@xemahq/platform-common 0.1.3

package/dist/lib/manifest/manifest.validation.js

@@ -0,0 +1,353 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MANIFEST_CUSTOM_KEY_PATTERN = exports.MANIFEST_KEY_PATTERN = void 0;
+exports.validateManifestKeyName = validateManifestKeyName;
+exports.validateManifest = validateManifest;
+exports.validateServiceEntry = validateServiceEntry;
+exports.validateResourceEntry = validateResourceEntry;
+exports.validateIntegrationEntry = validateIntegrationEntry;
+const manifest_enums_1 = require("./manifest.enums");
+exports.MANIFEST_KEY_PATTERN = /^[a-z][a-z0-9]*(_[a-z0-9]+)*$/;
+exports.MANIFEST_CUSTOM_KEY_PATTERN = /^custom\/[a-z][a-z0-9]*([_-][a-z0-9]+)*$/;
+function validateManifestKeyName(key, section) {
+    if (exports.MANIFEST_KEY_PATTERN.test(key))
+        return null;
+    if (exports.MANIFEST_CUSTOM_KEY_PATTERN.test(key))
+        return null;
+    return `Invalid key "${key}" at ${section}.${key}. Keys must be lowercase snake_case matching /^[a-z][a-z0-9]*(_[a-z0-9]+)*$/. Example: "${suggestSnakeCase(key)}"`;
+}
+function suggestSnakeCase(key) {
+    return (key
+        .replace(/([a-z])([A-Z])/g, '$1_$2')
+        .replace(/[-.\s]+/g, '_')
+        .toLowerCase()
+        .replace(/[^a-z0-9_]/g, '')
+        .replace(/^_+|_+$/g, '')
+        .replace(/_+/g, '_') ||
+        key.toLowerCase());
+}
+function validateManifest(manifest) {
+    const errors = [];
+    if (!manifest || typeof manifest !== 'object') {
+        errors.push({ path: '', message: 'Manifest must be a non-null object' });
+        return { valid: false, errors };
+    }
+    const m = manifest;
+    const requiredFields = [
+        'schemaVersion',
+        'metadata',
+        'repository',
+        'environments',
+        'services',
+        'resources',
+        'integrations',
+        'credentials',
+        'generators',
+    ];
+    for (const field of requiredFields) {
+        if (!(field in m)) {
+            errors.push({ path: field, message: `Missing required field: ${field}` });
+        }
+    }
+    if (errors.length > 0)
+        return { valid: false, errors };
+    if (m.schemaVersion !== 'v1') {
+        errors.push({
+            path: 'schemaVersion',
+            message: `Unsupported schema version: ${String(m.schemaVersion)}. Expected "v1".`,
+            value: m.schemaVersion,
+        });
+    }
+    const manifest_ = m;
+    if (!manifest_.metadata?.name) {
+        errors.push({
+            path: 'metadata.name',
+            message: 'metadata.name is required',
+        });
+    }
+    validateEnumField(errors, 'repository.layout', manifest_.repository?.layout, manifest_enums_1.REPOSITORY_LAYOUT_VALUES, false);
+    validateEnumField(errors, 'repository.workspaceManager', manifest_.repository?.workspaceManager, manifest_enums_1.WORKSPACE_MANAGER_VALUES, false);
+    if (manifest_.environments) {
+        for (const [envName, env] of Object.entries(manifest_.environments)) {
+            const keyError = validateManifestKeyName(envName, 'environments');
+            if (keyError)
+                errors.push({
+                    path: `environments.${envName}`,
+                    message: keyError,
+                    value: envName,
+                });
+            if (env.providers) {
+                for (let i = 0; i < env.providers.length; i++) {
+                    validateEnumField(errors, `environments.${envName}.providers[${i}]`, env.providers[i], manifest_enums_1.CLOUD_PROVIDER_VALUES, true);
+                }
+            }
+        }
+    }
+    if (manifest_.services) {
+        for (const [svcName, svc] of Object.entries(manifest_.services)) {
+            const keyError = validateManifestKeyName(svcName, 'services');
+            if (keyError)
+                errors.push({
+                    path: `services.${svcName}`,
+                    message: keyError,
+                    value: svcName,
+                });
+            const prefix = `services.${svcName}`;
+            validateEnumField(errors, `${prefix}.type`, svc.type, manifest_enums_1.SERVICE_TYPE_VALUES, true);
+            validateEnumField(errors, `${prefix}.lifecycle`, svc.lifecycle, manifest_enums_1.SERVICE_LIFECYCLE_VALUES, false);
+            validateEnumField(errors, `${prefix}.runtime`, svc.runtime, manifest_enums_1.RUNTIME_VALUES, true);
+            if (svc.scope) {
+                validateEnumField(errors, `${prefix}.scope`, svc.scope, manifest_enums_1.SERVICE_SCOPE_VALUES, false);
+                if (svc.scope === 'local' && svc.externalRef) {
+                    errors.push({
+                        path: `${prefix}.externalRef`,
+                        message: `Service "${svcName}" has scope "local" but externalRef is set. Remove externalRef for local services.`,
+                    });
+                }
+                if (svc.scope !== 'local' && !svc.externalRef) {
+                    errors.push({
+                        path: `${prefix}.externalRef`,
+                        message: `Service "${svcName}" has scope "${svc.scope}" but externalRef is missing. Non-local services require externalRef.`,
+                    });
+                }
+                if (svc.externalRef) {
+                    validateEnumField(errors, `${prefix}.externalRef.type`, svc.externalRef.type, manifest_enums_1.EXTERNAL_REF_TYPE_VALUES, false);
+                    if (svc.externalRef.specAuth) {
+                        validateEnumField(errors, `${prefix}.externalRef.specAuth.type`, svc.externalRef.specAuth.type, manifest_enums_1.EXTERNAL_SPEC_AUTH_TYPE_VALUES, false);
+                        if (svc.externalRef.specAuth.credentialRef &&
+                            manifest_.credentials &&
+                            !(svc.externalRef.specAuth.credentialRef in manifest_.credentials)) {
+                            errors.push({
+                                path: `${prefix}.externalRef.specAuth.credentialRef`,
+                                message: `Credential "${svc.externalRef.specAuth.credentialRef}" referenced by service "${svcName}" does not exist in manifest.credentials`,
+                                value: svc.externalRef.specAuth.credentialRef,
+                            });
+                        }
+                    }
+                }
+            }
+            else {
+                errors.push({
+                    path: `${prefix}.scope`,
+                    message: `Service "${svcName}" is missing required field: scope`,
+                });
+            }
+            if (svc.dependsOn) {
+                for (const resKey of svc.dependsOn.resources) {
+                    if (manifest_.resources && !(resKey in manifest_.resources)) {
+                        errors.push({
+                            path: `${prefix}.dependsOn.resources`,
+                            message: `Resource "${resKey}" referenced by service "${svcName}" does not exist in manifest.resources`,
+                            value: resKey,
+                        });
+                    }
+                }
+                for (const depSvcKey of svc.dependsOn.services) {
+                    if (manifest_.services && !(depSvcKey in manifest_.services)) {
+                        errors.push({
+                            path: `${prefix}.dependsOn.services`,
+                            message: `Service "${depSvcKey}" referenced by service "${svcName}" does not exist in manifest.services`,
+                            value: depSvcKey,
+                        });
+                    }
+                }
+            }
+        }
+    }
+    if (manifest_.resources) {
+        for (const [resName, res] of Object.entries(manifest_.resources)) {
+            const keyError = validateManifestKeyName(resName, 'resources');
+            if (keyError)
+                errors.push({
+                    path: `resources.${resName}`,
+                    message: keyError,
+                    value: resName,
+                });
+            const prefix = `resources.${resName}`;
+            validateEnumField(errors, `${prefix}.type`, res.type, manifest_enums_1.RESOURCE_TYPE_VALUES, true);
+            if (res.provisioning) {
+                for (const [envName, prov] of Object.entries(res.provisioning)) {
+                    validateEnumField(errors, `${prefix}.provisioning.${envName}.provider`, prov.provider, manifest_enums_1.CLOUD_PROVIDER_VALUES, true);
+                }
+            }
+        }
+    }
+    if (manifest_.integrations) {
+        for (const [intName, int] of Object.entries(manifest_.integrations)) {
+            const keyError = validateManifestKeyName(intName, 'integrations');
+            if (keyError)
+                errors.push({
+                    path: `integrations.${intName}`,
+                    message: keyError,
+                    value: intName,
+                });
+            const prefix = `integrations.${intName}`;
+            validateEnumField(errors, `${prefix}.type`, int.type, manifest_enums_1.INTEGRATION_TYPE_VALUES, true);
+            validateEnumField(errors, `${prefix}.category`, int.category, manifest_enums_1.INTEGRATION_CATEGORY_VALUES, true);
+            if (int.authentication) {
+                validateEnumField(errors, `${prefix}.authentication.type`, int.authentication.type, manifest_enums_1.AUTH_TYPE_VALUES, false);
+                if (int.authentication.secretRef &&
+                    manifest_.credentials &&
+                    !(int.authentication.secretRef in manifest_.credentials)) {
+                    errors.push({
+                        path: `${prefix}.authentication.secretRef`,
+                        message: `Credential "${int.authentication.secretRef}" referenced by integration "${intName}" does not exist in manifest.credentials`,
+                        value: int.authentication.secretRef,
+                    });
+                }
+            }
+            if (int.protocols) {
+                for (let i = 0; i < int.protocols.length; i++) {
+                    validateEnumField(errors, `${prefix}.protocols[${i}]`, int.protocols[i], manifest_enums_1.PROTOCOL_VALUES, true);
+                }
+            }
+            if (int.dataFlows) {
+                for (let i = 0; i < int.dataFlows.length; i++) {
+                    validateEnumField(errors, `${prefix}.dataFlows[${i}].classification`, int.dataFlows[i]?.classification, manifest_enums_1.DATA_CLASSIFICATION_VALUES, false);
+                }
+            }
+        }
+    }
+    if (manifest_.credentials) {
+        for (const [credName, cred] of Object.entries(manifest_.credentials)) {
+            const keyError = validateManifestKeyName(credName, 'credentials');
+            if (keyError)
+                errors.push({
+                    path: `credentials.${credName}`,
+                    message: keyError,
+                    value: credName,
+                });
+            validateEnumField(errors, `credentials.${credName}.type`, cred.type, manifest_enums_1.CREDENTIAL_TYPE_VALUES, false);
+        }
+    }
+    return { valid: errors.length === 0, errors };
+}
+function validateServiceEntry(name, service) {
+    const errors = [];
+    const keyError = validateManifestKeyName(name, 'services');
+    if (keyError)
+        errors.push({ path: name, message: keyError, value: name });
+    if (!service || typeof service !== 'object') {
+        errors.push({ path: name, message: 'Service must be a non-null object' });
+        return errors;
+    }
+    const svc = service;
+    const requiredFields = [
+        'type',
+        'lifecycle',
+        'path',
+        'scope',
+        'language',
+        'framework',
+        'runtime',
+        'build',
+        'ports',
+        'dependsOn',
+        'variables',
+        'traits',
+    ];
+    for (const field of requiredFields) {
+        if (!(field in svc)) {
+            errors.push({
+                path: `${name}.${field}`,
+                message: `Missing required field: ${field}`,
+            });
+        }
+    }
+    if (svc.type)
+        validateEnumField(errors, `${name}.type`, svc.type, manifest_enums_1.SERVICE_TYPE_VALUES, true);
+    if (svc.lifecycle)
+        validateEnumField(errors, `${name}.lifecycle`, svc.lifecycle, manifest_enums_1.SERVICE_LIFECYCLE_VALUES, false);
+    if (svc.runtime)
+        validateEnumField(errors, `${name}.runtime`, svc.runtime, manifest_enums_1.RUNTIME_VALUES, true);
+    return errors;
+}
+function validateResourceEntry(name, resource) {
+    const errors = [];
+    const keyError = validateManifestKeyName(name, 'resources');
+    if (keyError)
+        errors.push({ path: name, message: keyError, value: name });
+    if (!resource || typeof resource !== 'object') {
+        errors.push({ path: name, message: 'Resource must be a non-null object' });
+        return errors;
+    }
+    const res = resource;
+    const requiredFields = ['type', 'provisioning', 'outputs'];
+    for (const field of requiredFields) {
+        if (!(field in res)) {
+            errors.push({
+                path: `${name}.${field}`,
+                message: `Missing required field: ${field}`,
+            });
+        }
+    }
+    if (res.type)
+        validateEnumField(errors, `${name}.type`, res.type, manifest_enums_1.RESOURCE_TYPE_VALUES, true);
+    return errors;
+}
+function validateIntegrationEntry(name, integration) {
+    const errors = [];
+    const keyError = validateManifestKeyName(name, 'integrations');
+    if (keyError)
+        errors.push({ path: name, message: keyError, value: name });
+    if (!integration || typeof integration !== 'object') {
+        errors.push({
+            path: name,
+            message: 'Integration must be a non-null object',
+        });
+        return errors;
+    }
+    const int = integration;
+    const requiredFields = [
+        'type',
+        'category',
+        'authentication',
+        'endpoints',
+        'protocols',
+        'dataFlows',
+    ];
+    for (const field of requiredFields) {
+        if (!(field in int)) {
+            errors.push({
+                path: `${name}.${field}`,
+                message: `Missing required field: ${field}`,
+            });
+        }
+    }
+    if (int.type)
+        validateEnumField(errors, `${name}.type`, int.type, manifest_enums_1.INTEGRATION_TYPE_VALUES, true);
+    if (int.category)
+        validateEnumField(errors, `${name}.category`, int.category, manifest_enums_1.INTEGRATION_CATEGORY_VALUES, true);
+    return errors;
+}
+function validateEnumField(errors, path, value, knownValues, allowCustom) {
+    if (value === undefined || value === null)
+        return;
+    if (typeof value !== 'string') {
+        errors.push({
+            path,
+            message: `Expected string, got ${typeof value}`,
+            value,
+        });
+        return;
+    }
+    if (allowCustom) {
+        if (!(0, manifest_enums_1.isValidEnumValue)(value, knownValues)) {
+            errors.push({
+                path,
+                message: `Invalid value "${value}". Must be one of the known values or use "custom/<slug>" prefix.`,
+                value,
+            });
+        }
+    }
+    else {
+        if (!knownValues.includes(value)) {
+            errors.push({
+                path,
+                message: `Invalid value "${value}". Must be one of: ${knownValues.join(', ')}`,
+                value,
+            });
+        }
+    }
+}
+//# sourceMappingURL=manifest.validation.js.map

package/dist/lib/manifest/manifest.validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.validation.js","sourceRoot":"","sources":["../../../src/lib/manifest/manifest.validation.ts"],"names":[],"mappings":";;;AAmDA,0DAOC;AA4CD,4CAgVC;AAOD,oDA4DC;AAKD,sDA+BC;AAKD,4DAiDC;AA5kBD,qDAkB0B;AAkBb,QAAA,oBAAoB,GAAG,+BAA+B,CAAC;AACvD,QAAA,2BAA2B,GACtC,0CAA0C,CAAC;AAM7C,SAAgB,uBAAuB,CACrC,GAAW,EACX,OAAe;IAEf,IAAI,4BAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,mCAA2B,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,gBAAgB,GAAG,QAAQ,OAAO,IAAI,GAAG,2FAA2F,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;AACtK,CAAC;AAOD,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,CACL,GAAG;SACA,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC;SACnC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QACtB,GAAG,CAAC,WAAW,EAAE,CAClB,CAAC;AACJ,CAAC;AA0BD,SAAgB,gBAAgB,CAAC,QAAiB;IAChD,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,GAAG,QAAmC,CAAC;IAG9C,MAAM,cAAc,GAAG;QACrB,eAAe;QACf,UAAU;QACV,YAAY;QACZ,cAAc;QACd,UAAU;QACV,WAAW;QACX,cAAc;QACd,aAAa;QACb,YAAY;KACb,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAGvD,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,+BAA+B,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,kBAAkB;YACjF,KAAK,EAAE,CAAC,CAAC,aAAa;SACvB,CAAC,CAAC;IACL,CAAC;IAGD,MAAM,SAAS,GAAG,CAA+B,CAAC;IAGlD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAGD,iBAAiB,CACf,MAAM,EACN,mBAAmB,EACnB,SAAS,CAAC,UAAU,EAAE,MAAM,EAC5B,yCAAwB,EACxB,KAAK,CACN,CAAC;IACF,iBAAiB,CACf,MAAM,EACN,6BAA6B,EAC7B,SAAS,CAAC,UAAU,EAAE,gBAAgB,EACtC,yCAAwB,EACxB,KAAK,CACN,CAAC;IAGF,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAClE,IAAI,QAAQ;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB,OAAO,EAAE;oBAC/B,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9C,iBAAiB,CACf,MAAM,EACN,gBAAgB,OAAO,cAAc,CAAC,GAAG,EACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAChB,sCAAqB,EACrB,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9D,IAAI,QAAQ;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,YAAY,OAAO,EAAE;oBAC3B,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,MAAM,MAAM,GAAG,YAAY,OAAO,EAAE,CAAC;YACrC,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,OAAO,EAChB,GAAG,CAAC,IAAI,EACR,oCAAmB,EACnB,IAAI,CACL,CAAC;YACF,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,YAAY,EACrB,GAAG,CAAC,SAAS,EACb,yCAAwB,EACxB,KAAK,CACN,CAAC;YACF,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,UAAU,EACnB,GAAG,CAAC,OAAO,EACX,+BAAc,EACd,IAAI,CACL,CAAC;YAGF,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,QAAQ,EACjB,GAAG,CAAC,KAAK,EACT,qCAA2C,EAC3C,KAAK,CACN,CAAC;gBAGF,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,GAAG,MAAM,cAAc;wBAC7B,OAAO,EAAE,YAAY,OAAO,oFAAoF;qBACjH,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC9C,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,GAAG,MAAM,cAAc;wBAC7B,OAAO,EAAE,YAAY,OAAO,gBAAgB,GAAG,CAAC,KAAK,uEAAuE;qBAC7H,CAAC,CAAC;gBACL,CAAC;gBAGD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;oBACpB,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,mBAAmB,EAC5B,GAAG,CAAC,WAAW,CAAC,IAAI,EACpB,yCAA+C,EAC/C,KAAK,CACN,CAAC;oBACF,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;wBAC7B,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,4BAA4B,EACrC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAC7B,+CAAqD,EACrD,KAAK,CACN,CAAC;wBAEF,IACE,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa;4BACtC,SAAS,CAAC,WAAW;4BACrB,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,IAAI,SAAS,CAAC,WAAW,CAAC,EAClE,CAAC;4BACD,MAAM,CAAC,IAAI,CAAC;gCACV,IAAI,EAAE,GAAG,MAAM,qCAAqC;gCACpD,OAAO,EAAE,eAAe,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,4BAA4B,OAAO,0CAA0C;gCAC3I,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa;6BAC9C,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,GAAG,MAAM,QAAQ;oBACvB,OAAO,EAAE,YAAY,OAAO,oCAAoC;iBACjE,CAAC,CAAC;YACL,CAAC;YAGD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;oBAC7C,IAAI,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC5D,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,GAAG,MAAM,sBAAsB;4BACrC,OAAO,EAAE,aAAa,MAAM,4BAA4B,OAAO,wCAAwC;4BACvG,KAAK,EAAE,MAAM;yBACd,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAC/C,IAAI,SAAS,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC7D,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,GAAG,MAAM,qBAAqB;4BACpC,OAAO,EAAE,YAAY,SAAS,4BAA4B,OAAO,uCAAuC;4BACxG,KAAK,EAAE,SAAS;yBACjB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGD,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC/D,IAAI,QAAQ;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,aAAa,OAAO,EAAE;oBAC5B,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,MAAM,MAAM,GAAG,aAAa,OAAO,EAAE,CAAC;YACtC,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,OAAO,EAChB,GAAG,CAAC,IAAI,EACR,qCAAoB,EACpB,IAAI,CACL,CAAC;YAEF,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBACrB,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC/D,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,iBAAiB,OAAO,WAAW,EAC5C,IAAI,CAAC,QAAQ,EACb,sCAAqB,EACrB,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGD,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAClE,IAAI,QAAQ;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB,OAAO,EAAE;oBAC/B,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,OAAO;iBACf,CAAC,CAAC;YACL,MAAM,MAAM,GAAG,gBAAgB,OAAO,EAAE,CAAC;YACzC,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,OAAO,EAChB,GAAG,CAAC,IAAI,EACR,wCAAuB,EACvB,IAAI,CACL,CAAC;YACF,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,WAAW,EACpB,GAAG,CAAC,QAAQ,EACZ,4CAA2B,EAC3B,IAAI,CACL,CAAC;YAEF,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;gBACvB,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,sBAAsB,EAC/B,GAAG,CAAC,cAAc,CAAC,IAAI,EACvB,iCAAgB,EAChB,KAAK,CACN,CAAC;gBAEF,IACE,GAAG,CAAC,cAAc,CAAC,SAAS;oBAC5B,SAAS,CAAC,WAAW;oBACrB,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,IAAI,SAAS,CAAC,WAAW,CAAC,EACxD,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,GAAG,MAAM,2BAA2B;wBAC1C,OAAO,EAAE,eAAe,GAAG,CAAC,cAAc,CAAC,SAAS,gCAAgC,OAAO,0CAA0C;wBACrI,KAAK,EAAE,GAAG,CAAC,cAAc,CAAC,SAAS;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9C,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,cAAc,CAAC,GAAG,EAC3B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAChB,gCAAe,EACf,IAAI,CACL,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9C,iBAAiB,CACf,MAAM,EACN,GAAG,MAAM,cAAc,CAAC,kBAAkB,EAC1C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAChC,2CAA0B,EAC1B,KAAK,CACN,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAGD,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YACrE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAClE,IAAI,QAAQ;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,eAAe,QAAQ,EAAE;oBAC/B,OAAO,EAAE,QAAQ;oBACjB,KAAK,EAAE,QAAQ;iBAChB,CAAC,CAAC;YACL,iBAAiB,CACf,MAAM,EACN,eAAe,QAAQ,OAAO,EAC9B,IAAI,CAAC,IAAI,EACT,uCAAsB,EACtB,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAOD,SAAgB,oBAAoB,CAClC,IAAY,EACZ,OAAgB;IAEhB,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAC/C,MAAM,cAAc,GAAG;QACrB,MAAM;QACN,WAAW;QACX,MAAM;QACN,OAAO;QACP,UAAU;QACV,WAAW;QACX,SAAS;QACT,OAAO;QACP,OAAO;QACP,WAAW;QACX,WAAW;QACX,QAAQ;KACT,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;gBACxB,OAAO,EAAE,2BAA2B,KAAK,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,IAAI;QACV,iBAAiB,CACf,MAAM,EACN,GAAG,IAAI,OAAO,EACd,GAAG,CAAC,IAAc,EAClB,oCAAmB,EACnB,IAAI,CACL,CAAC;IACJ,IAAI,GAAG,CAAC,SAAS;QACf,iBAAiB,CACf,MAAM,EACN,GAAG,IAAI,YAAY,EACnB,GAAG,CAAC,SAAmB,EACvB,yCAAwB,EACxB,KAAK,CACN,CAAC;IACJ,IAAI,GAAG,CAAC,OAAO;QACb,iBAAiB,CACf,MAAM,EACN,GAAG,IAAI,UAAU,EACjB,GAAG,CAAC,OAAiB,EACrB,+BAAc,EACd,IAAI,CACL,CAAC;IACJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAKD,SAAgB,qBAAqB,CACnC,IAAY,EACZ,QAAiB;IAEjB,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC3E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,QAAmC,CAAC;IAChD,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;gBACxB,OAAO,EAAE,2BAA2B,KAAK,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,IAAI;QACV,iBAAiB,CACf,MAAM,EACN,GAAG,IAAI,OAAO,EACd,GAAG,CAAC,IAAc,EAClB,qCAAoB,EACpB,IAAI,CACL,CAAC;IACJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAKD,SAAgB,wBAAwB,CACtC,IAAY,EACZ,WAAoB;IAEpB,MAAM,MAAM,GAA8B,EAAE,CAAC;IAE7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC/D,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,WAAsC,CAAC;IACnD,MAAM,cAAc,GAAG;QACrB,MAAM;QACN,UAAU;QACV,gBAAgB;QAChB,WAAW;QACX,WAAW;QACX,WAAW;KACZ,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;gBACxB,OAAO,EAAE,2BAA2B,KAAK,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,IAAI;QACV,iBAAiB,CACf,MAAM,EACN,GAAG,IAAI,OAAO,EACd,GAAG,CAAC,IAAc,EAClB,wCAAuB,EACvB,IAAI,CACL,CAAC;IACJ,IAAI,GAAG,CAAC,QAAQ;QACd,iBAAiB,CACf,MAAM,EACN,GAAG,IAAI,WAAW,EAClB,GAAG,CAAC,QAAkB,EACtB,4CAA2B,EAC3B,IAAI,CACL,CAAC;IACJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAID,SAAS,iBAAiB,CACxB,MAAiC,EACjC,IAAY,EACZ,KAAyB,EACzB,WAAqB,EACrB,WAAoB;IAEpB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,OAAO,EAAE,wBAAwB,OAAO,KAAK,EAAE;YAC/C,KAAK;SACN,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC,IAAA,iCAAgB,EAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,OAAO,EAAE,kBAAkB,KAAK,mEAAmE;gBACnG,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,OAAO,EAAE,kBAAkB,KAAK,sBAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9E,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/mcp-bridge-token.d.ts

@@ -0,0 +1,63 @@
+export declare enum McpBridgeTokenKind {
+    Server = "mcp_server",
+    Catalog = "catalog",
+    BiomeWorkflowTools = "biome_workflow_tools",
+    BiomeCodeTools = "biome_code_tools",
+    OrgDatabaseExplorer = "org_database_explorer",
+    CapabilityRouter = "capability_router"
+}
+export interface McpBridgeTokenClaimsBase {
+    sessionId: string;
+    orgId: string;
+    projectId: string;
+    actorSubject: string | null;
+    installationId?: string;
+    allowedToolNames?: readonly string[];
+    iat: number;
+    exp: number;
+}
+export interface McpBridgeServerKindClaims extends McpBridgeTokenClaimsBase {
+    kind: McpBridgeTokenKind.Server;
+    mcpServerId: string;
+    serviceKey: string;
+}
+export interface McpBridgeCatalogKindClaims extends McpBridgeTokenClaimsBase {
+    kind: McpBridgeTokenKind.Catalog;
+    catalogId: string;
+}
+export interface McpBridgeBiomeWorkflowToolsKindClaims extends McpBridgeTokenClaimsBase {
+    kind: McpBridgeTokenKind.BiomeWorkflowTools;
+    biomeInstallationId: string;
+}
+export interface McpBridgeBiomeCodeToolsKindClaims extends McpBridgeTokenClaimsBase {
+    kind: McpBridgeTokenKind.BiomeCodeTools;
+    biomeInstallationId: string;
+}
+export interface McpBridgeOrgDbExplorerKindClaims extends McpBridgeTokenClaimsBase {
+    kind: McpBridgeTokenKind.OrgDatabaseExplorer;
+    databaseId: string;
+}
+export interface McpBridgeCapabilityRouterKindClaims extends McpBridgeTokenClaimsBase {
+    kind: McpBridgeTokenKind.CapabilityRouter;
+}
+export type McpBridgeTokenClaims = McpBridgeServerKindClaims | McpBridgeCatalogKindClaims | McpBridgeBiomeWorkflowToolsKindClaims | McpBridgeBiomeCodeToolsKindClaims | McpBridgeOrgDbExplorerKindClaims | McpBridgeCapabilityRouterKindClaims;
+export declare const DEFAULT_BRIDGE_TOKEN_TTL_SECONDS: number;
+export declare const OPENCODE_MCP_BRIDGE_TOKEN_HEADER = "X-Mcp-Bridge-Token";
+export declare function signMcpBridgeToken(secret: string, claims: Omit<McpBridgeServerKindClaims, 'iat' | 'exp'> | Omit<McpBridgeCatalogKindClaims, 'iat' | 'exp'> | Omit<McpBridgeBiomeWorkflowToolsKindClaims, 'iat' | 'exp'> | Omit<McpBridgeBiomeCodeToolsKindClaims, 'iat' | 'exp'> | Omit<McpBridgeOrgDbExplorerKindClaims, 'iat' | 'exp'> | Omit<McpBridgeCapabilityRouterKindClaims, 'iat' | 'exp'>, options?: {
+    ttlSeconds?: number;
+}): string;
+export interface VerifyMcpBridgeTokenOptions {
+    expectedMcpServerId?: string;
+    expectedCatalogId?: string;
+    expectedBiomeInstallationId?: string;
+    expectedDatabaseId?: string;
+    expectedOrgId?: string;
+    expectedKind?: McpBridgeTokenKind;
+    clockSkewSeconds?: number;
+}
+export declare class McpBridgeTokenError extends Error {
+    readonly reason: 'malformed' | 'bad_signature' | 'expired' | 'not_yet_valid' | 'wrong_server' | 'wrong_catalog' | 'wrong_installation' | 'wrong_kind' | 'wrong_org';
+    constructor(reason: 'malformed' | 'bad_signature' | 'expired' | 'not_yet_valid' | 'wrong_server' | 'wrong_catalog' | 'wrong_installation' | 'wrong_kind' | 'wrong_org', message: string);
+}
+export declare function verifyMcpBridgeToken(token: string, secret: string, options?: VerifyMcpBridgeTokenOptions): McpBridgeTokenClaims;
+//# sourceMappingURL=mcp-bridge-token.d.ts.map

package/dist/lib/mcp-bridge-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-bridge-token.d.ts","sourceRoot":"","sources":["../../src/lib/mcp-bridge-token.ts"],"names":[],"mappings":"AAgCA,oBAAY,kBAAkB;IAE5B,MAAM,eAAe;IAErB,OAAO,YAAY;IAEnB,kBAAkB,yBAAyB;IAE3C,cAAc,qBAAqB;IAEnC,mBAAmB,0BAA0B;IAQ7C,gBAAgB,sBAAsB;CACvC;AAED,MAAM,WAAW,wBAAwB;IAEvC,SAAS,EAAE,MAAM,CAAC;IAElB,KAAK,EAAE,MAAM,CAAC;IAMd,SAAS,EAAE,MAAM,CAAC;IAMlB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAO5B,cAAc,CAAC,EAAE,MAAM,CAAC;IAMxB,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,EAAE,MAAM,CAAC;CACb;AAGD,MAAM,WAAW,yBAA0B,SAAQ,wBAAwB;IACzE,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC;IAEhC,WAAW,EAAE,MAAM,CAAC;IAKpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;IAC1E,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC;IAEjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,qCACf,SAAQ,wBAAwB;IAChC,IAAI,EAAE,kBAAkB,CAAC,kBAAkB,CAAC;IAE5C,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,WAAW,iCACf,SAAQ,wBAAwB;IAChC,IAAI,EAAE,kBAAkB,CAAC,cAAc,CAAC;IAExC,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,WAAW,gCACf,SAAQ,wBAAwB;IAChC,IAAI,EAAE,kBAAkB,CAAC,mBAAmB,CAAC;IAE7C,UAAU,EAAE,MAAM,CAAC;CACpB;AAQD,MAAM,WAAW,mCACf,SAAQ,wBAAwB;IAChC,IAAI,EAAE,kBAAkB,CAAC,gBAAgB,CAAC;CAC3C;AAED,MAAM,MAAM,oBAAoB,GAC5B,yBAAyB,GACzB,0BAA0B,GAC1B,qCAAqC,GACrC,iCAAiC,GACjC,gCAAgC,GAChC,mCAAmC,CAAC;AAGxC,eAAO,MAAM,gCAAgC,QAAiB,CAAC;AAQ/D,eAAO,MAAM,gCAAgC,uBAAuB,CAAC;AAYrE,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,MAAM,EACF,IAAI,CAAC,yBAAyB,EAAE,KAAK,GAAG,KAAK,CAAC,GAC9C,IAAI,CAAC,0BAA0B,EAAE,KAAK,GAAG,KAAK,CAAC,GAC/C,IAAI,CAAC,qCAAqC,EAAE,KAAK,GAAG,KAAK,CAAC,GAC1D,IAAI,CAAC,iCAAiC,EAAE,KAAK,GAAG,KAAK,CAAC,GACtD,IAAI,CAAC,gCAAgC,EAAE,KAAK,GAAG,KAAK,CAAC,GACrD,IAAI,CAAC,mCAAmC,EAAE,KAAK,GAAG,KAAK,CAAC,EAC5D,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAChC,MAAM,CAiBR;AAED,MAAM,WAAW,2BAA2B;IAE1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,MAAM,EAClB,WAAW,GACX,eAAe,GACf,SAAS,GACT,eAAe,GACf,cAAc,GACd,eAAe,GACf,oBAAoB,GACpB,YAAY,GACZ,WAAW;gBATC,MAAM,EAClB,WAAW,GACX,eAAe,GACf,SAAS,GACT,eAAe,GACf,cAAc,GACd,eAAe,GACf,oBAAoB,GACpB,YAAY,GACZ,WAAW,EACf,OAAO,EAAE,MAAM;CAKlB;AAMD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,2BAA2B,GACpC,oBAAoB,CAUtB"}