@wootsup/yt-builder-mcp 1.1.6 → 1.1.7

package/dist/errors/mask.js

@@ -0,0 +1,49 @@
+/**
+ * Secret-masking helpers — Wave G.6.2.
+ *
+ * `maskBearerToken` rewrites any `Bearer <token>` substring to
+ * `Bearer ***masked***`. `sanitizeForLogs` additionally truncates very
+ * long strings so a paste of a multi-MB stack trace can't blow the
+ * context budget.
+ *
+ * Defense-in-depth: this is the single choke-point for any string
+ * (error message, response body excerpt, log line) that crosses the
+ * MCP boundary into the LLM's view.
+ *
+ * @license MIT
+ */
+/** Maximum length for a sanitised log string. Anything longer is truncated. */
+export const LOG_TRUNCATION_LIMIT = 2000;
+/**
+ * Replace every `Bearer <opaque-token>` substring with `Bearer ***masked***`.
+ *
+ * Token-shape is intentionally permissive — we'd rather over-mask than
+ * leak. Any non-whitespace run following the literal `Bearer ` is treated
+ * as the token and replaced.
+ */
+export function maskBearerToken(input) {
+    if (input === '')
+        return '';
+    // The `g` flag handles repeated occurrences in one string.
+    return input.replace(/Bearer\s+\S+/g, 'Bearer ***masked***');
+}
+/**
+ * Sanitise a string before it joins the LLM-visible output:
+ *   1. mask any Bearer tokens
+ *   2. truncate to `LOG_TRUNCATION_LIMIT` chars with a clear suffix
+ *
+ * Non-string inputs (null / undefined) collapse to an empty string —
+ * caller code typically passes `error?.message` and `?? ''` is a common
+ * upstream pattern.
+ */
+export function sanitizeForLogs(input) {
+    if (input === null || input === undefined)
+        return '';
+    if (input === '')
+        return '';
+    const masked = maskBearerToken(input);
+    if (masked.length <= LOG_TRUNCATION_LIMIT)
+        return masked;
+    return masked.slice(0, LOG_TRUNCATION_LIMIT) + '... [truncated]';
+}
+//# sourceMappingURL=mask.js.map

package/dist/errors/mask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask.js","sourceRoot":"","sources":["../../src/errors/mask.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IACzC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,2DAA2D;IAC3D,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,IAAI,oBAAoB;QAAE,OAAO,MAAM,CAAC;IACzD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,GAAG,iBAAiB,CAAC;AACrE,CAAC"}

package/dist/errors/sanitize.d.ts

@@ -0,0 +1,31 @@
+/**
+ * `sanitizeSecrets` — recursive value-walker that swaps any value at a
+ * known-secret key for the sentinel `[REDACTED]`.
+ *
+ * Wave G.6.4. Pattern ported verbatim from
+ * `apimapper-mcp/src/modules/apimapper/credential-sanitizer.ts` because
+ * it's the same defense-in-depth shape and the apimapper version is
+ * audit-hardened (A4 round 1 + 2).
+ *
+ * Used on both the error-path (RestError.body excerpts) AND the
+ * success-path (jsonResult / structuredResult payloads in
+ * `tool-builder.ts`) so a regressing REST handler — or a logging path —
+ * can never leak `oauth_refresh_token` / `auth_data` / `bearer` etc.
+ * into the LLM's context.
+ *
+ * Key-list intentionally mirrors apimapper-mcp; review both together
+ * when extending.
+ *
+ * @license MIT
+ */
+/**
+ * Recursively walk any JSON-serialisable value and redact any nested
+ * value whose key matches a known-secret name. Returns a fresh tree —
+ * the input is never mutated.
+ *
+ * Primitives (string / number / boolean / null / undefined) pass through
+ * unchanged. Arrays are mapped element-wise. Objects are reconstructed
+ * with `[REDACTED]` substituted at any secret key.
+ */
+export declare function sanitizeSecrets<T>(input: T): T;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/errors/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/errors/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAuDH;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAgB9C"}

package/dist/errors/sanitize.js

@@ -0,0 +1,100 @@
+/**
+ * `sanitizeSecrets` — recursive value-walker that swaps any value at a
+ * known-secret key for the sentinel `[REDACTED]`.
+ *
+ * Wave G.6.4. Pattern ported verbatim from
+ * `apimapper-mcp/src/modules/apimapper/credential-sanitizer.ts` because
+ * it's the same defense-in-depth shape and the apimapper version is
+ * audit-hardened (A4 round 1 + 2).
+ *
+ * Used on both the error-path (RestError.body excerpts) AND the
+ * success-path (jsonResult / structuredResult payloads in
+ * `tool-builder.ts`) so a regressing REST handler — or a logging path —
+ * can never leak `oauth_refresh_token` / `auth_data` / `bearer` etc.
+ * into the LLM's context.
+ *
+ * Key-list intentionally mirrors apimapper-mcp; review both together
+ * when extending.
+ *
+ * @license MIT
+ */
+const SECRET_KEYS = new Set([
+    // Generic auth tokens
+    'token',
+    'bearer',
+    'bearer_token',
+    'bearerToken',
+    // Plugin-internal auth blob
+    'auth_data',
+    'authData',
+    // OAuth flows
+    'oauth_refresh_token',
+    'oauthRefreshToken',
+    'refresh_token',
+    'refreshToken',
+    'access_token',
+    'accessToken',
+    // App-secret pairs
+    'client_secret',
+    'clientSecret',
+    'api_key',
+    'apiKey',
+    'password',
+    'secret',
+    'secrets',
+    'raw_secret',
+    'rawSecret',
+    // Defense-in-depth additions (cf. apimapper A4 audit round 2)
+    'private_key',
+    'privateKey',
+    'signing_key',
+    'signingKey',
+    'webhook_secret',
+    'webhookSecret',
+    'consumer_secret',
+    'consumerSecret',
+    'consumer_key',
+    'consumerKey',
+    'session_token',
+    'sessionToken',
+    'id_token',
+    'idToken',
+    // W12-R1.3 (A2-M2) — 1Password Secret References are not secrets
+    // per se (the ref string itself is safe to log), BUT they identify
+    // the vault path + item + field of a real bearer. Surfacing them
+    // verbatim in an error payload that ends up in a Discord paste, a
+    // GitHub issue, or an LLM-shared transcript leaks the production
+    // 1Password layout to anyone reading. Treat as secret to be safe.
+    'bearer_ref',
+    'bearerRef',
+    'token_ref',
+    'tokenRef',
+]);
+/**
+ * Recursively walk any JSON-serialisable value and redact any nested
+ * value whose key matches a known-secret name. Returns a fresh tree —
+ * the input is never mutated.
+ *
+ * Primitives (string / number / boolean / null / undefined) pass through
+ * unchanged. Arrays are mapped element-wise. Objects are reconstructed
+ * with `[REDACTED]` substituted at any secret key.
+ */
+export function sanitizeSecrets(input) {
+    if (Array.isArray(input)) {
+        return input.map((item) => sanitizeSecrets(item));
+    }
+    if (input !== null && typeof input === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(input)) {
+            if (SECRET_KEYS.has(k)) {
+                out[k] = '[REDACTED]';
+            }
+            else {
+                out[k] = sanitizeSecrets(v);
+            }
+        }
+        return out;
+    }
+    return input;
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/errors/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/errors/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS;IAChC,sBAAsB;IACtB,OAAO;IACP,QAAQ;IACR,cAAc;IACd,aAAa;IACb,4BAA4B;IAC5B,WAAW;IACX,UAAU;IACV,cAAc;IACd,qBAAqB;IACrB,mBAAmB;IACnB,eAAe;IACf,cAAc;IACd,cAAc;IACd,aAAa;IACb,mBAAmB;IACnB,eAAe;IACf,cAAc;IACd,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,8DAA8D;IAC9D,aAAa;IACb,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,eAAe;IACf,cAAc;IACd,UAAU;IACV,SAAS;IACT,iEAAiE;IACjE,mEAAmE;IACnE,iEAAiE;IACjE,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,YAAY;IACZ,WAAW;IACX,WAAW;IACX,UAAU;CACb,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAI,KAAQ;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAiB,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACpE,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;QACL,CAAC;QACD,OAAO,GAAmB,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Error types for the YT Builder MCP package.
+ *
+ * `RestError` wraps non-2xx responses from the WP REST API with the
+ * status, the canonical WP_Error `code` (if present) and the human
+ * message. `ConfigError` is thrown when the server is missing
+ * environment configuration.
+ *
+ * Wave G.6.3: `body` is routed through `sanitizeSecrets` at construction
+ * time so any secret-bearing field returned by the upstream REST API
+ * (e.g. WP_Error data carrying `auth_data` or `oauth_refresh_token`)
+ * never lands in the LLM context — even if a future tool decides to
+ * echo `error.body` somewhere.
+ *
+ * @license MIT
+ */
+export interface RestErrorPayload {
+    readonly status: number;
+    readonly code?: string;
+    readonly message: string;
+    /** Original parsed JSON body (or null if the body was not JSON). */
+    readonly body: unknown;
+}
+export declare class RestError extends Error {
+    readonly status: number;
+    readonly code?: string;
+    readonly body: unknown;
+    constructor(payload: RestErrorPayload);
+}
+export declare class ConfigError extends Error {
+    constructor(message: string);
+}
+export interface NetworkErrorPayload {
+    readonly cause: unknown;
+    readonly url: string;
+}
+export declare class NetworkError extends Error {
+    readonly cause: unknown;
+    readonly url: string;
+    constructor(payload: NetworkErrorPayload);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CAC1B;AAED,qBAAa,SAAU,SAAQ,KAAK;IAChC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAgB,IAAI,EAAE,OAAO,CAAC;gBAElB,OAAO,EAAE,gBAAgB;CAUxC;AAED,qBAAa,WAAY,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI9B;AAED,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,YAAa,SAAQ,KAAK;IACnC,SAAgB,KAAK,EAAE,OAAO,CAAC;IAC/B,SAAgB,GAAG,EAAE,MAAM,CAAC;gBAEhB,OAAO,EAAE,mBAAmB;CAM3C"}

package/dist/errors.js

@@ -0,0 +1,61 @@
+/**
+ * Error types for the YT Builder MCP package.
+ *
+ * `RestError` wraps non-2xx responses from the WP REST API with the
+ * status, the canonical WP_Error `code` (if present) and the human
+ * message. `ConfigError` is thrown when the server is missing
+ * environment configuration.
+ *
+ * Wave G.6.3: `body` is routed through `sanitizeSecrets` at construction
+ * time so any secret-bearing field returned by the upstream REST API
+ * (e.g. WP_Error data carrying `auth_data` or `oauth_refresh_token`)
+ * never lands in the LLM context — even if a future tool decides to
+ * echo `error.body` somewhere.
+ *
+ * @license MIT
+ */
+import { sanitizeSecrets } from './errors/sanitize.js';
+export class RestError extends Error {
+    status;
+    code;
+    body;
+    constructor(payload) {
+        super(payload.message);
+        this.name = 'RestError';
+        this.status = payload.status;
+        this.code = payload.code;
+        // Deep-walk redaction at construction time (Wave G.6.3). The
+        // input body is never mutated; sanitizeSecrets returns a fresh
+        // tree with redacted secret-keys.
+        this.body = sanitizeSecrets(payload.body);
+    }
+}
+export class ConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ConfigError';
+    }
+}
+export class NetworkError extends Error {
+    cause;
+    url;
+    constructor(payload) {
+        super(`Network error contacting ${payload.url}: ${describeCause(payload.cause)}`);
+        this.name = 'NetworkError';
+        this.cause = payload.cause;
+        this.url = payload.url;
+    }
+}
+function describeCause(cause) {
+    if (cause instanceof Error)
+        return cause.message;
+    if (typeof cause === 'string')
+        return cause;
+    try {
+        return JSON.stringify(cause);
+    }
+    catch {
+        return String(cause);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAUvD,MAAM,OAAO,SAAU,SAAQ,KAAK;IAChB,MAAM,CAAS;IACf,IAAI,CAAU;IACd,IAAI,CAAU;IAE9B,YAAY,OAAyB;QACjC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,6DAA6D;QAC7D,+DAA+D;QAC/D,kCAAkC;QAClC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;CACJ;AAED,MAAM,OAAO,WAAY,SAAQ,KAAK;IAClC,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC9B,CAAC;CACJ;AAOD,MAAM,OAAO,YAAa,SAAQ,KAAK;IACnB,KAAK,CAAU;IACf,GAAG,CAAS;IAE5B,YAAY,OAA4B;QACpC,KAAK,CAAC,4BAA4B,OAAO,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAC3B,CAAC;CACJ;AAED,SAAS,aAAa,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACL,CAAC"}

package/dist/gateway/advanced-tool/discovery.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Gateway discovery-mode dispatch — handles `{ tool }`-only invocations
+ * by returning the target tool's description, JSON-schema, and
+ * annotations. Never invokes the target handler.
+ *
+ * Round-2 (R2-A2-CRIT2) extracted from `gateway/advanced-tool.ts`.
+ *
+ * @license MIT
+ */
+import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import { type ZodRawShape } from 'zod';
+import type { AdvancedToolEntry } from '../capturing-server.js';
+/** Reads the captured config's inputSchema as a Zod raw-shape (or empty). */
+export declare function shapeOf(entry: AdvancedToolEntry): ZodRawShape;
+/** Builds a JSON-schema for a captured tool's inputs, with a defensive fallback. */
+export declare function inputSchemaJson(entry: AdvancedToolEntry): unknown;
+/** Builds the discovery-mode result for a target tool. */
+export declare function discoveryResult(toolName: string, entry: AdvancedToolEntry): CallToolResult;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/gateway/advanced-tool/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/gateway/advanced-tool/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAK,KAAK,WAAW,EAAE,MAAM,KAAK,CAAC;AAE1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,WAAW,CAI7D;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAQjE;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,cAAc,CA0B1F"}

package/dist/gateway/advanced-tool/discovery.js

@@ -0,0 +1,53 @@
+/**
+ * Gateway discovery-mode dispatch — handles `{ tool }`-only invocations
+ * by returning the target tool's description, JSON-schema, and
+ * annotations. Never invokes the target handler.
+ *
+ * Round-2 (R2-A2-CRIT2) extracted from `gateway/advanced-tool.ts`.
+ *
+ * @license MIT
+ */
+import { z } from 'zod';
+/** Reads the captured config's inputSchema as a Zod raw-shape (or empty). */
+export function shapeOf(entry) {
+    const schema = entry.config.inputSchema;
+    if (schema && typeof schema === 'object')
+        return schema;
+    return {};
+}
+/** Builds a JSON-schema for a captured tool's inputs, with a defensive fallback. */
+export function inputSchemaJson(entry) {
+    try {
+        return z.toJSONSchema(z.object(shapeOf(entry)));
+    }
+    catch {
+        // A schema that cannot be JSON-projected still yields a usable
+        // discovery payload — description + annotations carry the rest.
+        return { note: 'input schema could not be derived' };
+    }
+}
+/** Builds the discovery-mode result for a target tool. */
+export function discoveryResult(toolName, entry) {
+    const cfg = entry.config;
+    const schema = inputSchemaJson(entry);
+    const payload = {
+        tool: toolName,
+        description: cfg.description ?? '',
+        inputSchema: schema,
+        annotations: cfg.annotations ?? {},
+    };
+    return {
+        content: [
+            {
+                type: 'text',
+                text: `Discovery for ${toolName}\n\n` +
+                    `${cfg.description ?? ''}\n\n` +
+                    `Annotations: ${JSON.stringify(cfg.annotations ?? {})}\n\n` +
+                    `Input schema:\n${JSON.stringify(schema, null, 2)}\n\n` +
+                    `Call yootheme_builder_advanced again with { tool: "${toolName}", arguments: {...} } to run it.`,
+            },
+        ],
+        structuredContent: payload,
+    };
+}
+//# sourceMappingURL=discovery.js.map

package/dist/gateway/advanced-tool/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/gateway/advanced-tool/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,CAAC,EAAoB,MAAM,KAAK,CAAC;AAI1C,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CAAC,KAAwB;IAC5C,MAAM,MAAM,GAAI,KAAK,CAAC,MAAoC,CAAC,WAAW,CAAC;IACvE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAqB,CAAC;IACvE,OAAO,EAAE,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,KAAwB;IACpD,IAAI,CAAC;QACD,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACL,+DAA+D;QAC/D,gEAAgE;QAChE,OAAO,EAAE,IAAI,EAAE,mCAAmC,EAAE,CAAC;IACzD,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAwB;IACtE,MAAM,GAAG,GAAG,KAAK,CAAC,MAGjB,CAAC;IACF,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;KACrC,CAAC;IACF,OAAO;QACH,OAAO,EAAE;YACL;gBACI,IAAI,EAAE,MAAM;gBACZ,IAAI,EACA,iBAAiB,QAAQ,MAAM;oBAC/B,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,MAAM;oBAC9B,gBAAgB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,MAAM;oBAC3D,kBAAkB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM;oBACvD,sDAAsD,QAAQ,kCAAkC;aACvG;SACJ;QACD,iBAAiB,EAAE,OAAO;KAC7B,CAAC;AACN,CAAC"}

package/dist/gateway/advanced-tool/domains.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Gateway domain taxonomy — single source of truth for grouping
+ * advanced tools by domain in description, errors, and discovery
+ * payloads.
+ *
+ * Round-2 (R2-A2-CRIT2) extracted from `gateway/advanced-tool.ts`
+ * to keep that file ≤ 200 LoC per Architecture §11.
+ *
+ * The 4-entry `DOMAIN_ORDER` contract is pinned by
+ * `tests/gateway/domain-order.test.ts` — any change here MUST update
+ * that pin-test (Round-2 audit follow-up R2-A1-N1).
+ *
+ * @license MIT
+ */
+import type { AdvancedToolEntry } from '../capturing-server.js';
+/**
+ * Domains used to group advanced tool names. Order = display order in
+ * gateway description, errors, and discovery responses. Aligned with
+ * YOOtheme builder concepts (Design-Doc §3.1.1). Round-1 I4 trimmed
+ * from 8→4 (singular forms now route via DOMAIN_PREFIX_MAP, not
+ * duplicate entries). Pinned by `tests/gateway/domain-order.test.ts`.
+ */
+export declare const DOMAIN_ORDER: readonly ["pages", "elements", "sources", "multi-items", "inspection"];
+/**
+ * Prefix→domain routing table. Each domain accepts plural
+ * (`pages_list`) + singular (`page_save`, `element_add`, `source_…`)
+ * stems via `stem.startsWith(prefix + '_')` or full-equality. Anything
+ * outside the taxonomy falls through to 'misc'.
+ *
+ * The `multi-items` domain captures the YT-Pro Multi-Items binding
+ * pattern tools (inspect / clean-implode). Stems used:
+ *  - `inspect_multi_items_binding` → starts with `inspect_multi_items`
+ *  - `clean_implode_directives`    → starts with `clean_implode`
+ */
+export declare const DOMAIN_PREFIX_MAP: Record<(typeof DOMAIN_ORDER)[number], readonly string[]>;
+export declare const TOOL_PREFIX = "yootheme_builder_";
+/** Maps a tool name to its display domain (the first underscore-segment after the prefix). */
+export declare function domainOf(toolName: string): string;
+/** Groups tool names by domain, in DOMAIN_ORDER, for stable output. */
+export declare function groupByDomain(toolNames: string[]): Map<string, string[]>;
+/** Renders the grouped tool list as readable text (used in description + errors). */
+export declare function renderGroupedList(toolNames: string[]): string;
+/** Builds the gateway tool's description, grouping every advanced tool by domain. */
+export declare function buildDescription(toolNames: string[]): string;
+/** Re-export the AdvancedToolEntry type so consumers don't need a second import path. */
+export type { AdvancedToolEntry };
+//# sourceMappingURL=domains.d.ts.map

package/dist/gateway/advanced-tool/domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../../src/gateway/advanced-tool/domains.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,wEAAyE,CAAC;AAEnG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAMtF,CAAC;AAEF,eAAO,MAAM,WAAW,sBAAsB,CAAC;AAE/C,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQjD;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAYxE;AAED,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAO7D;AAED,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,CAe5D;AAED,yFAAyF;AACzF,YAAY,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/gateway/advanced-tool/domains.js

@@ -0,0 +1,94 @@
+/**
+ * Gateway domain taxonomy — single source of truth for grouping
+ * advanced tools by domain in description, errors, and discovery
+ * payloads.
+ *
+ * Round-2 (R2-A2-CRIT2) extracted from `gateway/advanced-tool.ts`
+ * to keep that file ≤ 200 LoC per Architecture §11.
+ *
+ * The 4-entry `DOMAIN_ORDER` contract is pinned by
+ * `tests/gateway/domain-order.test.ts` — any change here MUST update
+ * that pin-test (Round-2 audit follow-up R2-A1-N1).
+ *
+ * @license MIT
+ */
+/**
+ * Domains used to group advanced tool names. Order = display order in
+ * gateway description, errors, and discovery responses. Aligned with
+ * YOOtheme builder concepts (Design-Doc §3.1.1). Round-1 I4 trimmed
+ * from 8→4 (singular forms now route via DOMAIN_PREFIX_MAP, not
+ * duplicate entries). Pinned by `tests/gateway/domain-order.test.ts`.
+ */
+export const DOMAIN_ORDER = ['pages', 'elements', 'sources', 'multi-items', 'inspection'];
+/**
+ * Prefix→domain routing table. Each domain accepts plural
+ * (`pages_list`) + singular (`page_save`, `element_add`, `source_…`)
+ * stems via `stem.startsWith(prefix + '_')` or full-equality. Anything
+ * outside the taxonomy falls through to 'misc'.
+ *
+ * The `multi-items` domain captures the YT-Pro Multi-Items binding
+ * pattern tools (inspect / clean-implode). Stems used:
+ *  - `inspect_multi_items_binding` → starts with `inspect_multi_items`
+ *  - `clean_implode_directives`    → starts with `clean_implode`
+ */
+export const DOMAIN_PREFIX_MAP = {
+    pages: ['pages', 'page'],
+    elements: ['elements', 'element'],
+    sources: ['sources', 'source'],
+    'multi-items': ['inspect_multi_items', 'clean_implode'],
+    inspection: ['inspection'],
+};
+export const TOOL_PREFIX = 'yootheme_builder_';
+/** Maps a tool name to its display domain (the first underscore-segment after the prefix). */
+export function domainOf(toolName) {
+    const stem = toolName.startsWith(TOOL_PREFIX) ? toolName.slice(TOOL_PREFIX.length) : toolName;
+    for (const domain of DOMAIN_ORDER) {
+        for (const prefix of DOMAIN_PREFIX_MAP[domain]) {
+            if (stem === prefix || stem.startsWith(`${prefix}_`))
+                return domain;
+        }
+    }
+    return 'misc';
+}
+/** Groups tool names by domain, in DOMAIN_ORDER, for stable output. */
+export function groupByDomain(toolNames) {
+    const groups = new Map();
+    for (const domain of DOMAIN_ORDER)
+        groups.set(domain, []);
+    for (const name of [...toolNames].sort()) {
+        const domain = domainOf(name);
+        const bucket = groups.get(domain);
+        if (bucket)
+            bucket.push(name);
+    }
+    for (const [domain, names] of groups) {
+        if (names.length === 0)
+            groups.delete(domain);
+    }
+    return groups;
+}
+/** Renders the grouped tool list as readable text (used in description + errors). */
+export function renderGroupedList(toolNames) {
+    const groups = groupByDomain(toolNames);
+    const lines = [];
+    for (const [domain, names] of groups) {
+        lines.push(`  ${domain}: ${names.join(', ')}`);
+    }
+    return lines.join('\n');
+}
+/** Builds the gateway tool's description, grouping every advanced tool by domain. */
+export function buildDescription(toolNames) {
+    const toolCount = toolNames.length;
+    const domains = [...groupByDomain(toolNames).keys()];
+    const domainCount = domains.length;
+    const domainList = domains.join(', ');
+    return (`Routes to ${String(toolCount)} advanced YOOtheme Builder tools across ${String(domainCount)} ` +
+        `domain${domainCount === 1 ? '' : 's'}${domainCount > 0 ? ` (${domainList})` : ''}. ` +
+        'Call with { tool } for a target\'s schema + annotations, or ' +
+        '{ tool, arguments } to run it. The target tool\'s own confirmation ' +
+        'guards and behavior stay in effect.\n\n' +
+        'Available advanced tools by domain:\n' +
+        `${renderGroupedList(toolNames)}\n\n` +
+        'For connectivity diagnostics use yootheme_builder_health or yootheme_builder_diagnose (top-level).');
+}
+//# sourceMappingURL=domains.js.map

package/dist/gateway/advanced-tool/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../../src/gateway/advanced-tool/domains.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,CAAU,CAAC;AAEnG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA6D;IACvF,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;IACjC,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC9B,aAAa,EAAE,CAAC,qBAAqB,EAAE,eAAe,CAAC;IACvD,UAAU,EAAE,CAAC,YAAY,CAAC;CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAE/C,8FAA8F;AAC9F,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9F,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;QACxE,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,SAAmB;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,MAAM,IAAI,YAAY;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,SAAmB;IACjD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,SAAmB;IAChD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,CACH,aAAa,MAAM,CAAC,SAAS,CAAC,2CAA2C,MAAM,CAAC,WAAW,CAAC,GAAG;QAC/F,SAAS,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;QACrF,8DAA8D;QAC9D,qEAAqE;QACrE,yCAAyC;QACzC,uCAAuC;QACvC,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM;QACrC,oGAAoG,CACvG,CAAC;AACN,CAAC"}

package/dist/gateway/advanced-tool/execute.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Gateway execute-mode dispatch — handles `{ tool, arguments }`
+ * invocations by validating `arguments` against the target tool's Zod
+ * schema in `.strict()` mode, then invoking the captured handler with
+ * the parsed args and the original SDK `extra` (so progress/elicitation/
+ * AbortSignal of the target tool keep working).
+ *
+ * Round-2 (R2-A2-CRIT2) extracted from `gateway/advanced-tool.ts`.
+ *
+ * @license MIT
+ */
+import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import type { AdvancedToolEntry } from '../capturing-server.js';
+/** Builds an error CallToolResult with structured payload (echoed into text + structuredContent). */
+export declare function errorResult(payload: {
+    message: string;
+    code: string;
+    suggestion: string;
+    details?: Record<string, unknown>;
+}): CallToolResult;
+/**
+ * Executes a captured advanced tool with strict-validated arguments.
+ *
+ * Returns a structured `invalid_arguments` error on Zod-validation
+ * failure; otherwise invokes `entry.handler` with `(parsedArgs, extra)`
+ * and returns its CallToolResult verbatim.
+ */
+export declare function executeAdvancedTool(toolName: string, entry: AdvancedToolEntry, rawArgs: Record<string, unknown>, extra: unknown): Promise<CallToolResult>;
+//# sourceMappingURL=execute.d.ts.map

package/dist/gateway/advanced-tool/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../../src/gateway/advanced-tool/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,qGAAqG;AACrG,wBAAgB,WAAW,CAAC,OAAO,EAAE;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,GAAG,cAAc,CAYjB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACrC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,EACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,EAAE,OAAO,GACf,OAAO,CAAC,cAAc,CAAC,CAoBzB"}

package/dist/gateway/advanced-tool/execute.js

@@ -0,0 +1,54 @@
+/**
+ * Gateway execute-mode dispatch — handles `{ tool, arguments }`
+ * invocations by validating `arguments` against the target tool's Zod
+ * schema in `.strict()` mode, then invoking the captured handler with
+ * the parsed args and the original SDK `extra` (so progress/elicitation/
+ * AbortSignal of the target tool keep working).
+ *
+ * Round-2 (R2-A2-CRIT2) extracted from `gateway/advanced-tool.ts`.
+ *
+ * @license MIT
+ */
+import { z } from 'zod';
+import { inputSchemaJson, shapeOf } from './discovery.js';
+/** Builds an error CallToolResult with structured payload (echoed into text + structuredContent). */
+export function errorResult(payload) {
+    const body = {
+        error: payload.message,
+        code: payload.code,
+        suggestion: payload.suggestion,
+        ...(payload.details !== undefined ? { details: payload.details } : {}),
+    };
+    return {
+        content: [{ type: 'text', text: JSON.stringify(body, null, 2) }],
+        structuredContent: body,
+        isError: true,
+    };
+}
+/**
+ * Executes a captured advanced tool with strict-validated arguments.
+ *
+ * Returns a structured `invalid_arguments` error on Zod-validation
+ * failure; otherwise invokes `entry.handler` with `(parsedArgs, extra)`
+ * and returns its CallToolResult verbatim.
+ */
+export async function executeAdvancedTool(toolName, entry, rawArgs, extra) {
+    // strict() surfaces unknown keys as Zod issues rather than silently
+    // dropping them, so callers can self-correct when they pass schema-
+    // extra keys.
+    const parsed = z.object(shapeOf(entry)).strict().safeParse(rawArgs);
+    if (!parsed.success) {
+        return errorResult({
+            message: `Invalid arguments for "${toolName}".`,
+            code: 'invalid_arguments',
+            suggestion: `Call yootheme_builder_advanced with { tool: "${toolName}" } to see ` +
+                'the expected schema, then retry with corrected arguments.',
+            details: {
+                issues: parsed.error.issues,
+                expected_schema: inputSchemaJson(entry),
+            },
+        });
+    }
+    return entry.handler(parsed.data, extra);
+}
+//# sourceMappingURL=execute.js.map

package/dist/gateway/advanced-tool/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../../src/gateway/advanced-tool/execute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE1D,qGAAqG;AACrG,MAAM,UAAU,WAAW,CAAC,OAK3B;IACG,MAAM,IAAI,GAAG;QACT,KAAK,EAAE,OAAO,CAAC,OAAO;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;IACF,OAAO;QACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAChE,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,IAAI;KAChB,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,QAAgB,EAChB,KAAwB,EACxB,OAAgC,EAChC,KAAc;IAEd,oEAAoE;IACpE,oEAAoE;IACpE,cAAc;IACd,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,WAAW,CAAC;YACf,OAAO,EAAE,0BAA0B,QAAQ,IAAI;YAC/C,IAAI,EAAE,mBAAmB;YACzB,UAAU,EACN,gDAAgD,QAAQ,aAAa;gBACrE,2DAA2D;YAC/D,OAAO,EAAE;gBACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;gBAC3B,eAAe,EAAE,eAAe,CAAC,KAAK,CAAC;aAC1C;SACJ,CAAC,CAAC;IACP,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC"}