@harperfast/harper 5.0.25 → 5.1.0-beta.1

package/dist/components/mcp/transport.js

@@ -0,0 +1,467 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleMcpRequest = handleMcpRequest;
+/**
+ * MCP Streamable HTTP transport core — framework-agnostic.
+ *
+ * Takes a normalized request (method, headers, body, authenticated user,
+ * profile) and returns a normalized response (status, headers, optional
+ * JSON body or SSE iterable). The Fastify adapter (operations port) and
+ * Harper-HTTP adapter (application port) each translate to/from this shape.
+ *
+ * All spec MUSTs from MCP §basic/transports (rev 2025-06-18) live here:
+ *   - Origin validation
+ *   - Mcp-Session-Id lifecycle
+ *   - MCP-Protocol-Version enforcement
+ *   - HTTP status code mapping (200/202/400/403/404/405)
+ *   - JSON-RPC envelope parsing + standard error codes
+ */
+const env = __importStar(require("../../utility/environment/environmentManager.js"));
+const hdbTerms_ts_1 = require("../../utility/hdbTerms.js");
+const harper_logger_ts_1 = __importDefault(require("../../utility/logging/harper_logger.js"));
+const jsonrpc_ts_1 = require("./jsonrpc.js");
+const lifecycle_ts_1 = require("./lifecycle.js");
+const audit_ts_1 = require("./audit.js");
+const listChanged_ts_1 = require("./listChanged.js");
+const rateLimit_ts_1 = require("./rateLimit.js");
+const session_ts_1 = require("./session.js");
+const resources_ts_1 = require("./resources.js");
+const sessionRegistry_ts_1 = require("./sessionRegistry.js");
+const toolRegistry_ts_1 = require("./toolRegistry.js");
+const SESSION_HEADER = 'mcp-session-id';
+const PROTOCOL_HEADER = 'mcp-protocol-version';
+const ORIGIN_HEADER = 'origin';
+/**
+ * Main entry. Adapters call this and map the returned shape to their
+ * native wire format. Any unhandled error from a downstream call (e.g., a
+ * RocksDB I/O failure on the session table) is caught and reported as a
+ * spec-conformant JSON-RPC Internal Error so clients see a structured
+ * error envelope instead of an opaque framework 500.
+ */
+async function handleMcpRequest(request) {
+    try {
+        if (!isOriginAllowed(request)) {
+            return jsonResponse(403, { error: 'origin_not_allowed' });
+        }
+        if (request.method === 'POST')
+            return await handlePost(request);
+        if (request.method === 'GET')
+            return await handleGet(request);
+        if (request.method === 'DELETE')
+            return await handleDelete(request);
+        return { status: 405, headers: { Allow: currentlyAllowedMethods() } };
+    }
+    catch (err) {
+        harper_logger_ts_1.default.error(`MCP transport internal error: ${err.stack ?? err.message}`);
+        return jsonRpcErrorResponse(500, null, jsonrpc_ts_1.ERROR_CODES.INTERNAL_ERROR, 'internal error');
+    }
+}
+/**
+ * Per-profile Origin validation. Mirrors Harper's existing auth.ts pattern
+ * (security/auth.ts:65) for parity with how the operations + HTTP ports
+ * already handle CORS:
+ *   - CORS disabled in config ⇒ accept any Origin (don't gate on it at all).
+ *   - CORS enabled with empty/unset allow-list ⇒ accept any.
+ *   - CORS enabled with allow-list ⇒ match exactly OR honor a `'*'` wildcard.
+ *   - Missing Origin header ⇒ accept (curl, server-to-server, no DNS-rebinding
+ *     vector exists when the request isn't browser-initiated).
+ */
+function isOriginAllowed(request) {
+    const origin = request.headers[ORIGIN_HEADER];
+    if (!origin)
+        return true;
+    const corsEnabled = request.profile === 'operations'
+        ? env.get(hdbTerms_ts_1.CONFIG_PARAMS.OPERATIONSAPI_NETWORK_CORS)
+        : env.get(hdbTerms_ts_1.CONFIG_PARAMS.HTTP_CORS);
+    if (!corsEnabled)
+        return true;
+    const list = request.profile === 'operations'
+        ? env.get(hdbTerms_ts_1.CONFIG_PARAMS.OPERATIONSAPI_NETWORK_CORSACCESSLIST)
+        : env.get(hdbTerms_ts_1.CONFIG_PARAMS.HTTP_CORSACCESSLIST);
+    if (!Array.isArray(list) || list.length === 0)
+        return true;
+    return list.includes(origin) || list.includes('*');
+}
+async function handlePost(request) {
+    const parsed = (0, jsonrpc_ts_1.parseMessage)(request.body);
+    if (parsed.ok !== true) {
+        // Explicit cast: tsconfig has `strict: false`, so TS can't narrow
+        // discriminated unions from `parsed.ok !== true`. Without the cast it
+        // errors TS2339 on `parsed.code` / `parsed.reason`. (Verified during
+        // review; the alternative — enabling strict mode — is repo-wide.)
+        const fail = parsed;
+        return jsonRpcErrorResponse(400, null, fail.code, fail.reason);
+    }
+    const message = parsed.message;
+    const messageId = 'id' in message ? message.id : null;
+    const method = 'method' in message ? message.method : undefined;
+    if (method === 'initialize')
+        return dispatchInitialize(request, message, messageId);
+    const sessionId = request.headers[SESSION_HEADER];
+    if (!sessionId) {
+        return jsonRpcErrorResponse(400, messageId, jsonrpc_ts_1.ERROR_CODES.INVALID_REQUEST, 'missing Mcp-Session-Id header');
+    }
+    const session = await (0, session_ts_1.loadSession)(sessionId);
+    if (!session) {
+        // Terminated, expired, or never existed. Spec mandates 404 so the
+        // client knows to drop the id and re-initialize.
+        return { status: 404, headers: {} };
+    }
+    const protocolCheck = validateProtocolHeader(request.headers[PROTOCOL_HEADER], session.protocolVersion);
+    if (protocolCheck.ok !== true) {
+        const fail = protocolCheck;
+        return jsonRpcErrorResponse(400, messageId, jsonrpc_ts_1.ERROR_CODES.INVALID_REQUEST, fail.reason);
+    }
+    if (session.user !== request.user) {
+        // Defense-in-depth against session-id leaks: id was created for a
+        // different user. Mask the session id in logs — even though it's not
+        // a credential in MCP, leaking it to an attacker with log access would
+        // enable session-jacking once paired with a valid token.
+        harper_logger_ts_1.default.warn(`MCP session ${maskSessionId(sessionId)} presented by user ${request.user} but bound to ${session.user}`);
+        return { status: 403, headers: {} };
+    }
+    // Sliding-window idle reset. Awaited (not fire-and-forget) so a concurrent
+    // DELETE that arrives mid-request can't be resurrected by a late put.
+    await (0, session_ts_1.touchSession)(session);
+    // Fire-and-forget frames (notifications + client responses) always 202.
+    if ((0, jsonrpc_ts_1.isClientFireAndForget)(message)) {
+        if (method === 'notifications/initialized') {
+            await (0, lifecycle_ts_1.handleInitialized)(session);
+        }
+        return { status: 202, headers: {} };
+    }
+    // Request with id + method (and not 'initialize'): route to the known
+    // method handlers below. Anything we don't handle yet returns a
+    // spec-conformant Method-not-found error.
+    if (method === 'tools/list')
+        return dispatchToolsList(request, session, message, messageId);
+    if (method === 'tools/call')
+        return dispatchToolsCall(request, session, message, messageId);
+    if (method === 'resources/list')
+        return dispatchResourcesList(request, message, messageId);
+    if (method === 'resources/templates/list')
+        return dispatchResourceTemplatesList(request, messageId);
+    if (method === 'resources/read')
+        return dispatchResourcesRead(request, message, messageId);
+    return jsonResponse(200, (0, jsonrpc_ts_1.buildError)(messageId, jsonrpc_ts_1.ERROR_CODES.METHOD_NOT_FOUND, `Method not found: ${method ?? '<missing>'}`));
+}
+async function dispatchInitialize(request, message, messageId) {
+    const params = 'params' in message ? message.params : undefined;
+    const outcome = await (0, lifecycle_ts_1.handleInitialize)(params, request.user);
+    if (outcome.ok !== true) {
+        const fail = outcome;
+        return jsonRpcErrorResponse(400, messageId, jsonrpc_ts_1.ERROR_CODES.INVALID_PARAMS, fail.reason, {
+            supportedVersions: fail.supportedVersions,
+        });
+    }
+    return {
+        status: 200,
+        headers: { 'Mcp-Session-Id': outcome.session.id },
+        jsonBody: (0, jsonrpc_ts_1.buildSuccess)(messageId, outcome.result),
+    };
+}
+async function handleGet(request) {
+    // Server-push channel for `notifications/{tools,resources}/list_changed`
+    // (#619). The client opens GET /mcp after `initialize`; we keep the SSE
+    // connection alive for the lifetime of the session and push frames as
+    // role/schema events fire. Per the spec, idle sessions get HTTP 404 on
+    // the next POST after eviction — the GET stream itself just closes when
+    // the session record is deleted (via unregisterSession).
+    const sessionId = request.headers[SESSION_HEADER];
+    if (!sessionId) {
+        return { status: 400, headers: {} };
+    }
+    const session = await (0, session_ts_1.loadSession)(sessionId);
+    if (!session) {
+        return { status: 404, headers: {} };
+    }
+    if (session.user !== request.user) {
+        return { status: 403, headers: {} };
+    }
+    const protocolCheck = validateProtocolHeader(request.headers[PROTOCOL_HEADER], session.protocolVersion);
+    if (protocolCheck.ok !== true) {
+        const fail = protocolCheck;
+        return {
+            status: 400,
+            headers: {},
+            jsonBody: { error: { message: fail.reason } },
+        };
+    }
+    const record = (0, sessionRegistry_ts_1.registerSession)(sessionId, request.profile, effectiveUser(request));
+    (0, listChanged_ts_1.seedSessionSnapshot)(sessionId);
+    return {
+        status: 200,
+        headers: { 'Content-Type': 'text/event-stream', 'Cache-Control': 'no-store' },
+        sseIterable: record.queue,
+    };
+}
+const DEFAULT_MAX_TOOLS = 200;
+const DEFAULT_RESOURCE_PAGE_LIMIT = 200;
+function profileMaxTools(profile) {
+    const key = profile === 'operations' ? hdbTerms_ts_1.CONFIG_PARAMS.MCP_OPERATIONS_MAXTOOLS : hdbTerms_ts_1.CONFIG_PARAMS.MCP_APPLICATION_MAXTOOLS;
+    const value = env.get(key);
+    return typeof value === 'number' && value > 0 ? value : DEFAULT_MAX_TOOLS;
+}
+function effectiveUser(request) {
+    return request.userObject ?? { username: request.user };
+}
+function dispatchToolsList(request, session, message, messageId) {
+    const params = 'params' in message ? message.params : undefined;
+    const cursor = typeof params?.cursor === 'string' ? params.cursor : undefined;
+    const limit = profileMaxTools(request.profile);
+    const { tools, nextCursor } = (0, toolRegistry_ts_1.listTools)({
+        user: effectiveUser(request),
+        profile: request.profile,
+        sessionId: session.id,
+        cursor,
+        limit,
+    });
+    const result = { tools };
+    if (nextCursor)
+        result.nextCursor = nextCursor;
+    return jsonResponse(200, (0, jsonrpc_ts_1.buildSuccess)(messageId, result));
+}
+async function dispatchToolsCall(request, session, message, messageId) {
+    const params = 'params' in message ? message.params : undefined;
+    const name = typeof params?.name === 'string' ? params.name : undefined;
+    if (!name) {
+        return jsonResponse(200, (0, jsonrpc_ts_1.buildError)(messageId, jsonrpc_ts_1.ERROR_CODES.INVALID_PARAMS, 'tools/call requires params.name'));
+    }
+    const tool = (0, toolRegistry_ts_1.getTool)(name);
+    if (!tool || tool.profile !== request.profile) {
+        return jsonResponse(200, (0, jsonrpc_ts_1.buildError)(messageId, jsonrpc_ts_1.ERROR_CODES.METHOD_NOT_FOUND, `Unknown tool: ${name}`));
+    }
+    const args = params?.arguments ?? {};
+    const callStartedAt = Date.now();
+    const user = effectiveUser(request);
+    // Keep the SSE registry's idle-prune from sweeping this session: tools/call
+    // activity counts as "alive" even if the GET stream is dormant between
+    // listChanged events.
+    (0, sessionRegistry_ts_1.touchRegisteredSession)(session.id);
+    // Rate limit check — admit-or-deny BEFORE invoking the handler. Failures
+    // surface as `isError: true` with `kind: 'rate_limited'` (NOT a JSON-RPC
+    // error) so the LLM sees and can back off / try later.
+    const decision = (0, rateLimit_ts_1.tryAdmit)(session.id, name, request.profile);
+    if (!decision.allowed) {
+        // Non-strict tsconfig doesn't narrow the discriminated union here.
+        const denied = decision;
+        const toolResult = {
+            isError: true,
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        kind: 'rate_limited',
+                        scope: denied.reason,
+                        tool: name,
+                        message: `MCP ${denied.reason} rate limit reached; back off and try again`,
+                    }),
+                },
+            ],
+        };
+        (0, audit_ts_1.emitAuditEntry)({
+            timestamp: new Date(callStartedAt).toISOString(),
+            profile: request.profile,
+            sessionId: session.id,
+            tool: name,
+            user: user.username ?? request.user,
+            args: args,
+            status: 'rate_limited',
+            durationMs: 0,
+        });
+        return jsonResponse(200, (0, jsonrpc_ts_1.buildSuccess)(messageId, toolResult));
+    }
+    let toolResult;
+    let status = 'ok';
+    let errorMessage;
+    try {
+        toolResult = await tool.handler(args, {
+            user,
+            profile: request.profile,
+            sessionId: session.id,
+        });
+        if (toolResult?.isError)
+            status = 'isError';
+    }
+    catch (err) {
+        // Per MCP §server/tools → Error Handling: tool-execution errors come
+        // back as a successful JSON-RPC result with isError:true so the LLM
+        // can see and adapt. Stack traces stay in the server log; only the
+        // message goes to the wire (Harper-style hygiene).
+        const errMsg = err.message ?? 'tool execution failed';
+        harper_logger_ts_1.default.warn(`MCP tools/call ${name} threw: ${err.stack ?? errMsg}`);
+        errorMessage = errMsg;
+        status = 'isError';
+        toolResult = {
+            isError: true,
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({ kind: 'harper_error', message: errMsg }),
+                },
+            ],
+        };
+    }
+    finally {
+        decision.release();
+    }
+    (0, audit_ts_1.emitAuditEntry)({
+        timestamp: new Date(callStartedAt).toISOString(),
+        profile: request.profile,
+        sessionId: session.id,
+        tool: name,
+        user: user.username ?? request.user,
+        args: args,
+        status,
+        durationMs: Date.now() - callStartedAt,
+        ...(errorMessage ? { errorMessage } : {}),
+    });
+    return jsonResponse(200, (0, jsonrpc_ts_1.buildSuccess)(messageId, toolResult));
+}
+function dispatchResourcesList(request, message, messageId) {
+    const params = 'params' in message ? message.params : undefined;
+    const cursor = typeof params?.cursor === 'string' ? params.cursor : undefined;
+    const result = (0, resources_ts_1.listResources)({
+        user: effectiveUser(request),
+        profile: request.profile,
+        cursor,
+        limit: DEFAULT_RESOURCE_PAGE_LIMIT,
+    });
+    const body = { resources: result.resources };
+    if (result.nextCursor)
+        body.nextCursor = result.nextCursor;
+    return jsonResponse(200, (0, jsonrpc_ts_1.buildSuccess)(messageId, body));
+}
+function dispatchResourceTemplatesList(request, messageId) {
+    const templates = (0, resources_ts_1.listResourceTemplates)(request.profile);
+    return jsonResponse(200, (0, jsonrpc_ts_1.buildSuccess)(messageId, { resourceTemplates: templates }));
+}
+async function dispatchResourcesRead(request, message, messageId) {
+    const params = 'params' in message ? message.params : undefined;
+    const uri = typeof params?.uri === 'string' ? params.uri : undefined;
+    if (!uri) {
+        return jsonResponse(200, (0, jsonrpc_ts_1.buildError)(messageId, jsonrpc_ts_1.ERROR_CODES.INVALID_PARAMS, 'resources/read requires params.uri'));
+    }
+    const outcome = await (0, resources_ts_1.readResource)({ uri, user: effectiveUser(request), profile: request.profile });
+    if (outcome.ok !== true) {
+        const fail = outcome;
+        // Per MCP §server/resources, "resource not found" and access-control
+        // failures are protocol errors, not isError tool results — resources/*
+        // returns JSON-RPC errors rather than success-with-isError. We pick
+        // -32602 (Invalid params) for bad inputs and -32601 (Method not found)
+        // for unknown resources, matching the spec's mapping for analogous
+        // situations and the precedent already in place for tools/call.
+        const code = /not found|no resource matches/.test(fail.reason)
+            ? jsonrpc_ts_1.ERROR_CODES.METHOD_NOT_FOUND
+            : jsonrpc_ts_1.ERROR_CODES.INVALID_PARAMS;
+        return jsonResponse(200, (0, jsonrpc_ts_1.buildError)(messageId, code, fail.reason));
+    }
+    return jsonResponse(200, (0, jsonrpc_ts_1.buildSuccess)(messageId, { contents: outcome.contents }));
+}
+async function handleDelete(request) {
+    const allow = env.get(hdbTerms_ts_1.CONFIG_PARAMS.MCP_SESSION_ALLOWCLIENTDELETE);
+    if (allow !== true) {
+        return { status: 405, headers: { Allow: currentlyAllowedMethods() } };
+    }
+    const sessionId = request.headers[SESSION_HEADER];
+    if (!sessionId) {
+        return { status: 400, headers: {} };
+    }
+    const session = await (0, session_ts_1.loadSession)(sessionId);
+    if (!session) {
+        return { status: 404, headers: {} };
+    }
+    if (session.user !== request.user) {
+        return { status: 403, headers: {} };
+    }
+    await (0, session_ts_1.deleteSession)(sessionId);
+    return { status: 204, headers: {} };
+}
+function validateProtocolHeader(headerValue, sessionVersion) {
+    // Per spec compatibility rule: missing header is treated as 2025-03-26.
+    const effective = headerValue ?? lifecycle_ts_1.PROTOCOL_VERSION_BACKCOMPAT;
+    if (!lifecycle_ts_1.SUPPORTED_PROTOCOL_VERSIONS.includes(effective)) {
+        return { ok: false, reason: `unsupported MCP-Protocol-Version: ${effective}` };
+    }
+    if (effective !== sessionVersion) {
+        return {
+            ok: false,
+            reason: `MCP-Protocol-Version mismatch: session negotiated ${sessionVersion}, request sent ${effective}`,
+        };
+    }
+    return { ok: true };
+}
+function jsonResponse(status, body) {
+    return {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+        jsonBody: body,
+    };
+}
+function jsonRpcErrorResponse(status, id, code, message, data) {
+    return {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+        jsonBody: (0, jsonrpc_ts_1.buildError)(id, code, message, data),
+    };
+}
+/**
+ * Mask an MCP session id for log output. Sessions aren't credentials in the
+ * strict sense, but a leaked id paired with a stolen token enables session
+ * jacking, so we don't print the full value in routine logs.
+ */
+function maskSessionId(id) {
+    if (id.length <= 8)
+        return '***';
+    return `${id.slice(0, 8)}…`;
+}
+/**
+ * Build the `Allow` header value for a 405 response. Per RFC 9110 §9.1 the
+ * server MUST list only currently-supported methods. In v1, POST is always
+ * supported; GET opens the server-push SSE channel for
+ * `notifications/{tools,resources}/list_changed`; DELETE is conditional on
+ * `mcp.session.allowClientDelete`.
+ */
+function currentlyAllowedMethods() {
+    const allow = ['POST', 'GET'];
+    if (env.get(hdbTerms_ts_1.CONFIG_PARAMS.MCP_SESSION_ALLOWCLIENTDELETE) === true)
+        allow.push('DELETE');
+    return allow.join(', ');
+}
+//# sourceMappingURL=transport.js.map

package/dist/components/mcp/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../components/mcp/transport.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoFA,4CAaC;AAjGD;;;;;;;;;;;;;;GAcG;AACH,qFAAuE;AACvE,2DAA0D;AAC1D,8FAAkE;AAClE,6CAQsB;AACtB,iDAKwB;AACxB,yCAA4C;AAC5C,qDAAuD;AACvD,iDAA0C;AAC1C,6CAA+F;AAC/F,iDAAoF;AACpF,6DAA+E;AAC/E,uDAAyF;AAkCzF,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B;;;;;;GAMG;AACI,KAAK,UAAU,gBAAgB,CAAC,OAAoB;IAC1D,IAAI,CAAC;QACJ,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,KAAK,CAAC,iCAAkC,GAAa,CAAC,KAAK,IAAK,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtG,OAAO,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,wBAAW,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACtF,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,OAAoB;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,WAAW,GAChB,OAAO,CAAC,OAAO,KAAK,YAAY;QAC/B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,0BAA0B,CAAC;QACnD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GACT,OAAO,CAAC,OAAO,KAAK,YAAY;QAC/B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,oCAAoC,CAAC;QAC7D,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,mBAAmB,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAoB;IAC7C,MAAM,MAAM,GAAG,IAAA,yBAAY,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACxB,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,IAAI,GAAG,MAAqD,CAAC;QACnE,OAAO,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,SAAS,GAAc,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAEhE,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAEpF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,wBAAW,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAA,wBAAW,EAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,kEAAkE;QAClE,iDAAiD;QACjD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxG,IAAI,aAAa,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,aAA8C,CAAC;QAC5D,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,wBAAW,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,kEAAkE;QAClE,qEAAqE;QACrE,uEAAuE;QACvE,yDAAyD;QACzD,0BAAY,CAAC,IAAI,CAChB,eAAe,aAAa,CAAC,SAAS,CAAC,sBAAsB,OAAO,CAAC,IAAI,iBAAiB,OAAO,CAAC,IAAI,EAAE,CACxG,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,IAAA,yBAAY,EAAC,OAAO,CAAC,CAAC;IAE5B,wEAAwE;IACxE,IAAI,IAAA,kCAAqB,EAAC,OAAO,CAAC,EAAE,CAAC;QACpC,IAAI,MAAM,KAAK,2BAA2B,EAAE,CAAC;YAC5C,MAAM,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,sEAAsE;IACtE,gEAAgE;IAChE,0CAA0C;IAC1C,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5F,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5F,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3F,IAAI,MAAM,KAAK,0BAA0B;QAAE,OAAO,6BAA6B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpG,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3F,OAAO,YAAY,CAClB,GAAG,EACH,IAAA,uBAAU,EAAC,SAAS,EAAE,wBAAW,CAAC,gBAAgB,EAAE,qBAAqB,MAAM,IAAI,WAAW,EAAE,CAAC,CACjG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAChC,OAAoB,EACpB,OAAuB,EACvB,SAAoB;IAEpB,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAE,OAAO,CAAC,MAAoD,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAgB,EAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,OAA8E,CAAC;QAC5F,OAAO,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,wBAAW,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE;YACpF,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SACzC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO;QACN,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE;QACjD,QAAQ,EAAE,IAAA,yBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC;KACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAoB;IAC5C,yEAAyE;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,wEAAwE;IACxE,yDAAyD;IACzD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAA,wBAAW,EAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxG,IAAI,aAAa,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,aAA8C,CAAC;QAC5D,OAAO;YACN,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;SAC7C,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,oCAAe,EAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,IAAA,oCAAmB,EAAC,SAAS,CAAC,CAAC;IAC/B,OAAO;QACN,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAE,UAAU,EAAE;QAC7E,WAAW,EAAE,MAAM,CAAC,KAAK;KACzB,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAExC,SAAS,eAAe,CAAC,OAAmB;IAC3C,MAAM,GAAG,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,2BAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,2BAAa,CAAC,wBAAwB,CAAC;IACtH,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,OAAoB;IAC1C,OAAO,OAAO,CAAC,UAAU,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,iBAAiB,CACzB,OAAoB,EACpB,OAAyB,EACzB,OAAuB,EACvB,SAAoB;IAEpB,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAE,OAAO,CAAC,MAA2C,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,MAAM,MAAM,GAAG,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAA,2BAAS,EAAC;QACvC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM;QACN,KAAK;KACL,CAAC,CAAC;IACH,MAAM,MAAM,GAA8C,EAAE,KAAK,EAAE,CAAC;IACpE,IAAI,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/C,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,yBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC/B,OAAoB,EACpB,OAAyB,EACzB,OAAuB,EACvB,SAAoB;IAEpB,MAAM,MAAM,GACX,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAE,OAAO,CAAC,MAA8D,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,MAAM,IAAI,GAAG,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,uBAAU,EAAC,SAAS,EAAE,wBAAW,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,yBAAO,EAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,uBAAU,EAAC,SAAS,EAAE,wBAAW,CAAC,gBAAgB,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,4EAA4E;IAC5E,uEAAuE;IACvE,sBAAsB;IACtB,IAAA,2CAAsB,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEnC,yEAAyE;IACzE,yEAAyE;IACzE,uDAAuD;IACvD,MAAM,QAAQ,GAAG,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,mEAAmE;QACnE,MAAM,MAAM,GAAG,QAA8C,CAAC;QAC9D,MAAM,UAAU,GAAe;YAC9B,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACpB,IAAI,EAAE,cAAc;wBACpB,KAAK,EAAE,MAAM,CAAC,MAAM;wBACpB,IAAI,EAAE,IAAI;wBACV,OAAO,EAAE,OAAO,MAAM,CAAC,MAAM,6CAA6C;qBAC1E,CAAC;iBACF;aACD;SACD,CAAC;QACF,IAAA,yBAAc,EAAC;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;YAChD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI;YACnC,IAAI,EAAE,IAAc;YACpB,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,yBAAY,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,UAAsB,CAAC;IAC3B,IAAI,MAAM,GAAqB,IAAI,CAAC;IACpC,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACrC,IAAI;YACJ,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,OAAO;YAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,qEAAqE;QACrE,oEAAoE;QACpE,mEAAmE;QACnE,mDAAmD;QACnD,MAAM,MAAM,GAAI,GAAa,CAAC,OAAO,IAAI,uBAAuB,CAAC;QACjE,0BAAY,CAAC,IAAI,CAAC,kBAAkB,IAAI,WAAY,GAAa,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;QACrF,YAAY,GAAG,MAAM,CAAC;QACtB,MAAM,GAAG,SAAS,CAAC;QACnB,UAAU,GAAG;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;iBAC/D;aACD;SACD,CAAC;IACH,CAAC;YAAS,CAAC;QACV,QAAQ,CAAC,OAAO,EAAE,CAAC;IACpB,CAAC;IACD,IAAA,yBAAc,EAAC;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;QAChD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI;QACnC,IAAI,EAAE,IAAc;QACpB,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa;QACtC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,yBAAY,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAoB,EAAE,OAAuB,EAAE,SAAoB;IACjG,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAE,OAAO,CAAC,MAA2C,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,MAAM,MAAM,GAAG,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAA,4BAAa,EAAC;QAC5B,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM;QACN,KAAK,EAAE,2BAA2B;KAClC,CAAC,CAAC;IACH,MAAM,IAAI,GAAkD,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5F,IAAI,MAAM,CAAC,UAAU;QAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC3D,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,yBAAY,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAoB,EAAE,SAAoB;IAChF,MAAM,SAAS,GAAG,IAAA,oCAAqB,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,yBAAY,EAAC,SAAS,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,OAAoB,EACpB,OAAuB,EACvB,SAAoB;IAEpB,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAE,OAAO,CAAC,MAAwC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnG,MAAM,GAAG,GAAG,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,uBAAU,EAAC,SAAS,EAAE,wBAAW,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAA,2BAAY,EAAC,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACpG,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,OAAwC,CAAC;QACtD,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,mEAAmE;QACnE,gEAAgE;QAChE,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7D,CAAC,CAAC,wBAAW,CAAC,gBAAgB;YAC9B,CAAC,CAAC,wBAAW,CAAC,cAAc,CAAC;QAC9B,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,uBAAU,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,YAAY,CAAC,GAAG,EAAE,IAAA,yBAAY,EAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAoB;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,6BAA6B,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAA,wBAAW,EAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,IAAA,0BAAa,EAAC,SAAS,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,sBAAsB,CAC9B,WAA+B,EAC/B,cAAsB;IAEtB,wEAAwE;IACxE,MAAM,SAAS,GAAG,WAAW,IAAI,0CAA2B,CAAC;IAC7D,IAAI,CAAC,0CAA2B,CAAC,QAAQ,CAAC,SAAyD,CAAC,EAAE,CAAC;QACtG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,SAAS,EAAE,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qDAAqD,cAAc,kBAAkB,SAAS,EAAE;SACxG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IAClD,OAAO;QACN,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,QAAQ,EAAE,IAAI;KACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC5B,MAAc,EACd,EAAa,EACb,IAAY,EACZ,OAAe,EACf,IAAc;IAEd,OAAO;QACN,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,QAAQ,EAAE,IAAA,uBAAU,EAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;KAC7C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,EAAU;IAChC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,uBAAuB;IAC/B,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,GAAG,CAAC,2BAAa,CAAC,6BAA6B,CAAC,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/components/ollama/index.d.ts

@@ -0,0 +1,46 @@
+import { ServerError } from '../../utility/errors/hdbError.ts';
+import type { BackendOpts, EmbedOpts, GenerateChunk, GenerateInput, GenerateOpts, GenerateResult, ModelBackend, ModelCallResult, ModelCapabilities } from '../../resources/models/types.ts';
+export type OllamaBackendKind = 'embedding' | 'generative';
+export interface OllamaBackendConfig {
+    /** Host:port (default `localhost:11434`) or full origin (`https://ollama.example.com`). */
+    host?: string;
+    /** Default model when the caller doesn't pass `opts.model`. */
+    model?: string;
+    /** Per-request timeout. When set, combined with `opts.signal` via `AbortSignal.any`. */
+    requestTimeoutMs?: number;
+}
+/**
+ * `ModelBackend` implementation talking to Ollama's HTTP API.
+ *
+ * - `embed` → `POST /api/embed` (the legacy `/api/embeddings` is deprecated upstream).
+ * - `generate` → `POST /api/generate` for string prompts, `POST /api/chat` for
+ *   messages-array input.
+ * - `generateStream` → same routing as `generate` with `stream: true`; consumes
+ *   Ollama's NDJSON wire format and yields `GenerateChunk` per JSON line.
+ *
+ * Capabilities advertise `tools: false` and `adapters: false`. Ollama tool-call
+ * support exists on some models but is uneven across the model catalog; we keep
+ * the v1 portability guarantee honest and skip them here.
+ */
+export declare class OllamaBackend implements ModelBackend {
+    #private;
+    readonly name = "ollama";
+    constructor(config?: OllamaBackendConfig, fetchImpl?: typeof fetch);
+    capabilities(): ModelCapabilities;
+    embed(input: string | string[], opts: BackendOpts<EmbedOpts>): Promise<ModelCallResult<Float32Array[]>>;
+    generate(input: GenerateInput, opts: BackendOpts<GenerateOpts>): Promise<ModelCallResult<GenerateResult>>;
+    generateStream(input: GenerateInput, opts: BackendOpts<GenerateOpts>): AsyncIterable<GenerateChunk>;
+}
+/**
+ * Boot-bridge helper. Called from `resources/models/bootstrap.ts` for each
+ * `models.embedding.<name>` / `models.generative.<name>` entry whose
+ * `backend: ollama`.
+ */
+export declare function registerOllamaBackend(args: {
+    logicalName: string;
+    kind: OllamaBackendKind;
+    config: OllamaBackendConfig;
+}): void;
+export declare class OllamaBackendError extends ServerError {
+    constructor(message: string);
+}