@mysten-incubation/memwal-mcp 0.0.14-dev.1 → 0.0.14-dev.3

package/dist/auth.js

@@ -10,9 +10,9 @@
  * documentation patterns transfer cleanly.
  */
 import { homedir } from "node:os";
-import { randomUUID } from "node:crypto";
-import { join, dirname, basename } from "node:path";
-import { mkdirSync, readFileSync, writeFileSync, renameSync, unlinkSync, existsSync, } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
+import { join, dirname, basename, isAbsolute, relative } from "node:path";
+import { mkdirSync, readFileSync, writeFileSync, renameSync, unlinkSync, existsSync, realpathSync, } from "node:fs";
 import { log } from "./logger.js";
 const CREDS_FILE = "credentials.json";
 /** Global, per-machine location. Always the fallback, and the only location
@@ -60,37 +60,285 @@ function projectCredsPath() {
         dir = parent;
     }
 }
+/* ------------------------------------------------------------------------- *
+ * Project credentials are opt-IN, per machine (WALM-639).
+ *
+ * Presence alone used to be the opt-in: a `.memwal/credentials.json` anywhere
+ * at or above the working directory simply won. But that file is INSIDE the
+ * repository, so anyone who can commit to a repo — or persuade someone to
+ * clone one — could choose the account and the relayer every memory written
+ * from that directory goes to. Opening a project silently repointed the
+ * destination, and the writes land on immutable storage with no delete path.
+ *
+ * So a project file is now inert until the user approves that exact file,
+ * account, delegate and relayer. The approval record lives beside the GLOBAL
+ * credentials, never in the repository, because a record a repository can
+ * carry is a repository approving itself.
+ * ------------------------------------------------------------------------- */
+const APPROVALS_FILE = "project-approvals.json";
+/**
+ * Refusal of a `MEMWAL_CREDS_DIR` that cannot be trusted to sit outside a
+ * repository. Thrown, never swallowed — see {@link credsDirOverride}.
+ */
+export class UntrustedCredsDirError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "UntrustedCredsDirError";
+    }
+}
+/** True when `path` is `root` itself or something underneath it. String
+ * prefixes get `/repo` vs `/repo-2` wrong, so this asks `relative` instead. */
+function isInside(root, path) {
+    const rel = relative(root, path);
+    return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
+}
 /**
- * Which credentials file this process should read and write.
+ * Canonical form of a path that need not exist yet.
  *
- * The nearest project-local `.memwal/credentials.json` at or above the working
- * directory wins over the global one, the way `.npmrc` and `.git/config`
- * resolve. Signing in from one project otherwise repoints every other project
- * on the machine at a different account and delegate key, silently — memories
- * then land on the wrong account, on immutable storage, with no delete path
- * (GH #628).
+ * `realpathSync` throws on a missing leaf, and the override names a directory
+ * this process may be about to create — so resolve the deepest ancestor that
+ * does exist and re-append the rest. Without this, comparing it against the
+ * project root is decided by which spelling of a symlinked path each side
+ * happened to use: on macOS `/tmp/x` and `/private/tmp/x` are the same
+ * directory, and a containment check that says otherwise is a check an
+ * attacker picks the spelling to defeat.
+ */
+function canonicalDir(path) {
+    const tail = [];
+    let dir = path;
+    for (;;) {
+        if (existsSync(dir))
+            return join(realpathSync(dir), ...tail.reverse());
+        const parent = dirname(dir);
+        if (parent === dir)
+            return path;
+        tail.push(basename(dir));
+        dir = parent;
+    }
+}
+/**
+ * The repository the working directory is in, or null.
  *
- * Presence-based on purpose: creating the local file is the opt-in, so this is
- * purely additive. Resolved per call rather than at module load, because the
- * working directory is not knowable at import time.
+ * Bounded exactly like {@link projectCredsPath}'s walk — nearest ancestor
+ * carrying `.git`, stopping at the home directory or the filesystem root — so
+ * "the project" means the same thing to the override check as it does to
+ * resolution.
+ */
+function projectRoot() {
+    const home = homedir();
+    let dir = process.cwd();
+    for (;;) {
+        if (dir === home)
+            return null;
+        if (existsSync(join(dir, ".git")))
+            return dir;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}
+/**
+ * `MEMWAL_CREDS_DIR`, but only when it can be trusted — and the same answer for
+ * every reader of it.
+ *
+ * The override decides the credentials outright and skips the approval gate
+ * entirely, which makes it exactly as trustworthy as whoever set the
+ * environment. That is the right trade for the thing it exists for — a shell, a
+ * test harness, CI — and the wrong one for the way it is reachable: an MCP
+ * client reads `.cursor/mcp.json`, `.vscode/mcp.json` or `.claude/settings.json`
+ * OUT OF THE CHECKOUT and hands this process the `env` block it finds there. A
+ * committed `env` block is a repository setting its own override, which is the
+ * thing WALM-639 exists to stop.
+ *
+ * So two shapes are refused:
+ *
+ *   - **Relative.** `join("", CREDS_FILE)` is the bare string
+ *     `"credentials.json"` and `join(".memwal", CREDS_FILE)` is repo-local:
+ *     both resolve against `process.cwd()`. That moves the credentials AND the
+ *     approval store into whatever directory the client started in — usually
+ *     the project root, so the store that exists precisely so a repository
+ *     cannot carry its own approval becomes a file the repository carries.
+ *   - **Absolute, but inside the current project.** Editors expand
+ *     `${workspaceFolder}` inside those same config files, so "absolute" is not
+ *     by itself evidence a human typed it. An override pointing into the
+ *     checkout contradicts the one property this escape hatch is justified by.
+ *
+ * Refusing is loud on purpose, and matches the launcher's treatment of a
+ * relative runtime directory: falling back to the global directory in silence
+ * would hide a misconfigured — or hostile — client config, and leave the user
+ * to work out on their own why their override did nothing.
  *
- * `MEMWAL_CREDS_DIR` overrides both project and global resolution when set,
- * and is re-read on every call.
+ * An EMPTY value is the one thing that is not an error. It names no directory
+ * at all, which is what "unset" means, and it is what every other reader of
+ * this variable already treats it as; the bug was never that empty meant unset,
+ * it was that `??` let empty mean "the working directory".
  */
-export function credsPath() {
-    const override = process.env.MEMWAL_CREDS_DIR;
+function credsDirOverride() {
+    const raw = process.env.MEMWAL_CREDS_DIR;
+    if (!raw)
+        return null;
+    if (!isAbsolute(raw)) {
+        throw new UntrustedCredsDirError(`MEMWAL_CREDS_DIR is a relative path (${JSON.stringify(raw)}). It resolves against ` +
+            `the working directory, which would put your credentials — and the record of ` +
+            `which project credentials you have approved — inside whatever directory this ` +
+            `process was started in. Set it to an absolute path, or unset it. ` +
+            `If you did not set it yourself, look at the \`env\` block of this project's MCP ` +
+            `config (.cursor/mcp.json, .vscode/mcp.json, .claude/settings.json): a value a ` +
+            `repository carries is the repository choosing where your memories go.`);
+    }
+    const root = projectRoot() ?? process.cwd();
+    const dir = canonicalDir(raw);
+    if (isInside(canonicalDir(root), dir)) {
+        throw new UntrustedCredsDirError(`MEMWAL_CREDS_DIR (${raw}) points inside the current project (${root}). The ` +
+            `override skips the project-approval gate, so it has to name a directory no ` +
+            `repository can write — and an editor expands \`\${workspaceFolder}\` in a ` +
+            `committed MCP config, so an absolute path is not by itself proof that you ` +
+            `chose it. Point it outside the project, or unset it and run ` +
+            `\`memwal-mcp approve-project\` if you did mean to use this project's credentials.`);
+    }
+    return raw;
+}
+/**
+ * Where records that a repository must not be able to write are kept.
+ *
+ * `MEMWAL_CREDS_DIR` is the trusted escape hatch — when it is set it decides
+ * the credentials outright and project resolution never runs — so following it
+ * here keeps a sandboxed run (tests, CI) from reaching into the real
+ * `~/.memwal`, exactly as #705 required for the credentials file itself. It is
+ * read through {@link credsDirOverride} so that "trusted" means the same thing
+ * here, in {@link resolveCreds} and in {@link approveProjectCreds}: one rule,
+ * checked once, rather than three checks that can drift apart.
+ */
+function trustedStateDir() {
+    return credsDirOverride() ?? join(homedir(), ".memwal");
+}
+/** The approval store. Outside every repository, on purpose. */
+export function projectApprovalsPath() {
+    return join(trustedStateDir(), APPROVALS_FILE);
+}
+/**
+ * What approval is granted against: the destination, not the file's bytes.
+ *
+ * Account, delegate and relayer are the three fields that decide WHERE a
+ * memory ends up and WHO signs for it. Hashing them means a project file may
+ * be re-saved, relabelled or reformatted freely, while any edit that moves the
+ * destination invalidates the approval and has to be approved again. The
+ * delegate private key is deliberately NOT part of it — it must never be read
+ * into a record that gets written back out.
+ */
+export function credentialsFingerprint(creds) {
+    return createHash("sha256")
+        .update(`${creds.accountId}\n${creds.delegateAddress}\n${creds.relayerUrl}`)
+        .digest("hex");
+}
+/** Compare paths the way the filesystem does. `process.cwd()` reports a
+ * resolved path and an approval may have been recorded through a symlink (or
+ * on macOS, `/tmp` → `/private/tmp`), so both sides go through this. */
+function canonicalPath(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        return path;
+    }
+}
+function isValidApproval(obj) {
+    if (!obj || typeof obj !== "object")
+        return false;
+    const a = obj;
+    return (typeof a.path === "string" &&
+        typeof a.fingerprint === "string" &&
+        typeof a.accountId === "string" &&
+        typeof a.delegateAddress === "string" &&
+        typeof a.relayerUrl === "string");
+}
+/** Approvals on record. A missing, malformed or unreadable store approves
+ * nothing — the safe direction, since the consequence is falling back to the
+ * user's own global account rather than adopting someone else's. */
+function loadApprovals() {
+    const path = projectApprovalsPath();
+    if (!existsSync(path))
+        return [];
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        if (!parsed || parsed.version !== 1 || !Array.isArray(parsed.approvals))
+            return [];
+        return parsed.approvals.filter(isValidApproval);
+    }
+    catch {
+        return [];
+    }
+}
+/** Through the same writer as the credentials file: it creates the directory
+ * at `0700` and the file at `0600`. The record holds no secret, but it decides
+ * where memories go, so it should not be writable by anything that could not
+ * already write the credentials beside it. */
+function saveApprovals(approvals) {
+    writeSecretFile(projectApprovalsPath(), JSON.stringify({ version: 1, approvals }, null, 2));
+}
+/**
+ * Which credentials file this process should read and write, and why.
+ *
+ * `MEMWAL_CREDS_DIR` wins outright, and skips the approval gate — but only a
+ * value {@link credsDirOverride} accepts, i.e. a non-empty ABSOLUTE path
+ * outside the current project. It is "trusted" exactly as far as whoever set
+ * the environment is, and an MCP client will hand this process an `env` block
+ * it read out of the checkout, so a value that could have been committed is
+ * refused rather than obeyed. Otherwise the nearest project-local
+ * `.memwal/credentials.json` at or above the working directory is used IF the
+ * user has approved that exact destination on this machine (WALM-639), and the
+ * global file is used in every other case — including an unapproved, altered
+ * or malformed project file. Falling back rather than failing keeps a machine
+ * that has never seen a project file behaving exactly as it always did.
+ *
+ * Resolved per call rather than at module load, because neither the working
+ * directory nor the approval store is knowable at import time.
+ */
+export function resolveCreds() {
+    const override = credsDirOverride();
     if (override)
-        return join(override, CREDS_FILE);
-    return projectCredsPath() ?? globalCredsPath();
+        return { path: join(override, CREDS_FILE), source: "override" };
+    const global = globalCredsPath();
+    const projectPath = projectCredsPath();
+    if (!projectPath)
+        return { path: global, source: "global" };
+    const project = readCredsFile(projectPath);
+    if (!project) {
+        return {
+            path: global,
+            source: "global",
+            project: { path: projectPath, decision: "unreadable" },
+        };
+    }
+    const approval = loadApprovals().find((a) => a.path === canonicalPath(projectPath));
+    const decision = !approval
+        ? "unapproved"
+        : approval.fingerprint === credentialsFingerprint(project)
+            ? "approved"
+            : "changed";
+    const info = {
+        path: projectPath,
+        decision,
+        accountId: project.accountId,
+        relayerUrl: project.relayerUrl,
+    };
+    return decision === "approved"
+        ? { path: projectPath, source: "project", project: info }
+        : { path: global, source: "global", project: info };
 }
-/** Load credentials from disk. Returns null if missing or malformed. */
-export function loadCreds() {
-    const path = credsPath();
+/** The credentials file in use. Thin wrapper over {@link resolveCreds} so the
+ * many callers that only need a path are unchanged. */
+export function credsPath() {
+    return resolveCreds().path;
+}
+/** Read and validate one credentials file. Returns null if missing or
+ * malformed — the caller decides what that means. */
+function readCredsFile(path) {
     if (!existsSync(path))
         return null;
     try {
-        const raw = readFileSync(path, "utf8");
-        const parsed = JSON.parse(raw);
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
         if (!isValid(parsed))
             return null;
         return parsed;
@@ -99,6 +347,144 @@ export function loadCreds() {
         return null;
     }
 }
+/** Load credentials from disk. Returns null if missing or malformed. */
+export function loadCreds() {
+    return readCredsFile(credsPath());
+}
+/**
+ * Approve the project-local credentials found from the working directory.
+ *
+ * Deliberately takes no arguments: it approves what resolution would otherwise
+ * ignore, from the same directory, so "what am I approving" and "what will be
+ * used" cannot drift apart.
+ */
+export function approveProjectCreds() {
+    const approvalsPath = projectApprovalsPath();
+    if (credsDirOverride())
+        return { outcome: "overridden", approvalsPath };
+    const projectPath = projectCredsPath();
+    if (!projectPath)
+        return { outcome: "none", approvalsPath };
+    const creds = readCredsFile(projectPath);
+    if (!creds)
+        return { outcome: "unreadable", projectPath, approvalsPath };
+    const key = canonicalPath(projectPath);
+    const fingerprint = credentialsFingerprint(creds);
+    const approvals = loadApprovals();
+    const existing = approvals.find((a) => a.path === key);
+    if (existing?.fingerprint === fingerprint) {
+        return {
+            outcome: "already-approved",
+            projectPath,
+            accountId: creds.accountId,
+            relayerUrl: creds.relayerUrl,
+            approvalsPath,
+        };
+    }
+    saveApprovals([
+        ...approvals.filter((a) => a.path !== key),
+        {
+            path: key,
+            fingerprint,
+            accountId: creds.accountId,
+            delegateAddress: creds.delegateAddress,
+            relayerUrl: creds.relayerUrl,
+            approvedAt: new Date().toISOString(),
+        },
+    ]);
+    return {
+        outcome: existing ? "reapproved" : "approved",
+        projectPath,
+        accountId: creds.accountId,
+        relayerUrl: creds.relayerUrl,
+        previousAccountId: existing?.accountId,
+        previousRelayerUrl: existing?.relayerUrl,
+        approvalsPath,
+    };
+}
+/**
+ * Withdraw the approval for the project-local credentials here.
+ *
+ * Keyed on the path rather than on the file's current contents, so an approval
+ * can be withdrawn even after the file it covered was edited or deleted — a
+ * revoke that only worked while the destination still matched would be
+ * useless exactly when it is wanted.
+ */
+export function revokeProjectCredsApproval() {
+    const approvalsPath = projectApprovalsPath();
+    const projectPath = projectCredsPath() ?? join(process.cwd(), ".memwal", CREDS_FILE);
+    const key = canonicalPath(projectPath);
+    const approvals = loadApprovals();
+    const remaining = approvals.filter((a) => a.path !== key);
+    if (remaining.length === approvals.length)
+        return { outcome: "none", projectPath, approvalsPath };
+    saveApprovals(remaining);
+    return { outcome: "revoked", projectPath, approvalsPath };
+}
+/**
+ * The warning for a project credentials file that was found and NOT used, or
+ * null when there is nothing to report.
+ *
+ * Says which file was ignored, where memory is going instead, and the exact
+ * command that approves it — a silent fallback would be the mirror image of
+ * the silent redirect this gate exists to stop. Never contains a key: the only
+ * fields it reads are the account id and the relayer URL.
+ */
+export function formatProjectCredsNotice(resolution = resolveCreds()) {
+    const project = resolution.project;
+    if (!project || project.decision === "approved")
+        return null;
+    const destination = `account ${project.accountId} on ${project.relayerUrl}`;
+    const head = project.decision === "unreadable"
+        ? [
+            `Ignored the project credentials at ${project.path}: the file is not a valid`,
+            `Walrus Memory credentials file, so there is nothing to approve.`,
+        ]
+        : project.decision === "changed"
+            ? [
+                `Ignored the project credentials at ${project.path}: they changed since you`,
+                `approved them and now point at ${destination}.`,
+                `Approving again is required whenever the account, delegate key or relayer moves.`,
+            ]
+            : [
+                `Ignored the project credentials at ${project.path}, which would send memory to`,
+                `${destination}.`,
+                `A file inside a repository can be committed by anyone, so it is not used until`,
+                `you approve it on this machine.`,
+            ];
+    const lines = [...head, `Memory is going to ${resolution.path} instead.`];
+    if (project.decision !== "unreadable") {
+        lines.push(`To use it, run \`memwal-mcp approve-project\` in a terminal from this directory.`, `The approval is recorded in ${projectApprovalsPath()}, outside the repository.`);
+    }
+    return lines.join("\n");
+}
+/**
+ * What approving a project credentials file costs, beyond redirecting reads.
+ *
+ * Approval does not just decide which file is READ — it decides which file is
+ * WRITTEN. `saveCreds` writes to `credsPath()`, so from here on every sign-in
+ * from this project puts a fresh 64-hex Ed25519 delegate seed, in plaintext,
+ * into a directory that is inside the repository. An attacker who planted the
+ * file planted the directory too, so it is already tracked rather than ignored,
+ * and `git add -A` stages the key. The user cannot weigh that if nobody says
+ * it, and "you approved a destination" is not the same sentence as "you
+ * approved storing a private key in your repo".
+ *
+ * Separate from {@link formatProjectCredsNotice} on purpose: that one is about
+ * a file that was IGNORED, this one is about a file that is about to be used.
+ */
+export function formatProjectCredsStorageWarning(projectPath) {
+    const dir = dirname(projectPath);
+    return [
+        `Note: ${dir} is inside the repository, and approving makes it the file this`,
+        `project signs and saves with. Every later sign-in from here writes a delegate`,
+        `PRIVATE KEY into ${basename(projectPath)} in plaintext — and a \`.memwal/\` a`,
+        `repository already carries is tracked, not ignored, so \`git add -A\` would stage it.`,
+        `Add \`.memwal/\` to .gitignore, and never commit ${basename(projectPath)}.`,
+        `(The short-lived login write-ahead record is kept outside the repository; the`,
+        `credentials file cannot be, because it is the file you approved.)`,
+    ].join("\n");
+}
 /**
  * Write credentials with secure (`0600`) permission, to whichever file
  * `credsPath()` resolves to.
@@ -240,14 +626,26 @@ export function replaceWithTemp(tmp, path, contents, deps = {}) {
  * callback arrives, by which point a delegate key has already been registered
  * on-chain — so a warning that waits for both ids is a warning that arrives
  * too late to act on.
+ *
+ * When the file being replaced is an approved project one, that is also the
+ * last moment before a new private key lands inside a repository, so the
+ * storage warning is repeated here rather than left behind at approval time —
+ * approval may have been months ago, or done by someone else on the machine.
  */
 export function formatPendingSignInWarning() {
-    const current = loadCreds();
+    const resolution = resolveCreds();
+    const current = readCredsFile(resolution.path);
     if (!current)
         return null;
-    return (`Signing in will replace the credentials in ${credsPath()} ` +
-        `(currently account ${current.accountId}). ` +
-        `The existing file is backed up if the new sign-in is a different account.`);
+    const lines = [
+        `Signing in will replace the credentials in ${resolution.path} ` +
+            `(currently account ${current.accountId}). ` +
+            `The existing file is backed up if the new sign-in is a different account.`,
+    ];
+    if (resolution.source === "project") {
+        lines.push(formatProjectCredsStorageWarning(resolution.path));
+    }
+    return lines.join("\n");
 }
 /**
  * The message shown when a sign-in displaced a different account, or null when
@@ -348,6 +746,9 @@ function isValid(obj) {
  * record that outlives its flow is recovered on next start.
  * ------------------------------------------------------------------------- */
 const PENDING_FILE = "login-pending.json";
+/** Where a PROJECT sign-in's write-ahead record goes, under the trusted state
+ * directory — one file per approved project. See {@link pendingLoginPath}. */
+const PENDING_DIR = "login-pending";
 /**
  * How long a stranded record stays recoverable.
  *
@@ -357,10 +758,32 @@ const PENDING_FILE = "login-pending.json";
  * an unregistered key on disk, which grants nothing.
  */
 export const PENDING_LOGIN_TTL_MS = 24 * 60 * 60_000;
-/** Sits beside whichever credentials file `credsPath()` resolves to, so a
- * project-local sign-in recovers into that same project. */
+/**
+ * Where the write-ahead record lives — never inside a repository.
+ *
+ * It used to sit beside whichever credentials file `credsPath()` resolved to,
+ * which reads as "recover into the project you signed in from" and is the right
+ * intent. But for an approved project that path is `<repo>/.memwal/`, so every
+ * sign-in dropped a plaintext 64-hex delegate seed into the working tree —
+ * under a directory an attacker who planted the credentials file had already
+ * created, so tracked rather than ignored, and staged by `git add -A`.
+ *
+ * Nothing about this record needs to be in the repo. It is short-lived
+ * handshake state, nobody edits it by hand, and the only property that matters
+ * is that the project which started a sign-in is the one that can reclaim it.
+ * So it moves to the trusted state directory, keyed by a hash of the
+ * credentials path: same per-project scoping, no key material in the checkout.
+ *
+ * The non-project cases are byte-for-byte where they always were —
+ * `dirname(credsPath())` IS `trustedStateDir()` for both the override and the
+ * global file — so a machine that has never approved a project sees no change.
+ */
 export function pendingLoginPath() {
-    return join(dirname(credsPath()), PENDING_FILE);
+    const resolution = resolveCreds();
+    if (resolution.source !== "project")
+        return join(trustedStateDir(), PENDING_FILE);
+    const key = createHash("sha256").update(canonicalPath(resolution.path)).digest("hex");
+    return join(trustedStateDir(), PENDING_DIR, `${key}.json`);
 }
 /**
  * Persist the pending keypair. Throws if it cannot.
@@ -371,10 +794,10 @@ export function pendingLoginPath() {
  * the connect URL while claiming a durability that does not exist — the
  * original WALM-332 loss, now silent.
  *
- * Failing the login costs the user nothing: this file sits beside
- * `credentials.json`, so a directory that cannot take it cannot take the
- * credentials either. The same login would have failed at the callback anyway,
- * one on-chain `add_delegate_key` later.
+ * Failing the login costs the user nothing: this file lives in the same
+ * trusted state directory the approval record does, so a directory that cannot
+ * take it is one this process cannot keep state in at all. The same login would
+ * have failed at the callback anyway, one on-chain `add_delegate_key` later.
  */
 export function savePendingLogin(pending) {
     const path = pendingLoginPath();

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACH,SAAS,EACT,YAAY,EACZ,aAAa,EACb,UAAU,EACV,UAAU,EACV,UAAU,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAyBlC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;iCAEiC;AACjC,SAAS,eAAe;IACpB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB;IACrB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,SAAS,CAAC;QACN,wEAAwE;QACxE,sEAAsE;QACtE,gCAAgC;QAChC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,SAAS,KAAK,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAEpE,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,sCAAsC;QACtC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAE/C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;QACnD,GAAG,GAAG,MAAM,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,SAAS;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,gBAAgB,EAAE,IAAI,eAAe,EAAE,CAAC;AACnD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS;IACrB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,MAA2B,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,KAAwB;IAC9C,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,+BAA+B,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,QAAgB;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,0EAA0E;IAC1E,sEAAsE;IACtE,gEAAgE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC;QACD,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,uEAAuE;QACvE,IAAI,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACL,oCAAoC;QACxC,CAAC;QACD,MAAM,GAAG,CAAC;IACd,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACjE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,2EAA2E;AAC3E,SAAS,SAAS,CAAC,EAAU;IACzB,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,eAAe,CAC3B,GAAW,EACX,IAAY,EACZ,QAAgB,EAChB,OAII,EAAE;IAEN,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAEtC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,OAAO;IACX,CAAC;IACD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClB,OAAO;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,EAAE,CAAC;YACvD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC7C,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;gBAClC,KAAK,CAAC,uBAAuB,GAAG,OAAO,CAAC,CAAC;gBACzC,SAAS;YACb,CAAC;YACD,iEAAiE;YACjE,4BAA4B;YAC5B,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,gEAAgE;YAChE,kEAAkE;YAClE,kEAAkE;YAClE,+DAA+D;YAC/D,6CAA6C;YAC7C,EAAE;YACF,mEAAmE;YACnE,2BAA2B;YAC3B,IAAI,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACL,iEAAiE;YACrE,CAAC;YACD,OAAO;QACX,CAAC;IACL,CAAC;AACL,CAAC;AAgBD;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B;IACtC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,CACH,8CAA8C,SAAS,EAAE,GAAG;QAC5D,sBAAsB,OAAO,CAAC,SAAS,KAAK;QAC5C,2EAA2E,CAC9E,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACnC,KAAsB,EACtB,iBAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG;QACV,mDAAmD,KAAK,CAAC,IAAI,GAAG;QAChE,UAAU,KAAK,CAAC,iBAAiB,EAAE;QACnC,UAAU,iBAAiB,EAAE;KAChC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;gFACgF;AAChF,SAAS,+BAA+B,CACpC,IAAY,EACZ,iBAAyB;IAEzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,iBAAiB;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,sBAAsB,KAAK,OAAO,CAAC,CAAC;IACvE,IAAI,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,iEAAiE;QACjE,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACL,gEAAgE;QAChE,8DAA8D;QAC9D,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACpD,CAAC;AACL,CAAC;AAaD;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU;IACtB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACL,uEAAuE;QACvE,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI;QAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE;QAC/C,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IACzB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACH,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ;QACxC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9C,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ;QAC1C,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACrC,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QACnC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,OAAO,KAAK,CAAC,CAClB,CAAC;AACN,CAAC;AAED;;;;;;;;;;;+EAW+E;AAE/E,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAerD;4DAC4D;AAC5D,MAAM,UAAU,gBAAgB;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IAClD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC;QACD,yEAAyE;QACzE,yCAAyC;QACzC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CACX,mDAAmD,IAAI,KAAK,GAAG,IAAI;YAC/D,0EAA0E;YAC1E,gCAAgC,CACvC,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACnD,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE;YACtC,SAAS,EAAE,OAAO,CAAC,oBAAoB;YACvC,IAAI,EAAE,OAAO,CAAC,UAAU;YACxB,EAAE,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC5B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACL,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACtD,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB;IAC7B,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACL,iBAAiB;IACrB,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACH,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ;QACxC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9C,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ;QAC1C,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAChD,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACrC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,OAAO,KAAK,CAAC,CAClB,CAAC;AACN,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EACH,SAAS,EACT,YAAY,EACZ,aAAa,EACb,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,GACf,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAyBlC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;iCAEiC;AACjC,SAAS,eAAe;IACpB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB;IACrB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,SAAS,CAAC;QACN,wEAAwE;QACxE,sEAAsE;QACtE,gCAAgC;QAChC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,SAAS,KAAK,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAEpE,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,sCAAsC;QACtC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAE/C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,kBAAkB;QACnD,GAAG,GAAG,MAAM,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;+EAc+E;AAE/E,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEhD;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACzC,CAAC;CACJ;AAED;+EAC+E;AAC/E,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,IAAY;IAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,SAAS,CAAC;QACN,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,GAAG,GAAG,MAAM,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW;IAChB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,SAAS,CAAC;QACN,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,SAAS,gBAAgB;IACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,sBAAsB,CAC5B,wCAAwC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,yBAAyB;YAChF,8EAA8E;YAC9E,+EAA+E;YAC/E,mEAAmE;YACnE,kFAAkF;YAClF,gFAAgF;YAChF,uEAAuE,CAC9E,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,sBAAsB,CAC5B,qBAAqB,GAAG,wCAAwC,IAAI,SAAS;YACzE,6EAA6E;YAC7E,4EAA4E;YAC5E,4EAA4E;YAC5E,8DAA8D;YAC9D,mFAAmF,CAC1F,CAAC;IACN,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe;IACpB,OAAO,gBAAgB,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,oBAAoB;IAChC,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,cAAc,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAItC;IACG,OAAO,UAAU,CAAC,QAAQ,CAAC;SACtB,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;SAC3E,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAkBD;;wEAEwE;AACxE,SAAS,aAAa,CAAC,IAAY;IAC/B,IAAI,CAAC;QACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACH,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACrC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CACnC,CAAC;AACN,CAAC;AAED;;oEAEoE;AACpE,SAAS,aAAa;IAClB,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAkB,CAAC;QACvE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACnF,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED;;;8CAG8C;AAC9C,SAAS,aAAa,CAAC,SAA4B;IAC/C,eAAe,CACX,oBAAoB,EAAE,EACtB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAA0B,EAAE,IAAI,EAAE,CAAC,CAAC,CAC7E,CAAC;AACN,CAAC;AAiCD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,YAAY;IACxB,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,IAAI,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAE9E,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC;IACvC,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE5D,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO;YACH,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE;SACzD,CAAC;IACN,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAyB,CAAC,QAAQ;QAC5C,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,QAAQ,CAAC,WAAW,KAAK,sBAAsB,CAAC,OAAO,CAAC;YACxD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,IAAI,GAAqB;QAC3B,IAAI,EAAE,WAAW;QACjB,QAAQ;QACR,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;KACjC,CAAC;IACF,OAAO,QAAQ,KAAK,UAAU;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;QACzD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,SAAS;IACrB,OAAO,YAAY,EAAE,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED;qDACqD;AACrD,SAAS,aAAa,CAAC,IAAY;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,MAA2B,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS;IACrB,OAAO,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;AACtC,CAAC;AA0BD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IAC/B,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;IAC7C,IAAI,gBAAgB,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;IAExE,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC;IACvC,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IAEzE,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IACvD,IAAI,QAAQ,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;QACxC,OAAO;YACH,OAAO,EAAE,kBAAkB;YAC3B,WAAW;YACX,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,aAAa;SAChB,CAAC;IACN,CAAC;IAED,aAAa,CAAC;QACV,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC;QAC1C;YACI,IAAI,EAAE,GAAG;YACT,WAAW;YACX,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC;KACJ,CAAC,CAAC;IACH,OAAO;QACH,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;QAC7C,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,QAAQ,EAAE,SAAS;QACtC,kBAAkB,EAAE,QAAQ,EAAE,UAAU;QACxC,aAAa;KAChB,CAAC;AACN,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B;IACtC,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAG,gBAAgB,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACrF,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IAClG,aAAa,CAAC,SAAS,CAAC,CAAC;IACzB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACpC,aAA8B,YAAY,EAAE;IAE5C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,WAAW,GAAG,WAAW,OAAO,CAAC,SAAS,OAAO,OAAO,CAAC,UAAU,EAAE,CAAC;IAC5E,MAAM,IAAI,GACN,OAAO,CAAC,QAAQ,KAAK,YAAY;QAC7B,CAAC,CAAC;YACI,sCAAsC,OAAO,CAAC,IAAI,2BAA2B;YAC7E,iEAAiE;SACpE;QACH,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;YAC9B,CAAC,CAAC;gBACI,sCAAsC,OAAO,CAAC,IAAI,0BAA0B;gBAC5E,kCAAkC,WAAW,GAAG;gBAChD,kFAAkF;aACrF;YACH,CAAC,CAAC;gBACI,sCAAsC,OAAO,CAAC,IAAI,8BAA8B;gBAChF,GAAG,WAAW,GAAG;gBACjB,gFAAgF;gBAChF,iCAAiC;aACpC,CAAC;IAEd,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,sBAAsB,UAAU,CAAC,IAAI,WAAW,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CACN,kFAAkF,EAClF,+BAA+B,oBAAoB,EAAE,2BAA2B,CACnF,CAAC;IACN,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gCAAgC,CAAC,WAAmB;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,OAAO;QACH,SAAS,GAAG,iEAAiE;QAC7E,+EAA+E;QAC/E,oBAAoB,QAAQ,CAAC,WAAW,CAAC,sCAAsC;QAC/E,uFAAuF;QACvF,oDAAoD,QAAQ,CAAC,WAAW,CAAC,GAAG;QAC5E,+EAA+E;QAC/E,mEAAmE;KACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,KAAwB;IAC9C,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,+BAA+B,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,QAAgB;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,0EAA0E;IAC1E,sEAAsE;IACtE,gEAAgE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC;QACD,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,uEAAuE;QACvE,IAAI,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACL,oCAAoC;QACxC,CAAC;QACD,MAAM,GAAG,CAAC;IACd,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACjE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,2EAA2E;AAC3E,SAAS,SAAS,CAAC,EAAU;IACzB,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,eAAe,CAC3B,GAAW,EACX,IAAY,EACZ,QAAgB,EAChB,OAII,EAAE;IAEN,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IAEtC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClB,OAAO;IACX,CAAC;IACD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClB,OAAO;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,EAAE,CAAC;YACvD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC7C,IAAI,OAAO,GAAG,qBAAqB,EAAE,CAAC;gBAClC,KAAK,CAAC,uBAAuB,GAAG,OAAO,CAAC,CAAC;gBACzC,SAAS;YACb,CAAC;YACD,iEAAiE;YACjE,4BAA4B;YAC5B,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,gEAAgE;YAChE,kEAAkE;YAClE,kEAAkE;YAClE,+DAA+D;YAC/D,6CAA6C;YAC7C,EAAE;YACF,mEAAmE;YACnE,2BAA2B;YAC3B,IAAI,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACL,iEAAiE;YACrE,CAAC;YACD,OAAO;QACX,CAAC;IACL,CAAC;AACL,CAAC;AAgBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,0BAA0B;IACtC,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG;QACV,8CAA8C,UAAU,CAAC,IAAI,GAAG;YAC5D,sBAAsB,OAAO,CAAC,SAAS,KAAK;YAC5C,2EAA2E;KAClF,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACnC,KAAsB,EACtB,iBAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG;QACV,mDAAmD,KAAK,CAAC,IAAI,GAAG;QAChE,UAAU,KAAK,CAAC,iBAAiB,EAAE;QACnC,UAAU,iBAAiB,EAAE;KAChC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,gCAAgC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;gFACgF;AAChF,SAAS,+BAA+B,CACpC,IAAY,EACZ,iBAAyB;IAEzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,iBAAiB;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,sBAAsB,KAAK,OAAO,CAAC,CAAC;IACvE,IAAI,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,iEAAiE;QACjE,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACL,gEAAgE;QAChE,8DAA8D;QAC9D,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACpD,CAAC;AACL,CAAC;AAaD;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU;IACtB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACL,uEAAuE;QACvE,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,IAAI;QAC5C,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE;QAC/C,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IACzB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACH,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ;QACxC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9C,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ;QAC1C,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACrC,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QACnC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,OAAO,KAAK,CAAC,CAClB,CAAC;AACN,CAAC;AAED;;;;;;;;;;;+EAW+E;AAE/E,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C;8EAC8E;AAC9E,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAerD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB;IAC5B,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,YAAY,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IAClD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC;QACD,yEAAyE;QACzE,yCAAyC;QACzC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CACX,mDAAmD,IAAI,KAAK,GAAG,IAAI;YAC/D,0EAA0E;YAC1E,gCAAgC,CACvC,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACnD,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE;YACtC,SAAS,EAAE,OAAO,CAAC,oBAAoB;YACvC,IAAI,EAAE,OAAO,CAAC,UAAU;YACxB,EAAE,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC5B,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACL,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACtD,iBAAiB,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB;IAC7B,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAChC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACL,iBAAiB;IACrB,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACH,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ;QACxC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9C,OAAO,CAAC,CAAC,oBAAoB,KAAK,QAAQ;QAC1C,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAChD,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACrC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,OAAO,KAAK,CAAC,CAClB,CAAC;AACN,CAAC"}

package/dist/bridge.d.ts

@@ -41,7 +41,8 @@ export interface BridgeConfig {
  *     per-call namespace always wins over the configured default.
  */
 /**
- * Name the relayer this process dialled in a `memwal_health` result.
+ * Name the destination this process is bound to in a `memwal_health` result:
+ * the relayer it dialled, and the account it signs for.
  *
  * The relayer-side text can only report an origin its deployment published, and
  * stays silent on a self-hosted or local one, where the sidecar knows nothing
@@ -53,11 +54,18 @@ export interface BridgeConfig {
  * Rewrites an existing `relayer=` field rather than appending a second one: when
  * both sides know the origin they describe the same session, and two
  * conflicting fields would be worse than neither.
+ *
+ * `account=` rides along for the same reason (WALM-639). A project-local
+ * credentials file can point this process at a different account than the one
+ * the user signed in with, and "which account am I writing to" was otherwise
+ * only visible in stderr the MCP host usually hides — so the half of the
+ * destination that decides WHOSE memory this is now shows up beside the half
+ * that decides where it is stored.
  */
 export declare function annotateHealthResult(result: {
     content?: unknown;
     isError?: unknown;
-}, relayerUrl: string): void;
+}, relayerUrl: string, accountId?: string): void;
 export declare function applyDefaultNamespace(msg: RpcMessage, namespace?: string): RpcMessage;
 /** Reply for a `tools/call` naming a tool the connected relayer does not
  * serve. Names what IS on offer, because the agent's next move is to pick one

package/dist/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAanD,OAAO,EAIH,KAAK,gBAAgB,EACxB,MAAM,eAAe,CAAC;AAIvB;;gFAEgF;AAChF,MAAM,WAAW,YAAY;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;;8BAG0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAeD;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAChC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAChD,UAAU,EAAE,MAAM,GACnB,IAAI,CAaN;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,CAerF;AA6FD;;qEAEqE;AACrE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAOzE;AAsOD,UAAU,UAAU;IAChB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAokBD,oEAAoE;AACpE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAEpE;AA8BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,SAAS,CAC3B,YAAY,EAAE,iBAAiB,EAC/B,MAAM,EAAE,YAAY;AACpB;;;;yEAIyE;AACzE,YAAY,GAAE,MAAM,EAAO,GAC5B,OAAO,CAAC,IAAI,CAAC,CA4lDf"}
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAanD,OAAO,EAIH,KAAK,gBAAgB,EACxB,MAAM,eAAe,CAAC;AAIvB;;gFAEgF;AAChF,MAAM,WAAW,YAAY;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;;8BAG0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAeD;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,oBAAoB,CAChC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAChD,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACnB,IAAI,CAkBN;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,CAerF;AA6FD;;qEAEqE;AACrE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAOzE;AAsOD,UAAU,UAAU;IAChB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAokBD,oEAAoE;AACpE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAEpE;AA8BD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,SAAS,CAC3B,YAAY,EAAE,iBAAiB,EAC/B,MAAM,EAAE,YAAY;AACpB;;;;yEAIyE;AACzE,YAAY,GAAE,MAAM,EAAO,GAC5B,OAAO,CAAC,IAAI,CAAC,CAmmDf"}