAC;AAO3E,QAAM,OAAO,CACT,MACA,QAMA,YACC,OAAO,aAAa,MAAM,QAAiB,OAAgB;AAIhE;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aACI;AAAA,MACJ,aAAa;AAAA,QACT,aAAa,EACR,OAAO,EACP,SAAS,EACT,SAAS,qEAAqE;AAAA,MACvF;AAAA,MACA,aAAa,EAAE,cAAc,OAAO,eAAe,KAAK;AAAA,IAC5D;AAAA,IACA,OAAO,EAAE,YAAY,MACjB,IAAI,YAAY;AACZ,YAAM,QAAQ,MAAM,gBAAgB,QAAQ,GAAG,eAAe,mBAAmB;AACjF,oBAAc;AACd,YAAM,YAAY,MAAM,yBAAyB;AACjD,aAAO;AAAA,QACH,SACI;AAAA,QACJ,kBAAkB,MAAM;AAAA,QACxB,WAAW,MAAM;AAAA,QACjB,oBAAoB,MAAM;AAAA,MAC9B;AAAA,IACJ,CAAC;AAAA,EACT;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aACI;AAAA,MACJ,aAAa,CAAC;AAAA,MACd,aAAa,EAAE,cAAc,OAAO,eAAe,KAAK;AAAA,IAC5D;AAAA,IACA,YACI,IAAI,YAAY;AACZ,UAAI,CAAC,aAAa;AACd,eAAO,EAAE,QAAQ,wBAAwB,MAAM,yBAAyB;AAAA,MAC5E;AACA,UAAI;AACA,cAAM,QAAQ,MAAM,gBAAgB,QAAQ,GAAG,aAAa;AAAA,UACxD,WAAW;AAAA,QACf,CAAC;AACD,uBAAe;AAAA,UACX,cAAc,MAAM;AAAA,UACpB,YAAY,MAAM;AAAA,UAClB,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,aAAa,GAAI,EAAE,YAAY;AAAA,UACvE,UAAU,QAAQ;AAAA,QACtB,CAAC;AACD,sBAAc;AACd,eAAO,EAAE,QAAQ,aAAa,YAAY,MAAM,WAAW;AAAA,MAC/D,SAAS,KAAK;AACV,YAAI,gBAAgB,GAAG,KAAK,IAAI,SAAS,eAAe;AACpD,iBAAO;AAAA,YACH,QAAQ;AAAA,YACR,MAAM;AAAA,UACV;AAAA,QACJ;AACA,sBAAc;AACd,cAAM;AAAA,MACV;AAAA,IACJ,CAAC;AAAA,EACT;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aACI;AAAA,MACJ,aAAa,CAAC;AAAA,MACd,aAAa,EAAE,cAAc,MAAM,eAAe,KAAK;AAAA,IAC3D;AAAA,IACA,YACI,IAAI,YAAY;AACZ,YAAM,SAAS,mBAAmB,QAAQ,CAAC;AAC3C,UAAI,CAAC,OAAO,OAAO;AACf,eAAO,EAAE,WAAW,OAAO,MAAM,6BAA6B;AAAA,MAClE;AACA,YAAM,SAAS,SAAS,EAAE,QAAQ,OAAO,OAAO,SAAS,QAAQ,EAAE,CAAC;AAEpE,YAAM,OAAO,MAAM,OAAO,KAAK,KAAK;AACpC,aAAO,EAAE,WAAW,MAAM,QAAQ,OAAO,QAAQ,GAAG,KAAK;AAAA,IAC7D,CAAC;AAAA,EACT;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,CAAC;AAAA,MACd,aAAa,EAAE,cAAc,OAAO,iBAAiB,KAAK;AAAA,IAC9D;AAAA,IACA,YACI,IAAI,YAAY;AACZ,sBAAgB,QAAQ,CAAC;AACzB,oBAAc;AACd,aAAO,EAAE,IAAI,KAAK;AAAA,IACtB,CAAC;AAAA,EACT;AAIA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aACI;AAAA,MACJ,aAAa;AAAA,QACT,OAAO,EAAE,OAAO;AAAA,QAChB,WAAW,EACN,KAAK,CAAC,QAAQ,YAAY,aAAa,WAAW,OAAO,CAAC,EAC1D,QAAQ,MAAM;AAAA,QACnB,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,QAC9C,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,QACrC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC,EAAE,SAAS;AAAA,QAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,QACtD,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,MACpD;AAAA,MACA,aAAa,EAAE,cAAc,MAAM,eAAe,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO,EAAE,OAAO,WAAW,OAAO,QAAQ,SAAS,OAAO,OAAO,MAC7D,IAAI,YAAY;AACZ,YAAM,IAAI,cAAc,EAAE,GAAG,KAAK;AAClC,UAAI,cAAc,QAAS,QAAO,EAAE,OAAO,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;AACpE,YAAM,UAAU,EAAE,OAAO,QAAQ,SAAS,OAAO,OAAO;AACxD,UAAI,cAAc,eAAe,cAAc,WAAW;AACtD,eAAO,EAAE,KAAK,MAAM,EAAE,UAAU,OAAO,EAAE;AAAA,MAC7C;AACA,aAAO,EAAE,MAAM,MAAM,EAAE,KAAK,OAAO,EAAE;AAAA,IACzC,CAAC;AAAA,EACT;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE;AAAA,MACtE,aAAa,EAAE,cAAc,OAAO,eAAe,KAAK;AAAA,IAC5D;AAAA,IACA,OAAO,EAAE,OAAO,KAAK,MAAM,IAAI,YAAY,cAAc,EAAE,GAAG,KAAK,EAAE,OAAO,IAAI,CAAC;AAAA,EACrF;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa;AAAA,QACT,OAAO,EAAE,OAAO;AAAA,QAChB,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AAAA,QACnC,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AAAA,MACtC;AAAA,MACA,aAAa,EAAE,cAAc,OAAO,eAAe,KAAK;AAAA,IAC5D;AAAA,IACA,OAAO,EAAE,OAAO,OAAO,KAAK,MACxB,IAAI,YAAY,cAAc,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC,CAAC;AAAA,EACzE;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aACI;AAAA,MACJ,aAAa,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE;AAAA,MACvE,aAAa,EAAE,cAAc,OAAO,iBAAiB,MAAM,eAAe,KAAK;AAAA,IACnF;AAAA,IACA,OAAO,EAAE,OAAO,MAAM,MAAM,IAAI,YAAY,cAAc,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAAA,EAC3F;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aACI;AAAA,MACJ,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE;AAAA,MAC/B,aAAa,EAAE,cAAc,OAAO,iBAAiB,MAAM,eAAe,KAAK;AAAA,IACnF;AAAA,IACA,OAAO,EAAE,IAAI,MAAM,IAAI,YAAY,cAAc,EAAE,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC;AAAA,EAC1E;AAIA,QAAM,YAAY,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC,EAAE,QAAQ,SAAS;AACjE,QAAM,WAAW,CAAC,QAAwB,WACtC,WAAW,WAAW,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAEjE;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;AAAA,MAChE,aAAa,EAAE,cAAc,MAAM,eAAe,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO,EAAE,QAAQ,OAAO,MACpB,IAAI,YAAY,SAAS,cAAc,GAAG,MAAM,EAAE,KAAK,MAAM,CAAC;AAAA,EACtE;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE;AAAA,MAChC,aAAa,EAAE,cAAc,MAAM,eAAe,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO,EAAE,KAAK,MAAM,IAAI,YAAY,cAAc,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,EACnF;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa;AAAA,QACT,QAAQ;AAAA,QACR,MAAM,EAAE,OAAO;AAAA,QACf,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,MACrD;AAAA,MACA,aAAa,EAAE,cAAc,MAAM,eAAe,KAAK;AAAA,IAC3D;AAAA,IACA,OAAO,EAAE,QAAQ,MAAM,WAAW,MAC9B,IAAI,YAAY,SAAS,cAAc,GAAG,MAAM,EAAE,gBAAgB,MAAM,UAAU,CAAC;AAAA,EAC3F;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aACI;AAAA,MACJ,aAAa;AAAA,QACT,QAAQ;AAAA,QACR,MAAM,EAAE,OAAO;AAAA,QACf,SAAS,EAAE,OAAO;AAAA,QAClB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MACtC;AAAA,MACA,aAAa,EAAE,cAAc,OAAO,eAAe,KAAK;AAAA,IAC5D;AAAA,IACA,OAAO,EAAE,QAAQ,MAAM,SAAS,aAAa,MACzC;AAAA,MAAI,YACA,SAAS,cAAc,GAAG,MAAM,EAAE;AAAA,QAC9B;AAAA,QACA;AAAA,QACA,gBAAgB;AAAA,MACpB;AAAA,IACJ;AAAA,EACR;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE;AAAA,MACpE,aAAa,EAAE,cAAc,OAAO,iBAAiB,MAAM,eAAe,KAAK;AAAA,IACnF;AAAA,IACA,OAAO,EAAE,QAAQ,MAAM,MAAM,IAAI,YAAY,SAAS,cAAc,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAAA,EAChG;AAEA;AAAA,IACI;AAAA,IACA;AAAA,MACI,OAAO;AAAA,MACP,aAAa;AAAA,MACb,aAAa,EAAE,QAAQ,WAAW,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,OAAO,EAAE;AAAA,MACnE,aAAa,EAAE,cAAc,OAAO,eAAe,KAAK;AAAA,IAC5D;AAAA,IACA,OAAO,EAAE,QAAQ,MAAM,GAAG,MACtB,IAAI,YAAY,SAAS,cAAc,GAAG,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;AAAA,EACxE;AAEA,SAAO;AACX;AAGA,eAAsB,iBAAgC;AAClD,QAAM,SAAS,gBAAgB;AAC/B,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAC9B,UAAQ,MAAM,IAAI,WAAW,yCAAyC,QAAQ,CAAC,GAAG;AACtF;","names":["baseUrl","baseUrl"]}