@ixo/decision-oracle 0.0.0-stage → 0.2.0

package/dist/routes/v1/mcp/tools.js

@@ -0,0 +1,432 @@
+/**
+ * The MCP server's tools (go-prod spec §13.2, decision log row 35): the four of the spec plus
+ * `upload_file` (an upload link, so a file on the user's machine can answer a file question) — and
+ * no review answering. Each one is a `DecisionsClient` call against THIS oracle's own routes (the
+ * client is built per request in `index.ts`), so a tool is the SDK's behaviour verbatim: the payer,
+ * the Idempotency-Key, the typed refusals. What a tool returns is what the route returned — the
+ * record never carries the answers, and nothing here echoes a tool's input back.
+ */
+import { DecisionsError, isDecisionsApiError, PaymentError, ReceiptVerificationError, verifyReceipt, } from "@ixo/decision-oracle-client";
+import { z } from "zod";
+import { canonicalJson, sha256Hex } from "../../../lib/hash.js";
+import { reportError } from "../../../lib/sentry.js";
+import { ApiError } from "../../../middleware/api/errors.js";
+import { DECISION_CARD_URI, PROTOCOLS_URI, RECEIPT_URI, UPLOAD_CARD_URI, uiMeta } from "./ui.js";
+/** The oracle's `Prefer: wait` ceiling (§4.6); a tool call holds the connection as long. */
+export const WAIT_S = 90;
+const AttachmentFields = {
+    question: z.string().describe("The form question (field name) this file answers."),
+    name: z.string().optional(),
+    mediaType: z.string().optional().describe("e.g. image/jpeg"),
+    cid: z.string().optional().describe("The file's IPFS CID, when you have one."),
+};
+/** A file answering one of the form's file questions: by https URL, or a file uploaded here. */
+const Attachment = z.union([
+    z.object({ ...AttachmentFields, url: z.string().describe("An https URL the oracle can fetch.") }),
+    z.object({
+        ...AttachmentFields,
+        uploadId: z.string().describe("The uploadId from upload_file, once the file is uploaded."),
+        cid: z.string().optional().describe("Leave it out: the upload's cid is filled in for you."),
+    }),
+]);
+const SubmitClaim = {
+    protocolDid: z
+        .string()
+        .optional()
+        .describe("The protocol to evaluate under (see list_protocols). May be left out when your key's source allows only one."),
+    answers: z
+        .record(z.string(), z.unknown())
+        .describe("The claim's answers, shaped by the protocol's answers JSON Schema (list_protocols with its protocolDid)."),
+    attachments: z.array(Attachment).optional(),
+    submitter: z
+        .string()
+        .optional()
+        .describe("API-key connections only: your own stable id for the person the claim is about (e.g. a courier id), needed when the protocol limits how often one person may submit (facts.frequency: true). Signed in with IXO, leave it out: the oracle uses your sign-in, or the answer your source names for the person."),
+    metadata: z
+        .record(z.string(), z.unknown())
+        .optional()
+        .describe("Your own data (≤ 4 KB), echoed on every read and webhook, never evaluated."),
+    webhookUrl: z.string().optional().describe("An https URL to receive the signed claim.* events."),
+    idempotencyKey: z
+        .string()
+        .optional()
+        .describe("Your own key (e.g. an order id). Re-submitting with the same key names the same claim and is never charged twice. " +
+        "Left out, it is derived from the request itself: an identical claim submitted again within 24 hours returns the first one's decision — pass a distinct key to submit the same claim twice on purpose."),
+    resumePayment: z
+        .record(z.string(), z.unknown())
+        .optional()
+        .describe("Only after a CARD_AUTHENTICATION_REQUIRED error: that error's paymentRequired, passed back unchanged once the payer has confirmed the card at its confirmUrl (within 15 minutes), together with the error's idempotencyKey. It pays the ORIGINAL offer with the confirmed card — never a new one."),
+    sourceId: z
+        .string()
+        .optional()
+        .describe("Only when connected by signing in (OAuth) and you belong to several sources: the source to submit for (src_…). A SOURCE_REQUIRED error lists them."),
+};
+const UploadFile = {
+    sourceId: z
+        .string()
+        .optional()
+        .describe("Only when connected by signing in (OAuth) and you belong to several sources: the source the claim will be submitted for (src_…) — pass the same one to submit_claim."),
+};
+const ClaimId = {
+    claimId: z.string().describe("The claim id submit_claim returned (apc_…)."),
+};
+const ListProtocols = {
+    protocolDid: z
+        .string()
+        .optional()
+        .describe("Leave out to list your protocols; give one to get its full work order."),
+};
+const VerifyReceipt = {
+    claimId: z
+        .string()
+        .optional()
+        .describe("A decided claim of yours: its receipt is read and verified. With jws too, the given jws is verified and must be about this claim."),
+    jws: z.string().optional().describe("A receipt's compact JWS, to verify one you already hold."),
+    cid: z.string().optional().describe("The receipt's CID; checked against the JWS when given."),
+};
+/** A tool's own refusal (OAuth's approvals and source choice): an `isError` result with `extra`. */
+export class ToolRefusal extends Error {
+    code;
+    extra;
+    constructor(code, message, extra = {}) {
+        super(message);
+        this.code = code;
+        this.extra = extra;
+    }
+}
+/** An API key's tools: every call is this one client. */
+export const keyClients = (client, accepted) => ({
+    read: async () => client,
+    uploads: async () => client,
+    accepted,
+    submit: ({ request, idempotencyKey, resumePayment }) => client.claims.submit(request, { wait: WAIT_S, idempotencyKey, resumePayment }),
+});
+/** Register the tools on `server`, each calling through `clients`. */
+export function registerTools(server, clients, { engineDid, logger, metrics }) {
+    const run = runner(logger, metrics);
+    server.registerTool("submit_claim", {
+        title: "Submit a claim for a decision",
+        description: "Submit a claim for an independent decision (approve, reject or review) and wait (up to 90 seconds) for the verdict. " +
+            "Returns the claim record — status, the engine's decision with its verdict and signed receipt, payment — " +
+            'or { status: "pending", claimId, pollUrl } when the decision is not ready yet: call get_decision with the claimId later. ' +
+            "Call list_protocols with the protocolDid first: its work order gives the answers, the file questions (a file is an https url, or an uploadId from upload_file) " +
+            "and whether a submitter is required. " +
+            "Cost: when the source pays per decision, a claim costs the protocol's evaluation fee (list_protocols shows it). " +
+            "This tool never moves money on its own: signed in through IXO, every charge needs the user's own approval on an IXO page " +
+            '(the tool answers status "approval_required" — NOT submitted — with an approveUrl to show them) or limits they set themselves (auto-approve); ' +
+            "with an API key, the key holder's payment delegation pays. The fee pays for the evaluation; it is not a payout to anyone. " +
+            "A retry is safe: the same idempotencyKey never makes or charges a second claim, and when you pass none it is derived from the request, " +
+            "so an identical claim submitted again within 24 hours returns the first claim's decision — pass a distinct idempotencyKey to submit the same claim twice on purpose. " +
+            "If a call fails with an idempotencyKey in the error, retry with that key.",
+        inputSchema: SubmitClaim,
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+        _meta: uiMeta(DECISION_CARD_URI),
+    }, ({ idempotencyKey, resumePayment, sourceId, ...asked }) => run("submit_claim", async () => {
+        const filled = await withUploadCids(asked.attachments, () => clients.uploads(sourceId));
+        const request = filled ? { ...asked, attachments: filled } : asked;
+        // Deterministic when the agent passes none: an MCP client gives up on a tool call (often at
+        // 60 s) while it still holds its 90 s wait, and a blind retry under a fresh key would be a
+        // second claim — and on a paid source a second price held. 68 chars, and the oracle scopes
+        // keys per source, so the same request from two sources never collides. Hashed AFTER the
+        // cids are filled: an upload's cid never changes, so the filled request is the one canonical
+        // form of the claim — a retry that passes the cid it was never shown, or leaves out one it
+        // was, still names the same claim, and the key always agrees with the body the route digests.
+        // A signed-in caller's own DID as `submitter` is what the OAuth submit fills in anyway (or
+        // refuses, on a payeeField source), so it is hashed as absent: with or without it, the same
+        // claim under the same key.
+        const hashed = clients.signedIn !== undefined && request.submitter === clients.signedIn
+            ? { ...request, submitter: undefined }
+            : request;
+        const key = idempotencyKey ?? `mcp_${await sha256Hex(canonicalJson(hashed))}`;
+        const args = {
+            request: request,
+            sourceId,
+            idempotencyKey: key,
+            resumePayment: resumePayment,
+        };
+        let res;
+        try {
+            res = await clients.submit(args);
+        }
+        catch (e) {
+            // Accepted, then the answer failed (the wait, the record read): the claim exists and is
+            // paid for, so the model gets its id — a non-error result, so it reads it and never
+            // resubmits. Not for the tool's own refusals, a key reused for another request, or a
+            // credential that no longer passes (401); and only THIS body's claim (`accepted`).
+            const code = errorCode(e);
+            if (e instanceof ToolRefusal ||
+                code === "IDEMPOTENCY_MISMATCH" ||
+                code === "UNAUTHORIZED") {
+                throw e;
+            }
+            const accepted = await clients.accepted(args).catch(() => null);
+            if (!accepted)
+                throw e;
+            return {
+                ...accepted,
+                idempotencyKey: key,
+                note: `The claim was accepted and will not be charged or submitted again, but its result could not be read just now (${code}). Call get_decision with this claimId to follow it.`,
+            };
+        }
+        const out = res.record
+            ? { ...res.record }
+            : { status: "pending", claimId: res.claimId, pollUrl: res.pollUrl };
+        if (out.payment == null && res.paymentResponse)
+            out.payment = res.paymentResponse;
+        // The model tells the user: no approval link was needed, and how much the app may still spend.
+        if (res.autoApproved) {
+            out.autoApproved = true;
+            out.autoApproveRemaining = res.autoApproved.remaining;
+        }
+        return out;
+    }));
+    server.registerTool("upload_file", {
+        title: "Get a link to upload a file for a claim",
+        description: "When a claim's file question (list_protocols) needs a file that is not already at an https URL — one on the user's computer — " +
+            "get a one-shot upload link (one file, up to 25 MB, valid 10 minutes). The user chooses the file in the card shown with the result; " +
+            "if you can run shell commands and the file is on this machine, you can upload it yourself with curl. " +
+            "Then call submit_claim with attachments: [{ question, uploadId }]. One link per file. Nothing is charged for an upload.",
+        inputSchema: UploadFile,
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: false,
+            openWorldHint: false,
+        },
+        _meta: uiMeta(UPLOAD_CARD_URI),
+    }, ({ sourceId }) => run("upload_file", async () => {
+        const { uploadId, uploadUrl, expiresAt } = await (await clients.uploads(sourceId)).uploads.link();
+        return { uploadId, uploadUrl, expiresAt };
+    }, 
+    // The link is a bearer capability for its 10 minutes, once — shown to the model because
+    // that is how its curl gets it, and never logged. The card reads it from structuredContent.
+    ({ uploadId, uploadUrl, expiresAt }) => `Upload link ready (uploadId ${uploadId}). Ask the user to choose the file in the card shown with this result. ` +
+        `If you can run shell commands and the file is on this machine, upload it yourself: curl -sS -T <path> '${uploadUrl}' ` +
+        `(one file, ≤ 25 MB, the link works once and expires at ${expiresAt}). ` +
+        `Then call submit_claim with attachments: [{ question, uploadId: "${uploadId}" }] — the cid is filled in for you.`));
+    server.registerTool("get_decision", {
+        title: "Get a claim's decision",
+        description: "Read one claim's record: its status, the engine's decision (verdict, reasons, signed receipt) once there is one, " +
+            "pending review tasks, payment and webhook state. Use it to follow up a submit_claim that came back pending. Never returns the claim's answers.",
+        inputSchema: ClaimId,
+        annotations: { readOnlyHint: true, openWorldHint: false },
+        _meta: uiMeta(DECISION_CARD_URI),
+    }, ({ claimId }) => run("get_decision", async () => ({
+        ...(await (await clients.read(claimId)).claims.get(claimId)),
+    })));
+    server.registerTool("list_protocols", {
+        title: "List protocols, or read one's work order",
+        description: "Without protocolDid: the protocols your key can submit claims under, with their price. " +
+            "With protocolDid: that protocol's work order — the JSON Schema for answers, the file questions and limits, " +
+            "the facts the oracle will produce, the price and an example body. Read it before submit_claim.",
+        inputSchema: ListProtocols,
+        annotations: { readOnlyHint: true, openWorldHint: false },
+        _meta: uiMeta(PROTOCOLS_URI),
+    }, ({ protocolDid }) => run("list_protocols", async () => {
+        const client = await clients.read();
+        return {
+            ...(protocolDid
+                ? await client.protocols.get(protocolDid)
+                : await client.protocols.list()),
+        };
+    }));
+    server.registerTool("verify_receipt", {
+        title: "Verify a decision receipt",
+        description: "Check that a decision receipt was signed by this oracle's decision engine and is about the claim it names. " +
+            "Give claimId to verify that claim's receipt, or jws (and cid) to verify one you already hold — with claimId as well, it must be that claim's. " +
+            "Returns { valid: true, issuer, claimId, verdict, status, outcome, protocolDid, oracleDid, kind, evaluatedAt } " +
+            "or { valid: false, reason }.",
+        inputSchema: VerifyReceipt,
+        annotations: { readOnlyHint: true, openWorldHint: true },
+        _meta: uiMeta(RECEIPT_URI),
+    }, ({ claimId, jws, cid }) => {
+        if (!claimId && !jws) {
+            return failure({ code: "VALIDATION", message: "Give either claimId or jws." });
+        }
+        return run("verify_receipt", async () => {
+            // A given jws is what is verified; a claimId alongside it still binds `expect.claimId`.
+            const receipt = jws
+                ? { jws, cid }
+                : await (await clients.read(claimId)).claims.receipt(claimId);
+            try {
+                const v = await verifyReceipt(receipt, {
+                    issuers: [engineDid],
+                    expect: claimId ? { claimId } : undefined,
+                });
+                return {
+                    valid: true,
+                    issuer: v.issuer,
+                    claimId: v.claimId,
+                    verdict: v.verdict,
+                    status: v.status,
+                    outcome: v.outcome,
+                    protocolDid: v.protocolDid,
+                    oracleDid: v.oracleDid,
+                    kind: v.kind,
+                    evaluatedAt: v.evaluatedAt,
+                };
+            }
+            catch (e) {
+                if (!(e instanceof ReceiptVerificationError))
+                    throw e;
+                return { valid: false, reason: e.reason, message: e.message };
+            }
+        });
+    });
+}
+/**
+ * A tool's answer as `structuredContent` plus the same JSON as text (for clients that read only
+ * `content`). A refusal — the oracle's error envelope, a failed payment, the network — is an
+ * `isError` RESULT the agent can read and act on, never a thrown JSON-RPC error. Anything else (a
+ * bug, a malformed 402 the payer's Zod refused) is `INTERNAL`: logged here, and answered with no
+ * stack and no input — the SDK's own text for a throw would carry the raw message.
+ *
+ * The approval asks are the one exception: not `isError`, since a host renders no view for an error
+ * result (Claude desktop, devnet 2026-10-07) and the card is where the user finds the approve
+ * button. `status: "approval_required"` and the text's opening words keep the model from reading it
+ * as a submitted claim.
+ */
+const runner = (logger, metrics) => {
+    const answer = async (tool, fn, text) => {
+        try {
+            return result(await fn(), false, text);
+        }
+        catch (e) {
+            if (e instanceof ToolRefusal) {
+                const error = { code: e.code, message: e.message, ...e.extra };
+                return APPROVAL_ASKS.has(e.code) ? approvalAsk(error) : failure(error);
+            }
+            // A check the OAuth flow makes itself before any route (the protocol, the grant's cap).
+            if (e instanceof ApiError) {
+                return failure({
+                    code: e.apiCode,
+                    message: e.message,
+                    ...(e.details === undefined ? {} : { details: e.details }),
+                });
+            }
+            if (isDecisionsApiError(e)) {
+                return failure({
+                    code: e.code,
+                    message: e.message,
+                    requestId: e.requestId,
+                    docsUrl: e.docsUrl,
+                    ...(e.fundingUrl ? { fundingUrl: e.fundingUrl } : {}),
+                    ...(e.details === undefined ? {} : { details: e.details }),
+                    ...(e.retryAfterMs == null
+                        ? {}
+                        : { retryAfterSeconds: Math.ceil(e.retryAfterMs / 1000) }),
+                    ...retryWith(e),
+                });
+            }
+            if (e instanceof DecisionsError)
+                return failure({ code: e.code, message: e.message, ...retryWith(e) });
+            // The agent's own resumePayment argument was not this oracle's card 402: its input, not ours.
+            if (e instanceof PaymentError && e.code === "INVALID_RESUME")
+                return failure({ code: "VALIDATION", message: e.message });
+            if (e instanceof PaymentError) {
+                // A card that wants 3-D Secure is the one refusal an agent can finish: the person confirms
+                // at confirmUrl, then the agent resubmits with paymentRequired as resumePayment and this key.
+                return failure({
+                    code: e.code,
+                    message: e.message,
+                    ...(e.confirmUrl ? { confirmUrl: e.confirmUrl } : {}),
+                    ...(e.paymentIntentId ? { paymentIntentId: e.paymentIntentId } : {}),
+                    ...(e.paymentRequired ? { paymentRequired: e.paymentRequired } : {}),
+                    ...(e.idempotencyKey ? { idempotencyKey: e.idempotencyKey } : {}),
+                });
+            }
+            logger.error("mcp.tool.internal", {
+                tool,
+                error: e instanceof Error ? e.name : typeof e,
+                detail: e instanceof Error ? e.message : String(e),
+            });
+            reportError(e, { lane: "mcp", step: tool });
+            return failure({
+                code: "INTERNAL",
+                message: "The tool failed unexpectedly on the oracle. Try again; if it persists, tell the oracle's operator.",
+            });
+        }
+    };
+    // `mcp.tool` per call (op = the tool): ok · approval (waits on the user) · refused (the routes'
+    // or the flow's own error code, the agent's to act on) · internal (a bug, reported above).
+    return async (tool, fn, text) => {
+        const started = Date.now();
+        const res = await answer(tool, fn, text);
+        const out = res.structuredContent;
+        const code = out?.error?.code;
+        const status = typeof code === "string" ? code : undefined;
+        const outcome = out?.status === "approval_required"
+            ? "approval"
+            : !res.isError
+                ? "ok"
+                : status === "INTERNAL"
+                    ? "internal"
+                    : "refused";
+        metrics.timing("mcp.tool", Date.now() - started, { op: tool, status, outcome });
+        return res;
+    };
+};
+/**
+ * The key a failed write carried. Handing it back is what keeps an agent's retry of a PAID submit on
+ * the same claim: retried with a fresh key it is a new claim, and a second price held (§4.6, §11.4).
+ */
+const retryWith = (e) => e.idempotencyKey ? { idempotencyKey: e.idempotencyKey } : {};
+/** A thrown error's code, as the tool results name them. */
+function errorCode(e) {
+    if (e instanceof ToolRefusal || e instanceof DecisionsError || e instanceof PaymentError) {
+        return e.code;
+    }
+    if (e instanceof ApiError)
+        return e.apiCode;
+    return "INTERNAL";
+}
+const result = (out, isError = false, text) => ({
+    structuredContent: out,
+    content: [{ type: "text", text: text ? text(out) : JSON.stringify(out, null, 2) }],
+    ...(isError ? { isError: true } : {}),
+});
+/**
+ * The cid of each attachment named by `uploadId` alone, read from the upload on the source the
+ * submit will use — or null when there is none to fill. The model never sees a cid (`upload_file`
+ * hands it only the uploadId), and the route requires it. A file not uploaded yet (404) is
+ * `UPLOAD_PENDING`, refused HERE, before an approval link or a charge: such a claim is certain to
+ * be refused, and must never cost the user a click or a fee.
+ */
+async function withUploadCids(attachments, uploads) {
+    if (!attachments?.some((a) => "uploadId" in a && !a.cid))
+        return null;
+    const client = await uploads();
+    return Promise.all(attachments.map(async (a) => {
+        if (!("uploadId" in a) || a.cid)
+            return a;
+        try {
+            return { ...a, cid: (await client.uploads.get(a.uploadId)).cid };
+        }
+        catch (e) {
+            if (!isDecisionsApiError(e) || e.status !== 404)
+                throw e;
+            throw new ToolRefusal("UPLOAD_PENDING", `No file ${a.uploadId} (for ${a.question}) on this source: it hasn't been uploaded yet, it was made for another source, or it was deleted. If the user hasn't chosen it yet, ask them to in the upload card (or run the curl from upload_file), then call submit_claim again; otherwise call upload_file for a new link (with the same sourceId as the submit).`);
+        }
+    }));
+}
+const failure = (error) => result({ error }, true);
+/** The submits waiting on the user's approval (`oauth.ts` `ask`): nothing was submitted or charged. */
+const APPROVAL_ASKS = new Set(["APPROVAL_REQUIRED", "APPROVAL_PENDING", "APPROVAL_STALE"]);
+const approvalAsk = (error) => {
+    const out = { status: "approval_required", error };
+    return {
+        structuredContent: out,
+        content: [
+            {
+                type: "text",
+                text: `NOT SUBMITTED. Needs the user's approval on IXO: ${error.message}\n\n${JSON.stringify(out, null, 2)}`,
+            },
+        ],
+    };
+};
+//# sourceMappingURL=tools.js.map

package/dist/routes/v1/mcp/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../../src/routes/v1/mcp/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAGL,cAAc,EACd,mBAAmB,EACnB,YAAY,EAEZ,wBAAwB,EAGxB,aAAa,GACd,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAE9F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,CAAC;AAEzB,MAAM,gBAAgB,GAAG;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAClF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC5D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAC/E,CAAC;AAEF,gGAAgG;AAChG,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IACzB,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EAAE,CAAC;IACjG,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,gBAAgB;QACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;QAC1F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;KAC5F,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG;IAClB,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8GAA8G,CAC/G;IACH,OAAO,EAAE,CAAC;SACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,QAAQ,CACP,0GAA0G,CAC3G;IACH,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8SAA8S,CAC/S;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,QAAQ,EAAE;SACV,QAAQ,CAAC,4EAA4E,CAAC;IACzF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAChG,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oHAAoH;QAClH,uMAAuM,CAC1M;IACH,aAAa,EAAE,CAAC;SACb,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,QAAQ,EAAE;SACV,QAAQ,CACP,mSAAmS,CACpS;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,oJAAoJ,CACrJ;CACJ,CAAC;AAEF,MAAM,UAAU,GAAG;IACjB,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sKAAsK,CACvK;CACJ,CAAC;AAEF,MAAM,OAAO,GAAG;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAC5E,CAAC;AAEF,MAAM,aAAa,GAAG;IACpB,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC;AAEF,MAAM,aAAa,GAAG;IACpB,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,mIAAmI,CACpI;IACH,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAC/F,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;CAC9F,CAAC;AAkCF,oGAAoG;AACpG,MAAM,OAAO,WAAY,SAAQ,KAAK;IAEzB,IAAI;IAEJ,KAAK;IAHhB,YACW,IAAY,EACrB,OAAe,EACN,KAAK,GAA4B,EAAE;QAE5C,KAAK,CAAC,OAAO,CAAC,CAAC;oBAJN,IAAI;qBAEJ,KAAK;IAGhB,CAAC;CACF;AASD,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAAuB,EACvB,QAAiC,EACpB,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;IACxB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;IAC3B,QAAQ;IACR,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,EAAE,CACrD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;CACjF,CAAC,CAAC;AASH,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAC3B,MAAiB,EACjB,OAAoB,EACpB,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAe;IAE3C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,sHAAsH;YACtH,0GAA0G;YAC1G,2HAA2H;YAC3H,iKAAiK;YACjK,uCAAuC;YACvC,kHAAkH;YAClH,2HAA2H;YAC3H,gJAAgJ;YAChJ,4HAA4H;YAC5H,yIAAyI;YACzI,uKAAuK;YACvK,2EAA2E;QAC7E,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;QACD,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC;KACjC,EACD,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CACxD,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;QAC7B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,4FAA4F;QAC5F,2FAA2F;QAC3F,2FAA2F;QAC3F,yFAAyF;QACzF,6FAA6F;QAC7F,2FAA2F;QAC3F,8FAA8F;QAC9F,2FAA2F;QAC3F,4FAA4F;QAC5F,4BAA4B;QAC5B,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ;YACtE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;YACtC,CAAC,CAAC,OAAO,CAAC;QACd,MAAM,GAAG,GAAG,cAAc,IAAI,OAAO,MAAM,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAe;YACvB,OAAO,EAAE,OAA6B;YACtC,QAAQ;YACR,cAAc,EAAE,GAAG;YACnB,aAAa,EAAE,aAA4C;SAC5D,CAAC;QACF,IAAI,GAA+C,CAAC;QACpD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,wFAAwF;YACxF,oFAAoF;YACpF,qFAAqF;YACrF,mFAAmF;YACnF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1B,IACE,CAAC,YAAY,WAAW;gBACxB,IAAI,KAAK,sBAAsB;gBAC/B,IAAI,KAAK,cAAc,EACvB,CAAC;gBACD,MAAM,CAAC,CAAC;YACV,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,CAAC;YACvB,OAAO;gBACL,GAAG,QAAQ;gBACX,cAAc,EAAE,GAAG;gBACnB,IAAI,EAAE,iHAAiH,IAAI,sDAAsD;aAClL,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAA4B,GAAG,CAAC,MAAM;YAC7C,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE;YACnB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QACtE,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,IAAI,GAAG,CAAC,eAAe;YAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC;QAClF,+FAA+F;QAC/F,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;YACxB,GAAG,CAAC,oBAAoB,GAAG,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;QACxD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,yCAAyC;QAChD,WAAW,EACT,gIAAgI;YAChI,qIAAqI;YACrI,uGAAuG;YACvG,yHAAyH;QAC3H,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,KAAK;SACrB;QACD,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC;KAC/B,EACD,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CACf,GAAG,CACD,aAAa,EACb,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,CAC/C,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAChC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;IACD,wFAAwF;IACxF,4FAA4F;IAC5F,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CACrC,+BAA+B,QAAQ,yEAAyE;QAChH,0GAA0G,SAAS,IAAI;QACvH,0DAA0D,SAAS,KAAK;QACxE,oEAAoE,QAAQ,sCAAsC,CACrH,CACJ,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,mHAAmH;YACnH,gJAAgJ;QAClJ,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;QACzD,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC;KACjC,EACD,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACd,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;KAC7D,CAAC,CAAC,CACN,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,0CAA0C;QACjD,WAAW,EACT,yFAAyF;YACzF,6GAA6G;YAC7G,gGAAgG;QAClG,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;QACzD,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC;KAC7B,EACD,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAClB,GAAG,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO;YACL,GAAG,CAAC,WAAW;gBACb,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;gBACzC,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SACnC,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,6GAA6G;YAC7G,gJAAgJ;YAChJ,gHAAgH;YAChH,8BAA8B;QAChC,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;QACxD,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC;KAC3B,EACD,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,GAAG,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;YACtC,wFAAwF;YACxF,MAAM,OAAO,GAAG,GAAG;gBACjB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;gBACd,CAAC,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAiB,CAAC,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE;oBACrC,OAAO,EAAE,CAAC,SAAS,CAAC;oBACpB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;iBAC1C,CAAC,CAAC;gBACH,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;iBAC3B,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,CAAC,CAAC,YAAY,wBAAwB,CAAC;oBAAE,MAAM,CAAC,CAAC;gBACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAChE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC;AAID;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,OAAgB,EAAE,EAAE;IAClD,MAAM,MAAM,GAAG,KAAK,EAClB,IAAY,EACZ,EAA6B,EAC7B,IAAW,EACc,EAAE;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;gBAC/D,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC;YACD,wFAAwF;YACxF,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAC;oBACb,IAAI,EAAE,CAAC,CAAC,OAAO;oBACf,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC3D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,OAAO,OAAO,CAAC;oBACb,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC1D,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI;wBACxB,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC;oBAC5D,GAAG,SAAS,CAAC,CAAC,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,YAAY,cAAc;gBAC7B,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxE,8FAA8F;YAC9F,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;gBAC1D,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC;gBAC9B,2FAA2F;gBAC3F,8FAA8F;gBAC9F,OAAO,OAAO,CAAC;oBACb,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBAChC,IAAI;gBACJ,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC7C,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACnD,CAAC,CAAC;YACH,WAAW,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,OAAO,OAAO,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,OAAO,EACL,oGAAoG;aACvG,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IACF,gGAAgG;IAChG,2FAA2F;IAC3F,OAAO,KAAK,EACV,IAAY,EACZ,EAA6B,EAC7B,IAAW,EACc,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,CAAC,iBAA2C,CAAC;QAC5D,MAAM,IAAI,GAAI,GAAG,EAAE,KAAgC,EAAE,IAAI,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,MAAM,OAAO,GACX,GAAG,EAAE,MAAM,KAAK,mBAAmB;YACjC,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;gBACZ,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,KAAK,UAAU;oBACrB,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,SAAS,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,SAAS,GAAG,CAAC,CAAiB,EAAc,EAAE,CAClD,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAE/D,4DAA4D;AAC5D,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,YAAY,WAAW,IAAI,CAAC,YAAY,cAAc,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC;QACzF,OAAO,CAAC,CAAC,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,YAAY,QAAQ;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IAC5C,OAAO,UAAU,CAAC;AACpB,CAAC;AAKD,MAAM,MAAM,GAAG,CAAC,GAAe,EAAE,OAAO,GAAG,KAAK,EAAE,IAAW,EAAkB,EAAE,CAAC,CAAC;IACjF,iBAAiB,EAAE,GAAG;IACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAClF,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACtC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,KAAK,UAAU,cAAc,CAC3B,WAAqD,EACrD,OAAuC;IAEvC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;IAC/B,OAAO,OAAO,CAAC,GAAG,CAChB,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAA4B,EAAE;QACpD,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG;YAAE,OAAO,CAAoB,CAAC;QAC7D,IAAI,CAAC;YACH,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACnE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,CAAC,CAAC;YACzD,MAAM,IAAI,WAAW,CACnB,gBAAgB,EAChB,WAAW,CAAC,CAAC,QAAQ,SAAS,CAAC,CAAC,QAAQ,wTAAwT,CACjW,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAiB,EAAkB,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;AAE/E,uGAAuG;AACvG,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE3F,MAAM,WAAW,GAAG,CAAC,KAAuC,EAAkB,EAAE;IAC9E,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;IACnD,OAAO;QACL,iBAAiB,EAAE,GAAG;QACtB,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,oDAAoD,KAAK,CAAC,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aAC7G;SACF;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/routes/v1/mcp/ui.d.ts

@@ -0,0 +1,45 @@
+/**
+ * MCP Apps (the `io.modelcontextprotocol/ui` extension, stable 2026-01-26): the `ui://` views a
+ * host that supports the extension (claude.ai, Claude desktop, ChatGPT, VS Code) renders in a
+ * sandboxed iframe in place of a tool's raw JSON — the decision card (`submit_claim`,
+ * `get_decision`), the receipt badge (`verify_receipt`), the protocols (`list_protocols`) and the
+ * upload card (`upload_file`). A tool names its view in
+ * `_meta.ui.resourceUri`; the host reads the HTML with `resources/read` and hands the view the
+ * tool's result over its postMessage bridge.
+ *
+ * Nothing about a tool's answer changes: the view renders the SAME `structuredContent` every client
+ * gets, and a client without the extension ignores `_meta` (opaque by MCP's own rules) and reads the
+ * text as before. The spec asks a server to check the client's `extensions` capability before
+ * linking a view; this server is stateless (`index.ts`), so a `tools/list` never sees the
+ * `initialize` that carried it — linking always is the one answer that holds on every isolate.
+ *
+ * The views are self-contained: inline CSS and JS, no network (`csp` declares no domain, so the
+ * host's restrictive default holds), the DOM built with `textContent` only. The upload card is the
+ * one exception, and only to this oracle's own origin: it PUTs the file the user chose to the
+ * one-shot link `upload_file` returned — the bytes never pass through the model or the host. They show what the tool
+ * already returned and never the claim's answers (no tool returns them) or the record's `metadata`.
+ * The card's two buttons go through the host: "Verify receipt" is a `tools/call` of
+ * `verify_receipt`, and "Approve on IXO" a `ui/open-link` of the `approveUrl` AuthHub issued — the
+ * card never approves or pays anything itself; that stays on AuthHub, with the user.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare const MCP_APP_MIME = "text/html;profile=mcp-app";
+export declare const DECISION_CARD_URI = "ui://eval-oracle/decision-card";
+export declare const RECEIPT_URI = "ui://eval-oracle/receipt";
+export declare const PROTOCOLS_URI = "ui://eval-oracle/protocols";
+export declare const UPLOAD_CARD_URI = "ui://eval-oracle/upload";
+/** A tool's link to its view. The flat key is the pre-GA spelling some hosts still read (the
+ *  extension's own `registerAppTool` sets both). */
+export declare const uiMeta: (resourceUri: string) => {
+    ui: {
+        resourceUri: string;
+    };
+    "ui/resourceUri": string;
+};
+/**
+ * Register the views as resources (`resources/list`, `resources/read`). `authHubOrigin` is the one
+ * origin an approve link may open: a refusal's `approveUrl` pointing anywhere else gets no button.
+ * `oracleOrigin` is the one origin the upload card may send a file to.
+ */
+export declare function registerUi(server: McpServer, authHubOrigin: string, oracleOrigin: string): void;
+//# sourceMappingURL=ui.d.ts.map

package/dist/routes/v1/mcp/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../../../src/routes/v1/mcp/ui.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,eAAO,MAAM,YAAY,8BAA8B,CAAC;AACxD,eAAO,MAAM,iBAAiB,mCAAmC,CAAC;AAClE,eAAO,MAAM,WAAW,6BAA6B,CAAC;AACtD,eAAO,MAAM,aAAa,+BAA+B,CAAC;AAC1D,eAAO,MAAM,eAAe,4BAA4B,CAAC;AAEzD;oDACoD;AACpD,eAAO,MAAM,MAAM,gBAAiB,MAAM;;;;;CAGxC,CAAC;AASH;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CA0C/F"}