@raybase/core 0.0.2 → 0.3.3

package/dist/agent-remote-mcp-install.d.ts

@@ -0,0 +1,299 @@
+import type { RaybaseActionAudience } from "./actions.js";
+import { type RaybaseAgentRemoteMcpBindingSummary, type RaybaseAgentRemoteMcpToolBinding, type RaybaseRemoteMcpRuntimeServer, type RaybaseRemoteMcpServerSummary, type RaybaseRemoteMcpToolDescriptor } from "./agent-remote-mcp.js";
+import { type RemoteMcpSafeCredentialStatus } from "./agent-remote-mcp-credentials.js";
+import { RemoteMcpSessionCoordinator, type RemoteMcpTransportMode } from "./agent-remote-mcp-transport.js";
+import type { RemoteMcpOAuthDiscovery } from "./agent-remote-mcp-oauth.js";
+import type { AgentRuntimeInvocation, AgentRuntimeTool } from "./agent-runtime.js";
+import type { RaybaseAIEnv } from "./ai.js";
+import type { SqlExecutor } from "./db.js";
+import type { JsonSchemaObject } from "./json-schema.js";
+import { type SerializedPolicyExpression } from "./policies.js";
+import type { RaybaseSchema } from "./schema.js";
+/**
+ * Runtime-installable remote MCP servers.
+ *
+ * An operator installs a server into a *running* app: Core reads the server's
+ * `tools/list` once, validates and **pins** the descriptors it returns, and
+ * stores a credential *reference* (a secret name, never a value). Binding a
+ * pinned tool to an agent is a second, separate operator act. Nothing here
+ * runs during a turn except the read of already-pinned rows.
+ */
+export type RaybaseRemoteMcpServerStatus = "installed" | "disabled";
+export type RaybaseRemoteMcpInstalledCredential = {
+    type: "secret";
+    name: string;
+    scheme?: "bearer" | "raw";
+} | {
+    type: "stored";
+} | {
+    type: "none";
+};
+export type RaybaseRemoteMcpPinnedTool = {
+    description: string;
+    inputSchema: JsonSchemaObject;
+    annotations?: RaybaseRemoteMcpToolDescriptor["annotations"];
+    timeoutMs?: number;
+    maxResultBytes?: number;
+    redactionKeys?: string[];
+};
+export type RaybaseRemoteMcpToolAccess = {
+    policy: SerializedPolicyExpression;
+    audience?: RaybaseActionAudience;
+};
+export type RaybaseRemoteMcpServerRow = {
+    id: string;
+    name: string;
+    endpoint: string;
+    credentialRefJson: string;
+    transport: string;
+    discoveryState: string;
+    oauthMetadataJson: string | null;
+    serverRevision: number;
+    toolsJson: string;
+    policyJson: string;
+    discoveredAt: string;
+    discoveryHash: string;
+    status: string;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+};
+export type RaybaseAgentRemoteMcpBindingRow = {
+    id: string;
+    agentName: string;
+    serverName: string;
+    toolNamesJson: string;
+    status: string;
+    disabledReason: string | null;
+    createdBy: string;
+    createdAt: string;
+};
+export type RaybaseRemoteMcpDiscovery = {
+    endpointHost: string;
+    tools: Record<string, RaybaseRemoteMcpPinnedTool>;
+    hash: string;
+    discoveredAt: string;
+    /** Descriptors the server returned that Core refused to pin, with the reason. */
+    rejected: Array<{
+        name: string;
+        reason: string;
+    }>;
+};
+export type RaybaseRemoteMcpServerView = {
+    name: string;
+    endpoint: string;
+    endpointHost: string;
+    status: RaybaseRemoteMcpServerStatus;
+    credential: RaybaseRemoteMcpInstalledCredential;
+    /** The secret *name*; never a value. Null when the server needs no credential. */
+    secretName: string | null;
+    transport: RemoteMcpTransportMode;
+    discoveryState: "awaiting_credential" | "pinned" | "rediscovery_required";
+    credentialStatus: RemoteMcpSafeCredentialStatus | null;
+    oauth: RemoteMcpOAuthDiscovery | null;
+    tools: Array<{
+        name: string;
+        modelToolName: string;
+        description: string;
+        policy: SerializedPolicyExpression;
+        audience: RaybaseActionAudience;
+        annotations?: RaybaseRemoteMcpToolDescriptor["annotations"];
+        timeoutMs?: number;
+        maxResultBytes?: number;
+    }>;
+    discoveredAt: string;
+    discoveryHash: string;
+    /**
+     * Recomputed from the stored descriptors; a mismatch with `discoveryHash`
+     * means the pinned row drifted. Only the async projections fill it in.
+     */
+    toolsHash?: string;
+    createdBy: string;
+    createdAt: string;
+    updatedAt: string;
+};
+export type RaybaseRemoteMcpBindingView = {
+    agentName: string;
+    serverName: string;
+    toolNames: string[];
+    modelToolNames: string[];
+    status: "active" | "disabled";
+    disabledReason: string | null;
+    createdBy: string;
+    createdAt: string;
+};
+export type RaybaseRemoteMcpDoctorFinding = {
+    level: "error" | "warning" | "info";
+    check: string;
+    message: string;
+    fix: string;
+    serverName?: string;
+    secretName?: string;
+};
+export declare const raybaseRemoteMcpInstallLimits: {
+    /** Descriptors Core will pin from one `tools/list`. */
+    readonly maxTools: 64;
+    /** Bytes Core will read from one `tools/list` response. */
+    readonly maxDiscoveryBytes: 256000;
+    readonly maxDescriptionChars: 4000;
+    readonly maxInputSchemaBytes: 32000;
+    readonly discoveryTimeoutMs: 10000;
+};
+/**
+ * Reads a server's `tools/list` once over stateless Streamable HTTP. This is
+ * the only moment Core talks to an installed server outside a tool call, and
+ * it only ever happens on an operator's install or rediscover.
+ */
+export declare function discoverRemoteMcpTools(input: {
+    serverName?: string;
+    endpoint: string;
+    credential?: RaybaseRemoteMcpInstalledCredential;
+    control?: SqlExecutor;
+    transport?: RemoteMcpTransportMode;
+    coordinator?: RemoteMcpSessionCoordinator;
+    env?: unknown;
+    fetcher?: typeof fetch;
+    timeoutMs?: number;
+}): Promise<RaybaseRemoteMcpDiscovery>;
+export declare function pinnedToolsHash(tools: Record<string, RaybaseRemoteMcpPinnedTool>): Promise<string>;
+export type RaybaseRemoteMcpDiscoveryDiff = {
+    added: string[];
+    removed: string[];
+    changed: string[];
+    unchanged: string[];
+};
+export declare function remoteMcpDiscoveryDiff(current: Record<string, RaybaseRemoteMcpPinnedTool>, next: Record<string, RaybaseRemoteMcpPinnedTool>): RaybaseRemoteMcpDiscoveryDiff;
+export declare function listInstalledRemoteMcpServerRows(control: SqlExecutor): Promise<RaybaseRemoteMcpServerRow[]>;
+export declare function findInstalledRemoteMcpServerRow(control: SqlExecutor, name: string): Promise<RaybaseRemoteMcpServerRow | null>;
+export declare function listAgentRemoteMcpBindingRows(control: SqlExecutor, agentName?: string): Promise<RaybaseAgentRemoteMcpBindingRow[]>;
+export type InstallRemoteMcpServerInput = {
+    control: SqlExecutor;
+    name: string;
+    endpoint: string;
+    credential?: RaybaseRemoteMcpInstalledCredential;
+    transport?: RemoteMcpTransportMode;
+    oauthDiscovery?: RemoteMcpOAuthDiscovery;
+    /** Create the row before credential-backed discovery; caller must rediscover. */
+    deferDiscovery?: boolean;
+    /** Per-tool access rules. Tools without an entry get `role("user")`, signed-in only. */
+    access?: Record<string, RaybaseRemoteMcpToolAccess>;
+    /** Code-declared server names; a clash refuses, because they share one namespace. */
+    reservedServerNames?: string[];
+    actor: string;
+    env?: unknown;
+    fetcher?: typeof fetch;
+    now?: string;
+};
+export declare function installRemoteMcpServer(input: InstallRemoteMcpServerInput): Promise<{
+    row: RaybaseRemoteMcpServerRow;
+    server: RaybaseRemoteMcpServerView;
+    discovery: RaybaseRemoteMcpDiscovery;
+    secretName: string | null;
+}>;
+export declare function rediscoverRemoteMcpServer(input: {
+    control: SqlExecutor;
+    name: string;
+    /** Without confirm the diff is returned and nothing is written. */
+    confirm?: boolean;
+    actor: string;
+    env?: unknown;
+    fetcher?: typeof fetch;
+    now?: string;
+}): Promise<{
+    diff: RaybaseRemoteMcpDiscoveryDiff;
+    applied: boolean;
+    discovery: RaybaseRemoteMcpDiscovery;
+    disabledBindings: Array<{
+        agentName: string;
+        serverName: string;
+        reason: string;
+    }>;
+    server?: RaybaseRemoteMcpServerView;
+}>;
+export declare function setInstalledRemoteMcpServerStatus(input: {
+    control: SqlExecutor;
+    name: string;
+    status: RaybaseRemoteMcpServerStatus;
+    now?: string;
+}): Promise<RaybaseRemoteMcpServerRow>;
+export declare function bindAgentRemoteMcpServer(input: {
+    control: SqlExecutor;
+    agentName: string;
+    serverName: string;
+    toolNames: string[];
+    /** Model tool names the agent already offers from code; an overlap refuses. */
+    reservedModelToolNames?: string[];
+    actor: string;
+    now?: string;
+}): Promise<RaybaseAgentRemoteMcpBindingRow>;
+export declare function unbindAgentRemoteMcpServer(input: {
+    control: SqlExecutor;
+    agentName: string;
+    serverName: string;
+}): Promise<boolean>;
+/**
+ * The `RaybaseRemoteMcpServer` an installed row stands for — exactly the shape
+ * a code-declared server has, so `callRemoteMcpTool` and the event recorder
+ * are unchanged.
+ */
+export declare function installedRemoteMcpServerFor(row: RaybaseRemoteMcpServerRow): RaybaseRemoteMcpRuntimeServer;
+export declare function remoteMcpServerView(row: RaybaseRemoteMcpServerRow, server?: RaybaseRemoteMcpRuntimeServer, credentialStatus?: RemoteMcpSafeCredentialStatus | null): RaybaseRemoteMcpServerView;
+export declare function remoteMcpBindingView(row: RaybaseAgentRemoteMcpBindingRow): RaybaseRemoteMcpBindingView;
+/** Installed servers and bindings, projected for admin/doctor/operator surfaces. */
+export declare function installedRemoteMcpOverview(control: SqlExecutor): Promise<{
+    servers: RaybaseRemoteMcpServerView[];
+    bindings: RaybaseRemoteMcpBindingView[];
+}>;
+/** Summaries in the same shape the code-declared surfaces use, for admin/doctor. */
+export declare function installedRemoteMcpServerSummaries(control: SqlExecutor): Promise<RaybaseRemoteMcpServerSummary[]>;
+export declare function installedAgentRemoteMcpBindingSummaries(control: SqlExecutor): Promise<RaybaseAgentRemoteMcpBindingSummary[]>;
+/**
+ * The installed bindings this agent may use, read once per invocation. Rows are
+ * read straight from the database and never re-validated against the server:
+ * the model's tool list is exactly the set the operator pinned.
+ */
+export declare function resolveInstalledAgentRemoteMcpToolBindings<Env extends RaybaseAIEnv, Schema extends RaybaseSchema = RaybaseSchema>(input: AgentRuntimeInvocation<Env, Schema>): Promise<RaybaseAgentRemoteMcpToolBinding[]>;
+/**
+ * Code-declared plus installed bindings, merged. `agentRemoteMcpToolBindings`
+ * stays synchronous for definition-time validation.
+ */
+export declare function resolveAgentRemoteMcpToolBindings<Env extends RaybaseAIEnv, Schema extends RaybaseSchema = RaybaseSchema>(input: AgentRuntimeInvocation<Env, Schema>): Promise<RaybaseAgentRemoteMcpToolBinding[]>;
+/** Model-facing tools for the installed half of the merged set. */
+export declare function installedAgentRemoteMcpRuntimeTools<Env extends RaybaseAIEnv, Schema extends RaybaseSchema = RaybaseSchema>(input: AgentRuntimeInvocation<Env, Schema>): Promise<AgentRuntimeTool[]>;
+export type RaybaseRemoteMcpAgentCapability = {
+    serverName: string;
+    endpointHost: string;
+    tools: Array<{
+        name: string;
+        description: string;
+    }>;
+};
+/**
+ * What an app may show a member about an agent's installed servers: names,
+ * host and tool descriptions. No endpoint path, no credential reference, no
+ * policy internals. Members never install.
+ */
+export declare function agentRemoteMcpCapabilities(control: SqlExecutor, agentName: string): Promise<RaybaseRemoteMcpAgentCapability[]>;
+/**
+ * Findings an operator can act on. `env` is the worker environment when the
+ * caller has one: a deployed app can see whether the secret is bound, a static
+ * caller cannot and gets the "check wrangler secret list" advice instead.
+ */
+export declare function remoteMcpInstallFindings(input: {
+    control: SqlExecutor;
+    env?: unknown;
+    /** Pass false where the environment cannot be inspected (offline callers). */
+    canReadEnv?: boolean;
+}): Promise<RaybaseRemoteMcpDoctorFinding[]>;
+export declare function parsePinnedTools(value: string): Record<string, RaybaseRemoteMcpPinnedTool>;
+export declare function parseToolAccess(value: string): Record<string, RaybaseRemoteMcpToolAccess>;
+export declare function parseCredentialRef(value: string): RaybaseRemoteMcpInstalledCredential;
+export declare function parseToolNames(value: string): string[];
+/**
+ * `role:user`, `operator`, `deny`, or `public`. `public` is the only spelling
+ * that reaches the public principal, and it forces the read-only hint v1
+ * requires for public Agent use.
+ */
+export declare function parseRemoteMcpAccessSpec(spec: string): RaybaseRemoteMcpToolAccess;
+export declare function validateInstalledCredential(credential: RaybaseRemoteMcpInstalledCredential): void;
+//# sourceMappingURL=agent-remote-mcp-install.d.ts.map

package/dist/agent-remote-mcp-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-remote-mcp-install.d.ts","sourceRoot":"","sources":["../src/agent-remote-mcp-install.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAQL,KAAK,mCAAmC,EACxC,KAAK,gCAAgC,EAErC,KAAK,6BAA6B,EAElC,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAiD,KAAK,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AACtI,OAAO,EAAoB,2BAA2B,EAAE,KAAK,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC7H,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAA+B,KAAK,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjD;;;;;;;;GAQG;AAEH,MAAM,MAAM,4BAA4B,GAAG,WAAW,GAAG,UAAU,CAAC;AAEpE,MAAM,MAAM,mCAAmC,GAC3C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,MAAM,0BAA0B,GAAG;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,WAAW,CAAC,EAAE,8BAA8B,CAAC,aAAa,CAAC,CAAC;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,0BAA0B,CAAC;IACnC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,4BAA4B,CAAC;IACrC,UAAU,EAAE,mCAAmC,CAAC;IAChD,kFAAkF;IAClF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,sBAAsB,CAAC;IAClC,cAAc,EAAE,qBAAqB,GAAG,QAAQ,GAAG,sBAAsB,CAAC;IAC1E,gBAAgB,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACvD,KAAK,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACtC,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,0BAA0B,CAAC;QACnC,QAAQ,EAAE,qBAAqB,CAAC;QAChC,WAAW,CAAC,EAAE,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,eAAO,MAAM,6BAA6B;IACxC,uDAAuD;;IAEvD,2DAA2D;;;;;CAKnD,CAAC;AAQX;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,mCAAmC,CAAC;IACjD,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAC1C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAsDrC;AA4BD,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAExG;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAEF,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,EACnD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,GAC/C,6BAA6B,CAO/B;AAMD,wBAAsB,gCAAgC,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAEjH;AAED,wBAAsB,+BAA+B,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAEnI;AAED,wBAAsB,6BAA6B,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAIxI;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,mCAAmC,CAAC;IACjD,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IACzC,iFAAiF;IACjF,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,wFAAwF;IACxF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACpD,qFAAqF;IACrF,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC;IACxF,GAAG,EAAE,yBAAyB,CAAC;IAC/B,MAAM,EAAE,0BAA0B,CAAC;IACnC,SAAS,EAAE,yBAAyB,CAAC;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC,CAgDD;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC;IACV,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,yBAAyB,CAAC;IACrC,gBAAgB,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC,CAAC,CAiDD;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,4BAA4B,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAKrC;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+EAA+E;IAC/E,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,+BAA+B,CAAC,CA4C3C;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,OAAO,CAAC,CAQnB;AAMD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,yBAAyB,GAAG,6BAA6B,CA6BzG;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,yBAAyB,EAAE,MAAM,gCAAmC,EAAE,gBAAgB,GAAE,6BAA6B,GAAG,IAAW,GAAG,0BAA0B,CA8BxM;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,+BAA+B,GAAG,2BAA2B,CAYtG;AAED,oFAAoF;AACpF,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;IAC9E,OAAO,EAAE,0BAA0B,EAAE,CAAC;IACtC,QAAQ,EAAE,2BAA2B,EAAE,CAAC;CACzC,CAAC,CA4BD;AAED,oFAAoF;AACpF,wBAAsB,iCAAiC,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,6BAA6B,EAAE,CAAC,CAQtH;AAED,wBAAsB,uCAAuC,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAYlI;AAQD;;;;GAIG;AACH,wBAAsB,0CAA0C,CAAC,GAAG,SAAS,YAAY,EAAE,MAAM,SAAS,aAAa,GAAG,aAAa,EACrI,KAAK,EAAE,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,GACzC,OAAO,CAAC,gCAAgC,EAAE,CAAC,CAa7C;AAiDD;;;GAGG;AACH,wBAAsB,iCAAiC,CAAC,GAAG,SAAS,YAAY,EAAE,MAAM,SAAS,aAAa,GAAG,aAAa,EAC5H,KAAK,EAAE,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,GACzC,OAAO,CAAC,gCAAgC,EAAE,CAAC,CAE7C;AAED,mEAAmE;AACnE,wBAAsB,mCAAmC,CAAC,GAAG,SAAS,YAAY,EAAE,MAAM,SAAS,aAAa,GAAG,aAAa,EAC9H,KAAK,EAAE,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,GACzC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAI7B;AAMD,MAAM,MAAM,+BAA+B,GAAG;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAcpI;AAMD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,OAAO,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,8EAA8E;IAC9E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,6BAA6B,EAAE,CAAC,CAoF3C;AAMD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAI1F;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAIzF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,mCAAmC,CAYrF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAGtD;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAQjF;AAED,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,mCAAmC,GAAG,IAAI,CAMjG"}