@kodycodes/cli 1.14.0 → 1.15.1

package/README.md

@@ -68,7 +68,7 @@ Or run via `npx @kodycodes/cli` without a global install.
 | `kody whoami` | Confirms the CLI MCP connection and lists tools. With a scoped API token (and no login), shows token identity via the Open API. |
 | `kody search [query]` | Calls Kody `search` from the CLI (prefer the host MCP tool). Token-only auth uses Open API `GET /v1/search`. |
 | `kody api <operationId>` | Thin Open API wrapper matching the MCP `api` tool: `operationId` + flat `--params` JSON. Auth: `--token` / `KODY_API_TOKEN` / stored `auth bootstrap` token. |
-| `kody execute` | Calls Kody `execute` from the CLI (`--invoke`, `--code`, `--file`, or stdin via `--file -`). With a scoped API token and no login (or with `--token`), cloud execute goes through CapabilityProxy → `kody.execute` — no `kody login`. Add `--local` to run the module (and static `kody:@…` package modules) on this machine instead. `--allow-private-network` opts local execution into private and local network access. |
+| `kody execute` | Calls Kody `execute` from the CLI (`--invoke`, `--code`, `--file`, or stdin via `--file -`). With a scoped API token and no login (or with `--token`), cloud execute goes through CapabilityProxy → `kody.execute` — no `kody login`. Add `--local` to run the module (and static `kody:@…` package modules) on this machine instead. `--credential key=name` (repeatable; `org:name` / `personal:name` / empty `=` for none) picks ADR 0068 credentials for `--local` or a `kody login` MCP session. `--allow-private-network` opts local execution into private and local network access. |
 
 `--json` prints structured MCP results.
 
@@ -173,6 +173,10 @@ npx @kodycodes/cli execute --local --file ./task.js --params '{"to":"me@example.
 # Or a scoped API token (still wins over login / bootstrap store when set):
 export KODY_API_TOKEN=…   # minted through the Kody `api` tool
 npx @kodycodes/cli execute --local --file ./task.js --params '{"to":"me@example.com"}'
+
+# ADR 0068: pick credentials for credential(key) / credentials(key)
+npx @kodycodes/cli execute --local --credential github=work --credential resend=personal:prod \
+  --code 'import { credential } from "kody:runtime"; export default async () => (await credential("github")).name'
 ```
 
 - **Auth:** `--token` / `KODY_API_TOKEN` when set; else stored `auth bootstrap`
@@ -206,12 +210,14 @@ npx @kodycodes/cli execute --local --file ./task.js --params '{"to":"me@example.
   imports `kody:@…`, it also calls `POST /v1/local-execute/package-graph` to
   download stamped package modules for local embedding
   ([platform issue](https://github.com/kentcdodds/kody/issues/2808)).
-  CapabilityProxy requests use a dedicated HTTP agent that waits up to 7
-  minutes for headers and between body chunks. Origin's 5-minute deadline for
-  a `fetch` with `{{secret:…}}` placeholders ends that call first, with its own
-  error. Node's default 300-second limit no longer cuts it short. With
-  `NODE_USE_ENV_PROXY=1` or `--use-env-proxy`, these requests still honor
-  `HTTP_PROXY` / `HTTPS_PROXY` / `NO_PROXY`, like Node's own fetch.
+  CapabilityProxy requests go through Node's own `node:http(s)` client with
+  one keep-alive connection and a 7-minute idle limit for headers and body
+  chunks. Origin's 5-minute deadline for a `fetch` with `{{secret:…}}`
+  placeholders ends that call first, with its own error. Node's default
+  300-second fetch limit no longer cuts it short. With `NODE_USE_ENV_PROXY=1`
+  or `--use-env-proxy`, these requests honor `HTTP_PROXY` / `HTTPS_PROXY` /
+  `NO_PROXY` like Node's own fetch (Node 22.21 / 24.5 or later; older Node
+  fails with a clear error instead of silently bypassing the proxy).
   A PR preview's API host is `https://kody-pr-<n>-api.<subdomain>.workers.dev`;
   the app origin (`kody-pr-<n>`) answers `/v1/*` with an HTML 404.
 - **Errors:** an expired/revoked token or an account without the

package/dist/capability-proxy.d.ts

@@ -1,4 +1,4 @@
-import type { Dispatcher } from 'undici';
+import { type CredentialCallMapInput } from './credential-call-map.js';
 /**
  * HTTP contract for Kody's CapabilityProxy (Open API `/v1`). Local execute
  * runs user code in workerd and forwards every `kody:runtime` call here with
@@ -6,11 +6,13 @@ import type { Dispatcher } from 'undici';
  * OAuth access token.
  *
  * - `GET  /v1/capability-proxy/session` validates the token before workerd
- *   starts. 200 → `{ scopes?: string[], expiresAt?: string }`.
- * - `POST /v1/capability-proxy/call` with `{ path, args, conversationId? }`
- *   where `path` is the runtime property path (`['kody', 'emailSend']`,
- *   `['kody', 'mcp', server, tool]`, `['workflows', 'create']`) and `args`
- *   is the positional argument list. 200 → `{ result }`.
+ *   starts. 200 → `{ scopes?: string[], expiresAt?: string, features?: string[] }`.
+ * - `POST /v1/capability-proxy/call` with
+ *   `{ path, args, conversationId?, credentials? }` where `path` is the runtime
+ *   property path (`['kody', 'emailSend']`, `['kody', 'mcp', server, tool]`,
+ *   `['workflows', 'create']`) and `args` is the positional argument list.
+ *   `credentials` is the ADR 0068 call map (CLI `--credential`); local code
+ *   controls only `args`, so it cannot pick by name. 200 → `{ result }`.
  *
  * Errors use `{ error: { code, message } }` (a bare string is accepted too).
  * 401 means the token is expired/revoked (or MCP OAuth until the platform
@@ -22,38 +24,56 @@ export declare const capabilityProxyCallPath = "v1/capability-proxy/call";
  * Origin runs a placeholder `fetch` under a 5-minute deadline that starts only
  * after quota checks and placeholder fill, buffers the whole upstream body,
  * and sends headers once that body has ended. Node's global fetch gives up
- * after 300s without headers (undici `headersTimeout`), which would cut the
- * call before the gateway's own deadline fires, so CapabilityProxy requests
- * use a dedicated undici Agent that waits longer than the deadline plus
- * origin overhead.
+ * after 300s without headers and that limit cannot be raised without the
+ * undici package, so CapabilityProxy requests go through Node's own HTTP
+ * client (`node:http` / `node:https`) with an idle timeout that outlasts the
+ * deadline plus origin overhead.
  */
 export declare const capabilityProxyGatewayDeadlineMs: number;
 export declare const capabilityProxyHttpTimeoutMs: number;
+/** Bound DNS / TCP / TLS before the idle timer (undici Agent default was 10s). */
+export declare const capabilityProxyConnectTimeoutMs = 10000;
 /**
  * Node routes global fetch through `HTTP_PROXY` / `HTTPS_PROXY` / `NO_PROXY`
- * only when `NODE_USE_ENV_PROXY=1` or `--use-env-proxy` is set. A dispatcher
- * passed to fetch replaces that global proxy agent, so mirror the same opt-in.
+ * only when `NODE_USE_ENV_PROXY=1` or `--use-env-proxy` is set. The
+ * CapabilityProxy agents mirror the same opt-in through the Agent `proxyEnv`
+ * option.
  */
 export declare function nodeUsesEnvProxy(env?: NodeJS.ProcessEnv, execArgv?: ReadonlyArray<string>): boolean;
-export declare function createCapabilityProxyAgent(timeoutMs?: number, options?: {
+export declare function nodeAgentHonorsEnvProxy(version?: string): boolean;
+export type CapabilityProxyFetchOptions = {
+    /** Idle limit while waiting for headers or between body chunks. */
+    timeoutMs?: number;
+    /** Bound for DNS / TCP / TLS before the socket is ready. */
+    connectTimeoutMs?: number;
     useEnvProxy?: boolean;
-}): Promise<Dispatcher>;
+};
+/**
+ * fetch-shaped sender for CapabilityProxy built on `node:http(s)`: keep-alive
+ * across the session, package-graph and proxied calls, `timeoutMs` as the
+ * only idle limit, and `HTTP_PROXY` / `HTTPS_PROXY` / `NO_PROXY` when Node's
+ * env-proxy opt-in is set. Bodies are strings; responses are buffered.
+ */
+export declare function createCapabilityProxyFetch(options?: CapabilityProxyFetchOptions): typeof fetch;
 export type CapabilityProxySession = {
     scopes: Array<string>;
     expiresAt: string | null;
+    /** Host features, e.g. `credential-call-map` for `--credential`. */
+    features: Array<string>;
 };
 export type CapabilityProxyCall = {
     path: Array<string>;
     args: Array<unknown>;
     conversationId?: string;
+    /** ADR 0068 call map; top-level only (never nested under `args`). */
+    credentials?: CredentialCallMapInput;
 };
 export type CapabilityProxyClientInput = {
     apiUrl: string;
     token: string;
+    /** Defaults to the shared `createCapabilityProxyFetch()` sender. */
     fetchFn?: typeof fetch;
     signal?: AbortSignal;
-    /** Defaults to the shared Agent from `createCapabilityProxyAgent()`. */
-    dispatcher?: Dispatcher;
 };
 export declare class CapabilityProxyError extends Error {
     readonly status: number | null;
@@ -68,3 +88,17 @@ export declare function assertTokenSafeApiUrl(apiUrl: string): void;
 export declare function capabilityProxyUrl(apiUrl: string, path: string): URL;
 export declare function openCapabilityProxySession(input: CapabilityProxyClientInput): Promise<CapabilityProxySession>;
 export declare function callCapabilityProxy(input: CapabilityProxyClientInput & CapabilityProxyCall): Promise<unknown>;
+/**
+ * Preflight ADR 0068 call-map picks via `kody.credentialClientCheck` before
+ * local code runs. Throws on a structured check failure; returns warnings for
+ * ad hoc (non-strict) unknown keys.
+ */
+export declare function checkCredentialCallMap(input: CapabilityProxyClientInput & {
+    credentials: CredentialCallMapInput;
+    conversationId?: string;
+    /** Invoke / package entry: unknown keys are errors. */
+    strict?: boolean;
+    packageId?: string;
+}): Promise<{
+    warnings: Array<string>;
+}>;

package/dist/capability-proxy.js

@@ -1,4 +1,5 @@
 import { apiTokenMintInstructions, cliBootstrapInstructions, featureDisabledMessage, insufficientScopeMessage, readInsufficientScopeDetails, isScopedApiToken, rejectedOauthBearerMessage, } from './api-token.js';
+import { formatCredentialClientError, } from './credential-call-map.js';
 import { apiTokenEnvVar, cliName } from './defaults.js';
 import { describeNetworkError } from './network-error.js';
 import { readPackageVersion } from './package-info.js';
@@ -9,11 +10,13 @@ import { readPackageVersion } from './package-info.js';
  * OAuth access token.
  *
  * - `GET  /v1/capability-proxy/session` validates the token before workerd
- *   starts. 200 → `{ scopes?: string[], expiresAt?: string }`.
- * - `POST /v1/capability-proxy/call` with `{ path, args, conversationId? }`
- *   where `path` is the runtime property path (`['kody', 'emailSend']`,
- *   `['kody', 'mcp', server, tool]`, `['workflows', 'create']`) and `args`
- *   is the positional argument list. 200 → `{ result }`.
+ *   starts. 200 → `{ scopes?: string[], expiresAt?: string, features?: string[] }`.
+ * - `POST /v1/capability-proxy/call` with
+ *   `{ path, args, conversationId?, credentials? }` where `path` is the runtime
+ *   property path (`['kody', 'emailSend']`, `['kody', 'mcp', server, tool]`,
+ *   `['workflows', 'create']`) and `args` is the positional argument list.
+ *   `credentials` is the ADR 0068 call map (CLI `--credential`); local code
+ *   controls only `args`, so it cannot pick by name. 200 → `{ result }`.
  *
  * Errors use `{ error: { code, message } }` (a bare string is accepted too).
  * 401 means the token is expired/revoked (or MCP OAuth until the platform
@@ -25,17 +28,20 @@ export const capabilityProxyCallPath = 'v1/capability-proxy/call';
  * Origin runs a placeholder `fetch` under a 5-minute deadline that starts only
  * after quota checks and placeholder fill, buffers the whole upstream body,
  * and sends headers once that body has ended. Node's global fetch gives up
- * after 300s without headers (undici `headersTimeout`), which would cut the
- * call before the gateway's own deadline fires, so CapabilityProxy requests
- * use a dedicated undici Agent that waits longer than the deadline plus
- * origin overhead.
+ * after 300s without headers and that limit cannot be raised without the
+ * undici package, so CapabilityProxy requests go through Node's own HTTP
+ * client (`node:http` / `node:https`) with an idle timeout that outlasts the
+ * deadline plus origin overhead.
  */
 export const capabilityProxyGatewayDeadlineMs = 5 * 60_000;
 export const capabilityProxyHttpTimeoutMs = 7 * 60_000;
+/** Bound DNS / TCP / TLS before the idle timer (undici Agent default was 10s). */
+export const capabilityProxyConnectTimeoutMs = 10_000;
 /**
  * Node routes global fetch through `HTTP_PROXY` / `HTTPS_PROXY` / `NO_PROXY`
- * only when `NODE_USE_ENV_PROXY=1` or `--use-env-proxy` is set. A dispatcher
- * passed to fetch replaces that global proxy agent, so mirror the same opt-in.
+ * only when `NODE_USE_ENV_PROXY=1` or `--use-env-proxy` is set. The
+ * CapabilityProxy agents mirror the same opt-in through the Agent `proxyEnv`
+ * option.
  */
 export function nodeUsesEnvProxy(env = process.env, execArgv = process.execArgv) {
     if (env.NODE_USE_ENV_PROXY === '1')
@@ -43,18 +49,148 @@ export function nodeUsesEnvProxy(env = process.env, execArgv = process.execArgv)
     const flags = [...execArgv, ...(env.NODE_OPTIONS ?? '').split(/\s+/)];
     return flags.includes('--use-env-proxy');
 }
-export async function createCapabilityProxyAgent(timeoutMs = capabilityProxyHttpTimeoutMs, options = {}) {
-    // undici costs ~55ms to load, so only the commands that send a request pay for it.
-    const { Agent, EnvHttpProxyAgent } = await import('undici');
-    const timeouts = { headersTimeout: timeoutMs, bodyTimeout: timeoutMs };
-    return (options.useEnvProxy ?? nodeUsesEnvProxy())
-        ? new EnvHttpProxyAgent(timeouts)
-        : new Agent(timeouts);
+/** `http.Agent({ proxyEnv })` exists from these releases; older Node ignores the option. */
+const envProxyAgentMinimumNode = { 22: 21, 24: 5 };
+export function nodeAgentHonorsEnvProxy(version = process.versions.node) {
+    const [major = 0, minor = 0] = version.split('.').map(Number);
+    const minimumMinor = envProxyAgentMinimumNode[major];
+    if (minimumMinor === undefined)
+        return major > 24;
+    return minor >= minimumMinor;
 }
-let defaultCapabilityProxyAgent = null;
-function capabilityProxyAgent() {
-    defaultCapabilityProxyAgent ??= createCapabilityProxyAgent();
-    return defaultCapabilityProxyAgent;
+/**
+ * fetch-shaped sender for CapabilityProxy built on `node:http(s)`: keep-alive
+ * across the session, package-graph and proxied calls, `timeoutMs` as the
+ * only idle limit, and `HTTP_PROXY` / `HTTPS_PROXY` / `NO_PROXY` when Node's
+ * env-proxy opt-in is set. Bodies are strings; responses are buffered.
+ */
+export function createCapabilityProxyFetch(options = {}) {
+    const timeoutMs = options.timeoutMs ?? capabilityProxyHttpTimeoutMs;
+    const connectTimeoutMs = options.connectTimeoutMs ?? capabilityProxyConnectTimeoutMs;
+    const useEnvProxy = options.useEnvProxy ?? nodeUsesEnvProxy();
+    if (useEnvProxy && !nodeAgentHonorsEnvProxy()) {
+        throw new Error(`Node ${process.version} cannot route CapabilityProxy requests through HTTP_PROXY / HTTPS_PROXY: env-proxy support needs Node 22.21 or 24.5 and later. Upgrade Node or unset NODE_USE_ENV_PROXY / --use-env-proxy.`);
+    }
+    let transports = null;
+    return async (input, init = {}) => {
+        const url = input instanceof URL ? input : new URL(input instanceof Request ? input.url : input);
+        // node:http and node:https cost ~7ms to load, so only commands that send a request pay for it.
+        transports ??= loadTransports(useEnvProxy);
+        const transport = (await transports)[url.protocol];
+        if (!transport) {
+            throw new TypeError(`Unsupported protocol for the Kody API: ${url.protocol}`);
+        }
+        const body = init.body;
+        if (body !== undefined && body !== null && typeof body !== 'string') {
+            throw new TypeError('CapabilityProxy requests send string bodies.');
+        }
+        return new Promise((resolve, reject) => {
+            const request = transport.request(url, {
+                agent: transport.agent,
+                method: init.method ?? 'GET',
+                headers: Object.fromEntries(new Headers(init.headers)),
+            }, (response) => {
+                clearTimeout(connectTimer);
+                const chunks = [];
+                response.on('data', (chunk) => chunks.push(chunk));
+                response.on('error', reject);
+                response.on('end', () => resolve(toResponse(response, Buffer.concat(chunks))));
+            });
+            // request.setTimeout only arms after the socket is connected; bound DNS/TCP/TLS separately.
+            const connectTimer = setTimeout(() => {
+                request.destroy(new Error(`Kody API did not connect within ${connectTimeoutMs}ms (${url.pathname}).`));
+            }, connectTimeoutMs);
+            request.on('socket', (socket) => {
+                const clearConnectTimer = () => clearTimeout(connectTimer);
+                if (url.protocol === 'https:') {
+                    // `encrypted` is always true on TLSSocket; secureConnecting is the
+                    // handshake flag (not always in @types/node). Keep-alive reuse skips
+                    // secureConnect.
+                    if (tlsHandshakePending(socket) === false) {
+                        clearConnectTimer();
+                        return;
+                    }
+                    socket.once('secureConnect', clearConnectTimer);
+                    return;
+                }
+                if (!socket.connecting) {
+                    clearConnectTimer();
+                    return;
+                }
+                socket.once('connect', clearConnectTimer);
+            });
+            request.setTimeout(timeoutMs, () => request.destroy(new Error(`Kody API sent nothing for ${timeoutMs}ms (${url.pathname}).`)));
+            request.on('error', (error) => {
+                clearTimeout(connectTimer);
+                reject(error);
+            });
+            const { signal } = init;
+            if (signal) {
+                const abort = () => {
+                    clearTimeout(connectTimer);
+                    request.destroy(abortError(signal.reason));
+                };
+                if (signal.aborted) {
+                    abort();
+                }
+                else {
+                    signal.addEventListener('abort', abort, { once: true });
+                    request.once('close', () => signal.removeEventListener('abort', abort));
+                }
+            }
+            request.end(body ?? undefined);
+        });
+    };
+}
+async function loadTransports(useEnvProxy) {
+    const [http, https] = await Promise.all([import('node:http'), import('node:https')]);
+    const agentOptions = { keepAlive: true, ...(useEnvProxy ? { proxyEnv: process.env } : {}) };
+    return {
+        'http:': { agent: unrefFreeSockets(new http.Agent(agentOptions)), request: http.request },
+        'https:': { agent: unrefFreeSockets(new https.Agent(agentOptions)), request: https.request },
+    };
+}
+/** Keep-alive free sockets must not pin the event loop after the last request. */
+function unrefFreeSockets(agent) {
+    agent.on('free', (socket) => {
+        socket.unref();
+    });
+    return agent;
+}
+/** `true` while TLS handshake is in progress; `false` once established; else unknown. */
+function tlsHandshakePending(socket) {
+    if (!('secureConnecting' in socket))
+        return null;
+    return socket.secureConnecting;
+}
+function abortError(reason) {
+    if (reason instanceof Error)
+        return reason;
+    return new DOMException(typeof reason === 'string' ? reason : 'This operation was aborted', 'AbortError');
+}
+function toResponse(response, body) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(response.headers)) {
+        if (Array.isArray(value)) {
+            for (const entry of value)
+                headers.append(name, entry);
+        }
+        else if (value !== undefined) {
+            headers.set(name, value);
+        }
+    }
+    const status = response.statusCode ?? 0;
+    const bodyless = status === 204 || status === 205 || status === 304;
+    return new Response(bodyless ? null : body, {
+        status,
+        statusText: response.statusMessage ?? '',
+        headers,
+    });
+}
+let defaultCapabilityProxyFetch = null;
+function capabilityProxyFetch() {
+    defaultCapabilityProxyFetch ??= createCapabilityProxyFetch();
+    return defaultCapabilityProxyFetch;
 }
 export class CapabilityProxyError extends Error {
     status;
@@ -99,6 +235,9 @@ export async function openCapabilityProxySession(input) {
             ? record.scopes.filter((scope) => typeof scope === 'string')
             : [],
         expiresAt: typeof record.expiresAt === 'string' ? record.expiresAt : null,
+        features: Array.isArray(record.features)
+            ? record.features.filter((feature) => typeof feature === 'string')
+            : [],
     };
 }
 export async function callCapabilityProxy(input) {
@@ -106,6 +245,8 @@ export async function callCapabilityProxy(input) {
     const payload = { path: input.path, args: input.args };
     if (input.conversationId !== undefined)
         payload.conversationId = input.conversationId;
+    if (input.credentials !== undefined)
+        payload.credentials = input.credentials;
     const response = await send(input, url, {
         method: 'POST',
         headers: { 'content-type': 'application/json' },
@@ -121,14 +262,46 @@ export async function callCapabilityProxy(input) {
     }
     return isRecord(body) ? body.result : undefined;
 }
+/**
+ * Preflight ADR 0068 call-map picks via `kody.credentialClientCheck` before
+ * local code runs. Throws on a structured check failure; returns warnings for
+ * ad hoc (non-strict) unknown keys.
+ */
+export async function checkCredentialCallMap(input) {
+    const args = {};
+    if (input.strict === true)
+        args.strict = true;
+    if (input.packageId !== undefined)
+        args.packageId = input.packageId;
+    const result = await callCapabilityProxy({
+        apiUrl: input.apiUrl,
+        token: input.token,
+        fetchFn: input.fetchFn,
+        signal: input.signal,
+        path: ['kody', 'credentialClientCheck'],
+        args: [args],
+        conversationId: input.conversationId,
+        credentials: input.credentials,
+    });
+    if (!isRecord(result)) {
+        throw new CapabilityProxyError('credentialClientCheck returned an unexpected result.');
+    }
+    if (result.ok === false) {
+        const error = isRecord(result.error) ? result.error : {};
+        const code = typeof error.code === 'string' ? error.code : 'credential_error';
+        throw new CapabilityProxyError(formatCredentialClientError(error), { code });
+    }
+    const value = isRecord(result.value) ? result.value : null;
+    const warnings = Array.isArray(value?.warnings)
+        ? value.warnings.filter((warning) => typeof warning === 'string')
+        : [];
+    return { warnings };
+}
 async function send(input, url, init) {
-    const fetchFn = input.fetchFn ?? fetch;
-    // Global fetch on Node 22+ (bundled undici 6–8) accepts undici 7 dispatchers.
-    const dispatcherInit = { dispatcher: input.dispatcher ?? (await capabilityProxyAgent()) };
+    const fetchFn = input.fetchFn ?? capabilityProxyFetch();
     try {
         return await fetchFn(url, {
             ...init,
-            ...dispatcherInit,
             signal: input.signal,
             headers: {
                 ...init.headers,

package/dist/capability-proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability-proxy.js","sourceRoot":"","sources":["../src/capability-proxy.ts"],"names":[],"mappings":"AACA,OAAO,EACN,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,EAC5B,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAA;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAA;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,GAAG,MAAM,CAAA;AAC1D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,GAAG,MAAM,CAAA;AAEtD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,WAAkC,OAAO,CAAC,QAAQ;IAElD,IAAI,GAAG,CAAC,kBAAkB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC/C,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IACrE,OAAO,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,YAAoB,4BAA4B,EAChD,UAAqC,EAAE;IAEvC,mFAAmF;IACnF,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC3D,MAAM,QAAQ,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,CAAA;IACtE,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,gBAAgB,EAAE,CAAC;QACjD,CAAC,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;AACvB,CAAC;AAED,IAAI,2BAA2B,GAA+B,IAAI,CAAA;AAElE,SAAS,oBAAoB;IAC5B,2BAA2B,KAAK,0BAA0B,EAAE,CAAA;IAC5D,OAAO,2BAA2B,CAAA;AACnC,CAAC;AAsBD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,MAAM,CAAe;IACrB,IAAI,CAAe;IAE5B,YACC,OAAe,EACf,UAA4D,EAAE;QAE9D,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAA;QACpC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAA;IACjC,CAAC;CACD;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;AAElE,gEAAgE;AAChE,MAAM,UAAU,qBAAqB,CAAC,MAAc;IACnD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAM;IACrC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAM;IACvE,MAAM,IAAI,KAAK,CACd,qCAAqC,GAAG,CAAC,MAAM,yDAAyD,CACxG,CAAA;AACF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAY;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAA;IACzD,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,KAAiC;IAEjC,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACzC,OAAO;QACN,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC7E,CAAC,CAAC,EAAE;QACL,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KACzE,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,KAAuD;IAEvD,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;IACrE,MAAM,OAAO,GAAwB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;IAC3E,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;IACrF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC7B,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AAChD,CAAC;AAED,KAAK,UAAU,IAAI,CAClB,KAAiC,EACjC,GAAQ,EACR,IAAiB;IAEjB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAA;IACtC,8EAA8E;IAC9E,MAAM,cAAc,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,MAAM,oBAAoB,EAAE,CAAC,EAAE,CAAA;IACzF,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE;YACzB,GAAG,IAAI;YACP,GAAG,cAAc;YACjB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE;gBACR,GAAI,IAAI,CAAC,OAA8C;gBACvD,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE;gBACtC,YAAY,EAAE,GAAG,OAAO,IAAI,kBAAkB,EAAE,EAAE;aAClD;SACD,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,IAAI,oBAAoB,CAC7B,mCAAmC,GAAG,CAAC,MAAM,KAAK,MAAM,qDAAqD,CAC7G,CAAA;IACF,CAAC;AACF,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACtD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,MAAM,OAAO,GACZ,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAClF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAED,SAAS,eAAe,CACvB,MAAc,EACd,IAAa,EACb,GAAQ,EACR,KAAyB,EACzB,KAAa;IAEb,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,IAAI,CAAA;IAClC,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC;YACtC,CAAC,CAAC,uHAAuH,cAAc,IAAI,MAAM,EAAE;YACnJ,CAAC,CAAC,GAAG,0BAA0B,EAAE,GAAG,MAAM,EAAE,CAAA;QAC7C,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACjC,OAAO,IAAI,oBAAoB,CAAC,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACnC,OAAO,IAAI,oBAAoB,CAC9B,GAAG,wBAAwB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,EAAE,EAC1E,EAAE,MAAM,EAAE,IAAI,EAAE,CAChB,CAAA;IACF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,IAAI,oBAAoB,CAC9B,sDAAsD,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,wBAAwB,EAAE,2BAA2B,wBAAwB,EAAE,GAAG,MAAM,EAAE,EAC7K,EAAE,MAAM,EAAE,IAAI,EAAE,CAChB,CAAA;IACF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,IAAI,oBAAoB,CAC9B,oCAAoC,GAAG,CAAC,IAAI,2FAA2F,EACvI,EAAE,MAAM,EAAE,IAAI,EAAE,CAChB,CAAA;IACF,CAAC;IACD,OAAO,IAAI,oBAAoB,CAC9B,OAAO,EAAE,OAAO,IAAI,qCAAqC,MAAM,KAAK,GAAG,CAAC,QAAQ,IAAI,EACpF,EAAE,MAAM,EAAE,IAAI,EAAE,CAChB,CAAA;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC"}
+{"version":3,"file":"capability-proxy.js","sourceRoot":"","sources":["../src/capability-proxy.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,EAC5B,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACN,2BAA2B,GAE3B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEtD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAA;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAA;AAEjE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,GAAG,MAAM,CAAA;AAC1D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,GAAG,MAAM,CAAA;AACtD,kFAAkF;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAA;AAErD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,WAAkC,OAAO,CAAC,QAAQ;IAElD,IAAI,GAAG,CAAC,kBAAkB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC/C,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IACrE,OAAO,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;AACzC,CAAC;AAED,4FAA4F;AAC5F,MAAM,wBAAwB,GAA2B,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;AAE1E,MAAM,UAAU,uBAAuB,CAAC,UAAkB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAC9E,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC7D,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAA;IACpD,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,GAAG,EAAE,CAAA;IACjD,OAAO,KAAK,IAAI,YAAY,CAAA;AAC7B,CAAC;AAUD;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACzC,UAAuC,EAAE;IAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,4BAA4B,CAAA;IACnE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,+BAA+B,CAAA;IACpF,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,gBAAgB,EAAE,CAAA;IAC7D,IAAI,WAAW,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACd,QAAQ,OAAO,CAAC,OAAO,4LAA4L,CACnN,CAAA;IACF,CAAC;IACD,IAAI,UAAU,GAA+B,IAAI,CAAA;IACjD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAChG,+FAA+F;QAC/F,UAAU,KAAK,cAAc,CAAC,WAAW,CAAC,CAAA;QAC1C,MAAM,SAAS,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC,GAAG,CAAC,QAA4B,CAAC,CAAA;QACtE,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAAC,0CAA0C,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;QACtB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;QACpE,CAAC;QACD,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAChC,GAAG,EACH;gBACC,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACtD,EACD,CAAC,QAAQ,EAAE,EAAE;gBACZ,YAAY,CAAC,YAAY,CAAC,CAAA;gBAC1B,MAAM,MAAM,GAAkB,EAAE,CAAA;gBAChC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC1D,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBAC5B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;YAC/E,CAAC,CACD,CAAA;YACD,4FAA4F;YAC5F,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpC,OAAO,CAAC,OAAO,CACd,IAAI,KAAK,CACR,mCAAmC,gBAAgB,OAAO,GAAG,CAAC,QAAQ,IAAI,CAC1E,CACD,CAAA;YACF,CAAC,EAAE,gBAAgB,CAAC,CAAA;YACpB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC/B,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;gBAC1D,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC/B,mEAAmE;oBACnE,qEAAqE;oBACrE,iBAAiB;oBACjB,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;wBAC3C,iBAAiB,EAAE,CAAA;wBACnB,OAAM;oBACP,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;oBAC/C,OAAM;gBACP,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACxB,iBAAiB,EAAE,CAAA;oBACnB,OAAM;gBACP,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAA;YAC1C,CAAC,CAAC,CAAA;YACF,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,CAClC,OAAO,CAAC,OAAO,CACd,IAAI,KAAK,CAAC,6BAA6B,SAAS,OAAO,GAAG,CAAC,QAAQ,IAAI,CAAC,CACxE,CACD,CAAA;YACD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7B,YAAY,CAAC,YAAY,CAAC,CAAA;gBAC1B,MAAM,CAAC,KAAK,CAAC,CAAA;YACd,CAAC,CAAC,CAAA;YACF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;YACvB,IAAI,MAAM,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,GAAG,EAAE;oBAClB,YAAY,CAAC,YAAY,CAAC,CAAA;oBAC1B,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC3C,CAAC,CAAA;gBACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,KAAK,EAAE,CAAA;gBACR,CAAC;qBAAM,CAAC;oBACP,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;oBACvD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;gBACxE,CAAC;YACF,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;IACH,CAAC,CAAA;AACF,CAAC;AAKD,KAAK,UAAU,cAAc,CAAC,WAAoB;IACjD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACpF,MAAM,YAAY,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAC3F,OAAO;QACN,OAAO,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;QACzF,QAAQ,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KAC5F,CAAA;AACF,CAAC;AAED,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,KAAgB;IACzC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QAC3B,MAAM,CAAC,KAAK,EAAE,CAAA;IACf,CAAC,CAAC,CAAA;IACF,OAAO,KAAK,CAAA;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,mBAAmB,CAAC,MAAc;IAC1C,IAAI,CAAC,CAAC,kBAAkB,IAAI,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAChD,OAAQ,MAAiD,CAAC,gBAAgB,CAAA;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,MAAe;IAClC,IAAI,MAAM,YAAY,KAAK;QAAE,OAAO,MAAM,CAAA;IAC1C,OAAO,IAAI,YAAY,CACtB,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,4BAA4B,EAClE,YAAY,CACZ,CAAA;AACF,CAAC;AAED,SAAS,UAAU,CAAC,QAAyB,EAAE,IAAY;IAC1D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACvD,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACzB,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAA;IACnE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;QAC3C,MAAM;QACN,UAAU,EAAE,QAAQ,CAAC,aAAa,IAAI,EAAE;QACxC,OAAO;KACP,CAAC,CAAA;AACH,CAAC;AAED,IAAI,2BAA2B,GAAwB,IAAI,CAAA;AAE3D,SAAS,oBAAoB;IAC5B,2BAA2B,KAAK,0BAA0B,EAAE,CAAA;IAC5D,OAAO,2BAA2B,CAAA;AACnC,CAAC;AAyBD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,MAAM,CAAe;IACrB,IAAI,CAAe;IAE5B,YACC,OAAe,EACf,UAA4D,EAAE;QAE9D,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAA;QACpC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAA;IACjC,CAAC;CACD;AAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;AAElE,gEAAgE;AAChE,MAAM,UAAU,qBAAqB,CAAC,MAAc;IACnD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAM;IACrC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAM;IACvE,MAAM,IAAI,KAAK,CACd,qCAAqC,GAAG,CAAC,MAAM,yDAAyD,CACxG,CAAA;AACF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAY;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAA;IACzD,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,KAAiC;IAEjC,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACzC,OAAO;QACN,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC7E,CAAC,CAAC,EAAE;QACL,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QACzE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC;YACrF,CAAC,CAAC,EAAE;KACL,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,KAAuD;IAEvD,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;IACrE,MAAM,OAAO,GAAwB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;IAC3E,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;IACrF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAA;IAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC7B,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,KAMC;IAED,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IAC7C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;IACnE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;QACxC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,CAAC,MAAM,EAAE,uBAAuB,CAAC;QACvC,IAAI,EAAE,CAAC,IAAI,CAAC;QACZ,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAAC,sDAAsD,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QACxD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAA;QAC7E,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC9C,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC;QACpF,CAAC,CAAC,EAAE,CAAA;IACL,OAAO,EAAE,QAAQ,EAAE,CAAA;AACpB,CAAC;AAED,KAAK,UAAU,IAAI,CAClB,KAAiC,EACjC,GAAQ,EACR,IAAiB;IAEjB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,oBAAoB,EAAE,CAAA;IACvD,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE;YACzB,GAAG,IAAI;YACP,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE;gBACR,GAAI,IAAI,CAAC,OAA8C;gBACvD,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE;gBACtC,YAAY,EAAE,GAAG,OAAO,IAAI,kBAAkB,EAAE,EAAE;aAClD;SACD,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,IAAI,oBAAoB,CAC7B,mCAAmC,GAAG,CAAC,MAAM,KAAK,MAAM,qDAAqD,CAC7G,CAAA;IACF,CAAC;AACF,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACtD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,MAAM,OAAO,GACZ,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAClF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAED,SAAS,eAAe,CACvB,MAAc,EACd,IAAa,EACb,GAAQ,EACR,KAAyB,EACzB,KAAa;IAEb,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,IAAI,CAAA;IAClC,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC;YACtC,CAAC,CAAC,uHAAuH,cAAc,IAAI,MAAM,EAAE;YACnJ,CAAC,CAAC,GAAG,0BAA0B,EAAE,GAAG,MAAM,EAAE,CAAA;QAC7C,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACjC,OAAO,IAAI,oBAAoB,CAAC,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACnC,OAAO,IAAI,oBAAoB,CAC9B,GAAG,wBAAwB,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,EAAE,EAC1E,EAAE,MAAM,EAAE,IAAI,EAAE,CAChB,CAAA;IACF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,IAAI,oBAAoB,CAC9B,sDAAsD,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,wBAAwB,EAAE,2BAA2B,wBAAwB,EAAE,GAAG,MAAM,EAAE,EAC7K,EAAE,MAAM,EAAE,IAAI,EAAE,CAChB,CAAA;IACF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,IAAI,oBAAoB,CAC9B,oCAAoC,GAAG,CAAC,IAAI,2FAA2F,EACvI,EAAE,MAAM,EAAE,IAAI,EAAE,CAChB,CAAA;IACF,CAAC;IACD,OAAO,IAAI,oBAAoB,CAC9B,OAAO,EAAE,OAAO,IAAI,qCAAqC,MAAM,KAAK,GAAG,CAAC,QAAQ,IAAI,EACpF,EAAE,MAAM,EAAE,IAAI,EAAE,CAChB,CAAA;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC"}

package/dist/cli.d.ts

@@ -1,4 +1,5 @@
 import { resolveScopedApiToken } from './api-token.js';
+import { type CredentialCallMapInput } from './credential-call-map.js';
 export { readApiToken, requireApiToken as resolveApiToken, resolveScopedApiToken, } from './api-token.js';
 export { resolveLocalExecuteBearer } from './local-execute-auth.js';
 export { authBootstrap, authBootstrapWithScopes, bootstrapRedeemRequestBody, cliTokenLifetimeAliases, cliTokenLifetimeMissingError, cliTokenLifetimePolicy, parseCliLifetimeSecondsFlag, parseCliScopesFlag, redeemBootstrapCode, resolveCliTokenLifetime, } from './auth-bootstrap.js';
@@ -24,6 +25,7 @@ declare function parseKnown(args: Array<string>): {
         'conversation-id'?: string | boolean | undefined;
         local?: string | boolean | undefined;
         'allow-private-network'?: string | boolean | undefined;
+        credential?: (string | boolean)[] | undefined;
         token?: string | boolean | undefined;
         'api-url'?: string | boolean | undefined;
         lifetime?: string | boolean | undefined;
@@ -63,6 +65,7 @@ export declare function buildExecuteToolArgs(input: {
     code?: string;
     paramsJson?: string;
     conversationId?: string;
+    credentials?: CredentialCallMapInput;
 }): Record<string, unknown>;
 /** Parse `--params` JSON for `kody api` (flat object, same as MCP `api`). */
 export declare function parseApiParamsJson(paramsJson?: string): Record<string, unknown>;

package/dist/cli.js

@@ -3,6 +3,7 @@ import { readFile } from 'node:fs/promises';
 import { cliBootstrapMintCall, hasExplicitTokenFlag, requireApiToken, resolveScopedApiToken, } from './api-token.js';
 import { deleteStoredApiToken, loadStoredApiToken, } from './api-token-store.js';
 import { authBootstrap, authBootstrapWithScopes, bootstrapMintLifetimeFields, cliCredentialBootstrapOperationId, parseCliLifetimeSecondsFlag, parseCliScopesFlag, resolveCliTokenLifetime, } from './auth-bootstrap.js';
+import { parseCredentialFlags, } from './credential-call-map.js';
 import { defaultApiUrl, defaultMcpUrl, modernMcpProtocolVersion } from './defaults.js';
 import { usage } from './help.js';
 import { deleteCredentials, loadCredentials } from './store.js';
@@ -40,6 +41,7 @@ function parseKnown(args) {
             'conversation-id': { type: 'string' },
             local: { type: 'boolean' },
             'allow-private-network': { type: 'boolean' },
+            credential: { type: 'string', multiple: true },
             token: { type: 'string' },
             'api-url': { type: 'string' },
             lifetime: { type: 'string' },
@@ -386,6 +388,11 @@ async function dispatch(parsed, write, writeErr) {
                         : fileArg === '-'
                             ? await readStdin()
                             : positionalModule || undefined;
+            const credentials = parseCredentialFlags(Array.isArray(parsed.values.credential)
+                ? parsed.values.credential.filter((value) => typeof value === 'string')
+                : typeof parsed.values.credential === 'string'
+                    ? [parsed.values.credential]
+                    : undefined);
             const args = buildExecuteToolArgs({
                 invoke,
                 code: typeof code === 'string' ? code : undefined,
@@ -393,6 +400,7 @@ async function dispatch(parsed, write, writeErr) {
                 conversationId: typeof parsed.values['conversation-id'] === 'string'
                     ? parsed.values['conversation-id']
                     : undefined,
+                credentials,
             });
             const apiUrl = apiUrlFrom({
                 apiUrl: typeof parsed.values['api-url'] === 'string'
@@ -412,6 +420,7 @@ async function dispatch(parsed, write, writeErr) {
                     ...(modulePath !== undefined ? { modulePath } : {}),
                     params: args.params,
                     conversationId: args.conversationId,
+                    ...(credentials !== undefined ? { credentials } : {}),
                     token: await resolveLocalExecuteBearer({
                         tokenValues,
                         mcpUrl,
@@ -428,6 +437,7 @@ async function dispatch(parsed, write, writeErr) {
                         invoke,
                         params: args.params,
                         conversationId: args.conversationId,
+                        ...(credentials !== undefined ? { credentials } : {}),
                         token: requireApiToken(tokenValues, process.env, 'execute with an API token', { apiUrl }),
                         apiUrl,
                     })
@@ -525,6 +535,9 @@ function attachExecuteCommonArgs(args, input) {
     if (input.conversationId !== undefined) {
         args.conversationId = input.conversationId;
     }
+    if (input.credentials !== undefined) {
+        args.credentials = input.credentials;
+    }
     return args;
 }
 /**