@pegma/knowledge-base-mcp 0.0.0-stage → 0.1.1

package/dist/transport-common.js

@@ -0,0 +1,411 @@
+import { KnowledgeAgentBoundaryError } from "./errors.js";
+import { parseKnowledgeAgentJson } from "./schemas.js";
+const transportErrors = Object.freeze({
+    invalid_request: [400, "Invalid knowledge request."],
+    invalid_token: [401, "Knowledge authentication is required."],
+    forbidden: [403, "Knowledge access is forbidden."],
+    temporarily_unavailable: [
+        429,
+        "Knowledge service is temporarily unavailable.",
+    ],
+    unavailable: [503, "Knowledge service is unavailable."],
+    capacity: [413, "Knowledge request or result exceeds capacity."],
+    method_not_allowed: [405, "Knowledge endpoint requires POST."],
+    unsupported_media_type: [415, "Knowledge endpoint requires UTF-8 JSON."],
+});
+const encoder = new TextEncoder();
+const maxBodyChunks = 1_024;
+const maxAuthorityItems = 256;
+const maxAuthorityCharacters = 1_024;
+function cancelStream(stream) {
+    try {
+        // A peer's cancellation hook must not hold the rejection response open.
+        void stream?.cancel().catch(() => { });
+    }
+    catch {
+        // Cancellation can throw for a locked stream; no content is consumed.
+    }
+}
+function configurationError() {
+    throw new TypeError("Invalid knowledge agent transport configuration.");
+}
+function configuredUrl(value, allowLoopback) {
+    if (typeof value !== "string" || value.length > 2_048)
+        return configurationError();
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return configurationError();
+    }
+    const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+    if ((url.protocol !== "https:" &&
+        !(allowLoopback && loopback && url.protocol === "http:")) ||
+        url.username !== "" ||
+        url.password !== "" ||
+        value !== `${url.origin}${url.pathname}`)
+        return configurationError();
+    return url;
+}
+/** Validate and snapshot host configuration once, before accepting requests. */
+export function validateKnowledgeAgentTransportOptions(options, endpointUrl, transport) {
+    const allowLoopback = options.allowInsecureLoopback === true;
+    const endpoint = configuredUrl(endpointUrl, allowLoopback);
+    configuredUrl(options.resource, allowLoopback);
+    configuredUrl(options.protectedResourceMetadataUrl, allowLoopback);
+    if ((transport !== "http" && transport !== "mcp") ||
+        (transport === "mcp" && endpointUrl !== options.resource) ||
+        typeof options.authenticate !== "function" ||
+        typeof options.limit !== "function" ||
+        !Array.isArray(options.allowedOrigins) ||
+        options.allowedOrigins.length > 64 ||
+        (options.allowInsecureLoopback !== undefined &&
+            typeof options.allowInsecureLoopback !== "boolean"))
+        return configurationError();
+    const origins = options.allowedOrigins.map((origin) => {
+        const parsed = configuredUrl(`${origin}/`, allowLoopback);
+        if (parsed.origin !== origin)
+            return configurationError();
+        return origin;
+    });
+    return Object.freeze({
+        transport,
+        endpointUrl,
+        endpointOrigin: endpoint.origin,
+        endpointPath: endpoint.pathname,
+        endpointHost: endpoint.host,
+        endpointProtocol: endpoint.protocol,
+        resource: options.resource,
+        protectedResourceMetadataUrl: options.protectedResourceMetadataUrl,
+        allowedOrigins: Object.freeze([...new Set(origins)]),
+        authenticate: options.authenticate,
+        limit: options.limit,
+    });
+}
+/** A matching path is claimed so a hostile authority cannot bypass admission. */
+export function knowledgeAgentRequestMatches(request, configuration) {
+    try {
+        return new URL(request.url).pathname === configuration.endpointPath;
+    }
+    catch {
+        return false;
+    }
+}
+function baseHeaders() {
+    return new Headers({
+        "Cache-Control": "no-store",
+        "X-Content-Type-Options": "nosniff",
+        "Referrer-Policy": "no-referrer",
+    });
+}
+/** Replace implicit CORS and caching with this endpoint's explicit policy. */
+export function secureKnowledgeAgentResponse(response, request, configuration) {
+    const headers = new Headers(response.headers);
+    for (const key of [...headers.keys()]) {
+        if (key.toLowerCase().startsWith("access-control-"))
+            headers.delete(key);
+    }
+    for (const [key, value] of baseHeaders())
+        headers.set(key, value);
+    headers.delete("Set-Cookie");
+    const vary = new Set((headers.get("Vary") ?? "")
+        .split(",")
+        .map((value) => value.trim())
+        .filter(Boolean));
+    vary.add("Origin");
+    headers.set("Vary", [...vary].join(", "));
+    const origin = request.headers.get("Origin");
+    if (origin !== null && configuration.allowedOrigins.includes(origin)) {
+        headers.set("Access-Control-Allow-Origin", origin);
+        headers.set("Access-Control-Expose-Headers", "WWW-Authenticate, Retry-After");
+    }
+    return new Response(response.body, {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+    });
+}
+function rawTransportError(code, retryAfterSeconds) {
+    const [status, message] = transportErrors[code];
+    const headers = baseHeaders();
+    headers.set("Content-Type", "application/json; charset=utf-8");
+    if (code === "method_not_allowed")
+        headers.set("Allow", "POST");
+    if (code === "temporarily_unavailable" &&
+        retryAfterSeconds !== undefined &&
+        Number.isSafeInteger(retryAfterSeconds) &&
+        retryAfterSeconds >= 0 &&
+        retryAfterSeconds <= 86_400)
+        headers.set("Retry-After", String(retryAfterSeconds));
+    return new Response(JSON.stringify({
+        apiVersion: "1",
+        operation: null,
+        error: { code, status, message },
+    }), { status, headers });
+}
+export function knowledgeAgentTransportError(code, request, configuration, retryAfterSeconds) {
+    const response = rawTransportError(code, retryAfterSeconds);
+    if (code === "invalid_token" || code === "forbidden") {
+        const error = code === "invalid_token" ? "invalid_token" : "insufficient_scope";
+        response.headers.set("WWW-Authenticate", `Bearer error="${error}", resource_metadata="${configuration.protectedResourceMetadataUrl}"`);
+    }
+    return secureKnowledgeAgentResponse(response, request, configuration);
+}
+function validHost(request, configuration) {
+    const host = request.headers.get("Host");
+    // Fetch runtimes may omit Host: the absolute request URL remains mandatory.
+    if (host === null)
+        return true;
+    try {
+        const parsed = new URL(`${configuration.endpointProtocol}//${host}`);
+        return (parsed.host === configuration.endpointHost &&
+            parsed.username === "" &&
+            parsed.password === "" &&
+            parsed.pathname === "/" &&
+            parsed.search === "" &&
+            parsed.hash === "" &&
+            !/[\s/@?#\\]/u.test(host));
+    }
+    catch {
+        return false;
+    }
+}
+function authorityString(value) {
+    return (typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= maxAuthorityCharacters &&
+        !/[\u0000-\u001f\u007f]/u.test(value));
+}
+function authorityRecord(value) {
+    if (value === null || typeof value !== "object")
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        return false;
+    const keys = Reflect.ownKeys(value);
+    if (keys.length > 32)
+        return false;
+    for (let index = 0; index < keys.length; index += 1) {
+        if (typeof keys[index] !== "string")
+            return false;
+    }
+    return true;
+}
+function ownAuthorityData(value, key) {
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    return descriptor !== undefined && "value" in descriptor
+        ? descriptor.value
+        : undefined;
+}
+function authorityList(value) {
+    if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype)
+        return null;
+    const length = ownAuthorityData(value, "length");
+    if (typeof length !== "number" ||
+        !Number.isSafeInteger(length) ||
+        length < 0 ||
+        length > maxAuthorityItems ||
+        Reflect.ownKeys(value).length !== length + 1)
+        return null;
+    const output = [];
+    for (let index = 0; index < length; index += 1) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+        if (descriptor === undefined ||
+            !("value" in descriptor) ||
+            !descriptor.enumerable ||
+            !authorityString(descriptor.value))
+            return null;
+        output[index] = descriptor.value;
+    }
+    return Object.freeze(output);
+}
+/** Detach bounded trusted facts so later host mutation cannot change authority. */
+function snapshotIdentity(value, resource) {
+    if (!authorityRecord(value))
+        return null;
+    const clientId = ownAuthorityData(value, "clientId");
+    const scopes = authorityList(ownAuthorityData(value, "scopes"));
+    const access = ownAuthorityData(value, "access");
+    if (ownAuthorityData(value, "resource") !== resource ||
+        !authorityString(clientId) ||
+        scopes === null ||
+        !authorityRecord(access))
+        return null;
+    const principalId = ownAuthorityData(access, "principalId");
+    const policyVersion = ownAuthorityData(access, "policyVersion");
+    const permissions = authorityList(ownAuthorityData(access, "permissions"));
+    if (!authorityString(principalId) ||
+        !authorityString(policyVersion) ||
+        permissions === null)
+        return null;
+    return Object.freeze({
+        clientId,
+        resource,
+        scopes,
+        access: Object.freeze({
+            principalId,
+            policyVersion,
+            roles: Object.freeze([]),
+            entitlements: Object.freeze([]),
+            permissions,
+        }),
+    });
+}
+/** Shared HTTP/MCP admission. No untrusted body is read by this function. */
+export async function authorizeKnowledgeAgentRequest(request, configuration) {
+    const reject = (code, retryAfterSeconds) => knowledgeAgentTransportError(code, request, configuration, retryAfterSeconds);
+    let url;
+    try {
+        url = new URL(request.url);
+    }
+    catch {
+        return reject("invalid_request");
+    }
+    if (url.href !== configuration.endpointUrl ||
+        !validHost(request, configuration))
+        return reject("invalid_request");
+    const origin = request.headers.get("Origin");
+    if (origin !== null && !configuration.allowedOrigins.includes(origin))
+        return reject("forbidden");
+    try {
+        const decision = await configuration.limit(request, {
+            transport: configuration.transport,
+        });
+        if (decision === false)
+            return reject("temporarily_unavailable");
+        if (decision !== true) {
+            if (decision === null ||
+                typeof decision !== "object" ||
+                typeof decision.allowed !== "boolean")
+                return reject("unavailable");
+            if (!decision.allowed)
+                return reject("temporarily_unavailable", decision.retryAfterSeconds);
+        }
+    }
+    catch {
+        return reject("unavailable");
+    }
+    const authorization = request.headers.get("Authorization");
+    if (authorization === null ||
+        authorization.length > 8_192 ||
+        !/^Bearer +[A-Za-z0-9._~+/-]+=*$/i.test(authorization))
+        return reject("invalid_token");
+    try {
+        const authenticated = await configuration.authenticate(request);
+        if (authenticated instanceof Response) {
+            // Host error messages, cookies, redirects and custom challenges are private.
+            cancelStream(authenticated.body);
+            if (authenticated.status === 401)
+                return reject("invalid_token");
+            if (authenticated.status === 403)
+                return reject("forbidden");
+            return reject("unavailable");
+        }
+        const identity = snapshotIdentity(authenticated, configuration.resource);
+        return identity ?? reject("invalid_token");
+    }
+    catch {
+        return reject("unavailable");
+    }
+}
+/** Read actual bytes/chunks before decoding or parsing; never trust Length alone. */
+export async function readKnowledgeAgentJsonRequest(request, limits) {
+    const maxBytes = limits.maxRequestBytes;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0)
+        return rawTransportError("unavailable");
+    const contentType = request.headers.get("Content-Type") ?? "";
+    if (!/^application\/json(?:\s*;\s*charset\s*=\s*(?:utf-8|"utf-8"))?\s*$/iu.test(contentType))
+        return rawTransportError("unsupported_media_type");
+    const encoding = request.headers.get("Content-Encoding");
+    if (encoding !== null && encoding.toLowerCase() !== "identity")
+        return rawTransportError("unsupported_media_type");
+    const declared = request.headers.get("Content-Length");
+    if (declared !== null &&
+        (!/^\d+$/u.test(declared) || !Number.isSafeInteger(Number(declared))))
+        return rawTransportError("invalid_request");
+    if (declared !== null && Number(declared) > maxBytes) {
+        cancelStream(request.body);
+        return rawTransportError("capacity");
+    }
+    if (request.body === null)
+        return rawTransportError("invalid_request");
+    let reader;
+    try {
+        reader = request.body.getReader();
+    }
+    catch {
+        return rawTransportError("invalid_request");
+    }
+    try {
+        const chunks = [];
+        let bytes = 0;
+        let count = 0;
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            count += 1;
+            bytes += next.value.byteLength;
+            if (bytes > maxBytes || count > maxBodyChunks) {
+                cancelStream(reader);
+                return rawTransportError("capacity");
+            }
+            chunks.push(next.value.slice());
+        }
+        if (declared !== null && Number(declared) !== bytes)
+            return rawTransportError("invalid_request");
+        const body = new Uint8Array(bytes);
+        let offset = 0;
+        for (const chunk of chunks) {
+            body.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+        const text = new TextDecoder("utf-8", {
+            fatal: true,
+            ignoreBOM: true,
+        }).decode(body);
+        return {
+            value: parseKnowledgeAgentJson(text, limits),
+        };
+    }
+    catch (error) {
+        if (error instanceof KnowledgeAgentBoundaryError &&
+            error.code === "capacity")
+            return rawTransportError("capacity");
+        return rawTransportError("invalid_request");
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+/** Serialize only complete bounded messages; never truncate application results. */
+export function knowledgeAgentJsonResponse(value, status, maxBytes, request, configuration) {
+    try {
+        const body = JSON.stringify(value);
+        if (body === undefined ||
+            !Number.isSafeInteger(maxBytes) ||
+            maxBytes <= 0 ||
+            encoder.encode(body).byteLength > maxBytes)
+            throw new TypeError("Knowledge response exceeds capacity");
+        return secureKnowledgeAgentResponse(new Response(body, {
+            status,
+            headers: { "Content-Type": "application/json; charset=utf-8" },
+        }), request, configuration);
+    }
+    catch {
+        const fallback = rawTransportError("unavailable");
+        // Even reduced budgets that cannot fit the fixed error remain bounded.
+        const fixedBytes = encoder.encode(JSON.stringify({
+            apiVersion: "1",
+            operation: null,
+            error: {
+                code: "unavailable",
+                status: 503,
+                message: "Knowledge service is unavailable.",
+            },
+        })).byteLength;
+        return secureKnowledgeAgentResponse(fixedBytes <= maxBytes ? fallback : new Response(null, { status: 503 }), request, configuration);
+    }
+}
+//# sourceMappingURL=transport-common.js.map

package/dist/transport-common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-common.js","sourceRoot":"","sources":["../src/transport-common.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAgEvD,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,eAAe,EAAE,CAAC,GAAG,EAAE,4BAA4B,CAAC;IACpD,aAAa,EAAE,CAAC,GAAG,EAAE,uCAAuC,CAAC;IAC7D,SAAS,EAAE,CAAC,GAAG,EAAE,gCAAgC,CAAC;IAClD,uBAAuB,EAAE;QACvB,GAAG;QACH,+CAA+C;KAChD;IACD,WAAW,EAAE,CAAC,GAAG,EAAE,mCAAmC,CAAC;IACvD,QAAQ,EAAE,CAAC,GAAG,EAAE,+CAA+C,CAAC;IAChE,kBAAkB,EAAE,CAAC,GAAG,EAAE,mCAAmC,CAAC;IAC9D,sBAAsB,EAAE,CAAC,GAAG,EAAE,yCAAyC,CAAC;CAChE,CAAC,CAAC;AAEZ,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,SAAS,YAAY,CACnB,MAAsD;IAEtD,IAAI,CAAC;QACH,wEAAwE;QACxE,KAAK,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,aAAsB;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;QACnD,OAAO,kBAAkB,EAAE,CAAC;IAC9B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACxB,CAAC,CAAC,aAAa,IAAI,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QAC3D,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,KAAK,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE;QAExC,OAAO,kBAAkB,EAAE,CAAC;IAC9B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sCAAsC,CACpD,OAAuC,EACvC,WAAmB,EACnB,SAAkC;IAElC,MAAM,aAAa,GAAG,OAAO,CAAC,qBAAqB,KAAK,IAAI,CAAC;IAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3D,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC/C,aAAa,CAAC,OAAO,CAAC,4BAA4B,EAAE,aAAa,CAAC,CAAC;IACnE,IACE,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,KAAK,CAAC;QAC7C,CAAC,SAAS,KAAK,KAAK,IAAI,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;QACzD,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU;QAC1C,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;QACtC,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE;QAClC,CAAC,OAAO,CAAC,qBAAqB,KAAK,SAAS;YAC1C,OAAO,OAAO,CAAC,qBAAqB,KAAK,SAAS,CAAC;QAErD,OAAO,kBAAkB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,MAAM,GAAG,EAAE,aAAa,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,kBAAkB,EAAE,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS;QACT,WAAW;QACX,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,YAAY,EAAE,QAAQ,CAAC,QAAQ;QAC/B,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;QACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,4BAA4B,EAAE,OAAO,CAAC,4BAA4B;QAClE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,4BAA4B,CAC1C,OAAgB,EAChB,aAAmD;IAEnD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,YAAY,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,OAAO,CAAC;QACjB,eAAe,EAAE,UAAU;QAC3B,wBAAwB,EAAE,SAAS;QACnC,iBAAiB,EAAE,aAAa;KACjC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,4BAA4B,CAC1C,QAAkB,EAClB,OAAgB,EAChB,aAAmD;IAEnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SACxB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CACT,+BAA+B,EAC/B,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;QACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAsC,EACtC,iBAA0B;IAE1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,oBAAoB;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChE,IACE,IAAI,KAAK,yBAAyB;QAClC,iBAAiB,KAAK,SAAS;QAC/B,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC;QACvC,iBAAiB,IAAI,CAAC;QACtB,iBAAiB,IAAI,MAAM;QAE3B,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACxD,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;QACb,UAAU,EAAE,GAAG;QACf,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;KACjC,CAAC,EACF,EAAE,MAAM,EAAE,OAAO,EAAE,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,IAAsC,EACtC,OAAgB,EAChB,aAAmD,EACnD,iBAA0B;IAE1B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACrD,MAAM,KAAK,GACT,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACpE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,kBAAkB,EAClB,iBAAiB,KAAK,yBAAyB,aAAa,CAAC,4BAA4B,GAAG,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,4BAA4B,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAChB,OAAgB,EAChB,aAAmD;IAEnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,4EAA4E;IAC5E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,aAAa,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC,CAAC;QACrE,OAAO,CACL,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,YAAY;YAC1C,MAAM,CAAC,QAAQ,KAAK,EAAE;YACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;YACtB,MAAM,CAAC,QAAQ,KAAK,GAAG;YACvB,MAAM,CAAC,MAAM,KAAK,EAAE;YACpB,MAAM,CAAC,IAAI,KAAK,EAAE;YAClB,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAC1B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,sBAAsB;QACtC,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,GAAW;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU;QACtD,CAAC,CAAC,UAAU,CAAC,KAAK;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;QAC3E,OAAO,IAAI,CAAC;IACd,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAC7B,MAAM,GAAG,CAAC;QACV,MAAM,GAAG,iBAAiB;QAC1B,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC;QAE5C,OAAO,IAAI,CAAC;IACd,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IACE,UAAU,KAAK,SAAS;YACxB,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YACxB,CAAC,UAAU,CAAC,UAAU;YACtB,CAAC,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC;YAElC,OAAO,IAAI,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CACvB,KAA6B,EAC7B,QAAgB;IAEhB,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,aAAa,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,IACE,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,QAAQ;QAChD,CAAC,eAAe,CAAC,QAAQ,CAAC;QAC1B,MAAM,KAAK,IAAI;QACf,CAAC,eAAe,CAAC,MAAM,CAAC;QAExB,OAAO,IAAI,CAAC;IACd,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,aAAa,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3E,IACE,CAAC,eAAe,CAAC,WAAW,CAAC;QAC7B,CAAC,eAAe,CAAC,aAAa,CAAC;QAC/B,WAAW,KAAK,IAAI;QAEpB,OAAO,IAAI,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,WAAW;YACX,aAAa;YACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,WAAW;SACZ,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAgB,EAChB,aAAmD;IAEnD,MAAM,MAAM,GAAG,CACb,IAAsC,EACtC,iBAA0B,EAC1B,EAAE,CACF,4BAA4B,CAC1B,IAAI,EACJ,OAAO,EACP,aAAa,EACb,iBAAiB,CAClB,CAAC;IACJ,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACnC,CAAC;IACD,IACE,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,WAAW;QACtC,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC;QAElC,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE;YAClD,SAAS,EAAE,aAAa,CAAC,SAAS;SACnC,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACjE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IACE,QAAQ,KAAK,IAAI;gBACjB,OAAO,QAAQ,KAAK,QAAQ;gBAC5B,OAAO,QAAQ,CAAC,OAAO,KAAK,SAAS;gBAErC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,OAAO;gBACnB,OAAO,MAAM,CAAC,yBAAyB,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,IACE,aAAa,KAAK,IAAI;QACtB,aAAa,CAAC,MAAM,GAAG,KAAK;QAC5B,CAAC,iCAAiC,CAAC,IAAI,CAAC,aAAa,CAAC;QAEtD,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,aAAa,YAAY,QAAQ,EAAE,CAAC;YACtC,6EAA6E;YAC7E,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;YACjE,IAAI,aAAa,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7D,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QACzE,OAAO,QAAQ,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB,EAChB,MAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC;QAClD,OAAO,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9D,IACE,CAAC,qEAAqE,CAAC,IAAI,CACzE,WAAW,CACZ;QAED,OAAO,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,UAAU;QAC5D,OAAO,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACvD,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAErE,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IACvE,IAAI,MAA+C,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,CAAC,CAAC;YACX,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,QAAQ,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;gBAC9C,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrB,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK;YACjD,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE;YACpC,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO;YACL,KAAK,EAAE,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC;SAC7C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,2BAA2B;YAC5C,KAAK,CAAC,IAAI,KAAK,UAAU;YAEzB,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,0BAA0B,CACxC,KAAc,EACd,MAAc,EACd,QAAgB,EAChB,OAAgB,EAChB,aAAmD;IAEnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,IACE,IAAI,KAAK,SAAS;YAClB,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;YAC/B,QAAQ,IAAI,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,QAAQ;YAE1C,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;QAC7D,OAAO,4BAA4B,CACjC,IAAI,QAAQ,CAAC,IAAI,EAAE;YACjB,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;SAC/D,CAAC,EACF,OAAO,EACP,aAAa,CACd,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,QAAQ,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAClD,uEAAuE;QACvE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAC/B,IAAI,CAAC,SAAS,CAAC;YACb,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,IAAI;YACf,KAAK,EAAE;gBACL,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,mCAAmC;aAC7C;SACF,CAAC,CACH,CAAC,UAAU,CAAC;QACb,OAAO,4BAA4B,CACjC,UAAU,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EACvE,OAAO,EACP,aAAa,CACd,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,90 @@
+import type { AccessContext } from "@pegma/authorization-core";
+import type { ArticleAcknowledgement, ArticleReadInput, CommandResult, CreateDraftInput, DraftArticleDto, KnowledgeBaseApplication, SubmitEvidenceInput, UpdateDraftInput, ValidationRequirementsDto, ValidationRequirementsReadInput } from "@pegma/knowledge-base-application";
+/** Scopes are existing application permission names, never a second role model. */
+export declare const knowledgeAgentScopes: Readonly<{
+    draftRead: "knowledge.article.draft.read";
+    draftWrite: "knowledge.article.draft.write";
+    evidenceSubmit: "knowledge.article.evidence.submit";
+}>;
+export declare const knowledgeAgentOperations: readonly ["getDraft", "createDraft", "updateDraft", "getValidationRequirements", "submitEvidence"];
+export type KnowledgeAgentOperation = (typeof knowledgeAgentOperations)[number];
+export declare const knowledgeAgentToolNames: Readonly<{
+    readonly getDraft: "knowledge_v1_get_draft";
+    readonly createDraft: "knowledge_v1_create_draft";
+    readonly updateDraft: "knowledge_v1_update_draft";
+    readonly getValidationRequirements: "knowledge_v1_get_validation_requirements";
+    readonly submitEvidence: "knowledge_v1_submit_evidence";
+}>;
+/** Authenticated by the host, supplied separately from every untrusted body. */
+export interface KnowledgeAgentIdentity {
+    readonly access: AccessContext;
+    readonly scopes: readonly string[];
+    readonly clientId: string;
+    readonly resource: string;
+}
+export interface KnowledgeAgentInputMap {
+    readonly getDraft: ArticleReadInput;
+    readonly createDraft: CreateDraftInput;
+    readonly updateDraft: UpdateDraftInput;
+    readonly getValidationRequirements: ValidationRequirementsReadInput;
+    readonly submitEvidence: SubmitEvidenceInput;
+}
+export interface KnowledgeAgentResultMap {
+    readonly getDraft: DraftArticleDto;
+    readonly createDraft: CommandResult<ArticleAcknowledgement>;
+    readonly updateDraft: CommandResult<ArticleAcknowledgement>;
+    readonly getValidationRequirements: ValidationRequirementsDto;
+    readonly submitEvidence: CommandResult<ArticleAcknowledgement>;
+}
+export type KnowledgeAgentEnvelope = {
+    [Operation in KnowledgeAgentOperation]: {
+        readonly apiVersion: "1";
+        readonly operation: Operation;
+        readonly input: KnowledgeAgentInputMap[Operation];
+    };
+}[KnowledgeAgentOperation];
+export type KnowledgeAgentSuccess = {
+    [Operation in KnowledgeAgentOperation]: {
+        readonly apiVersion: "1";
+        readonly operation: Operation;
+        readonly result: KnowledgeAgentResultMap[Operation];
+    };
+}[KnowledgeAgentOperation];
+export type KnowledgeAgentErrorCode = "invalid_request" | "forbidden" | "not_found" | "conflict" | "capacity" | "prerequisite" | "unavailable";
+export interface KnowledgeAgentError {
+    readonly code: KnowledgeAgentErrorCode;
+    readonly status: number;
+    readonly message: string;
+}
+export interface KnowledgeAgentFailure {
+    readonly apiVersion: "1";
+    /** Invalid envelopes never reflect an unrecognized caller-supplied name. */
+    readonly operation: KnowledgeAgentOperation | null;
+    readonly error: KnowledgeAgentError;
+}
+export type KnowledgeAgentResponse = KnowledgeAgentSuccess | KnowledgeAgentFailure;
+export interface KnowledgeAgentLimits {
+    readonly maxRequestBytes: number;
+    readonly maxResponseBytes: number;
+    readonly maxDepth: number;
+    readonly maxNodes: number;
+    readonly maxArrayLength: number;
+    readonly maxObjectKeys: number;
+}
+export declare const minimumKnowledgeAgentResponseBytes: number;
+export declare const defaultKnowledgeAgentLimits: KnowledgeAgentLimits;
+export interface KnowledgeAgentDispatcherOptions {
+    readonly application: KnowledgeBaseApplication;
+    /** Exact protected-resource identifier configured by this host. */
+    readonly resource: string;
+    /**
+     * Positive safe integers may only reduce the fixed component ceilings.
+     * maxResponseBytes must reserve at least 2,048 bytes for acknowledgements.
+     */
+    readonly limits?: Partial<KnowledgeAgentLimits>;
+}
+export interface KnowledgeAgentDispatcher {
+    readonly limits: KnowledgeAgentLimits;
+    dispatch(identity: KnowledgeAgentIdentity, envelope: unknown): Promise<KnowledgeAgentResponse>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EACV,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,mCAAmC,CAAC;AAI3C,mFAAmF;AACnF,eAAO,MAAM,oBAAoB;;;;EAI/B,CAAC;AAEH,eAAO,MAAM,wBAAwB,oGAM1B,CAAC;AAEZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhF,eAAO,MAAM,uBAAuB;uBACxB,wBAAwB;0BACrB,2BAA2B;0BAC3B,2BAA2B;wCACb,0CAA0C;6BACrD,8BAA8B;EACa,CAAC;AAE9D,gFAAgF;AAChF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,yBAAyB,EAAE,+BAA+B,CAAC;IACpE,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;CAC9C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAC5D,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;IAC5D,QAAQ,CAAC,yBAAyB,EAAE,yBAAyB,CAAC;IAC9D,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,sBAAsB,GAAG;KAClC,SAAS,IAAI,uBAAuB,GAAG;QACtC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;QAC9B,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;KACnD;CACF,CAAC,uBAAuB,CAAC,CAAC;AAE3B,MAAM,MAAM,qBAAqB,GAAG;KACjC,SAAS,IAAI,uBAAuB,GAAG;QACtC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;KACrD;CACF,CAAC,uBAAuB,CAAC,CAAC;AAE3B,MAAM,MAAM,uBAAuB,GAC/B,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,UAAU,GACV,UAAU,GACV,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,MAAM,sBAAsB,GAChC,qBAAqB,GAAG,qBAAqB,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAiBD,eAAO,MAAM,kCAAkC,QACiB,CAAC;AAEjE,eAAO,MAAM,2BAA2B,EAAE,oBAOxC,CAAC;AAEH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CACN,QAAQ,EAAE,sBAAsB,EAChC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACpC"}

package/dist/types.js

@@ -0,0 +1,45 @@
+import { knowledgePermissions } from "@pegma/knowledge-base-contracts";
+import { knowledgeLimits } from "@pegma/knowledge-base-core";
+/** Scopes are existing application permission names, never a second role model. */
+export const knowledgeAgentScopes = Object.freeze({
+    draftRead: knowledgePermissions.draftRead,
+    draftWrite: knowledgePermissions.draftWrite,
+    evidenceSubmit: knowledgePermissions.evidenceSubmit,
+});
+export const knowledgeAgentOperations = Object.freeze([
+    "getDraft",
+    "createDraft",
+    "updateDraft",
+    "getValidationRequirements",
+    "submitEvidence",
+]);
+export const knowledgeAgentToolNames = Object.freeze({
+    getDraft: "knowledge_v1_get_draft",
+    createDraft: "knowledge_v1_create_draft",
+    updateDraft: "knowledge_v1_update_draft",
+    getValidationRequirements: "knowledge_v1_get_validation_requirements",
+    submitEvidence: "knowledge_v1_submit_evidence",
+});
+// A complete 32 KiB guide or sixteen 1,000-character evidence steps, including
+// UTF-8 expansion, receipt, metadata, and JSON framing. Never truncate a guide.
+const completeMessageBytes = knowledgeLimits.contentBytes * 4;
+// Reserve a complete mutation acknowledgement before any operation can run.
+// Four UTF-8 bytes per identifier character is conservative for the core's
+// character bound; JSON escapes are smaller. Generation/revision, SHA-256, and
+// 512 bytes of fixed keys/version/operation/state framing fit the remainder.
+// Round that ceiling up to a whole KiB (currently 2,048 bytes), so lowering the
+// response budget cannot strand either a new commit or a historical replay.
+const maximumMutationAcknowledgementBytes = knowledgeLimits.identifierCharacters * 4 +
+    String(Number.MAX_SAFE_INTEGER).length * 2 +
+    64 +
+    512;
+export const minimumKnowledgeAgentResponseBytes = Math.ceil(maximumMutationAcknowledgementBytes / 1_024) * 1_024;
+export const defaultKnowledgeAgentLimits = Object.freeze({
+    maxRequestBytes: completeMessageBytes,
+    maxResponseBytes: completeMessageBytes,
+    maxDepth: 12,
+    maxNodes: 1_024,
+    maxArrayLength: knowledgeLimits.requirements,
+    maxObjectKeys: 32,
+});
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,SAAS,EAAE,oBAAoB,CAAC,SAAS;IACzC,UAAU,EAAE,oBAAoB,CAAC,UAAU;IAC3C,cAAc,EAAE,oBAAoB,CAAC,cAAc;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC;IACpD,UAAU;IACV,aAAa;IACb,aAAa;IACb,2BAA2B;IAC3B,gBAAgB;CACR,CAAC,CAAC;AAIZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,QAAQ,EAAE,wBAAwB;IAClC,WAAW,EAAE,2BAA2B;IACxC,WAAW,EAAE,2BAA2B;IACxC,yBAAyB,EAAE,0CAA0C;IACrE,cAAc,EAAE,8BAA8B;CACY,CAAC,CAAC;AA4E9D,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,oBAAoB,GAAG,eAAe,CAAC,YAAY,GAAG,CAAC,CAAC;AAE9D,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,MAAM,mCAAmC,GACvC,eAAe,CAAC,oBAAoB,GAAG,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC;IAC1C,EAAE;IACF,GAAG,CAAC;AACN,MAAM,CAAC,MAAM,kCAAkC,GAC7C,IAAI,CAAC,IAAI,CAAC,mCAAmC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AAEjE,MAAM,CAAC,MAAM,2BAA2B,GAAyB,MAAM,CAAC,MAAM,CAAC;IAC7E,eAAe,EAAE,oBAAoB;IACrC,gBAAgB,EAAE,oBAAoB;IACtC,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,KAAK;IACf,cAAc,EAAE,eAAe,CAAC,YAAY;IAC5C,aAAa,EAAE,EAAE;CAClB,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,45 @@
 {
   "name": "@pegma/knowledge-base-mcp",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "Optional MCP transport for authorized Pegma knowledge authoring and validation.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist/**/*.d.ts",
+    "dist/**/*.d.ts.map",
+    "dist/**/*.js",
+    "dist/**/*.js.map"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pegma-dev/knowledge-base.git",
+    "directory": "packages/mcp"
+  },
+  "dependencies": {
+    "@cfworker/json-schema": "4.1.6",
+    "@modelcontextprotocol/sdk": "1.32.2",
+    "@pegma/authorization-core": "0.4.0",
+    "@pegma/knowledge-base-application": "0.1.1",
+    "@pegma/knowledge-base-contracts": "0.1.1",
+    "@pegma/knowledge-base-core": "0.1.1",
+    "zod": "4.6.7"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "check": "tsc -p tsconfig.json --noEmit",
+    "prepack": "pnpm run --silent build"
+  }
+}