@trusty-squire/mcp 0.9.19-rc.2 → 0.9.19-rc.21

package/dist/tools/provision-drive.js

@@ -1,48 +1,96 @@
 // Phase 1 — the interactive provisioning tool surface a frontier HOST agent
 // drives. The host is the planner; these tools are the browser + the moat.
 // Backed by ../bot/provision-session.ts (the session registry over the existing
-// BrowserController substrate). DEFAULT-ON (opt out with PROVISION_DRIVE_TOOLS=0).
+// BrowserController substrate).
 // Domain-scoping, the write-only-vault de-fang, and a per-action audit log are
 // in place; the consent-at-install prompt is the remaining hardening.
 import { z } from "zod";
-import { startProvisionSession, observe, act, extractCredentials, captchaGate, awaitVerification, finishProvisionSession, } from "../bot/provision-session.js";
+import { startProvisionSession, observe, act, extractCredentials, captchaGate, awaitVerification, finishProvisionSession, observedHostsForSession, stashSecretSlot, } from "../bot/provision-session.js";
+import { renderSkillHint, serviceSlugFromUrl } from "../bot/skill-hint.js";
+import { clientFromEnv, generateProvisionId } from "../skill-registry-client.js";
+// Best-effort: ask the registry for a known route for this service so the agent
+// drives on rails instead of ad-hoc. Returns undefined on any miss (no skill,
+// no registry configured, network error) — the agent just drives without it.
+async function resolveRouteHint(serviceUrl) {
+    try {
+        const accountId = process.env.TRUSTY_SQUIRE_ACCOUNT_ID;
+        if (accountId === undefined || accountId.length === 0)
+            return undefined;
+        const client = clientFromEnv(accountId);
+        if (client === null)
+            return undefined;
+        const slug = serviceSlugFromUrl(serviceUrl);
+        if (slug === null)
+            return undefined;
+        const provisionId = generateProvisionId();
+        // Try the slug first; fall back to resolving by signup_url host so a
+        // custom-named skill (x.ai → "xai-grok") is reachable from its URL.
+        let outcome = await client.fetchActiveSkill(slug, provisionId);
+        if (outcome.kind !== "found") {
+            const host = new URL(serviceUrl).hostname.toLowerCase().replace(/^www\./, "");
+            outcome = await client.fetchSkillByHost(host, provisionId);
+        }
+        return outcome.kind === "found" ? renderSkillHint(outcome.result.skill) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 const startSchema = z.object({
     service_url: z.string().url(),
+    // Multi-app operate tasks declare every host they span up front (GCP Console
+    // + Firebase + the user's app). Alias of extra_allowed_hosts; both seed
+    // source "start". A single-service signup passes neither.
+    allowed_hosts: z.array(z.string().min(1).max(120)).max(20).optional(),
     extra_allowed_hosts: z.array(z.string().min(1).max(120)).max(10).optional(),
+    // Operate tasks that act AS the user (drive a gated app on an existing
+    // account) set this so start fails closed to a connect hand-back if no live
+    // Google session exists — rather than driving into a mid-task login wall.
+    require_live_identity: z.boolean().optional(),
 });
 export const provisionStartTool = {
-    name: "provision_start",
+    name: "operate_start",
     description: "Begin an interactive provisioning session: opens a scoped browser on the " +
-        "user's machine at service_url and returns {session_id, url, text, elements}. " +
+        "user's machine at service_url and returns {session_id, url, text, screen, " +
+        "accessibility, elements}. " +
         "YOU are the planner — read the observation, then drive the signup with " +
-        "provision_act, re-read with provision_observe, and call provision_extract " +
-        "when you reach the credentials. Always provision_finish when done. The " +
-        "browser is domain-scoped to the target + its identity providers.",
+        "operate_act, re-read with operate_observe, and call operate_extract " +
+        "when you reach the credentials. Always operate_finish when done. The " +
+        "browser is domain-scoped to the target + its identity providers. If the " +
+        "registry knows this service, the first observation includes a `hint` — the " +
+        "route (login method, where the key lives, how many credentials). Read it and " +
+        "drive toward it; fall back to your own judgment if the live page diverges.",
     inputSchema: startSchema,
     jsonInputSchema: {
         type: "object",
         required: ["service_url"],
         properties: {
             service_url: { type: "string" },
+            allowed_hosts: { type: "array", items: { type: "string" } },
             extra_allowed_hosts: { type: "array", items: { type: "string" } },
+            require_live_identity: { type: "boolean" },
         },
     },
     async handler(args) {
+        const hint = await resolveRouteHint(args.service_url);
+        const extra = [...(args.allowed_hosts ?? []), ...(args.extra_allowed_hosts ?? [])];
         return await startProvisionSession({
             serviceUrl: args.service_url,
-            ...(args.extra_allowed_hosts !== undefined
-                ? { extraAllowedHosts: args.extra_allowed_hosts }
-                : {}),
+            ...(extra.length > 0 ? { extraAllowedHosts: extra } : {}),
+            ...(args.require_live_identity === true ? { requireLiveIdentity: true } : {}),
+            ...(hint !== undefined ? { hint } : {}),
         });
     },
 };
 const observeSchema = z.object({ session_id: z.string().min(1) });
 export const provisionObserveTool = {
-    name: "provision_observe",
+    name: "operate_observe",
     description: "Re-read the current page of a provisioning session: returns {url, text, " +
-        "elements}. Each element has a `ref` (its visible label) you pass back as a " +
-        "target, plus `href` for links. Targets are re-resolved live, so refs stay " +
-        "valid across re-renders.",
+        "screen, accessibility, elements}. Each element has a fresh generated `ref` " +
+        "to pass back as operate_act.target, plus `label`/`href` for reading. " +
+        "Refs are scoped to the latest observation; stale refs fail loudly, so call " +
+        "operate_observe and retry with the new ref. Legacy label targets still " +
+        "work, but exact refs are safer on pages with repeated labels.",
     inputSchema: observeSchema,
     jsonInputSchema: {
         type: "object",
@@ -55,16 +103,25 @@ export const provisionObserveTool = {
 };
 const actSchema = z.object({
     session_id: z.string().min(1),
-    kind: z.enum(["click", "js_click", "type", "goto", "press", "oauth_click", "oauth_settle"]),
+    kind: z.enum([
+        "click", "js_click", "type", "goto", "press", "oauth_click", "oauth_settle",
+        "allow_host", "type_secret", "scroll",
+    ]),
     target: z.string().min(1).max(200).optional(),
     text: z.string().max(4096).optional(),
     url: z.string().url().optional(),
     key: z.string().min(1).max(40).optional(),
+    // allow_host: a bare hostname to cross into mid-session.
+    host: z.string().min(1).max(253).optional(),
+    // type_secret: the sealed slot whose value to type into `target`.
+    slot: z.string().min(1).max(60).optional(),
+    // scroll: which way to move the viewport (default "down").
+    direction: z.enum(["down", "up", "bottom", "top"]).optional(),
 });
 function buildAction(args) {
     const need = (v, name) => {
         if (v === undefined || v.length === 0) {
-            throw new Error(`provision_act kind="${args.kind}" requires "${name}"`);
+            throw new Error(`operate_act kind="${args.kind}" requires "${name}"`);
         }
         return v;
     };
@@ -83,15 +140,28 @@ function buildAction(args) {
             return { kind: "press", key: need(args.key, "key") };
         case "oauth_settle":
             return { kind: "oauth_settle" };
+        case "allow_host":
+            return { kind: "allow_host", host: need(args.host, "host") };
+        case "type_secret":
+            return { kind: "type_secret", slot: need(args.slot, "slot"), target: need(args.target, "target") };
+        case "scroll":
+            return { kind: "scroll", ...(args.direction !== undefined ? { direction: args.direction } : {}) };
     }
 }
 export const provisionActTool = {
-    name: "provision_act",
+    name: "operate_act",
     description: "Take one action in a provisioning session, then return the resulting " +
-        "observation. kinds: click (target=element ref), type (target + text), " +
+        "observation. kinds: click (target=element ref, preferably elements[].ref), type (target + text), " +
         "goto (url — domain-scoped), press (key, e.g. Enter), oauth_click (target — " +
         "use for 'Continue with Google/GitHub' so the popup is adopted), " +
-        "oauth_settle (return to the product page after the OAuth handshake).",
+        "oauth_settle (return to the product page after the OAuth handshake), " +
+        "allow_host (host — cross into another app's domain mid-task, e.g. from the " +
+        "GCP console into Firebase), type_secret (slot + target — type a secret you " +
+        "captured into a sealed slot via operate_extract{into_slot} into a field " +
+        "on the current site; the value never leaves the browser), scroll (direction " +
+        "down/up/bottom/top, default down — reveal below-the-fold controls on a long " +
+        "form, then operate_observe to pick up the newly-visible elements). If a " +
+        "target ref is stale, call operate_observe and retry with a fresh ref.",
     inputSchema: actSchema,
     jsonInputSchema: {
         type: "object",
@@ -100,42 +170,186 @@ export const provisionActTool = {
             session_id: { type: "string" },
             kind: {
                 type: "string",
-                enum: ["click", "js_click", "type", "goto", "press", "oauth_click", "oauth_settle"],
+                enum: [
+                    "click", "js_click", "type", "goto", "press", "oauth_click", "oauth_settle",
+                    "allow_host", "type_secret", "scroll",
+                ],
             },
             target: { type: "string" },
             text: { type: "string" },
             url: { type: "string" },
             key: { type: "string" },
+            host: { type: "string" },
+            slot: { type: "string" },
+            direction: { type: "string", enum: ["down", "up", "bottom", "top"] },
         },
     },
     async handler(args) {
         return await act(args.session_id, buildAction(args));
     },
 };
-const extractSchema = z.object({ session_id: z.string().min(1) });
+// Shared "store this credential in the vault" shape — used by both the
+// mid-session extract tool and the credentials terminal (operate_finish_task).
+const storeShape = z.object({
+    service: z.string().min(1).max(120),
+    label: z.string().min(1).max(60).optional(),
+    env_var_suggestion: z.string().min(1).max(120).optional(),
+    type: z.string().min(1).max(60).optional(),
+    // Explicit egress hosts: where this key may LATER be sent by the proxy.
+    // Read them off the API base URL the page/SDK snippet shows — a grounded
+    // read, not a guess. Unioned with the service-default + start/auto_widen
+    // scope (never mid_session task scope). Omit for a single-service key.
+    egress_hosts: z.array(z.string().min(1).max(253)).max(10).optional(),
+    auth_shape: z
+        .string()
+        .max(120)
+        .regex(/^(bearer|header:.+|query:.+)$/, "auth_shape must be bearer|header:<name>|query:<param>")
+        .optional(),
+});
+const storeJsonProps = {
+    service: { type: "string" },
+    label: { type: "string" },
+    env_var_suggestion: { type: "string" },
+    type: { type: "string" },
+    egress_hosts: { type: "array", items: { type: "string" } },
+    auth_shape: { type: "string" },
+};
+// Vault-store an extracted credential. Shared by extract + the credentials
+// terminal so the stored record is byte-identical regardless of entry point.
+async function persistExtracted(sessionId, credentials, store, api) {
+    const observedHosts = [
+        ...new Set([...(store.egress_hosts ?? []), ...observedHostsForSession(sessionId)]),
+    ];
+    const singleValue = credentials.api_key;
+    const storeInput = typeof singleValue === "string" && Object.keys(credentials).length === 1
+        ? { value: singleValue }
+        : { fields: credentials };
+    const stored = await api.storeCredential({
+        service: store.service,
+        ...(store.label !== undefined ? { label: store.label } : {}),
+        ...storeInput,
+        ...(store.env_var_suggestion !== undefined ? { env_var_suggestion: store.env_var_suggestion } : {}),
+        ...(store.type !== undefined ? { type: store.type } : { type: "api_key" }),
+        ...(store.auth_shape !== undefined ? { auth_shape: store.auth_shape } : {}),
+        ...(observedHosts.length > 0 ? { observed_hosts: observedHosts } : {}),
+    });
+    return {
+        reference: stored.reference,
+        service: stored.service,
+        label: stored.label,
+        field_names: stored.field_names,
+        allowed_hosts: stored.allowed_hosts,
+        updated: stored.updated,
+    };
+}
+const extractSchema = z.object({
+    session_id: z.string().min(1),
+    // Sealed transfer: stash the extracted secret in a session-local slot and
+    // return ONLY a masked handle (never the value), so a later type_secret can
+    // enter it into another site's form without the value crossing to the host.
+    into_slot: z.string().min(1).max(60).optional(),
+    // Disambiguate WHICH credential to seal when the page shows several (Google's
+    // OAuth dialog has both a client ID and a client secret). Matches the
+    // credential's field label, e.g. "client secret" / "secret". Omit when there's
+    // only one.
+    secret_label: z.string().min(1).max(60).optional(),
+    store: storeShape.optional(),
+});
 export const provisionExtractTool = {
-    name: "provision_extract",
+    name: "operate_extract",
     description: "Reveal masked keys and extract credentials from the current page: returns " +
-        "{credentials, candidate_count}. credentials may include `api_key` (or " +
-        "`api_key_truncated` if only a masked display was reachable) plus named " +
-        "fields for multi-credential services. Call when you have navigated to the " +
-        "page that shows the keys.",
+        "{credentials, candidate_count, blocked_reason?}. credentials may include " +
+        "`api_key` (or `api_key_truncated` if only a masked display was reachable) " +
+        "plus named fields for multi-credential services. Pass `store` to immediately " +
+        "save the extracted credential into the Trusty Squire vault with the session's " +
+        "observed hosts as allowed_hosts seed. If `blocked_reason` is set, " +
+        "the page is a login wall / anti-bot interstitial with NO credential present " +
+        "(do not treat the empty result as a real key) — drive an interactive login " +
+        "or hand back to the user. Call when you have navigated to the keys page. " +
+        "With `into_slot`, a still-masked value is refused (reveal it first); pass " +
+        "`secret_label` (e.g. \"client secret\") to pick the right one when the page " +
+        "shows several credentials.",
     inputSchema: extractSchema,
     jsonInputSchema: {
         type: "object",
         required: ["session_id"],
-        properties: { session_id: { type: "string" } },
+        properties: {
+            session_id: { type: "string" },
+            into_slot: { type: "string" },
+            secret_label: { type: "string" },
+            store: {
+                type: "object",
+                required: ["service"],
+                properties: {
+                    service: { type: "string" },
+                    label: { type: "string" },
+                    env_var_suggestion: { type: "string" },
+                    type: { type: "string" },
+                    egress_hosts: { type: "array", items: { type: "string" } },
+                    auth_shape: { type: "string" },
+                },
+            },
+        },
     },
-    async handler(args) {
-        return await extractCredentials(args.session_id);
+    async handler(args, api) {
+        const extracted = await extractCredentials(args.session_id);
+        // Sealed transfer: capture the primary secret into a session-local slot and
+        // return ONLY a masked handle. The value never reaches the host. A later
+        // type_secret enters it into another site's form. Mutually exclusive with
+        // store (a slotted secret is being shuttled, not vaulted, in this call).
+        if (args.into_slot !== undefined) {
+            const values = extracted.credentials;
+            // A still-masked display (Google's OAuth secret shows "GOCSPX-••••" with a
+            // copy button) must NOT be sealed — the slot would hold junk. Reject any
+            // value with mask glyphs or the truncated-capture marker, and prefer a
+            // full value over the masked api_key when the page has both.
+            const looksMasked = (v) => v.includes("•") || v.includes("…") || v.includes("***") || /\.{3,}/.test(v);
+            const norm = (s) => s.toLowerCase().replace(/[^a-z0-9]/g, "");
+            const candidates = Object.entries(values).filter(([k, v]) => !k.endsWith("_truncated") && typeof v === "string" && v.length >= 8 && !looksMasked(v));
+            // When the page shows several credentials (Google's client ID + secret),
+            // a secret_label picks the right one by field name; otherwise take the
+            // first full value. Falling back avoids a hard fail when the label misses.
+            const wantKey = args.secret_label !== undefined ? norm(args.secret_label) : null;
+            const matched = wantKey !== null ? candidates.find(([k]) => norm(k).includes(wantKey)) : undefined;
+            const full = (matched ?? candidates[0])?.[1];
+            if (typeof full !== "string" || full.length === 0) {
+                return {
+                    session_id: extracted.session_id,
+                    url: extracted.url,
+                    candidate_count: extracted.candidate_count,
+                    sealed: false,
+                    slot: null,
+                    blocked_reason: "the secret is still masked/hidden — reveal it first (click the " +
+                        "show/reveal/copy control near the key), then operate_extract again",
+                };
+            }
+            const handle = stashSecretSlot(args.session_id, args.into_slot, full);
+            // Strip raw credential VALUES from the response — host gets the handle only.
+            return {
+                session_id: extracted.session_id,
+                url: extracted.url,
+                candidate_count: extracted.candidate_count,
+                sealed: true,
+                slot: handle,
+                ...(extracted.blocked_reason !== undefined ? { blocked_reason: extracted.blocked_reason } : {}),
+            };
+        }
+        if (args.store === undefined || Object.keys(extracted.credentials).length === 0) {
+            return extracted;
+        }
+        if (api === null) {
+            throw new Error("operate_extract store requires an active Trusty Squire session");
+        }
+        const stored = await persistExtracted(args.session_id, extracted.credentials, args.store, api);
+        return { ...extracted, stored_credential: stored };
     },
 };
 const captchaSchema = z.object({ session_id: z.string().min(1) });
 export const provisionCaptchaGateTool = {
-    name: "provision_captcha_gate",
+    name: "operate_captcha_gate",
     description: "Detect a captcha and wait for it to clear: returns {found, variant, " +
         "settled}. Invisible Turnstile/reCAPTCHA-v3 usually clears from the humanized " +
-        "driving alone; for a visible checkbox, click it with provision_act first, " +
+        "driving alone; for a visible checkbox, click it with operate_act first, " +
         "then call this to wait for the token. settled=false means a challenge is " +
         "still up (surface captcha_blocked to the user).",
     inputSchema: captchaSchema,
@@ -151,27 +365,111 @@ export const provisionCaptchaGateTool = {
 const verifySchema = z.object({
     session_id: z.string().min(1),
     sender: z.string().min(1).max(120).optional(),
+    // Seal a found OTP into this slot instead of returning it — then enter it
+    // with operate_act{type_secret, slot}. The code never reaches you (safer, and
+    // it dodges client-side payload truncation).
+    into_slot: z.string().min(1).max(60).optional(),
 });
 export const provisionAwaitVerificationTool = {
-    name: "provision_await_verification",
+    name: "operate_await_verification",
     description: "Read the user's OWN inbox through their signed-in browser session (no IMAP, " +
-        "no mail token) to complete email verification: returns {found, code, link}. " +
-        "Pass `sender` (e.g. 'resend.com') to scope the search. Then type the code " +
-        "with provision_act, or goto the link. Scoped search-and-extract — it reads " +
-        "only the matching recent mail, never the whole inbox.",
+        "no mail token) to complete email verification: returns {found, code, link, " +
+        "needs_user?}. Pass `sender` (e.g. 'resend.com') to scope the search. On " +
+        "found=true, type the code with operate_act or goto the link. PREFER passing " +
+        "`into_slot` (e.g. 'otp'): the code is sealed into a slot (you get a masked " +
+        "handle, not the digits) and you enter it with operate_act{type_secret, slot} " +
+        "— the code never round-trips through you. On found=false a `needs_user` " +
+        "object is returned (wall='verification_code') — the code came by SMS/" +
+        "authenticator or hasn't arrived: ASK THE USER for it, then type it with " +
+        "operate_act and continue. The session stays live; this is a resumable " +
+        "hand-back, not a failure. Scoped search-and-extract — reads only the matching " +
+        "recent mail, never the whole inbox.",
     inputSchema: verifySchema,
     jsonInputSchema: {
         type: "object",
         required: ["session_id"],
-        properties: { session_id: { type: "string" }, sender: { type: "string" } },
+        properties: {
+            session_id: { type: "string" },
+            sender: { type: "string" },
+            into_slot: { type: "string" },
+        },
     },
     async handler(args) {
-        return await awaitVerification(args.session_id, args.sender !== undefined ? { sender: args.sender } : {});
+        return await awaitVerification(args.session_id, {
+            ...(args.sender !== undefined ? { sender: args.sender } : {}),
+            ...(args.into_slot !== undefined ? { intoSlot: args.into_slot } : {}),
+        });
+    },
+};
+// Change 2 — the pluggable terminal. Two outcome kinds: `credentials` (the
+// signup case — extract + vault-store, byte-identical to operate_extract's
+// store path) and `result` (any operate task — a summary + optional structured
+// data: design-review findings, "task done" with confirmed in data, etc.).
+// Both close the session. `operate_finish` stays for abort/give-up.
+const finishTaskSchema = z.object({
+    session_id: z.string().min(1),
+    kind: z.enum(["credentials", "result"]),
+    // credentials kind: where to vault the extracted key (same shape as extract).
+    store: storeShape.optional(),
+    // result kind: a human-readable outcome + optional bounded structured data.
+    summary: z.string().max(4000).optional(),
+    data: z.record(z.string().max(4000)).optional(),
+});
+export const provisionFinishTaskTool = {
+    name: "operate_finish_task",
+    description: "Finish an operate task with its OUTCOME, then close the session. kind=" +
+        "'credentials' extracts + vault-stores the key (pass `store`; same as " +
+        "operate_extract's store), for signups/key-provisioning. kind='result' " +
+        "reports a `summary` (+ optional `data` map) for any other task — a design " +
+        "review's findings, extracted data, or 'task done' (put confirmed:true in " +
+        "data). Use operate_finish instead to abort without an outcome.",
+    inputSchema: finishTaskSchema,
+    jsonInputSchema: {
+        type: "object",
+        required: ["session_id", "kind"],
+        properties: {
+            session_id: { type: "string" },
+            kind: { type: "string", enum: ["credentials", "result"] },
+            store: { type: "object", required: ["service"], properties: storeJsonProps },
+            summary: { type: "string" },
+            data: { type: "object" },
+        },
+    },
+    async handler(args, api) {
+        if (args.kind === "credentials") {
+            const extracted = await extractCredentials(args.session_id);
+            if (args.store === undefined) {
+                throw new Error("operate_finish_task kind=credentials requires `store`");
+            }
+            if (api === null) {
+                throw new Error("operate_finish_task credentials requires an active Trusty Squire session");
+            }
+            const blocked = extracted.blocked_reason;
+            const stored = Object.keys(extracted.credentials).length > 0
+                ? await persistExtracted(args.session_id, extracted.credentials, args.store, api)
+                : null;
+            const closed = await finishProvisionSession(args.session_id);
+            return {
+                kind: "credentials",
+                url: closed.url,
+                candidate_count: extracted.candidate_count,
+                ...(blocked !== undefined ? { blocked_reason: blocked } : {}),
+                stored_credential: stored,
+            };
+        }
+        // result kind — summary + bounded data, then close.
+        const closed = await finishProvisionSession(args.session_id);
+        return {
+            kind: "result",
+            url: closed.url,
+            summary: (args.summary ?? "").slice(0, 4000),
+            ...(args.data !== undefined ? { data: args.data } : {}),
+        };
     },
 };
 const finishSchema = z.object({ session_id: z.string().min(1) });
 export const provisionFinishTool = {
-    name: "provision_finish",
+    name: "operate_finish",
     description: "Close a provisioning session and tear down its browser. Always call this " +
         "when the run is complete (success or give-up) to release the browser.",
     inputSchema: finishSchema,
@@ -184,21 +482,14 @@ export const provisionFinishTool = {
         return await finishProvisionSession(args.session_id);
     },
 };
-export const PROVISION_DRIVE_TOOLS = [
+export const OPERATE_TOOLS = [
     provisionStartTool,
     provisionObserveTool,
     provisionActTool,
     provisionCaptchaGateTool,
     provisionAwaitVerificationTool,
     provisionExtractTool,
+    provisionFinishTaskTool,
     provisionFinishTool,
 ];
-// DEFAULT-ON (2026-06-25 operator decision — "this will be the default soon").
-// The interactive provisioning tools ship by default; opt out with
-// PROVISION_DRIVE_TOOLS=0/false/off. Domain-scoping, the write-only-vault
-// de-fang, and the per-action audit log are in place; the consent-at-install
-// prompt is the remaining hardening (tracked in DESIGN-host-planner-perception).
-export function provisionDriveToolsEnabled() {
-    return !/^(0|false|off|no)$/i.test(process.env.PROVISION_DRIVE_TOOLS ?? "");
-}
 //# sourceMappingURL=provision-drive.js.map

package/dist/tools/provision-drive.js.map

@@ -1 +1 @@
-{"version":3,"file":"provision-drive.js","sourceRoot":"","sources":["../../src/tools/provision-drive.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,2EAA2E;AAC3E,gFAAgF;AAChF,mFAAmF;AACnF,+EAA+E;AAC/E,sEAAsE;AAEtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,OAAO,EACP,GAAG,EACH,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,GAEvB,MAAM,6BAA6B,CAAC;AAErC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAsC;IACnE,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,2EAA2E;QAC3E,+EAA+E;QAC/E,yEAAyE;QACzE,4EAA4E;QAC5E,yEAAyE;QACzE,kEAAkE;IACpE,WAAW,EAAE,WAAW;IACxB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,aAAa,CAAC;QACzB,UAAU,EAAE;YACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,mBAAmB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SAClE;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,qBAAqB,CAAC;YACjC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,mBAAmB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAAwC;IACvE,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,0EAA0E;QAC1E,6EAA6E;QAC7E,4EAA4E;QAC5E,0BAA0B;IAC5B,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC/C;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;CACF,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IAC3F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,IAA+B;IAClD,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAE,IAAY,EAAU,EAAE;QAC3D,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,eAAe,IAAI,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChE,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnE,KAAK,aAAa;YAChB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtE,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACtF,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QACtD,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,cAAc;YACjB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAoC;IAC/D,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,uEAAuE;QACvE,wEAAwE;QACxE,6EAA6E;QAC7E,kEAAkE;QAClE,sEAAsE;IACxE,WAAW,EAAE,SAAS;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;QAChC,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,CAAC;aACpF;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACxB;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAAwC;IACvE,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,4EAA4E;QAC5E,wEAAwE;QACxE,yEAAyE;QACzE,4EAA4E;QAC5E,2BAA2B;IAC7B,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC/C;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAAwC;IAC3E,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,sEAAsE;QACtE,+EAA+E;QAC/E,4EAA4E;QAC5E,2EAA2E;QAC3E,iDAAiD;IACnD,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC/C;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAuC;IAChF,IAAI,EAAE,8BAA8B;IACpC,WAAW,EACT,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,6EAA6E;QAC7E,uDAAuD;IACzD,WAAW,EAAE,YAAY;IACzB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC3E;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,iBAAiB,CAC5B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACzD,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,mBAAmB,GAAuC;IACrE,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACT,2EAA2E;QAC3E,uEAAuE;IACzE,WAAW,EAAE,YAAY;IACzB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC/C;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAW;IAC3C,kBAAkB;IAClB,oBAAoB;IACpB,gBAAgB;IAChB,wBAAwB;IACxB,8BAA8B;IAC9B,oBAAoB;IACpB,mBAAmB;CACV,CAAC;AAEZ,+EAA+E;AAC/E,mEAAmE;AACnE,0EAA0E;AAC1E,6EAA6E;AAC7E,iFAAiF;AACjF,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"provision-drive.js","sourceRoot":"","sources":["../../src/tools/provision-drive.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,2EAA2E;AAC3E,gFAAgF;AAChF,gCAAgC;AAChC,+EAA+E;AAC/E,sEAAsE;AAEtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EACL,qBAAqB,EACrB,OAAO,EACP,GAAG,EACH,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,GAEhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEjF,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IAChD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QACvD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;QAC1C,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,OAAO,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC9E,OAAO,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,6EAA6E;IAC7E,wEAAwE;IACxE,0DAA0D;IAC1D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrE,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3E,uEAAuE;IACvE,4EAA4E;IAC5E,0EAA0E;IAC1E,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAsC;IACnE,IAAI,EAAE,eAAe;IACrB,WAAW,EACT,2EAA2E;QAC3E,4EAA4E;QAC5E,4BAA4B;QAC5B,yEAAyE;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,0EAA0E;QAC1E,6EAA6E;QAC7E,+EAA+E;QAC/E,4EAA4E;IAC9E,WAAW,EAAE,WAAW;IACxB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,aAAa,CAAC;QACzB,UAAU,EAAE;YACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC3D,mBAAmB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACjE,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC3C;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC;QACnF,OAAO,MAAM,qBAAqB,CAAC;YACjC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,oBAAoB,GAAwC;IACvE,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,0EAA0E;QAC1E,6EAA6E;QAC7E,uEAAuE;QACvE,6EAA6E;QAC7E,yEAAyE;QACzE,+DAA+D;IACjE,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC/C;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;CACF,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc;QAC3E,YAAY,EAAE,aAAa,EAAE,QAAQ;KACtC,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,yDAAyD;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,kEAAkE;IAClE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,2DAA2D;IAC3D,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,IAA+B;IAClD,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAE,IAAY,EAAU,EAAE;QAC3D,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,IAAI,eAAe,IAAI,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChE,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnE,KAAK,aAAa;YAChB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtE,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACtF,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QACtD,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,KAAK,cAAc;YACjB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAClC,KAAK,YAAY;YACf,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAC/D,KAAK,aAAa;YAChB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrG,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAoC;IAC/D,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,uEAAuE;QACvE,mGAAmG;QACnG,6EAA6E;QAC7E,kEAAkE;QAClE,uEAAuE;QACvE,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,8EAA8E;QAC9E,8EAA8E;QAC9E,0EAA0E;QAC1E,uEAAuE;IACzE,WAAW,EAAE,SAAS;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;QAChC,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE;oBACJ,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc;oBAC3E,YAAY,EAAE,aAAa,EAAE,QAAQ;iBACtC;aACF;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrE;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;CACF,CAAC;AAEF,uEAAuE;AACvE,+EAA+E;AAC/E,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,uEAAuE;IACvE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,+BAA+B,EAAE,uDAAuD,CAAC;SAC/F,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH,MAAM,cAAc,GAAG;IACrB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzB,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACtC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxB,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IAC1D,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;CACtB,CAAC;AAEX,2EAA2E;AAC3E,6EAA6E;AAC7E,KAAK,UAAU,gBAAgB,CAC7B,SAAiB,EACjB,WAAmC,EACnC,KAAgB,EAChB,GAAc;IAEd,MAAM,aAAa,GAAG;QACpB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC;KACnF,CAAC;IACF,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC;IACxC,MAAM,UAAU,GACd,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC;QACtE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE;QACxB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,UAAU;QACb,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;IACH,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,8EAA8E;IAC9E,sEAAsE;IACtE,+EAA+E;IAC/E,YAAY;IACZ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAwC;IACvE,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,+EAA+E;QAC/E,gFAAgF;QAChF,oEAAoE;QACpE,8EAA8E;QAC9E,6EAA6E;QAC7E,2EAA2E;QAC3E,4EAA4E;QAC5E,8EAA8E;QAC9E,4BAA4B;IAC9B,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACrB,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACtC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oBAC1D,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC/B;aACF;SACF;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE5D,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,CAAC;YACrC,2EAA2E;YAC3E,yEAAyE;YACzE,uEAAuE;YACvE,6DAA6D;YAC7D,MAAM,WAAW,GAAG,CAAC,CAAS,EAAW,EAAE,CACzC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC9C,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACT,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CACzF,CAAC;YACF,yEAAyE;YACzE,uEAAuE;YACvE,2EAA2E;YAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,MAAM,OAAO,GACX,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrF,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO;oBACL,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,GAAG,EAAE,SAAS,CAAC,GAAG;oBAClB,eAAe,EAAE,SAAS,CAAC,eAAe;oBAC1C,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,IAAI;oBACV,cAAc,EACZ,iEAAiE;wBACjE,oEAAoE;iBACvE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACtE,6EAA6E;YAC7E,OAAO;gBACL,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,eAAe,EAAE,SAAS,CAAC,eAAe;gBAC1C,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,MAAM;gBACZ,GAAG,CAAC,SAAS,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChG,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/F,OAAO,EAAE,GAAG,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;IACrD,CAAC;CACF,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAAwC;IAC3E,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,sEAAsE;QACtE,+EAA+E;QAC/E,0EAA0E;QAC1E,2EAA2E;QAC3E,iDAAiD;IACnD,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC/C;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC7C,0EAA0E;IAC1E,8EAA8E;IAC9E,6CAA6C;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAuC;IAChF,IAAI,EAAE,4BAA4B;IAClC,WAAW,EACT,8EAA8E;QAC9E,6EAA6E;QAC7E,0EAA0E;QAC1E,8EAA8E;QAC9E,6EAA6E;QAC7E,+EAA+E;QAC/E,0EAA0E;QAC1E,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,gFAAgF;QAChF,qCAAqC;IACvC,WAAW,EAAE,YAAY;IACzB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC9B;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE;YAC9C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,2EAA2E;AAC3E,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACvC,8EAA8E;IAC9E,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC5B,4EAA4E;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAA2C;IAC7E,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACT,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;QAC3E,gEAAgE;IAClE,WAAW,EAAE,gBAAgB;IAC7B,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;QAChC,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE;YACzD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE;YAC5E,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB;KACF;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC;YACzC,MAAM,MAAM,GACV,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC3C,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;gBACjF,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7D,OAAO;gBACL,IAAI,EAAE,aAAsB;gBAC5B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,eAAe,EAAE,SAAS,CAAC,eAAe;gBAC1C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,iBAAiB,EAAE,MAAM;aAC1B,CAAC;QACJ,CAAC;QACD,oDAAoD;QACpD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,OAAO;YACL,IAAI,EAAE,QAAiB;YACvB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,mBAAmB,GAAuC;IACrE,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,2EAA2E;QAC3E,uEAAuE;IACzE,WAAW,EAAE,YAAY;IACzB,eAAe,EAAE;QACf,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,YAAY,CAAC;QACxB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC/C;IACD,KAAK,CAAC,OAAO,CAAC,IAAI;QAChB,OAAO,MAAM,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAW;IACnC,kBAAkB;IAClB,oBAAoB;IACpB,gBAAgB;IAChB,wBAAwB;IACxB,8BAA8B;IAC9B,oBAAoB;IACpB,uBAAuB;IACvB,mBAAmB;CACV,CAAC"}

package/dist/tools/store-credential.d.ts

@@ -7,6 +7,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     fields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     env_var_suggestion: z.ZodOptional<z.ZodString>;
     type: z.ZodOptional<z.ZodString>;
+    observed_hosts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     auth_shape: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     service: string;
@@ -15,6 +16,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     value?: string | undefined;
     fields?: Record<string, string> | undefined;
     env_var_suggestion?: string | undefined;
+    observed_hosts?: string[] | undefined;
     auth_shape?: string | undefined;
 }, {
     service: string;
@@ -23,6 +25,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     value?: string | undefined;
     fields?: Record<string, string> | undefined;
     env_var_suggestion?: string | undefined;
+    observed_hosts?: string[] | undefined;
     auth_shape?: string | undefined;
 }>, {
     service: string;
@@ -31,6 +34,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     value?: string | undefined;
     fields?: Record<string, string> | undefined;
     env_var_suggestion?: string | undefined;
+    observed_hosts?: string[] | undefined;
     auth_shape?: string | undefined;
 }, {
     service: string;
@@ -39,6 +43,7 @@ declare const inputSchema: z.ZodEffects<z.ZodObject<{
     value?: string | undefined;
     fields?: Record<string, string> | undefined;
     env_var_suggestion?: string | undefined;
+    observed_hosts?: string[] | undefined;
     auth_shape?: string | undefined;
 }>;
 export declare const storeCredentialTool: Tool<z.infer<typeof inputSchema>>;

package/dist/tools/store-credential.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store-credential.d.ts","sourceRoot":"","sources":["../../src/tools/store-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAGlD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBb,CAAC;AAiBL,eAAO,MAAM,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAuCjE,CAAC"}
+{"version":3,"file":"store-credential.d.ts","sourceRoot":"","sources":["../../src/tools/store-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAGlD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBb,CAAC;AAmBL,eAAO,MAAM,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAyCjE,CAAC"}

package/dist/tools/store-credential.js

@@ -9,6 +9,7 @@ const inputSchema = z
     fields: z.record(z.string().min(1).max(8192)).optional(),
     env_var_suggestion: z.string().min(1).max(120).optional(),
     type: z.string().min(1).max(60).optional(),
+    observed_hosts: z.array(z.string().min(1).max(256)).max(10).optional(),
     auth_shape: z
         .string()
         .max(120)
@@ -30,6 +31,8 @@ the same service apart. Optional \`auth_shape\` records how the provider
 expects the key so an EGRESS GRANT (grant_app_access) auto-injects it
 correctly: "bearer" (default) | "header:<name>" (e.g. "header:x-api-key")
 | "query:<param>". Set it for non-bearer providers; bearer needs nothing.
+Optional \`observed_hosts\` carries hosts seen during signup/extraction and is
+unioned into the credential's allowed_hosts with the service defaults.
 Returns the reference, field names, and allowed_hosts. The value is never
 readable back to you afterwards.`;
 export const storeCredentialTool = {
@@ -46,6 +49,7 @@ export const storeCredentialTool = {
             fields: { type: "object", additionalProperties: { type: "string" } },
             env_var_suggestion: { type: "string" },
             type: { type: "string" },
+            observed_hosts: { type: "array", items: { type: "string" } },
             auth_shape: { type: "string" },
         },
     },
@@ -60,6 +64,7 @@ export const storeCredentialTool = {
             ...(args.fields !== undefined ? { fields: args.fields } : {}),
             ...(args.env_var_suggestion !== undefined ? { env_var_suggestion: args.env_var_suggestion } : {}),
             ...(args.type !== undefined ? { type: args.type } : {}),
+            ...(args.observed_hosts !== undefined ? { observed_hosts: args.observed_hosts } : {}),
             ...(args.auth_shape !== undefined ? { auth_shape: args.auth_shape } : {}),
         });
         return {