@nyuchi/mzizi-mcp 0.10.1 → 0.11.0

package/README.md

@@ -1,25 +1,48 @@
 # @nyuchi/mzizi-mcp
 
-> Model Context Protocol server for the Mzizi design system — the registry and skills served from files bundled at build time, the docs joined in from docs.mzizi.dev, and no database behind any of it.
+> Model Context Protocol server for the Mzizi design system: the registry and skills served from files bundled at build time, the docs joined in from docs.mzizi.dev, and no database behind any of it. Free, with no account; sign-in only for Fundi.
 
 [![npm](https://img.shields.io/npm/v/%40nyuchi%2Fmzizi-mcp?style=flat-square&logo=npm)](https://www.npmjs.com/package/@nyuchi/mzizi-mcp)
 [![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg?style=flat-square)](https://www.apache.org/licenses/LICENSE-2.0)
 
 **Live:** `https://mcp.mzizi.dev/mcp` | **Home:** [mzizi.dev](https://mzizi.dev) | **Docs:** [docs.mzizi.dev](https://docs.mzizi.dev)
 
-Mzizi is an open-architecture project governed by **Mzizi**, operated and
-developed by **Nyuchi**.
+Owned and operated by **Mzizi**.
 
 ---
 
 **Live at** `https://mcp.mzizi.dev/mcp` (Cloudflare Worker `mzizi-mcp`, version
-0.9.1 — `MZIZI_MCP_VERSION` in `src/server.ts` is what `serverInfo.version`
-reports, and it moves in lockstep with `package.json` and `server.json`). A
-**free WorkOS signup gate** fronts the endpoint — a WorkOS
-**Connect OAuth application** (public client, PKCE; no client secret) — so sign up
-once and read the whole registry at no cost. The worker advertises
-`/.well-known/oauth-protected-resource` so MCP clients can run the OAuth discovery
-dance automatically.
+0.11.0 — `MZIZI_MCP_VERSION` in `src/server.ts` is what `serverInfo.version`
+reports, and it moves in lockstep with `package.json` and `server.json`).
+
+## Free, with no gate except Fundi
+
+Connect with no account. An anonymous session can `initialize`, call
+`tools/list` and call every tool except the Fundi ones:
+
+| Access                            | Tools                                                                                                                                                                                                                          |
+| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| **free**, no account              | `mzizi_search`, `mzizi_get_component`, `mzizi_list_components`, `mzizi_get_tokens`, `mzizi_get_architecture`, `mzizi_get_doctrine`, `mzizi_get_skills`, `mzizi_check_accessibility`, `mzizi_mcp_describe`, every `docs_*` tool |
+| **sign-in** (free WorkOS account) | `mzizi_fundi`, `mzizi_report_issue`. They act as your Mzizi console user                                                                                                                                                       |
+
+- Called without sign-in, the Fundi tools are still listed. They answer with a
+  tool error that starts `Sign-in required:` and says how to sign in.
+- **To sign in**, use your client's sign-in or authenticate option for this
+  server, or connect to **`https://mcp.mzizi.dev/mcp/signin`**. That URL is the
+  same MCP, but it answers 401 until you sign in through a WorkOS **Connect
+  OAuth application** (public client, PKCE; no client secret), and then serves
+  every tool. Clients discover the authorization server through
+  `/.well-known/oauth-protected-resource`, including the path-specific
+  `/.well-known/oauth-protected-resource/mcp/signin`.
+- A request to `/mcp` that carries a token is validated by the OAuth provider
+  exactly as before: a bad or expired token gets a 401, so a signed-in client
+  refreshes rather than dropping to the free tier.
+- **Abuse guard:** anonymous requests are limited to 120 per 60 seconds per
+  client IP (a Workers rate-limit binding, `ANON_RATE_LIMIT`). Over the limit
+  you get HTTP 429 with `Retry-After: 60`. Signed-in requests are not limited.
+- `mzizi_mcp_describe`, the `mzizi://tools` resource and
+  `GET https://mcp.mzizi.dev/catalogue.json` mark every tool `free` or
+  `sign-in`, and say how to sign in. `src/access.ts` is the one list.
 
 **MCP Registry name:** `io.github.mzizi-dev/mzizi-mcp` (from 0.10.1; the older
 `io.github.nyuchi/mzizi-mcp` entry is stale and no longer updated)
@@ -41,8 +64,9 @@ Point any MCP client at the live HTTP endpoint:
 }
 ```
 
-The client will be redirected through the WorkOS Connect OAuth (PKCE) flow on first
-connect. After that, reads are free and unlimited.
+No sign-in is needed. To use the Fundi tools, use
+`"url": "https://mcp.mzizi.dev/mcp/signin"` instead; the client runs the WorkOS
+Connect OAuth (PKCE) flow on first connect.
 
 ### stdio (local / offline)
 
@@ -63,10 +87,10 @@ tools forward to the public docs MCP and need network.
 }
 ```
 
-This is the **sanctioned headless path**: the hosted `mcp.mzizi.dev` endpoint
-sits behind an interactive, browser-only WorkOS signup gate that a headless agent
-(Claude Code, CI, an offline client) can't complete. `mzizi_report_issue` needs a
-signed-in user and says so on the stdio bin.
+Use it when you want the registry offline, or pinned to the version you
+installed. The hosted endpoint needs no sign-in either, so a headless agent can
+use either one. `mzizi_report_issue` needs a signed-in user and says so on the
+stdio bin, and `mzizi_fundi` is not offered there.
 
 ---
 
@@ -74,11 +98,11 @@ signed-in user and says so on the stdio bin.
 
 Nothing is read from a database, and no registry data is fetched at request time.
 
-| Data                                                                                                                                                            | Source                                                                                                                                     | How it gets into the Worker                                                                                                                                          |
-| --------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Components, index, component docs, brand tokens, architecture helix + nodes, Ubuntu pillars/principles, conventions, AI instruction sets, changelog, rename map | [mzizi-dev/mzizi-registry](https://github.com/mzizi-dev/mzizi-registry) at the commit pinned in [`registry.pin.json`](./registry.pin.json) | `scripts/generate-registry.mjs` fetches that exact commit and calls the registry's **own API route handlers** once per resource, writing `src/generated/registry.ts` |
-| Agent skills                                                                                                                                                    | `../mzizi-skills/skills/*/SKILL.md` in this repo                                                                                           | `scripts/generate-skills.mjs` → `src/generated/skills.ts`                                                                                                            |
-| Documentation                                                                                                                                                   | the Mintlify MCP at `https://docs.mzizi.dev/mcp`                                                                                           | federated live — see below                                                                                                                                           |
+| Data                                                                                                                                                                                                                 | Source                                                                                                                                     | How it gets into the Worker                                                                                                                                          |
+| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Components, index, component docs, Rust (Mzizi Roots) implementations and their crates, brand tokens, architecture helix + nodes, Ubuntu pillars/principles, conventions, AI instruction sets, changelog, rename map | [mzizi-dev/mzizi-registry](https://github.com/mzizi-dev/mzizi-registry) at the commit pinned in [`registry.pin.json`](./registry.pin.json) | `scripts/generate-registry.mjs` fetches that exact commit and calls the registry's **own API route handlers** once per resource, writing `src/generated/registry.ts` |
+| Agent skills                                                                                                                                                                                                         | `../mzizi-skills/skills/*/SKILL.md` in this repo                                                                                           | `scripts/generate-skills.mjs` → `src/generated/skills.ts`                                                                                                            |
+| Documentation                                                                                                                                                                                                        | the Mintlify MCP at `https://docs.mzizi.dev/mcp`                                                                                           | federated live — see below                                                                                                                                           |
 
 Both generated files are build output: gitignored, never committed, rebuilt by
 `pnpm generate` (which `build`, `build:worker`, `cf:dev`, `cf:deploy`, `test`,
@@ -92,9 +116,23 @@ re-deriving their output, a tool here answers with the same payload
 throws on use, so a route that still reads a database **fails the build** rather
 than shipping an empty answer.
 
-**Moving to newer registry content** is a one-line PR: set `ref` in
-`registry.pin.json` to a newer full commit SHA of mzizi-registry. CI regenerates
-and runs the bundle tests against it.
+**Moving to newer registry content (bumping the pin)** is a one-line PR:
+
+1. Pick the mzizi-registry commit to ship (a full 40-character SHA on its
+   `main`).
+2. Set `ref` in `registry.pin.json` to it.
+3. Run `pnpm --filter @nyuchi/mzizi-mcp test` locally, or let CI do it. The
+   generator fetches that commit, and `test/registry-bundle.test.ts` checks the
+   bundle ref equals the pin and calls every registry tool against it.
+4. Merge. Workers Builds rebuilds with the new pin and deploys it. The npm bin
+   picks it up at the next version bump.
+
+`mzizi_mcp_describe` and `/catalogue.json` report the pinned commit as
+`source.registry`, so you can check what is live.
+
+Components are **Rust first** (Mzizi Roots): where the registry has a Rust
+implementation, it is the lead. The TSX components are the React build, and
+keep working.
 
 Former `nyuchi-*` component names (renamed to `mzizi-*` on 2026-09-27) resolve
 through the registry's `lib/component-renames.json`, bundled with the rest.
@@ -114,26 +152,67 @@ call, passing the result through untouched:
 
 ## Tools
 
-| Tool                               | Returns                                                                    |
-| ---------------------------------- | -------------------------------------------------------------------------- |
-| `mzizi_search`                     | Word search over components, conventions, AI instruction sets and releases |
-| `mzizi_get_component`              | One component in full, source inline; `include: ["docs", "versions"]`      |
-| `mzizi_list_components`            | The lean, paged index; filter by `node`, `owner`, `collection`, `type`     |
-| `mzizi_get_tokens`                 | Brand system; `family: "colors"` for all 21 colour families                |
-| `mzizi_get_architecture`           | The DNA helix, or one node/rung with `node` (uncapped)                     |
-| `mzizi_get_doctrine`               | `ubuntu-pillars`, `ubuntu-principles`, `ai-instructions`, `conventions`    |
-| `mzizi_get_skills`                 | The agent skills, listed or one in full                                    |
-| `mzizi_check_accessibility`        | Contrast ratio against the Mzizi AAA floor, computed locally               |
-| `mzizi_report_issue`               | Your issue desk (signed-in users on the Worker)                            |
-| `mzizi_fundi`                      | Delegate to fundi (only when the Worker is wired to fundi)                 |
-| `mzizi_mcp_describe`               | This server's tools, what each replaces, and its data sources              |
-| `docs_search_mzizi`                | Search the documentation (forwarded)                                       |
-| `docs_query_docs_filesystem_mzizi` | Read-only `rg`/`cat`/`tree` over the doc pages (forwarded)                 |
-| `docs_submit_feedback`             | Report a documentation problem (forwarded)                                 |
-
-The `docs_*` names mirror whatever docs.mzizi.dev lists; the three above are what
-it lists today. `GET /catalogue.json` and the `mzizi://tools` resource are computed
-from the same registration path.
+| Tool                               | Returns                                                                        |
+| ---------------------------------- | ------------------------------------------------------------------------------ |
+| `mzizi_search`                     | Word search over components, conventions, AI instruction sets and releases     |
+| `mzizi_get_component`              | One component in full, **Rust first**; `include: ["docs", "versions"]`         |
+| `mzizi_list_components`            | The lean, paged index; filter by `node`, `owner`, `collection`, `type`, `rust` |
+| `mzizi_get_tokens`                 | Brand system; `family: "colors"` for all 21 colour families                    |
+| `mzizi_get_architecture`           | The DNA helix, or one node/rung with `node` (uncapped)                         |
+| `mzizi_get_doctrine`               | `ubuntu-pillars`, `ubuntu-principles`, `ai-instructions`, `conventions`        |
+| `mzizi_get_skills`                 | The agent skills, listed or one in full                                        |
+| `mzizi_check_accessibility`        | Contrast ratio against the Mzizi AAA floor, computed locally                   |
+| `mzizi_report_issue`               | Your issue desk. **Sign-in**                                                   |
+| `mzizi_fundi`                      | Delegate to fundi (when the Worker can reach fundi). **Sign-in**               |
+| `mzizi_mcp_describe`               | This server's tools, their access, what each replaces, and data sources        |
+| `docs_search_mzizi`                | Search the documentation (forwarded)                                           |
+| `docs_query_docs_filesystem_mzizi` | Read-only `rg`/`cat`/`tree` over the doc pages (forwarded)                     |
+| `docs_submit_feedback`             | Report a documentation problem (forwarded)                                     |
+
+**The tool list is whatever `tools/list` returns.** The `docs_*` names mirror
+whatever docs.mzizi.dev lists; the three above are what it lists today (checked
+against the live `/catalogue.json` on 2026-09-29). `GET /catalogue.json` and the
+`mzizi://tools` resource are computed from the same registration path.
+
+**Rust first (from 0.11.0).** Mzizi's own components are being converted to Rust as
+**Mzizi Roots**; the TSX components are the React build, deprioritised. The registry
+tools present the Rust implementation first wherever one exists:
+
+- `mzizi_get_component` returns
+  `{name, renamedFrom?, lead, note, rust, react, docs?, versions?}`, in that order.
+  - `lead` is `"rust"` when the component has a Rust implementation, else `"react"`.
+  - `rust` is the registry's `GET /v1/rs/{name}` answer, reordered so the install comes
+    before the source:
+    - `crate`: `{name, registry, git}`, from the registry's `crateFor` and `CRATE_GIT`.
+    - `install.cargo`: `cargo add <crate>`, the crates.io release.
+    - `install.pinned`: the same with
+      `--git https://github.com/mzizi-dev/mzizi-registry --rev <pin>`, which builds
+      exactly the source shown.
+    - `module`: the crate's Rust path, e.g. `mzizi_ui`.
+    - `contract`: the RFC-0006 `contract … end` block from the source's `CONTRACT`
+      const, or `null` when the source declares none.
+    - `files[]`: the `.rs` source, inline.
+
+    With no Rust, `rust` is `null`, and `note` carries the registry's own "ships for
+    React only" wording.
+
+  - `react` is the React build: `build: "react"`, `status: "deprioritised"`, `install`
+    (`npx shadcn@latest add https://api.mzizi.dev/v1/ui/<name>`), then the registry's
+    `GET /v1/ui/{name}` body unchanged (shadcn-shaped, `files[]` inline). If the registry
+    refuses the React build but Rust exists, `react` is `{build, error}` and the Rust
+    still leads.
+  - **Breaking for readers of 0.10.x:** the React body moved from `component` to
+    `react`, and `renamedFrom` moved to the top level.
+- `mzizi_list_components` rows carry `rustCrate` when the component has Rust (absent
+  otherwise), the response carries `withRust` (how many of `total` have Rust), and
+  `rust: true` / `rust: false` filters on it.
+- `mzizi_search` component hits carry `rustCrate` the same way, and at an equal score a
+  component with Rust ranks first. A better word match still wins.
+- The generator calls the registry's own `/v1/rs/{name}` route handler for every
+  component, as it does `/v1/ui/{name}`. Only components with Rust are stored; the
+  no-Rust answer is stored once as a template, which the build checks against every
+  component's real answer. This adds about 0.6 MiB to the Worker upload (gzip about
+  +160 KiB; see the CHANGELOG for the measured sizes).
 
 **Shape notes (changed when the registry moved into the build).**
 
@@ -170,21 +249,27 @@ healing plan in it, and writes that issue's lifecycle back to D1 — which is wh
 confidential: a var wins on every deploy and silently discards a same-named remote value, so a
 value that differs per environment cannot live in committed config. It is "not required" only
 because `src/identity.ts` carries a working default — and it must move in lockstep with
-`fundi-tester`, which binds the same issuer that this Worker's agent-card consumers are pointed
+`mzizi-fundi`, which binds the same issuer that this Worker's agent-card consumers are pointed
 at. See `AUTH.md`.
 
 Plain vars (`[vars]` in `wrangler.toml`, not secrets):
 
-| Var                    | Notes                                                          |
-| ---------------------- | -------------------------------------------------------------- |
-| `WORKOS_CLIENT_ID`     | Connect OAuth app client id (public client; PKCE)              |
-| `WORKOS_M2M_CLIENT_ID` | Fundi M2M app client id; required only when `FUNDI_URL` is set |
-| `FUNDI_URL`            | Base URL of the fundi worker; enables the `fundi_status` tool  |
+| Var                    | Notes                                                         |
+| ---------------------- | ------------------------------------------------------------- |
+| `WORKOS_CLIENT_ID`     | Connect OAuth app client id (public client; PKCE)             |
+| `WORKOS_M2M_CLIENT_ID` | Fundi M2M app client id; used only on the HTTP + M2M fallback |
+| `FUNDI_URL`            | Base URL of the fundi worker, for the HTTP + M2M fallback     |
+
+Bindings (`wrangler.toml`): `FUNDI_SERVICE` (Service Binding to `mzizi-fundi`'s
+`FundiInternal` entrypoint; what makes fundi reachable in production),
+`ISSUE_DESK` (one Durable Object per signed-in user), `OAUTH_KV` (the OAuth
+provider's store) and `ANON_RATE_LIMIT` (the free tier's per-IP limit).
 
 > The Connect OAuth app is a **public client (PKCE)** — there is no `WORKOS_CLIENT_SECRET`
 > or WorkOS API key on the worker.
 
-**Optional: fundi-caller extras** (only needed when mzizi-mcp is the fundi caller):
+**Optional: fundi-caller extras** (only on the HTTP + M2M fallback, e.g. `wrangler dev`; the
+deployed Worker uses the Service Binding and needs no M2M secret):
 
 | Name                       | Kind   | Purpose                                             |
 | -------------------------- | ------ | --------------------------------------------------- |
@@ -212,7 +297,8 @@ Source files:
 
 - `src/server.ts` — `createMziziMcpServer()` factory
 - `src/http.ts` — `createMziziHttpHandler()` for any fetch runtime
-- `src/worker.ts` — Cloudflare Worker bound to `env` (the gated deployment)
+- `src/worker.ts` — Cloudflare Worker: the free-tier front, and the OAuth provider for sign-in
+- `src/access.ts` — which tools need sign-in, the sign-in URL, and the rate limit
 - `src/stdio.ts` — `bin: mzizi-mcp` for the MCP registry / local Claude Code
 
 ---
@@ -232,6 +318,9 @@ pnpm --filter @nyuchi/mzizi-mcp build
 # local Worker dev
 pnpm --filter @nyuchi/mzizi-mcp cf:dev
 
+# wrangler dev (workerd) integration: the real Worker anonymously + the signed-in path
+pnpm --filter @nyuchi/mzizi-mcp integration
+
 # deploy manually (Workers Builds handles pushes to main)
 pnpm --filter @nyuchi/mzizi-mcp cf:deploy
 ```
@@ -246,11 +335,12 @@ fails the build, and a failed build deploys nothing — the running version stay
 
 **Rollback:** Cloudflare dashboard → Workers & Pages → `mzizi-mcp` → Deployments → pick
 the previous version → _Rollback_, or `wrangler rollback` from `mzizi-mcp/`. Reverting
-the merge commit on `main` redeploys the previous source through Workers Builds.
+the commit on `main` (merges are rebase-only) redeploys the previous source through Workers
+Builds.
 
 ---
 
 ## License
 
-Apache-2.0. Part of the mzizi tooling — an open-architecture project of
-[Mzizi](https://mzizi.dev), operated by [nyuchi](https://nyuchi.com).
+Apache-2.0. Part of the Mzizi agent tooling ([mzizi.dev](https://mzizi.dev)).
+Copyright the Bundu Foundation; see the repository `NOTICE`.

package/dist/generated/registry-pin.d.ts

@@ -1,5 +1,5 @@
 export declare const REGISTRY_PIN: {
     readonly repository: "https://github.com/mzizi-dev/mzizi-registry";
-    readonly ref: "61c805c2d88419133938bbc286972e14587457e0";
+    readonly ref: "9b86e034ffd84cff9ae0214201dc4bc4b15b2885";
 };
 //# sourceMappingURL=registry-pin.d.ts.map

package/dist/generated/registry-pin.js

@@ -1,3 +1,3 @@
 // GENERATED by scripts/generate-registry.mjs — do not edit, do not commit.
-export const REGISTRY_PIN = { "repository": "https://github.com/mzizi-dev/mzizi-registry", "ref": "61c805c2d88419133938bbc286972e14587457e0" };
+export const REGISTRY_PIN = { "repository": "https://github.com/mzizi-dev/mzizi-registry", "ref": "9b86e034ffd84cff9ae0214201dc4bc4b15b2885" };
 //# sourceMappingURL=registry-pin.js.map

package/dist/generated/registry.d.ts

@@ -1,14 +1,14 @@
 /**
  * GENERATED by scripts/generate-registry.mjs — do not edit, do not commit.
  *
- * The mzizi registry at https://github.com/mzizi-dev/mzizi-registry/tree/61c805c2d88419133938bbc286972e14587457e0
+ * The mzizi registry at https://github.com/mzizi-dev/mzizi-registry/tree/9b86e034ffd84cff9ae0214201dc4bc4b15b2885
  * (pinned in registry.pin.json), produced by calling the registry's own API
  * route handlers at build time. Every value is a JSON string, parsed lazily by
  * src/registry.ts, so a cold start pays only for what a request reads.
  */
 export declare const REGISTRY_PIN: {
     readonly repository: "https://github.com/mzizi-dev/mzizi-registry";
-    readonly ref: "61c805c2d88419133938bbc286972e14587457e0";
+    readonly ref: "9b86e034ffd84cff9ae0214201dc4bc4b15b2885";
 };
 /** Whole-resource payloads, keyed by section. */
 export declare const SECTIONS: Readonly<Record<string, string>>;
@@ -16,6 +16,16 @@ export declare const SECTIONS: Readonly<Record<string, string>>;
 export declare const COMPONENTS: Readonly<Record<string, string>>;
 /** `/ui/{name}/docs` per component. */
 export declare const COMPONENT_DOCS: Readonly<Record<string, string>>;
+/**
+ * `/rs/{name}` per component WITH a Mzizi Roots (Rust) implementation: the
+ * registry's body ({name, type, target, description, crate, files}) plus
+ * `contract`, the source's CONTRACT clause block or null.
+ */
+export declare const RUST: Readonly<Record<string, string>>;
+/** Component name → the crate that compiles its Rust, for every entry in RUST. Cheap to read whole. */
+export declare const RUST_CRATES: Readonly<Record<string, string>>;
+/** `/rs/{name}` for a component with no Rust, with `{name}` in place of the name. */
+export declare const RUST_MISSING: string;
 /** `/architecture/nodes/{n}` per node or rung. */
 export declare const NODES: Readonly<Record<string, string>>;
 /** `/ai/instructions/{name}` per instruction set. */

package/dist/generated/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/generated/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,eAAO,MAAM,YAAY;;;CAAyH,CAAA;AAElJ,iDAAiD;AACjD,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUrD,CAAA;AAED,kDAAkD;AAClD,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkkBvD,CAAA;AAED,uCAAuC;AACvC,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkkB3D,CAAA;AAED,kDAAkD;AAClD,eAAO,MAAM,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAalD,CAAA;AAED,qDAAqD;AACrD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI5D,CAAA"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/generated/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,eAAO,MAAM,YAAY;;;CAAyH,CAAA;AAElJ,iDAAiD;AACjD,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUrD,CAAA;AAED,kDAAkD;AAClD,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkkBvD,CAAA;AAED,uCAAuC;AACvC,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkkB3D,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwDjD,CAAA;AAED,uGAAuG;AACvG,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAA6yD,CAAA;AAEt2D,qFAAqF;AACrF,eAAO,MAAM,YAAY,EAAE,MAAyP,CAAA;AAEpR,kDAAkD;AAClD,eAAO,MAAM,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAalD,CAAA;AAED,qDAAqD;AACrD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAI5D,CAAA"}