@every-app/sdk 0.1.14 → 0.3.0-rc.1

package/dist/server/nodeServer.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `nodeServerHandler()` — serve a Node HTTP framework (Express, NestJS, or
+ * anything on `node:http`) from an Every App Worker, through workerd's
+ * `cloudflare:node` bridge:
+ *
+ *   export default everyApp(
+ *     nodeServerHandler({
+ *       boot: async () => {
+ *         const app = await NestFactory.create(AppModule);
+ *         await app.listen(0);
+ *         return { port: app.getHttpServer().address().port };
+ *       },
+ *     }),
+ *   );
+ *
+ * `everyApp()` verifies the identity before the Node app sees the request,
+ * which still carries it as `x-everyapp-identity`. The bridge needs
+ * `nodejs_compat` and a compatibility date from 2025-09-01, which every
+ * `everyAppWorker()` has. See "Node frameworks" in the README for the rules
+ * such a Worker must follow (minify it, no work at module scope).
+ */
+import type { EveryAppHandler } from "./everyApp.js";
+/** A booted Node server: the port its `http.Server` listens on. */
+export interface NodeServer {
+    port: number;
+}
+export interface NodeServerHandlerOptions<TEnv> {
+    /**
+     * Start the server and return the port it listens on, e.g. `await
+     * app.listen(0)` and then `app.getHttpServer().address().port`. Port 0
+     * lets workerd pick one; a fixed port is still held by the server of the
+     * module graph a Vite reload replaced, in the same isolate. Runs once per
+     * isolate, on its first request rather than at module scope; requests
+     * that arrive meanwhile wait for it, and a failed boot is retried on the
+     * next request.
+     */
+    boot(env: TEnv): Promise<NodeServer>;
+}
+/**
+ * A handler for `everyApp()` that hands each request to the Node server
+ * `boot` started. On the way back it drops `Set-Cookie` (the gateway owns
+ * the session, and strips cookies from what reaches the app), and passes a
+ * body Node already encoded (`content-encoding`, e.g. from `compression()`)
+ * through as is: the bridge would let workerd encode it again, and clients
+ * would get unreadable bytes.
+ */
+export declare function nodeServerHandler<TEnv = Record<string, unknown>>(options: NodeServerHandlerOptions<TEnv>): EveryAppHandler<TEnv>;
+//# sourceMappingURL=nodeServer.d.ts.map

package/dist/server/nodeServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeServer.d.ts","sourceRoot":"","sources":["../../src/server/nodeServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB,CAAC,IAAI;IAC5C;;;;;;;;OAQG;IACH,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACtC;AAKD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9D,OAAO,EAAE,wBAAwB,CAAC,IAAI,CAAC,GACtC,eAAe,CAAC,IAAI,CAAC,CAiBvB"}

package/dist/server/nodeServer.js

@@ -0,0 +1,45 @@
+/** Statuses whose responses can't carry a body. */
+const NULL_BODY_STATUSES = new Set([101, 204, 205, 304]);
+/**
+ * A handler for `everyApp()` that hands each request to the Node server
+ * `boot` started. On the way back it drops `Set-Cookie` (the gateway owns
+ * the session, and strips cookies from what reaches the app), and passes a
+ * body Node already encoded (`content-encoding`, e.g. from `compression()`)
+ * through as is: the bridge would let workerd encode it again, and clients
+ * would get unreadable bytes.
+ */
+export function nodeServerHandler(options) {
+    let booting;
+    const server = (env) => {
+        if (!booting) {
+            const attempt = boot(options, env);
+            booting = attempt;
+            attempt.catch(() => {
+                if (booting === attempt)
+                    booting = undefined;
+            });
+        }
+        return booting;
+    };
+    return async (request, env) => {
+        const { port, handleAsNodeRequest } = await server(env);
+        return fromNode(await handleAsNodeRequest(port, request));
+    };
+}
+async function boot(options, env) {
+    // Imported here rather than at the top, so that loading the SDK needs no
+    // bridge (Node test runners, Workers on an older compatibility date).
+    const { handleAsNodeRequest } = await import("cloudflare:node");
+    const { port } = await options.boot(env);
+    return { port, handleAsNodeRequest };
+}
+function fromNode(response) {
+    const headers = new Headers(response.headers);
+    headers.delete("set-cookie");
+    return new Response(NULL_BODY_STATUSES.has(response.status) ? null : response.body, {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+        ...(headers.has("content-encoding") ? { encodeBody: "manual" } : {}),
+    });
+}

package/dist/server/sendEmail.d.ts

@@ -0,0 +1,39 @@
+import { type SendEmailMessage, type SendEmailResult } from "../internal/index.js";
+import { type GatewayCallFor } from "./attribution.js";
+export interface SendEmailOptions {
+    /**
+     * The Worker env: the EVERY_APP_GATEWAY binding when deployed; in local
+     * dev EVERYAPP_DEV, EVERYAPP_EMAIL_SENDERS in `.dev.vars` for the senders
+     * a `from` may name, and optionally EMAIL_REST_API_TOKEN,
+     * CLOUDFLARE_ACCOUNT_ID and EMAIL_FROM there to really send.
+     */
+    env: object;
+    /**
+     * Whom the mail is for: the inbound request (its user), or
+     * `{ background: true, organizationId }` for work no person started (an
+     * `email()` handler, a cron, a Workflow). An organization's own app may
+     * omit it for background work; a shared app's Worker must pass one or
+     * the other ({@link AttributionError}).
+     */
+    for?: GatewayCallFor;
+    message: SendEmailMessage;
+}
+/**
+ * Send an email through the gateway's `email` capability: its sender
+ * (EMAIL_FROM) unless `message.from` names an address the installation's
+ * senders allow (`everyapp email set --sender`; in dev, `.dev.vars`'
+ * EVERYAPP_EMAIL_SENDERS), within the gateway's daily budgets. The app
+ * lists `capabilities: { email: { access: "write" } }`.
+ *
+ * Throws {@link GatewayRefusalError} when the gateway won't send
+ * (`email_sender_not_allowed`, `email_budget_exhausted`,
+ * `integration_not_configured`, ...), with the code and a message to show.
+ *
+ * In local dev (`everyapp dev`, no binding) the message is checked the way
+ * the gateway checks it, then printed and answered `{ status: "logged" }`;
+ * with EMAIL_REST_API_TOKEN, CLOUDFLARE_ACCOUNT_ID and EMAIL_FROM in
+ * `.dev.vars` it goes out for real through Email Sending's REST API, from
+ * the developer's own account.
+ */
+export declare function sendEmail({ env, for: target, message, }: SendEmailOptions): Promise<SendEmailResult>;
+//# sourceMappingURL=sendEmail.d.ts.map

package/dist/server/sendEmail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendEmail.d.ts","sourceRoot":"","sources":["../../src/server/sendEmail.ts"],"names":[],"mappings":"AAAA,OAAO,EAeL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAI1B,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,gBAAgB,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,SAAS,CAAC,EAC9B,GAAG,EACH,GAAG,EAAE,MAAM,EACX,OAAO,GACR,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAoB7C"}

package/dist/server/sendEmail.js

@@ -0,0 +1,114 @@
+import { ConfigurationError, EMAIL_SENDERS_ENV, emailDomain, emailProviderRefusal, emailRestBody, emailRestUrl, emailSenderRefusal, parseEmailList, parseEmailSender, parseSendEmailMessage, readEmailRestResponse, senderAllowed, serviceRoutePath, } from "../internal/index.js";
+import { applyAttribution, checkAttribution, } from "./attribution.js";
+import { BINDING_ORIGIN } from "./gatewayFetch.js";
+import { GatewayRefusalError, gatewayRefusal } from "./integrationFetch.js";
+/**
+ * Send an email through the gateway's `email` capability: its sender
+ * (EMAIL_FROM) unless `message.from` names an address the installation's
+ * senders allow (`everyapp email set --sender`; in dev, `.dev.vars`'
+ * EVERYAPP_EMAIL_SENDERS), within the gateway's daily budgets. The app
+ * lists `capabilities: { email: { access: "write" } }`.
+ *
+ * Throws {@link GatewayRefusalError} when the gateway won't send
+ * (`email_sender_not_allowed`, `email_budget_exhausted`,
+ * `integration_not_configured`, ...), with the code and a message to show.
+ *
+ * In local dev (`everyapp dev`, no binding) the message is checked the way
+ * the gateway checks it, then printed and answered `{ status: "logged" }`;
+ * with EMAIL_REST_API_TOKEN, CLOUDFLARE_ACCOUNT_ID and EMAIL_FROM in
+ * `.dev.vars` it goes out for real through Email Sending's REST API, from
+ * the developer's own account.
+ */
+export async function sendEmail({ env, for: target, message, }) {
+    checkAttribution(env, target, "sendEmail");
+    const values = env;
+    const binding = values["EVERY_APP_GATEWAY"];
+    if (binding) {
+        if (typeof binding.fetch !== "function") {
+            throw new ConfigurationError("EVERY_APP_GATEWAY is configured but is not a valid service binding.");
+        }
+        return sendThroughGateway(binding, target, message);
+    }
+    if (!values["EVERYAPP_DEV"]) {
+        throw new ConfigurationError("Email is unavailable: deploy with the EVERY_APP_GATEWAY binding (everyapp deploy), or run under everyapp dev.");
+    }
+    return sendInDev(values, message);
+}
+async function sendThroughGateway(binding, target, message) {
+    const headers = new Headers({ "content-type": "application/json" });
+    applyAttribution(headers, target);
+    const response = await binding.fetch(new Request(`${BINDING_ORIGIN}${serviceRoutePath("email", "send")}`, {
+        method: "POST",
+        headers,
+        body: JSON.stringify(message),
+    }));
+    const refusal = await gatewayRefusal(response);
+    if (refusal)
+        throw new GatewayRefusalError(refusal);
+    if (!response.ok) {
+        throw new GatewayRefusalError({
+            status: response.status,
+            code: "email_send_failed",
+            message: `The Every App gateway answered ${response.status} to the send.`,
+        });
+    }
+    return (await response.json());
+}
+/**
+ * What the gateway would do, with no gateway: the same checks and sender
+ * rule, then the developer's own Email Sending account or the console.
+ */
+async function sendInDev(values, input) {
+    const parsed = parseSendEmailMessage(input);
+    if (!parsed.ok) {
+        throw new GatewayRefusalError({
+            status: 400,
+            code: "email_invalid_message",
+            message: parsed.problem,
+        });
+    }
+    const message = parsed.message;
+    if (message.from &&
+        !senderAllowed(message.from.address, parseEmailList(values[EMAIL_SENDERS_ENV]))) {
+        throw new GatewayRefusalError({
+            status: 403,
+            code: "email_sender_not_allowed",
+            message: emailSenderRefusal(message.from.address, "dev"),
+        });
+    }
+    const token = stringValue(values["EMAIL_REST_API_TOKEN"]);
+    const accountId = stringValue(values["CLOUDFLARE_ACCOUNT_ID"]);
+    const configuredFrom = stringValue(values["EMAIL_FROM"]);
+    // The gateway needs a name for its sender; a developer's address alone will do.
+    const sender = configuredFrom
+        ? (parseEmailSender(configuredFrom, stringValue(values["EMAIL_FROM_NAME"])) ?? { address: configuredFrom })
+        : null;
+    if (token && accountId && sender) {
+        return sendWithRest(message, message.from ?? sender, token, accountId);
+    }
+    const recipients = message.to.length + message.cc.length + message.bcc.length;
+    console.info(`[everyapp dev] email to ${recipients} recipient${recipients === 1 ? "" : "s"} subject ${JSON.stringify(message.subject)} (not sent: set EMAIL_REST_API_TOKEN, CLOUDFLARE_ACCOUNT_ID and EMAIL_FROM in .dev.vars to send)`);
+    return { status: "logged", messageId: `dev-${crypto.randomUUID()}` };
+}
+async function sendWithRest(message, from, token, accountId) {
+    const response = await fetch(emailRestUrl(accountId), {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${token}`,
+            "content-type": "application/json",
+        },
+        body: JSON.stringify(emailRestBody({ ...message, from })),
+    });
+    const body = await response.json().catch(() => null);
+    const result = readEmailRestResponse(response.status, body);
+    if (!result.ok) {
+        throw new GatewayRefusalError(emailProviderRefusal(result.providerCode, emailDomain(from.address)));
+    }
+    return {
+        status: result.status,
+        ...(result.messageId ? { messageId: result.messageId } : {}),
+    };
+}
+function stringValue(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}

package/dist/server/tools.d.ts

@@ -0,0 +1,184 @@
+/**
+ * `defineTools()` — agent tools an app offers to MCP clients through the
+ * Every App gateway.
+ *
+ *   export const tools = defineTools(
+ *     {
+ *       list_todos: {
+ *         description: "List the user's todos.",
+ *         risk: "read",
+ *         input: z.object({}).strict(),
+ *         handler: async (_input, { user }) => listTodos(user.id),
+ *       },
+ *     },
+ *     { instructions: "Never guess todo ids; call list_todos first." },
+ *   );
+ *   export default everyApp(handler, { tools });
+ *
+ * Apps never speak MCP. The gateway snapshots this catalog at deploy, serves
+ * MCP clients from the snapshot, and calls a tool over the internal tools
+ * contract (../internal/tools.ts) with a verified `chan: "mcp"` identity.
+ *
+ * `input` and `output` accept any validator implementing Standard Schema and
+ * Standard JSON Schema (zod >= 4.2 does both), or a plain
+ * `{ jsonSchema, validate }` pair. The SDK itself takes no dependency.
+ */
+import { type EveryAppUser, type ToolCallResultV1, type ToolDescriptorV1, type ToolIssueV1, type ToolRisk } from "../internal/index.js";
+import type { ExecutionContextLike } from "./everyApp.js";
+/** Reported with every catalog; must match package.json. */
+export declare const SDK_VERSION = "0.3.0";
+/**
+ * Throw from a tool handler to return an error the model can read and act on
+ * ("No todo with that id"). Any other error is logged here and reaches the
+ * client only as "Internal error in <app> (ref <call id>)".
+ */
+export declare class ToolError extends Error {
+    constructor(message: string);
+}
+type StandardPathSegment = PropertyKey | {
+    readonly key: PropertyKey;
+};
+interface StandardIssue {
+    readonly message: string;
+    readonly path?: ReadonlyArray<StandardPathSegment> | undefined;
+}
+type StandardResult<Output> = {
+    readonly value: Output;
+    readonly issues?: undefined;
+} | {
+    readonly issues: ReadonlyArray<StandardIssue>;
+};
+interface StandardSchemaProps<Input, Output> {
+    readonly version: 1;
+    readonly vendor: string;
+    readonly validate: (value: unknown, options?: {
+        readonly libraryOptions?: Record<string, unknown>;
+    }) => StandardResult<Output> | Promise<StandardResult<Output>>;
+    readonly types?: {
+        readonly input: Input;
+        readonly output: Output;
+    } | undefined;
+}
+interface StandardJsonSchemaConverter {
+    readonly input: (options: {
+        readonly target: string;
+    }) => Record<string, unknown>;
+    readonly output: (options: {
+        readonly target: string;
+    }) => Record<string, unknown>;
+}
+/** A Standard Schema validator that also converts to JSON Schema (zod >= 4.2). */
+export interface StandardSchemaWithJSON<Input = unknown, Output = Input> {
+    readonly "~standard": StandardSchemaProps<Input, Output> & {
+        readonly jsonSchema: StandardJsonSchemaConverter;
+    };
+}
+/** For validators without Standard JSON Schema: supply the JSON Schema too. */
+export interface PlainToolSchema<Output = unknown> {
+    jsonSchema: Record<string, unknown>;
+    validate(value: unknown): StandardResult<Output> | Promise<StandardResult<Output>>;
+}
+export type ToolSchema<Output = unknown> = StandardSchemaWithJSON<unknown, Output> | PlainToolSchema<Output>;
+/** What a tool handler receives besides its validated input. */
+export interface ToolContext<TEnv = Cloudflare.Env> {
+    /** The verified caller. `channel` is "mcp"; `toolCall` names this call. */
+    user: EveryAppUser;
+    env: TEnv;
+    ctx: ExecutionContextLike;
+    request: Request;
+    /** Unique id of this call; also the ref in masked error messages. */
+    callId: string;
+}
+export interface ToolDefinition<TInput = unknown> {
+    /** Short human-readable name clients may show. */
+    title?: string;
+    /** What the tool does and when to use it. The model reads this. */
+    description: string;
+    /**
+     * `read` changes nothing. `write` creates or changes data. `destructive`
+     * deletes or irreversibly changes data; AI clients can't see or call
+     * destructive tools until approvals exist.
+     */
+    risk: ToolRisk;
+    /** Arguments schema; must describe an object. */
+    input: ToolSchema<TInput>;
+    /**
+     * Result schema; must describe an object. The result is validated and
+     * also sent as MCP structured content.
+     */
+    output?: ToolSchema;
+    /** Repeating a call with the same arguments has no further effect. */
+    idempotent?: boolean;
+    /** The tool reaches systems outside this app (other APIs, the web). */
+    openWorld?: boolean;
+    /**
+     * Return a string (sent as text), a JSON-serializable value (sent as a
+     * JSON text block), or {@link toolResult} for text and data together.
+     * Throw {@link ToolError} for errors the model may see.
+     */
+    handler: (input: TInput, context: ToolContext) => unknown;
+}
+declare const TOOL_RESULT: unique symbol;
+/** What {@link toolResult} returns; a handler returns it as is. */
+export interface ToolResult {
+    readonly [TOOL_RESULT]: true;
+    readonly text: string;
+    readonly structured: Record<string, unknown>;
+}
+/**
+ * Return a written result and the same result as data. The model reads
+ * `text` (a summary, a table); clients also get `structured`, checked
+ * against the tool's `output` schema. Without this, a tool with an `output`
+ * schema sends its value as JSON text.
+ */
+export declare function toolResult(result: {
+    text: string;
+    structured: Record<string, unknown>;
+}): ToolResult;
+export interface DefineToolsOptions {
+    /** Guidance for the model that spans this app's tools (at most 2 KB). */
+    instructions?: string;
+}
+/** Returned by {@link defineTools}; pass it to `everyApp(…, { tools })`. */
+export interface ToolSet {
+    /** Tool names, sorted. */
+    readonly names: readonly string[];
+}
+export interface ToolCatalog {
+    instructions?: string;
+    tools: ToolDescriptorV1[];
+    hash: string;
+    /** Tools left out because they can't be described, and why. */
+    warnings: string[];
+}
+interface ToolSetInternals {
+    tool(name: string): ToolDefinition | undefined;
+    /** Descriptors and hash, computed once per isolate. */
+    catalog(): Promise<ToolCatalog>;
+}
+/** @internal The everyApp() side of a tool set. */
+export declare function toolSetInternals(toolSet: ToolSet): ToolSetInternals;
+/**
+ * Define an app's agent tools. Names are lowercase snake_case (at most 48
+ * characters); the gateway prefixes them with the app id where several apps
+ * share one MCP endpoint. Handler inputs are typed from each `input` schema.
+ */
+export declare function defineTools<TInputs extends Record<string, unknown>>(tools: {
+    [K in keyof TInputs]: ToolDefinition<TInputs[K]>;
+}, options?: DefineToolsOptions): ToolSet;
+export type ValidationOutcome<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    issues: ToolIssueV1[];
+};
+/** Run a tool schema's validator. */
+export declare function validateWithSchema<T>(schema: ToolSchema<T>, value: unknown): Promise<ValidationOutcome<T>>;
+/**
+ * Turn a handler's return value into a tool result. With an output schema,
+ * the value must validate and is sent as structured content as well as text.
+ */
+export declare function toToolResult(definition: ToolDefinition, value: unknown): Promise<ToolCallResultV1>;
+export {};
+//# sourceMappingURL=tools.d.ts.map

package/dist/server/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/server/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,4DAA4D;AAC5D,eAAO,MAAM,WAAW,UAAU,CAAC;AASnC;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAID,KAAK,mBAAmB,GAAG,WAAW,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvE,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;CAChE;AAED,KAAK,cAAc,CAAC,MAAM,IACtB;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;CAAE,CAAC;AAEtD,UAAU,mBAAmB,CAAC,KAAK,EAAE,MAAM;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,CAAC,EACX;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAClD,SAAS,CAAC;CACf;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kFAAkF;AAClF,MAAM,WAAW,sBAAsB,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,KAAK;IACrE,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG;QACzD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;KAClD,CAAC;CACH;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,OAAO;IAC/C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,CACN,KAAK,EAAE,OAAO,GACb,cAAc,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;CAC7D;AAED,MAAM,MAAM,UAAU,CAAC,MAAM,GAAG,OAAO,IACnC,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,GACvC,eAAe,CAAC,MAAM,CAAC,CAAC;AAE5B,gEAAgE;AAChE,MAAM,WAAW,WAAW,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG;IAChD,2EAA2E;IAC3E,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,oBAAoB,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,OAAO;IAC9C,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf,iDAAiD;IACjD,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC;CAC3D;AAED,QAAA,MAAM,WAAW,eAAoC,CAAC;AAEtD,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,GAAG,UAAU,CAMb;AAQD,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,4EAA4E;AAC5E,MAAM,WAAW,OAAO;IACtB,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,UAAU,gBAAgB;IACxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC/C,uDAAuD;IACvD,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;CACjC;AAID,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAMnE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,KAAK,EAAE;KAAG,CAAC,IAAI,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAAE,EAC3D,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CA+BT;AA+ND,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAEzC,qCAAqC;AACrC,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EACrB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAQ/B;AAiBD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,gBAAgB,CAAC,CAuC3B"}