@frontmcp/adapters 1.11.0-rc.2 → 1.11.1-rc.1

package/skills/sources/saas-pull.source.d.ts

@@ -1,7 +1,7 @@
 import type { FrontMcpLogger } from '@frontmcp/sdk';
 import type { ResolvedBundle } from '../bundle/bundle.types';
 import type { SaasSourceOptions } from '../source-options';
-import type { BundleSourceDeps, BundleSourceListener, SkillBundleSource } from './skill-bundle-source.interface';
+import type { BundlePushReceiver, BundleSourceDeps, BundleSourceListener, SkillBundleSource } from './skill-bundle-source.interface';
 /**
  * The pinned pull token failed verification against `jwksUrl`, `expectedIssuer`
  * or `expectedAudience`. Unlike an outage, this never falls back to a cached
@@ -10,6 +10,14 @@ import type { BundleSourceDeps, BundleSourceListener, SkillBundleSource } from '
 export declare class SaasPullTokenRejectedError extends Error {
     constructor(reason: string);
 }
+/**
+ * The token of a pushed bundle was refused: it fails the checks the pull token passes (`invalid-token`), or a push
+ * already used it (`replayed`). The pushed bundle is not applied.
+ */
+export declare class SaasPushRefusedError extends Error {
+    readonly refusal: 'invalid-token' | 'replayed';
+    constructor(refusal: 'invalid-token' | 'replayed', reason: string);
+}
 /**
  * Pulls bundles from a configured SaaS endpoint via authenticated HTTPS.
  *
@@ -17,13 +25,16 @@ export declare class SaasPullTokenRejectedError extends Error {
  *   - Always attempts a fresh pull on `start()`.
  *   - If the pull fails AND a cached bundle exists on disk, falls back to it
  *     and emits a warning. This prevents a SaaS outage at boot from killing
- *     the customer's MCP server.
- *   - If both pull and cache fail, `start()` throws.
+ *     the customer's MCP server. The cache holds the last bundle the plugin
+ *     applied ({@link SaasPullSource.keepBundle}): a pulled bundle that fails
+ *     its signature or apply never replaces it.
+ *   - If both pull and cache fail, `start()` throws. Polling still starts, so a
+ *     later pull that succeeds loads the bundle.
  *
  * Refresh: poll on `pollIntervalMs`. Single-flight per source — overlapping
- * polls are skipped, never queued. Webhook support is gated behind
- * `enableWebhook` and deferred to v1.2.x (route mounting requires plugin HTTP
- * infrastructure not yet in scope).
+ * polls are skipped, never queued. With `enableWebhook` the source also takes
+ * pushed bundles ({@link SaasPullSource.verifyPushToken}): the plugin serves
+ * them at `POST /__skilled_openapi/push`.
  *
  * Before every pull the pinned `authToken` is verified: it must be a JWT signed
  * by a key in the issuer's JWKS (`jwksUrl`), with `iss` equal to
@@ -36,7 +47,7 @@ export declare class SaasPullTokenRejectedError extends Error {
  * NOTE: Bundle signature verification is applied by the bundle-sync service
  * before the bundle becomes active.
  */
-export declare class SaasPullSource implements SkillBundleSource {
+export declare class SaasPullSource implements SkillBundleSource, BundlePushReceiver {
     private readonly options;
     private readonly cacheDir;
     private readonly logger;
@@ -44,20 +55,39 @@ export declare class SaasPullSource implements SkillBundleSource {
     readonly id: string;
     private listeners;
     private pollHandle;
-    private inFlight;
+    /** The pull running now, from start, a poll or a refresh; only one runs at a time. */
+    private inFlightPull;
     private stopped;
     private readonly jwksService;
+    private readonly replayGuard?;
+    private pushSigningKeys?;
+    private pushSigningKeysLoading?;
     constructor(options: SaasSourceOptions, cacheDir: string | undefined, logger: FrontMcpLogger, deps?: BundleSourceDeps);
+    /** This source, when `enableWebhook` is on: it then takes bundles pushed to the server. */
+    get push(): BundlePushReceiver | undefined;
+    /**
+     * Check the token of a pushed bundle: by the rules the pull token passes (a key in `jwksUrl`, `iss`, `aud`,
+     * `resource`, expiry), then by the replay guard, so its `iat` must be within five minutes and its `jti` unused.
+     * Throws {@link SaasPushRefusedError}, or a plain Error when the JWKS can't be read.
+     */
+    verifyPushToken(token: string): Promise<void>;
+    /** Keep a bundle the plugin applied, pulled or pushed, as the last good one a start falls back to. */
+    keepBundle(bundle: ResolvedBundle): Promise<void>;
     start(): Promise<void>;
+    private pullAtStart;
+    /** Run `pull` as the one pull in flight, so a start, a poll and a refresh never pull at once. */
+    private exclusivePull;
     onChange(listener: BundleSourceListener): () => void;
     stop(): Promise<void>;
     private schedulePoll;
     /**
-     * Manually pull a fresh bundle, persist it, and notify listeners. Drive this
+     * Manually pull a fresh bundle and notify listeners, resolving once they are
+     * done with it (the plugin applied and kept it, or refused it). Drive this
      * from a Cron Trigger / Durable Object alarm on runtimes without background
-     * timers (where `disablePolling` is set). Single-flight: returns `undefined`
-     * if a pull is already in flight; throws if the pull itself fails (the caller
-     * — e.g. a scheduled handler — decides how to surface it).
+     * timers (where `disablePolling` is set). Single-flight: while a pull is
+     * already in flight it waits for that pull to finish, applied and kept, and
+     * returns `undefined` without pulling again; throws if its own pull fails (the
+     * caller — e.g. a scheduled handler — decides how to surface it).
      */
     refresh(): Promise<ResolvedBundle | undefined>;
     private pollOnce;
@@ -71,6 +101,14 @@ export declare class SaasPullSource implements SkillBundleSource {
      * plain Error when the JWKS can't be fetched (an outage).
      */
     private verifyPullToken;
+    /**
+     * The issuer's signing keys for checking a push token: fetched at most once a minute, and shared by concurrent
+     * pushes. A pull always fetches them, so a key the issuer removed stops a pull at once.
+     */
+    private signingKeysForPush;
+    private fetchSigningKeys;
+    /** Check a token the issuer signed, against its JWKS, issuer and audience. */
+    private verifyIssuedToken;
     private fetchOnce;
     /** Where the last-good bundle is kept, for messages: an injected store (a Worker's KV) has no file path. */
     private cacheLocation;

package/skills/sources/saas-pull.source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"saas-pull.source.d.ts","sourceRoot":"","sources":["../../../src/skills/sources/saas-pull.source.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAMjH;;;;GAIG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,MAAM,EAAE,MAAM;CAI3B;AA4BD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,cAAe,YAAW,iBAAiB;IAUpD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAZvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;gBAGhC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,gBAAqB;IAKxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwC5B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAO9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,OAAO,CAAC,YAAY;IAcpB;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;YAatC,QAAQ;cAyBN,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAoBhH;;;;OAIG;YACW,eAAe;YA2Cf,SAAS;IAkBvB,4GAA4G;IAC5G,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,SAAS;YAKH,YAAY;YAeZ,SAAS;IAkBvB,OAAO,CAAC,MAAM;CASf"}
+{"version":3,"file":"saas-pull.source.d.ts","sourceRoot":"","sources":["../../../src/skills/sources/saas-pull.source.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAG7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EAClB,MAAM,iCAAiC,CAAC;AASzC;;;;GAIG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,MAAM,EAAE,MAAM;CAI3B;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,UAAU;gBAArC,OAAO,EAAE,eAAe,GAAG,UAAU,EAC9C,MAAM,EAAE,MAAM;CAKjB;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,cAAe,YAAW,iBAAiB,EAAE,kBAAkB;IAcxE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAhBvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,UAAU,CAA6B;IAC/C,sFAAsF;IACtF,OAAO,CAAC,YAAY,CAA+B;IACnD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAqB;IAClD,OAAO,CAAC,eAAe,CAAC,CAAyC;IACjE,OAAO,CAAC,sBAAsB,CAAC,CAAqB;gBAGjC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,gBAAqB;IAM9C,2FAA2F;IAC3F,IAAI,IAAI,IAAI,kBAAkB,GAAG,SAAS,CAEzC;IAED;;;;OAIG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBnD,sGAAsG;IACtG,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAcd,WAAW;IAsBzB,iGAAiG;IACjG,OAAO,CAAC,aAAa;IAQrB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAO9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,OAAO,CAAC,YAAY;IAcpB;;;;;;;;OAQG;IACG,OAAO,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;YAatC,QAAQ;cAwBN,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAoBhH;;;;OAIG;YACW,eAAe;IAK7B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;YAcZ,gBAAgB;IA0B9B,8EAA8E;YAChE,iBAAiB;YAuBjB,SAAS;IAkBvB,4GAA4G;IAC5G,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,SAAS;YAKH,YAAY;YAeZ,SAAS;YAkBT,MAAM;CASrB"}

package/skills/sources/skill-bundle-source.interface.d.ts

@@ -8,12 +8,15 @@ import type { ResolvedBundle } from '../bundle/bundle.types';
  *     its initial fetch and begins any background polling/watching.
  *   - `onChange()` registers a listener invoked every time a new bundle is
  *     available (initial fetch + every refresh).
+ *   - `keepBundle()`, on a source with a last-good cache, keeps a bundle once
+ *     the plugin has applied it.
  *   - `stop()` halts all background work and releases resources.
  *
  * Sources are responsible for parsing/validating their input into a
  * ResolvedBundle (typically by calling `parseOverlay` from bundle/overlay-parser).
  * They MUST NOT verify signatures themselves — the bundle-sync service applies
- * the signature gate before swapping the bundle into the registry.
+ * the signature gate before swapping the bundle into the registry. For the same
+ * reason they never cache a bundle they fetched until they are asked to keep it.
  */
 export interface SkillBundleSource {
     /** Stable id of this source (e.g. 'static:/path/to/bundle.yaml'). */
@@ -35,14 +38,28 @@ export interface SkillBundleSource {
      * remote/pulling sources implement it. On runtimes with no background
      * execution (Cloudflare Workers) a Cron Trigger / Durable Object alarm
      * calls this instead of relying on an internal timer. Resolves to the new
-     * bundle, or `undefined` if a pull is already in flight / the source is
-     * stopped.
+     * bundle once its listeners are done with it (the plugin has applied it, or
+     * refused it), or to `undefined` if a pull is already in flight / the source
+     * is stopped.
      */
     refresh?(): Promise<ResolvedBundle | undefined>;
+    /**
+     * Keep a bundle the plugin applied as the last good one, which a start that can't fetch falls back to. Present on
+     * a source with a last-good cache: the `saas` source.
+     */
+    keepBundle?(bundle: ResolvedBundle): Promise<void>;
+    /** Present on a source that takes pushed bundles: the `saas` source with `enableWebhook`. */
+    readonly push?: BundlePushReceiver;
     /** Halt background work; idempotent. */
     stop(): Promise<void>;
 }
-export type BundleSourceListener = (bundle: ResolvedBundle) => void;
+/** The check a pushed bundle's token passes before the bundle is applied. */
+export interface BundlePushReceiver {
+    /** Resolves when the push token is accepted; throws when it is refused or can't be checked. */
+    verifyPushToken(token: string): Promise<void>;
+}
+/** Takes each new bundle; a pulling source waits for a promise it returns before its pull counts as done. */
+export type BundleSourceListener = (bundle: ResolvedBundle) => unknown;
 /**
  * Pluggable last-good bundle cache. The default (Node) implementation writes to
  * disk; V8-isolate runtimes (Cloudflare Workers) inject a KV-backed store

package/skills/sources/skill-bundle-source.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-bundle-source.interface.d.ts","sourceRoot":"","sources":["../../../src/skills/sources/skill-bundle-source.interface.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI,CAAC;IAErD;;;;;;;;OAQG;IACH,OAAO,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAEhD,wCAAwC;IACxC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC5C,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B"}
+{"version":3,"file":"skill-bundle-source.interface.d.ts","sourceRoot":"","sources":["../../../src/skills/sources/skill-bundle-source.interface.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI,CAAC;IAErD;;;;;;;;;OASG;IACH,OAAO,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAEhD;;;OAGG;IACH,UAAU,CAAC,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,6FAA6F;IAC7F,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAEnC,wCAAwC;IACxC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,+FAA+F;IAC/F,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,6GAA6G;AAC7G,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC;AAEvE;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC5C,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B"}

package/skills/sources/static.source.d.ts

@@ -3,7 +3,9 @@ import type { StaticSourceOptions } from '../source-options';
 import type { BundleSourceListener, SkillBundleSource } from './skill-bundle-source.interface';
 /**
  * Loads a bundle from a local file (YAML or JSON). Optionally watches the
- * file for changes via `fs.watch` and re-fetches on edit.
+ * file for changes via `fs.watch` and re-fetches on edit. The watch starts
+ * before the first read, so fixing a file that failed to load reloads it. A
+ * refresh that reads the same content as the last read applies nothing.
  *
  * Bundle file extensions:
  *   - `.yaml` / `.yml` — parsed as YAML
@@ -18,11 +20,13 @@ export declare class StaticSource implements SkillBundleSource {
     private watcher;
     private debounceTimer;
     private stopped;
+    private lastContent;
     constructor(options: StaticSourceOptions, logger: FrontMcpLogger);
     start(): Promise<void>;
     onChange(listener: BundleSourceListener): () => void;
     stop(): Promise<void>;
-    private fetchOnce;
+    private readBundleFile;
+    private parse;
     private notify;
     private beginWatch;
     private scheduleRefresh;

package/skills/sources/static.source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"static.source.d.ts","sourceRoot":"","sources":["../../../src/skills/sources/static.source.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAE/F;;;;;;;;GAQG;AACH,qBAAa,YAAa,YAAW,iBAAiB;IASlD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IATzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,OAAO,CAAgC;IAC/C,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,OAAO,CAAS;gBAGL,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,cAAc;IAKnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAO9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAab,SAAS;IAoBvB,OAAO,CAAC,MAAM;IAUd,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,eAAe;CAaxB"}
+{"version":3,"file":"static.source.d.ts","sourceRoot":"","sources":["../../../src/skills/sources/static.source.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAKpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAE/F;;;;;;;;;;GAUG;AACH,qBAAa,YAAa,YAAW,iBAAiB;IAUlD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAVzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,OAAO,CAAgC;IAC/C,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAqB;gBAGrB,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,cAAc;IAKnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAO9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAa3B,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,KAAK;IAkBb,OAAO,CAAC,MAAM;IAUd,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,eAAe;CAexB"}