@superbee/core 0.2.0-pre.4 → 0.2.0-pre.41

package/dist/site-capabilities.d.ts

@@ -0,0 +1,345 @@
+/**
+ * MCP tool hints, plus Portal's `untrustedContentHint` and `privateInputHint`. Other keys pass
+ * through unchanged.
+ *
+ * These are self-declared: a capability states them about itself and nothing at runtime enforces
+ * them. `checkSiteCapability` tests recorded fixtures, and `composeSiteCapabilities` with
+ * `requireReadOnly` refuses a capability that does not declare `readOnlyHint: true`, but neither
+ * proves what the code does. They are acceptable as a control only for in-process code from the
+ * same reviewed deploy; never cite them as a control for code a host did not review.
+ */
+export interface SiteCapabilityAnnotations {
+    readonly readOnlyHint?: boolean;
+    readonly destructiveHint?: boolean;
+    readonly idempotentHint?: boolean;
+    readonly openWorldHint?: boolean;
+    /** The result carries text authored or copied by others: a model must treat it as data. */
+    readonly untrustedContentHint?: boolean;
+    /** The input may carry private data: a surface takes it only in a request body (POST) and never caches or stores it. */
+    readonly privateInputHint?: boolean;
+    readonly [hint: string]: unknown;
+}
+/** What a surface passes to `execute`. Every surface passes `signal`; a provider adapter also
+ * passes its `toolCallId`; a host that pins the clock (fixtures, evals) passes `now`. */
+export interface SiteCapabilityInvocation {
+    readonly signal: AbortSignal;
+    readonly toolCallId?: string;
+    /** Milliseconds since the epoch. A capability reads the clock only through this when present. */
+    readonly now?: () => number;
+}
+/** A citable record in a successful result. The host mints source IDs from these; the tool never
+ * does (`siteRecordSource`). */
+export interface SiteRecordCitation {
+    /** The record's stable ID, as it appears in the result. */
+    readonly recordId: string;
+    /** The record's same-origin page path, such as `/fairport/places/lift-bridge`. */
+    readonly path: string;
+    /** When the record's data was current (ISO 8601). */
+    readonly asOf: string;
+}
+/**
+ * A tool a site or a recipe pack provides.
+ *
+ * How it maps onto the existing tool shapes (each mapping is a function below, so no caller relies
+ * on structural luck):
+ * - Portal `PortalWebMcpAdditionalToolV0` (`@superbee/portal-webmcp` 0.3.x `additionalTools`,
+ *   restated here as `PortalAdditionalTool`): a `SiteCapability` is assignable to it, and Portal's
+ *   registration keeps only the fields it binds. `toPortalAdditionalTool` makes that explicit;
+ *   `siteCapabilityFromPortalTool` maps the other way.
+ * - The hosted provider port's `AgentProviderTool` (`name`, `description`, `inputSchema`,
+ *   `execute(input, { signal, toolCallId })`): assignable; `toProviderTool` keeps only those fields.
+ * - The hosted `ToolDescriptor`, whose `execute` takes an optional invocation with an optional
+ *   signal: NOT assignable, because a capability always receives a signal. `toToolDescriptor`
+ *   supplies one.
+ */
+export interface SiteCapability<Result = unknown> {
+    /** `^[a-z][a-z0-9_]{2,63}$`: valid for MCP, WebMCP, the Messages API and Managed Agents. */
+    readonly name: string;
+    /** Stable identity of this implementation, as Portal's `implementationId`: a changed meaning
+     * behind an unchanged schema gets a new one. */
+    readonly implementationId: string;
+    readonly title?: string;
+    readonly description: string;
+    /** JSON Schema of the input, with `type: "object"`. */
+    readonly inputSchema: Readonly<Record<string, unknown>>;
+    readonly outputSchema?: Readonly<Record<string, unknown>>;
+    readonly annotations?: SiteCapabilityAnnotations;
+    /** Largest serialized result in UTF-8 bytes. Defaults to `DEFAULT_MAXIMUM_OUTPUT_BYTES`. */
+    readonly maximumOutputBytes?: number;
+    /** Runs the capability. Failures a caller can act on are results (`{ ok: false, error }`), not
+     * throws; a throw is a fault. */
+    execute(input: unknown, invocation: SiteCapabilityInvocation): Promise<Result>;
+    /** The citable records in a successful result. Never called on a failed result. */
+    mintSources?(result: Result): readonly SiteRecordCitation[];
+}
+/** Serializable capability identity, also used by deliberately trusted local actions.
+ * Read-only conformance remains the separate checkSiteCapability contract. */
+export type SiteCapabilityMetadata = Omit<SiteCapability, "execute" | "mintSources">;
+/** Portal's `PortalWebMcpAdditionalToolV0` (`@superbee/portal-webmcp` 0.3.1, `registration.d.ts`),
+ * restated so this package stays dependency-free. */
+export interface PortalAdditionalTool {
+    readonly name: string;
+    readonly implementationId: string;
+    readonly description: string;
+    readonly inputSchema: Readonly<Record<string, unknown>>;
+    readonly annotations?: Readonly<Record<string, unknown>>;
+    execute(input: unknown, context: {
+        signal: AbortSignal;
+    }): Promise<unknown>;
+}
+/** A host-minted citation of one site record. Like a Portal document source it binds the
+ * publication the record was read from, so a citation names exact bytes, not only a date. */
+export interface SiteRecordSourceRef {
+    readonly sourceId: string;
+    readonly kind: "site-record";
+    readonly siteId: string;
+    readonly recordId: string;
+    readonly path: string;
+    readonly asOf: string;
+    readonly artifactDigest: string;
+    readonly snapshotDigest: string;
+}
+export declare const SITE_CAPABILITY_NAME_PATTERN: RegExp;
+/** Package-owned tools only (Portal's `PORTAL_WEBMCP_RESERVED_PREFIX_V0`). */
+export declare const RESERVED_TOOL_PREFIX = "superbee_";
+export declare const DEFAULT_MAXIMUM_OUTPUT_BYTES = 65536;
+/** The closed error-code set a site capability's `{ ok: false }` results use by default. */
+export declare const SITE_CAPABILITY_ERROR_CODES: readonly ["INVALID_INPUT", "NOT_FOUND", "AMBIGUOUS", "NOT_AVAILABLE"];
+export declare const utf8Bytes: (text: string) => number;
+/**
+ * JSON with object keys sorted at every depth, so equal values serialize to equal bytes. Throws on
+ * anything JSON cannot carry exactly: functions, symbols, `undefined` array items, non-finite
+ * numbers, bigints and cycles. Object properties whose value is `undefined` are omitted, as
+ * `JSON.stringify` does.
+ */
+export declare function canonicalJson(value: unknown): string;
+/**
+ * Whether `path` is a plain same-origin page path: absolute, not protocol-relative, no query,
+ * fragment, backslash, control character, encoded slash or dot segment, and unchanged by URL
+ * normalization. The same checks as agent-surface's `portalAssistantRoute`. Syntax only: a path
+ * such as `/a/%252e%252e/b` or `/a/..;/b` passes, so the host's route-membership check
+ * (`admittedPath` in `siteRecordSource`) must still refuse any path it does not serve.
+ */
+export declare function isSafeSitePath(path: unknown): path is string;
+/**
+ * The host-minted `site-record` source for one citation a capability returned, or `undefined`
+ * when the citation is malformed, its path is not a safe same-origin path, or the path is not one
+ * the host admits. `sourceId` is the host's own ID for this read; a model-produced ID or URL never
+ * mints a source. `admittedPath` is the host's route-membership check (the publication's
+ * digest-bound route list, or the build's route list): syntax alone does not admit a path.
+ */
+export declare function siteRecordSource(options: {
+    sourceId: string;
+    siteId: string;
+    /** The publication the capability read: its artifact and snapshot digests. */
+    publication: {
+        artifactDigest: string;
+        snapshotDigest: string;
+    };
+    citation: SiteRecordCitation;
+    admittedPath: (path: string) => boolean;
+}): SiteRecordSourceRef | undefined;
+/**
+ * Portal's `additionalTools` shape as a `SiteCapability`. The Portal tool keeps receiving exactly
+ * `{ signal }`; `extras` adds what Portal's shape has no field for. The reverse needs no adapter:
+ * a `SiteCapability` is already a valid `PortalAdditionalTool`.
+ */
+export declare function siteCapabilityFromPortalTool(tool: PortalAdditionalTool, extras?: Pick<SiteCapability, "title" | "outputSchema" | "maximumOutputBytes" | "mintSources">): SiteCapability;
+/** Portal's `additionalTools` entry for a capability: exactly the fields Portal binds, with the
+ * capability receiving `{ signal }`. */
+export declare function toPortalAdditionalTool(capability: SiteCapability): PortalAdditionalTool;
+/** The provider port's tool shape (hosted `AgentProviderTool`): name, description, input schema
+ * and `execute(input, { signal, toolCallId })`. */
+export declare function toProviderTool(capability: SiteCapability): {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    execute(input: unknown, invocation: {
+        signal: AbortSignal;
+        toolCallId: string;
+    }): Promise<unknown>;
+};
+/** The hosted `ToolDescriptor` shape, whose callers may omit the invocation or its signal; the
+ * capability then receives a signal that never aborts. */
+export declare function toToolDescriptor(capability: SiteCapability): {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    annotations?: Record<string, unknown>;
+    execute(input: unknown, invocation?: {
+        signal?: AbortSignal;
+    }): Promise<unknown>;
+};
+/**
+ * One annotation set from several declarations of the same capability (for example a WebMCP
+ * declaration and an MCP declaration that each carry some hints). For the MCP hints the more
+ * cautious value wins: `readOnlyHint` and `idempotentHint` are true only if no set says false;
+ * `destructiveHint`, `openWorldHint`, `untrustedContentHint` and `privateInputHint` are true if any
+ * set says true. A hint a set leaves out does not count either way, so the result can carry a hint
+ * only some sets declared; MCP's defaults for absent hints (`readOnlyHint` false, `openWorldHint`
+ * true) apply only when no set declares it. Any other key must not disagree between sets; a
+ * disagreement throws.
+ */
+export declare function mergeAnnotations(...sets: readonly (SiteCapabilityAnnotations | undefined)[]): SiteCapabilityAnnotations;
+/** The descriptor a surface shows a model: what the descriptor limits and the identity cover. */
+export declare function siteCapabilityDescriptor(capability: SiteCapabilityMetadata): {
+    annotations?: SiteCapabilityAnnotations | undefined;
+    outputSchema?: Readonly<Record<string, unknown>> | undefined;
+    description: string;
+    inputSchema: Readonly<Record<string, unknown>>;
+    title?: string | undefined;
+    name: string;
+};
+/** Why a value is not a structurally valid `SiteCapability`, or `undefined` when it is. Checks the
+ * descriptor only; the name rules of a tier are compose's. */
+export declare function siteCapabilityMetadataProblem(value: unknown): string | undefined;
+/** The three tiers of site-capability design, composed in this order. */
+export type SiteCapabilityTier = "generic" | "pack" | "site";
+/** One declared list. `pack` and `site` lists own a namespace: each name starts with
+ * `<namespace>_` (`guide_open_now`, `hm_who_handles`). `generic` lists (the Portal snapshot reads,
+ * hosted reads) have none and alone may use the reserved `superbee_` prefix. */
+export interface SiteCapabilityGroup {
+    readonly tier: SiteCapabilityTier;
+    readonly namespace?: string;
+    readonly capabilities: readonly SiteCapability[];
+}
+export interface SiteCapabilityLimits {
+    readonly maxTools: number;
+    /** Per descriptor (`siteCapabilityDescriptor`), canonical JSON in UTF-8 bytes. */
+    readonly maxDescriptorBytes: number;
+    /** All kept descriptors together. */
+    readonly maxTotalDescriptorBytes: number;
+}
+export declare const DEFAULT_SITE_CAPABILITY_LIMITS: SiteCapabilityLimits;
+export interface ComposeSiteCapabilitiesOptions {
+    /** The surface this list is for (`hm-ask`, `webmcp`, `mcp`); part of the identity digest. */
+    readonly surface: string;
+    /** Names this surface does not offer. Applied after every conflict check, so a filter can never
+     * hide a conflict. Naming a capability that is not composed refuses. */
+    readonly exclude?: readonly string[];
+    /** Refuse any capability that does not declare `readOnlyHint: true`, or declares
+     * `destructiveHint: true`, in any tier (a static-site surface has no writes). Checked before
+     * `exclude`, so excluding a write tool does not make the list acceptable. The hints are
+     * self-declared (see `SiteCapabilityAnnotations`). */
+    readonly requireReadOnly?: boolean;
+    readonly limits?: Partial<SiteCapabilityLimits>;
+}
+export type SiteCapabilityCompositionRefusal = 
+/** The surface ID is empty or longer than 256 bytes. */
+"invalid_surface"
+/** A group has an unknown tier, a missing, invalid, reserved or repeated namespace, or a
+ * namespace on the generic tier. */
+ | "invalid_group"
+/** A capability is not structurally valid (see `checkSiteCapability` for behavior). */
+ | "invalid_descriptor" | "duplicate_name"
+/** A `superbee_` name outside the generic tier. */
+ | "reserved_prefix"
+/** A pack or site name that does not start with its group's namespace. */
+ | "outside_namespace"
+/** `requireReadOnly` and a capability that does not declare itself read-only. */
+ | "not_read_only" | "unknown_exclusion" | "too_many_tools" | "descriptor_too_large" | "total_too_large";
+export type SiteCapabilityComposition = {
+    readonly ok: true;
+    readonly surface: string;
+    /** Frozen snapshots in composed order: generic, then packs, then site extras, each in
+     * declaration order. Pass them unchanged to a provider adapter, Portal registration or an
+     * MCP server. */
+    readonly capabilities: readonly SiteCapability[];
+    /** The tier of each entry of `capabilities`, index for index. */
+    readonly tiers: readonly SiteCapabilityTier[];
+    /** Names removed by `exclude`, in composed order. */
+    readonly dropped: readonly string[];
+    /** SHA-256 of the canonical JSON `{ schema: "superbee-site-capabilities/v1", surface, tools }`,
+     * where each tool is `{ tier, namespace, implementationId, maximumOutputBytes, descriptor }`
+     * for the kept capabilities in composed order. It identifies one surface's tool list: record
+     * it per session and compare it at provisioning. It is not Portal registration's
+     * `identityDigest`, which also binds the publication, owner and activation. */
+    readonly identityDigest: `sha256:${string}`;
+} | {
+    readonly ok: false;
+    readonly refused: SiteCapabilityCompositionRefusal;
+    /** The names (or, for `invalid_group`, the namespaces) involved, when there are any. */
+    readonly names: readonly string[];
+    /** A fixed English explanation; never echoes descriptor text. */
+    readonly detail: string;
+};
+/**
+ * Composes the capabilities one surface offers. This is the one owner of the composition rule;
+ * Portal's registration applies the same reserved-prefix and duplicate refusals to its own
+ * additional tools and can call this instead. Conflicts refuse the whole
+ * composition, never shadow: a duplicate name, a `superbee_` name outside the generic tier, or a
+ * pack or site name outside its namespace. Order is deterministic (generic, packs, site extras,
+ * each in declaration order), which prompt caching and the Managed Agents byte check depend on.
+ * The surface's exclusions apply after the conflict checks; the limits apply to what is kept.
+ */
+export declare function composeSiteCapabilities(groups: readonly SiteCapabilityGroup[], options: ComposeSiteCapabilitiesOptions): SiteCapabilityComposition;
+/** The requirements `checkSiteCapability` tests from fixtures. Whether each record carries its own
+ * sources with checked dates has no site-neutral shape; a site checks that, and anything else
+ * site-specific, with its own fixture assertions (`SiteCapabilityFixture.check`, reported as
+ * `site`). */
+export type SiteCapabilityRequirement = "descriptor" | "read_only" | "dated" | "stable_ids" | "public_urls" | "errors" | "bounded" | "deterministic" | "input_checked" | "fixed_text" | "site";
+/** One recorded input and what it must produce. */
+export interface SiteCapabilityFixture {
+    /** Shown in problems; defaults to the fixture's index. */
+    readonly name?: string;
+    readonly input: unknown;
+    readonly expect: "ok" | "error";
+    /** For `expect: "error"`, the exact code. */
+    readonly errorCode?: string;
+    /** The pinned clock for this fixture, in milliseconds since the epoch. */
+    readonly now?: number;
+    /** A site's own assertion over the result (per-record sources, anything site-specific): return a
+     * problem description, or nothing when the result is acceptable. */
+    readonly check?: (result: unknown) => string | undefined | void;
+}
+export interface CheckSiteCapabilityOptions {
+    /** The site's own origin, such as `https://hereandmain.town`. Every absolute http(s) URL in a
+     * result must be on it, or on one of `externalHosts`. */
+    readonly origin: string;
+    /** Hosts whose pages a result may link to: a provider's own page for a feed-only item. */
+    readonly externalHosts?: readonly string[];
+    /** The closed error-code set; defaults to `SITE_CAPABILITY_ERROR_CODES`. */
+    readonly errorCodes?: readonly string[];
+    /** The pinned clock for fixtures without their own. Defaults to 2026-01-01T12:00:00Z. */
+    readonly now?: number;
+    /** Probe one successful fixture's input with an unknown argument, which must be refused
+     * with `{ ok: false }`. Default true. */
+    readonly probeUnknownArgument?: boolean;
+}
+export interface SiteCapabilityProblem {
+    readonly requirement: SiteCapabilityRequirement;
+    readonly fixture?: string;
+    readonly detail: string;
+}
+export interface SiteCapabilityCheck {
+    readonly ok: boolean;
+    readonly problems: readonly SiteCapabilityProblem[];
+}
+/**
+ * Tests one capability against recorded fixtures and the site capability requirements:
+ * a valid, read-only descriptor; results that are deterministic for a pinned clock, bounded,
+ * dated (`as_of`) when successful, and `{ ok: false, error: { code, message } }` with a closed code
+ * and a message that never echoes input when not; absolute URLs only on the site's origin or its
+ * declared external hosts; every citation from `mintSources` naming a record ID present in the
+ * result and a safe same-origin path; unknown arguments refused; and a descriptor that running
+ * the fixtures does not change. Runs each fixture twice. Never throws for a capability's fault.
+ */
+export declare function checkSiteCapability(capability: SiteCapability, fixtures: readonly SiteCapabilityFixture[], options: CheckSiteCapabilityOptions): Promise<SiteCapabilityCheck>;
+/** One named conformance case. `run` resolves when the capability conforms and rejects with an
+ * `Error` naming every problem otherwise. Runner-neutral: wrap each case in `node:test`, Vitest or
+ * any other runner (`for (const c of cases) test(c.name, c.run)`). */
+export interface SiteCapabilityConformanceCase {
+    readonly name: string;
+    run(): Promise<void>;
+}
+/**
+ * The reusable conformance suite for one capability: one case per requirement checked by
+ * `checkSiteCapability`, plus the composition and mapping cases every surface relies on (it
+ * composes alone in its own namespace on a read-only surface, and its provider, Portal and
+ * descriptor mappings carry the same name, description and schema). A site, a pack and any host
+ * run the same cases over the same fixtures.
+ */
+export declare function siteCapabilityConformanceCases(capability: SiteCapability, fixtures: readonly SiteCapabilityFixture[], options: CheckSiteCapabilityOptions & {
+    readonly namespace?: string;
+}): readonly SiteCapabilityConformanceCase[];
+//# sourceMappingURL=site-capabilities.d.ts.map

package/dist/site-capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-capabilities.d.ts","sourceRoot":"","sources":["../src/site-capabilities.ts"],"names":[],"mappings":"AAcA;;;;;;;;;GASG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,2FAA2F;IAC3F,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,wHAAwH;IACxH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAClC;AAED;yFACyF;AACzF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,iGAAiG;IACjG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED;gCACgC;AAChC,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,OAAO;IAC9C,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;oDACgD;IAChD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACjD,4FAA4F;IAC5F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;qCACiC;IACjC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,mFAAmF;IACnF,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,kBAAkB,EAAE,CAAC;CAC7D;AAED;8EAC8E;AAC9E,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,aAAa,CAAC,CAAC;AAErF;qDACqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7E;AAED;6FAC6F;AAC7F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,eAAO,MAAM,4BAA4B,QAA2B,CAAC;AACrE,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAChD,eAAO,MAAM,4BAA4B,QAAQ,CAAC;AAClD,4FAA4F;AAC5F,eAAO,MAAM,2BAA2B,uEAAwE,CAAC;AAMjH,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MAAyC,CAAC;AAKnF;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA8BpD;AAGD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,MAAM,CAuB5D;AAOD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,WAAW,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACzC,GAAG,mBAAmB,GAAG,SAAS,CA0BlC;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,oBAAoB,EAC1B,MAAM,GAAE,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,cAAc,GAAG,oBAAoB,GAAG,aAAa,CAAM,GACjG,cAAc,CAahB;AAED;wCACwC;AACxC,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,cAAc,GAAG,oBAAoB,CASvF;AAED;mDACmD;AACnD,wBAAgB,cAAc,CAAC,UAAU,EAAE,cAAc,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpG,CAQA;AAED;0DAC0D;AAC1D,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,cAAc,GAAG;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClF,CASA;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,yBAAyB,GAAG,SAAS,CAAC,EAAE,GAAG,yBAAyB,CAmBvH;AAED,iGAAiG;AACjG,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,sBAAsB;;;;;;;EAS1E;AAED;8DAC8D;AAC9D,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAgChF;AAoFD,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7D;;gFAEgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,qCAAqC;IACrC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AACD,eAAO,MAAM,8BAA8B,EAAE,oBAI3C,CAAC;AAEH,MAAM,WAAW,8BAA8B;IAC7C,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;4EACwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC;;;0DAGsD;IACtD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,gCAAgC;AAC1C,wDAAwD;AACtD,iBAAiB;AACnB;oCACoC;GAClC,eAAe;AACjB,uFAAuF;GACrF,oBAAoB,GACpB,gBAAgB;AAClB,mDAAmD;GACjD,iBAAiB;AACnB,0EAA0E;GACxE,mBAAmB;AACrB,iFAAiF;GAC/E,eAAe,GACf,mBAAmB,GACnB,gBAAgB,GAChB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB,MAAM,MAAM,yBAAyB,GACjC;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;qBAEiB;IACjB,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC9C,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;mFAI+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,UAAU,MAAM,EAAE,CAAC;CAC7C,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,OAAO,EAAE,gCAAgC,CAAC;IACnD,wFAAwF;IACxF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAIN;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,mBAAmB,EAAE,EACtC,OAAO,EAAE,8BAA8B,GACtC,yBAAyB,CAwH3B;AAED;;;cAGc;AACd,MAAM,MAAM,yBAAyB,GACjC,YAAY,GACZ,WAAW,GACX,OAAO,GACP,YAAY,GACZ,aAAa,GACb,QAAQ,GACR,SAAS,GACT,eAAe,GACf,eAAe,GACf,YAAY,GACZ,MAAM,CAAC;AAEX,mDAAmD;AACnD,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IAChC,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;wEACoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,0BAA0B;IACzC;6DACyD;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0FAA0F;IAC1F,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,yFAAyF;IACzF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;6CACyC;IACzC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACrD;AAsBD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,cAAc,EAC1B,QAAQ,EAAE,SAAS,qBAAqB,EAAE,EAC1C,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC,CA0J9B;AAED;;sEAEsE;AACtE,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAgBD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,cAAc,EAC1B,QAAQ,EAAE,SAAS,qBAAqB,EAAE,EAC1C,OAAO,EAAE,0BAA0B,GAAG;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE,SAAS,6BAA6B,EAAE,CAuC1C"}