@robinmordasiewicz/f5xc-api-mcp 1.0.82-2512312028

package/CHANGELOG.md

@@ -0,0 +1,74 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Breaking Changes
+
+- **BREAKING**: Package name changed from `f5xc-api-mcp` to `@robinmordasiewicz/f5xc-api-mcp` for scoped npm packaging
+  - Installation command changes: `npm install -g @robinmordasiewicz/f5xc-api-mcp`
+  - npx command changes: `npx @robinmordasiewicz/f5xc-api-mcp`
+  - Binary name remains unchanged: `f5xc-api-mcp`
+  - This aligns with organizational package naming convention for consistency
+
+### Added
+
+- Initial release of F5 Distributed Cloud API MCP Server
+- 270+ API tools auto-generated from OpenAPI specifications
+- Dual-mode operation: documentation mode (unauthenticated) and execution mode (authenticated)
+- API token authentication support
+- P12 certificate (mTLS) authentication support
+- Automatic URL normalization for various F5XC URL formats
+- f5xcctl CLI command equivalents in every response
+- Terraform HCL examples in every response
+- MCP Resources for F5XC configuration objects via URI scheme
+- Workflow prompts for common operations:
+  - `deploy-http-loadbalancer` - Deploy HTTP Load Balancer with origin pool
+  - `configure-waf` - Configure Web Application Firewall
+  - `create-multicloud-site` - Deploy F5XC site in AWS/Azure/GCP
+  - `generate-terraform` - Export resources as Terraform HCL
+- Subscription tier awareness (NO_TIER, STANDARD, ADVANCED)
+- Comprehensive documentation site with MkDocs
+- Docker container distribution via GHCR
+- npm package distribution
+- GitHub Actions CI/CD pipeline:
+  - Automated OpenAPI spec synchronization
+  - Code generation workflow
+  - Security scanning (Trivy, TruffleHog, CodeQL)
+  - Multi-platform Docker builds
+  - Automated npm publishing
+  - Documentation deployment to GitHub Pages
+
+### API Domains
+
+- `waap` - HTTP/TCP load balancers, origin pools, app firewalls, rate limiters
+- `dns` - DNS zones, DNS load balancers, DNS LB pools
+- `network` - Network connectors, firewalls, enhanced firewall policies
+- `site` - AWS VPC sites, Azure VNET sites, GCP VPC sites, customer edge
+- `appstack` - K8s clusters, virtual K8s, workloads
+- `security` - Service policies, WAF, malicious user detection
+- `core` - Namespaces, certificates, cloud credentials
+
+### Technical
+
+- TypeScript 5.x with strict mode
+- Node.js 20+ LTS runtime
+- @modelcontextprotocol/sdk for MCP implementation
+- Zod for runtime validation
+- Axios with mTLS support for HTTP client
+- Vitest for testing framework
+- ESLint + Prettier for code quality
+- Material for MkDocs for documentation
+
+## [0.1.0] - TBD
+
+### Added
+
+- Initial public release
+
+[Unreleased]: https://github.com/robinmordasiewicz/f5xc-api-mcp/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/robinmordasiewicz/f5xc-api-mcp/releases/tag/v0.1.0

package/README.md

@@ -0,0 +1,415 @@
+# F5 Distributed Cloud API MCP Server
+
+[![npm version](https://badge.fury.io/js/%40robinmordasiewicz%2Ff5xc-api-mcp.svg)](https://www.npmjs.com/package/@robinmordasiewicz/f5xc-api-mcp)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+An MCP (Model Context Protocol) server that exposes F5 Distributed Cloud APIs to AI assistants.
+Enables natural language interaction with F5XC infrastructure through Claude, VS Code, and
+other MCP-compatible tools.
+
+## Features
+
+- **1500+ API Tools** - Complete coverage of F5XC API operations across 23 enriched domains
+- **Domain-Based Documentation** - Tools organized by domains with intelligent 2-level and
+  3-level hierarchical navigation
+- **Dual-Mode Operation** - Works without authentication (documentation mode) AND with authentication (execution mode)
+- **f5xcctl Integration** - Every response includes equivalent CLI commands
+- **Terraform Examples** - Every response includes Terraform HCL examples
+- **Multiple Auth Methods** - API token and P12 certificate (mTLS) support
+- **URL Normalization** - Automatically handles various F5XC URL formats
+- **Pre-enriched Specs** - Uses optimized OpenAPI 3.0.3 specifications with domain metadata
+
+## Quick Start
+
+### Using npx (Recommended)
+
+```bash
+npx @robinmordasiewicz/f5xc-api-mcp
+```
+
+### Using npm
+
+```bash
+npm install -g @robinmordasiewicz/f5xc-api-mcp
+f5xc-api-mcp
+```
+
+### Using Docker
+
+```bash
+docker run -i --rm ghcr.io/robinmordasiewicz/f5xc-api-mcp
+```
+
+## Configuration
+
+### Claude Desktop
+
+Add to your Claude Desktop configuration (`~/Library/Application Support/Claude/claude_desktop_config.json` on macOS):
+
+```json
+{
+  "mcpServers": {
+    "f5xc-api": {
+      "command": "npx",
+      "args": ["@robinmordasiewicz/f5xc-api-mcp"],
+      "env": {
+        "F5XC_API_URL": "https://your-tenant.console.ves.volterra.io",
+        "F5XC_API_TOKEN": "your-api-token"
+      }
+    }
+  }
+}
+```
+
+### Claude Code CLI
+
+```bash
+claude mcp add f5xc-api -- npx @robinmordasiewicz/f5xc-api-mcp
+```
+
+### VS Code (with Cline/Continue)
+
+Add to your MCP settings:
+
+```json
+{
+  "mcpServers": {
+    "f5xc-api": {
+      "command": "npx",
+      "args": ["@robinmordasiewicz/f5xc-api-mcp"]
+    }
+  }
+}
+```
+
+## Environment Variables
+
+| Variable | Required | Description |
+|----------|----------|-------------|
+| `F5XC_API_URL` | For execution | Tenant URL (auto-normalized) |
+| `F5XC_API_TOKEN` | For token auth | API token from XC Console |
+| `F5XC_P12_FILE` | For cert auth | Path to P12 certificate file |
+| `F5XC_P12_PASSWORD` | For cert auth | Password for P12 certificate |
+| `F5XC_PROFILE` | No | Profile name to use (default: `defaultProfile` from config) |
+| `LOG_LEVEL` | No | Logging verbosity (debug, info, warn, error) |
+
+## Profile-Based Configuration
+
+Manage multiple F5XC tenant credentials with named profiles stored in `~/.f5xc/credentials.json`.
+
+### Interactive Setup
+
+Run the setup wizard to create profiles with auto-detection of existing environment variables:
+
+```bash
+f5xc-api-mcp --setup
+```
+
+The wizard will:
+
+1. Detect existing `F5XC_API_URL`, `F5XC_API_TOKEN`, `F5XC_P12_FILE`, `F5XC_P12_PASSWORD`
+2. Offer to create a profile from detected credentials
+3. Allow manual profile creation if no credentials are detected
+4. Set a default profile for automatic selection
+
+### Using Profiles
+
+```bash
+# Use default profile
+f5xc-api-mcp
+
+# Use specific profile
+F5XC_PROFILE=staging f5xc-api-mcp
+
+# Override profile credentials with environment variables
+F5XC_PROFILE=production F5XC_API_TOKEN=temporary-token f5xc-api-mcp
+```
+
+### Profile Management Commands
+
+```bash
+# List all configured profiles
+f5xc-api-mcp --list-profiles
+
+# Display configuration file
+f5xc-api-mcp --show-config
+
+# Set default profile
+f5xc-api-mcp --set-default production
+
+# Delete a profile
+f5xc-api-mcp --delete-profile staging
+
+# Test profile connection
+f5xc-api-mcp --test-profile production
+```
+
+### Configuration File Format
+
+Profiles are stored in `~/.f5xc/credentials.json`:
+
+```json
+{
+  "version": "1.0",
+  "defaultProfile": "production",
+  "profiles": {
+    "production": {
+      "apiUrl": "https://mytenant.console.ves.volterra.io",
+      "apiToken": "your-api-token",
+      "metadata": {
+        "description": "Production tenant",
+        "createdAt": "2025-12-21T10:00:00Z",
+        "lastUsedAt": "2025-12-21T15:30:00Z"
+      }
+    },
+    "staging": {
+      "apiUrl": "https://staging.console.ves.volterra.io",
+      "apiToken": "staging-token",
+      "metadata": {
+        "description": "Staging environment",
+        "createdAt": "2025-12-21T10:05:00Z"
+      }
+    }
+  }
+}
+```
+
+### Credential Priority
+
+Credentials are loaded in this order (highest to lowest priority):
+
+1. **Environment Variables** - `F5XC_API_URL`, `F5XC_API_TOKEN`, etc.
+2. **Active Profile** - Selected by `F5XC_PROFILE` or `defaultProfile`
+3. **Documentation Mode** - No credentials (read-only API documentation)
+
+Environment variables always override profile settings, enabling temporary overrides.
+
+### Backward Compatibility
+
+Existing setups using environment variables continue to work unchanged:
+
+```bash
+export F5XC_API_URL=https://mytenant.console.ves.volterra.io
+export F5XC_API_TOKEN=your-api-token
+f5xc-api-mcp
+```
+
+No changes needed - profiles are optional. Migrate to profiles when ready:
+
+```bash
+f5xc-api-mcp --setup  # Auto-detects existing env vars
+```
+
+## Dual-Mode Operation
+
+### Documentation Mode (No Authentication)
+
+When no credentials are provided, the server provides:
+
+- OpenAPI specification documentation
+- API operation explanations
+- Parameter descriptions and validation
+- f5xcctl command equivalents
+- Terraform HCL examples
+- JSON request templates
+
+This mode is ideal for users who authenticate via f5xcctl or Terraform.
+
+### Execution Mode (With Authentication)
+
+When credentials are provided, the server additionally:
+
+- Executes actual API calls against your tenant
+- Lists and retrieves resources
+- Creates, updates, and deletes configurations
+- Returns real-time resource status
+
+## Available Tools
+
+Tools follow the naming pattern: `f5xc-api-{domain}-{resource}-{operation}`
+
+### Domains (23 Total)
+
+| Domain | Path Count | Structure | Description |
+|--------|-----------|-----------|-------------|
+| AI Intelligence | 11 | 2-level | AI assistant, BFDP |
+| API Security | 45 | 2-level | API discovery, protection, definitions |
+| BIG-IP Integration | 28 | 2-level | BIG-IP virtual servers, iRules, APM |
+| Billing | 19 | 2-level | Invoices, payment methods, subscriptions |
+| CDN | 31 | 2-level | CDN load balancers, cache rules |
+| DNS | 42 | 2-level | DNS zones, DNS load balancers, DNS pools |
+| Infrastructure | 134 | 3-level | AWS/Azure/GCP VPC sites, customer edge sites |
+| Infrastructure Protection | 72 | 2-level | DDoS protection, firewall rules |
+| Integrations | 26 | 2-level | Third-party apps, ticket systems |
+| Identity | 137 | 3-level | Authentication, users, roles, RBAC |
+| Load Balancing | 89 | 2-level | HTTP/TCP/UDP load balancers, origin pools, forward proxy |
+| Monitoring & Observability | 235 | 3-level | Alerts, logs, synthetic monitors, metrics |
+| NGINX Integration | 34 | 2-level | NGINX One instances, servers, service discovery |
+| Networking | 220 | 3-level | Network connectors, firewalls, interfaces, policies |
+| Operations | 22 | 2-level | Debug, DHCP, ping, traceroute |
+| Regional Edge Configuration | 18 | 2-level | Regional edge settings, policies |
+| Security | 210 | 3-level | Service policies, WAF, malicious user mitigation |
+| Service Mesh | 31 | 2-level | Virtual K8s, workloads, K8s clusters |
+| Shape Security (Bot Defense) | 124 | 3-level | Bot defense, client-side defense |
+| System Configuration | 23 | 2-level | Namespaces, certificates, credentials |
+| Tenant Management | 28 | 2-level | Multi-tenant management, profiles |
+| VPN | 20 | 2-level | VPN tunnels, IKE profiles |
+| Workflows & Automation | 15 | 2-level | Workflow templates, automations |
+
+### Example Tools
+
+- `f5xc-api-loadbalancer-http-loadbalancer-create`
+- `f5xc-api-loadbalancer-origin-pool-list`
+- `f5xc-api-networking-network-interface-get`
+- `f5xc-api-server-info`
+
+## Documentation Structure
+
+The documentation site is automatically generated from enriched OpenAPI specifications
+and organized by domain with intelligent hierarchical navigation:
+
+### Two-Level Navigation (Small Domains < 50 paths)
+
+Small domains use a simple 2-level structure: Domain → Resource
+
+```yaml
+docs/tools/
+├── vpn/
+│   ├── ipsec-gateway.md
+│   └── vpn-connection.md
+├── cdn/
+│   ├── cdn-loadbalancer.md
+│   └── cdn-pool.md
+```
+
+Example: [VPN Tools](https://robinmordasiewicz.github.io/f5xc-api-mcp/tools/vpn/)
+
+### Three-Level Navigation (Large Domains ≥ 50 paths)
+
+Large domains use a 3-level structure: Domain → Category (by OpenAPI tag) → Resource
+
+```yaml
+docs/tools/
+├── observability/
+│   ├── alerts-events/
+│   │   ├── alert-policy.md
+│   │   └── event-manager.md
+│   ├── logging/
+│   │   ├── access-log.md
+│   │   └── audit-log.md
+│   └── metrics-statistics/
+│       └── metric-collector.md
+```
+
+**Large domains (>50 paths) using 3-level navigation:**
+
+- Monitoring & Observability (235 paths)
+- Networking (220 paths)
+- Security (210 paths)
+- Infrastructure (134 paths)
+- Identity (137 paths)
+- Shape Security (124 paths)
+
+### Automatic Generation
+
+Documentation is automatically generated by the build system:
+
+```bash
+# Generate/regenerate documentation
+npm run generate-docs
+
+# Build documentation site
+mkdocs build
+
+# Preview site locally
+mkdocs serve
+```
+
+The generator automatically:
+
+- Converts domain titles from snake_case to display format (e.g., `load_balancer` → "Load Balancing")
+- Updates `mkdocs.yml` navigation without manual changes
+- Creates markdown files with API operation details and examples
+- Subdivides large domains based on OpenAPI operation tags
+- Maintains consistent directory structure and naming conventions
+
+## Workflow Prompts
+
+The server includes guided workflow prompts:
+
+- `deploy-http-loadbalancer` - Deploy HTTP LB with origin pool
+- `configure-waf` - Configure Web Application Firewall
+- `create-multicloud-site` - Deploy F5XC site in AWS/Azure/GCP
+- `generate-terraform` - Export resources as Terraform
+
+## Resource URIs
+
+Access F5XC resources via URI scheme:
+
+```text
+f5xc://{tenant}/{namespace}/{resource-type}/{name}
+```
+
+Examples:
+
+- `f5xc://mytenant/production/http_loadbalancer/my-app`
+- `f5xc://mytenant/system/namespace/default`
+
+## URL Normalization
+
+The server automatically normalizes various URL formats:
+
+| User Input | Normalized |
+|------------|------------|
+| `tenant.volterra.us` | `tenant.console.ves.volterra.io/api` |
+| `tenant.console.ves.volterra.io` | `tenant.console.ves.volterra.io/api` |
+| `https://tenant.volterra.us/` | `https://tenant.console.ves.volterra.io/api` |
+
+## Development
+
+### Prerequisites
+
+- Node.js 20+
+- npm 9+
+
+### Setup
+
+```bash
+git clone https://github.com/robinmordasiewicz/f5xc-api-mcp.git
+cd f5xc-api-mcp
+npm install
+npm run build
+```
+
+### Testing
+
+```bash
+npm test              # Run tests
+npm run test:watch    # Watch mode
+npm run test:coverage # Coverage report
+```
+
+### Linting
+
+```bash
+npm run lint          # Check linting
+npm run lint:fix      # Fix linting issues
+npm run format        # Format code
+```
+
+## Documentation
+
+Full documentation is available at: <https://robinmordasiewicz.github.io/f5xc-api-mcp>
+
+## Contributing
+
+Contributions are welcome! Please read our contributing guidelines and submit pull requests.
+
+## License
+
+MIT License - see [LICENSE](LICENSE) for details.
+
+## Support
+
+- [GitHub Issues](https://github.com/robinmordasiewicz/f5xc-api-mcp/issues)
+- [GitHub Discussions](https://github.com/robinmordasiewicz/f5xc-api-mcp/discussions)

package/dist/auth/credential-manager.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Credential Manager for F5 Distributed Cloud API
+ *
+ * Handles authentication configuration and URL normalization.
+ * Supports dual-mode operation:
+ * - Documentation mode: No credentials required
+ * - Execution mode: API token or P12 certificate authentication
+ */
+import { ConfigManager } from "../config/index.js";
+/**
+ * Authentication modes supported by the server
+ */
+export declare enum AuthMode {
+    /** No authentication - documentation mode only */
+    NONE = "none",
+    /** API token authentication */
+    TOKEN = "token",
+    /** P12 certificate authentication (mTLS) */
+    CERTIFICATE = "certificate"
+}
+/**
+ * Environment variable names for authentication
+ */
+export declare const AUTH_ENV_VARS: {
+    readonly API_URL: "F5XC_API_URL";
+    readonly API_TOKEN: "F5XC_API_TOKEN";
+    readonly P12_FILE: "F5XC_P12_FILE";
+    readonly P12_PASSWORD: "F5XC_P12_PASSWORD";
+    readonly PROFILE: "F5XC_PROFILE";
+};
+/**
+ * Credential configuration for API access
+ */
+export interface Credentials {
+    /** Authentication mode */
+    mode: AuthMode;
+    /** Normalized API URL */
+    apiUrl: string | null;
+    /** API token (for token auth) */
+    token: string | null;
+    /** P12 certificate buffer (for cert auth) */
+    p12Certificate: Buffer | null;
+    /** P12 certificate password */
+    p12Password: string | null;
+}
+/**
+ * Normalize F5XC tenant URL to standard API endpoint format
+ *
+ * Handles various input formats:
+ * - tenant.volterra.us -> tenant.console.ves.volterra.io/api
+ * - tenant.staging.volterra.us -> tenant.staging.console.ves.volterra.io/api
+ * - tenant.console.ves.volterra.io -> tenant.console.ves.volterra.io/api
+ * - Any of the above with trailing slashes or /api suffix
+ *
+ * @param input - Raw URL from user configuration
+ * @returns Normalized API URL
+ */
+export declare function normalizeApiUrl(input: string): string;
+/**
+ * Extract tenant name from a normalized URL
+ *
+ * @param url - Normalized API URL
+ * @returns Tenant name or null if not parseable
+ */
+export declare function extractTenantFromUrl(url: string): string | null;
+/**
+ * Credential Manager
+ *
+ * Manages authentication credentials for F5 Distributed Cloud API.
+ * Supports dual-layer credential loading with priority:
+ * 1. Environment variables (highest priority - overrides all)
+ * 2. Named profiles from ~/.f5xc/credentials.json
+ * 3. No credentials (documentation mode - lowest priority)
+ */
+export declare class CredentialManager {
+    private credentials;
+    private activeProfile;
+    private configManager;
+    constructor(configManager?: ConfigManager);
+    /**
+     * Load credentials from environment variables
+     */
+    private loadFromEnvironment;
+    /**
+     * Load credentials from configuration file
+     */
+    private loadFromConfigFile;
+    /**
+     * Select which profile to use based on environment or config
+     */
+    private selectProfile;
+    /**
+     * Merge raw credentials from environment and config
+     * Environment variables override profile settings
+     */
+    private mergeCredentials;
+    /**
+     * Build credentials object from raw credentials
+     */
+    private buildCredentials;
+    /**
+     * Load credentials with priority order:
+     * 1. Environment variables (highest)
+     * 2. Profile from config file
+     * 3. No credentials - documentation mode (lowest)
+     */
+    private loadCredentials;
+    /**
+     * Get the active profile name (if any)
+     * Returns null if credentials are from environment variables or no profile is active
+     */
+    getActiveProfile(): string | null;
+    /**
+     * Get the current authentication mode
+     */
+    getAuthMode(): AuthMode;
+    /**
+     * Check if the server is in authenticated mode
+     */
+    isAuthenticated(): boolean;
+    /**
+     * Get the normalized API URL
+     */
+    getApiUrl(): string | null;
+    /**
+     * Get the tenant name
+     */
+    getTenant(): string | null;
+    /**
+     * Get API token (for token authentication)
+     */
+    getToken(): string | null;
+    /**
+     * Get P12 certificate buffer (for certificate authentication)
+     */
+    getP12Certificate(): Buffer | null;
+    /**
+     * Get P12 certificate password
+     */
+    getP12Password(): string | null;
+    /**
+     * Get full credentials object
+     */
+    getCredentials(): Readonly<Credentials>;
+    /**
+     * Reload credentials from environment
+     * Useful for testing or when credentials change
+     */
+    reload(): void;
+}
+//# sourceMappingURL=credential-manager.d.ts.map

package/dist/auth/credential-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-manager.d.ts","sourceRoot":"","sources":["../../src/auth/credential-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD;;GAEG;AACH,oBAAY,QAAQ;IAClB,kDAAkD;IAClD,IAAI,SAAS;IACb,+BAA+B;IAC/B,KAAK,UAAU;IACf,4CAA4C;IAC5C,WAAW,gBAAgB;CAC5B;AAED;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAaX;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,yBAAyB;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iCAAiC;IACjC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,6CAA6C;IAC7C,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,+BAA+B;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAcD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsBrD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG/D;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,aAAa,CAAgB;gBAEzB,aAAa,CAAC,EAAE,aAAa;IAKzC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAS3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAuC1B;;OAEG;IACH,OAAO,CAAC,aAAa;IAWrB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IASxB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA+CxB;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IA0CvB;;;OAGG;IACH,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIjC;;OAEG;IACH,WAAW,IAAI,QAAQ;IAIvB;;OAEG;IACH,eAAe,IAAI,OAAO;IAI1B;;OAEG;IACH,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B;;OAEG;IACH,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B;;OAEG;IACH,QAAQ,IAAI,MAAM,GAAG,IAAI;IAIzB;;OAEG;IACH,iBAAiB,IAAI,MAAM,GAAG,IAAI;IAIlC;;OAEG;IACH,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B;;OAEG;IACH,cAAc,IAAI,QAAQ,CAAC,WAAW,CAAC;IAIvC;;;OAGG;IACH,MAAM,IAAI,IAAI;CAGf"}