@novorb/mcp-core 2.1.1 → 3.0.0

package/dist/net.js

@@ -0,0 +1,490 @@
+/**
+ * @novorb/mcp-core - Guarded outbound fetch (server-side request forgery guard)
+ *
+ * The one way an MCP server fetches a URL it did not configure itself: a URL from a tool argument, or a
+ * URL an upstream API handed back (a download link, a thumbnail, an avatar).
+ *
+ * - http(s) only, no userinfo, optionally only on `allowedOrigins`.
+ * - Public addresses only (`isPublicAddress`), unless the caller opts in with `allowPrivate: true`. An IP
+ *   literal is checked before anything is sent; a DNS name is checked INSIDE the socket's lookup, on
+ *   every address it resolves to, so the socket can only connect to an address that passed (no
+ *   check-then-connect gap, a rebinding name cannot slip through).
+ * - Every request gets its own agent (keep-alive off), never Node's global agent: with
+ *   `NODE_USE_ENV_PROXY` + `HTTP(S)_PROXY` the global agent would hand the request to a proxy, which
+ *   resolves the name itself and skips the guarded lookup.
+ * - Redirects are refused by default; with `redirects: <n>` at most n are followed and every hop is
+ *   validated again by the same rules (scheme, userinfo, origins, addresses). Caller headers are dropped
+ *   when a redirect changes origin.
+ * - Size cap (declared and streamed), one total time cap (headers and body), the caller's abort signal,
+ *   and an optional allow-list of content types.
+ *
+ *   const res = await guardedFetch(url, { allowedOrigins: ['https://cdn.example.com'], maxBytes, signal });
+ *   const bytes = Buffer.from(await res.arrayBuffer());
+ */
+import { lookup as dnsLookup } from 'node:dns';
+import { Agent as HttpAgent, request as httpRequest } from 'node:http';
+import { Agent as HttpsAgent, request as httpsRequest } from 'node:https';
+import { isIP } from 'node:net';
+/** The error code of an address the policy refused (on the URL literal or in the socket lookup). */
+export const ADDRESS_BLOCKED_CODE = 'ERR_ADDRESS_BLOCKED';
+/** A refused or failed guarded fetch. The message never carries the URL (callers add it if they want). */
+export class GuardedFetchError extends Error {
+    reason;
+    /** `ERR_ADDRESS_BLOCKED` for the address policy, the socket error code for a network error. */
+    code;
+    /** The HTTP status of a refused redirect. */
+    status;
+    constructor(reason, message, details = {}) {
+        super(message);
+        this.name = 'GuardedFetchError';
+        this.reason = reason;
+        if (details.code !== undefined)
+            this.code = details.code;
+        if (details.status !== undefined)
+            this.status = details.status;
+    }
+}
+const DEFAULT_MAX_BYTES = 50 * 1024 * 1024;
+const DEFAULT_TIMEOUT_MS = 30_000;
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+const NULL_BODY_STATUSES = new Set([204, 205, 304]);
+const PRIVATE_LITERAL = 'the host is a private, loopback or link-local address';
+const PRIVATE_NAME = 'the host resolves to a private, loopback or link-local address';
+/** The four bytes of a dotted-quad IPv4 address, or undefined. */
+function parseIPv4(text) {
+    if (isIP(text) !== 4)
+        return undefined;
+    return text.split('.').map(Number);
+}
+/** The sixteen bytes of an IPv6 address (zone id dropped, a dotted IPv4 tail allowed), or undefined. */
+function parseIPv6(text) {
+    const address = text.split('%')[0];
+    if (isIP(address) !== 6)
+        return undefined;
+    let body = address;
+    const tail = [];
+    if (body.includes('.')) {
+        const cut = body.lastIndexOf(':') + 1;
+        const v4 = parseIPv4(body.slice(cut));
+        if (!v4)
+            return undefined;
+        tail.push((v4[0] << 8) | v4[1], (v4[2] << 8) | v4[3]);
+        body = body.slice(0, cut);
+        if (!body.endsWith('::'))
+            body = body.slice(0, -1);
+    }
+    const halves = body.split('::');
+    const words = (part) => (part === '' ? [] : part.split(':').map((w) => Number.parseInt(w, 16)));
+    const left = words(halves[0]);
+    const right = halves.length > 1 ? words(halves[1]) : [];
+    const fill = 8 - tail.length - left.length - right.length;
+    const all = halves.length > 1 ? [...left, ...new Array(fill).fill(0), ...right, ...tail] : [...left, ...tail];
+    if (all.length !== 8)
+        return undefined;
+    return all.flatMap((w) => [w >> 8, w & 0xff]);
+}
+/** Whether `bytes` lies in `prefix/bits` (prefix given as bytes, missing bytes zero). */
+function inRange(bytes, prefix, bits) {
+    for (let i = 0; i < bits; i += 1) {
+        const byte = i >> 3;
+        const mask = 0x80 >> (i & 7);
+        if (((bytes[byte] ?? 0) & mask) !== ((prefix[byte] ?? 0) & mask))
+            return false;
+    }
+    return true;
+}
+/** IPv4 ranges that are not globally reachable (RFC 6890 and its updates). */
+const BLOCKED_V4 = [
+    [[0], 8], // this network
+    [[10], 8], // private
+    [[100, 64], 10], // carrier-grade NAT
+    [[127], 8], // loopback
+    [[169, 254], 16], // link-local, cloud metadata
+    [[172, 16], 12], // private
+    [[192, 0, 0], 24], // IETF protocol assignments
+    [[192, 0, 2], 24], // documentation
+    [[192, 31, 196], 24], // AS112
+    [[192, 52, 193], 24], // AMT
+    [[192, 88, 99], 24], // 6to4 relay anycast
+    [[192, 168], 16], // private
+    [[192, 175, 48], 24], // AS112
+    [[198, 18], 15], // benchmarking
+    [[198, 51, 100], 24], // documentation
+    [[203, 0, 113], 24], // documentation
+    [[224], 4], // multicast
+    [[240], 4], // reserved, broadcast
+];
+function isPublicV4(bytes) {
+    return !BLOCKED_V4.some(([prefix, bits]) => inRange(bytes, prefix, bits));
+}
+/** IPv6 ranges inside global unicast (2000::/3) that are not globally reachable or embed another address. */
+const BLOCKED_V6 = [
+    [[0x20, 0x01, 0x00, 0x00], 23], // IETF protocol assignments (Teredo, ORCHID, benchmarking)
+    [[0x20, 0x01, 0x0d, 0xb8], 32], // documentation
+    [[0x3f, 0xff], 20], // documentation
+];
+function isPublicV6(bytes) {
+    const embedded = (from) => isPublicV4(bytes.slice(from, from + 4));
+    // ::ffff:a.b.c.d (IPv4-mapped) and 64:ff9b::a.b.c.d (NAT64) reach the embedded IPv4 address.
+    if (inRange(bytes, [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xff, 0xff], 96))
+        return embedded(12);
+    if (inRange(bytes, [0x00, 0x64, 0xff, 0x9b], 96))
+        return embedded(12);
+    // 2002:a.b.c.d::/48 (6to4) tunnels to the embedded IPv4 address.
+    if (inRange(bytes, [0x20, 0x02], 16))
+        return embedded(2);
+    // Only global unicast is public: this drops ::, ::1, ::a.b.c.d, 100::/64, fc00::/7, fe80::/10, fec0::/10, ff00::/8.
+    if (!inRange(bytes, [0x20], 3))
+        return false;
+    return !BLOCKED_V6.some(([prefix, bits]) => inRange(bytes, prefix, bits));
+}
+/**
+ * Whether an IP address is globally reachable. False for loopback, private, link-local (including the
+ * cloud metadata address), CGNAT, multicast, reserved and documentation ranges, IPv6 unique local and
+ * site-local, the IPv6 forms that embed such an IPv4 address (mapped, compatible, NAT64, 6to4), and for
+ * anything that is not an IP address.
+ */
+export function isPublicAddress(address) {
+    const v4 = parseIPv4(address);
+    if (v4)
+        return isPublicV4(v4);
+    const v6 = parseIPv6(address);
+    return v6 !== undefined && isPublicV6(v6);
+}
+/** The address policy the options select: the custom one, everything (`allowPrivate`), or public only. */
+export function addressPolicy(options = {}) {
+    if (options.isAllowedAddress)
+        return options.isAllowedAddress;
+    if (options.allowPrivate === true)
+        return () => true;
+    return isPublicAddress;
+}
+/**
+ * Normalise origin entries (a comma-separated string or a list; blanks dropped, duplicates removed) to
+ * WHATWG origins. Throws a TypeError naming `label` when an entry is not an http(s) URL.
+ */
+export function normalizeOrigins(entries, label = 'allowedOrigins') {
+    const list = typeof entries === 'string' ? entries.split(',') : entries;
+    const out = [];
+    for (const entry of list.map((e) => e.trim()).filter((e) => e !== '')) {
+        let origin;
+        try {
+            const parsed = new URL(entry);
+            if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+                throw new Error('scheme');
+            origin = parsed.origin;
+        }
+        catch {
+            throw new TypeError(`${label}: every entry must be an http(s) origin`);
+        }
+        if (!out.includes(origin))
+            out.push(origin);
+    }
+    return out;
+}
+/** The URL's host as an address (IPv6 brackets dropped), or undefined for a DNS name. */
+function literalAddress(parsed) {
+    const host = parsed.hostname.startsWith('[') ? parsed.hostname.slice(1, -1) : parsed.hostname;
+    return isIP(host) ? host : undefined;
+}
+/**
+ * The parsed URL when it may be fetched: http(s), no userinfo, on an allowed origin (when given), and not
+ * an IP literal outside the address policy. Throws `GuardedFetchError` otherwise. A DNS name is checked
+ * later, inside the socket lookup.
+ */
+export function checkUrl(url, options = {}) {
+    let parsed;
+    try {
+        parsed = new URL(String(url));
+    }
+    catch {
+        throw new GuardedFetchError('url', 'invalid URL');
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new GuardedFetchError('protocol', 'only http and https URLs are supported');
+    }
+    if (parsed.username !== '' || parsed.password !== '') {
+        throw new GuardedFetchError('credentials', 'credentials in the URL are not allowed');
+    }
+    if (options.allowedOrigins !== undefined && !normalizeOrigins(options.allowedOrigins).includes(parsed.origin)) {
+        throw new GuardedFetchError('origin', `origin ${parsed.origin} is not allowed`);
+    }
+    const literal = literalAddress(parsed);
+    if (literal !== undefined && !addressPolicy(options)(literal)) {
+        throw new GuardedFetchError('address', PRIVATE_LITERAL, { code: ADDRESS_BLOCKED_CODE });
+    }
+    return parsed;
+}
+/** A socket lookup that refuses the name when it resolves to no address or any address fails the policy. */
+export function guardedLookup(base, isAllowedAddress) {
+    return (hostname, options, callback) => {
+        base(hostname, { ...options, all: true }, (error, result) => {
+            if (error) {
+                callback(error, '', 4);
+                return;
+            }
+            const addresses = Array.isArray(result)
+                ? result
+                : [{ address: result, family: isIP(result) || 4 }];
+            if (addresses.length === 0 || addresses.some((a) => !isAllowedAddress(a.address))) {
+                callback(Object.assign(new Error(PRIVATE_NAME), { code: ADDRESS_BLOCKED_CODE }), '', 4);
+                return;
+            }
+            if (options.all)
+                callback(null, addresses);
+            else
+                callback(null, addresses[0].address, addresses[0].family);
+        });
+    };
+}
+/**
+ * A fresh agent (keep-alive off) for `protocol` whose sockets resolve through `guardedLookup`. Pass it as
+ * the `agent` of every `http.request` / `https.request` to a caller-supplied URL (after `checkUrl`, which
+ * covers IP literals: Node never calls the lookup for them), and destroy it when the request settles.
+ * It never reads the proxy environment, unlike the global agent.
+ */
+export function createGuardedAgent(protocol, options = {}) {
+    const lookup = guardedLookup(options.lookup ?? dnsLookup, addressPolicy(options));
+    return protocol === 'https:'
+        ? new HttpsAgent({ keepAlive: false, lookup })
+        : new HttpAgent({ keepAlive: false, lookup });
+}
+/** Whether a socket error is (or, wrapped by multi-address connect, contains) the lookup refusal. */
+function isBlocked(error) {
+    if (!error || typeof error !== 'object')
+        return false;
+    if (error.code === ADDRESS_BLOCKED_CODE)
+        return true;
+    const nested = error.errors;
+    return Array.isArray(nested) && nested.some(isBlocked);
+}
+function networkError(error) {
+    if (isBlocked(error))
+        return new GuardedFetchError('address', PRIVATE_NAME, { code: ADDRESS_BLOCKED_CODE });
+    const code = error?.code;
+    const name = typeof code === 'string' ? code : 'ERR_NETWORK';
+    return new GuardedFetchError('network', `network error (${name})`, { code: name });
+}
+/** The reason the internal signal aborted (a timeout or the caller), as a GuardedFetchError. */
+function abortReason(signal) {
+    return signal.reason instanceof GuardedFetchError ? signal.reason : new GuardedFetchError('aborted', 'aborted');
+}
+function tooLarge(maxBytes) {
+    return new GuardedFetchError('too-large', `body exceeds ${maxBytes} bytes`);
+}
+/** One request on its own guarded agent; resolves with the response head. */
+function sendHop(url, method, headers, options, signal) {
+    if (signal.aborted)
+        return Promise.reject(abortReason(signal));
+    const agent = createGuardedAgent(url.protocol === 'https:' ? 'https:' : 'http:', options);
+    const lookup = guardedLookup(options.lookup ?? dnsLookup, addressPolicy(options));
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let req;
+        const onAbort = () => fail(abortReason(signal));
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            signal.removeEventListener('abort', onAbort);
+            req?.destroy();
+            agent.destroy();
+            reject(error);
+        };
+        const send = url.protocol === 'https:' ? httpsRequest : httpRequest;
+        try {
+            req = send(url, { method, agent, lookup, ...(headers ? { headers } : {}) }, (res) => {
+                if (settled) {
+                    res.resume();
+                    return;
+                }
+                settled = true;
+                signal.removeEventListener('abort', onAbort);
+                resolve({ res, agent });
+            });
+        }
+        catch (error) {
+            fail(networkError(error));
+            return;
+        }
+        // Stays attached for the life of the request, so a late socket error is never unhandled.
+        req.on('error', (error) => fail(networkError(error)));
+        signal.addEventListener('abort', onAbort, { once: true });
+        req.end();
+    });
+}
+function contentTypeAllowed(essence, allowed) {
+    return allowed.some((entry) => {
+        const want = entry.trim().toLowerCase();
+        return want.endsWith('/*') ? essence.startsWith(want.slice(0, -1)) : essence === want;
+    });
+}
+function toHeaders(res) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(res.headers)) {
+        if (value === undefined)
+            continue;
+        for (const item of Array.isArray(value) ? value : [value]) {
+            try {
+                headers.append(name, item);
+            }
+            catch {
+                // A header value fetch's Headers refuses is dropped, never fatal.
+            }
+        }
+    }
+    return headers;
+}
+/** The fetch `Response` over a guarded response head; the body keeps the size and time caps. */
+function toResponse(hop, url, redirected, method, maxBytes, signal, release) {
+    const { res, agent } = hop;
+    const status = res.statusCode ?? 0;
+    let finished = false;
+    let onAbort = () => undefined;
+    const done = () => {
+        if (finished)
+            return;
+        finished = true;
+        signal.removeEventListener('abort', onAbort);
+        release();
+        agent.destroy();
+    };
+    let body = null;
+    if (method === 'HEAD' || NULL_BODY_STATUSES.has(status)) {
+        res.resume();
+        done();
+    }
+    else {
+        body = new ReadableStream({
+            start(controller) {
+                let size = 0;
+                const fail = (error) => {
+                    if (finished)
+                        return;
+                    done();
+                    res.destroy();
+                    controller.error(error);
+                };
+                onAbort = () => fail(abortReason(signal));
+                signal.addEventListener('abort', onAbort, { once: true });
+                res.on('data', (chunk) => {
+                    if (finished)
+                        return;
+                    size += chunk.length;
+                    if (size > maxBytes)
+                        fail(tooLarge(maxBytes));
+                    else
+                        controller.enqueue(new Uint8Array(chunk));
+                });
+                res.on('end', () => {
+                    if (finished)
+                        return;
+                    done();
+                    controller.close();
+                });
+                res.on('error', (error) => fail(networkError(error)));
+            },
+            cancel() {
+                done();
+                res.destroy();
+            },
+        });
+    }
+    const response = new Response(body, { status, statusText: res.statusMessage ?? '', headers: toHeaders(res) });
+    Object.defineProperty(response, 'url', { value: url.href });
+    Object.defineProperty(response, 'redirected', { value: redirected });
+    return response;
+}
+/** A cap option as a finite number at least `min`; a TypeError naming the option otherwise. */
+function requireCap(name, value, min) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < min) {
+        throw new TypeError(`guardedFetch: ${name} must be a finite number >= ${min}`);
+    }
+    return value;
+}
+/**
+ * Fetch a caller- or upstream-supplied URL under the guard (see the module header). Resolves with a fetch
+ * `Response` for any final status (the caller decides what a 404 means); with redirects refused every
+ * 3xx is refused. Its body stays under `maxBytes` and the time cap. Rejects with `GuardedFetchError` when
+ * the guard refuses or the transfer fails, and with a `TypeError` for a non-finite or negative cap.
+ */
+export async function guardedFetch(input, options = {}) {
+    const method = options.method ?? 'GET';
+    const redirects = options.redirects ?? 'refuse';
+    // A non-finite or negative cap would silently disable it (`hop >= NaN` is never true): refuse it.
+    if (redirects !== 'refuse')
+        requireCap('redirects', redirects, 0);
+    const maxRedirects = redirects === 'refuse' ? 0 : Math.floor(redirects);
+    const maxBytes = requireCap('maxBytes', options.maxBytes ?? DEFAULT_MAX_BYTES, 0);
+    const timeoutMs = requireCap('timeoutMs', options.timeoutMs ?? DEFAULT_TIMEOUT_MS, 1);
+    const urlOptions = {
+        ...options,
+        ...(options.allowedOrigins !== undefined ? { allowedOrigins: normalizeOrigins(options.allowedOrigins) } : {}),
+    };
+    let current = checkUrl(input, urlOptions);
+    if (options.signal?.aborted)
+        throw new GuardedFetchError('aborted', 'aborted');
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(new GuardedFetchError('timeout', `timed out after ${timeoutMs} ms`)), timeoutMs);
+    const onCallerAbort = () => controller.abort(new GuardedFetchError('aborted', 'aborted'));
+    options.signal?.addEventListener('abort', onCallerAbort, { once: true });
+    const release = () => {
+        clearTimeout(timer);
+        options.signal?.removeEventListener('abort', onCallerAbort);
+    };
+    let headers = options.headers;
+    try {
+        for (let hop = 0;; hop++) {
+            const sent = await sendHop(current, method, headers, options, controller.signal);
+            const { res, agent } = sent;
+            const status = res.statusCode ?? 0;
+            const refuse = (error) => {
+                res.resume();
+                agent.destroy();
+                throw error;
+            };
+            const location = res.headers.location;
+            // With redirects refused every 3xx is refused (as the gitlab original), with or without Location.
+            if (redirects === 'refuse' && status >= 300 && status < 400) {
+                refuse(new GuardedFetchError('redirect', `${status} redirect not followed`, { status }));
+            }
+            if (REDIRECT_STATUSES.has(status) && location) {
+                if (hop >= maxRedirects)
+                    refuse(new GuardedFetchError('redirects', `more than ${maxRedirects} redirects`, { status }));
+                let next;
+                try {
+                    next = checkUrl(new URL(location, current), urlOptions);
+                }
+                catch (error) {
+                    return refuse(error instanceof GuardedFetchError ? error : new GuardedFetchError('url', 'invalid URL'));
+                }
+                res.resume();
+                agent.destroy();
+                // Never carry caller headers (credentials) to another origin.
+                if (next.origin !== current.origin)
+                    headers = undefined;
+                current = next;
+                continue;
+            }
+            if (status < 200 || status > 599)
+                refuse(new GuardedFetchError('network', `network error (invalid status ${status})`));
+            if (status < 300 && options.allowedContentTypes !== undefined) {
+                const essence = (res.headers['content-type'] ?? '').split(';')[0].trim().toLowerCase();
+                const passes = essence === ''
+                    ? options.allowMissingContentType === true
+                    : contentTypeAllowed(essence, options.allowedContentTypes);
+                if (!passes)
+                    refuse(new GuardedFetchError('content-type', `content type ${essence || '(none)'} is not allowed`));
+            }
+            const declared = Number(res.headers['content-length']);
+            if (Number.isFinite(declared) && declared > maxBytes)
+                refuse(tooLarge(maxBytes));
+            return toResponse(sent, current, hop > 0, method, maxBytes, controller.signal, release);
+        }
+    }
+    catch (error) {
+        release();
+        throw error instanceof GuardedFetchError ? error : networkError(error);
+    }
+}
+//# sourceMappingURL=net.js.map

package/dist/net.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"net.js","sourceRoot":"","sources":["../src/net.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,MAAM,IAAI,SAAS,EAA0C,MAAM,UAAU,CAAC;AACvF,OAAO,EAAsB,KAAK,IAAI,SAAS,EAAE,OAAO,IAAI,WAAW,EAAwB,MAAM,WAAW,CAAC;AACjH,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAuB,MAAM,UAAU,CAAC;AAiBrD,oGAAoG;AACpG,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAE1D,0GAA0G;AAC1G,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAAqB;IACpC,+FAA+F;IACtF,IAAI,CAAU;IACvB,6CAA6C;IACpC,MAAM,CAAU;IACzB,YAAY,MAA0B,EAAE,OAAe,EAAE,UAA8C,EAAE;QACvG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACjE,CAAC;CACF;AAuCD,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAClF,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACzE,MAAM,eAAe,GAAG,uDAAuD,CAAC;AAChF,MAAM,YAAY,GAAG,gEAAgE,CAAC;AAItF,kEAAkE;AAClE,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,wGAAwG;AACxG,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAY,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,KAAK,CAAS,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;IACtH,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,KAAY,EAAE,MAAa,EAAE,IAAY;IACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,GAA4C;IAC1D,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,eAAe;IACzB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU;IACrB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,oBAAoB;IACrC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW;IACvB,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,6BAA6B;IAC/C,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,UAAU;IAC3B,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,4BAA4B;IAC/C,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,gBAAgB;IACnC,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ;IAC9B,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM;IAC5B,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,qBAAqB;IAC1C,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,UAAU;IAC5B,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ;IAC9B,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,eAAe;IAChC,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,gBAAgB;IACtC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,gBAAgB;IACrC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,YAAY;IACxB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,sBAAsB;CACnC,CAAC;AAEF,SAAS,UAAU,CAAC,KAAY;IAC9B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,GAA4C;IAC1D,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,2DAA2D;IAC3F,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,gBAAgB;IAChD,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,gBAAgB;CACrC,CAAC;AAEF,SAAS,UAAU,CAAC,KAAY;IAC9B,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,6FAA6F;IAC7F,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtE,iEAAiE;IACjE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzD,oHAAoH;IACpH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,KAAK,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,UAA+B,EAAE;IAC7D,IAAI,OAAO,CAAC,gBAAgB;QAAE,OAAO,OAAO,CAAC,gBAAgB,CAAC;IAC9D,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC;IACrD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAmC,EAAE,KAAK,GAAG,gBAAgB;IAC5F,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3F,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,cAAc,CAAC,MAAW;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9F,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAiB,EAAE,UAA2B,EAAE;IACvE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,iBAAiB,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,UAAU,MAAM,CAAC,MAAM,iBAAiB,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,aAAa,CAAC,IAAoB,EAAE,gBAA8C;IAChG,OAAO,CAAC,QAAgB,EAAE,OAAsB,EAAE,QAAQ,EAAE,EAAE;QAC5D,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1D,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAoB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACtD,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAClF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,GAAG;gBAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;;gBACtC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA4B,EAAE,UAA+B,EAAE;IAChG,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,OAAO,QAAQ,KAAK,QAAQ;QAC1B,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC9C,CAAC,CAAC,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,qGAAqG;AACrG,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,IAAK,KAA+B,CAAC,IAAI,KAAK,oBAAoB;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,MAAM,GAAI,KAA8B,CAAC,MAAM,CAAC;IACtD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,iBAAiB,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAI,KAAsC,EAAE,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;IAC7D,OAAO,IAAI,iBAAiB,CAAC,SAAS,EAAE,kBAAkB,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,gGAAgG;AAChG,SAAS,WAAW,CAAC,MAAmB;IACtC,OAAO,MAAM,CAAC,MAAM,YAAY,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,OAAO,IAAI,iBAAiB,CAAC,WAAW,EAAE,gBAAgB,QAAQ,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAOD,6EAA6E;AAC7E,SAAS,OAAO,CACd,GAAQ,EACR,MAAsB,EACtB,OAA2C,EAC3C,OAA4B,EAC5B,MAAmB;IAEnB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,OAAO,IAAI,OAAO,CAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,GAA8B,CAAC;QACnC,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,CAAC,KAAwB,EAAQ,EAAE;YAC9C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,GAAG,EAAE,OAAO,EAAE,CAAC;YACf,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QACpE,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBAClF,IAAI,OAAO,EAAE,CAAC;oBACZ,GAAG,CAAC,MAAM,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,yFAAyF;QACzF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,OAA0B;IACrE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAoB;IACrC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gGAAgG;AAChG,SAAS,UAAU,CACjB,GAAQ,EACR,GAAQ,EACR,UAAmB,EACnB,MAAsB,EACtB,QAAgB,EAChB,MAAmB,EACnB,OAAmB;IAEnB,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,EAAE,CAAC;QACV,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,IAAI,IAAI,GAAsC,IAAI,CAAC;IACnD,IAAI,MAAM,KAAK,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,MAAM,EAAE,CAAC;QACb,IAAI,EAAE,CAAC;IACT,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAI,cAAc,CAAa;YACpC,KAAK,CAAC,UAAU;gBACd,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,MAAM,IAAI,GAAG,CAAC,KAAwB,EAAQ,EAAE;oBAC9C,IAAI,QAAQ;wBAAE,OAAO;oBACrB,IAAI,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC,CAAC;gBACF,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,IAAI,QAAQ;wBAAE,OAAO;oBACrB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;oBACrB,IAAI,IAAI,GAAG,QAAQ;wBAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;;wBACzC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjD,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,QAAQ;wBAAE,OAAO;oBACrB,IAAI,EAAE,CAAC;oBACP,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM;gBACJ,IAAI,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9G,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+FAA+F;AAC/F,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,iBAAiB,IAAI,+BAA+B,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAmB,EAAE,UAA+B,EAAE;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC;IAChD,kGAAkG;IAClG,IAAI,SAAS,KAAK,QAAQ;QAAE,UAAU,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,UAAU,GAAoB;QAClC,GAAG,OAAO;QACV,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9G,CAAC;IACF,IAAI,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAE/E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,SAAS,EAAE,mBAAmB,SAAS,KAAK,CAAC,CAAC,EAC3F,SAAS,CACV,CAAC;IACF,MAAM,aAAa,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAChG,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9D,CAAC,CAAC;IAEF,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACjF,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;YAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,CAAC,KAAwB,EAAS,EAAE;gBACjD,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;YACtC,kGAAkG;YAClG,IAAI,SAAS,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,iBAAiB,CAAC,UAAU,EAAE,GAAG,MAAM,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBAC9C,IAAI,GAAG,IAAI,YAAY;oBACrB,MAAM,CAAC,IAAI,iBAAiB,CAAC,WAAW,EAAE,aAAa,YAAY,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;gBAChG,IAAI,IAAS,CAAC;gBACd,IAAI,CAAC;oBACH,IAAI,GAAG,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC1D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,MAAM,CAAC,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;gBAC1G,CAAC;gBACD,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChB,8DAA8D;gBAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;oBAAE,OAAO,GAAG,SAAS,CAAC;gBACxD,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,GAAG;gBAC9B,MAAM,CAAC,IAAI,iBAAiB,CAAC,SAAS,EAAE,iCAAiC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvF,IAAI,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBAC9D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACvF,MAAM,MAAM,GACV,OAAO,KAAK,EAAE;oBACZ,CAAC,CAAC,OAAO,CAAC,uBAAuB,KAAK,IAAI;oBAC1C,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBAC/D,IAAI,CAAC,MAAM;oBACT,MAAM,CAAC,IAAI,iBAAiB,CAAC,cAAc,EAAE,gBAAgB,OAAO,IAAI,QAAQ,iBAAiB,CAAC,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ;gBAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjF,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;QACV,MAAM,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/notifications.d.ts

@@ -0,0 +1,78 @@
+/**
+ * @novorb/mcp-core - Change notifications (list changed, resource updated) and the server event bus
+ *
+ * The SDK sources change events from a `ServerEventBus` (`publish` / `subscribe`): `createMcpHandler`
+ * serves 2026-07-28 `subscriptions/listen` streams from it (ack, filtering and subscription ids are the
+ * SDK's). mcp-core makes that bus process-wide and connects it to every transport, so one call reaches
+ * every connection this process serves:
+ *
+ *   const notify = createNotifier();           // or ctx.notify in runMcpServer's setup
+ *   notify.toolsChanged();                      // notifications/tools/list_changed
+ *   notify.resourceUpdated('gitlab://repo/README.md');
+ *
+ * Delivery per era (what the SDK can carry; mcp-core adds no transport of its own):
+ *
+ * | Connection | Delivery |
+ * |---|---|
+ * | HTTP, 2026-07-28 | `subscriptions/listen` SSE streams on this process (the SDK listen router filters by the client's honored filter) |
+ * | stdio, 2026-07-28 | the pinned instance's change notifications, rewritten by the SDK onto the connection's open subscriptions |
+ * | stdio, 2025-era | unsolicited notifications on the connection; `resources/updated` only for URIs the client subscribed to |
+ * | HTTP, 2025-era stateless | none: every request is answered by a fresh instance and the standalone GET stream is 405, so there is no channel |
+ *
+ * Multi-instance hosts replace the in-memory bus with a shared one (`setProcessBus`, or `bus` on the
+ * transport options). A shared `ServerEventBus` implementation must: fan `publish(event)` out to the
+ * listeners of EVERY instance (its own included); return an idempotent unsubscribe from `subscribe`;
+ * never throw from `publish` (a failing listener must not stop the others); never echo an event back
+ * to the listener that published it from inside that listener; and carry the event value as is
+ * (`{ kind }` or `{ kind: 'resource_updated', uri }`, JSON-serialisable). No persistence or replay is
+ * needed: listen streams are live and a client re-lists after reconnecting. Events are not addressed to
+ * a caller: every open stream that opted in receives them (the SDK event has no principal).
+ */
+import { McpServer, type Server, type ServerEventBus, type ServerNotifier } from '@modelcontextprotocol/server';
+export type { ServerEvent, ServerEventBus, ServerNotifier } from '@modelcontextprotocol/server';
+export { InMemoryServerEventBus } from '@modelcontextprotocol/server';
+/** The process-wide bus every mcp-core transport uses by default (in memory unless replaced). */
+export declare function processBus(): ServerEventBus;
+/**
+ * Replace the process bus (a shared pub/sub on multi-instance hosts). Call it before starting the
+ * transport; `undefined` restores a fresh in-memory bus on next use.
+ */
+export declare function setProcessBus(bus: ServerEventBus | undefined): void;
+/** The typed publish facade over a bus (the same shape as the SDK's `handler.notify`). */
+export declare function createNotifier(bus?: ServerEventBus): ServerNotifier;
+/** The URIs a 2025-era client subscribed to on this instance (`resources/subscribe`). */
+export declare function resourceSubscriptions(server: McpServer | Server): Set<string>;
+/**
+ * Forward bus events to a long-lived instance (a stdio connection): each event becomes the instance's
+ * own change notification. Detaches when the instance closes; returns the detach function. A send that
+ * fails (not connected, capability not advertised) is dropped: notifications never fail the server.
+ */
+export declare function attachNotifications(server: McpServer | Server, era: 'legacy' | 'modern', bus?: ServerEventBus): () => void;
+/** The kinds of primitive a runtime surface can enable or disable. */
+export type SurfaceKind = 'tool' | 'prompt' | 'resource';
+export interface RuntimeSurface {
+    /** Whether `name` is enabled (everything is, until disabled). */
+    isEnabled(kind: SurfaceKind, name: string): boolean;
+    /** Enable `name` and publish the matching list-changed event (no-op when already enabled). */
+    enable(kind: SurfaceKind, name: string): void;
+    /** Disable `name` and publish the matching list-changed event (no-op when already disabled). */
+    disable(kind: SurfaceKind, name: string): void;
+    /** Observe changes (registerTools / registerResources / registerPrompts use it); returns unsubscribe. */
+    subscribe(listener: (kind: SurfaceKind, name: string, enabled: boolean) => void): () => void;
+}
+/**
+ * Process-level enable/disable state for tools, prompts and resources, so a runtime change works the
+ * same in both serving models: per-request HTTP instances read it when they are built, live stdio
+ * instances have their SDK handles toggled in place, and ONE list-changed event goes out on the bus.
+ * Pass it as `surface` to `registerTools` / `registerResources` / `registerPrompts`.
+ */
+export declare function createRuntimeSurface(notifier?: ServerNotifier): RuntimeSurface;
+/**
+ * Bind one SDK handle (a registered tool, prompt, resource or template) to a surface: its `enabled`
+ * flag follows the surface, set directly so the instance itself sends no list-changed notification
+ * (the surface publishes exactly one on the bus). The binding is released when the instance closes.
+ */
+export declare function bindToSurface(server: McpServer, surface: RuntimeSurface, kind: SurfaceKind, name: string, handle: {
+    enabled: boolean;
+}): void;
+//# sourceMappingURL=notifications.d.ts.map

package/dist/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../src/notifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAEL,SAAS,EACT,KAAK,MAAM,EAEX,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,8BAA8B,CAAC;AAGtC,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAQtE,iGAAiG;AACjG,wBAAgB,UAAU,IAAI,cAAc,CAG3C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAEnE;AAED,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,GAAG,GAAE,cAA6B,GAAG,cAAc,CAOjF;AAUD,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAI7E;AAiBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,GAAG,MAAM,EAC1B,GAAG,EAAE,QAAQ,GAAG,QAAQ,EACxB,GAAG,GAAE,cAA6B,GACjC,MAAM,IAAI,CAqBZ;AAED,sEAAsE;AACtE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEzD,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACpD,8FAA8F;IAC9F,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,gGAAgG;IAChG,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,yGAAyG;IACzG,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC9F;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,GAAE,cAAiC,GAAG,cAAc,CA4BhG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAC3B,IAAI,CAWN"}