@embassys/ambassador 0.0.0 → 0.2.6

package/dist/central-rest.js

@@ -0,0 +1,401 @@
+import { assertNoCentralCredentialFields, CentralJsonError, isCentralRecord, readCentralJson, } from "./central-json.js";
+import { CentralProtectedTransportError, } from "./central-protected-transport.js";
+import { validateNotificationId } from "./notification-journal.js";
+const MAX_NORMALIZED_RESULT_BYTES = 512 * 1024;
+const MAX_MESSAGES = 256;
+const EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/u;
+const NAME = /^[A-Za-z0-9._~-]{1,128}$/u;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
+const FORBIDDEN_ARGUMENT_NAMES = new Set([
+    "access_token",
+    "authorization",
+    "dpop",
+    "jwt",
+    "private_key",
+    "proof",
+    "token",
+]);
+export class CentralRestError extends Error {
+    code;
+    constructor(code) {
+        super("Central REST operation failed");
+        this.code = code;
+        this.name = "CentralRestError";
+    }
+}
+function objectSchema(properties, required = []) {
+    return { type: "object", properties, required: [...required], additionalProperties: false };
+}
+export const REST_AUTHENTICATED_TOOLS = [
+    {
+        name: "list_action_types",
+        description: "List the deployed action names and input schemas.",
+        inputSchema: objectSchema({}),
+    },
+    {
+        name: "request_permission",
+        description: "Request permission to call an action on another registered identity.",
+        inputSchema: objectSchema({
+            target_email: { type: "string", minLength: 3, maxLength: 254 },
+            action_type: { type: "string", minLength: 1, maxLength: 128 },
+            scope: { type: "object" },
+        }, ["target_email", "action_type"]),
+    },
+    {
+        name: "respond_to_permission",
+        description: "Grant or deny one pending permission request.",
+        inputSchema: objectSchema({
+            permission_id: { type: "string", minLength: 1, maxLength: 128 },
+            decision: { type: "string", enum: ["granted", "denied"] },
+        }, ["permission_id", "decision"]),
+    },
+    {
+        name: "call_action",
+        description: "Deliver an allowed action request to another registered identity.",
+        inputSchema: objectSchema({
+            target_email: { type: "string", minLength: 3, maxLength: 254 },
+            action_type: { type: "string", minLength: 1, maxLength: 128 },
+            payload: { type: "object" },
+        }, ["target_email", "action_type", "payload"]),
+    },
+    {
+        name: "submit_action_result",
+        description: "Return one success or error result for an action call received by this identity.",
+        inputSchema: objectSchema({
+            call_id: { type: "string", format: "uuid" },
+            result: { type: "object" },
+            status: { type: "string", enum: ["success", "error"] },
+        }, ["call_id", "result", "status"]),
+    },
+    {
+        name: "get_my_permissions",
+        description: "List permissions involving the enrolled identity.",
+        inputSchema: objectSchema({}),
+    },
+];
+function failure(code) {
+    return new CentralRestError(code);
+}
+function origin(value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw failure("invalid_arguments");
+    }
+    const loopback = ["127.0.0.1", "::1", "localhost"].includes(parsed.hostname);
+    if ((parsed.protocol !== "https:" && !(parsed.protocol === "http:" && loopback)) ||
+        parsed.username !== "" ||
+        parsed.password !== "" ||
+        parsed.pathname !== "/" ||
+        parsed.search !== "" ||
+        parsed.hash !== "") {
+        throw failure("invalid_arguments");
+    }
+    return parsed;
+}
+function exactKeys(value, required, optional = []) {
+    if (!isCentralRecord(value))
+        return false;
+    const allowed = new Set([...required, ...optional]);
+    return (required.every((name) => Object.hasOwn(value, name)) &&
+        Object.keys(value).every((name) => allowed.has(name)));
+}
+function noForbiddenArguments(value) {
+    if (Array.isArray(value)) {
+        for (const item of value)
+            noForbiddenArguments(item);
+        return;
+    }
+    if (!isCentralRecord(value))
+        return;
+    for (const [name, nested] of Object.entries(value)) {
+        if (FORBIDDEN_ARGUMENT_NAMES.has(name.toLowerCase()))
+            throw failure("invalid_arguments");
+        noForbiddenArguments(nested);
+    }
+}
+function requestEmail(value) {
+    if (typeof value !== "string" || value.length > 254 || !EMAIL.test(value)) {
+        throw failure("invalid_arguments");
+    }
+    return value;
+}
+function requestName(value) {
+    if (typeof value !== "string" || !NAME.test(value))
+        throw failure("invalid_arguments");
+    return value;
+}
+function requestUuid(value) {
+    if (typeof value !== "string" || !UUID.test(value))
+        throw failure("invalid_arguments");
+    return value;
+}
+function requestObject(value) {
+    if (!isCentralRecord(value))
+        throw failure("invalid_arguments");
+    noForbiddenArguments(value);
+    return value;
+}
+function safeResultSize(value) {
+    let serialized;
+    try {
+        serialized = JSON.stringify(value);
+    }
+    catch {
+        throw failure("central_response_invalid");
+    }
+    if (Buffer.byteLength(serialized, "utf8") > MAX_NORMALIZED_RESULT_BYTES) {
+        throw failure("central_response_invalid");
+    }
+}
+function actionType(value) {
+    if (!exactKeys(value, ["id", "name", "description", "input_schema"]) ||
+        typeof value.id !== "string" ||
+        !NAME.test(value.id) ||
+        typeof value.name !== "string" ||
+        !NAME.test(value.name) ||
+        typeof value.description !== "string" ||
+        value.description.length > 1_024 ||
+        !isCentralRecord(value.input_schema) ||
+        value.input_schema.type !== "object") {
+        throw failure("central_response_invalid");
+    }
+    assertNoCentralCredentialFields(value.input_schema);
+    return {
+        id: value.id,
+        name: value.name,
+        description: value.description,
+        input_schema: value.input_schema,
+    };
+}
+function message(value) {
+    if (!exactKeys(value, ["sender_agent_id", "payload", "created_at"], ["id", "action_type_id"]) ||
+        (value.id !== undefined && (typeof value.id !== "string" || !NAME.test(value.id))) ||
+        typeof value.sender_agent_id !== "string" ||
+        value.sender_agent_id.length > 256 ||
+        (value.action_type_id !== undefined &&
+            value.action_type_id !== null &&
+            (typeof value.action_type_id !== "string" || value.action_type_id.length > 256)) ||
+        !isCentralRecord(value.payload) ||
+        typeof value.created_at !== "string" ||
+        value.created_at.length > 128) {
+        throw failure("central_response_invalid");
+    }
+    assertNoCentralCredentialFields(value.payload);
+    return {
+        ...(value.id === undefined ? {} : { id: value.id }),
+        sender_agent_id: value.sender_agent_id,
+        ...(value.action_type_id === undefined ? {} : { action_type_id: value.action_type_id }),
+        payload: value.payload,
+        created_at: value.created_at,
+    };
+}
+function permission(value) {
+    if (!exactKeys(value, ["id", "grantor_email", "grantee_email", "action_type", "status"], ["scope", "created_at", "decided_at", "expires_at"]) ||
+        typeof value.id !== "string" ||
+        !NAME.test(value.id) ||
+        typeof value.grantor_email !== "string" ||
+        !EMAIL.test(value.grantor_email) ||
+        typeof value.grantee_email !== "string" ||
+        !EMAIL.test(value.grantee_email) ||
+        typeof value.action_type !== "string" ||
+        !NAME.test(value.action_type) ||
+        !["pending", "granted", "denied"].includes(value.status) ||
+        (value.scope !== undefined && value.scope !== null && !isCentralRecord(value.scope)) ||
+        !["created_at", "decided_at", "expires_at"].every((name) => value[name] === undefined || value[name] === null || typeof value[name] === "string")) {
+        throw failure("central_response_invalid");
+    }
+    assertNoCentralCredentialFields(value);
+    return value;
+}
+async function cancel(response) {
+    await response.body?.cancel().catch(() => undefined);
+}
+export class CentralRestClient {
+    #origin;
+    #transport;
+    constructor(options) {
+        this.#origin = origin(options.centralOrigin);
+        this.#transport = options.transport;
+    }
+    async listActionTypes(signal) {
+        const result = await this.#request("GET", "/api/list_action_types", undefined, signal);
+        if (!Array.isArray(result) || result.length > 128)
+            throw failure("central_response_invalid");
+        const actions = result.map(actionType);
+        if (new Set(actions.map((action) => action.name)).size !== actions.length) {
+            throw failure("central_response_invalid");
+        }
+        safeResultSize(actions);
+        return actions;
+    }
+    async requestPermission(arguments_, signal) {
+        if (!exactKeys(arguments_, ["target_email", "action_type"], ["scope"])) {
+            throw failure("invalid_arguments");
+        }
+        const body = {
+            target_email: requestEmail(arguments_.target_email),
+            action_type: requestName(arguments_.action_type),
+            ...(arguments_.scope === undefined ? {} : { scope: requestObject(arguments_.scope) }),
+        };
+        const result = await this.#request("POST", "/api/request_permission", body, signal);
+        if (!exactKeys(result, ["permission_id", "status", "message"]) ||
+            typeof result.permission_id !== "string" ||
+            !NAME.test(result.permission_id) ||
+            !["pending", "granted", "denied"].includes(result.status) ||
+            typeof result.message !== "string" ||
+            result.message.length > 512) {
+            throw failure("central_response_invalid");
+        }
+        return result;
+    }
+    async respondToPermission(arguments_, signal) {
+        if (!exactKeys(arguments_, ["permission_id", "decision"]) ||
+            (arguments_.decision !== "granted" && arguments_.decision !== "denied")) {
+            throw failure("invalid_arguments");
+        }
+        const permissionId = requestName(arguments_.permission_id);
+        const result = await this.#request("POST", "/api/respond_to_permission", { permission_id: permissionId, decision: arguments_.decision }, signal);
+        if (!exactKeys(result, ["permission_id", "status", "decided_at"]) ||
+            result.permission_id !== permissionId ||
+            result.status !== arguments_.decision ||
+            typeof result.decided_at !== "string" ||
+            result.decided_at.length > 128) {
+            throw failure("central_response_invalid");
+        }
+        return result;
+    }
+    async callAction(arguments_, signal) {
+        if (!exactKeys(arguments_, ["target_email", "action_type", "payload"])) {
+            throw failure("invalid_arguments");
+        }
+        const result = await this.#request("POST", "/api/call_action", {
+            target_email: requestEmail(arguments_.target_email),
+            action_type: requestName(arguments_.action_type),
+            payload: requestObject(arguments_.payload),
+        }, signal);
+        if (!exactKeys(result, ["call_id", "message_id", "status"]) ||
+            typeof result.call_id !== "string" ||
+            !UUID.test(result.call_id) ||
+            typeof result.message_id !== "string" ||
+            !NAME.test(result.message_id) ||
+            result.status !== "delivered") {
+            throw failure("central_response_invalid");
+        }
+        return result;
+    }
+    async submitActionResult(arguments_, signal) {
+        if (!exactKeys(arguments_, ["call_id", "result", "status"]) ||
+            (arguments_.status !== "success" && arguments_.status !== "error")) {
+            throw failure("invalid_arguments");
+        }
+        const callId = requestUuid(arguments_.call_id);
+        const requestedStatus = arguments_.status;
+        const result = await this.#request("POST", "/api/submit_action_result", {
+            call_id: callId,
+            result: requestObject(arguments_.result),
+            status: requestedStatus,
+        }, signal);
+        const expectedStatus = requestedStatus === "success" ? "completed" : "failed";
+        if (!exactKeys(result, ["call_id", "status", "message_id"]) ||
+            result.call_id !== callId ||
+            result.status !== expectedStatus ||
+            typeof result.message_id !== "string" ||
+            !NAME.test(result.message_id)) {
+            throw failure("central_response_invalid");
+        }
+        return result;
+    }
+    async pollRemoteMessages(timeout, signal) {
+        if (!Number.isInteger(timeout) || timeout < 0 || timeout > 60) {
+            throw failure("invalid_arguments");
+        }
+        const result = await this.#request("GET", `/api/poll_messages?timeout=${timeout}`, undefined, signal);
+        if (!exactKeys(result, ["messages"]) || !Array.isArray(result.messages)) {
+            throw failure("central_response_invalid");
+        }
+        if (result.messages.length > MAX_MESSAGES)
+            throw failure("central_response_invalid");
+        const messages = result.messages.map(message);
+        const byId = new Map();
+        for (const value of messages) {
+            if (value.id === undefined)
+                continue;
+            const serialized = JSON.stringify(value);
+            const existing = byId.get(value.id);
+            if (existing !== undefined && existing !== serialized)
+                throw failure("central_response_invalid");
+            byId.set(value.id, serialized);
+        }
+        safeResultSize({ messages });
+        return { messages };
+    }
+    async getMyPermissions(signal) {
+        const result = await this.#request("GET", "/api/get_my_permissions", undefined, signal);
+        if (!Array.isArray(result) || result.length > 512)
+            throw failure("central_response_invalid");
+        const permissions = result.map(permission);
+        safeResultSize(permissions);
+        return permissions;
+    }
+    async ackMessage(arguments_, signal) {
+        if (!exactKeys(arguments_, ["message_id"]))
+            throw failure("invalid_arguments");
+        let messageId;
+        try {
+            messageId = validateNotificationId(arguments_.message_id);
+        }
+        catch {
+            throw failure("invalid_arguments");
+        }
+        const result = await this.#request("POST", "/api/ack_message", { message_id: messageId }, signal);
+        if (!exactKeys(result, ["message_id", "status"]) ||
+            result.message_id !== messageId ||
+            result.status !== "acked") {
+            throw failure("central_response_invalid");
+        }
+        return { message_id: messageId, status: "acked" };
+    }
+    async #request(method, path, body, signal) {
+        let response;
+        try {
+            response = await this.#transport.fetch(new URL(path, this.#origin), {
+                method,
+                ...(body === undefined
+                    ? {}
+                    : { headers: { "content-type": "application/json" }, body: JSON.stringify(body) }),
+                ...(signal === undefined ? {} : { signal }),
+            });
+        }
+        catch (error) {
+            if (error instanceof CentralProtectedTransportError) {
+                if (error.code === "central_protected_authentication_failed") {
+                    throw failure("central_authentication_failed");
+                }
+                if (error.code === "central_protected_request_failed") {
+                    throw failure("central_request_failed");
+                }
+            }
+            throw failure("central_request_failed");
+        }
+        if (!response.ok) {
+            await cancel(response);
+            throw failure(response.status === 401 ? "central_authentication_failed" : "central_request_rejected");
+        }
+        try {
+            const result = await readCentralJson(response);
+            assertNoCentralCredentialFields(result);
+            return result;
+        }
+        catch (error) {
+            if (error instanceof CentralJsonError)
+                throw failure("central_response_invalid");
+            if (error instanceof CentralRestError)
+                throw error;
+            throw failure("central_response_invalid");
+        }
+    }
+}
+//# sourceMappingURL=central-rest.js.map

package/dist/central-rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"central-rest.js","sourceRoot":"","sources":["../src/central-rest.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,8BAA8B,GAC/B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,MAAM,2BAA2B,GAAG,GAAG,GAAG,IAAI,CAAC;AAC/C,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,KAAK,GAAG,6BAA6B,CAAC;AAC5C,MAAM,IAAI,GAAG,2BAA2B,CAAC;AACzC,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAC1F,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,cAAc;IACd,eAAe;IACf,MAAM;IACN,KAAK;IACL,aAAa;IACb,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AASH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACpB,IAAI;IAAzB,YAAqB,IAA0B;QAC7C,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBADpB,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAkCD,SAAS,YAAY,CACnB,UAAmC,EACnC,QAAQ,GAAsB,EAAE;IAEhC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAqC;IACxE;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;KAC9B;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,sEAAsE;QACnF,WAAW,EAAE,YAAY,CACvB;YACE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YAC7D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B,EACD,CAAC,cAAc,EAAE,aAAa,CAAC,CAChC;KACF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,+CAA+C;QAC5D,WAAW,EAAE,YAAY,CACvB;YACE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YAC/D,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;SAC1D,EACD,CAAC,eAAe,EAAE,UAAU,CAAC,CAC9B;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,mEAAmE;QAChF,WAAW,EAAE,YAAY,CACvB;YACE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YAC9D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YAC7D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC5B,EACD,CAAC,cAAc,EAAE,aAAa,EAAE,SAAS,CAAC,CAC3C;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,kFAAkF;QAC/F,WAAW,EAAE,YAAY,CACvB;YACE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;YAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;SACvD,EACD,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAChC;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;KAC9B;CACO,CAAC;AAEX,SAAS,OAAO,CAAC,IAA0B;IACzC,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7E,IACE,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;QAC5E,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,GAAG;QACvB,MAAM,CAAC,MAAM,KAAK,EAAE;QACpB,MAAM,CAAC,IAAI,KAAK,EAAE,EAClB,CAAC;QACD,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAChB,KAAc,EACd,QAA2B,EAC3B,QAAQ,GAAsB,EAAE;IAEhC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzF,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChE,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,2BAA2B,EAAE,CAAC;QACxE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IACE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACtB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,KAAK;QAChC,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC;QACpC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ,EACpC,CAAC;QACD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC;IACD,+BAA+B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACpD,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IACE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACzF,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACzC,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,GAAG;QAClC,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;YACjC,KAAK,CAAC,cAAc,KAAK,IAAI;YAC7B,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QAClF,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,EAC7B,CAAC;QACD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC;IACD,+BAA+B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACnD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;QACvF,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IACE,CAAC,SAAS,CACR,KAAK,EACL,CAAC,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,CAAC,EACjE,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CACpD;QACD,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;QAChC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;QAChC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7B,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAgB,CAAC;QAClE,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpF,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,KAAK,CAC/C,CAAC,IAAI,EAAE,EAAE,CACP,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CACvF,EACD,CAAC;QACD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC;IACD,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,KAAqC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAkB;IACtC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,OAAO,CAAM;IACb,UAAU,CAA4B;IAE/C,YAAY,OAAiC;QAC3C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAoB;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC1E,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,cAAc,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,UAAmB,EACnB,MAAoB;QAEpB,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,GAAG;YACX,YAAY,EAAE,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC;YACnD,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC;YAChD,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;SACtF,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACpF,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;YACxC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAChC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAgB,CAAC;YACnE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAC3B,CAAC;YACD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,UAAmB,EACnB,MAAoB;QAEpB,IACE,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;YACrD,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,EACvE,CAAC;YACD,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAChC,MAAM,EACN,4BAA4B,EAC5B,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,EAC9D,MAAM,CACP,CAAC;QACF,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7D,MAAM,CAAC,aAAa,KAAK,YAAY;YACrC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ;YACrC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,EAC9B,CAAC;YACD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAmB,EAAE,MAAoB;QACxD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAChC,MAAM,EACN,kBAAkB,EAClB;YACE,YAAY,EAAE,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC;YACnD,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC;YAChD,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC;SAC3C,EACD,MAAM,CACP,CAAC;QACF,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;YACvD,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC1B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YAC7B,MAAM,CAAC,MAAM,KAAK,WAAW,EAC7B,CAAC;YACD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,UAAmB,EACnB,MAAoB;QAEpB,IACE,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,EAClE,CAAC;YACD,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAChC,MAAM,EACN,2BAA2B,EAC3B;YACE,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC;YACxC,MAAM,EAAE,eAAe;SACxB,EACD,MAAM,CACP,CAAC;QACF,MAAM,cAAc,GAAG,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9E,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACvD,MAAM,CAAC,OAAO,KAAK,MAAM;YACzB,MAAM,CAAC,MAAM,KAAK,cAAc;YAChC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAC7B,CAAC;YACD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAAe,EACf,MAAoB;QAEpB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;YAC9D,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAChC,KAAK,EACL,8BAA8B,OAAO,EAAE,EACvC,SAAS,EACT,MAAM,CACP,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY;YAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU;gBACnD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACjC,CAAC;QACD,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7B,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAoB;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7F,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,cAAc,CAAC,WAAW,CAAC,CAAC;QAC5B,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAmB,EAAE,MAAoB;QACxD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC;YAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC/E,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,sBAAsB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAChC,MAAM,EACN,kBAAkB,EAClB,EAAE,UAAU,EAAE,SAAS,EAAE,EACzB,MAAM,CACP,CAAC;QACF,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC5C,MAAM,CAAC,UAAU,KAAK,SAAS;YAC/B,MAAM,CAAC,MAAM,KAAK,OAAO,EACzB,CAAC;YACD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,MAAsB,EACtB,IAAY,EACZ,IAAyC,EACzC,MAAoB;QAEpB,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAClE,MAAM;gBACN,GAAG,CAAC,IAAI,KAAK,SAAS;oBACpB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpF,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBACpD,IAAI,KAAK,CAAC,IAAI,KAAK,yCAAyC,EAAE,CAAC;oBAC7D,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAC;gBACjD,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,kCAAkC,EAAE,CAAC;oBACtD,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YACD,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,OAAO,CACX,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,0BAA0B,CACvF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC/C,+BAA+B,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;YACjF,IAAI,KAAK,YAAY,gBAAgB;gBAAE,MAAM,KAAK,CAAC;YACnD,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;CACF"}

package/dist/cli.d.ts

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import type { CredentialStore } from "./credential-store.js";
+import { type DeliveryTargetContext } from "./gateway-application.js";
+import type { DeliveryTarget } from "./notification-relay.js";
+export interface CliIo {
+    readonly stdout: Pick<NodeJS.WriteStream, "write">;
+    readonly stderr: Pick<NodeJS.WriteStream, "write">;
+}
+export interface CliTestOverrides {
+    readonly centralOrigin: string;
+    readonly stateRoot: string;
+    readonly credentialStore?: CredentialStore;
+    readonly centralFetch?: typeof fetch;
+    readonly webhookFetch?: typeof fetch;
+    readonly deliveryTargetFactory?: (context: DeliveryTargetContext) => DeliveryTarget;
+    readonly localMcpPort?: number;
+    readonly nowSeconds?: () => number;
+}
+export interface CliContext {
+    readonly io: CliIo;
+    readonly env: NodeJS.ProcessEnv;
+    readonly cwd: string;
+    readonly signal?: AbortSignal;
+    readonly testOverrides?: CliTestOverrides;
+}
+export declare function runCli(args: string[], context: CliContext): Promise<number>;

package/dist/cli.js

@@ -0,0 +1,131 @@
+#!/usr/bin/env node
+import { realpathSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { AmbassadorOptionsError, parseAmbassadorStartOptions, resolveLocalToken, } from "./ambassador-options.js";
+import { GatewayError } from "./errors.js";
+import { openGatewayApplication, } from "./gateway-application.js";
+import { defaultGatewayPaths, pathsForStateDirectory } from "./gateway-paths.js";
+import { ProcessLock } from "./process-lock.js";
+function processSignal() {
+    const controller = new AbortController();
+    const abort = () => controller.abort();
+    process.once("SIGINT", abort);
+    process.once("SIGTERM", abort);
+    return {
+        signal: controller.signal,
+        close() {
+            process.off("SIGINT", abort);
+            process.off("SIGTERM", abort);
+        },
+    };
+}
+async function waitForAbort(signal) {
+    if (signal.aborted)
+        return;
+    await new Promise((resolveWait) => signal.addEventListener("abort", () => resolveWait(), { once: true }));
+}
+function homeDirectory(environment) {
+    return environment.HOME || environment.USERPROFILE || homedir();
+}
+export async function runCli(args, context) {
+    let parsed;
+    try {
+        parsed = parseAmbassadorStartOptions(args);
+    }
+    catch (error) {
+        context.io.stderr.write(`${error instanceof AmbassadorOptionsError ? error.message : "Invalid command or arguments"}\n`);
+        return error instanceof AmbassadorOptionsError ? error.exitCode : 2;
+    }
+    const paths = context.testOverrides === undefined
+        ? defaultGatewayPaths(process.platform, context.env, homeDirectory(context.env))
+        : pathsForStateDirectory(context.testOverrides.stateRoot, join);
+    let lock;
+    let application;
+    const ownedSignal = context.signal === undefined ? processSignal() : undefined;
+    const signal = context.signal ?? ownedSignal?.signal;
+    if (signal === undefined)
+        throw new Error("Ambassador signal is unavailable");
+    try {
+        lock = await ProcessLock.acquire(paths.lockPath);
+        const localToken = resolveLocalToken(context.env, parsed.localTokenEnv);
+        application = await openGatewayApplication({
+            localToken,
+            journalPath: paths.journalPath,
+            credentialPath: paths.credentialPath,
+            profilePath: paths.profilePath,
+            workingDirectory: context.cwd,
+            environment: context.env,
+            signal,
+            ...(context.testOverrides === undefined
+                ? {}
+                : {
+                    centralOrigin: context.testOverrides.centralOrigin,
+                    ...(context.testOverrides.credentialStore === undefined
+                        ? {}
+                        : { credentialStore: context.testOverrides.credentialStore }),
+                    ...(context.testOverrides.centralFetch === undefined
+                        ? {}
+                        : { centralFetch: context.testOverrides.centralFetch }),
+                    ...(context.testOverrides.webhookFetch === undefined
+                        ? {}
+                        : { webhookFetch: context.testOverrides.webhookFetch }),
+                    ...(context.testOverrides.deliveryTargetFactory === undefined
+                        ? {}
+                        : { deliveryTargetFactory: context.testOverrides.deliveryTargetFactory }),
+                    ...(context.testOverrides.localMcpPort === undefined
+                        ? {}
+                        : { localMcpPort: context.testOverrides.localMcpPort }),
+                    ...(context.testOverrides.nowSeconds === undefined
+                        ? {}
+                        : { nowSeconds: context.testOverrides.nowSeconds }),
+                }),
+        });
+        context.io.stdout.write(`MCP endpoint: ${application.endpoint}\n`);
+        const failure = await Promise.race([
+            waitForAbort(signal).then(() => undefined),
+            application.failure,
+        ]);
+        if (failure !== undefined)
+            throw failure;
+        return 0;
+    }
+    catch (error) {
+        if (signal.aborted)
+            return 0;
+        if (error instanceof AmbassadorOptionsError) {
+            context.io.stderr.write(`${error.message}\n`);
+            return error.exitCode;
+        }
+        if (error instanceof GatewayError) {
+            context.io.stderr.write(`${error.message}\n`);
+            return error.exitCode;
+        }
+        context.io.stderr.write("Ambassador local state failed\n");
+        return 7;
+    }
+    finally {
+        await application?.close().catch(() => undefined);
+        await lock?.release().catch(() => undefined);
+        ownedSignal?.close();
+    }
+}
+function isMainModule() {
+    if (process.argv[1] === undefined)
+        return false;
+    try {
+        return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));
+    }
+    catch {
+        return resolve(process.argv[1]) === resolve(fileURLToPath(import.meta.url));
+    }
+}
+if (isMainModule()) {
+    process.exitCode = await runCli(process.argv.slice(2), {
+        io: { stdout: process.stdout, stderr: process.stderr },
+        env: process.env,
+        cwd: process.cwd(),
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,sBAAsB,EAEtB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAEL,sBAAsB,GAEvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEjF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA+BhD,SAAS,aAAa;IACpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,KAAK;YACH,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAmB;IAC7C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO;IAC3B,MAAM,IAAI,OAAO,CAAO,CAAC,WAAW,EAAE,EAAE,CACtC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,WAA8B;IACnD,OAAO,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,OAAmB;IAC9D,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CACrB,GAAG,KAAK,YAAY,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,IAAI,CAChG,CAAC;QACF,OAAO,KAAK,YAAY,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,KAAK,GACT,OAAO,CAAC,aAAa,KAAK,SAAS;QACjC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChF,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,IAA6B,CAAC;IAClC,IAAI,WAAkD,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE,MAAM,CAAC;IACrD,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAE9E,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACxE,WAAW,GAAG,MAAM,sBAAsB,CAAC;YACzC,UAAU;YACV,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,OAAO,CAAC,GAAG;YAC7B,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,aAAa;oBAClD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,KAAK,SAAS;wBACrD,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC;oBAC/D,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS;wBAClD,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;oBACzD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS;wBAClD,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;oBACzD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,qBAAqB,KAAK,SAAS;wBAC3D,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,aAAa,CAAC,qBAAqB,EAAE,CAAC;oBAC3E,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS;wBAClD,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;oBACzD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,KAAK,SAAS;wBAChD,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;iBACtD,CAAC;SACP,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,WAAW,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACjC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YAC1C,WAAW,CAAC,OAAO;SACpB,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;QAC7B,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC;QACxB,CAAC;QACD,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,WAAW,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,WAAW,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,IAAI,YAAY,EAAE,EAAE,CAAC;IACnB,OAAO,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACrD,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;QACtD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;KACnB,CAAC,CAAC;AACL,CAAC"}

package/dist/credential-store.d.ts

@@ -0,0 +1,18 @@
+export interface CredentialStore {
+    load(): Promise<string | undefined>;
+    save(credential: string): Promise<void>;
+}
+export type CredentialArtifactKind = "directory" | "file";
+export interface WindowsCredentialAccessControl {
+    secure(path: string, kind: CredentialArtifactKind): Promise<void>;
+}
+export interface EncryptedFileCredentialStoreOptions {
+    readonly platform?: NodeJS.Platform;
+    readonly windowsAccessControl?: WindowsCredentialAccessControl;
+}
+export declare class EncryptedFileCredentialStore implements CredentialStore {
+    #private;
+    constructor(path: string, localToken: string, credentialScope: string, options?: EncryptedFileCredentialStoreOptions);
+    load(): Promise<string | undefined>;
+    save(plaintext: string): Promise<void>;
+}