@honua/mcp-server 0.1.2-beta.0 → 0.1.8-beta.0

package/dist/src/neutral/source-ref.d.ts

@@ -0,0 +1,126 @@
+import type { HonuaClient } from "@honua/sdk-js";
+import type { CapabilityAwareSource, SourceDescriptor, SourceLocator } from "@honua/sdk-js/contract";
+import { z } from "zod";
+/**
+ * PROTOCOL-NEUTRAL source addressing for the MCP tool contract (issue #1005).
+ *
+ * The tool surface used to address data the way GeoServices does — a required
+ * `serviceId` string plus a required numeric `layerId`. That vocabulary is
+ * meaningless on OGC API Features, STAC, WFS, and OData, so a "vendor-neutral"
+ * server whose only addressing mode is Esri-shaped concedes the claim on
+ * inspection.
+ *
+ * A source is now addressed the way the SDK addresses one: a
+ * `SourceDescriptor` (protocol + locator) resolved into a canonical
+ * `Source` through `createDataset`. Over the wire that descriptor is carried as
+ * one compact string:
+ *
+ * ```text
+ * <protocol>:<address>
+ * ```
+ *
+ * | protocol                        | address form          | example                                |
+ * | ------------------------------- | --------------------- | -------------------------------------- |
+ * | `geoservices-feature-service`   | `<serviceId>/<layer>` | `geoservices-feature-service:Parks/0`  |
+ * | `geoservices-map-service`       | `<serviceId>/<layer>` | `geoservices-map-service:Basemap/2`    |
+ * | `ogc-features`                  | `<collectionId>`      | `ogc-features:hotels`                  |
+ * | `ogc-records`                   | `<collectionId>`      | `ogc-records:catalog`                  |
+ * | `stac`                          | `<collectionId>`      | `stac:sentinel-2-l2a`                  |
+ * | `wfs`                           | `<typeName>`          | `wfs:topp:states`                      |
+ * | `odata`                         | `<entitySet>`         | `odata:People`                         |
+ *
+ * `honua_list_sources` emits exactly these strings, so the normal agent flow is
+ * discover-then-address with no parsing on the client side. The reference is
+ * deliberately fail-closed: an unrecognized protocol token is refused with the
+ * accepted forms rather than guessed at, because guessing "which protocol did
+ * they mean" is how a neutral surface silently becomes a single-vendor one.
+ *
+ * The legacy `serviceId` + `layerId` pair is still accepted (see
+ * {@link legacyGeoServicesRef}) but is deprecated and is no longer *required* by
+ * any schema.
+ */
+/** Protocols reachable through a `<protocol>:<address>` source reference. */
+export declare const SOURCE_REF_PROTOCOLS: readonly ["geoservices-feature-service", "geoservices-map-service", "ogc-features", "ogc-records", "stac", "wfs", "odata"];
+export type SourceRefProtocol = (typeof SOURCE_REF_PROTOCOLS)[number];
+/** Endpoint layouts an OGC API / STAC source may be published under. */
+export declare const SOURCE_LAYOUTS: readonly ["honua-facade", "ogc-api", "auto", "stac-api", "stac-static"];
+export type SourceLayout = (typeof SOURCE_LAYOUTS)[number];
+/** A parsed, validated protocol-neutral source reference. */
+export interface ParsedSourceRef {
+    /** Canonical `<protocol>:<address>` form (aliases normalized). */
+    readonly ref: string;
+    readonly protocol: SourceRefProtocol;
+    readonly address: string;
+    readonly layout?: SourceLayout;
+}
+export declare class SourceRefError extends Error {
+    readonly code = "INVALID_SOURCE_REFERENCE";
+    constructor(message: string);
+}
+/**
+ * Parse a `<protocol>:<address>` source reference. Fails closed: an omitted or
+ * unrecognized protocol token is refused with the accepted forms instead of
+ * being inferred, so a mistyped reference can never silently resolve against
+ * the wrong protocol.
+ */
+export declare function parseSourceRef(raw: string, layout?: SourceLayout): ParsedSourceRef;
+/** Build the canonical reference for the deprecated GeoServices `serviceId`/`layerId` pair. */
+export declare function legacyGeoServicesRef(serviceId: string, layerId: number): string;
+/** Project a parsed reference onto the SDK's protocol-neutral `SourceLocator`. */
+export declare function toSourceLocator(ref: ParsedSourceRef, baseUrl: string): SourceLocator;
+/** Build the `SourceDescriptor` a reference denotes, without contacting the endpoint. */
+export declare function toSourceDescriptor(ref: ParsedSourceRef, baseUrl: string): SourceDescriptor;
+/** A resolved source plus the neutral identity it was addressed by. */
+export interface ResolvedSource {
+    readonly ref: ParsedSourceRef;
+    readonly descriptor: SourceDescriptor;
+    readonly source: CapabilityAwareSource;
+    /** True when the caller used the deprecated `serviceId`/`layerId` pair. */
+    readonly legacyAddressing: boolean;
+}
+/**
+ * Zod fields every source-addressed tool mixes into its input schema.
+ *
+ * `source` is the protocol-neutral reference; `serviceId`/`layerId` remain as
+ * OPTIONAL, deprecated compatibility inputs so existing MCP clients keep
+ * working. No Esri-only field is required by any tool schema.
+ */
+export declare const sourceRefFields: {
+    readonly source: z.ZodOptional<z.ZodString>;
+    readonly layout: z.ZodOptional<z.ZodEnum<["honua-facade", "ogc-api", "auto", "stac-api", "stac-static"]>>;
+    readonly serviceId: z.ZodOptional<z.ZodString>;
+    readonly layerId: z.ZodOptional<z.ZodNumber>;
+};
+export type SourceRefInput = {
+    source?: string | undefined;
+    layout?: SourceLayout | undefined;
+    serviceId?: string | undefined;
+    layerId?: number | undefined;
+};
+/** Resolve the neutral reference an input addresses (without building a `Source`). */
+export declare function resolveSourceRef(input: SourceRefInput): {
+    ref: ParsedSourceRef;
+    legacyAddressing: boolean;
+};
+/**
+ * Resolve an input onto a canonical `Source`.
+ *
+ * The dataset runs under the `degraded` capability policy so a protocol that
+ * cannot serve a request first-party (OGC API Features has no server-side
+ * aggregation, for example) answers with an explicit `Result.degraded` reason
+ * instead of failing outright. Capabilities the protocol cannot serve at all
+ * still throw `HonuaCapabilityNotSupportedError`, which the tool layer turns
+ * into a structured tool error — never a silent empty result.
+ */
+export declare function resolveSource(client: HonuaClient, input: SourceRefInput): ResolvedSource;
+/** True when a resolved source speaks a GeoServices (Esri) protocol. */
+export declare function isGeoServicesProtocol(protocol: string): boolean;
+/**
+ * Resolve the OGC API Features endpoint layout a metadata call must use.
+ *
+ * `honua-facade` (the default) needs no resolution; a third-party OGC API root
+ * is discovered from its landing page once and cached on the client. STAC
+ * layouts are not OGC API Features layouts and resolve to `undefined`.
+ */
+export declare function ogcLayoutFor(client: HonuaClient, layout: SourceLayout | undefined): Promise<import("../../../dist/src/core/types.js").OgcEndpointLayout> | Promise<undefined>;
+//# sourceMappingURL=source-ref.d.ts.map

package/dist/src/neutral/source-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-ref.d.ts","sourceRoot":"","sources":["../../../src/neutral/source-ref.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAY,gBAAgB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE/G,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,4HAQvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAetE,wEAAwE;AACxE,eAAO,MAAM,cAAc,yEAA0E,CAAC;AAEtG,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAChC;AAED,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,8BAA8B;gBAE/B,OAAO,EAAE,MAAM;CAI5B;AAwBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,eAAe,CA0BlF;AAED,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/E;AAiBD,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,GAAG,aAAa,CAiBpF;AAED,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAO1F;AAED,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,2EAA2E;IAC3E,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;CAyBlB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B,CAAC;AAEF,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG;IAAE,GAAG,EAAE,eAAe,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CAuB3G;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,GAAG,cAAc,CAiCxF;AAED,wEAAwE;AACxE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,GAAG,SAAS,6FAKjF"}

package/dist/src/neutral/source-ref.js

@@ -0,0 +1,267 @@
+import { HonuaCapabilityNotSupportedError } from "@honua/sdk-js";
+import { PROTOCOL_DEFAULT_CAPABILITIES, createDataset } from "@honua/sdk-js/contract";
+import { z } from "zod";
+/**
+ * PROTOCOL-NEUTRAL source addressing for the MCP tool contract (issue #1005).
+ *
+ * The tool surface used to address data the way GeoServices does — a required
+ * `serviceId` string plus a required numeric `layerId`. That vocabulary is
+ * meaningless on OGC API Features, STAC, WFS, and OData, so a "vendor-neutral"
+ * server whose only addressing mode is Esri-shaped concedes the claim on
+ * inspection.
+ *
+ * A source is now addressed the way the SDK addresses one: a
+ * `SourceDescriptor` (protocol + locator) resolved into a canonical
+ * `Source` through `createDataset`. Over the wire that descriptor is carried as
+ * one compact string:
+ *
+ * ```text
+ * <protocol>:<address>
+ * ```
+ *
+ * | protocol                        | address form          | example                                |
+ * | ------------------------------- | --------------------- | -------------------------------------- |
+ * | `geoservices-feature-service`   | `<serviceId>/<layer>` | `geoservices-feature-service:Parks/0`  |
+ * | `geoservices-map-service`       | `<serviceId>/<layer>` | `geoservices-map-service:Basemap/2`    |
+ * | `ogc-features`                  | `<collectionId>`      | `ogc-features:hotels`                  |
+ * | `ogc-records`                   | `<collectionId>`      | `ogc-records:catalog`                  |
+ * | `stac`                          | `<collectionId>`      | `stac:sentinel-2-l2a`                  |
+ * | `wfs`                           | `<typeName>`          | `wfs:topp:states`                      |
+ * | `odata`                         | `<entitySet>`         | `odata:People`                         |
+ *
+ * `honua_list_sources` emits exactly these strings, so the normal agent flow is
+ * discover-then-address with no parsing on the client side. The reference is
+ * deliberately fail-closed: an unrecognized protocol token is refused with the
+ * accepted forms rather than guessed at, because guessing "which protocol did
+ * they mean" is how a neutral surface silently becomes a single-vendor one.
+ *
+ * The legacy `serviceId` + `layerId` pair is still accepted (see
+ * {@link legacyGeoServicesRef}) but is deprecated and is no longer *required* by
+ * any schema.
+ */
+/** Protocols reachable through a `<protocol>:<address>` source reference. */
+export const SOURCE_REF_PROTOCOLS = [
+    "geoservices-feature-service",
+    "geoservices-map-service",
+    "ogc-features",
+    "ogc-records",
+    "stac",
+    "wfs",
+    "odata",
+];
+/** Short, human-friendly aliases accepted in place of the canonical token. */
+const PROTOCOL_ALIASES = {
+    geoservices: "geoservices-feature-service",
+    "feature-service": "geoservices-feature-service",
+    featureserver: "geoservices-feature-service",
+    "map-service": "geoservices-map-service",
+    mapserver: "geoservices-map-service",
+    ogc: "ogc-features",
+    "ogc-api-features": "ogc-features",
+    features: "ogc-features",
+    records: "ogc-records",
+};
+/** Endpoint layouts an OGC API / STAC source may be published under. */
+export const SOURCE_LAYOUTS = ["honua-facade", "ogc-api", "auto", "stac-api", "stac-static"];
+export class SourceRefError extends Error {
+    code = "INVALID_SOURCE_REFERENCE";
+    constructor(message) {
+        super(message);
+        this.name = "SourceRefError";
+    }
+}
+const ACCEPTED_FORMS = SOURCE_REF_PROTOCOLS.map((protocol) => {
+    switch (protocol) {
+        case "geoservices-feature-service":
+        case "geoservices-map-service":
+            return `${protocol}:<serviceId>/<layerId>`;
+        case "wfs":
+            return `${protocol}:<typeName>`;
+        case "odata":
+            return `${protocol}:<entitySet>`;
+        default:
+            return `${protocol}:<collectionId>`;
+    }
+}).join(", ");
+function normalizeProtocolToken(token) {
+    const normalized = token.trim().toLowerCase();
+    if (SOURCE_REF_PROTOCOLS.includes(normalized)) {
+        return normalized;
+    }
+    return PROTOCOL_ALIASES[normalized];
+}
+/**
+ * Parse a `<protocol>:<address>` source reference. Fails closed: an omitted or
+ * unrecognized protocol token is refused with the accepted forms instead of
+ * being inferred, so a mistyped reference can never silently resolve against
+ * the wrong protocol.
+ */
+export function parseSourceRef(raw, layout) {
+    const value = raw.trim();
+    if (value.length === 0) {
+        throw new SourceRefError(`source must be a non-empty "<protocol>:<address>" reference. Accepted: ${ACCEPTED_FORMS}`);
+    }
+    const separator = value.indexOf(":");
+    if (separator < 0) {
+        throw new SourceRefError(`source "${raw}" is missing its protocol prefix. Use "<protocol>:<address>" (accepted: ${ACCEPTED_FORMS}), or call honua_list_sources to discover exact source references.`);
+    }
+    const protocol = normalizeProtocolToken(value.slice(0, separator));
+    if (!protocol) {
+        throw new SourceRefError(`source "${raw}" names an unknown protocol "${value.slice(0, separator)}". Accepted: ${ACCEPTED_FORMS}.`);
+    }
+    // The address keeps every remaining colon: a WFS typeName is namespace-qualified
+    // (`topp:states`) and splitting it again would corrupt the identifier.
+    const address = value.slice(separator + 1).trim();
+    if (address.length === 0) {
+        throw new SourceRefError(`source "${raw}" is missing its address. Accepted: ${ACCEPTED_FORMS}.`);
+    }
+    return { ref: `${protocol}:${address}`, protocol, address, ...(layout ? { layout } : {}) };
+}
+/** Build the canonical reference for the deprecated GeoServices `serviceId`/`layerId` pair. */
+export function legacyGeoServicesRef(serviceId, layerId) {
+    return `geoservices-feature-service:${serviceId}/${layerId}`;
+}
+function splitGeoServicesAddress(ref) {
+    const slash = ref.address.lastIndexOf("/");
+    if (slash <= 0 || slash === ref.address.length - 1) {
+        throw new SourceRefError(`source "${ref.ref}" must address a layer as "<serviceId>/<layerId>" (e.g. "${ref.protocol}:Parks/0").`);
+    }
+    const serviceId = ref.address.slice(0, slash);
+    const rawLayer = ref.address.slice(slash + 1);
+    if (!/^\d+$/.test(rawLayer)) {
+        throw new SourceRefError(`source "${ref.ref}" has a non-numeric layer id "${rawLayer}"; expected a whole number.`);
+    }
+    return { serviceId, layerId: Number.parseInt(rawLayer, 10) };
+}
+/** Project a parsed reference onto the SDK's protocol-neutral `SourceLocator`. */
+export function toSourceLocator(ref, baseUrl) {
+    const layout = ref.layout && ref.layout !== "honua-facade" ? { layout: ref.layout } : {};
+    switch (ref.protocol) {
+        case "geoservices-feature-service":
+        case "geoservices-map-service": {
+            const { serviceId, layerId } = splitGeoServicesAddress(ref);
+            return { url: baseUrl, serviceId, layerId };
+        }
+        case "ogc-features":
+        case "ogc-records":
+        case "stac":
+            return { url: baseUrl, collectionId: ref.address, ...layout };
+        case "wfs":
+            return { url: baseUrl, typeName: ref.address };
+        case "odata":
+            return { url: baseUrl, entitySet: ref.address };
+    }
+}
+/** Build the `SourceDescriptor` a reference denotes, without contacting the endpoint. */
+export function toSourceDescriptor(ref, baseUrl) {
+    return {
+        id: ref.ref,
+        protocol: ref.protocol,
+        locator: toSourceLocator(ref, baseUrl),
+        capabilities: PROTOCOL_DEFAULT_CAPABILITIES[ref.protocol],
+    };
+}
+/**
+ * Zod fields every source-addressed tool mixes into its input schema.
+ *
+ * `source` is the protocol-neutral reference; `serviceId`/`layerId` remain as
+ * OPTIONAL, deprecated compatibility inputs so existing MCP clients keep
+ * working. No Esri-only field is required by any tool schema.
+ */
+export const sourceRefFields = {
+    source: z
+        .string()
+        .optional()
+        .describe('Protocol-neutral source reference "<protocol>:<address>" as emitted by honua_list_sources — e.g. "ogc-features:hotels", "stac:sentinel-2-l2a", "wfs:topp:states", "odata:People", "geoservices-feature-service:Parks/0". Preferred over the deprecated serviceId/layerId pair.'),
+    layout: z
+        .enum(SOURCE_LAYOUTS)
+        .optional()
+        .describe('Endpoint layout for OGC API / STAC sources: "honua-facade" (default, Honua server paths), "ogc-api"/"auto" (third-party OGC API root), "stac-api"/"stac-static" (STAC). Ignored by other protocols.'),
+    serviceId: z
+        .string()
+        .optional()
+        .describe("[DEPRECATED — use `source`] GeoServices service id. Only meaningful on an Esri FeatureServer/MapServer."),
+    layerId: z
+        .number()
+        .int()
+        .nonnegative()
+        .optional()
+        .describe("[DEPRECATED — use `source`] GeoServices layer id within the service. Required with `serviceId`."),
+};
+/** Resolve the neutral reference an input addresses (without building a `Source`). */
+export function resolveSourceRef(input) {
+    if (input.source !== undefined && input.source.trim().length > 0) {
+        return { ref: parseSourceRef(input.source, input.layout), legacyAddressing: false };
+    }
+    if (input.serviceId !== undefined && input.serviceId.trim().length > 0) {
+        if (input.layerId === undefined) {
+            throw new SourceRefError(`serviceId "${input.serviceId}" was given without layerId. Pass both, or (preferred) a protocol-neutral \`source\` reference such as "geoservices-feature-service:${input.serviceId}/0".`);
+        }
+        return {
+            ref: parseSourceRef(legacyGeoServicesRef(input.serviceId, input.layerId), input.layout),
+            legacyAddressing: true,
+        };
+    }
+    if (input.layerId !== undefined) {
+        throw new SourceRefError("layerId was given without serviceId. Pass both, or (preferred) a protocol-neutral `source` reference.");
+    }
+    throw new SourceRefError(`no source was addressed. Pass \`source\` as "<protocol>:<address>" (accepted: ${ACCEPTED_FORMS}); call honua_list_sources to discover the exact references this endpoint serves.`);
+}
+/**
+ * Resolve an input onto a canonical `Source`.
+ *
+ * The dataset runs under the `degraded` capability policy so a protocol that
+ * cannot serve a request first-party (OGC API Features has no server-side
+ * aggregation, for example) answers with an explicit `Result.degraded` reason
+ * instead of failing outright. Capabilities the protocol cannot serve at all
+ * still throw `HonuaCapabilityNotSupportedError`, which the tool layer turns
+ * into a structured tool error — never a silent empty result.
+ */
+export function resolveSource(client, input) {
+    const { ref, legacyAddressing } = resolveSourceRef(input);
+    const descriptor = toSourceDescriptor(ref, client.serverBaseUrl);
+    const dataset = createDataset({
+        id: `honua-mcp:${ref.ref}`,
+        client,
+        sources: [descriptor],
+        capabilityPolicy: "degraded",
+        // The standalone server points at arbitrary public endpoints; a Honua
+        // server-version handshake is neither available nor meaningful there.
+        skipCompatibilityCheck: true,
+    });
+    let source;
+    try {
+        source = dataset.source(descriptor.id);
+    }
+    catch (error) {
+        // A capability refusal is the SDK's own honest signal and travels as-is.
+        // Anything else (an incomplete locator, a runtime that cannot construct the
+        // protocol adapter) becomes an actionable addressing error rather than an
+        // opaque stack trace.
+        if (error instanceof HonuaCapabilityNotSupportedError) {
+            throw error;
+        }
+        throw new SourceRefError(`source "${ref.ref}" could not be resolved to a runtime adapter: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (!source) {
+        throw new SourceRefError(`source "${ref.ref}" could not be resolved to a runtime adapter.`);
+    }
+    return { ref, descriptor, source, legacyAddressing };
+}
+/** True when a resolved source speaks a GeoServices (Esri) protocol. */
+export function isGeoServicesProtocol(protocol) {
+    return protocol.startsWith("geoservices-") || protocol === "grpc";
+}
+/**
+ * Resolve the OGC API Features endpoint layout a metadata call must use.
+ *
+ * `honua-facade` (the default) needs no resolution; a third-party OGC API root
+ * is discovered from its landing page once and cached on the client. STAC
+ * layouts are not OGC API Features layouts and resolve to `undefined`.
+ */
+export function ogcLayoutFor(client, layout) {
+    if (layout === "ogc-api" || layout === "auto") {
+        return client.resolveOgcFeaturesLayout(layout);
+    }
+    return Promise.resolve(undefined);
+}

package/dist/src/nl-map-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nl-map-control.d.ts","sourceRoot":"","sources":["../../src/nl-map-control.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,yBAAyB,EAE9B,sBAAsB,EAEtB,KAAK,YAAY,EACjB,KAAK,SAAS,EAEd,KAAK,kBAAkB,EAIxB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,QAAA,MAAM,uBAAuB,EAAG,0BAAmC,CAAC;AA+CpE,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,6FAA6F;IAC7F,QAAQ,CAAC,4BAA4B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3D;AAED,MAAM,WAAW,gCAAgC;IAC/C,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,gGAAgG;IAChG,QAAQ,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CACpC,eAAe,EAAE,SAAS,MAAM,EAAE,KAC/B,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,OAAO,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,sBAAsB,CAAC;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;IACvD,sGAAsG;IACtG,QAAQ,CAAC,gBAAgB,EAAE,UAAU,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,UAAU,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,OAAO,CACL,KAAK,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EACvC,OAAO,CAAC,EAAE,6BAA6B,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,OAAO,CACL,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAC9D,OAAO,CAAC,EAAE,6BAA6B,GACtC,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAYD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gCAAgC,GAAG,mBAAmB,CA+GxG;AAeD,2EAA2E;AAC3E,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CA4D/F"}
+{"version":3,"file":"nl-map-control.d.ts","sourceRoot":"","sources":["../../src/nl-map-control.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAG9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,yBAAyB,EAE9B,sBAAsB,EAEtB,KAAK,YAAY,EACjB,KAAK,SAAS,EAEd,KAAK,kBAAkB,EAIxB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,QAAA,MAAM,uBAAuB,EAAG,0BAAmC,CAAC;AA+CpE,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,6FAA6F;IAC7F,QAAQ,CAAC,4BAA4B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3D;AAED,MAAM,WAAW,gCAAgC;IAC/C,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,gGAAgG;IAChG,QAAQ,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CACpC,eAAe,EAAE,SAAS,MAAM,EAAE,KAC/B,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,OAAO,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,sBAAsB,CAAC;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC;IACvD,sGAAsG;IACtG,QAAQ,CAAC,gBAAgB,EAAE,UAAU,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,UAAU,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,UAAU,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,OAAO,CACL,KAAK,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EACvC,OAAO,CAAC,EAAE,6BAA6B,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,OAAO,CACL,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAC9D,OAAO,CAAC,EAAE,6BAA6B,GACtC,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAYD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gCAAgC,GAAG,mBAAmB,CA+GxG;AAeD,2EAA2E;AAC3E,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CA4D/F"}

package/dist/src/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAiBnE;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CAqBtF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASlF;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ5E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+C1D;AAOD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBlF"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAkBnE;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAsBD,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CAqBtF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUlF;AAED,oFAAoF;AACpF,wBAAsB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+C1D;AAOD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBlF"}

package/dist/src/proxy.js

@@ -5,30 +5,44 @@ import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { CallToolRequestSchema, GetPromptRequestSchema, ListPromptsRequestSchema, ListResourceTemplatesRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, PromptListChangedNotificationSchema, ReadResourceRequestSchema, ResourceListChangedNotificationSchema, ToolListChangedNotificationSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { requireSecureCredentialEndpoint } from "./credential-endpoint.js";
 import { SERVER_VERSION } from "./index.js";
+function isConfigured(value) {
+    return value !== undefined && value.length > 0;
+}
+function validateAuthentication(options) {
+    const hasBearer = isConfigured(options.authToken);
+    const hasApiKey = isConfigured(options.apiKey);
+    if (hasBearer && hasApiKey) {
+        throw new Error("Configure exactly one upstream authentication scheme: unset either authToken/HONUA_MCP_AUTH_TOKEN or apiKey/HONUA_ADMIN_KEY/HONUA_API_KEY");
+    }
+    return hasBearer ? "bearer" : hasApiKey ? "api-key" : "anonymous";
+}
+function validateProxyOptions(options) {
+    const authMode = validateAuthentication(options);
+    return requireSecureCredentialEndpoint(options.remoteUrl, "remoteUrl", authMode !== "anonymous");
+}
 export function resolveProxyOptions(env = process.env) {
     const remoteUrl = env.HONUA_MCP_REMOTE_URL ?? env.HONUA_MCP_URL;
     if (!remoteUrl) {
         throw new Error("HONUA_MCP_REMOTE_URL environment variable is required (the remote honua /mcp endpoint to proxy).");
     }
-    let parsed;
-    try {
-        parsed = new URL(remoteUrl);
-    }
-    catch {
-        throw new Error(`HONUA_MCP_REMOTE_URL must be a valid absolute URL: ${remoteUrl}`);
-    }
-    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-        throw new Error(`HONUA_MCP_REMOTE_URL must use http or https: ${remoteUrl}`);
+    const hasAdminKey = isConfigured(env.HONUA_ADMIN_KEY);
+    const hasApiKey = isConfigured(env.HONUA_API_KEY);
+    if (hasAdminKey && hasApiKey) {
+        throw new Error("Configure one API-key source: unset either HONUA_ADMIN_KEY or HONUA_API_KEY; credential precedence is not allowed");
     }
-    return {
-        remoteUrl: parsed.toString(),
+    const options = {
+        remoteUrl,
         authToken: env.HONUA_MCP_AUTH_TOKEN,
-        apiKey: env.HONUA_API_KEY,
+        apiKey: hasAdminKey ? env.HONUA_ADMIN_KEY : hasApiKey ? env.HONUA_API_KEY : undefined,
     };
+    const parsed = validateProxyOptions(options);
+    return { ...options, remoteUrl: parsed.toString() };
 }
 /** Build request headers for the upstream connection from the resolved options. */
 export function buildUpstreamHeaders(options) {
+    validateProxyOptions(options);
     const headers = {};
     if (options.authToken) {
         headers.Authorization = `Bearer ${options.authToken}`;
@@ -41,8 +55,9 @@ export function buildUpstreamHeaders(options) {
 /** Connect an upstream MCP client to the remote honua /mcp over streamable HTTP. */
 export async function connectUpstream(options) {
     const headers = buildUpstreamHeaders(options);
-    const transport = new StreamableHTTPClientTransport(new URL(options.remoteUrl), {
-        requestInit: Object.keys(headers).length > 0 ? { headers } : undefined,
+    const remoteUrl = validateProxyOptions(options);
+    const transport = new StreamableHTTPClientTransport(remoteUrl, {
+        requestInit: { ...(Object.keys(headers).length > 0 ? { headers } : {}), redirect: "manual" },
     });
     const client = new Client({ name: "honua-mcp-stdio-proxy", version: SERVER_VERSION });
     await client.connect(transport);

package/dist/src/release/zero-to-map-checkpoint.d.ts

@@ -0,0 +1,34 @@
+import { type JourneyPauseSnapshot, type JourneyReceiptRequest, type JourneyResumeState } from "./zero-to-map.js";
+export declare const ZERO_TO_MAP_CHECKPOINT_SCHEMA: "honua.zero-to-map.checkpoint/v1";
+export declare const ZERO_TO_MAP_CHECKPOINT_MAX_AGE_MS: number;
+export interface ZeroToMapCheckpointBindings {
+    readonly journeyId: string;
+    readonly releaseContract: string;
+    readonly target: "local-docker" | "aws-ecs";
+    readonly planSha256: string;
+    readonly sourceRevision: string;
+    readonly mcpEndpointSha256: string;
+    readonly candidateId: string;
+    readonly releaseId: string;
+    readonly provisionReceiptSha256?: string;
+}
+export interface ZeroToMapCheckpoint extends ZeroToMapCheckpointBindings {
+    readonly schemaVersion: typeof ZERO_TO_MAP_CHECKPOINT_SCHEMA;
+    readonly state: "paused" | "consumed";
+    readonly createdAt: string;
+    readonly resume: JourneyResumeState;
+    readonly consoleReceiptRequest: JourneyReceiptRequest;
+    readonly consumedAt?: string;
+    readonly finalReceiptSha256?: string;
+    readonly integrity: {
+        readonly algorithm: "sha256";
+        readonly digest: string;
+    };
+}
+export declare function createZeroToMapCheckpoint(bindings: ZeroToMapCheckpointBindings, snapshot: JourneyPauseSnapshot, createdAt?: string): ZeroToMapCheckpoint;
+export declare function consumeZeroToMapCheckpoint(checkpoint: ZeroToMapCheckpoint, finalReceiptSha256: string, consumedAt?: string): ZeroToMapCheckpoint;
+export declare function parseZeroToMapCheckpoint(value: unknown): ZeroToMapCheckpoint;
+export declare function assertZeroToMapCheckpointFresh(checkpoint: ZeroToMapCheckpoint, now?: Date): void;
+export declare function assertZeroToMapCheckpointDigest(checkpoint: ZeroToMapCheckpoint, expectedDigest: string): void;
+export declare function assertZeroToMapCheckpointBindings(checkpoint: ZeroToMapCheckpoint, expected: ZeroToMapCheckpointBindings): void;
+//# sourceMappingURL=zero-to-map-checkpoint.d.ts.map

package/dist/src/release/zero-to-map-checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-to-map-checkpoint.d.ts","sourceRoot":"","sources":["../../../src/release/zero-to-map-checkpoint.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE1B,KAAK,kBAAkB,EAMxB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,6BAA6B,EAAG,iCAA0C,CAAC;AACxF,eAAO,MAAM,iCAAiC,QAAuB,CAAC;AAEtE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAoB,SAAQ,2BAA2B;IACtE,QAAQ,CAAC,aAAa,EAAE,OAAO,6BAA6B,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAID,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,2BAA2B,EACrC,QAAQ,EAAE,oBAAoB,EAC9B,SAAS,SAA2B,GACnC,mBAAmB,CAqBrB;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,mBAAmB,EAC/B,kBAAkB,EAAE,MAAM,EAC1B,UAAU,SAA2B,GACpC,mBAAmB,CAIrB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAkF5E;AAED,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,OAAa,GAAG,IAAI,CAKtG;AAED,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAI7G;AAED,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,EAAE,2BAA2B,GACpC,IAAI,CAIN"}