@softacus-software/elwis-data-mcp 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+All notable changes to this project are documented here. The format is based on
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this project adheres
+to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.0] - 2026-06-30
+
+### Added
+- Initial standalone release of the write-capable ELWIS Data MCP server.
+- Four STDIO tools: `explain_elwis_access`, `list_elwis_apps`, `resolve_elwis_entity`, `build_artifact_type`.
+- `build_artifact_type` supports dry-run preview, entity reuse by name, and reverse-order soft-delete rollback on partial failure.
+- Write gate: all create/delete operations require `ELWIS_WRITE_ENABLED=true`.
+- Permanent session JWT authentication via `ELWIS_SESSION_JWT` (cookie-based, token never logged).
+- OpenAPI spec snapshot loader for field validation.

package/LICENSE

@@ -0,0 +1,6 @@
+Copyright (c) 2026 Softacus. All rights reserved.
+
+This software and its source code are proprietary and confidential to Softacus.
+No part of this package may be copied, modified, distributed, published, or used
+except with the express prior written permission of Softacus, or under the terms
+of a separate written agreement. Unauthorized use is prohibited.

package/README.md

@@ -0,0 +1,183 @@
+# @softacus-software/elwis-data-mcp
+
+A [Model Context Protocol](https://modelcontextprotocol.io) server that lets your chat client work with ELWIS. You ask in plain words, it reads and builds real ELWIS things: applications, folders, data types, attributes, artifact types, records, links, pages, and workflows. Every change is shown to you as a plan first and happens only after you say yes.
+
+```
++-------------------+        +---------------------+        +-----------+
+|  Your chat client |  <-->  |  elwis-data-mcp     |  <-->  |  ELWIS    |
+|  (Claude Desktop, |        |  (this server,      |        |  (your    |
+|  Codex, Gemini)   |        |  runs on your       |        |  tenant)  |
+|                   |        |  computer)          |        |           |
++-------------------+        +---------------------+        +-----------+
+```
+
+## Set up in five minutes
+
+You need three things before you start:
+
+- the address of your ELWIS (copy it from your browser)
+- your own ELWIS email and password (the same ones you use to sign in)
+- an npm account invited to the softacus organization (ask your administrator)
+
+### Step 1. Install Node.js (one time)
+
+Go to [nodejs.org](https://nodejs.org), download the LTS installer, run it, accept the defaults.
+
+Check it worked. Open a terminal (macOS: the Terminal app, Windows: PowerShell) and type:
+
+```bash
+node --version
+```
+
+You should see a version number like `v22.x.x`.
+
+### Step 2. Sign in to npm (one time)
+
+The package is private to the Softacus team. Create a free account at npmjs.com if you do not have one, ask your administrator to invite it to the softacus organization, then run:
+
+```bash
+npm login
+```
+
+A browser window opens; sign in and return to the terminal.
+
+### Step 3. Run the setup and answer its questions
+
+```bash
+npx -y @softacus-software/elwis-data-mcp setup
+```
+
+It asks, in order:
+
+1. Where is your ELWIS? Paste the address from your browser.
+2. Your email and password. Nothing is shown while you type the password and it is never stored. Only the resulting session stays, on this computer only.
+3. Read-only or building? Read-only can never change anything. Building shows a plan and asks before every change.
+4. Which applications may it see? Pick from the list, or all.
+5. Which client do you use? It writes the configuration for Claude Desktop, Codex, or Gemini by itself and backs up anything it touches.
+
+### Step 4. Check it works
+
+Fully quit your chat client (on a Mac press Cmd+Q, closing the window is not enough), open it again, and ask:
+
+```
+Are you connected to ELWIS?
+```
+
+It should answer with your name and your tenant. Done.
+
+## Daily use
+
+Just ask for what you want:
+
+```
+List the applications I can see in ELWIS.
+Show me the records of type Product.
+Make me a page to track support tickets.
+Rename the Priority attribute to Urgency.
+```
+
+In building mode every change comes back as a short plan ("I will create X and Y, ok?"). Nothing happens until you agree.
+
+You stay signed in about as long as a normal ELWIS browser login (around two weeks) and the session refreshes itself while you use it. When it runs out, sign in again:
+
+```bash
+npx -y @softacus-software/elwis-data-mcp login
+```
+
+To sign out on this computer:
+
+```bash
+npx -y @softacus-software/elwis-data-mcp logout
+```
+
+If anything fails, send your administrator the exact text of the error.
+
+## For administrators
+
+### Manual client configuration
+
+The setup wizard writes these for you; use the blocks below only if you prefer to do it by hand. Instead of a personal login you can pass a long-lived access token via `ELWIS_SESSION_JWT` (see [Getting a token](#getting-a-token)).
+
+Claude Desktop (`~/Library/Application Support/Claude/claude_desktop_config.json` on macOS, `%APPDATA%\Claude\claude_desktop_config.json` on Windows) and Claude Code (`.mcp.json` in the project root, same shape):
+
+```json
+{
+  "mcpServers": {
+    "elwis-data": {
+      "command": "npx",
+      "args": ["-y", "@softacus-software/elwis-data-mcp"],
+      "env": {
+        "ELWIS_API_URL": "https://<your-elwis-host>",
+        "ELWIS_TENANT": "<24-char tenant id>",
+        "ELWIS_SESSION_JWT": "<token, or omit when a saved login exists>",
+        "ELWIS_WRITE_ENABLED": "false",
+        "ELWIS_ALLOWED_APPS": "<AppName1,AppName2>"
+      }
+    }
+  }
+}
+```
+
+Codex (`~/.codex/config.toml`):
+
+```toml
+[mcp_servers.elwis-data]
+command = "npx"
+args = ["-y", "@softacus-software/elwis-data-mcp"]
+
+[mcp_servers.elwis-data.env]
+ELWIS_API_URL = "https://<your-elwis-host>"
+ELWIS_TENANT = "<24-char tenant id>"
+ELWIS_SESSION_JWT = "<token, or omit when a saved login exists>"
+ELWIS_WRITE_ENABLED = "false"
+ELWIS_ALLOWED_APPS = "<AppName1,AppName2>"
+```
+
+Gemini CLI (`~/.gemini/settings.json`): same JSON shape as Claude Desktop.
+
+Any other MCP client: register a STDIO server with `command: "npx"`, `args: ["-y", "@softacus-software/elwis-data-mcp"]` and the same `env`. After connecting, call `explain_elwis_access` to verify identity, tenant, and the write gates.
+
+### Configuration
+
+| Variable | Required | What it does |
+|---|---|---|
+| `ELWIS_API_URL` | yes | Address of the ELWIS backend, e.g. `https://your-elwis-host` |
+| `ELWIS_TENANT` | yes | The 24-character tenant id this connection is locked to. Without it the data tools refuse to work; with the wrong one every call is rejected before touching anything. The wizard fills it automatically, `explain_elwis_access` shows it. |
+| `ELWIS_SESSION_JWT` | no | Long-lived access token. When omitted, the saved login from the setup or `login` command is used and refreshed automatically. An explicit token wins over a saved login. |
+| `ELWIS_WRITE_ENABLED` | no | `true` allows building and deleting. Default `false`: read-only, build tools return an error before any request is made. |
+| `ELWIS_ALLOWED_APPS` | no | Comma-separated application allowlist (names or ids). Everything outside the list is rejected before touching the backend. Default: all applications the user can access. |
+| `ELWIS_REQUIRE_CONFIRMATION` | no | Default `true`: every write is two-step, the preview returns a token and execution requires it, so nothing is written that nobody saw. Set `false` only for scripted automation. |
+| `ELWIS_AUDIT_LOG` | no | Path of the write-audit log. Default `~/.elwis/data-mcp-audit.jsonl`. Every executed write is recorded with tool, tenant, user, and result. |
+
+### Getting a token
+
+For automation the server accepts a permanent session JWT minted via the `noRefresh` flow:
+
+1. As a tenant admin, open an ELWIS session-flow connection.
+2. `POST /api/tenant/session` with body `{ "sessionFlowId": "<id>", "userId": "<id>", "sessionJwtRefreshMode": 2 }`.
+3. Copy `clientData.sessionJwt` from the response.
+
+The token carries the full rights of its user and never expires. Keep it in environment variables or a secrets manager, never in source control. Revoke it any time by disconnecting the session (`DELETE /api/tenant/session/<id>`); it stops working immediately. Rotate on a schedule. The strongest scoping is to mint it for a dedicated restricted user whose group memberships cover only what the server should see, combined with `ELWIS_WRITE_ENABLED=false` and `ELWIS_ALLOWED_APPS`.
+
+## Tools
+
+| Group | Tools | What they do |
+|---|---|---|
+| Check | `explain_elwis_access` | Who am I, which tenant, what is allowed. Call this first. |
+| Read | `list_elwis_apps`, `list_elwis_entities`, `resolve_elwis_entity`, `get_elwis_entity`, `list_elwis_artifacts`, `get_elwis_artifact`, `list_elwis_artifact_links`, `get_elwis_page` | Browse applications, configuration, records, links, and pages. |
+| Create | `create_elwis_application`, `create_elwis_folder`, `build_artifact_type`, `create_elwis_artifacts`, `build_links`, `build_page`, `build_workflow` | Build new things. Existing entities with the same name are reused, partial failures roll back where possible. |
+| Change | `update_elwis_entity`, `update_elwis_artifacts`, `update_elwis_page` | Rename, edit fields, move folders, change enum values, edit records and pages. Only the fields you pass change. |
+| Delete | `delete_elwis_entity`, `delete_elwis_artifacts` | Soft delete with a preview of everything that still depends on the target. |
+| Design | `propose_page_design` | An interview that asks what data a page should manage before anything is built. |
+
+Every write supports `dryRun: true` (a full preview without touching the backend) and, by default, requires the confirmation token from that preview to execute.
+
+## Development
+
+```bash
+npm install
+npm run build     # compile to dist/, mark the bin executable
+npm test          # unit tests
+npm run lint      # eslint
+npm run dev       # run from source via tsx
+```

package/dist/app-scope.js

@@ -0,0 +1,92 @@
+import { IsObjectId } from './resolve.js';
+export class AppScopeError extends Error {
+    constructor(ref) {
+        super(`Application "${ref}" is outside the MCP application allowlist (ELWIS_ALLOWED_APPS)`);
+        this.name = 'AppScopeError';
+    }
+}
+export function FilterApplicationId(filter) {
+    const value = filter.applicationId;
+    if (typeof value === 'string')
+        return value;
+    if (value && typeof value === 'object' && typeof value.$oid === 'string')
+        return value.$oid;
+    return undefined;
+}
+export class TenantMismatchError extends Error {
+    constructor(expected, actual) {
+        super(`No data was read or written. This connection is locked to tenant ${expected}, but the access token belongs to a different tenant (${actual ?? 'unknown'}). The saved connection settings are stale or mixed up. Re-run the setup, or fix ELWIS_TENANT if you configured it by hand.`);
+        this.name = 'TenantMismatchError';
+    }
+}
+export class NoTenantError extends Error {
+    constructor() {
+        super('No tenant is set, so I do not know which ELWIS environment to work in, and ELWIS has many (dev, pre-prod, prod). Set ELWIS_TENANT to the tenant you mean before reading or changing anything. Run explain_elwis_access to see the tenant id this connection\'s login belongs to, or re-run the setup wizard, which fills it in for you.');
+        this.name = 'NoTenantError';
+    }
+}
+export class AppScope {
+    api;
+    entries;
+    expectedTenant;
+    ids = null;
+    tenantVerified = false;
+    cachedIdentity = null;
+    constructor(api, entries, expectedTenant) {
+        this.api = api;
+        this.entries = entries;
+        this.expectedTenant = expectedTenant;
+    }
+    identity() {
+        this.cachedIdentity = this.cachedIdentity ?? this.api.whoAmI().catch(() => null);
+        return this.cachedIdentity;
+    }
+    async assertTenant() {
+        if (!this.expectedTenant || this.tenantVerified)
+            return;
+        const identity = await this.identity();
+        if (identity?.tenantId !== this.expectedTenant)
+            throw new TenantMismatchError(this.expectedTenant, identity?.tenantId ?? null);
+        this.tenantVerified = true;
+    }
+    get restricted() {
+        return this.entries.length > 0;
+    }
+    describe() {
+        return { restricted: this.restricted, entries: [...this.entries] };
+    }
+    async allowedIds() {
+        if (!this.restricted)
+            return null;
+        if (this.ids)
+            return this.ids;
+        const ids = new Set();
+        for (const entry of this.entries) {
+            if (IsObjectId(entry)) {
+                ids.add(entry);
+                continue;
+            }
+            const rows = await this.api.list('application', { name: entry });
+            for (const row of rows)
+                ids.add(row.id);
+        }
+        this.ids = ids;
+        return ids;
+    }
+    async assertAllowed(applicationId) {
+        await this.assertTenant();
+        const ids = await this.allowedIds();
+        if (ids && !ids.has(applicationId))
+            throw new AppScopeError(applicationId);
+    }
+    async assertListAllowed(kind, filter) {
+        await this.assertTenant();
+        if (!this.restricted || kind === 'application')
+            return;
+        const applicationId = FilterApplicationId(filter);
+        if (!applicationId)
+            throw new AppScopeError('unspecified, when ELWIS_ALLOWED_APPS is set, list calls require an applicationId filter');
+        await this.assertAllowed(applicationId);
+    }
+}
+//# sourceMappingURL=app-scope.js.map

package/dist/app-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-scope.js","sourceRoot":"","sources":["../src/app-scope.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,GAAW;QACrB,KAAK,CAAC,gBAAgB,GAAG,iEAAiE,CAAC,CAAC;QAC5F,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA+B;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAQ,KAA0B,CAAC,IAAI,CAAC;IAC1I,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,QAAgB,EAAE,MAAqB;QACjD,KAAK,CAAC,oEAAoE,QAAQ,yDAAyD,MAAM,IAAI,SAAS,6HAA6H,CAAC,CAAC;QAC7R,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC;QACE,KAAK,CAAC,yUAAyU,CAAC,CAAC;QACjV,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAID,MAAM,OAAO,QAAQ;IACF,GAAG,CAAW;IACd,OAAO,CAAW;IAClB,cAAc,CAAU;IACjC,GAAG,GAAuB,IAAI,CAAC;IAC/B,cAAc,GAAG,KAAK,CAAC;IACvB,cAAc,GAAyC,IAAI,CAAC;IAEpE,YAAY,GAAa,EAAE,OAAiB,EAAE,cAAuB;QACnE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;QAC/H,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACf,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,aAAqB;QACvC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAY,EAAE,MAA+B;QACnE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,aAAa;YAAE,OAAO;QACvD,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,aAAa,CAAC,yFAAyF,CAAC,CAAC;QACvI,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/artifact-read.js

@@ -0,0 +1,114 @@
+import { AmbiguityError, IsObjectId } from './resolve.js';
+const VALUE_CHAR_LIMIT = 4000;
+const ARRAY_ELEMENT_LIMIT = 50;
+const MAP_FETCH_LIMIT = 500;
+export async function LoadAttributeMap(api, applicationId) {
+    const rows = await api.list('attribute', { applicationId: { $oid: applicationId } }, MAP_FETCH_LIMIT + 1);
+    if (rows.length > MAP_FETCH_LIMIT)
+        throw new Error(`The application has more than ${MAP_FETCH_LIMIT} attributes; pass explicit attribute ids instead of names`);
+    const byId = new Map();
+    const byName = new Map();
+    for (const r of rows) {
+        byId.set(r.id, r.name);
+        const key = r.name.toLowerCase();
+        byName.set(key, [...(byName.get(key) ?? []), { id: r.id, name: r.name }]);
+    }
+    return { byId, byName };
+}
+export function ResolveAttributeId(map, ref) {
+    if (IsObjectId(ref))
+        return ref;
+    const matches = map.byName.get(ref.toLowerCase()) ?? [];
+    if (matches.length === 1)
+        return matches[0].id;
+    if (matches.length === 0)
+        throw new Error(`No attribute named "${ref}" in the application`);
+    throw new AmbiguityError(`Multiple attributes named "${ref}"; pass an explicit id`, matches);
+}
+export async function ResolveUnknownAttributeNames(api, map, ids) {
+    const unknown = [...new Set(ids)].filter(id => !map.byId.has(id));
+    await Promise.all(unknown.map(async (id) => {
+        try {
+            const doc = await api.getOne('attribute', id);
+            map.byId.set(id, doc.name);
+        }
+        catch {
+            map.byId.set(id, id);
+        }
+    }));
+}
+const WHERE_OPS = {
+    equals: (v) => v,
+    contains: (v) => ({ $regex: EscapeRegex(String(v)), $options: 'i' }),
+    gt: (v) => ({ $gt: v }),
+    gte: (v) => ({ $gte: v }),
+    lt: (v) => ({ $lt: v }),
+    lte: (v) => ({ $lte: v }),
+    in: (v) => ({ $in: Array.isArray(v) ? v : [v] }),
+};
+export function EscapeRegex(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+export function BuildWhereClauses(map, where) {
+    return where.map(clause => {
+        const attrId = ResolveAttributeId(map, clause.attribute);
+        return { [`attributes.${attrId}.value`]: WHERE_OPS[clause.op ?? 'equals'](clause.value) };
+    });
+}
+export function TruncateValue(value) {
+    if (typeof value === 'string' && value.length > VALUE_CHAR_LIMIT) {
+        return `${value.slice(0, VALUE_CHAR_LIMIT)}…[truncated ${value.length - VALUE_CHAR_LIMIT} chars]`;
+    }
+    if (Array.isArray(value)) {
+        const head = value.slice(0, ARRAY_ELEMENT_LIMIT).map(TruncateValue);
+        if (value.length > ARRAY_ELEMENT_LIMIT)
+            head.push(`…[+${value.length - ARRAY_ELEMENT_LIMIT} more]`);
+        return head;
+    }
+    return value;
+}
+export function SummarizeArtifact(artifact, nameAttributeId) {
+    return {
+        id: artifact.id,
+        name: TruncateValue(artifact.attributes?.[nameAttributeId]?.value ?? null),
+        artifactTypeId: artifact.artifactTypeId,
+        format: artifact.format,
+        folderPath: artifact.folderData?.path,
+        created: artifact.created?.on,
+        updated: artifact.updated?.on,
+    };
+}
+export function TranslateArtifact(artifact, map) {
+    const values = {};
+    const unmappedValuesById = {};
+    const nameCollisions = [];
+    for (const [attrId, entry] of Object.entries(artifact.attributes ?? {})) {
+        const value = TruncateValue(entry?.value ?? null);
+        const name = map.byId.get(attrId);
+        if (name !== undefined && !Object.hasOwn(values, name))
+            values[name] = value;
+        else if (name !== undefined) {
+            nameCollisions.push(name);
+            unmappedValuesById[attrId] = value;
+        }
+        else {
+            unmappedValuesById[attrId] = value;
+        }
+    }
+    return {
+        id: artifact.id,
+        artifactTypeId: artifact.artifactTypeId,
+        format: artifact.format,
+        folderPath: artifact.folderData?.path,
+        folderId: artifact.folderData?.folderId ?? artifact.folderData?.id,
+        values,
+        ...(Object.keys(unmappedValuesById).length ? { unmappedValuesById } : {}),
+        ...(nameCollisions.length ? { nameCollisions } : {}),
+        created: artifact.created?.on,
+        updated: artifact.updated?.on,
+    };
+}
+export function PageMeta(meta, returned) {
+    return { total: meta.totalCount, returned, skip: meta.skip, hasMore: meta.skip + returned < meta.totalCount };
+}
+//# sourceMappingURL=artifact-read.js.map

package/dist/artifact-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-read.js","sourceRoot":"","sources":["../src/artifact-read.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,eAAe,GAAG,GAAG,CAAC;AAO5B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAa,EAAE,aAAqB;IACzE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC;IAC1G,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,eAAe,2DAA2D,CAAC,CAAC;IAChK,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+C,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAiB,EAAE,GAAW;IAC/D,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,sBAAsB,CAAC,CAAC;IAC5F,MAAM,IAAI,cAAc,CAAC,8BAA8B,GAAG,wBAAwB,EAAE,OAAO,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,GAAa,EAAE,GAAiB,EAAE,GAAa;IAChG,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAID,MAAM,SAAS,GAAG;IAChB,MAAM,EAAE,CAAC,CAAoC,EAAE,EAAE,CAAC,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAoC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IACvG,EAAE,EAAE,CAAC,CAAoC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC1D,GAAG,EAAE,CAAC,CAAoC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5D,EAAE,EAAE,CAAC,CAAoC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC1D,GAAG,EAAE,CAAC,CAAoC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5D,EAAE,EAAE,CAAC,CAAoC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;CAC3E,CAAC;AAKX,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAiB,EAAE,KAAoB;IACvE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QACxB,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC,cAAc,MAAM,QAAQ,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACjE,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,eAAe,KAAK,CAAC,MAAM,GAAG,gBAAgB,SAAS,CAAC;IACpG,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,mBAAmB,QAAQ,CAAC,CAAC;QACpG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA6B,EAAE,eAAuB;IACtF,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;QAC1E,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI;QACrC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA6B,EAAE,GAAiB;IAChF,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,kBAAkB,GAA4B,EAAE,CAAC;IACvD,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAyB,EAAE,CAAC;QAChG,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;aACxE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,kBAAkB,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,kBAAkB,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI;QACrC,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE;QAClE,MAAM;QACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE;QAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAyD,EAAE,QAAgB;IAClG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;AAChH,CAAC"}

package/dist/audit.js

@@ -0,0 +1,36 @@
+import { appendFileSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { DecodeJwtClaims } from './jwt.js';
+export async function AuditWrite(cfg, scope, tool, confirmationToken, result) {
+    try {
+        const identity = await scope.identity();
+        const claims = DecodeJwtClaims(cfg.token);
+        const entry = {
+            at: new Date().toISOString(),
+            tool,
+            tenant: identity?.tenantId ?? claims.tenant ?? cfg.expectedTenant ?? null,
+            user: identity?.email ?? identity?.userId ?? claims.sub ?? null,
+            host: cfg.baseUrl,
+            confirmationToken,
+            confirmationRequired: cfg.requireConfirmation,
+            result,
+        };
+        mkdirSync(dirname(cfg.auditLog), { recursive: true });
+        appendFileSync(cfg.auditLog, `${JSON.stringify(entry)}\n`);
+    }
+    catch (e) {
+        process.stderr.write(`audit log write failed: ${e.message}\n`);
+    }
+}
+export async function AuditedExecute(cfg, scope, tool, token, run, summarize) {
+    try {
+        const result = await run();
+        await AuditWrite(cfg, scope, tool, token, summarize(result));
+        return result;
+    }
+    catch (e) {
+        await AuditWrite(cfg, scope, tool, token, { error: e.message });
+        throw e;
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAgB,EAAE,KAAe,EAAE,IAAY,EAAE,iBAAyB,EAAE,MAAe;IAC1H,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG;YACZ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,MAAM,EAAE,QAAQ,EAAE,QAAQ,IAAK,MAAM,CAAC,MAAiB,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI;YACrF,IAAI,EAAE,QAAQ,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,IAAK,MAAM,CAAC,GAAc,IAAI,IAAI;YAC3E,IAAI,EAAE,GAAG,CAAC,OAAO;YACjB,iBAAiB;YACjB,oBAAoB,EAAE,GAAG,CAAC,mBAAmB;YAC7C,MAAM;SACP,CAAC;QACF,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA4B,CAAW,CAAC,OAAO,IAAI,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAI,GAAgB,EAAE,KAAe,EAAE,IAAY,EAAE,KAAa,EAAE,GAAqB,EAAE,SAAiC;IAC9J,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;QAC3B,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/builders/artifact-type-execute.js

@@ -0,0 +1,100 @@
+import { HttpErrorDetail } from '../http-client.js';
+export async function ExecuteArtifactTypePlan(api, plan) {
+    const created = [];
+    const report = { artifactType: { id: '', name: plan.artifactType.name }, createdDataTypes: [], createdAttributes: [], reused: [] };
+    const dtIdByName = new Map();
+    const attrIdByName = new Map();
+    const isFile = plan.artifactType.format === 'FILE';
+    try {
+        const sys = await api.systemAttributes();
+        if (!isFile && sys.primaryTextAttributeId && !sys.fileArtifactTypeId) {
+            throw new Error('Could not resolve the system File artifact type (tenant.fileArtifactTypeId) required by the Primary Text attribute');
+        }
+        for (const dt of plan.dataTypes) {
+            if (dt.action === 'reuse') {
+                dtIdByName.set(dt.name, dt.id);
+                report.reused.push({ id: dt.id, name: dt.name, kind: 'data-type' });
+                continue;
+            }
+            const res = await api.create('data-type', dt.detail);
+            created.push({ kind: 'data-type', id: res.id });
+            dtIdByName.set(dt.name, res.id);
+            report.createdDataTypes.push({ id: res.id, name: res.name });
+        }
+        for (let i = 0; i < plan.attributes.length; i++) {
+            const at = plan.attributes[i];
+            if (at.action === 'reuse') {
+                attrIdByName.set(at.name, at.id);
+                report.reused.push({ id: at.id, name: at.name, kind: 'attribute' });
+                continue;
+            }
+            const dtName = at.dataTypeRef;
+            const body = { ...at.detail, dataTypeId: dtIdByName.get(dtName) };
+            const res = await api.create('attribute', body);
+            created.push({ kind: 'attribute', id: res.id });
+            attrIdByName.set(at.name, res.id);
+            report.createdAttributes.push({ id: res.id, name: res.name });
+        }
+        const attributeMap = {};
+        attributeMap[sys.nameAttributeId] = { isMandatory: !isFile };
+        if (sys.sequenceAttributeId)
+            attributeMap[sys.sequenceAttributeId] = { isMandatory: false };
+        if (!isFile && sys.primaryTextAttributeId)
+            attributeMap[sys.primaryTextAttributeId] = { isMandatory: false, fileArtifactTypeId: sys.fileArtifactTypeId };
+        for (let i = 0; i < plan.attributes.length; i++) {
+            const item = plan.attributes[i];
+            const id = attrIdByName.get(item.name);
+            const entry = { isMandatory: item.isMandatory ?? false, ...(item.mapEntry ?? {}) };
+            const fileArtifactTypeId = item.fileArtifactTypeId ?? (item.needsFile ? sys.fileArtifactTypeId : undefined);
+            if (fileArtifactTypeId)
+                entry.fileArtifactTypeId = fileArtifactTypeId;
+            attributeMap[id] = entry;
+        }
+        const primaryId = attrIdByName.get(plan.artifactType.primaryAttributeName);
+        const a = plan.artifactType;
+        const atBody = {
+            applicationId: plan.applicationId,
+            name: a.name,
+            description: a.description ?? '',
+            icon: a.icon ?? '',
+            format: a.format,
+            attributes: attributeMap,
+            primaryAttributes: [primaryId],
+            defaultFolderId: a.defaultFolderId ?? null,
+            defaultPageId: a.defaultPageId ?? null,
+            delimiter: a.delimiter ?? null,
+            avrMapper: a.avrMapper ?? {},
+        };
+        if (a.color !== undefined)
+            atBody.color = a.color;
+        if (a.isLoggingDisabled !== undefined)
+            atBody.isLoggingDisabled = a.isLoggingDisabled;
+        if (a.inheritableAcl !== undefined)
+            atBody.inheritableAcl = a.inheritableAcl;
+        if (a.defaultIsHeading !== undefined)
+            atBody.defaultIsHeading = a.defaultIsHeading;
+        if (a.defaultWidgets !== undefined)
+            atBody.defaultWidgets = a.defaultWidgets;
+        if (a.avrTriggers !== undefined)
+            atBody.avrTriggers = a.avrTriggers;
+        if (a.preferredArtifactTypeIds !== undefined)
+            atBody.preferredArtifactTypeIds = a.preferredArtifactTypeIds;
+        const at = await api.create('artifact-type', atBody);
+        created.push({ kind: 'artifact-type', id: at.id });
+        report.artifactType = { id: at.id, name: at.name };
+        return report;
+    }
+    catch (e) {
+        for (const c of [...created].reverse()) {
+            try {
+                await api.softDelete(c.kind, c.id);
+            }
+            catch {
+                continue;
+            }
+        }
+        const createdSummary = created.map(c => `${c.kind}:${c.id}`).join(', ');
+        throw new Error(`build_artifact_type failed: ${e.message}${HttpErrorDetail(e)}. Rolled back: ${createdSummary || 'nothing'}`, { cause: e });
+    }
+}
+//# sourceMappingURL=artifact-type-execute.js.map

package/dist/builders/artifact-type-execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-type-execute.js","sourceRoot":"","sources":["../../src/builders/artifact-type-execute.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AASpD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAa,EAAE,IAAsB;IACjF,MAAM,OAAO,GAAwE,EAAE,CAAC;IACxF,MAAM,MAAM,GAAgB,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAChJ,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,sBAAsB,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,oHAAoH,CAAC,CAAC;QACxI,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAG,CAAC,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC/I,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAA+B,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAG,CAAC,CAAC;gBAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACjJ,MAAM,MAAM,GAAG,EAAE,CAAC,WAAY,CAAC;YAC/B,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAA+B,WAAW,EAAE,IAAI,CAAC,CAAC;YAC9E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,YAAY,GAA4C,EAAE,CAAC;QACjE,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC;QAC7D,IAAI,GAAG,CAAC,mBAAmB;YAAE,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC5F,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,sBAAsB;YAAE,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACzJ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;YACxC,MAAM,KAAK,GAA4B,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5G,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5G,IAAI,kBAAkB;gBAAE,KAAK,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;YACtE,YAAY,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAE,CAAC;QAC5E,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;QAC5B,MAAM,MAAM,GAA4B;YACtC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;YAChC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,YAAY;YACxB,iBAAiB,EAAE,CAAC,SAAS,CAAC;YAC9B,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;YAC1C,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;YACtC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;YAC9B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE;SAC7B,CAAC;QACF,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAClD,IAAI,CAAC,CAAC,iBAAiB,KAAK,SAAS;YAAE,MAAM,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC;QACtF,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAAE,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;QAC7E,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;YAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;QACnF,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAAE,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;QAC7E,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;QACpE,IAAI,CAAC,CAAC,wBAAwB,KAAK,SAAS;YAAE,MAAM,CAAC,wBAAwB,GAAG,CAAC,CAAC,wBAAwB,CAAC;QAC3G,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAA+B,eAAe,EAAE,MAAM,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,YAAY,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC;gBAAC,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;QACjE,CAAC;QACD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,+BAAgC,CAAW,CAAC,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,kBAAkB,cAAc,IAAI,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACzJ,CAAC;AACH,CAAC"}