@rndmjoker/proton-mcp 0.4.13 → 0.5.1

package/dist/permissions.d.ts

@@ -0,0 +1,139 @@
+/**
+ * What the assistant may do, tool by tool.
+ *
+ * Three levels, decided per tool by the user:
+ *
+ * - `off`: the tool does not exist as far as the assistant is concerned. It is
+ *   taken out of the list the client sees, and a call that arrives anyway is
+ *   refused with the name of the setting that refused it.
+ * - `ask`: the tool runs only after the person agrees through the client. Every
+ *   sending tool works this way by default, and so does proposing a filter.
+ * - `act`: the tool runs without asking. Every other tool works this way by
+ *   default.
+ *
+ * The defaults are exactly the behaviour before this file existed, so nothing
+ * changes on an upgrade. Only the tools that can ask at all offer `ask`: for a
+ * tool that reads, a question before every call would be noise nobody reads.
+ *
+ * ## Who decides
+ *
+ * The environment first, then the interface, then the default. An environment
+ * variable is set where the server is registered with the client, which takes
+ * a person editing that configuration; the interface takes a PIN once the user
+ * sets one, and without a PIN anything on the machine can change it, the
+ * assistant included. Both are said where they are set.
+ *
+ * ## Sending without asking
+ *
+ * When a sending tool acts on its own, three optional bounds apply, and a send
+ * outside any of them asks instead of failing: permitted recipients or domains,
+ * a maximum per rolling hour, and a last day. A bound turns a mistake or a
+ * crafted message into a question rather than into mail that has left.
+ */
+import type { Level, SendLimits, StoredSettings } from './settings.js';
+import { type Unlockable } from './filters/sieve.js';
+/** The tools in each group, as they are named to the client. */
+export declare const GROUPS: {
+    readonly reading: readonly ['list_folders', 'list_messages', 'search_messages', 'get_message', 'get_attachment', 'list_drafts', 'manage_filters', 'list_filters', 'get_filters'];
+    readonly filing: readonly ['add_label', 'remove_label', 'move_messages', 'set_flags', 'trash_messages'];
+    readonly writing: readonly ['create_draft', 'update_draft', 'reply_draft', 'forward_draft', 'save_attachment', 'delete_saved_attachments'];
+    readonly sending: readonly ['send_message', 'send_reply', 'send_forward', 'send_draft'];
+    readonly filters: readonly ['propose_filter', 'apply_filter', 'reorder_filters', 'delete_filter', 'set_filter_status'];
+};
+export type Group = keyof typeof GROUPS;
+/** Tools that are always there: the way to the interface, and the update check. */
+export declare const ALWAYS: Set<string>;
+/** Every tool a level can be set for, in a stable order. */
+export declare const CONTROLLED: readonly string[];
+/** The tools that can ask first: the ones whose effect leaves this machine or outlives the session. */
+export declare function canAsk(tool: string): boolean;
+export declare function defaultLevel(tool: string): Level;
+/** Which levels a tool offers. */
+export declare function levelsFor(tool: string): Level[];
+/** Where a tool's level comes from, so the interface and the answers can say. */
+export type LevelSource = 'environment' | 'read-only' | 'interface' | 'default';
+/** A configuration that cannot be honoured. The server refuses to start rather than guess. */
+export declare class PermissionsError extends Error {
+}
+/**
+ * Reads the three lists from the environment.
+ *
+ * A tool named on its own wins over a group it belongs to, so that "every
+ * sending tool acts on its own, but send_forward asks" can be written as
+ * exactly that. Every real contradiction is fatal: an unknown name, the same
+ * tool or the same group in two lists, or `ask` for a tool that cannot ask. A
+ * server that guessed would run with permissions nobody chose, and the place to
+ * find out is the start, not the first send.
+ */
+export declare function levelsFromEnvironment(env?: NodeJS.ProcessEnv): Map<string, Level>;
+/** The bounds from the environment, each one only when set. */
+export declare function limitsFromEnvironment(env?: NodeJS.ProcessEnv): SendLimits;
+/**
+ * What a filter may do beyond filing and flags, from PROTON_MCP_FILTER_ACTIONS,
+ * or nothing when it is not set. An unknown name stops the start, like an
+ * unknown tool: a typo must not quietly allow less, or more, than was meant.
+ */
+export declare function unlocksFromEnvironment(env?: NodeJS.ProcessEnv): Unlockable[] | undefined;
+/** Whether a recipient address matches an entry of the permitted list. */
+export declare function permitted(address: string, allowed: readonly string[]): boolean;
+export interface PermissionsOptions {
+    env?: NodeJS.ProcessEnv;
+    /** The shared settings as they are now. Read on every question, never cached. */
+    settings: () => StoredSettings;
+    /** PROTON_MCP_READ_ONLY. */
+    readOnly: boolean;
+    clock?: () => number;
+}
+/** Why a send that may act on its own still asks. Nothing means it may go. */
+export type HoldBack = {
+    reason: string;
+} | undefined;
+export declare class Permissions {
+    #private;
+    constructor(options: PermissionsOptions);
+    /**
+     * Where the level of a tool comes from.
+     *
+     * Read-only mode first: it is the strongest thing a user can say, and the
+     * mail layer refuses every change under it anyway, so a level claiming
+     * otherwise would only mislead.
+     */
+    source(tool: string): LevelSource;
+    /** The level in force for a tool right now. */
+    level(tool: string): Level;
+    /** The bounds in force: each one from the environment when set there, else from the interface. */
+    limits(): SendLimits;
+    /** Which bounds the environment fixed, so the interface shows them as fixed. */
+    limitsFixed(): {
+        allowed: boolean;
+        maxPerHour: boolean;
+        until: boolean;
+    };
+    /**
+     * What a filter may do beyond filing and flags: from the environment when
+     * set there, else from the interface. Nothing by default. The extension has
+     * the same switches in its popup, and an action needs both.
+     */
+    unlocks(): ReadonlySet<Unlockable>;
+    /** Whether the environment fixed what filters may do, so the interface shows it as fixed. */
+    unlocksFixed(): boolean;
+    /** Where to change what filters may do, for answers that refuse. */
+    unlocksWhere(): string;
+    /** Every tool whose level departs from the default, for the status line and the overview. */
+    departures(): Array<{
+        tool: string;
+        level: Level;
+        source: LevelSource;
+    }>;
+    /**
+     * Whether a send at level `act` may go without asking, given its recipients.
+     *
+     * Returns the bound that holds it back, or nothing. Checked in the order a
+     * person would care about: the last day, the recipients, then the count.
+     */
+    holdBack(recipients: readonly string[]): HoldBack;
+    /** Records a send that went out without asking, for the hourly bound. */
+    recordSent(): void;
+    /** Where to change a tool's level, for answers that refuse or act on their own. */
+    where(tool: string): string;
+}

package/dist/permissions.js

@@ -0,0 +1,355 @@
+/**
+ * What the assistant may do, tool by tool.
+ *
+ * Three levels, decided per tool by the user:
+ *
+ * - `off`: the tool does not exist as far as the assistant is concerned. It is
+ *   taken out of the list the client sees, and a call that arrives anyway is
+ *   refused with the name of the setting that refused it.
+ * - `ask`: the tool runs only after the person agrees through the client. Every
+ *   sending tool works this way by default, and so does proposing a filter.
+ * - `act`: the tool runs without asking. Every other tool works this way by
+ *   default.
+ *
+ * The defaults are exactly the behaviour before this file existed, so nothing
+ * changes on an upgrade. Only the tools that can ask at all offer `ask`: for a
+ * tool that reads, a question before every call would be noise nobody reads.
+ *
+ * ## Who decides
+ *
+ * The environment first, then the interface, then the default. An environment
+ * variable is set where the server is registered with the client, which takes
+ * a person editing that configuration; the interface takes a PIN once the user
+ * sets one, and without a PIN anything on the machine can change it, the
+ * assistant included. Both are said where they are set.
+ *
+ * ## Sending without asking
+ *
+ * When a sending tool acts on its own, three optional bounds apply, and a send
+ * outside any of them asks instead of failing: permitted recipients or domains,
+ * a maximum per rolling hour, and a last day. A bound turns a mistake or a
+ * crafted message into a question rather than into mail that has left.
+ */
+import { UNLOCKABLE, NO_UNLOCKS } from './filters/sieve.js';
+/** The tools in each group, as they are named to the client. */
+export const GROUPS = {
+    reading: [
+        'list_folders',
+        'list_messages',
+        'search_messages',
+        'get_message',
+        'get_attachment',
+        'list_drafts',
+        'manage_filters',
+        'list_filters',
+        'get_filters',
+    ],
+    filing: ['add_label', 'remove_label', 'move_messages', 'set_flags', 'trash_messages'],
+    writing: [
+        'create_draft',
+        'update_draft',
+        'reply_draft',
+        'forward_draft',
+        'save_attachment',
+        'delete_saved_attachments',
+    ],
+    sending: ['send_message', 'send_reply', 'send_forward', 'send_draft'],
+    filters: ['propose_filter', 'apply_filter', 'reorder_filters', 'delete_filter', 'set_filter_status'],
+};
+/** Tools that are always there: the way to the interface, and the update check. */
+export const ALWAYS = new Set(['open_configuration', 'check_for_updates']);
+/** Every tool a level can be set for, in a stable order. */
+export const CONTROLLED = Object.values(GROUPS).flat();
+const GROUP_OF = new Map(Object.entries(GROUPS).flatMap(([group, tools]) => tools.map((tool) => [tool, group])));
+/** The tools that can ask first: the ones whose effect leaves this machine or outlives the session. */
+export function canAsk(tool) {
+    const group = GROUP_OF.get(tool);
+    return group === 'sending' || group === 'filters';
+}
+/** Groups whose tools change something. Read-only mode switches all of them off. */
+const CHANGING = new Set(['filing', 'writing', 'sending', 'filters']);
+/**
+ * Tools that are off until the user switches them on: deleting a filter and
+ * switching one on or off. Both were left out of #59 at first, and came in on
+ * Tobi's word of 06.11.2026 that the user decides, with today's behaviour as
+ * the default.
+ */
+const OFF_BY_DEFAULT = new Set(['delete_filter', 'set_filter_status']);
+export function defaultLevel(tool) {
+    if (OFF_BY_DEFAULT.has(tool))
+        return 'off';
+    return canAsk(tool) ? 'ask' : 'act';
+}
+/** Which levels a tool offers. */
+export function levelsFor(tool) {
+    return canAsk(tool) ? ['off', 'ask', 'act'] : ['off', 'act'];
+}
+/** A configuration that cannot be honoured. The server refuses to start rather than guess. */
+export class PermissionsError extends Error {
+}
+const ENV_LISTS = [
+    ['PROTON_MCP_OFF', 'off'],
+    ['PROTON_MCP_ASK_FIRST', 'ask'],
+    ['PROTON_MCP_ACT_ON_ITS_OWN', 'act'],
+];
+/** Splits a list written with commas, spaces or both. */
+function entries(raw) {
+    return (raw ?? '')
+        .split(/[\s,]+/)
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+}
+/**
+ * Reads the three lists from the environment.
+ *
+ * A tool named on its own wins over a group it belongs to, so that "every
+ * sending tool acts on its own, but send_forward asks" can be written as
+ * exactly that. Every real contradiction is fatal: an unknown name, the same
+ * tool or the same group in two lists, or `ask` for a tool that cannot ask. A
+ * server that guessed would run with permissions nobody chose, and the place to
+ * find out is the start, not the first send.
+ */
+export function levelsFromEnvironment(env = process.env) {
+    const fromGroups = new Map();
+    const fromTools = new Map();
+    const groupNamedIn = new Map();
+    const toolNamedIn = new Map();
+    const check = (variable, level, tool, how) => {
+        if (level === 'ask' && !canAsk(tool)) {
+            throw new PermissionsError(`${variable} names ${how}, and ${tool} cannot ask first: only the sending tools and the filter ` +
+                'tools that change something can. Use PROTON_MCP_OFF or PROTON_MCP_ACT_ON_ITS_OWN for it.');
+        }
+    };
+    for (const [variable, level] of ENV_LISTS) {
+        for (const entry of entries(env[variable])) {
+            if (entry in GROUPS) {
+                const earlier = groupNamedIn.get(entry);
+                if (earlier && earlier !== variable) {
+                    throw new PermissionsError(`The group ${entry} is named in both ${earlier} and ${variable}.`);
+                }
+                groupNamedIn.set(entry, variable);
+                for (const tool of GROUPS[entry]) {
+                    check(variable, level, tool, `the group ${entry}`);
+                    fromGroups.set(tool, level);
+                }
+                continue;
+            }
+            if (!GROUP_OF.has(entry)) {
+                const always = ALWAYS.has(entry) ? ' It is always available and has no level.' : '';
+                throw new PermissionsError(`${variable} names "${entry}", which is neither a tool nor a group.${always} Groups are ` +
+                    `${Object.keys(GROUPS).join(', ')}.`);
+            }
+            const earlier = toolNamedIn.get(entry);
+            if (earlier && earlier !== variable) {
+                throw new PermissionsError(`${entry} is named in both ${earlier} and ${variable}. Each tool may appear in one of them only.`);
+            }
+            check(variable, level, entry, entry);
+            toolNamedIn.set(entry, variable);
+            fromTools.set(entry, level);
+        }
+    }
+    return new Map([...fromGroups, ...fromTools]);
+}
+/** The bounds from the environment, each one only when set. */
+export function limitsFromEnvironment(env = process.env) {
+    const limits = {};
+    const allowed = entries(env.PROTON_MCP_SEND_ALLOWED);
+    if (allowed.length > 0)
+        limits.allowed = allowed;
+    const max = env.PROTON_MCP_SEND_MAX_PER_HOUR?.trim();
+    if (max) {
+        const value = Number(max);
+        if (!Number.isInteger(value) || value < 1) {
+            throw new PermissionsError(`PROTON_MCP_SEND_MAX_PER_HOUR is "${max}", which is not a whole number of at least 1.`);
+        }
+        limits.maxPerHour = value;
+    }
+    const until = env.PROTON_MCP_ACT_UNTIL?.trim();
+    if (until) {
+        if (!/^\d{4}-\d{2}-\d{2}$/.test(until) || Number.isNaN(Date.parse(`${until}T00:00:00Z`))) {
+            throw new PermissionsError(`PROTON_MCP_ACT_UNTIL is "${until}", which is not a day written YYYY-MM-DD.`);
+        }
+        limits.until = until;
+    }
+    return limits;
+}
+/**
+ * What a filter may do beyond filing and flags, from PROTON_MCP_FILTER_ACTIONS,
+ * or nothing when it is not set. An unknown name stops the start, like an
+ * unknown tool: a typo must not quietly allow less, or more, than was meant.
+ */
+export function unlocksFromEnvironment(env = process.env) {
+    const raw = env.PROTON_MCP_FILTER_ACTIONS;
+    if (raw === undefined || raw.trim() === '')
+        return undefined;
+    const named = entries(raw);
+    if (named.length === 1 && named[0] === 'none')
+        return [];
+    const unknown = named.find((entry) => !UNLOCKABLE.includes(entry));
+    if (unknown) {
+        throw new PermissionsError(`PROTON_MCP_FILTER_ACTIONS names "${unknown}", which is not an action a filter can be allowed. ` +
+            `They are ${UNLOCKABLE.join(', ')}, or none.`);
+    }
+    return [...new Set(named)];
+}
+/** Whether a recipient address matches an entry of the permitted list. */
+export function permitted(address, allowed) {
+    const candidate = address.trim().toLowerCase();
+    const domain = candidate.slice(candidate.lastIndexOf('@'));
+    return allowed.some((entry) => {
+        const rule = entry.trim().toLowerCase();
+        return rule.startsWith('@') ? domain === rule : candidate === rule;
+    });
+}
+/** The local calendar day of a moment, YYYY-MM-DD, which is how the last day is written. */
+function day(at) {
+    const pad = (n) => String(n).padStart(2, '0');
+    return `${at.getFullYear()}-${pad(at.getMonth() + 1)}-${pad(at.getDate())}`;
+}
+export class Permissions {
+    #fromEnv;
+    #limitsFromEnv;
+    #unlocksFromEnv;
+    #settings;
+    #readOnly;
+    #clock;
+    /** When each send without asking went out, for the hourly bound. This server only. */
+    #sent = [];
+    constructor(options) {
+        const env = options.env ?? process.env;
+        this.#fromEnv = levelsFromEnvironment(env);
+        this.#limitsFromEnv = limitsFromEnvironment(env);
+        this.#unlocksFromEnv = unlocksFromEnvironment(env);
+        this.#settings = options.settings;
+        this.#readOnly = options.readOnly;
+        this.#clock = options.clock ?? Date.now;
+    }
+    /**
+     * Where the level of a tool comes from.
+     *
+     * Read-only mode first: it is the strongest thing a user can say, and the
+     * mail layer refuses every change under it anyway, so a level claiming
+     * otherwise would only mislead.
+     */
+    source(tool) {
+        const group = GROUP_OF.get(tool);
+        if (this.#readOnly && group && CHANGING.has(group))
+            return 'read-only';
+        if (this.#fromEnv.has(tool))
+            return 'environment';
+        if (this.#settings().levels?.[tool] !== undefined)
+            return 'interface';
+        return 'default';
+    }
+    /** The level in force for a tool right now. */
+    level(tool) {
+        if (ALWAYS.has(tool) || !GROUP_OF.has(tool))
+            return 'act';
+        const group = GROUP_OF.get(tool);
+        if (this.#readOnly && CHANGING.has(group))
+            return 'off';
+        const fromEnv = this.#fromEnv.get(tool);
+        if (fromEnv)
+            return fromEnv;
+        const chosen = this.#settings().levels?.[tool];
+        if (chosen && levelsFor(tool).includes(chosen))
+            return chosen;
+        return defaultLevel(tool);
+    }
+    /** The bounds in force: each one from the environment when set there, else from the interface. */
+    limits() {
+        const stored = this.#settings().limits ?? {};
+        const limits = {};
+        const allowed = this.#limitsFromEnv.allowed ?? stored.allowed;
+        const maxPerHour = this.#limitsFromEnv.maxPerHour ?? stored.maxPerHour;
+        const until = this.#limitsFromEnv.until ?? stored.until;
+        if (allowed)
+            limits.allowed = allowed;
+        if (maxPerHour !== undefined)
+            limits.maxPerHour = maxPerHour;
+        if (until)
+            limits.until = until;
+        return limits;
+    }
+    /** Which bounds the environment fixed, so the interface shows them as fixed. */
+    limitsFixed() {
+        return {
+            allowed: this.#limitsFromEnv.allowed !== undefined,
+            maxPerHour: this.#limitsFromEnv.maxPerHour !== undefined,
+            until: this.#limitsFromEnv.until !== undefined,
+        };
+    }
+    /**
+     * What a filter may do beyond filing and flags: from the environment when
+     * set there, else from the interface. Nothing by default. The extension has
+     * the same switches in its popup, and an action needs both.
+     */
+    unlocks() {
+        if (this.#readOnly)
+            return NO_UNLOCKS;
+        const chosen = this.#unlocksFromEnv ?? this.#settings().filterActions ?? [];
+        return new Set(UNLOCKABLE.filter((action) => chosen.includes(action)));
+    }
+    /** Whether the environment fixed what filters may do, so the interface shows it as fixed. */
+    unlocksFixed() {
+        return this.#unlocksFromEnv !== undefined;
+    }
+    /** Where to change what filters may do, for answers that refuse. */
+    unlocksWhere() {
+        return this.#unlocksFromEnv !== undefined
+            ? 'set in the environment of this server (PROTON_MCP_FILTER_ACTIONS)'
+            : 'on the Permissions page of the local interface';
+    }
+    /** Every tool whose level departs from the default, for the status line and the overview. */
+    departures() {
+        return CONTROLLED.filter((tool) => this.level(tool) !== defaultLevel(tool)).map((tool) => ({
+            tool,
+            level: this.level(tool),
+            source: this.source(tool),
+        }));
+    }
+    /**
+     * Whether a send at level `act` may go without asking, given its recipients.
+     *
+     * Returns the bound that holds it back, or nothing. Checked in the order a
+     * person would care about: the last day, the recipients, then the count.
+     */
+    holdBack(recipients) {
+        const limits = this.limits();
+        const now = this.#clock();
+        if (limits.until && day(new Date(now)) > limits.until) {
+            return { reason: `sending without asking ended after ${limits.until}` };
+        }
+        if (limits.allowed) {
+            const outside = recipients.filter((address) => !permitted(address, limits.allowed));
+            if (outside.length > 0) {
+                return { reason: `not every recipient is on the permitted list (${outside.join(', ')})` };
+            }
+        }
+        if (limits.maxPerHour !== undefined) {
+            this.#sent = this.#sent.filter((at) => now - at < 3_600_000);
+            if (this.#sent.length >= limits.maxPerHour) {
+                return { reason: `${limits.maxPerHour} messages already went out without asking within the hour` };
+            }
+        }
+        return undefined;
+    }
+    /** Records a send that went out without asking, for the hourly bound. */
+    recordSent() {
+        this.#sent.push(this.#clock());
+    }
+    /** Where to change a tool's level, for answers that refuse or act on their own. */
+    where(tool) {
+        switch (this.source(tool)) {
+            case 'environment':
+                return 'set in the environment of this server (PROTON_MCP_OFF, PROTON_MCP_ASK_FIRST or PROTON_MCP_ACT_ON_ITS_OWN)';
+            case 'read-only':
+                return 'set by PROTON_MCP_READ_ONLY';
+            case 'interface':
+                return 'set on the Permissions page of the local interface';
+            default:
+                return 'the default';
+        }
+    }
+}
+//# sourceMappingURL=permissions.js.map

package/dist/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAmB,MAAM,oBAAoB,CAAA;AAE5E,gEAAgE;AAChE,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,OAAO,EAAE;QACP,cAAc;QACd,eAAe;QACf,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,aAAa;QACb,gBAAgB;QAChB,cAAc;QACd,aAAa;KACd;IACD,MAAM,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,CAAC;IACrF,OAAO,EAAE;QACP,cAAc;QACd,cAAc;QACd,aAAa;QACb,eAAe;QACf,iBAAiB;QACjB,0BAA0B;KAC3B;IACD,OAAO,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,CAAC;IACrE,OAAO,EAAE,CAAC,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,mBAAmB,CAAC;CAC5F,CAAA;AAIV,mFAAmF;AACnF,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAA;AAE1E,4DAA4D;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAsB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;AAEzE,MAAM,QAAQ,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAuC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CACvF,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAU,CAAC,CAC5C,CACF,CAAA;AAED,uGAAuG;AACvG,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAA;AACnD,CAAC;AAED,oFAAoF;AACpF,MAAM,QAAQ,GAAuB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;AAEzF;;;;;GAKG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAA;AAE3F,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;AACrC,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAC9D,CAAC;AAKD,8FAA8F;AAC9F,MAAM,OAAO,gBAAiB,SAAQ,KAAK;CAAG;AAE9C,MAAM,SAAS,GAA2B;IACxC,CAAC,gBAAgB,EAAE,KAAK,CAAC;IACzB,CAAC,sBAAsB,EAAE,KAAK,CAAC;IAC/B,CAAC,2BAA2B,EAAE,KAAK,CAAC;CACrC,CAAA;AAED,yDAAyD;AACzD,SAAS,OAAO,CAAC,GAAuB;IACtC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;SACf,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAA;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACxE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAiB,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAA;IAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE7C,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,KAAY,EAAE,IAAY,EAAE,GAAW,EAAQ,EAAE;QAChF,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,gBAAgB,CACxB,GAAG,QAAQ,UAAU,GAAG,SAAS,IAAI,2DAA2D;gBAC9F,0FAA0F,CAC7F,CAAA;QACH,CAAC;IACH,CAAC,CAAA;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC3C,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;gBACpB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBACvC,IAAI,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACpC,MAAM,IAAI,gBAAgB,CAAC,aAAa,KAAK,qBAAqB,OAAO,QAAQ,QAAQ,GAAG,CAAC,CAAA;gBAC/F,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;gBACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAc,CAAC,EAAE,CAAC;oBAC1C,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,KAAK,EAAE,CAAC,CAAA;oBAClD,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gBAC7B,CAAC;gBACD,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,EAAE,CAAA;gBACnF,MAAM,IAAI,gBAAgB,CACxB,GAAG,QAAQ,WAAW,KAAK,0CAA0C,MAAM,cAAc;oBACvF,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvC,CAAA;YACH,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,gBAAgB,CACxB,GAAG,KAAK,qBAAqB,OAAO,QAAQ,QAAQ,6CAA6C,CAClG,CAAA;YACH,CAAC;YACD,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;YACpC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YAChC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACxE,MAAM,MAAM,GAAe,EAAE,CAAA;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAA;IACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAA;IAEhD,MAAM,GAAG,GAAG,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAA;IACpD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,GAAG,+CAA+C,CACvF,CAAA;QACH,CAAC;QACD,MAAM,CAAC,UAAU,GAAG,KAAK,CAAA;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAA;IAC9C,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,KAAK,2CAA2C,CAAC,CAAA;QAC1G,CAAC;QACD,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;IACtB,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACzE,MAAM,GAAG,GAAG,GAAG,CAAC,yBAAyB,CAAA;IACzC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,EAAE,CAAA;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAE,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IACzF,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,gBAAgB,CACxB,oCAAoC,OAAO,qDAAqD;YAC9F,YAAY,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAChD,CAAA;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAqB,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,OAA0B;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACvC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAA;IACpE,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAS,GAAG,CAAC,EAAQ;IACnB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACrD,OAAO,GAAG,EAAE,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAA;AAC7E,CAAC;AAcD,MAAM,OAAO,WAAW;IACb,QAAQ,CAAoB;IAC5B,cAAc,CAAY;IAC1B,eAAe,CAA0B;IACzC,SAAS,CAAsB;IAC/B,SAAS,CAAS;IAClB,MAAM,CAAc;IAC7B,sFAAsF;IACtF,KAAK,GAAa,EAAE,CAAA;IAEpB,YAAY,OAA2B;QACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;QACtC,IAAI,CAAC,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;QAC1C,IAAI,CAAC,cAAc,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;QAChD,IAAI,CAAC,eAAe,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAA;QAClD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAA;QACjC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAA;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAA;IACzC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,IAAY;QACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,IAAI,CAAC,SAAS,IAAI,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,WAAW,CAAA;QACtE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,aAAa,CAAA;QACjD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,WAAW,CAAA;QACrE,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,IAAY;QAChB,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAA;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;QACjC,IAAI,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAA;QAC7D,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,kGAAkG;IAClG,MAAM;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,IAAI,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAe,EAAE,CAAA;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAA;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAA;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAA;QACvD,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAA;QACrC,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5D,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;QAC/B,OAAO,MAAM,CAAA;IACf,CAAC;IAED,gFAAgF;IAChF,WAAW;QACT,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,OAAO,KAAK,SAAS;YAClD,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,KAAK,SAAS;YACxD,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,KAAK,SAAS;SAC/C,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,UAAU,CAAA;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,aAAa,IAAI,EAAE,CAAA;QAC3E,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC;IAED,6FAA6F;IAC7F,YAAY;QACV,OAAO,IAAI,CAAC,eAAe,KAAK,SAAS,CAAA;IAC3C,CAAC;IAED,oEAAoE;IACpE,YAAY;QACV,OAAO,IAAI,CAAC,eAAe,KAAK,SAAS;YACvC,CAAC,CAAC,mEAAmE;YACrE,CAAC,CAAC,gDAAgD,CAAA;IACtD,CAAC;IAED,6FAA6F;IAC7F,UAAU;QACR,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzF,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC,CAAA;IACL,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,UAA6B;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QACzB,IAAI,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YACtD,OAAO,EAAE,MAAM,EAAE,sCAAsC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;QACzE,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,OAAQ,CAAC,CAAC,CAAA;YACpF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,MAAM,EAAE,iDAAiD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAA;YAC3F,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,SAAS,CAAC,CAAA;YAC5D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3C,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,2DAA2D,EAAE,CAAA;YACpG,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,yEAAyE;IACzE,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAChC,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,IAAY;QAChB,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,KAAK,aAAa;gBAChB,OAAO,2GAA2G,CAAA;YACpH,KAAK,WAAW;gBACd,OAAO,6BAA6B,CAAA;YACtC,KAAK,WAAW;gBACd,OAAO,oDAAoD,CAAA;YAC7D;gBACE,OAAO,aAAa,CAAA;QACxB,CAAC;IACH,CAAC;CACF"}