capix-mcp 2.1.0

package/dist/capixClient.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Capix API client — thin wrapper over the Capix network REST API.
+ *
+ * All deploy/destroy/status/billing calls go through capix.network.
+ * The session token is passed as a Bearer header — same as the web console
+ * and the Capix IDE extension. So a user who's authenticated anywhere
+ * is authenticated everywhere.
+ */
+export interface CatalogModel {
+    id: string;
+    label: string;
+    family: string;
+    category: string;
+    paramB: number;
+    minVramGb: number;
+    gpuCount: number;
+    maxModelLen: number;
+    quantization: string;
+    gated: boolean;
+    tagline: string;
+    description: string;
+    partner?: string;
+    uncensored?: boolean;
+    multimodal?: boolean;
+    featured?: boolean;
+    badge?: string;
+}
+export declare function getCatalog(): Promise<CatalogModel[]>;
+export interface GpuOffer {
+    askId: number;
+    gpu: string;
+    numGpus: number;
+    vramGb: number;
+    totalVramGb: number;
+    cpuCores: number;
+    ramGb: number;
+    pricePerHr: number;
+    roundedPricePerHr: number;
+    location: string;
+    reliability: number;
+}
+export declare function getOffers(modelId: string, region?: string): Promise<GpuOffer[]>;
+export interface DeployResult {
+    ok: boolean;
+    instanceId: number;
+    apiKey: string;
+    model: {
+        id: string;
+        label: string;
+        maxModelLen: number;
+    };
+    gpu: string;
+    location: string;
+    pricePerHr: number;
+    chargedUsd: number;
+    endpoint: string | null;
+    error?: string;
+}
+export declare function deployModel(modelId: string, askId: number, durationHours: number, hfToken?: string): Promise<DeployResult>;
+export declare function deployCustomModel(opts: {
+    link: string;
+    askId: number;
+    durationHours: number;
+    minVramGb?: number;
+    gpuCount?: number;
+    hfToken?: string;
+    manual?: boolean;
+}): Promise<DeployResult & {
+    error?: string;
+}>;
+export interface DeployStatus {
+    ok: boolean;
+    instanceId: number;
+    modelLabel: string;
+    hasApiKey: boolean;
+    state: "loading" | "running" | "stopped" | "unknown";
+    endpoint: string | null;
+    ready: boolean;
+    baseOpenAiUrl: string | null;
+    gpu: string;
+    location: string;
+    pricePerHr: number;
+    sshHost: string | null;
+    sshPort: number | null;
+}
+export declare function getDeployStatus(instanceId: number): Promise<DeployStatus>;
+export declare function getDeployApiKey(instanceId: number): Promise<{
+    ok: boolean;
+    apiKey?: string;
+    error?: string;
+}>;
+export declare function listDeploys(): Promise<{
+    ok: boolean;
+    deploys: unknown[];
+}>;
+export declare function destroyDeploy(instanceId: number): Promise<{
+    ok: boolean;
+}>;
+export interface BillingData {
+    ok: boolean;
+    balance: {
+        usd: number;
+        sol: number;
+        usdc: number;
+    };
+    activeInstances: number;
+    totalSpent: number;
+}
+export declare function getBalance(): Promise<BillingData>;
+export interface HostedEndpoint {
+    modelId: string;
+    modelLabel: string;
+    baseUrl: string;
+    region: string;
+    healthy: boolean;
+    isSuperGemma: boolean;
+    apiKeyMasked: string;
+}
+export declare function getHostedEndpoints(): Promise<HostedEndpoint[]>;
+export declare function revealHostedKey(modelId: string): Promise<{
+    ok: boolean;
+    apiKey?: string;
+    error?: string;
+}>;
+export declare const configured: () => boolean;
+export declare const baseUrl: () => string;
+//# sourceMappingURL=capixClient.d.ts.map

package/dist/capixClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capixClient.d.ts","sourceRoot":"","sources":["../src/capixClient.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA6BH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAG1D;AAID,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAKrF;AAID,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,YAAY,CAAC,CAOvB;AAID,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,YAAY,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAK7C;AAID,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IACrD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAE/E;AAED,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAEnH;AAID,wBAAsB,WAAW,IAAI,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC,CAEhF;AAED,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAEhF;AAID,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAEvD;AAID,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAGpE;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAEhH;AAED,eAAO,MAAM,UAAU,eAA+B,CAAC;AACvD,eAAO,MAAM,OAAO,cAAuB,CAAC"}

package/dist/capixClient.js

@@ -0,0 +1,77 @@
+/**
+ * Capix API client — thin wrapper over the Capix network REST API.
+ *
+ * All deploy/destroy/status/billing calls go through capix.network.
+ * The session token is passed as a Bearer header — same as the web console
+ * and the Capix IDE extension. So a user who's authenticated anywhere
+ * is authenticated everywhere.
+ */
+const CAPIX_BASE_URL = process.env.CAPIX_BASE_URL?.replace(/\/$/, "") || "https://capix.network";
+const CAPIX_API_KEY = process.env.CAPIX_API_KEY || "";
+function authHeaders() {
+    return CAPIX_API_KEY ? { Authorization: `Bearer ${CAPIX_API_KEY}` } : {};
+}
+async function apiRequest(path, method = "GET", body, params) {
+    const url = new URL(`${CAPIX_BASE_URL}${path}`);
+    if (params)
+        for (const [k, v] of Object.entries(params))
+            url.searchParams.set(k, v);
+    const res = await fetch(url.toString(), {
+        method,
+        headers: { "Content-Type": "application/json", ...authHeaders() },
+        body: body ? JSON.stringify(body) : undefined,
+    });
+    return res.json();
+}
+export async function getCatalog() {
+    const res = await apiRequest("/api/llm/models");
+    return res.ok ? res.models : [];
+}
+export async function getOffers(modelId, region) {
+    const params = { modelId };
+    if (region && region !== "global")
+        params.region = region;
+    const res = await apiRequest("/api/llm/offers", "GET", undefined, params);
+    return res.ok ? res.offers : [];
+}
+export async function deployModel(modelId, askId, durationHours, hfToken) {
+    return apiRequest("/api/llm/deploy", "POST", {
+        modelId,
+        askId,
+        durationHours,
+        hfToken,
+    });
+}
+// ── Deploy a custom model (Hugging Face link) ──────────────────────────────
+export async function deployCustomModel(opts) {
+    return apiRequest("/api/llm/custom", "POST", {
+        action: "deploy",
+        ...opts,
+    });
+}
+export async function getDeployStatus(instanceId) {
+    return apiRequest(`/api/llm/${instanceId}?action=status`);
+}
+export async function getDeployApiKey(instanceId) {
+    return apiRequest(`/api/llm/${instanceId}?action=reveal-key`);
+}
+// ── List + destroy ─────────────────────────────────────────────────────────
+export async function listDeploys() {
+    return apiRequest("/api/llm/0?action=list");
+}
+export async function destroyDeploy(instanceId) {
+    return apiRequest(`/api/llm/${instanceId}`, "DELETE");
+}
+export async function getBalance() {
+    return apiRequest("/api/cloud/billing");
+}
+export async function getHostedEndpoints() {
+    const res = await apiRequest("/api/llm/hosted");
+    return res.ok ? res.endpoints : [];
+}
+export async function revealHostedKey(modelId) {
+    return apiRequest(`/api/llm/hosted?reveal=true&modelId=${encodeURIComponent(modelId)}`);
+}
+export const configured = () => Boolean(CAPIX_API_KEY);
+export const baseUrl = () => CAPIX_BASE_URL;
+//# sourceMappingURL=capixClient.js.map

package/dist/capixClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capixClient.js","sourceRoot":"","sources":["../src/capixClient.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,uBAAuB,CAAC;AACjG,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;AAEtD,SAAS,WAAW;IAClB,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,SAAoC,KAAK,EACzC,IAAc,EACd,MAA+B;IAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM;QAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEpF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE,EAAE;QACjE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AAClC,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,GAAG,GAAG,MAAM,UAAU,CAA0C,iBAAiB,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAClC,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,MAAe;IAC9D,MAAM,MAAM,GAA2B,EAAE,OAAO,EAAE,CAAC;IACnD,IAAI,MAAM,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,UAAU,CAAsC,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/G,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAClC,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,KAAa,EACb,aAAqB,EACrB,OAAgB;IAEhB,OAAO,UAAU,CAAe,iBAAiB,EAAE,MAAM,EAAE;QACzD,OAAO;QACP,KAAK;QACL,aAAa;QACb,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAQvC;IACC,OAAO,UAAU,CAAoC,iBAAiB,EAAE,MAAM,EAAE;QAC9E,MAAM,EAAE,QAAQ;QAChB,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC;AAoBD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,OAAO,UAAU,CAAe,YAAY,UAAU,gBAAgB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,OAAO,UAAU,CAAC,YAAY,UAAU,oBAAoB,CAAC,CAAC;AAChE,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,UAAU,CAAC,wBAAwB,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,OAAO,UAAU,CAAC,YAAY,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,OAAO,UAAU,CAAc,oBAAoB,CAAC,CAAC;AACvD,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,GAAG,GAAG,MAAM,UAAU,CAA+C,iBAAiB,CAAC,CAAC;IAC9F,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAe;IACnD,OAAO,UAAU,CAAC,uCAAuC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Capix API client — the canonical HTTP boundary for the MCP server.
+ *
+ * Every tool handler delegates to an instance of this class; the client is the
+ * only place that touches `fetch`, auth headers, problem+json parsing, or
+ * idempotency keys. Mirrors the conventions of
+ * services/intelligence/mcp-bridge.ts and Capix-Backend API routes.
+ *
+ * Design guarantees:
+ *
+ *   - canonical endpoints   — all calls go to `/api/v1/*` (never legacy
+ *                             `/api/llm/*` or `/api/cloud/*` paths).
+ *   - problem+json          — non-2xx responses are parsed as RFC 7807
+ *                             ProblemDetail and surfaced as CapixApiError.
+ *   - idempotency keys      — POST/DELETE mutations get an `Idempotency-Key`
+ *                             header derived from the request body so retries
+ *                             are safe (§4 ledger holds are deduped upstream).
+ *   - approval tokens       — billable mutations forward the bound
+ *                             approvalToken as `X-Capix-Approval-Token`.
+ *   - auth broker first     — when `@capix/auth-broker` is importable and a
+ *                             stored refresh token exists, the client obtains
+ *                             a fresh OAuth access token via the broker's
+ *                             crash-safe dual-slot rotation. Otherwise it
+ *                             falls back to the `CAPIX_API_KEY` env var.
+ */
+import type { AccountInfo, AuthBrokerLike, AuthState, CapixClientLike, TokenSet } from "./types.js";
+/** A pluggable source of a Bearer access token for the API client. */
+export interface AuthProvider {
+    getToken(): Promise<string | null>;
+    isAuthenticated(): boolean;
+    getAccount(): AccountInfo | null;
+}
+/** Stateless provider that returns a static API key from the environment. */
+export declare class ApiKeyAuthProvider implements AuthProvider {
+    private readonly apiKey;
+    constructor(apiKey: string);
+    getToken(): Promise<string | null>;
+    isAuthenticated(): boolean;
+    getAccount(): AccountInfo | null;
+}
+/**
+ * Provider backed by the shared @capix/auth-broker. The broker itself is
+ * dynamically imported so this package has no hard dependency on the private
+ * protocol workspace.
+ */
+export declare class BrokerAuthProvider implements AuthProvider {
+    private readonly broker;
+    private cached;
+    constructor(broker: AuthBrokerLike);
+    getToken(): Promise<string | null>;
+    isAuthenticated(): boolean;
+    getAccount(): AccountInfo | null;
+}
+/**
+ * Try to construct a BrokerAuthProvider by dynamically importing
+ * `@capix/auth-broker`. Returns null when the package is not installed or no
+ * stored credentials are present, so the caller can fall back to an API key.
+ */
+export declare function tryCreateBrokerAuthProvider(opts?: {
+    baseUrl?: string;
+    clientId?: string;
+    scope?: string;
+}): Promise<BrokerAuthProvider | null>;
+/** Resolve the best available auth provider: broker first, then API key. */
+export declare function resolveAuthProvider(opts?: {
+    baseUrl?: string;
+    apiKey?: string;
+}): Promise<AuthProvider>;
+export interface CapixClientOptions {
+    baseUrl: string;
+    authProvider: AuthProvider;
+    /** Default project id used for unscoped read calls. */
+    projectId?: string;
+    /** Optional fetch override (for tests). */
+    fetchImpl?: typeof fetch;
+    /** Logger for diagnostic stderr output. */
+    log?: (msg: string) => void;
+}
+export declare class CapixClient implements CapixClientLike {
+    private readonly baseUrl;
+    private readonly auth;
+    private readonly projectId?;
+    private readonly fetchImpl;
+    private readonly log;
+    constructor(opts: CapixClientOptions);
+    isAuthenticated(): boolean;
+    getAccount(): AccountInfo | null;
+    getProjectId(): string | undefined;
+    get<T = unknown>(path: string, params?: Record<string, unknown>): Promise<T>;
+    post<T = unknown>(path: string, body?: Record<string, unknown>, opts?: {
+        idempotent?: boolean;
+        approvalToken?: string;
+    }): Promise<T>;
+    delete<T = unknown>(path: string): Promise<T>;
+    private buildUrl;
+    private headers;
+    private requireToken;
+    /**
+     * Derive a stable idempotency key from the request path + body hash + a
+     * fresh nonce. The nonce ensures that the *caller's* retries (same args)
+     * collapse while distinct invocations get distinct keys.
+     */
+    private idempotencyKey;
+    /**
+     * Parse a fetch Response. Non-2xx responses are decoded as problem+json
+     * (RFC 7807) and thrown as CapixApiError. Empty 204 responses yield null.
+     */
+    private parse;
+    private fallbackProblem;
+}
+/** Build a CapixClient from environment defaults (broker → API key fallback). */
+export declare function createClient(opts?: {
+    baseUrl?: string;
+    apiKey?: string;
+    projectId?: string;
+    log?: (msg: string) => void;
+}): Promise<CapixClient>;
+export type { AuthState, TokenSet };
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EAEd,SAAS,EACT,eAAe,EAEf,QAAQ,EACT,MAAM,YAAY,CAAC;AAOpB,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,eAAe,IAAI,OAAO,CAAC;IAC3B,UAAU,IAAI,WAAW,GAAG,IAAI,CAAC;CAClC;AAED,6EAA6E;AAC7E,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBACpB,MAAM,EAAE,MAAM;IAGpB,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAGxC,eAAe,IAAI,OAAO;IAG1B,UAAU,IAAI,WAAW,GAAG,IAAI;CAGjC;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,MAAM,CAAqD;gBAEvD,MAAM,EAAE,cAAc;IAI5B,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAexC,eAAe,IAAI,OAAO;IAI1B,UAAU,IAAI,WAAW,GAAG,IAAI;CAGjC;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,CAAC,EAAE;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAiCrC;AAED,4EAA4E;AAC5E,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,YAAY,CAAC,CAMxB;AAMD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,2CAA2C;IAC3C,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,qBAAa,WAAY,YAAW,eAAe;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAe;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAwB;gBAEhC,IAAI,EAAE,kBAAkB;IAQpC,eAAe,IAAI,OAAO;IAI1B,UAAU,IAAI,WAAW,GAAG,IAAI;IAIhC,YAAY,IAAI,MAAM,GAAG,SAAS;IAQ5B,GAAG,CAAC,CAAC,GAAG,OAAO,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC;IAUP,IAAI,CAAC,CAAC,GAAG,OAAO,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GACtD,OAAO,CAAC,CAAC,CAAC;IAkBP,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAanD,OAAO,CAAC,QAAQ;IAmBhB,OAAO,CAAC,OAAO;YAUD,YAAY;IAiB1B;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAOtB;;;OAGG;YACW,KAAK;IA8BnB,OAAO,CAAC,eAAe;CAUxB;AAMD,iFAAiF;AACjF,wBAAsB,YAAY,CAAC,IAAI,CAAC,EAAE;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC,WAAW,CAAC,CASvB;AAED,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC"}

package/dist/client.js

@@ -0,0 +1,308 @@
+/**
+ * Capix API client — the canonical HTTP boundary for the MCP server.
+ *
+ * Every tool handler delegates to an instance of this class; the client is the
+ * only place that touches `fetch`, auth headers, problem+json parsing, or
+ * idempotency keys. Mirrors the conventions of
+ * services/intelligence/mcp-bridge.ts and Capix-Backend API routes.
+ *
+ * Design guarantees:
+ *
+ *   - canonical endpoints   — all calls go to `/api/v1/*` (never legacy
+ *                             `/api/llm/*` or `/api/cloud/*` paths).
+ *   - problem+json          — non-2xx responses are parsed as RFC 7807
+ *                             ProblemDetail and surfaced as CapixApiError.
+ *   - idempotency keys      — POST/DELETE mutations get an `Idempotency-Key`
+ *                             header derived from the request body so retries
+ *                             are safe (§4 ledger holds are deduped upstream).
+ *   - approval tokens       — billable mutations forward the bound
+ *                             approvalToken as `X-Capix-Approval-Token`.
+ *   - auth broker first     — when `@capix/auth-broker` is importable and a
+ *                             stored refresh token exists, the client obtains
+ *                             a fresh OAuth access token via the broker's
+ *                             crash-safe dual-slot rotation. Otherwise it
+ *                             falls back to the `CAPIX_API_KEY` env var.
+ */
+import { randomUUID, createHash } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { CapixApiError, DEFAULT_CAPIX_BASE_URL, DEFAULT_OAUTH_CLIENT_ID, DEFAULT_OAUTH_SCOPE } from "./types.js";
+/** Stateless provider that returns a static API key from the environment. */
+export class ApiKeyAuthProvider {
+    apiKey;
+    constructor(apiKey) {
+        this.apiKey = apiKey;
+    }
+    async getToken() {
+        return this.apiKey || null;
+    }
+    isAuthenticated() {
+        return Boolean(this.apiKey);
+    }
+    getAccount() {
+        return null;
+    }
+}
+/**
+ * Provider backed by the shared @capix/auth-broker. The broker itself is
+ * dynamically imported so this package has no hard dependency on the private
+ * protocol workspace.
+ */
+export class BrokerAuthProvider {
+    broker;
+    cached = null;
+    constructor(broker) {
+        this.broker = broker;
+    }
+    async getToken() {
+        if (this.broker.getState() !== "authenticated")
+            return null;
+        if (this.cached && this.cached.expiresAt > Date.now() + 60_000) {
+            return this.cached.token;
+        }
+        try {
+            const token = await this.broker.getAccessToken();
+            const account = this.broker.getAccount();
+            this.cached = { token, expiresAt: account?.expiresAt ?? Date.now() + 3_600_000 };
+            return token;
+        }
+        catch {
+            return null;
+        }
+    }
+    isAuthenticated() {
+        return this.broker.getState() === "authenticated";
+    }
+    getAccount() {
+        return this.broker.getAccount();
+    }
+}
+/**
+ * Try to construct a BrokerAuthProvider by dynamically importing
+ * `@capix/auth-broker`. Returns null when the package is not installed or no
+ * stored credentials are present, so the caller can fall back to an API key.
+ */
+export async function tryCreateBrokerAuthProvider(opts) {
+    const baseUrl = opts?.baseUrl ?? process.env.CAPIX_BASE_URL ?? DEFAULT_CAPIX_BASE_URL;
+    const clientId = opts?.clientId ?? process.env.CAPIX_OAUTH_CLIENT_ID ?? DEFAULT_OAUTH_CLIENT_ID;
+    const scope = opts?.scope ?? DEFAULT_OAUTH_SCOPE;
+    // Dynamic import of the optional @capix/auth-broker peer dependency. The
+    // ambient declaration in src/auth-broker.d.ts lets TypeScript resolve the
+    // module at compile time; the runtime import succeeds only when the package
+    // is actually installed.
+    let mod = null;
+    try {
+        mod = await import("@capix/auth-broker");
+    }
+    catch {
+        return null;
+    }
+    if (!mod)
+        return null;
+    // Prefer the OS keyring (KeytarCredentialStore); fall back to a 0600 file.
+    let store;
+    try {
+        store = new mod.KeytarCredentialStore(clientId);
+    }
+    catch {
+        store = new mod.FileCredentialStore(join(homedir(), ".capix", "credentials.json"));
+    }
+    const config = { baseUrl, clientId, scope };
+    const broker = new mod.AuthBroker(config, store);
+    // If there's no stored refresh token we cannot authenticate headlessly.
+    const active = await store.get(clientId, "refresh-token:active").catch(() => null);
+    if (!active)
+        return null;
+    return new BrokerAuthProvider(broker);
+}
+/** Resolve the best available auth provider: broker first, then API key. */
+export async function resolveAuthProvider(opts) {
+    const broker = await tryCreateBrokerAuthProvider({ baseUrl: opts?.baseUrl });
+    if (broker)
+        return broker;
+    const key = opts?.apiKey ?? process.env.CAPIX_API_KEY ?? "";
+    return new ApiKeyAuthProvider(key);
+}
+export class CapixClient {
+    baseUrl;
+    auth;
+    projectId;
+    fetchImpl;
+    log;
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/$/, "");
+        this.auth = opts.authProvider;
+        this.projectId = opts.projectId ?? process.env.CAPIX_PROJECT_ID;
+        this.fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+        this.log = opts.log ?? (() => { });
+    }
+    isAuthenticated() {
+        return this.auth.isAuthenticated();
+    }
+    getAccount() {
+        return this.auth.getAccount();
+    }
+    getProjectId() {
+        return this.projectId;
+    }
+    // -------------------------------------------------------------------------
+    // Core HTTP methods — all canonical /api/v1/* paths.
+    // -------------------------------------------------------------------------
+    async get(path, params) {
+        const url = this.buildUrl(path, params);
+        const token = await this.requireToken();
+        const res = await this.fetchImpl(url, {
+            method: "GET",
+            headers: this.headers(token),
+        });
+        return this.parse(res, "GET", path);
+    }
+    async post(path, body, opts) {
+        const url = this.buildUrl(path);
+        const token = await this.requireToken();
+        const headers = this.headers(token);
+        if (opts?.idempotent) {
+            headers["Idempotency-Key"] = this.idempotencyKey(path, body);
+        }
+        if (opts?.approvalToken) {
+            headers["X-Capix-Approval-Token"] = opts.approvalToken;
+        }
+        const res = await this.fetchImpl(url, {
+            method: "POST",
+            headers,
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        return this.parse(res, "POST", path);
+    }
+    async delete(path) {
+        const url = this.buildUrl(path);
+        const token = await this.requireToken();
+        const headers = this.headers(token);
+        headers["Idempotency-Key"] = this.idempotencyKey(path);
+        const res = await this.fetchImpl(url, { method: "DELETE", headers });
+        return this.parse(res, "DELETE", path);
+    }
+    // -------------------------------------------------------------------------
+    // Internal helpers
+    // -------------------------------------------------------------------------
+    buildUrl(path, params) {
+        const url = new URL(this.baseUrl + path);
+        if (params) {
+            for (const [k, v] of Object.entries(params)) {
+                if (v === undefined || v === null)
+                    continue;
+                if (Array.isArray(v)) {
+                    for (const item of v)
+                        url.searchParams.append(k, String(item));
+                }
+                else if (typeof v === "object") {
+                    url.searchParams.set(k, JSON.stringify(v));
+                }
+                else if (typeof v === "boolean") {
+                    url.searchParams.set(k, v ? "true" : "false");
+                }
+                else {
+                    url.searchParams.set(k, String(v));
+                }
+            }
+        }
+        return url.toString();
+    }
+    headers(token) {
+        const h = {
+            "Content-Type": "application/json",
+            Accept: "application/json",
+        };
+        if (token)
+            h.Authorization = `Bearer ${token}`;
+        if (this.projectId)
+            h["X-Capix-Project"] = this.projectId;
+        return h;
+    }
+    async requireToken() {
+        const token = await this.auth.getToken();
+        if (!token) {
+            const problem = {
+                type: "about:blank",
+                title: "Not authenticated",
+                status: 401,
+                detail: "No Capix credentials available. Run `capix-mcp login` to authenticate via OAuth, or set CAPIX_API_KEY.",
+                capixCode: "not_authenticated",
+                retryClass: "none",
+            };
+            throw new CapixApiError(problem);
+        }
+        return token;
+    }
+    /**
+     * Derive a stable idempotency key from the request path + body hash + a
+     * fresh nonce. The nonce ensures that the *caller's* retries (same args)
+     * collapse while distinct invocations get distinct keys.
+     */
+    idempotencyKey(path, body) {
+        const nonce = randomUUID();
+        const bodyHash = body ? createHash("sha256").update(JSON.stringify(body)).digest("hex").slice(0, 16) : "0";
+        const pathHash = createHash("sha256").update(path).digest("hex").slice(0, 16);
+        return `capix-${pathHash}-${bodyHash}-${nonce}`;
+    }
+    /**
+     * Parse a fetch Response. Non-2xx responses are decoded as problem+json
+     * (RFC 7807) and thrown as CapixApiError. Empty 204 responses yield null.
+     */
+    async parse(res, method, path) {
+        if (res.status === 204)
+            return null;
+        const contentType = res.headers.get("content-type") ?? "";
+        if (!res.ok) {
+            let problem;
+            if (contentType.includes("application/problem+json") || contentType.includes("application/json")) {
+                try {
+                    problem = (await res.json());
+                }
+                catch {
+                    problem = this.fallbackProblem(res, method, path);
+                }
+            }
+            else {
+                problem = this.fallbackProblem(res, method, path);
+            }
+            if (!problem.capixCode)
+                problem.capixCode = "http_error";
+            if (!problem.status)
+                problem.status = res.status;
+            this.log(`${method} ${path} → ${res.status} (${problem.capixCode})`);
+            throw new CapixApiError(problem);
+        }
+        if (contentType.includes("application/json")) {
+            return (await res.json());
+        }
+        // Fallback: treat as text.
+        const text = await res.text();
+        return (text || null);
+    }
+    fallbackProblem(res, method, path) {
+        return {
+            type: "about:blank",
+            title: `${method} ${path} failed`,
+            status: res.status,
+            detail: `Capix API returned ${res.status} ${res.statusText} for ${method} ${path}`,
+            capixCode: res.status >= 500 ? "upstream_error" : "http_error",
+            retryClass: res.status >= 500 ? "retry-after" : "none",
+        };
+    }
+}
+// ===========================================================================
+// Convenience factory
+// ===========================================================================
+/** Build a CapixClient from environment defaults (broker → API key fallback). */
+export async function createClient(opts) {
+    const baseUrl = opts?.baseUrl ?? process.env.CAPIX_BASE_URL ?? DEFAULT_CAPIX_BASE_URL;
+    const authProvider = await resolveAuthProvider({ baseUrl, apiKey: opts?.apiKey });
+    return new CapixClient({
+        baseUrl,
+        authProvider,
+        projectId: opts?.projectId,
+        log: opts?.log,
+    });
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAUjC,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAajH,6EAA6E;AAC7E,MAAM,OAAO,kBAAkB;IACZ,MAAM,CAAS;IAChC,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IAC7B,CAAC;IACD,eAAe;QACb,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,UAAU;QACR,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACZ,MAAM,CAAiB;IAChC,MAAM,GAAgD,IAAI,CAAC;IAEnE,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,eAAe;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,eAAe,CAAC;IACpD,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAIjD;IACC,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,sBAAsB,CAAC;IACtF,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,uBAAuB,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,mBAAmB,CAAC;IAEjD,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,yBAAyB;IACzB,IAAI,GAAG,GAA+C,IAAI,CAAC;IAC3D,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,2EAA2E;IAC3E,IAAI,KAAmD,CAAC;IACxD,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACxD,MAAM,MAAM,GAAmB,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAEjE,wEAAwE;IACxE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAGzC;IACC,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,GAAG,GAAG,IAAI,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IAC5D,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAiBD,MAAM,OAAO,WAAW;IACL,OAAO,CAAS;IAChB,IAAI,CAAe;IACnB,SAAS,CAAU;IACnB,SAAS,CAAe;IACxB,GAAG,CAAwB;IAE5C,YAAY,IAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAChE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;IACrC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,4EAA4E;IAC5E,qDAAqD;IACrD,4EAA4E;IAE5E,KAAK,CAAC,GAAG,CACP,IAAY,EACZ,MAAgC;QAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;SAC7B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAI,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,IAAY,EACZ,IAA8B,EAC9B,IAAuD;QAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,OAAO,GAA2B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC;YACrB,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAI,EAAE,aAAa,EAAE,CAAC;YACxB,OAAO,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAI,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAc,IAAY;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,KAAK,CAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,4EAA4E;IAC5E,mBAAmB;IACnB,4EAA4E;IAEpE,QAAQ,CAAC,IAAY,EAAE,MAAgC;QAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;oBAAE,SAAS;gBAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrB,KAAK,MAAM,IAAI,IAAI,CAAC;wBAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjE,CAAC;qBAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC;qBAAM,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;oBAClC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAChD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,OAAO,CAAC,KAAa;QAC3B,MAAM,CAAC,GAA2B;YAChC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QACF,IAAI,KAAK;YAAE,CAAC,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,SAAS;YAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,OAAO,GAAkB;gBAC7B,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,mBAAmB;gBAC1B,MAAM,EAAE,GAAG;gBACX,MAAM,EACJ,wGAAwG;gBAC1G,SAAS,EAAE,mBAAmB;gBAC9B,UAAU,EAAE,MAAM;aACnB,CAAC;YACF,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,IAAY,EAAE,IAAc;QACjD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3G,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,OAAO,SAAS,QAAQ,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;IAClD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,KAAK,CAAI,GAAa,EAAE,MAAc,EAAE,IAAY;QAChE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAS,CAAC;QAEzC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAE1D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,OAAsB,CAAC;YAC3B,IAAI,WAAW,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACjG,IAAI,CAAC;oBACH,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,SAAS;gBAAE,OAAO,CAAC,SAAS,GAAG,YAAY,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,MAAM,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACrE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;QACjC,CAAC;QACD,2BAA2B;QAC3B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,IAAI,IAAI,CAAiB,CAAC;IACxC,CAAC;IAEO,eAAe,CAAC,GAAa,EAAE,MAAc,EAAE,IAAY;QACjE,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,GAAG,MAAM,IAAI,IAAI,SAAS;YACjC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,sBAAsB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,QAAQ,MAAM,IAAI,IAAI,EAAE;YAClF,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY;YAC9D,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM;SACvD,CAAC;IACJ,CAAC;CACF;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAKlC;IACC,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,sBAAsB,CAAC;IACtF,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClF,OAAO,IAAI,WAAW,CAAC;QACrB,OAAO;QACP,YAAY;QACZ,SAAS,EAAE,IAAI,EAAE,SAAS;QAC1B,GAAG,EAAE,IAAI,EAAE,GAAG;KACf,CAAC,CAAC;AACL,CAAC"}