@withpica/mcp-server 1.3.0

package/dist/tools/storage-config.js

@@ -0,0 +1,245 @@
+// Copyright (c) 2024-2026 Withpica Ltd. All rights reserved.
+/**
+ * Storage Configuration Tools — ADR-217 Primitives B + C.
+ *
+ * `pica_storage_status` (Primitive A) lives in `settings.ts` (ADR-184/189
+ * settings cluster — kept there to avoid churn). This file owns the two
+ * mutating verbs:
+ *
+ *   B — `pica_storage_configure_start` — mints a JWT-bound URL pointing at
+ *       `/storage/configure/<token>` where the user pastes credentials. Same
+ *       JWT-URL pattern as ADR-208 P2 upload + ADR-211 P1 signup.
+ *
+ *   C — `pica_storage_disconnect` — reverts org back to PICA-managed default.
+ *       Destructive (future uploads route differently); two-step confirmation
+ *       handled by the destructive-tool gate in index.ts via
+ *       `risk: "destructive"` in metadata.ts. Does NOT delete files in the
+ *       BYOC bucket; only removes the org's pointer (idempotent).
+ *
+ * Both tools call public backend endpoints to mint / mutate; the
+ * `STORAGE_CONFIG_TOKEN_SECRET` never leaves the backend so customer-
+ * distributed binaries (`npx @withpica/mcp-server`) cannot mint tokens
+ * locally.
+ */
+import { randomUUID } from "node:crypto";
+import { clientSupportsUrlElicitation } from "@withpica/mcp-utils";
+const VALID_PROVIDERS = ["s3", "gcs", "azure", "r2", "backblaze"];
+export class StorageConfigTools {
+    pica;
+    constructor(pica) {
+        this.pica = pica;
+    }
+    getTools() {
+        return [
+            {
+                definition: {
+                    name: "pica_storage_configure_start",
+                    description: "Set up your own cloud storage bucket (BYOC) instead of PICA's default — " +
+                        "supports AWS S3, Google Cloud Storage, Azure Blob, Cloudflare R2, " +
+                        "and Backblaze B2. Mints a single-use configure link valid for 15 minutes; " +
+                        "surface the URL to the user as a clickable resource_link. The link opens " +
+                        "a page that collects bucket names + credentials, runs a real PUT/HEAD/DELETE " +
+                        "test against your bucket, and only saves on success. Future uploads route " +
+                        "to the configured bucket; existing files stay where they are. Use " +
+                        "pica_storage_disconnect to revert to PICA default.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            provider: {
+                                type: "string",
+                                enum: [...VALID_PROVIDERS],
+                                description: "The storage provider you want to connect. Use pica_storage_disconnect " +
+                                    "to revert to PICA-managed (pica_s3) — that's not a valid value here.",
+                            },
+                            purpose: {
+                                type: "string",
+                                description: "Optional free-text — why the user is configuring BYOC " +
+                                    "(e.g. 'compliance requires data in eu-west-1', 'consolidate billing'). " +
+                                    "Captured for product analytics. Not surfaced to the user.",
+                            },
+                        },
+                        required: ["provider"],
+                    },
+                    annotations: {
+                        readOnlyHint: false,
+                        destructiveHint: false,
+                    },
+                },
+                executor: this.configureStart.bind(this),
+            },
+            {
+                definition: {
+                    name: "pica_storage_disconnect",
+                    description: "Revert your storage to PICA-managed default. Future uploads will route " +
+                        "to PICA's buckets; existing files in your BYOC bucket are NOT deleted — " +
+                        "they remain in your bucket and continue to be accessible by your URLs. " +
+                        "Two-step destructive: the first call returns a confirmation token; the " +
+                        "second call with the token executes. Idempotent — calling on an already-" +
+                        "PICA-managed org is a no-op.",
+                    workflows: "infrastructure",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            confirmation_token: {
+                                type: "string",
+                                description: "Token returned by the first call. Pass it back to confirm. " +
+                                    "If omitted, the tool returns confirmation_required + a fresh " +
+                                    "token. The destructive-tool dispatcher in tools/index.ts " +
+                                    "validates the token automatically.",
+                            },
+                        },
+                    },
+                    annotations: {
+                        readOnlyHint: false,
+                        destructiveHint: true,
+                        idempotentHint: true,
+                    },
+                },
+                executor: this.disconnect.bind(this),
+            },
+        ];
+    }
+    async configureStart(args, ctx) {
+        const provider = typeof args.provider === "string" ? args.provider : "";
+        if (!VALID_PROVIDERS.includes(provider)) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `provider must be one of: ${VALID_PROVIDERS.join(", ")}.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const purpose = typeof args.purpose === "string" && args.purpose.trim().length > 0
+            ? args.purpose.trim()
+            : undefined;
+        // Calls the public mint endpoint. Same shape as
+        // pica_signup_start → /api/public/onboarding/signup-start.
+        let response;
+        try {
+            response = (await this.pica.request("POST", "/admin/settings/storage/configure-start", purpose ? { provider, purpose } : { provider }));
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "network error";
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `couldn't mint your configure link (${message}). check your connection and try again.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        if (!response?.url || !response?.expires_at) {
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: "the configure endpoint returned an incomplete response. please try again.",
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const url = response.url;
+        const expiresAt = response.expires_at;
+        const textSummary = `configure link minted for ${provider}. surface this URL to the user — ` +
+            `they should click it to paste their bucket names and credentials. ` +
+            `the link expires at ${expiresAt} (15 minutes from now). after they ` +
+            `submit, we run a real test (PUT + HEAD + DELETE on each bucket) and ` +
+            `only save on success.`;
+        const resourceLink = {
+            type: "resource_link",
+            uri: url,
+            name: `Configure ${provider} storage`,
+            description: "Open this link to enter your bucket names and credentials. " +
+                "We test the connection before saving.",
+            mimeType: "text/html",
+        };
+        const baseContent = [
+            {
+                type: "text",
+                text: JSON.stringify({
+                    text_summary: textSummary,
+                    configure_url: url,
+                    expires_at: expiresAt,
+                    provider,
+                    surface: response.surface ?? "storage-config",
+                }),
+            },
+            resourceLink,
+        ];
+        // Capability-gated url elicitation per
+        // `feedback_mcp_sdk_capability_gates_elicitation.md` — the SDK throws
+        // synchronously if the client doesn't advertise `elicitation.url`.
+        if (clientSupportsUrlElicitation(ctx?.server)) {
+            try {
+                await ctx.server.elicitInput({
+                    mode: "url",
+                    url,
+                    elicitationId: `pica-storage-config-${randomUUID()}`,
+                    message: `Open this URL to configure ${provider} storage. Expires at ${expiresAt}.`,
+                }, { timeout: 60_000 });
+            }
+            catch {
+                // user declined / cancelled / timed out — `resource_link` remains
+                // usable so we degrade silently rather than fail the tool.
+            }
+        }
+        return {
+            content: baseContent,
+            structuredContent: {
+                kind: "pica.card.storage_configure_start",
+                version: 1,
+                data: {
+                    configure_url: url,
+                    expires_at: expiresAt,
+                    provider,
+                },
+            },
+        };
+    }
+    async disconnect(args, _ctx) {
+        // Note: the destructive-tool gate in index.ts validates
+        // `confirmation_token` before this executor runs. By the time we're
+        // here, the token has been consumed and we can perform the disconnect.
+        void args;
+        let response;
+        try {
+            response = (await this.pica.request("POST", "/admin/settings/storage/disconnect", {}));
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "network error";
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `couldn't disconnect (${message}). please try again.`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+        const previousProvider = response?.previous_provider ?? "unknown";
+        const summary = previousProvider === "pica_s3" || previousProvider === "unknown"
+            ? "you were already on PICA-managed storage — no change."
+            : `disconnected ${previousProvider}. future uploads route to PICA-managed storage. ` +
+                `your existing files in the ${previousProvider} bucket are not deleted.`;
+        return {
+            content: [{ type: "text", text: summary }],
+            structuredContent: {
+                kind: "pica.card.storage_disconnected",
+                version: 1,
+                data: {
+                    previous_provider: previousProvider,
+                    current_provider: "pica_s3",
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=storage-config.js.map

package/dist/tools/storage-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-config.js","sourceRoot":"","sources":["../../src/tools/storage-config.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAE7D;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AAQnE,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAU,CAAC;AAe3E,MAAM,OAAO,kBAAkB;IACrB,IAAI,CAAa;IAEzB,YAAY,IAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,QAAQ;QACN,OAAO;YACL;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,8BAA8B;oBACpC,WAAW,EACT,0EAA0E;wBAC1E,oEAAoE;wBACpE,4EAA4E;wBAC5E,2EAA2E;wBAC3E,+EAA+E;wBAC/E,4EAA4E;wBAC5E,oEAAoE;wBACpE,oDAAoD;oBACtD,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,QAAQ,EAAE;gCACR,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,CAAC,GAAG,eAAe,CAAC;gCAC1B,WAAW,EACT,wEAAwE;oCACxE,sEAAsE;6BACzE;4BACD,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,wDAAwD;oCACxD,yEAAyE;oCACzE,2DAA2D;6BAC9D;yBACF;wBACD,QAAQ,EAAE,CAAC,UAAU,CAAC;qBACvB;oBACD,WAAW,EAAE;wBACX,YAAY,EAAE,KAAK;wBACnB,eAAe,EAAE,KAAK;qBACvB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;aACzC;YACD;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE,yBAAyB;oBAC/B,WAAW,EACT,yEAAyE;wBACzE,0EAA0E;wBAC1E,yEAAyE;wBACzE,yEAAyE;wBACzE,0EAA0E;wBAC1E,8BAA8B;oBAChC,SAAS,EAAE,gBAAgB;oBAC3B,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,kBAAkB,EAAE;gCAClB,IAAI,EAAE,QAAQ;gCACd,WAAW,EACT,6DAA6D;oCAC7D,+DAA+D;oCAC/D,2DAA2D;oCAC3D,oCAAoC;6BACvC;yBACF;qBACF;oBACD,WAAW,EAAE;wBACX,YAAY,EAAE,KAAK;wBACnB,eAAe,EAAE,IAAI;wBACrB,cAAc,EAAE,IAAI;qBACrB;iBACF;gBACD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;aACrC;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,IAA6B,EAC7B,GAAyB;QAEzB,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAA4C,CAAC,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,4BAA4B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;qBAChE;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAChE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YACrB,CAAC,CAAC,SAAS,CAAC;QAEhB,gDAAgD;QAChD,2DAA2D;QAC3D,IAAI,QAAgC,CAAC;QACrC,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,MAAO,IAAI,CAAC,IAAY,CAAC,OAAO,CAC1C,MAAM,EACN,yCAAyC,EACzC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAC/C,CAA2B,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sCAAsC,OAAO,yCAAyC;qBAC7F;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,2EAA2E;qBAClF;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;QACzB,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC;QACtC,MAAM,WAAW,GACf,6BAA6B,QAAQ,mCAAmC;YACxE,oEAAoE;YACpE,uBAAuB,SAAS,qCAAqC;YACrE,sEAAsE;YACtE,uBAAuB,CAAC;QAE1B,MAAM,YAAY,GAAG;YACnB,IAAI,EAAE,eAAwB;YAC9B,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,aAAa,QAAQ,UAAU;YACrC,WAAW,EACT,6DAA6D;gBAC7D,uCAAuC;YACzC,QAAQ,EAAE,WAAW;SACtB,CAAC;QAEF,MAAM,WAAW,GAAG;YAClB;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,YAAY,EAAE,WAAW;oBACzB,aAAa,EAAE,GAAG;oBAClB,UAAU,EAAE,SAAS;oBACrB,QAAQ;oBACR,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,gBAAgB;iBAC9C,CAAC;aACH;YACD,YAAY;SACb,CAAC;QAEF,uCAAuC;QACvC,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,GAAI,CAAC,MAAO,CAAC,WAAW,CAC5B;oBACE,IAAI,EAAE,KAAc;oBACpB,GAAG;oBACH,aAAa,EAAE,uBAAuB,UAAU,EAAE,EAAE;oBACpD,OAAO,EAAE,8BAA8B,QAAQ,wBAAwB,SAAS,GAAG;iBACpF,EACD,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,2DAA2D;YAC7D,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,iBAAiB,EAAE;gBACjB,IAAI,EAAE,mCAAmC;gBACzC,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE;oBACJ,aAAa,EAAE,GAAG;oBAClB,UAAU,EAAE,SAAS;oBACrB,QAAQ;iBACT;aACF;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,IAA6B,EAC7B,IAA0B;QAE1B,wDAAwD;QACxD,oEAAoE;QACpE,uEAAuE;QACvE,KAAK,IAAI,CAAC;QAEV,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,CAAC,MAAO,IAAI,CAAC,IAAY,CAAC,OAAO,CAC1C,MAAM,EACN,oCAAoC,EACpC,EAAE,CACH,CAAuB,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,wBAAwB,OAAO,sBAAsB;qBAC5D;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,QAAQ,EAAE,iBAAiB,IAAI,SAAS,CAAC;QAClE,MAAM,OAAO,GACX,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS;YAC9D,CAAC,CAAC,uDAAuD;YACzD,CAAC,CAAC,gBAAgB,gBAAgB,kDAAkD;gBAClF,8BAA8B,gBAAgB,0BAA0B,CAAC;QAE/E,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC1C,iBAAiB,EAAE;gBACjB,IAAI,EAAE,gCAAgC;gBACtC,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE;oBACJ,iBAAiB,EAAE,gBAAgB;oBACnC,gBAAgB,EAAE,SAAS;iBAC5B;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/tools/subscription.d.ts

@@ -0,0 +1,60 @@
+import { PicaClient, type BillingTier, type SubscriptionStatusResponse } from "@withpica/mcp-sdk";
+import { ToolDefinition, ToolExecutor } from "./index.js";
+interface SubscriptionStatusFlat {
+    billing_state: "trial" | "active" | "hibernated";
+    trial_days_remaining: number | null;
+    trial_ends_at: string | null;
+    current_tier: BillingTier | null;
+    capacity_used: number;
+    capacity_limit: number | null;
+    capacity_pct: number;
+    recommended_tier: BillingTier | null;
+    summary: string;
+}
+/**
+ * Compose the flat 9-field response from the existing GET admin route's
+ * shape. Mirrors `getOrgBillingSlice`'s "no meaningful cap" rule for
+ * `capacity_pct` (0 whenever current_tier is null OR enterprise) and
+ * carries through `overflow.recommendedTier` (already
+ * `inferTierFromCount`-derived) per Stage 1 Q2.
+ *
+ * Exported for unit tests.
+ */
+export declare function flattenStatus(status: SubscriptionStatusResponse): SubscriptionStatusFlat;
+/**
+ * Server-side template per Stage 1 Q1 option A. Predictable wording,
+ * less variance across connectors. Phase 2.5 may add agent
+ * paraphrasing if telemetry shows demand.
+ *
+ * Exported for unit tests.
+ */
+export declare function composeSummary(fields: {
+    billing_state: "trial" | "active" | "hibernated";
+    trial_days_remaining: number | null;
+    current_tier: BillingTier | null;
+    capacity_used: number;
+    capacity_limit: number | null;
+    recommended_tier: BillingTier | null;
+}): string;
+export declare class SubscriptionTools {
+    private pica;
+    constructor(pica: PicaClient);
+    getTools(): Array<{
+        definition: ToolDefinition;
+        executor: ToolExecutor;
+    }>;
+    private status;
+    private manage;
+    /**
+     * Universal-floor return per ADR-200 Phase 1: every successful manage
+     * response carries a `resource_link` so any compliant MCP client can
+     * render or open the URL. Clients that advertise
+     * `capabilities.elicitation.url` additionally receive a server-issued
+     * elicitation/create request — the gate is mandatory because
+     * `elicitInput` with `mode: "url"` throws synchronously against
+     * non-supporters (`feedback_mcp_sdk_capability_gates_elicitation.md`).
+     */
+    private buildLinkResult;
+}
+export {};
+//# sourceMappingURL=subscription.d.ts.map

package/dist/tools/subscription.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription.d.ts","sourceRoot":"","sources":["../../src/tools/subscription.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAChC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,cAAc,EACd,YAAY,EAGb,MAAM,YAAY,CAAC;AAoBpB,UAAU,sBAAsB;IAC9B,aAAa,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;IACjD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,WAAW,GAAG,IAAI,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,0BAA0B,GACjC,sBAAsB,CA+CxB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,aAAa,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;IACjD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,WAAW,GAAG,IAAI,CAAC;CACtC,GAAG,MAAM,CA6CT;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAa;gBAEb,IAAI,EAAE,UAAU;IAI5B,QAAQ,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE,cAAc,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;YAmF3D,MAAM;YAkCN,MAAM;IA4JpB;;;;;;;;OAQG;YACW,eAAe;CA2D9B"}